last executing test programs: 25.389535351s ago: executing program 3 (id=761): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x80, &(0x7f00000001c0), 0x1, 0x5da, &(0x7f0000000e80)="$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") newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setuid(r0) lchown(&(0x7f0000000e40)='./file1\x00', 0xffffffffffffffff, 0xee01) 25.206068938s ago: executing program 3 (id=763): newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000140)={'sit0\x00', 0x0}) 22.097655355s ago: executing program 3 (id=776): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1010d1, 0x0) mount$bind(&(0x7f0000000a00)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 21.86681332s ago: executing program 3 (id=778): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0xe0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) 21.398054247s ago: executing program 3 (id=781): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="c801000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000004000000000a8011a80400002803c000180080021"], 0x1c8}}, 0x0) 6.798868285s ago: executing program 4 (id=836): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'wlan1\x00'}) syz_emit_ethernet(0x76, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private1, @remote, [@dstopts={0x0, 0x0, '\x00', [@generic={0x20}]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4008d0b00000007040000f0ffffffb702000008000000182300001462f55cd6bdd79ee8499cf349c356e4543156288e3e5aee435d1e98307d00e195a8425be5fac06d04f5", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_remove_blocks\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x18, 0x1e, 0x200, &(0x7f0000000480)="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"}) write$cgroup_type(r3, &(0x7f0000000000), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r9 = inotify_init1(0x0) fcntl$setown(r9, 0x8, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b702000000000000850000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.137712561s ago: executing program 2 (id=840): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='syscall\x00') r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x0, &(0x7f0000000140), 0x0, 0x4) read$FUSE(r0, &(0x7f0000005380)={0x2020}, 0x2020) 4.75639177s ago: executing program 4 (id=842): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10001}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000180), 0x0}, 0x20) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)='I', 0x1) 4.725581027s ago: executing program 0 (id=843): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) pread64(r0, 0x0, 0x0, 0x100000000001000) 4.462373229s ago: executing program 4 (id=844): creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r1, 0x0, 0x4000000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105511, &(0x7f0000000840)={{0x0, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000140)={0x24, 0x25, 0x1, 0x0, 0x0, "", [@generic="031a60e415596f3af4489667954ae852fd"]}, 0x24}, {&(0x7f0000000600)={0x1c, 0x12, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4}]}, 0x1c}], 0x2}, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, 0x0, &(0x7f00000003c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc000000000000000000000000000000fc000000000000000000000000000000400000000700"/65], 0xb8}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x100000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x700) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) 4.1263324s ago: executing program 2 (id=845): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000080)={@empty, @empty, 0x0, "662a47efb7108dc9ff50afa8d9fa55bb9d354c74fd391b1d786a74f1aef2669e"}, 0x3c) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000280)={@private, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23bd0f4eb500"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@remote, @empty, 0x0, "005c2beeb0801bd73c676461644cf36dfc15ea56886fff778a41757aa3ae714d"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@dev, @multicast1, 0x0, "05888ee9654ce5db9229e6a1f0a3c9505e2ebbbc3d341ad6ad352965b867e20b"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000240)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000980)={0x4c, r3, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x4c}}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r6, &(0x7f0000006380)=""/1024, 0x400) syz_fuse_handle_req(r1, &(0x7f0000006780), 0x2000, &(0x7f0000008780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008800)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0}) 4.079366886s ago: executing program 4 (id=846): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xf8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x1, 0x2, 0x0, "ce"}, @global=@item_012={0x2, 0x1, 0x0, "11ab"}]}}, 0x0}, 0x0) 3.655901627s ago: executing program 2 (id=847): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) unshare(0xe020600) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, 0x0}) 3.611514052s ago: executing program 0 (id=848): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, &(0x7f0000000600)={0x0, "91f9a2db0adb87ad1e4f10d2fea4915dae70a530ee4e93a2698b073b95f66dffc47eb3ca01d6bb087ae91a39541614e08c9cf12adb487f289d4c030297e9b67686d30cf1ab891d4ec805761a92f514d5a6489a42ae2ccdc36557811ab3d1b600bc120133f3c6e05e83dcb0cf5244cf07f4a9a7048d7b40835ff0b7f3d41506ed"}) 3.244567311s ago: executing program 2 (id=849): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x400, 0x4) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r1 = dup(r0) recvfrom$inet(r1, 0x0, 0x0, 0x2002, 0x0, 0x0) 3.173424141s ago: executing program 2 (id=850): r0 = io_uring_setup(0x497c, &(0x7f00000001c0)) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) getpid() socket$netlink(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x1e8, 0x0, 0xb, 0x148, 0xf8, 0x148, 0x188, 0x242, 0x240, 0x188, 0x215, 0x3, 0x0, {[{{@ip={@broadcast, @empty, 0x0, 0x0, 'geneve1\x00', 'ipvlan0\x00'}, 0x0, 0x98, 0xc0, 0x0, {0xff0f000000000000}, [@common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x248) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.68880336s ago: executing program 0 (id=851): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000140)={0x0, 'wlan1\x00'}) syz_emit_ethernet(0x76, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @private1, @remote, [@dstopts={0x0, 0x0, '\x00', [@generic={0x20}]}]}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000b40)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}]}]}, 0x28}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4008d0b00000007040000f0ffffffb702000008000000182300001462f55cd6bdd79ee8499cf349c356e4543156288e3e5aee435d1e98307d00e195a8425be5fac06d04f5", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b60000009500000000000000"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='ext4_remove_blocks\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f0000000440)={0x0, 0x0, 0x18, 0x1e, 0x200, &(0x7f0000000480)="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"}) write$cgroup_type(r3, &(0x7f0000000000), 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r9 = inotify_init1(0x0) fcntl$setown(r9, 0x8, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7020000010000008500000086000000bf91000000000000b702000000000000850000"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.354727891s ago: executing program 3 (id=782): socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) r0 = syz_io_uring_setup(0x24f5, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)) io_uring_enter(r0, 0x0, 0x400000, 0x7, 0x0, 0x0) io_uring_enter(r0, 0x52e, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) 1.441107254s ago: executing program 0 (id=852): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc008aec1, &(0x7f0000000040)) 1.213870692s ago: executing program 4 (id=854): syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x40, &(0x7f0000000280)=ANY=[@ANYBLOB='nodots,nodots,dots,dots,nodots,errors=continue,time_offset=0xfffffffffffffa93,dots,showexec,nodots,dots,gid=', @ANYRESHEX=0xee00, @ANYRES32=0x0], 0x2, 0x1e0, &(0x7f0000000780)="$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") chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000400)='./bus\x00', 0x143141, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x4c37f, 0x0) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000180)='./file0\x00') 1.064985396s ago: executing program 0 (id=855): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000007d00000095000000000000001d7c19e37320e14a137bd16fbcd23d2ea5e02125bc0f731921fe1608cda1efb6bae8a54f094ddc3faece258ffae99ee3de6bff8ca9d25881ea4687175b94c29e5b0db979505d7972a562ead7fa321fc22d9f90214e9b6b3443bdd5903ea333c9e4886e93ad88d06518eea6f4d3ef6286eba9deb3b080fa1ec25582dd312267fba440779f4a6a7f5ffd9d80941ac4e49d2e82a7d06be4424af732b5b26e6d0929a28170db7affa76c4f3d864a818e83d4a28cefdcddd43378eb08fc3348"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 894.933857ms ago: executing program 0 (id=856): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000000), 0x0}, 0x20) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0x40085618, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100}, 0x90) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090120000000009500000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000b1f86e1877369ebf73f2fe79cba93a5483df11cdd7d3abd9988eb8e7a0cd9e0fb9456e099e5b460ebfae77c9a8dc98331e7380298ef8046887d2e47c1d3d8b9eb57b68b167a7f1764f2eed0b18923aa3b34e76ed16b17b1ec074e07f8ae58c7721de5f7171287d711c828d510bd52ab8796a435b7a60ca9b26ca2b0533fa6c8aa6a96aa4d0f524e0f570c881fa"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r1, &(0x7f0000001300)=""/77, 0x3) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_PANIC(r2, 0x5100) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x808442, &(0x7f0000000340)=ANY=[], 0x1, 0x56f, &(0x7f00000015c0)="$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") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) open(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, 0x1c) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x14) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x20001401) ioctl$TUNSETOFFLOAD(r3, 0x80047441, 0x20000000) syz_mount_image$ufs(&(0x7f0000000400), &(0x7f0000000480)='./file0/file0\x00', 0x200881b, &(0x7f00000006c0)=ANY=[@ANYBLOB="f0977e06000000fbbf27f49772e1a901cb022a1b429e826dd702312f83c08aa525d17912ba0091106c638a9697ffe65e081c5c6d0af94dfa6c27fbcedcd9fa84c341801a035ee0ab5821db0f9f61db3ba6fec135f56d5227a36be13ab510728827e76838907f48bd5b0232903aab2aa02f7e6dd7ca851f45dbf6dcdcb1524cd674d01ceb799805a5c39d56fc571bfed4769afd9db6746a958e27ae2f8b1c8f2200"], 0xfa, 0x9e24, &(0x7f0000013d40)="$eJwk0wMX54XDbfHJtm1zZ9u2bds7TPX72sg12cYw27btyfZd//ucd3DW+uzhAxwxwJEDHDXA0QMcM8C7B3jPAO8d4H0DvH+ADwzwwQE+NMCHB/jIAB8d4GMDfHyATwzwyQE+NcCnB/jMAJ8d4HMDfH6ALwzwxQG+NMCXB/jKAF8d4GsDfH2AbwzwzQG+NcC3B/jOAN8d4HsDfH+AHwzwwwF+NMCPB/jJAD8d4GcD/HyAXwzwywF+NcCvBzh2gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8B/jfAIQGOE+C4AY4X4PgBThDghAFOFODEAU4S4KQBThbg5AFOEeCUAU4V4NQBThPgtAFOF+D0Ac4Q4IwBzhTgzAHOEuCsAc4W4OwBzhHgnAHOFeDcAc4T4LwBzhfg/AEuEOCCAS4U4MIBLhLgogEuFuDiAS4R4JIBLhXg0gES4DIBLhvgcgEuH+AKAa4Y4EoBrhzgKgGuGuBqAa4e4BoBrhngWgGuHeA6Aa4b4HoBrh/gBgFuGOBGAW4c4CYBbhrgZgFuHuAWAW4Z4FYBbh3gNgFuG+B2AW4f4A4B7hjgTgHuHOAuAe4a4G4B7h7gHgHuGeBeAe4d4D4B7hvgfgHuH+ABAR4Y4EEBHhzgIQEeGuBhAR4e4BEBHhngUQEeHeAxAR4b4HEBHh/gCQGeGOBJAZ4c4CkBGuCpAZ4W4OkBnhHg0ADPDPCsAM8OcBBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH+A5AZ4b4HkBnh/gBQFeGOBFAV4c4CUBDgvw0gAvC/DyAK8I8MoArwrw6gCvCfDaAK8L8PoAbwjwxgBvCvDmAG8J8NYAbwvw9gDvCPDOAO8KcHiAIwIcGeCoAEcHOCbAuwO8J8B7A7wvwPsDfCDABwN8KMCHA3wkwEcDfCzAxwN8IsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTATwP8LMDPA/wiwC8D/CrArwMcG+A3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrgbwH+HuAfAf4Z4F8B/h3gPwH+G+B/AQ4JcZwQxw1xvBDHD3GCECcMcaIQJw5xkhAnDXGyECcPcYoQpwxxqhCnDnGaEKcNcboQpw9xhhBnDHGmEGcOcZYQZw1xthBnD3GOEOcMca4Q5w5xnhDnDXG+EOcPcYEQFwxxoRAXDnGREBcNcbEQFw9xiRCXDHGpEJcOkRCXCXHZEJcLcfkQVwhxxRBXCnHlEFcJcdUQVwtx9RDXCHHNENcKce0Q1wlx3RDXC3H9EDcIccMQNwpx4xA3CXHTEDcLcfMQtwhxyxC3CnHrELcJcdsQtwtx+xB3CHHHEHcKcecQdwlx1xB3C3H3EPcIcc8Q9wpx7xD3CXHfEPcLcf8QDwjxwBAPCvHgEA8J8dAQDwvx8BCPCPHIEI8K8egQjwnx2BCPC/H4EE8I8cQQTwrx5BBPCdEQTw3xtBBPD/GMEIeGeGaIZ4V4doiDEIMQwxCjEOMQkxDTELMQ8xCLEMsQqxDrEJsQ2xC7EPsQzwnx3BDPC/H8EC8I8cIQLwrx4hAvCXFYiJeGeFmIl4d4RYhXhnhViFeHeE2I14Z4XYjXh3hDiDeGeFOIN4d4S4i3hnhbiLeHeEeId4Z4V4jDQxwR4sgQR4U4OsQxId4d4j0h3hvifSHeH+IDIT4Y4kMhPhziIyE+GuJjIT4e4hMhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIX4a4mchfh7iFyF+GeJXIX4d4tgQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEH8L8fcQ/wjxzxD/CvHvEP8J8d8Q/wtxSITjRDhuhONFOH6EE0Q4YYQTRThxhJNEOGmEk0U4eYRTRDhlhFNFOHWE00Q4bYTTRTh9hDNEOGOEM0U4c4SzRDhrhLNFOHuEc0Q4Z4RzRTh3hPNEOG+E80U4f4QLRLhghAtFuHCEi0S4aISLRbh4hEtEuGSES0W4dIREuEyEy0a4XITLR7hChCtGuFKEK0e4SoSrRrhahKtHuEaEa0a4VoRrR7hOhOtGuF6E60e4QYQbRrhRhBtHuEmEm0a4WYSbR7hFhFtGuFWEW0e4TYTbRrhdhNtHuEOEO0a4U4Q7R7hLhLtGuFuEu0e4R4R7RrhXhHtHuE+E+0a4X4T7R3hAhAdGeFCEB0d4SISHRnhYhIdHeESER0Z4VIRHR3hMhMdGeFyEx0d4QoQnRnhShCdHeEqERnhqhKdFeHqEZ0Q4NMIzIzwrwrMjHEQYRBhGGEUYR5hEmEaYRZhHWERYRlhFWEfYRNhG2EXYR3hOhOdGeF6E50d4QYQXRnhRhBdHeEmEwyK8NMLLIrw8wisivDLCqyK8OsJrIrw2wusivD7CGyK8McKbIrw5wlsivDXC2yK8PcI7IrwzwrsiHB7hiAhHRjgqwtERjonw7gjvifDeCO+L8P4IH4jwwQgfivDhCB+J8NEIH4vw8QifiPDJCJ+K8OkIn4nw2Qifi/D5CF+I8MUIX4rw5QhfifDVCF+L8PUI34jwzQjfivDtCN+J8N0I34vw/Qg/iPDDCD+K8OMIP4nw0wg/i/DzCL+I8MsIv4rw6wjHRvhNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhENiHCfGcWMcL8bxY5wgxgljnCjGiWOcJMZJY5wsxsljnCLGKWOcKsapY5wmxmljnC7G6WOcIcYZY5wpxpljnCXGWWOcLcbZY5wjxjljnCvGuWOcJ8Z5Y5wvxvljXCDGBWNcKMaFY1wkxkVjXCzGxWNcIsYlY1wqxqVjJMZlYlw2xuViXD7GFWJcMcaVYlw5xlViXDXG1WJcPcY1YlwzxrViXDvGdWJcN8b1Ylw/xg1i3DDGjWLcOMZNYtw0xs1i3DzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I8OcZTYjTGU2M8LcbTYzwjxqExnhnjWTGeHeMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7Gc2I8N8bzYjw/xgtivDDGi2K8OMZLYhwW46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFePwGEfEODLGUTGOjnFMjHfHeE+M98Z4X4z3x/hAjA/G+FCMD8f4SIyPxvhYjI/H+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/HODbGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xt9i/D3GP2L8M8a/Yvw7xn9i/DfG/2IckuA4CY6b4HgJjp/gBAlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgkumuBiCS6e4BIJLpngUgkunSAJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6U4MkJnpKgCZ6a4GkJnp7gGQkOTfDMBM9K8OwEBwkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk24w0Z8j9HXYJ9guckeG6C5yV4foIXJHhhghcleHGClyQ4LMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwTsTvCvB4QmOSHBkgqMSHJ3gmATvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEH03wsQQfT/CJBJ9M8KkEn07wmQSfTfC5BJ9P8IUEX0zwpQRfTvCVBF9N8LUEX0/wjQTfTPCtBN9O8J0E303wvQTfT/CDBD9M8KMEP07wkwQ/TfCzBD9P8IsEv0zwqwS/TnBsgt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgv8lOCTFcVIcN8XxUhw/xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUlwyxaVSXDpFUlwmxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVNcLcXVU1wjxTVTXCvFtVNcJ8V1U1wvxfVT3CDFDVPcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzwlRVM8NcXTUjw9xTNSHJrimSmeleLZKQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FM8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxWEpXpriZSlenuIVKV6Z4lUpXp3iNSlem+J1KV6f4g0p3pjiTSnenOItKd6a4m0p3p7iHSnemeJdKQ5PcUSKI1McleLoFMekeHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpPhoio+l+HiKT6T4ZIpPpfh0is+k+GyKz6X4fIovpPhiii+l+HKKr6T4aoqvpfh6im+k+GaKb6X4dorvpPhuiu+l+H6KH6T4YYofpfhxip+k+GmKn6X4eYpfpPhlil+l+HWKY1P8JsVvU/wuxe9T/CHFH1P8KcWfU/wlxV9T/C3F31P8I8U/U/wrxb9T/CfFf1P8L8UhGY6T4bgZjpfh+BlOkOGEGU6U4cQZTpLhpBlOluHkGU6R4ZQZTpXh1BlOk+G0GU6X4fQZzpDhjBnOlOHMGc6S4awZzpbh7BnOkeGcGc6V4dwZzpPhvBnOl+H8GS6Q4YIZLpThwhkukuGiGS6W4eIZLpHhkhkuleHSGZLhMhkum+FyGS6f4QoZrpjhShmunOEqGa6a4WoZrp7hGhmumeFaGa6d4ToZrpvhehmun+EGGW6Y4UYZbpzhJhlumuFmGW6e4RYZbpnhVhluneE2GW6b4XYZbp/hDhnumOFOGe6c4S4Z7prhbhnunuEeGe6Z4V4Z7p3hPhnum+F+Ge6f4QEZHpjhQRkenOEhGR6a4WEZHp7hERkemeFRGR6d4TEZHpvhcRken+EJGZ6Y4UkZnpzhKRma4akZnpbh6RmekeHQDM/M8KwMz85wkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4TkZnpvheRmen+EFGV6Y4UUZXpzhJRkOy/DSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/I8M4M78pweIYjMhyZ4agMR2c4JsO7M7wnw3szvC/D+zN8IMMHM3wow4czfCTDRzN8LMPHM3wiwyczfCrDpzN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88z/CLDLzP8KsOvMxyb4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4X8ZDslxnBzHzXG8HMfPcYIcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz3GJHJfMcakcl86RHJfJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jxxBxPyvHkHE/J0RxPzfG0HE/P8Ywch+Z4Zo5n5Xh2joMcgxzDHKMc4xyTHNMcsxzzHIuJscyxyrHOscmxzbHLsc/xnBzPzfG8HM/P8YIcL8zxohwvzvGSHIfleGmOl+V4eY5X5HhljlfleHWO1+R4bY7X5Xh9jjfkeGOON+V4c4635HhrjrfleHuOd+R4Z4535Tg8xxE5jsxxVI6jcxyT49053pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5js3xmxy/zfG7HL/P8Yccf8zxpxx/zvGXHH/N8bccf8/xjxz/zPGvHP/O8Z8c/83xvxyHFDhOgeMWOF6B4xc4QYETFjhRgRMXOEmBkxY4WYGTFzhFgVMWOFWBUxc4TYHTFjhdgdMXOEOBMxY4U4EzFzhLgbMWOFuBsxc4R4FzFjhXgXMXOE+B8xY4X4HzF7hAgQsWuFCBCxe4SIGLFrhYgYsXuESBSxa4VIFLF0iByxS4bIHLFbh8gSsUuGKBKxW4coGrFLhqgasVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYcVeHiBRxR4ZIFHFXh0gccUeGyBxxV4fIEnFHhigScVeHKBpxRogacWeFqBpxd4RoFDCzyzwLMKPLvAQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gecUeG6B5xV4foEXFHhhgRcVeHGBlxQ4rMBLC7yswMsLvKLAKwu8qsCrC7ymwGsLvK7A6wu8ocAbC7ypwJsLvKXAWwu8rcDbC7yjwDsLvKvA4QWOKHBkgaMKHF3gmALvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LnBsgd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gX8U+GeBfxX4d4H/FPhvgf8VOKTEcUoct8TxShy/xAlKnLDEiUqcuMRJSpy0xMlKHDLLDtNOUeKUJU5V4tQlTlPitCVOV+L0Jc5Q4owlzlTizCXOUuKsJc5W4uwlzlHinCXOVeLcJc5T4rwlzlfi/CUuUOKCJS5U4sIlLlLioiUuVuLiJS5R4pIlLlXi0iVS4jIlLlviciUuX+IKJa5Y4kolrlziKiWuWuJqJa5e4holrlniWiWuXeI6Ja5b4nolrl/iBiVuWOJGJW5c4iYlblriZiVuXuIWJW5Z4lYlbl3iNiVuW+J2JW5f4g4l7ljiTiXuXOIuJe5a4m4l7l7iHiXuWeJeJe5d4j4l7lvifiXuX+IBJR5Y4kElHlziISUeWuJhJR5e4hElHlniUSUeXeIxJR5b4nElHl/iCSWeWOJJJZ5c4iklWuKpJZ5W4uklnlHi0BLPLPGsEs8ucVBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+I5JZ5b4nklnl/iBSVeWOJFJV5c4iUlDivx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8qcXiJI0ocWeKoEkeXOKbEu0u8p8R7S7yvxPtLfKDEB0t8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0scW+I3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJf5Z4l8l/l3iPyX+W+J//+u5wnEqHLfC8Socv8IJKpywwokqnLjCSSqctMLJKpy8wikqnLLCqSqcusJpKpy2wukqnL7CGSqcscKZKpy5wlkqnLXC2SqcvcI5KpyzwrkqnLvCeSqct8L5Kpy/wgUqXLDChSpcuMJFKly0wsUqXLzCJSpcssKlKly6QipcpsJlK1yuwuUrXKHCFStcqcKVK1ylwlUrXK3C1Stco8I1K1yrwrUrXKfCdStcr8L1K9ygwg0r3KjCjSvcpMJNK9ysws0r3KLCLSvcqsKtK9ymwm0r3K7C7SvcocIdK9ypwp0r3KXCXSvcrcLdK9yjwj0r3KvCvSvcp8J9K9yvwv0rPKDCAys8qMKDKzykwkMrPKzCwys8osIjKzyqwqMrPKbCYys8rsLjKzyhwhMrPKnCkys8pUIrPLXC0yo8vcIzKhxa4ZkVnlXh2RUOKgwqDCuMKowrTCpMK8wqzCssKiwrrCqsK2wqbCvsKuwrPKfCcys8r8LzK7ygwgsrvKjCiyu8pMJhFV5a4WUVXl7hFRVeWeFVFV5d4TUVXlvhdRVeX+ENFd5Y4U0V3lzhLRXeWuFtFd5e4R0V3lnhXRUOr3BEhSMrHFXh6ArHVHh3hfdUeG+F91V4f4UPVPhghQ9V+HCFj1T4aIWPVfh4hU9U+GSFT1X4dIXPVPhshc9V+HyFL1T4YoUvVfhyha9U+GqFr1X4eoVvVPhmhW9V+HaF71T4boXvVfh+hR9U+GGFH1X4cYWfVPhphZ9V+HmFX1T4ZYVfVfh1hWMr/KbCbyv8rsLvK/yhwh8r/KnCnyv8pcJfK/ytwt8r/KPCPyv8q8K/K/ynwn8r/K/CITWOU+O4NY5X4/g1TlDjhDVOVOPENU5S46Q1Tlbj5DVOUeOUNU5V49Q1TlPjtDVOV+P0Nc5Q44w1zlTjzDXOUuOsNc5W4+w1zlHjnDXOVePcNc5T47w1zlfj/DUuUOOCNS5U48I1LlLjojUuVuPiNS5R45I1LlXj0jVS4zI1LlvjcjUuX+MKNa5Y40o1rjwMV6lx1RpXq3H1Gteocc0a16px7RrXqXHdGtercf0aN6hxwxo3qnHjGjepcdMaN6tx8xq3qHHLGreqcesat6lx2xq3q3H7Gneocccad6px5xp3qXHXGnercfca96hxzxr3qnHvGvepcd8a96tx/xoPqPHAGg+q8eAaD6nx0BoPq/HwGo+o8cgaj6rx6BqPqfHYGo+r8fgaT6jxxBpPqvHkGk+p0RpPrfG0Gk+v8Ywah9Z4Zo1n1Xh2jYMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xrPqfHcGs+r8fwaL6jxwhovqvHiGi+pcViNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4x7hDhvzP8l01Dq9xRI0jaxxV4+gax9R4d4331HhvjffVeH+ND9T4YI0P1fhwjY/U+GiNj9X4eI1P1PhkjU/V+HSNz9T4bI3P1fh8jS/U+GKNL9X4co2v1Phqja/V+HqNb9T4Zo1v1fh2je/U+G6N79X4fo0f1PhhjR/V+HGNn9T4aY2f1fh5jV/U+GWNX9X4dY1ja/ymxm9r/K7G72v8YcjQ///9pxp/rvGXGn+t8bcaf6/xjxr/rPGvGv+u8Z8a/63xvxqHNDhOg+M2OF6D4zc4QYMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSza4VINLN0iDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1eHKDpzRog6c2eFqDpzd4RoNDGzyzwbMaPLvBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g+c0eG6D5zV4foMXNHhhgxc1eHGDlzQ4rMFLG7yswcsbvKLBKxu8qsGrG7ymwWsbvK7B6xu8ocEbG7ypwZsbvKXBWxu8rcHbG7yjwTsbvKvB4Q2OaHBkg6MaHN3gmAbvbvCeBu9t8L4G72/wgQYfbPChBh9u8JEGH23wsQYfb/CJBp9s8KkGn27wmQafbfC5Bp9v8IUGX2zwpQZfbvCVBl9t8LUGX2/wjQbfbPCtBt9u8J0G323wvQbfb/CDBj9s8KMGP27wkwY/bfCzBj9v8IsGv2zwqwa/bnBsg980+G2D3zX4fYM/NPhjgz81+HODvzT4a4O/Nfh7g380+GeDfzX4d4P/NPhvg/81OKTFcVoct8XxWhy/xQlanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyxaVaXLpFWlymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qcWTWzylRVs8tcXTWjy9xTNaHNrimS2e1eLZLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Fs8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxWEtXtriZS1e3uIVLV7Z4lUtXt3iNS1e2+J1LV7f4g0t3tjiTS3e3OItLd7a4m0t3t7iHS3e2eJdLQ5vcUSLI1sc1eLoFse0eHeL97R4b4v3tXh/iw+0+GCLD7X4cIuPtPhoi4+1+HiLT7T4ZItPtfh0i8+0+GyLz7X4fIsvtPhiiy+1+HKLr7T4aouvtfh6i2+0+GaLb7X4dovvtPhui++1+H6LH7T4YYsftfhxi5+0+GmLn7X4eYtftPhli1+1+HWLY1v8psVvW/yuxe9b/KHFH1v8qcWfW/ylxV9b/K3F31v8o8U/W/yrxb9b/KfFf1v8r8UhHY7T4bgdjtfh+B1O0OGEHU7U4cQdTtLhpB1O1uHkHU7R4ZQdTtXh1B1O0+G0HU7X4fQdztDhjB3O1OHMHc7S4awdztbh7B3O0eGcHc7V4dwdztPhvB3O1+H8HS7Q4YIdLtThwh0u0uGiHS7W4eIdLtHhkh0u1eHSHdLhMh0u2+FyHS7f4QodrtjhSh2u3OEqHa7a4Wodrt7hGh2u2eFaHa7d4Todrtvheh2u3+EGHW7Y4UYdbtzhJh1u2uFmHW7e4RYdbtnhVh1u3eE2HW7b4XYdbt/hDh3u2OFOHe7c4S4d7trhbh3u3uEeHe7Z4V4d7t3hPh3u2+F+He7f4QEdHtjhQR0e3OEhHR7a4WEdHt7hER0e2eFRHR7d4TEdHtvhcR0e3+EJHZ7Y4UkdntzhKR3a4akdntbh6R2e0eHQDs/s8KwOz+5w0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4TkdntvheR2e3+EFHV7Y4UUdXtzhJR0O6/DSDi/r8PIOr+jwyg6v6vDqDq/p8NoOr+vw+g5v6PDGDm/q8OYOb+nw1g5v6/D2Du/o8M4O7+pweIcjOhzZ4agOR3c4psO7O7ynw3s7vK/D+zt8oMMHO3yow4c7fKTDRzt8rMPHO3yiwyc7fKrDpzt8psNnO3yuw+c7fKHDFzt8qcOXO3ylw1c7fK3D1zt8o8M3O3yrw7c7fKfDdzt8r8P3O/ygww87/KjDjzv8pMNPO/ysw887/KLDLzv8qsOvOxzb4Tcdftvhdx1+3zHkhw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dof0OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI9L9rhUj0v3SI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/Vjh/zfcNMeN+tx8x636HHLHrfqceset+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/o8cgej+rx6B6P6fHYHo/r8fgeT+jxxB5P6vHkHk/p0R5P7fG0Hk/v8Yweh/Z4Zo9n9Xh2j4Megx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x7P6fHcHs/r8fweL+jxwh4v6vHiHi/pcViPl/Z4WY+X93hFj1f2eFWPV/d4TY/X9nhdj9f/z+SQIUNu7PGmHm/u8ZYeb+3xth5v7/GOHu/s8a4eh/c4oseRPY7qcXSPY/4fy/bUwHehAGB4tZaXbVtvtm3btv1mm/+fjWxjW7Zt23ZtOzfnOzy3zwBHDHDkAEcN8IEBPjjAhwb48AAfGeCjA3xsgI8P8IkBPjnApwb49ACfGeCzA3xugM8P8IUBvjjAlwb48gBfGeCrA3xtgK8P8I0BvjnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgKMHOGaAYwc4JMBxAhw3wKEBjhfgsADHD3CCACcMcKIAJw5wkgAnDXB4gJMFOHmAUwQ4ZYBTBTh1gNMEOG2A0wU4fYAzBDhjgDMFOHOAswQ4a4CzBTh7gHMEOGeAcwU4d4DzBDhvgPMFOH+ACwS4YIALBbhwgIsEuGiAiwW4eIBLBEiASwa4VIBLB7hMgMsGuFyAywe4QoArBrhSgCsHuEqAqwa4WoCrB7hGgGsGuFaAawe4ToDrBrhegOsHuEGAGwa4UYAbB7hJgJsGuFmAmwe4RYBbBrhVgFsHuE2A2wa4XYDbB7hDgDsGuFOAOwe4S4C7BrhbgLsHuEeAewa4V4B7B7hPgPsGuF+A+wd4QIAHBnhQgAcHeEiAhwZ4WICHB3hEgEcGeFSARwd4TIDHBnhcgMcHeEKAJwZogCcFeHKApwR4aoCnBXh6gGcEeGaAZwV4doDnBHhugOcFeH6AFwR4YYAXBXhxgJcEeGmAlwV4eYBXBHhlgIMAgwDDAKPhQ40DTAJMA8wCzAMsAiwDrAKsA2wCbAPsAuwDvCrAqwO8JsBrA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8A7A7wrwLsDvCfAewO8L8D7AxwR4MgARwX4QIAPBvhQgA8H+EiAjwb4WICPB/hEgE8G+FSATwf4TIDPBvhcgM8H+EKALwb4UoAvB/hKgK8G+FqArwf4RoBvBvhWgG8H+E6A7wb4XoDvB/hBgB8G+FGAHwf4SYCfBvhZgJ8H+EWAXwb4VYBfB/hNgN8G+F2A3wf4Q4A/BvhTgD8H+EuAvwb4W4C/B/hHgH8G+FeAfwf4T4D/BvhfgKMDHBPg2ACHhDhOiOOGODTE8UIcFuL4IU4Q4oQhThTixCFOEuKkIQ4PcbIQJw9xihCnDHGqEKcOcZoQpw1xuhCnD3GGEGcMcaYQZw5xlhBnDXG2EGcPcY4Q5wxxrhDnDnGeEOcNcb4Q5w9xgRAXDHGhEBcOcZEQFw1xsRAXD3GJEAlxyRCXCnHpEJcJcdkQlwtx+RBXCHHFEFcKceUQVwlx1RBXC3H1ENcIcc0Q1wpx7RDXCXHdENcLcf0QNwhxwxA3CnHjEDcJcdMQNwtx8xC3CHHLELcKcesQtwlx2xC3C3H7EHcIcccQdwpx5xB3CXHXEHcLcfcQ9whxzxD3CnHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQTwjxxBAN8aQQTw7xlBBPDfG0EE8P8YwQzwzxrBDPDvGcEM8N8bwQzw/xghAvDPGiEC8O8ZIQLw3xshAvD/GKEK8McRBiEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH+JVIV4d4jUhXhvidSFeH+INId4Y4k0h3hziLSHeGuJtId4e4h0h3hniXSHeHeI9Id4b4n0h3h/iiBBHhjgqxAdCfDDEh0J8OMRHQnw0xMdCfDzEJ0J8MsSnQnw6xGdCfDbE50J8PsQXQnwxxJdCfDnEV0J8NcTXQnw9xDdCfDPEt0J8O8R3Qnw3xPdCfD/ED0L8MMSPQvw4xE9C/DTEz0L8PMQvQvwyxK9C/DrEb0L8NsTvQvw+xB9C/DHEn0L8OcRfQvw1xN9C/D3EP0L8M8S/Qvw7xH9C/DfE/0IcHeKYEMeGOCTCcSIcN8KhEY4X4bAIx49wgggnjHCiCCeOcJIIJ41weISTRTh5hFNEOGWEU0U4dYTTRDhthNNFOH2EM0Q4Y4QzRThzhLNEOGuEs0U4e4RzRDhnhHNFOHeE80Q4b4TzRTh/hAtEuGCEC0W4cISLRLhohItFuHiES0RIhEtGuFSES0e4TITLRrhchMtHuEKEK0a4UoQrR7hKhKtGuFqEq0e4RoRrRrhWhGtHuE6E60a4XoTrR7hBhBtGuFGEG0e4SYSbRrhZhJtHuEWEW0a4VYRbR7hNhNtGuF2E20e4Q4Q7RrhThDtHuEuEu0a4W4S7R7hHhHtGuFeEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR3hChCdGaIQnRXhyhKdEeGqEp0V4eoRnRHhmhGdFeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYSDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsIr4rw6givifDaCK+L8PoIb4jwxghvivDmCG+J8NYIb4vw9gjviPDOCO+K8O4I74nw3gjvi/D+CEdEODLCURE+EOGDET4U4cMRPhLhoxE+FuHjET4R4ZMRPhXh0xE+E+GzET4X4fMRvhDhixG+FOHLEb4S4asRvhbh6xG+EeGbEb4V4dsRvhPhuxG+F+H7EX4Q4YcRfhThxxF+EuGnEX4W4ecRfhHhlxF+FeHXEX4T4bcRfhfh9xH+EOGPEf4U4c8R/hLhrxH+FuHvEf4R4Z8R/hXh3xH+E+G/Ef4X4egIx0Q4NsIhMY4T47gxDo1xvBiHxTh+jBPEOGGME8U4cYyTxDhpjMNjnCzGyWOcIsYpY5wqxqljnCbGaWOcLsbpY5whxhljnCnGmWOcJcZZY5wtxtljnCPGOWOcK8a5Y5wnxnljnC/G+WNcIMYFY1woxoVjXCTGRWNcLMbFY1wiRmJcMsalYlw6xmViXDbG5WJcPsYVYlwxxpViXDnGVWJcNcbVYlw9xjViXDPGtWJcO8Z1Ylw3xvViXD/GDWLcMMaNYtw4xk1i3DTGzWLcPMYtYtwyxq1i3DrGbWLcNsbtYtw+xh1i3DHGnWLcOcZdYtw1xt1i3D3GPWLcM8a9Ytw7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD7GE+JhQ06M0RhPivHkGE+J8dQYT4vx9BjPiPHMGM+K8ewYz4nx3BjPi/H8GC+I8cIYL4rx4hgvifHSGC+L8fIYr4jxyhgHMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2MfYxXhXj1TFeE+O1MV4X4/Ux3hDjjTHeFOPNMd4S460x3hbj7THeEeOdMd4V490x3hPjvTHeF+P9MY6IcWSMo2J8IMYHY3woxodjfCTGR2N8LMbHY3wixidjfCrGp2N8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9j/CLGL2P8KsavY/wmxm9j/C7G72P8IcYfY/wpxp9j/CXGX2P8LcbfY/wjxj9j/CvGv2P8J8Z/Y/wvxtExjolxbIxDEhwnwXETHJrgeAkOS3D8BCdIcMIEJ0pw4gQnSXDSBIcnOFmCkyc4RYJTJjhVglMnOE2C0yY4XYLTJzhDgjMmOFOCMyc4S4KzJjhbgrMnOEeCcyY4V4JzJzhPgvMmOF+C8ye4QIILJrhQggsnuEiCiya4WIKLJ7hEgiS4ZIJLJbh0gsskuGyCyyW4fIIrJLhigisluHKCqyS4aoKrJbh6gmskuGaCayW4doLrJLhugusluH6CGyS4YYIbJbhxgpskuGmCmyW4eYJbJLhlglsluHWC2yS4bYLbJbh9gjskuGOCOyW4c4K7JLhrgrsluHuCeyS4Z4J7Jbh3gvskuG+C+yW4f4IHJHhgggcleHCChyR4aIKHJXh4gkckeGSCRyV4dILHJHhsgscleHyCJyR4YoImeFKCJyd4SoKnJnhagqcneEaCZyZ4VoJnJ3hOgucmeF6C5yd4QYIXJnhRghcneEmClyZ4WYKXJ3hFglcmOEgwSDBMMEowTjBJME0wSzBPsEiwTLBKsE6wSbBNsEuwT/CqBK9O8JoEr03wugSvT/CGBG9M8KYEb07wlgRvTfC2BG9P8I4E70zwrgTvTvCeBO9N8L4E709wRIIjExyV4AMJPpjgQwk+nOAjCT6a4GMJPp7gEwk+meBTCT6d4DMJPpvgcwk+n+ALCb6Y4EsJvpzgKwm+muBrCb6e4BsJvpngWwm+neA7Cb6b4HsJvp/gBwl+mOBHCX6c4CcJfprgZwl+nuAXCX6Z4FcJfp3gNwl+m+B3CX6f4A8J/pjgTwn+nOAvCf6a4G8J/p7gHwn+meBfCf6d4D8J/pvgfwmOTnBMgmMTHJLiOCmOm+LQFMdLcViK46c4QYoTpjhRihOnOEmKk6Y4PMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVIkxSVTXCrFpVNcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTNMWTUjw5xVNSPDXF01I8PcUzUjwzxbNSPDvFc1I8N8XzUjw/xQtSvDDFi1K8OMVLUrw0xctSvDzFK1K8MsVBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2KV6V4dYrXpHhtiteleH2KN6R4Y4o3pXhzirekeGuKt6V4e4p3pHhnineleHeK96R4b4r3pXh/iiNSHJniqBQfSPHBFB9K8eEUH0nx0RQfS/HxFJ9I8ckUn0rx6RSfSfHZFJ9L8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcXSKY1Icm+KQDMfJcNwMh2Y4XobDMhw/wwkynDDDiTKcOMNJMpw0w+EZTpbh5BlOkeGUGU6V4dQZTpPhtBlOl+H0Gc6Q4YwZzpThzBnOkuGsGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4cIZLpLhohkuluHiGS6RIRkumeFSGS6d4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemKEZnpThyRmekuGpGZ6W4ekZnpHhmRmeleHZGZ6T4bkZnpfh+RlekOGFGV6U4cUZXpLhpRleluHlGV6R4ZUZDjIMMgwzjDKMM0wyTDPMMswzLDIsM6wyrDNsMmwz7DLsM7wqw6szvCbDazO8LsPrM7whwxszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zMckeHIDEdl+ECGD2b4UIYPZ/hIho9m+FiGj2f4RIZPZvhUhk9n+EyGz2b4XIbPZ/hChi9m+FKGL2f4SoavZvhahq9n+EaGb2b4VoZvZ/hOhu9m+F6G72f4QYYfZvhRhh9n+EmGn2b4WYafZ/hFhl9m+FWGX2f4TYbfZvhdht9n+EOGP2b4U4Y/Z/hLhr9m+FuGv2f4R4Z/ZvhXhn9n+E+G/2b4X4ajMxyT4dgMh+Q4To7j5jg0x/FyHJbj+DlOkOOEOU6U48Q5TpLjpDkOz3GyHCfPcYocp8xxqhynznGaHKfNcbocp89xhhxnzHGmHGfOcZYcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNcbEcF89xiRzJcckcl8px6RyXyXHZHJfLcfkcV8hxxRxXynHlHFfJcdUcV8tx9RzXyHHNHNfKce0c18lx3RzXy3H9HDfIccMcN8px4xw3yXHTHDfLcfMct8hxyxy3ynHrHLfJcdsct8tx+xx3yHHHHHfKceccd8lx1xx3y3H3HPfIcc8c98px7xz3yXHfHPfLcf8cD8jxwBwPyvHgHA/J8dAcD8vx8ByPyPHIHI/K8egcj8nx2ByPy/H4HE/I8cQczfGkHE/O8ZQcT83xtBxPz/GMHM/M8awcz87xnBzPzfG8HM/P8YIcL8zxohwvzvGSHC/N8bIcL8/xihyvzHGQY5BjmGOUY5xjkmOaY5ZjnmORY5ljlWOdY5Njm2OXY5/jVTleneM1OV6b43U5Xp/jDTnemONNOd6c4y053prjbTnenuMdOd6Z41053p3jPTnem+N9Od6f44gcR+Y4KscHcnwwx4dyfDjHR3J8NMfHcnw8xydyfDLHp3J8Osdncnw2x+dyfD7HF3J8MceXcnw5x1dyfDXH13J8Pcc3cnwzx7dyfDvHd3J8N8f3cnw/xw9y/DDHj3L8OMdPcvw0x89y/DzHL3L8Msevcvw6x29y/DbH73L8Pscfcvwxx59y/DnHX3L8Ncffcvw9xz9y/DPHv3L8O8d/cvw3x/9yHJ3jmBzH5jikwHEKHLfAoQWOV+CwAscvcIICJyxwogInLnCSAictcHiBkxU4eYFTFDhlgVMVOHWB0xQ4bYHTFTh9gTMUOGOBMxU4c4GzFDhrgbMVOHuBcxQ4Z4FzFTh3gfMUOG+B8xU4f4ELFLhggQsVuHCBixS4aIGLFbh4gUsUSIFLFrhUgUsXuEyByxa4XIHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEbFrhRgRsXuEmBmxa4WYGbF7hFgVsWuFWBWxe4TYHbFrhdgdsXuEOBOxa4U4E7F7hLgbsWuFuBuxe4R4F7FrhXgXsXuE+B+xa4X4H7F3hAgQcWeFCBBxd4SIGHFnhYgYcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFmiBJxV4coGnFHhqgacVeHqBZxR4ZoFnFXh2gecUeG6B5xV4foEXFHhhgRcVeHGBlxR4aYGXFXh5gVcUeGWBgwKDAsMCowLjApMC0wKzAvMCiwLLAqsC6wKbAtsCuwL7Aq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gJHFDiywFEFPlDggwU+VODDBT5S4KMFPlbg4wU+UeCTBT5V4NMFPlPgswU+V+DzBb5Q4IsFvlTgywW+UuCrBb5W4OsFvlHgmwW+VeDbBb5T4LsFvlfg+wV+UOCHBX5U4McFflLgpwV+VuDnBX5R4JcFflXg1wV+U+C3BX5X4PcF/lDgjwX+VODPBf5S4K8F/lbg7wX+UeCfBf5V4N8F/lPgvwX+V+DoAscUOLbAISWOU+K4JQ4tcbwSh5U4fokTlDhhiROVOHGJk5Q4aYnDS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykxEVLXKzExUtcokRKXLLEpUpcusRlSly2xOVKXL78//8rcaUSVy5xlRJXLXG1ElcvcY0S1yxxrRLXLnGdEtctcb0S1y9xgxI3LHGjEjcucZMSNy1xsxI3L3GLErcscasSty5xmxK3LXG7ErcvcYcSdyxxpxJ3LnGXEnctcbcSdy9xjxL3LHGvEvcucZ8S9y1xvxL3L/GAEg8s8aASDy7xkBIPLfGwEg8v8YgSjyzxqBKPLvGYEo8t8bgSjy/xhBJPLNESTyrx5BJPKfHUEk8r8fQSzyjxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JV5V4tUlXlPitSVeV+L1Jd5Q4o0l3lTizSXeUuKtJd5W4u0l3lHinSXeVeLdJd5T4r0l3lfi/SWOKHFkiaNKfKDEB0t8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9L/KrEr0v8psRvS/yuxO9L/KHEH0v8qcSfS/ylxF9L/K3E30v8o8Q/S/yrxL9L/KfEf0v8r8TRJY4pcWyJQyocp8JxKxxa4XgVDqtw/AonqHDCCieqcOIKJ6lw0gqHVzhZhZNXOEWFU1Y4VYVTVzhNhdNWOF2F01c4Q4UzVjhThTNXOEuFs1Y4W4WzVzhHhXNWOFeFc1c4T4XzVjhfhfNXuECFC1a4UIULV7hIhYtWuFiFi1e4RIVUuGSFS1W4dIXLVLhshctVuHyFK1S4YoUrVbhyhatUuGqFq1W4eoVrVLhmhWtVuHaF61S4boXrVbh+hRtUuGGFG1W4cYWbVLhphZtVuHmFW1S4ZYVbVbh1hdtUuG2F21W4fYU7VLhjhTtVuHOFu1S4a4W7Vbh7hXtUuGeFe1W4d4X7VLhvhftVuH+FB1R4YIUHVXhwhYdUeGiFh1V4eIVHVHhkhUdVeHSFx1R4bIXHVXh8hSdUeGKFVnhShSdXeEqFp1Z4WoWnV3hGhWdWeFaFZ1d4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVjioMKgwrDCqMK4wqTCtMKswr7CosKywqrCusKmwrbCrsK/wqgqvrvCaCq+t8LoKr6/whgpvrPCmCm+u8JYKb63wtgpvr/COCu+s8K4K767wngrvrfC+Cu+vcESFIyscVeEDFT5Y4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeFXFX5d4TcVflvhdxV+X+EPFf5Y4U8V/lzhLxX+WuFvFf5e4R8V/lnhXxX+XeE/Ff5b4X8Vjq5wTIVjKxxS4zg1jlvj0BrHq3FYjePXOEGNE9Y4UY0T1zhJjZPWOLzGyWqcvMYpapyyxqlqnLrGaWqctsbpapy+xhlqnLHGmWqcucZZapy1xtlqnL3GOWqcs8a5apy7xnlqnLfG+Wqcv8YFalywxoVqXLjGRWpctMbFaly8xiVqpMYla1yqxqVrXKbGZWtcrsbla1yhxhVrXKnGlWtcpcZVa1ytxtVrXKPGNWtcq8a1a1ynxnVrXK/G9WvcoMYNa9yoxo1r3KTGTWvcrMbNa9yixi1r3KrGrWvcpsZta9yuxu1r3KHGHWvcqcada9ylxl1r3K3G3Wvco8Y9a9yrxr1r3KfGfWvcr8b9azygxgNrPKjGg2s8pMZDazysxsNrPKLGI2s8qsajazymxmOH4nE1Hl/jCTWeWKM1nlTjyTWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjpTVeVuPlNV5R45U1DmoMagxrjGqMa0xqTGvMasxrLGosa6xqrGtsamxr7Grsa7yqxqtrvKbGa2u8rsbra7yhxhtrvKnGm2u8pcZba7ytxttrvKPGO2u8q8a7a7ynxntrvK/G+2scUePIGkfV+ECND9b4UI0P1/hIjY/W+FiNj9f4RI1P1vhUjU/X+EyNz9b4XI3P1/hCjS/W+FKNL9f4So2v1vhaja/X+EaNb9b4Vo1v1/hOje/W+F6N79f4QY0f1vhRjR/X+EmNn9b4WY2f1/hFjV/W+FWNX9f4TY3f1vhdjd/X+EONP9b4U40/1/hLjb/W+FuNv9f4R41/1vhXjX/X+E+N/9b4X42jaxxT49gahzQ4ToPjNji0wfEaHNbg+A1O0OCEDU7U4MQNTtLgpA0Ob3CyBidvcIoGp2xwqganbnCaBqdtcLoGp29whgZnbHCmBmducJYGZ21wtgZnb3COBudscK4G525wngbnbXC+BudvcIEGF2xwoQYXbnCRBhdtcLEGF29wiQZpcMkGl2pw6QaXaXDZBpdrcPkGV2hwxQZXanDlBldpcNUGV2tw9QbXaHDNBtdqcO0G12lw3QbXa3D9BjdocMMGN2pw4wY3aXDTBjdrcPMGt2hwywa3anDrBrdpcNsGt2tw+wZ3aHDHBndqcOcGd2lw1wZ3a3D3BvdocM8G92pw7wb3aXDfBvdrcP8GD2jwwAYPavDgBg9p8NAGD2vw8AaPaPDIBo9q8OgGj2nw2AaPa/D4Bk9o8MQGbfCkBk9u8JQGT23wtAZPb/CMBs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbHDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/gVQ1e3eA1DV7b4HUNXt/gDQ3e2OBNDd7c4C0N3trgbQ3e3uAdDd7Z4F0N3t3gPQ3e2+B9Dd7f4IgGRzY4qsEHGnywwYcafLjBRxp8tMHHGny8wScafLLBpxp8usFnGny2wecafL7BFxp8scGXGny5wVcafLXB1xp8vcE3GnyzwbcafLvBdxp8t8H3Gny/wQ8a/LDBjxr8uMFPGvy0wc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHfGvy9wT8a/LPBvxr8u8F/Gvy3wf8aHN3gmAbHNjikxXFaHLfFoS2O1+KwFsdvcYIWJ2xxohYnbnGSFidtcXiLk7U4eYtTtDhli1O1OHWL07Q4bYvTtTh9izO0OGOLM7U4c4uztDhri7O1OHuLc7Q4Z4tztTh3i/O0OG+L87U4f4sLtLhgiwu1uHCLi7S4aIuLtbh4i0u0SItLtrhUi0u3uEyLy7a4XIvLt7hCiyu2uFKLK7e4Sourtrhai6u3uEaLa7a4Votrt7hOi+u2uF6L67e4QYsbtrhRixu3uEmLm7a4WYubt7hFi1u2uFWLW7e4TYvbtrhdi9u3uEOLO7a4U4s7t7hLi7u2uFuLu7e4R4t7trhXi3u3uE+L+7a4X4v7t3hAiwe2eFCLB7d4SIuHtnhYi4e3eESLR7Z4VItHt3hMi8e2eFyLx7d4QosntmiLJ7V4countHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fq9q8eoWr2nx2hava/H6Fm9o8cYWb2rx5hZvafHWFm9r8fYW72jxzhbvavHuFu9p8d4W72vx/hZHtDiyxVEtPtDigy0+1OLDLT7S4qMtPtbi4y0+0eKTLT7V4tMtPtPisy0+1+LzLb7Q4ostvtTiyy2+0uKrLb7W4ustvtHimy2+1eLbLb7T4rstvtfi+y1+0OKHLX7U4sctftLipy1+1uLnLX7R4pctftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y3+0eKfLf7V4t8t/tPivy3+1+LoFse0OLbFIR2O0+G4HQ7tcLwOh3U4focTdDhhhxN1OHGHk3Q4aYfDO5ysw8k7nKLDKTucqsOpO5ymw2k7nK7D6TucocMZO5ypw5k7nKXDWTucrcPZO5yjwzk7nKvDuTucp8N5O5yvw/k7XKDDBTtcqMOFO1ykw0U7XKzDxTtcokM6XLLDpTpcusNlOly2w+U6XL7DFTpcscOVOly5w1U6XLXD1TpcvcM1Olyzw7U6XLvDdTpct8P1Oly/ww063LDDjTrcuMNNOty0w8063LzDLTrcssOtOty6w2063LbD7TrcvsMdOtyxw5063LnDXTrctcPdOty9wz063LPDvTrcu8N9Oty3w/063L/DAzo8sMODOjy4w0M6PLTDwzo8vMMjOjyyw6M6PLrDYzo8tsPjOjy+wxM6PLFDOzypw5M7PKXDUzs8rcPTOzyjwzM7PKvDszs8p8NzOzyvw/M7vKDDCzu8qMOLO7ykw0s7vKzDyzu8osMrOxx0GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hd4VYdXd3hNh9d2eF2H13d4Q4c3dnhThzd3eEuHt3Z4W4e3d3hHh3d2eFeHd3d4T4f3dnhfh/d3OKLDkR2O6vCBDh/s8KEOH+7wkQ4f7fCxDh/v8IkOn+zwqQ6f7vCZDp/t8LkOn+/whQ5f7PClDl/u8JUOX+3wtQ5f7/CNDt/s8K0O3+7wnQ7f7fC9Dt/v8IMOP+zwow4/7vCTDj/t8LMOP+/wiw6/7PCrDr/u8JsOv+3wuw6/7/CHDn/s8KcOf+7wlw5/7fC3Dn/v8I8O/+zwrw7/7vCfDv/t8L8OR3c4psOxHQ7pcZwex+1xaI/j9Tisx/F7nKDHCXucqMeJe5ykx0l7HN7jZD1O3uMUPU7Z41Q9Tt3jND1O2+N0PU7f4ww9ztjjTD3O3OMsPc7a42w9zt7jHD3O2eNcPc7d4zw9ztvjfD3O3+MCPS7Y40I9LtzjIj0u2uNiPS7e4xI90uOSPS7V49I9LtPjsj0u1+PyPa7Q44o9rtTjyj2u0uOqPa7W4+o9rtHjmj2u1ePaPa7T47o9rtfj+j1u0OOGPW7U48Y9btLjpj1u1uPmPW7R45Y9btXj1j1u0+O2PW7X4/Y97tDjjj3u1OPOPe7S46497tbj7j3u0eOePe7V49497tPjvj3u1+P+PR7Q44E9HtTjwT0e0uOhPR7W4+E9HtHjkT0e1ePRPR7T47E9Htfj8T2e0OOJPdrjST2e3OMpPZ7a42k9nt7jGT2e2eNZPZ7d4zk9ntvjeT2e3+MFPV7Y40U9XtzjJT1e2uNlPV7e4xU9XtnjoMegx7DHqMe4x6THtMesx7zHoseyx6rHusemx7bHrse+x6t6vLrHa3q8tsfrery+xxt6vLHHm3q8+f9Gb+3xth5v7/GOHu/s8a4e7+7xnh7v7fG+Hu/vcUSPI3sc9T8azrGH88NxttutbdvGqW3btm2f2raN78dGjXVtbm3bbm9++ee+g5mcTDIPJjPARwc4bIDDBzhigCMHOGqAowc4ZoCPDfDxAT4xwCcH+NQAnx7gMwN8doDPDfD5Ab4wwBfHwZcG+PIAXxngqwN8bYCvD3DsAN8Y4JsDfGuAbw/wnQG+O8D3Bvj+AD8Y4IcD/GiAHw/wkwF+OsDPBvj5AL8Y4JcD/GqAXw/wmwF+O8DvBvj9AH8Y4I8D/GmAPw/wlwH+OsDfBvj7AP8Y4J8D/GuAfw/wnwH+O8D/BjgkwHECHBrguAGOF+D4AU4Q4IQBThTgxAFOEuCkAU4W4OQBThHglAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4MwBzhLgrAHOFuDsAc4R4JwBzhXg3AHOE+C8Ac4X4PwBLhDgggEuFODCAS4S4KIBLhbg4gEuEeCSAS4VIAEuHeAyAS4b4HIBLh/gCgGuGOBKAa4c4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHKABnhLgqQGeFuDpAZ4R4JkBnhXg2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AO8J8B7A7wvwPsDfCDABwN8KMCHA3wkwEcDHBbg8ABHBDgywFEBjg5wTICPBfh4gE8E+GSATwX4dIDPBPhsgM8F+HyALwT4YoAvBfhygK8E+GqArwX4eoBjA3wjwDcDfCvAtwN8J8B3A3wvwPcD/CDADwP8KMCPA/wkwE8D/CzAzwP8IsAvA/wqwK8D/CbAbwP8LsDvA/whwB8D/CnAnwP8JcBfA/wtwN8D/CPAPwP8K8C/A/wnwH8D/C/AISGOE+LQEMcNcbwQxw9xghAnDHGiECcOcZIQJw1xshAnD3GKEKcMcaoQpw5xmhCnDXG6EKcPcYYQZwxxphBnDnGWEGcNcbYQZw9xjhDnDHGuEOcOcZ4Q5w1xvhDnD3GBEBcMcaEQFw5xkRAXDXGxEBcPcYkQlwxxqRAJcekQlwlx2RCXC3H5EFcIccUQVwpx5RBXCXHVEFcLcfUQ1whxzRDXCnHtENcJcd0Q1wtx/RA3CHHDEDcKceMQNwlx0xA3C3HzELcIccsQtwpx6xC3CXHbELcLcfsQdwhxxxB3CnHnEHcJcdcQdwtx9xD3CHHPEPcKce8Q9wlx3xD3C3H/EA8I8cAQDwrx4BAPCfHQEA8L8fAQjwjxyBCPCvHoEI8J8dgQjwvx+BBPCPHEEE8K8eQQDfGUEE8N8bQQTw/xjBDPDPGsEM8O8ZwQzw3xvBDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEO8M8a4Q7w5xEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4j0h3hvifSHeH+IDIT4Y4kMhPhziIyE+GuKwEIeHOCLEkSGOCnF0iGNCfCzEx0N8IsQnQ3wqxKdDfCbEZ0N8LsTnQ3whxBdDfCnEl0N8JcRXQ3wtxNdDHBviGyG+GeJbIb4d4jshvhvieyG+H+IHIX4Y4kchfhziJyF+GuJnIX4e4hchfhniVyF+HeI3IX4b4nchfh/iDyH+GOJPIf4c4i8h/hribyH+HuIfIf4Z4l8h/h3iPyH+G+J/IQ6JcJwIh0Y4boTjRTh+hBNEOGGEE0U4cYSTRDhphJNFOHmEU0Q4ZYRTRTh1hNNEOG2E00U4fYQzRDhjhDNFOHOEs0Q4a4SzRTh7hHNEOGeEc0U4d4TzRDhvhPNFOH+EC0S4YIQLRbhwhItEuGiEi0W4eIRLRLhkhEtFSIRLR7hMhMtGuFyEy0e4QoQrRrhShCtHuEqEq0a4WoSrR7hGhGtGuFaEa0e4ToTrRrhehOtHuEGEG0a4UYQbR7hJhJtGuFmEm0e4RYRbRrhVhFtHuE2E20a4XYTbR7hDhDtGuFOEO0e4S4S7RrhbhLtHuEeEe0a4V4R7R7hPhPtGuF+E+0d4QIQHRnhQhFfdOfTgQyI8dMgZHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRnhThyREa4SkRnhrhaRGeHuEZEZ4Z4VkRnh3hORGeG+F5EZ4f4QURXhjhRRFeHOElEV4a4WURXh7hFRFe+T99EV4d4TURXhvhdRFeH+ENEd4Y4U0R3hzhLRHeGuFtEd4e4R0R3hnhXRHeHeEgwiDCMMIowjjCJMI0wizCPBoy9P//sVUR1hE2EbYRdhH2Ed4T4b0R3hfh/RE+EOGDET4U4cMRPhLhoxEOi3B4hCMiHBnhqAhHRzgmwscifDzCJyJ8MsKnInw6wmcifDbC5yJ8PsIXInwxwpcifDnCVyJ8NcLXInw9wrERvhHhmxG+FeHbEb4T4bsRvhfh+xF+EOGHEX4U4ccRfhLhpxF+FuHnEX4R4ZcRfhXh1xF+E+G3EX4X4fcR/hDhjxH+FOHPEf4S4a8R/hbh7xH+EeGfEf4V4d8R/hPhvxH+F+GQGMeJcWiM48Y4XozjxzhBjBPGOFGME8c4SYyTxjhZjJPHOEWMU8Y4VYxTxzhNjNPGOF2M08c4Q4wzxjhTjDPHOEuMs8Y4W4yzxzhHjHPGOFeMc8c4T4zzxjhfjPPHuECMC8a4UIwLx7hIjIvGuFiMi8e4RIxLxrhUjMS4dIzLxLhsjMvFuHyMK8S4YowrxbhyjKvEuGqMq8W4eoxrxLhmjGvFuHaM68S4bozrxbh+jBvEuGGMG8W4cYybxLhpjJvFuHmMW8S4ZYxbxbh1jNvEuG2M28W4fYw7xLhjjDvFuHOMu8S4a4y7xbh7jHvEuGeMe8W4d4z7xLhvjPvFuH+MB8R4YIwHxXhwjIfEeGiMh8V4eIxHxHhkjEfFeHSMx8R4bIzHxXh8jCfEeGKMJ8V4cozGeEqMp8Z4Woynx3hGjGfGeFaMZ8d4ToznxnhejOfHeEGMF8Z4UYwXx3hJjJfGeFmMl8d4RYxXxnhVjFfHeE2M18Z4XYzXx3hDjDfGeFOMN8d4S4y3xnhbjLfHeEeMd8Z4V4x3xziIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/xnhjvjfG+GO+P8YEYH4zxoRgfjvGRGB+NcViMw2McEePIGEfFODrGMTE+FuPjMT4R45MxPhXj0zE+E+OzMT4X4/MxvhDjizG+FOPLMb4S46sxvhbj6zGOjfGNGN+M8a0Y347xnRjfjfG9GN+P8YMYP4zxoxg/jvGTGD+N8bMYP4/xixi/jPGrGL+O8ZsYv43xuxi/j/GHGH+M8acYf47xlxh/jfG3GH+P8Y8Y/4zxrxj/jvGfGP+N8b8YhyQ4ToJDExw3wfESHD/BCRKcMMGJEpw4wUkSnDTByRKcPMEpEpwywakSnDrBaRKcNsHpEpw+wRkSnDHBmRKcOcFZEpw1wdkSnD3BORKcM8G5Epw7wXkSnDfB+RKcP8EFElwwwYUSXDjBRRJcNMHFElw8wSUSXDLBpRIkwaUTXCbBZRNcLsHlE1whwRUTXCnBlRNcJcFVE1wtwdUTXCPBNRNcK8G1E1wnwXUTXC/B9RPcIMENE9wowY0T3CTBTRPcLMHNE9wiwS0T3CrBrRPcJsFtE9wuwe0T3CHBHRPcKcGdE9wlwV0T3C3B3RPcI8E9E9wrwb0T3CfBfRPcL8H9EzwgwQMTPCjBgxM8JMFDEzwswcMTPCLBIxM8KsGjEzwmwWMTPC7B4xM8IcETEzwpwZMTNMFTEjw1wdMSPD3BMxI883+8hwwZcnaC5yR4boLnJXh+ghckeGGCFyV4cYKXJHhpgpcleHmCVyR4ZYJXJXh1gtckeG2C1yV4fYI3JHhjgjcleHOCtyR4a4K3JXh7gnckeGeCdyV4d4KDBIMEwwSjBOMEkwTTBLME8wSLBMsEqwTrBJsE2wS7BPsE70nw3gTvS/D+BB9I8MEEH0rw4QQfSfDRBIclODzBEQmOTHBUgqMTHJPgYwk+nuATCT6Z4FMJPp3gMwk+m+BzCT6f4AsJvpjgSwm+nOArCb6a4GsJvp7g2ATfSPDNBN9K8O0E30nw3QTfS/D9BD9I8MMEP0rw4wQ/SfDTBD9L8PMEv0jwywS/SvDrBL9J8NsEv0vw+wR/SPDHBH9K8OcEf0nw1wR/S/D3BP9I8M8E/0rw7wT/SfDfBP9LcEiK46Q4NMVxUxwvxfFTnCDFCVOcKMWJU5wkxUlTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCpFUlw6xWVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXP9/Hkf9X9PcKMWNU9wkxU1T3CzFzVPcIsUtU9wqxa1T3CbFbVPcLsXtU9whxR1T3CnFnVPcJcVdU9wtxd1T3CPFPVPcK8W9U9wnxX1T3C/F/VM8IMUDUzwoxYNTPCTFQ1M8LMXDUzwixSNTPCrFo1M8JsVjUzwuxeNTPCHFE1M8KcWTUzTFU1I8NcXTUjw9xTNSPDPFs1I8O8VzUjw3xfNSPD/FC1K8MMWLUrw4xUtSvDTFy1K8PMUrUrwyxatSvDrFa1K8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xUGKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYr3pHhviveleH+KD6T4YIoPpfhwio+k+GiKw1IcnuKIFEemOCrF0SmOSfGxFB9P8YkUn0zxqRSfTvGZFJ9N8bkUn0/xhRRfTPGlFF9O8ZUUX03xtRRfT3Fsim+k+GaKb6X4dorvpPhuiu+l+H6KH6T4YYofpfhxip+sOcRPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxSEZjpPh0AzHzXC8DMfPcIIMJ8xwogwnznCSDCfNcLIMJ89wigynzHCqDKfOcJoMp81wugynz3CGDGfMcKYMZ85wlgxnzXC2DGfPcI4M58xwrgznznCeDOfNcL4M589wgQwXzHChDBfOcJEMF81wsQwXz3CJDJfMcKkMyXDpDJfJcNkMl8tw+QxXyHDFDFfKcOUMV8lw1QxXy3D1DNfIcM0M18pw7QzXyXDdDNfLcP0MN8hwwww3ynDjDDfJcNMMN8tw8wy3yHDLDLfKcOsMt8lw2wy3y3D7DHfIcMcMd8pw5wx3yXDXDHfLcPcM98hwzwz3ynDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMT8jwxAxPyvDkDM3wlAxPzfC0DE/P8IwMz8zwrAzPzvCcDM/N8LwMz8/wggwvzPCiDC/O8JIML83wsgwvz/CKDK/M8KoMr87wmgyvzfC6DK/P8IYMb8zwpgxvzvCWDG/N8LYMb8/wjgzvzPCuDO/OcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+E9Gd6b4X0Z3p/hAxk+mOFDGT6c4SMZPprhsAyHZzgiw5EZjspwdIZjMnwsw8czfCLDJzN8KsOnM3wmw2czfC7D5zN8IcMXM3wpw5czfCXDVzN8LcPXMxyb4RsZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4ScZfprhZxl+nuEXGX6Z4VcZfp3hNxl+m+F3GX6f4Q8Z/pjhTxn+nOEvGf6a4W8Z/p7hHxn+meFfGf6d4T8Z/pvhfxkOyXGcHIfmOG6O4+U4fo4T5DhhjhPlOHGOk+Q4aY6T5Th5jlPkOGWOU+U4dY7T5DhtjtPlOH2OM+Q4Y44z5ThzjrPkOGuOs+U4e45z5DhnjnPlOHeO8+Q4b47z5Th/jgvkuGCOC+W4cI6L5LhojovluHiOS+S4ZI5L5UiOS+e4TI7L5rhcjsvnuEKOK+a4Uo4r57hKjqvmuFqOq+e4Ro5r5rhWjmvnuE6O6+a4Xo7r57hBjhvmuFGOG+e4SY6b5rhZjpvnuEWOW+a4VY5b57hNjtvmuF2O2+e4Q4475rhTjjvnuEuOu+a4W46757hHjnvmuFeOe+e4T4775rhfjvvneECOB+Z4UI4H53hIjofmeFiOh+d4RI5H5nhUjkfneEyOx+Z4XI7H53hCjifmeFKOJ+dojqfkeGqOp+V4eo5n5HhmjmfleHaO5+R4bo7n5Xh+jhfkeGGOF+V4cY6X5HhpjpfleHmOV+R4ZY5X5Xh1jtfkeG2O1+V4fY435HhjjjfleHOOt+R4a4635Xh7jnfkeGeOd+V4d46DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsc78nx3hzvy/H+HB/I8cEcH8rx4RwfyfHRHIflODzHETmOzHFUjqNzHJPjYzk+nuMTOT6Z41M5Pp3jMzk+m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7j2BzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHP/LcUiB4xQ4tMBxCxyvwPELnKDACQucqMCJC5ykwEkLnKzAyQucosApC5yqwKkLnKbAaQucrsDpC5yhwBkLnKnAmQucpcBZC5ytwNkLnKPAOQucq8C5C5ynwHkLnK/A+QtcoMAFC1yowIULXKTARQtcrMDFC1yiwCULXKpACly6wGUKXLbA5QpcvsAVClyxwJUKXLnAVQpctcDVCly9wDUKXLPAtQpcu8B1Cly3wPUKXL/ADQrcsMCNCty4wE0K3LTAzQrcvMAtCtyywK0K3LrAbQrctsDtCty+wB0K3LHAnQrcucBdCty1wN0K3L3APQrcs8C9Cty7wH0K3LfA/Qrcv8ADCjywwIMKPLjAQwo8tMDDCjy8wCMKPLLAowo8usBjCjy2wOMKPL7AEwo8scCTCjy5QAs8pcBTCzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLHBQYFBgWGBUYF5gUmBaYFZgXWBRYFlgVV4ytC2wKbAvsCuwLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHCxxW4PACRxQ4ssBRBY4ucEyBjxX4eIFPFPhkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBYwt8o8A3C3yrwLcLfKfAdwt8r8D3C/ygwA8L/KjAjwv8pMBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8L/KvAvwv8p8B/C/yvwCEljlPi0BLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSKXHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEi3xlBJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSzy/xghIvLPGiEi8u8ZISLy3xshIvL/GKEq8s8aoSry7xmhKvLfG6//EdgjeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lXh3iYMSgxLDEqMS4xKTEtMSsxLzEosSyxKrEusSmxLbErsS+xLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESh5U4vMQRJY4scVSJo0scU+JjJT5e4hMlPlniUyU+XeIzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuLYEt8o8c0S3yrx7RLfKfHdEt8r8f0SPyjxwxI/KvHjEj8p8dMSPyvx8xK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8S/ytxSIXjVDi0wnErHK/C8SucoMIJK5yowokrnKTCSSucrMLJK5yiwikrnKrCqSucpsJpK5yuwukrnKHCGSucqcKZK5ylwlkrnK3C2Suco8I5K5yrwrkrnKfCeSucr8L5K1ygwgUrXKjChStcpMJFK1yswsUrXKLCJStcqkIqXLrCZSpctsLlKly+whUqXLHClSpcucJVKly1wtUqXL3CNSpcs8K1Kly7wnUqXLfC9Spcv8INKtywwo0q3LjCTSrctMLNKty8wi0q3LLCrSrcusJtKty2wu0q3L7CHSrcscKdKty5wl0q3LXC3SrcvcI9Ktyzwr0q3LvCfSrct8L9Kty/wgMqPLDCgyo8uMJDKjy0wsMqPLzCIyo8ssKjKjy6wmMqPLbC4yo8vsITKjyxwpMqPLlCKzylwlMrPK3C0ys8o8IzKzyrwrMrPKfCcys8r8LzK7ygwgsrvKjCiyu8pMJLK7yswssrvKLCKyu8qsKrK7ymwmsrvK7C6yu8ocIbK7ypwpsrvKXCWyu8rcLbK7yjwjsrvKvCuyscVBhUGFYYVRhXmFSYVphVmFdYVFhWWFVYV9hU2FbYVdhXeE+F91Z4X4X3V/hAhQ9W+FCFD1f4SIWPVjiswuEVjqhwZIWjKhxd4ZgKH6vw8QqfqPDJCp+q8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUKx1b4RoVvVvhWhW9X+E6F71b4XoXvV/hBhR9W+FGFH1f4SYWfVvhZhZ9X+EWFX1b4VYVfV/hNhd9W+F2F31f4Q4U/VvhThT9X+EuFv1b4W4W/V/hHhX9W+FeFf1f4T4X/VvhfhUNqHKfGoTWOW+N4NQ4ZssSEE9Q4YY0T1ThxjZPUOGmNk9U4eY1T1DhljVPVOHWN09Q4bY3T1Th9jTPUOGONM9U4c42z1DhrjbPVOHuNc9Q4Z41z1Th3jfPUOG+N89U4f40L1LhgjQvVuHCNi9S4aI2L1bh4jUvUuGSNS9VIjUvXuEyNy9a4XI3L17hCjSvWuFKNK9e4So2r1rhajavXuEaNa9a4Vo1r17hOjevWuF6N69e4QY0b1rhRjRvXuEmNm9a4WY2b17hFjVvWuFWNW9e4TY3b1rhdjdvXuEONO9a4U40717hLjbvWuFuNu9e4R4171rhXjXvXuE+N+9a4X43713hAjQfWeFCNB9d4SI2H1nhYjYfXeESNR9Z4VI1H13hMjcfWeFyNx9d4Qo0n1nhSjSfXaI2n1HhqjafVeHqNZ9R4Zo1n1Xh2jefUeG6N59V4fo0X1HhhjRfVeHGNl9R4aY2X1Xh5jVfUeGWNV9V4dY3X1HhtjdfVeH2NN9R4Y4031XhzjbfUeGuNt9V4e4131HhnjXfVeHeNgxqDGsMaoxrjGpMa0xqzGvMaixrLGqsa6xqbGtsauxr7Gu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0RqH1Ti8xhE1jqxxVI2jaxxT42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e49ga36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qPHPGv+q8e8a/6nx3xr/+1/WGxynwaENjtvgeA2O3+AEDU7Y4EQNTtzgJA1O2uBkDU7e4BQNTtngVA1O3eA0DU7b4HQNTt/gDA3O2OBMDc7c4CwNztrgbA3O3uAcDc7Z4FwNzt3gPA3O2+B8Dc7f4AINLtjgQg0u3OAiDS7a4GINLt7gEg0u2eBSDdLg0g0u0+CyDS7X4PINrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ3a4CkNntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DZ7f4AUNXtjgRQ1e3OAlDV7a4GUNXt7gFQ1e2eBVDV7d4DUNXtvgdQ1e3+ANDd7Y4E0N3tzgLQ3e2uBtDd7e4B0N3tngXQ3e3eCgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bexq8t8H7Gry/wQcafLDBhxp8uMFHGny0wWENDm9wRIMjGxzV4OgGxzT4WIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzc4tsE3GnyzwbcafLvBdxp8t8H3Gny/wQ8a/LDBjxr8uMFPGvy0wc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHfGvy9wT8a/LPBvxr8u8F/Gvy3wf8aHNLiOC0ObXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2qRFpducZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u0RZPafHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2vx/BYvaPHCFi9q8eIWL2nx0hYva/HyFq9o8coWr2rx6havafHaFq9r8foWb2jxxhZvavHmFm9p8dYWb2vx9hbvaPHOFu9q8e4WBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Ld7T4r0t3tfi/S0+0OKDLT7U4sMtPtLioy0Oa3F4iyNaHNniqBZHtzimxcdafLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xbEtvtHimy2+1eLbLb7T4rstvtfi+y1+0OKHLX7U4sctftLipy1+1uLnLX7R4pctftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y3+0eKfLf7V4t8t/tPivy3+1+KQDsfpcGiH43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh3S4dIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4cod2eEqHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh+cPGe//BlAdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z0d3tXh3R0OOgw6DDuMOow7TDpMO8w6zDssOiw7rDqsO2w6bDvsOuw7vKfDezu8r8P7O3ygwwc7fKjDhzt8pMNHOxzW4fAOR3Q4ssNRHY7ucEyHj3X4eIdPdPhkh091+HSHz3T4bIfPdfh8hy90+GKHL3X4coevdPhqh691+HqHYzt8o8M3O3yrw7c7fKfDdzt8r8P3O/ygww87/KjDjzv8pMNPO/ysw887/KLDLzv8qsOvO/ymw287/K7D7zv8ocMfO/ypw587/KXDXzv8rcPfO/yjwz87/KvDvzv8p8N/O/yvwyE9jtPj0B7H7XG8HsfvcYIeJ+xxoh4n7nGSHiftcbIeJ+9xih6n7HGqHqfucZoep+1xuh6n73GGHmfscaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGeHuftcb4e5+9xgR4X7HGhHhfucZEeF+1xsR4X73GJHpfscake6XHpHpfpcdkel+tx+R5X6HHFHlfqceUeV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf0eN+hxwx436nHjHjfpcdMeN+tx8x636HHLHrfqceset+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/o8cgej+rx6B6P6fHYHo/r8fgeT+jxxB5P6vHkHu3xlB5P7fG0Hk/v8Ywez+zxrB7P7vGcHs/t8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHu/ucdBj0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj3+M9Pd7b43093t/jAz0+2ONDPT7c4yM9PtrjsB6H9ziix5E9jupxdI9j/h8N5/zE9wEw6aRtmtq2rad2att2art9itS2bbv9fmzUtpvaNpOb9967/2B/2J3d2Z3ZAT4xwCcH+NQAnx7gMwN8doDPDfD5Ab4wwBcH+NIAXx7gKwN8dYCvDfD1Ab4xwDcH+NYA3x7gOwN8d4DvDfD9AX4wwNED/HCAHw3w4wF+MsBPB/jZAD8f4BcD/HKAXw3w6wF+M8BvB/jdAL8f4A8D/HGAPw3w5wH+MsBfB/jbAH8f4B8D/HOAfw3w7wH+M8B/B/jfAMcMcOwAhwQ4NMBxAhw3wPECHBbg+AEOD3CCACcMcKIAJw5wkgAnDXCyACcPcIoApwxwqgCnDnCaAKcNcLoApw9whgBnDHCmAGcOcJYAZw1wtgBnD3COAOcMcK4A5w5wngDnDXC+AOcPcIEAFwxwoQAXDnCRABcNcLEAFw9wiQAJcMkAlwpw6QCXCXDZAJcLcPkAVwhwxQBXCnDlAFcJcNUARwS4WoCrB7hGgGsGuFaAawe4ToDrBrhegOsHuEGAGwa4UYAbB7hJgJsGuFmAmwe4RYBbBrhVgFsHuE2A2wa4XYDbB7hDgDsGuFOAOwe4S4C7BrhbgLsHuEeAewa4V4AjA9w7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD5AAzwhwBMDPCnAkwMcFeApAZ4a4GkBnh7gGQGeGeBZAZ4d4DkBnhvgeQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeA1AV4b4HUBXh/gDQHeGOBNAd4c4C0B3hrgbQHeHuAdAd4Z4F0B3h3gPQHeG+B9Ad4f4AMBPhjgQwE+HOAjAT4a4GMBDgIMhv9vbPkfbscBJgGmAWYB5gEWAZYBVgHWATYBtgF2AfYBPh7gEwE+GeBTAT4d4DMBPhvgcwE+H+ALAb4Y4EsBvhzgKwG+GuBrAb4e4BsBvhngWwG+HeA7Ab4b4HsBvh/gBwGODvDDAD8K8OMAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwvw9wD/CPDPAP8K8O8A/wnw3wD/C3BMgGMDHBLi0BDHCXHcEMcLcViI44c4PMQJQpwwxIlCnDjESUKcNMTJQpw8xClCnDLEqUKcOsRpQpw2xOlCnD7EGUKcMcSZQpw5xFlCnDXE2UKcPcQ5QpwzxLlCnDvEeUKcN8T5Qpw/xAVCXDDEhUJcOMRFQlw0xMVCXDzEJUIkxCVDXCrEpUNcJsRlQ1wuxOVDXCHEFUNcKcSVQ1wlxFVDHBHiaiGuHuIaIa4Z4lohrh3iOiGuG+J6Ia4f4gYhbhjiRiFuHOImIW4a4mYhbh7iFiFuGeJWIW4d4jYhbhvidiFuH+IOIe4Y4k4h7hziLiHuGuJuIe4e4h4h7hniXiGODHHvEPcJcd8Q9wtx/xAPCPHAEA8K8eAQDwnx0BAPC/HwEI8I8cgQjwrx6BCPCfHYEI8L8fgQDfGEEE8M8aQQTw5xVIinhHhqiKeFeHqIZ4R4ZohnhXh2iOeEeG6I54V4fogXhHhhiBeFeHGIl4R4aYiXhXh5iFeEeGWIV4V4dYjXhHhtiNeFeH2IN4R4Y4g3hXhziLeEeGuIt4V4e4h3hHhniHeFeHeI94R4b4j3hXh/iA+E+GCID4X4cIiPhPhoiI+FOAgxCDEMMQoxDjEJMQ0xCzEPsQixDLEKsQ6xCbENsQuxD/HxEJ8I8ckQnwrx6RCfCfHZEJ8L8fkQXwjxxRBfCvHlEF8J8dUQXwvx9RDfCPHNEN8K8e0Q3wnx3RDfC/H9ED8IcXSIH4b4UYgfh/hJiJ+G+FmIn4f4RYhfhvhViF+H+E2I34b4XYjfh/hDiD+G+FOIP4f4S4i/hvhbiL+H+EeIf4b4V4h/h/hPiP+G+F+IY0IcG+KQCIdGOE6E40Y4XoTDIhw/wuERThDhhBFOFOHEEU4S4aQRThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4RIREuGeFSES4d4TIRLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuGICFeLcPUI14hwzQjXinDtCNeJcN0I14tw/Qg3iHDDCDeKcOMIN4lw0wg3i3DzCLeIcMsIt4pw6wi3iXDbCLeLcPsId4hwxwh3inDnCHeJcNcId4tw9wj3iHDPCPeKcGSEe0e4T4T7RrhfhPtHeECEB0Z4UIQHR3hIhIdGeFiEh0d4RIRHRnhUhEdHeEyEx0Z4XITHR2iEJ0R4YoQnRXhyhKMiPCXCUyM8LcLTIzwjwjMjPCvCsyM8J8JzIzwvwvMjvCDCCyO8KMKLI7wkwksjvCzCyyO8IsIrI7wqwqsjvCbCayO8LsLrI7whwhsjvCnCmyO8JcJbI7wtwtsjvCPCOyO8K8K7I7wnwnsjvC/C+yN8IMIHI3wowocjfCTCRyN8LMJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2Ej0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYSjI/wwwo8i/DjCTyL8NMLPIvw8wi8i/DLCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcI/Ivwzwr8i/DvCfyL8N8L/IhwT4dgIh8Q4NMZxYhw3xvFiHBbj+DEOj3GCGCeMcaIYJ45xkhgnjXGyGCePcYoYp4xxqhinjnGaGKeNcboYp49xhhhnjHGmGGeOcZYYZ41xthhnj3GOGOeMca4Y545xnhjnjXG+GOePcYEYF4xxoRgXjnGRGBeNcbEYF49xiRiJcckYl4px6RiXiXHZGJeLcfkYV4hxxRhXinHlGFeJcdUYR8S4Woyrx7hGjGvGuFaMa8e4TozrxrhejOvHuEGMG8a4UYwbx7hJjJvGuFmMm8e4RYxbxrhVjFvHuE2M28a4XYzbx7hDjDvGuFOMO8e4S4y7xrhbjLvHuEeMe8a4V4wjY9w7xn1i3DfG/WLcP8YDYjwwxoNiPDjGQ2I8NMbDYjw8xiNiPDLGo2I8OsZjYjw2xuNiPD5GYzwhxhNjPCnGk2McFeMpMZ4a42kxnh7jGTGeGeNZMZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjjQzE+HOMjMT4a42MxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY3w8xidifDLGp2J8OsZnYnw2xudifD7GF2J8McaXYnw5xldifDXG12J8PcY3YnwzxrdifDvGd2J8N8b3Ynw/xg9iHB3jhzF+FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMf4T478x/hfjmBjHxjgkwaEJjpPguAmOl+CwBMdPcHiCEyQ4YYITJThxgpMkOGmCkyU4ZMiQUVMkOGWCUyU4dYLTJDhtgtMlOH2CMyQ4Y4IzJThzgrMkOGuCsyU4e4JzJDhngnMlOHeC8yQ4b4LzJTh/ggskuGCCCyW4cIKLJLhogosluHiCSyRIgksmuFSCSye4TILLJrhcgssnuEKCKya4UoIrJ7hKgqsmOCLB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRIcmeDeCe6T4L4J7pfg/gkekOCBCR6U4MEJHpLgoQkeluDhCR6R4JEJHpXg0Qkek+CxCR6X4PEJmuAJCZ6Y4EkJnpzgqARPSfDUBE9L8PQEz0jwzATPSvDsBM9J8NwEz0vw/AQvSPDCBC9K8OIEL0nw0gQvS/DyBK9I8MoEr0rw6gSvSfDaBK9L8PoEb0jwxgRvSvDmBG9J8NYEb0vw9gTvSPDOBO9K8O4E70nw3gTvS/D+BB9I8MEEH0rw4QQfSfDRBB9LcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+DjCT6R4JMJPpXg0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4OgEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8ExyQ49n80nOLQFMdJcdwUx0txWIrjpzg8xQlSnDDFiVKcOMVJUpw0xclSnDzFKVKcMsWpUpw6xWlSnDbF6VKcPsUZUpwxxZlSnDnFWVKcNcXZUpw9xTlSnDPFuVKcO8V5Upw3xflSnD/FBVJcMMWFUlw4xUVSXDTFxVJcPMUlUiTFJVNcKsWlU1wmxWVTXC7F5VNcIcUVU1wpxZVTXCXFVVMckeJqKa6e4hoprpniWimuneI6Ka6b4noprp/iBilumOJGKW6c4iYpbpriZilunuIWKW6Z4lYpbp3iNilum+J2KW6f4g4p7pjiTinunOIuKe6a4m4p7p7iHinumeJeKY5Mce8U90lx3xT3S3H/FA9I8cAUD0rx4BQPSfHQFA9L8fAUj0jxyBSPSvHoFI9J8dgUj0vx+BRN8YQUT0zxpBRPThn2/5oyT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTPGhFB9O8ZEUH03xsRQHKQYphilGKcYpJimmKWYp5ikWKZYpVinWKTYptil2KfYpPp7iEyk+meJTKT6d4jMpPpvicyk+n+ILKb6Y4kspvpziKym+muJrKb6e4hspvpniWym+neI7Kb6b4nspvp/iBymOTvHDFD9K8eMUP0nx0xQ/S/HzFL9I8csUv0rx6xS/SfHbFL9L8fsUf0jxxxR/SvHnFH9J8dcUf0vx9xT/SPHPFP9K8e8U/0nx3xT/S3FMimNTHJLh0AzHyXDcDMfLcFiG42c4PMMJMpwww4kynDjDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJcOMNFMlw0w8UyXDzDJTIkwyUzXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzHJHhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhmOzHDvDPfJcN8M98tw/wwPyPDADA/K8OAMD8nw0AwPy/DwDI/I8MgMj8rw6AyPyfDYDI/L8PgMzfCEDE/M8KQMT85wVIanZHhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52V4foYXZHhhhhdleHGGl2R4aYaXZXh5hldkeGWGV2V4dYbXZHhthtdleH2GN2R4Y4Y3ZXhzhrdkeGuGt2V4e4Z3ZHhnhndleHeG92R4b4b3ZXh/hg9k+GCGD2X4cIaPZPhoho9lOMgwyDDMMMowzjDJMM0wyzDPsMiwzLDKsM6wybDNsMuwz/DxDJ/I8MkMn8rw6QyfyfDZDJ/L8PkMX8jwxQxfyvDlDF/J8NUMX8vw9QzfyPDNDN/K8O0M38nw3Qzfy/D9DD/IcHSGH2b4UYYfZ/hJhp9m+FmGn2f4RYZfZvhVhl9n+E2G32b4XYbfZ/hDhj9m+FOGP2f4S4a/Zvhbhr9n+EeGf2b4V4Z/Z/hPhv9m+F+GYzIcm+GQHIfmOE6O4+Y4Xo7Dchw/x+E5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpcz9H+taZQL5rhQjgvnuEiOi+a4WI6L57hEjuS4ZI5L5bh0jsvkuGyOy+W4fI4r5LhijivluHKOq+S4ao4jclwtx9VzXCPHNXNcK8e1c1wnx3VzXC/H9XPcIMcNc9wox41z3CTHTXPcLMfNc9wixy1z3CrHrXPcJsdtc9wux+1z3CHHHXPcKcedc9wlx11z3C3H3XPcI8c9c9wrx5E57p3jPjnum+N+Oe6f4wE5HpjjQTkenOMhOR6a42E5Hp7jETkemeNROR6d4zE5HpvjcTken6M5npDjiTmelOPJOY7K8ZQcT83xtBxPz/GMHM/M8awcz87xnBzPzfG8HM/P8YIcL8zxohwvzvGSHC/N8bIcL8/xihyvzPGqHK/O8Zocr83xuhyvz/GGHG/M8aYcb87xlhxvzfG2HG/P8Y4c78zxrhzvzvGeHO/N8b4c78/xgRwfzPGhHB/O8ZEcH83xsRwHOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5Pp7jEzk+meNTOT6d4zM5Ppvjczk+n+MLOb6Y40s5vpzjKzm+muNrOb6e4xs5vpnjWzm+neM7Ob6b43s5vp/jBzmOzvHDHD/K8eMcP8nx0xw/y/HzHL/I8cscv8rx6xy/yfHbHL/L8fscf8jxxxx/yvHnHH/J8dccf8vx9xz/yPHPHP/K8e8c/8nx3xz/y3FMjmNzHFLg0ALHKXDcAscrcFiB4xc4vMAJCpywwIkKnLjASQqctMDJCpy8wCkKnLLAqQqcusBpCpy2wOkKnL7AGQqcscCZCpy5wFkKnLXA2QqcvcA5CpyzwLkKnLvAeQqct8D5Cpy/wAUKXLDAhQpcuMBFCly0wMUKXLzAJQqkwCULXKrApQtcpsBlC1yuwOULXKHAFQtcqcCVC1ylwFULHFHgagWuXuAaBa5Z4FoFrl3gOgWuW+B6Ba5f4AYFbljgRgVuXOAmBW5a4GYFbl7gFgVuWeBWBW5d4DYFblvgdgVuX+AOBe5Y4E4F7lzgLgXuWuBuBe5e4B4F7lngXgWOLHDvAvcpcN8C9ytw/wIPKPDAAg8q8OACDynw0AIPK/DwAo8oRo/8/9+4Rxd4TIHHFnhcgccXaIEnFHhigScVeHKBowo8pcBTCzytwNMLPKPAMws8q8CzCzynwHMLPK/A8wu8oMALC7yowIsLvKTASwu8rMDLC7yiwCsLvKrAqwu8psBrC7yuwOsLvKHAGwu8qcCbC7ylwFsLvK3A2wu8o8A7C7yrwLsLvKfAewu8r8D7C3ygwAcLfKjAhwt8pMBHC3yswEGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgaML/LDAjwr8uMBPCvy0wM8K/LzALwr8ssCvCvy6wG8K/LbA7wr8vsAfCvyxwJ8K/LnAXwr8tcDfCvy9wD8K/LPAvwr8u8B/Cvy3wP8KHFPg2AKHlDi0xHFKHLfE8UocVuL4JQ4vcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEilxyRKXKnHpEpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJHlLhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWuFWJW5e4TYnblrhdiduXuEOJO5a4U4k7l7hLibuWuFuJu5e4R4l7lrhXiSNL3LvEfUrct8T9Sty/xANKPLDEg0o8uMRDSjy0xMNKPLzEI0o8ssSjSjy6xGNKPLbE40o8vkRLPKHEE0s8qcSTSxxV4iklnlriaSWeXuIZJZ5Z4lklnl3iOSWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeJVJV5d4jUlXlvidSVeX+INJd5Y4k0l3lziLSXeWuJtJd5e4h0l3lniXSXeXeI9Jd5b4n0l3l/iAyU+WOJDJT5c4iMlPlriYyUOSgxKDEuMSoxLTEpMS8xKzEssSixLrEqsS2xKbEvsSuxLfLzEJ0p8ssSnSny6xGdKfLbE50p8vsQXSnyxxJdKfLnEV0p8tcTXSny9xDdKfLPEt0p8u8R3Sny3xPdKfL/ED0ocXeKHJX5U4sclflLipyV+VuLnJX5R4pclflXi1yV+U+K3JX5X4vcl/lDijyX+VOLPJf5S4q8l/lbi7yX+UeKfJf5V4t8l/lPivyX+V+KYEseWOKTCoRWOU+G4FY5X4bAKx69weIUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1RIhUtWuFSFS1e4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWOKLC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSocWeHeFe5T4b4V7lfh/hUeUOGBFR5U4cEVHlLhoRUeVuHhFR5R4ZEVHlXh0RUeU+GxFR5X4fEVWuEJFZ5Y4UkVnlzhqApPqfDUCk+r8PQKz6jwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+rcFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+HjFT5R4ZMVPlXh0xU+U+GzFT5X4fMVvlDhixW+VOHL1f/dwoa8WuFrFb5e4RsVvlnhWxW+XeE7Fb5b4XsVvl/hBxWOrvDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BMhWP/B3eNQ2scp8ZxaxyvxmE1jl/j8BonqHHCGieqceIaJ6lx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnHmGmepcdYaZ6tx9hrnqHHOGueqce4a56lx3hrnq3H+GheoccEaF6px4RoXqXHRGhercfEal6iRGpescakal65xmRqXrXG5GpevcYUaV6xxpRpXrnGVGletcUSNq9W4eo1r1LhmjWvVuHaN69S4bo3r1bh+jRvUuGGNG9W4cY2b1LhpjZvVuHmNW9S4ZY1b1bh1jdvUuG2N29W4fY071LhjjTvVuHONu9S4a4271bh7jXvUuGeNe9U4ssa9a9ynxn1r3K/G/Ws8oMYDazyoxoNrPKTGQ2s8rMbDazyixiNrPKrGo2s8psZjazyuxuNrtMYTajyxxpNqPLnGUTWeUuOpNZ5W4+k1nlHjmTWeVePZNZ5T47k1nlfj+TVeUOOFNV5U48U1XlLjpTVeVuPlNV5R45U1XlXj1TVeU+O1NV5X4/U13lDjjTXeVOPNNd5S46013lbj7TXeUeOdNd5V49013lPjvTXeV+P9NT5Q44M1PlTjwzU+UuOjNT5W46DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7GvsbHa3yixidrfKrGp2t8psZna3yuxudrfKHGF2t8qcaXa3ylxldrfK3G12t8o8Y3a3yrxrdrfKfGd2t8r8b3a/ygxtE1fljjRzV+XOMnNX5a42c1fl7jFzV+WeNXNX5d4zc1flvjdzV+X+MPNf5Y4081/lzjLzX+WuNvNf5e4x81/lnjXzX+XeM/Nf5b4381jqlxbI1DGhza4DgNjtvgeA0Oa3D8Boc3OEGDEzY4UYMTNzhJg5M2OFmDkzc4RYNTNjhVg1M3OE2D0zY4XYPTNzhDgzM2OFODMzc4S4OzNjhbg7M3OEeDczY4V4NzNzhPg/M2OF+D8ze4QIMLNrhQgws3uEiDiza4WIOLN7hEgzS4ZINLNbh0g8s0uGyDyzW4fIMrNLhigys1uHKDqzS4aoMjGlytwdUbXKPBNRtcq8G1G1ynwXUbXK/B9RvcoMENG9yowY0b3KTBTRvcrMHNG9yiwS0b3KrBrRvcpsFtG9yuwe0b3KHBHRvcqcGdG9ylwV0b3K3B3Rvco8E9G9yrwZEN7t3gPg3u2+B+De7f4AENHtjgQQ0e3OAhDR7a4GENHt7gEQ0e2eBRDR7d4DENHtvgcQ0e36ANntDgiQ2e1ODJDY5q8JQGT23wtAZPb/CMBs9s8KwGz27wnAbPbfC8Bs9v8IIGL2zwogYvbvCSBi9t8LIGL2/wigavbPCqBq9u8JoGr23wugavb/CGBm9s8KYGb27wlgZvbfC2Bm9v8I4G72zwrgbvbvCeBu9t8L4G72/wgQYfbPChBh9u8JEGH23wsQYHDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12DfYNPt7gEw0+2eBTDT7d4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw2ObvDDBj9q8OMGP2nw0wY/a/DzBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wb/a3BMg2MbHNLi0BbHaXHcFsdrcViL47c4vMUJWpywxYlanLjFSVqctMXJWpy8xSlanLLFqVqcusVpWpy2xelanL7FGVqcscWZWpy5xVlanLXF2VqcvcU5WpyzxblanLvFeVqct8X5Wpy/xQVaXLDFhVpcuMVFWly0xcVaXLzFJVqkxSVbXKrFpVtcpsVlW1yuxeVbXKHFFVtcqcWVW1ylxVVbHNHiai2u3uIaLa7Z4lotrt3iOi2u2+J6La7f4gYtbtjiRi1u3OImLW7a4mYtbt7iFi1u2eJWLW7d4jYtbtvidi1u3+IOLe7Y4k4t7tziLi3u2uJuLe7e4h4t7tniXi2ObHHvFvdpcd8W92tx/xYPaPHAFg9q8eAWD2nx0BYPa/HwFo9o8cgWj2rx6BaPafHYFo9r8fgWbfGEFk9s8aQWT25xVIuntHhqi6e1eHqLZ7R4ZotntXh2i+e0eG6L57V4fosXtHhhixe1eHGLl7R4aYuXtXh5i1e0eGWLV7V4dYvXtHhti9e1eH2LN7R4Y4s3tXhzi7e0eGuLt7V4e4t3tHhni3e1eHeL97R4b4v3tXh/iw+0+GCLD7X4cIuPtPhoi4+1OGgxaDFsMWoxbjFpMW0xazFvsWixbLFqsW6xabFtsWuxb/HxFp9o8ckWn2rx6RafafHZFp9r8fkWX2jxxRZfavHlFl9p8dUWX2vx9RbfaPHNFt9q8e0W32nx3Rbfa/H9Fj9ocXSLH7b4UYsft/hJi5+2+FmLn7f4RYtftvhVi1+3+E2L37b4XYvft/hDiz+2+FOLP7f4S4u/tvhbi7+3+EeLf7b4V4t/t/hPi/+2+F+LY1oc2+KQDod2OE6H43Y4XofDOhy/w+EdTtDhhB1O1OHEHU7S4aQdTtbh5B1O0eGUHU7V4dQdTtPhtB1O1+H0Hc7Q4YwdztThzB3O0uGsHc7W4ewdztHhnB3O1eHcHc7T4bwdztfh/B0u0OGCHS7U4cIdLtLhoh0u1uHiHS7RIR0u2eFSHS7d4TIdLtvhch0u3+EKHa7Y4UodrtzhKh2u2uGIDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcGSHe3e4T4f7drhfh/t3eECHB3Z4UIcHd3hIh4d2eFiHh3d4RIdHdnhUh0d3eEyHx3Z4XIfHd2iHJ3R4YocndXhyh6M6PKXDUzs8rcPTOzyjwzM7PKvDszs8p8NzOzyvw/M7vKDDCzu8qMOLO7ykw0s7vKzDyzu8osMrO7yqw6s7vKbDazu8rsPrO7yhwxs7vKnDmzu8pcNbO7ytw9s7vKPDOzu8q8O7O7ynw3s7vK/D+zt8oMMHO3yow4c7fKTDRzt8rMNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh32Hj3f4RIdPdvhUh093+EyHz3b4XIfPd/hChy92+FKHL3f4Soevdvhah693+EaHb3b4Vodvd/hOh+92+F6H73f4QYejO/yww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/LXD3zr8vcM/Ovyzw786/LvDfzr8t8P/OhzT4dgOh/Q4tMdxehy3x/F6HNbj+D0O73GCHifscaIeJ+5xkh4n7XGyHifvcYoep+xxqh6n7nGaHqftcboep+9xhh5n7HGmHmfucZYeZ+1xth5n73GOHufsca4e5+5xnh7n7XG+HufvcYEeF+xxoR4X7nGRHhftcbEeF+9xiR7pcckel+px6R6X6XHZHpfrcfkeV+hxxR5X6nHlHlfpcdUeR/S4Wo+r97hGj2v2uFaPa/e4To/r9rhej+v3uEGPG/a4UY8b97hJj5v2uFmPm/e4RY9b9rhVj1v3uE2P2/a4XY/b97hDjzv2uFOPO/e4S4+79rhbj7v3uEePe/a4V48je9y7x3163LfH/Xrcv8cDejywx4N6PLjHQ3o8tMfDejy8xyN6PLLHo3o8usdjejy2x+N6PL5HezyhxxN7PKnHk3sc1eMpPZ7a42k9nt7jGT2e2eNZPZ7d4zk9ntvjeT2e3+MFPV7Y40U9Xtwz4pIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHu/u8Z4e7+3xvh7v7/GBHh/s8aEeH+7xkR4f7fGxHgc9/p8AAAD//3WQxnk=") 857.42073ms ago: executing program 1 (id=857): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) unshare(0xe020600) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af04, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x1, 0x0, 0x0, 0x0}) 856.406476ms ago: executing program 4 (id=858): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) listen(r1, 0x0) socket(0x1e, 0x0, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 735.44672ms ago: executing program 1 (id=859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0xbc, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @empty}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x5, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @dev}}}]}]}, 0xbc}}, 0x0) 592.751675ms ago: executing program 1 (id=860): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x4, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000100)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00'}, 0x90) 482.309553ms ago: executing program 1 (id=861): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x2a0, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 188.325595ms ago: executing program 2 (id=862): creat(&(0x7f0000000300)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x7fff) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)={0x24, 0x1e, 0x89d7702924ac5e99, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x24}], 0x1}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x21000e, &(0x7f0000000080), 0x1, 0x4f4, &(0x7f0000000540)="$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") 137.676804ms ago: executing program 1 (id=863): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x45, 0x2, 0x0, "0ba7dfad1ca5aebd0535078d0026d174932d4600"}) 0s ago: executing program 1 (id=864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xc}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1326 audit(1719380821.297:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5535 comm="syz.2.138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f130f975ae9 code=0x0 [ 85.732844][ T5539] loop0: detected capacity change from 0 to 256 [ 85.839431][ T5539] FAT-fs (loop0): Directory bread(block 64) failed [ 85.850270][ T5538] loop2: detected capacity change from 0 to 4096 [ 85.855426][ T5539] FAT-fs (loop0): Directory bread(block 65) failed [ 85.872078][ T5538] ntfs3: Unknown parameter 'appraise' [ 85.889257][ T5539] FAT-fs (loop0): Directory bread(block 66) failed [ 85.916818][ T5539] FAT-fs (loop0): Directory bread(block 67) failed [ 85.954987][ T5539] FAT-fs (loop0): Directory bread(block 68) failed [ 85.982744][ T5539] FAT-fs (loop0): Directory bread(block 69) failed [ 86.016461][ T5539] FAT-fs (loop0): Directory bread(block 70) failed [ 86.046792][ T5539] FAT-fs (loop0): Directory bread(block 71) failed [ 86.067834][ T5539] FAT-fs (loop0): Directory bread(block 72) failed [ 86.096410][ T5539] FAT-fs (loop0): Directory bread(block 73) failed [ 86.148316][ T5538] loop2: detected capacity change from 0 to 4096 [ 86.185895][ T5538] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 86.294232][ T5538] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 86.528087][ T5538] ntfs3: loop2: ino=1a, ntfs_sync_fs failed, -22. [ 86.545943][ T5538] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 86.879937][ T5554] loop3: detected capacity change from 0 to 2048 [ 87.022137][ T5554] loop3: p3 < > p4 < > [ 87.037938][ T5554] loop3: partition table partially beyond EOD, truncated [ 87.053275][ T5554] loop3: p3 start 4284289 is beyond EOD, truncated [ 87.215598][ T5561] loop2: detected capacity change from 0 to 1024 [ 87.325168][ T5561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.929727][ T5080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.201699][ T5559] loop0: detected capacity change from 0 to 32768 [ 88.250138][ T5559] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.393039][ T5583] loop2: detected capacity change from 0 to 2048 [ 88.403245][ T5583] EXT4-fs: Ignoring removed orlov option [ 88.417346][ T5081] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 88.451515][ T5559] XFS (loop0): Ending clean mount [ 88.452533][ T5583] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.537760][ T5583] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.581862][ T5583] EXT4-fs (loop2): Remounting filesystem read-only [ 88.591997][ T5583] overlayfs: failed to set uuid (bus/file1, err=-5); falling back to uuid=null. [ 88.616155][ T5088] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 88.637295][ T5081] usb 4-1: Using ep0 maxpacket: 8 [ 88.659952][ T5081] usb 4-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 88.702826][ T5081] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 88.724588][ T5081] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.762893][ T29] audit: type=1326 audit(1719380824.477:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5591 comm="syz.1.157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f53f75ae9 code=0x0 [ 88.793500][ T5080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.805896][ T5081] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 88.829813][ T5594] loop4: detected capacity change from 0 to 2048 [ 88.844371][ T5081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.852986][ T5081] usb 4-1: Product: syz [ 88.857290][ T5081] usb 4-1: Manufacturer: syz [ 88.862016][ T5081] usb 4-1: SerialNumber: syz [ 88.904169][ T5081] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 88.923161][ T5081] cdc_ncm 4-1:1.0: bind() failure [ 88.999555][ T5594] NILFS (loop4): corrupt root inode [ 89.255322][ T8] usb 4-1: USB disconnect, device number 3 [ 89.488548][ T5601] loop2: detected capacity change from 0 to 4096 [ 89.489038][ T5610] overlayfs: failed to resolve './file1': -2 [ 89.751389][ T5612] loop0: detected capacity change from 0 to 1024 [ 89.802123][ T5612] hfsplus: xattr search failed [ 90.113332][ T5612] hfsplus: b-tree write err: -5, ino 4 [ 90.489956][ T29] audit: type=1800 audit(1719380826.217:8): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.160" name="bus" dev="loop2" ino=33 res=0 errno=0 [ 90.719710][ T930] kernel write not supported for file [eventfd] (pid: 930 comm: kworker/1:2) [ 90.852223][ T5626] loop0: detected capacity change from 0 to 4096 [ 90.976312][ T5631] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.229145][ T5635] loop3: detected capacity change from 0 to 1024 [ 91.240363][ T5637] loop2: detected capacity change from 0 to 256 [ 91.249028][ T5635] hfsplus: unable to parse mount options [ 91.292877][ T5637] FAT-fs (loop2): Directory bread(block 64) failed [ 91.300984][ T930] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.393156][ T5637] FAT-fs (loop2): Directory bread(block 65) failed [ 91.406373][ T5637] FAT-fs (loop2): Directory bread(block 66) failed [ 91.430905][ T5637] FAT-fs (loop2): Directory bread(block 67) failed [ 91.496013][ T5637] FAT-fs (loop2): Directory bread(block 68) failed [ 91.747633][ T5637] FAT-fs (loop2): Directory bread(block 69) failed [ 91.790770][ T5637] FAT-fs (loop2): Directory bread(block 70) failed [ 91.832839][ T5637] FAT-fs (loop2): Directory bread(block 71) failed [ 91.874249][ T5637] FAT-fs (loop2): Directory bread(block 72) failed [ 91.919012][ T5637] FAT-fs (loop2): Directory bread(block 73) failed [ 92.169132][ T5635] loop3: detected capacity change from 0 to 8192 [ 92.243597][ T5635] REISERFS warning (device loop3): super-6513 reiserfs_parse_options: quotafile must be on filesystem root. [ 92.288562][ T930] usb 5-1: Using ep0 maxpacket: 8 [ 92.341065][ T930] usb 5-1: config 0 has no interfaces? [ 92.368849][ T930] usb 5-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.40 [ 92.392794][ T930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.417389][ T930] usb 5-1: Product: syz [ 92.418408][ T5649] overlayfs: failed to resolve './file1': -2 [ 92.423513][ T930] usb 5-1: Manufacturer: syz [ 92.477356][ T930] usb 5-1: SerialNumber: syz [ 92.512349][ T930] usb 5-1: config 0 descriptor?? [ 92.720663][ T29] audit: type=1800 audit(1719380828.437:9): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.180" name="bus" dev="sda1" ino=1980 res=0 errno=0 [ 93.517948][ T9] usb 5-1: USB disconnect, device number 3 [ 93.658645][ T5657] loop0: detected capacity change from 0 to 2048 [ 93.667539][ T5662] loop3: detected capacity change from 0 to 2048 [ 93.677021][ T930] kernel write not supported for file [eventfd] (pid: 930 comm: kworker/1:2) [ 93.698815][ T5657] loop0: p3 < > p4 < > [ 93.703045][ T5657] loop0: partition table partially beyond EOD, truncated [ 93.710649][ T5657] loop0: p3 start 4284289 is beyond EOD, truncated [ 93.764232][ T5662] NILFS (loop3): corrupt root inode [ 93.820955][ T5668] loop2: detected capacity change from 0 to 1024 [ 93.935392][ T5668] hfsplus: xattr search failed [ 93.965344][ T5668] hfsplus: b-tree write err: -5, ino 4 [ 94.127317][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.467605][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 94.487939][ T25] usb 1-1: config 1 has an invalid descriptor of length 181, skipping remainder of the config [ 94.505242][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 94.516322][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.535196][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.544745][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.569934][ T25] usb 1-1: Product: syz [ 94.617575][ T25] usb 1-1: Manufacturer: syz [ 94.655312][ T25] usb 1-1: SerialNumber: syz [ 94.792139][ T25] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 94.811306][ T25] cdc_ncm 1-1:1.0: bind() failure [ 95.297941][ T5674] loop3: detected capacity change from 0 to 32768 [ 95.438508][ T5688] pim6reg1: entered promiscuous mode [ 95.439687][ T25] usb 1-1: USB disconnect, device number 2 [ 95.443834][ T5688] pim6reg1: entered allmulticast mode [ 95.887558][ T5695] loop2: detected capacity change from 0 to 1024 [ 96.076464][ T5695] ax25_connect(): syz.2.195 uses autobind, please contact jreuter@yaina.de [ 96.804917][ T5721] loop4: detected capacity change from 0 to 256 [ 96.818441][ T5721] exfat: Deprecated parameter 'utf8' [ 96.823954][ T5721] exfat: Deprecated parameter 'namecase' [ 96.831424][ T5721] exfat: Deprecated parameter 'namecase' [ 96.838150][ T5721] exfat: Deprecated parameter 'utf8' [ 96.843586][ T5721] exfat: Deprecated parameter 'utf8' [ 97.388752][ T5721] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 97.488142][ T5716] loop3: detected capacity change from 0 to 1764 [ 97.496759][ T5716] iso9660: Unknown parameter 'ÿ0xffffffffffffffffx¢óÞzûO*µLðÝäEÙlíVµZ' [ 97.534502][ T25] kernel write not supported for file [eventfd] (pid: 25 comm: kworker/1:0) [ 98.004421][ T5731] loop4: detected capacity change from 0 to 4096 [ 98.112427][ T5735] loop0: detected capacity change from 0 to 2048 [ 98.160632][ T5735] EXT4-fs: Ignoring removed orlov option [ 98.236558][ T29] audit: type=1800 audit(1719380833.957:10): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.208" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 98.239763][ T5735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.345384][ T5735] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 98.385203][ T5735] EXT4-fs (loop0): Remounting filesystem read-only [ 98.401617][ T5735] overlayfs: failed to set uuid (bus/file1, err=-5); falling back to uuid=null. [ 98.713940][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.732701][ T29] audit: type=1326 audit(1719380834.457:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5751 comm="syz.3.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f83a6975ae9 code=0x0 [ 98.834594][ T5732] loop2: detected capacity change from 0 to 32768 [ 99.190663][ T5759] loop4: detected capacity change from 0 to 4096 [ 99.361391][ T5760] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 99.647980][ T25] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.675749][ T5762] loop0: detected capacity change from 0 to 256 [ 99.755288][ T5762] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 99.860186][ T25] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 99.875762][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.905066][ T25] usb 2-1: config 0 descriptor?? [ 100.943920][ T5758] deleting an unspecified loop device is not supported. [ 101.188836][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 101.215121][ T5774] loop0: detected capacity change from 0 to 4096 [ 101.299711][ T25] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 101.333179][ T25] [drm] Initialized udl on minor 2 [ 101.347413][ T25] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.372330][ T25] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 101.401512][ T930] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 101.407455][ T29] audit: type=1800 audit(1719380837.127:12): pid=5774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.223" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 101.420275][ T25] usb 2-1: USB disconnect, device number 2 [ 101.449093][ T930] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 101.475889][ T5778] loop2: detected capacity change from 0 to 4096 [ 101.532971][ T5778] NILFS (loop2): invalid segment: Checksum error in segment payload [ 101.562044][ T5778] NILFS (loop2): trying rollback from an earlier position [ 101.654199][ T5778] NILFS (loop2): recovery complete [ 101.671431][ T5781] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.696832][ T5766] loop4: detected capacity change from 0 to 32768 [ 101.900750][ T5766] bcachefs (/dev/loop4): error validating superblock: Invalid option block_size: must be a power of two [ 104.042580][ T5800] loop2: detected capacity change from 0 to 2048 [ 104.156655][ T5800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.185480][ T5800] ext4 filesystem being mounted at /root/syzkaller.TXc8Rq/49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.297609][ T5800] fs-verity: sha512 using implementation "sha512-avx2" [ 104.333125][ T5812] loop3: detected capacity change from 0 to 4096 [ 104.353204][ T5811] loop4: detected capacity change from 0 to 1764 [ 104.371823][ T5811] iso9660: Unknown parameter 'ÿ0xffffffffffffffffx¢óÞzûO*µLðÝäEÙlíVµZ' [ 104.408056][ T5812] NILFS (loop3): invalid segment: Checksum error in segment payload [ 104.433198][ T5812] NILFS (loop3): trying rollback from an earlier position [ 104.469452][ T5404] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 104.523205][ T5812] NILFS (loop3): recovery complete [ 104.544046][ T5800] input: syz1 as /devices/virtual/input/input5 [ 104.585704][ T5825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.626406][ T5826] netlink: 'syz.1.240': attribute type 10 has an invalid length. [ 104.757895][ T5826] team0: Port device netdevsim0 added [ 105.231704][ T5838] loop3: detected capacity change from 0 to 256 [ 105.276030][ T5838] FAT-fs (loop3): Directory bread(block 64) failed [ 105.296902][ T5838] FAT-fs (loop3): Directory bread(block 65) failed [ 105.317578][ T5838] FAT-fs (loop3): Directory bread(block 66) failed [ 105.335897][ T5080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.345125][ T5838] FAT-fs (loop3): Directory bread(block 67) failed [ 105.352018][ T5838] FAT-fs (loop3): Directory bread(block 68) failed [ 105.359860][ T5838] FAT-fs (loop3): Directory bread(block 69) failed [ 105.366487][ T5838] FAT-fs (loop3): Directory bread(block 70) failed [ 105.376015][ T5838] FAT-fs (loop3): Directory bread(block 71) failed [ 105.408514][ T5838] FAT-fs (loop3): Directory bread(block 72) failed [ 105.415326][ T5838] FAT-fs (loop3): Directory bread(block 73) failed [ 106.238549][ T5827] loop0: detected capacity change from 0 to 32768 [ 106.282826][ T5827] bcachefs (/dev/loop0): error validating superblock: Invalid option block_size: must be a power of two [ 107.337940][ T5861] netlink: 'syz.1.254': attribute type 10 has an invalid length. [ 109.211864][ T5879] loop4: detected capacity change from 0 to 1024 [ 109.246439][ T5879] EXT4-fs: Ignoring removed orlov option [ 109.295159][ T5879] EXT4-fs: Ignoring removed nomblk_io_submit option [ 109.373263][ T5853] infiniband syz1: set down [ 109.385432][ T930] infiniband syz1: ib_query_port failed (-19) [ 109.415441][ T5879] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.432380][ T5853] infiniband syz1: added syzkaller0 [ 109.540519][ T5853] RDS/IB: syz1: added [ 109.545969][ T5853] smc: adding ib device syz1 with port count 1 [ 109.552549][ T5081] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 109.560462][ T5853] smc: ib device syz1 port 1 has pnetid [ 109.575303][ T5853] smc: removing ib device syz1 [ 109.797963][ T5081] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 109.802660][ T930] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.807049][ T5081] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.397347][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 110.404175][ T5081] usb 4-1: config 0 descriptor?? [ 110.407647][ T930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.435418][ T930] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.480541][ T930] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 110.498616][ T5853] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 110.505681][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.525797][ T930] usb 5-1: config 0 descriptor?? [ 110.537719][ T930] usb 5-1: bad CDC descriptors [ 111.184819][ T5081] [drm:udl_init] *ERROR* Selecting channel failed [ 111.492673][ T5911] netlink: 'syz.2.271': attribute type 10 has an invalid length. [ 111.583397][ T5911] team0: Port device netdevsim0 added [ 111.593662][ T5081] [drm] Initialized udl 0.0.1 20120220 for 4-1:0.0 on minor 2 [ 111.624525][ T5081] [drm] Initialized udl on minor 2 [ 111.644249][ T5081] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.657821][ T5081] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 111.675689][ T5915] netlink: 'syz.1.273': attribute type 4 has an invalid length. [ 111.686984][ T5129] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.707341][ T5081] usb 4-1: USB disconnect, device number 4 [ 111.729461][ T5129] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 113.434468][ T5925] Bluetooth: MGMT ver 1.22 [ 113.637546][ T5081] usb 5-1: USB disconnect, device number 4 [ 113.777398][ T5089] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.855829][ T5936] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.083996][ T5947] loop0: detected capacity change from 0 to 512 [ 115.333063][ T5947] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 115.412710][ T5930] loop3: detected capacity change from 0 to 32768 [ 116.518502][ T5945] infiniband syz1: set down [ 116.567399][ T5945] infiniband syz1: added syzkaller0 [ 116.778744][ T5945] RDS/IB: syz1: added [ 116.785945][ T5945] smc: adding ib device syz1 with port count 1 [ 116.803545][ T5945] smc: ib device syz1 port 1 has pnetid [ 116.813820][ T5965] loop0: detected capacity change from 0 to 1024 [ 116.825042][ T5965] EXT4-fs: Ignoring removed orlov option [ 116.830829][ T5965] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.862487][ T5965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.876048][ T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 116.876230][ T1102] smc: removing ib device syz1 [ 117.080434][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 117.136384][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.160127][ T5945] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 117.172115][ T25] usb 3-1: config 0 descriptor?? [ 117.247280][ T5134] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.467316][ T5134] usb 1-1: Using ep0 maxpacket: 32 [ 117.479106][ T5134] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.509139][ T5134] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 117.525221][ T5134] usb 1-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 117.535145][ T5134] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.545532][ T5134] usb 1-1: config 0 descriptor?? [ 117.553269][ T5134] usb 1-1: bad CDC descriptors [ 118.558520][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 118.583387][ T25] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 118.591122][ T25] [drm] Initialized udl on minor 2 [ 118.602207][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.627918][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 118.641936][ T5134] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 118.666698][ T25] usb 3-1: USB disconnect, device number 6 [ 118.673409][ T5134] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 118.694659][ T5134] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 118.920407][ T5992] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.557276][ T25] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 119.605696][ T5997] loop4: detected capacity change from 0 to 32768 [ 119.629829][ T5997] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.302 (5997) [ 119.704000][ T5997] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.715187][ T5997] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 119.724420][ T5997] BTRFS info (device loop4): using free-space-tree [ 119.803861][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 119.819044][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 119.842245][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 119.880376][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 119.907182][ T25] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 119.940341][ T25] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 119.957728][ T25] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 119.981708][ T25] usb 3-1: Product: syz [ 119.998732][ T25] usb 3-1: Manufacturer: syz [ 120.012290][ T25] usb 3-1: SerialNumber: syz [ 120.033586][ T25] usb 3-1: config 0 descriptor?? [ 120.045483][ T25] usb 3-1: NFC: intf ffff88802bc92000 id ffffffff8ec9a2a0 [ 120.138751][ T25] nfcmrvl 3-1:0.0: NFC: registered with nci successfully [ 120.235921][ T2914] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 120.253295][ T25] usb 3-1: USB disconnect, device number 7 [ 120.269345][ T25] usb 3-1: NFC: intf ffff88802bc92000 [ 120.341033][ T5089] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.558140][ T8] usb 1-1: USB disconnect, device number 3 [ 120.629083][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.650214][ T29] audit: type=1326 audit(1719380856.377:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6029 comm="syz.4.308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f94af975ae9 code=0x0 [ 121.548061][ T6036] Zero length message leads to an empty skb [ 121.842732][ T6050] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 121.849591][ T6050] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 121.862377][ T6050] vhci_hcd vhci_hcd.0: Device attached [ 121.872142][ T6059] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 121.998024][ T11] vhci_hcd: stop threads [ 122.003679][ T11] vhci_hcd: release socket [ 122.048281][ T11] vhci_hcd: disconnect device [ 122.067335][ T8] vhci_hcd: vhci_device speed not set [ 122.870705][ T6066] loop0: detected capacity change from 0 to 256 [ 122.909191][ T6063] can: request_module (can-proto-4) failed. [ 122.947611][ T6066] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ000000000000000000030x0000000000000000184467440737095516150xffffffffffffffffÿÿÿÿÿÿÿÿ0xffffffffffffffff0x0000000000000003' [ 123.438603][ T6056] loop4: detected capacity change from 0 to 32768 [ 123.515984][ T6056] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 123.661435][ T6056] XFS (loop4): Ending clean mount [ 123.716683][ T6056] XFS (loop4): Quotacheck needed: Please wait. [ 124.106482][ T6110] ebt_limit: overflow, try lower: 0/0 [ 124.152668][ T6056] XFS (loop4): Quotacheck: Done. [ 124.881122][ T5089] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 124.912473][ T6116] loop2: detected capacity change from 0 to 256 [ 124.941848][ T5090] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 124.954812][ T5090] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 124.963121][ T5090] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 124.980768][ T5090] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 124.994360][ T5090] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 124.997878][ T6116] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ000000000000000000030x0000000000000000184467440737095516150xffffffffffffffffÿÿÿÿÿÿÿÿ0xffffffffffffffff0x0000000000000003' [ 125.023200][ T5090] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 125.040353][ T6112] can: request_module (can-proto-4) failed. [ 125.111542][ T5097] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 125.684941][ T6117] chnl_net:caif_netlink_parms(): no params data found [ 125.909859][ T5081] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 126.085505][ T6155] ebt_limit: overflow, try lower: 0/0 [ 126.817517][ T5081] usb 2-1: Using ep0 maxpacket: 32 [ 126.824993][ T5081] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.838642][ T5081] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 126.853816][ T5081] usb 2-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 126.863244][ T5081] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.883129][ T6165] loop0: detected capacity change from 0 to 256 [ 126.912307][ T5081] usb 2-1: config 0 descriptor?? [ 126.918737][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.934281][ T6165] exfat: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ000000000000000000030x0000000000000000184467440737095516150xffffffffffffffffÿÿÿÿÿÿÿÿ0xffffffffffffffff0x0000000000000003' [ 126.950024][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.963056][ T29] audit: type=1804 audit(1719380862.687:14): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.357" name="/root/syzkaller.NuecJs/64/bus" dev="sda1" ino=1975 res=1 errno=0 [ 126.990143][ T5081] usb 2-1: bad CDC descriptors [ 127.004615][ T6117] bridge_slave_0: entered allmulticast mode [ 127.015231][ T6163] can: request_module (can-proto-4) failed. [ 127.019190][ T6117] bridge_slave_0: entered promiscuous mode [ 127.048172][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.055412][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.070844][ T6117] bridge_slave_1: entered allmulticast mode [ 127.075144][ T5097] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 127.088157][ T6117] bridge_slave_1: entered promiscuous mode [ 127.107455][ T5092] Bluetooth: hci6: command tx timeout [ 127.245426][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.287641][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.415120][ T6177] loop2: detected capacity change from 0 to 512 [ 127.456583][ T6117] team0: Port device team_slave_0 added [ 127.480410][ T6177] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 127.497576][ T6117] team0: Port device team_slave_1 added [ 127.529712][ T6177] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 127.586284][ T6177] EXT4-fs (loop2): 1 truncate cleaned up [ 127.625958][ T6177] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.680438][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.712119][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.738035][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.848259][ T29] audit: type=1800 audit(1719380863.547:15): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.361" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 127.849080][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.885075][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.898401][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.946199][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.137354][ T6177] loop2: detected capacity change from 512 to 64 [ 128.719131][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 128.812833][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 128.839391][ T6117] hsr_slave_0: entered promiscuous mode [ 128.855028][ T6117] hsr_slave_1: entered promiscuous mode [ 128.861963][ T6117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.879249][ T6117] Cannot create hsr debugfs directory [ 128.896302][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 128.919526][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 128.999687][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 129.021914][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 129.068856][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 129.120661][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 129.136272][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 129.151431][ T5080] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor: error -12 reading directory block [ 129.194795][ T5092] Bluetooth: hci6: command tx timeout [ 129.216047][ T6194] tipc: Trying to set illegal importance in message [ 129.392157][ T6117] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.413200][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 129.428888][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 129.504400][ T6117] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.535852][ T6200] loop4: detected capacity change from 0 to 64 [ 129.601259][ T6117] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.672950][ T5080] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.692619][ T5080] syz-executor (5080) used greatest stack depth: 18448 bytes left [ 129.795327][ T6117] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.934627][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.020321][ T5129] usb 2-1: USB disconnect, device number 3 [ 130.270364][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.880528][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.140517][ T5090] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 131.150505][ T5090] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 131.159414][ T5090] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 131.169719][ T5090] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 131.178054][ T5090] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 131.185606][ T5090] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 131.246876][ T6117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 131.267303][ T5092] Bluetooth: hci6: command tx timeout [ 131.280572][ T6117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 131.428857][ T1102] team0: Port device netdevsim0 removed [ 131.459785][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.467472][ T6216] loop0: detected capacity change from 0 to 64 [ 131.554315][ T6117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 131.629899][ T6117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 131.979165][ T5090] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.989396][ T5090] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.998822][ T5090] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.006700][ T5090] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.014422][ T5090] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.022080][ T5090] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.111645][ T6231] usb usb8: usbfs: process 6231 (syz.1.384) did not claim interface 0 before use [ 132.197585][ T6233] syz.1.386 (6233): attempted to duplicate a private mapping with mremap. This is not supported. [ 132.230499][ T6235] loop0: detected capacity change from 0 to 128 [ 132.245994][ T1102] bridge_slave_1: left allmulticast mode [ 132.266973][ T1102] bridge_slave_1: left promiscuous mode [ 132.278601][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.330639][ T1102] bridge_slave_0: left allmulticast mode [ 132.352878][ T1102] bridge_slave_0: left promiscuous mode [ 132.389978][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.176415][ T6244] loop0: detected capacity change from 0 to 32768 [ 133.203416][ T6244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.387 (6244) [ 133.235694][ T6244] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.257183][ T6244] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 133.270777][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.277254][ T5090] Bluetooth: hci0: command tx timeout [ 133.277280][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.290282][ T6244] BTRFS info (device loop0): using free-space-tree [ 133.351940][ T5090] Bluetooth: hci6: command tx timeout [ 133.505863][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.588046][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.611089][ T1102] bond0 (unregistering): Released all slaves [ 133.619189][ T5088] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.966361][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.033708][ T6208] chnl_net:caif_netlink_parms(): no params data found [ 134.067698][ T5090] Bluetooth: hci4: command tx timeout [ 134.306967][ T6273] loop0: detected capacity change from 0 to 1024 [ 134.569871][ T6117] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.601476][ T6280] loop1: detected capacity change from 32768 to 64 [ 134.647342][ T29] audit: type=1800 audit(1719380870.367:16): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.390" name="file1" dev="sda1" ino=1975 res=0 errno=0 [ 134.968809][ T6208] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.991141][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.013530][ T6208] bridge_slave_0: entered allmulticast mode [ 135.029389][ T6208] bridge_slave_0: entered promiscuous mode [ 135.044996][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.052139][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.122038][ T6208] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.141548][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.177538][ T6208] bridge_slave_1: entered allmulticast mode [ 135.215579][ T6208] bridge_slave_1: entered promiscuous mode [ 135.347469][ T5090] Bluetooth: hci0: command tx timeout [ 135.435011][ T1102] hsr_slave_0: left promiscuous mode [ 135.448078][ T1102] hsr_slave_1: left promiscuous mode [ 135.455024][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.463427][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.472456][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.480031][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.892656][ T1102] veth1_macvtap: left promiscuous mode [ 135.978105][ T1102] veth0_macvtap: left promiscuous mode [ 136.029858][ T1102] veth1_vlan: left promiscuous mode [ 136.068779][ T1102] veth0_vlan: left promiscuous mode [ 136.148590][ T5090] Bluetooth: hci4: command tx timeout [ 136.263777][ T6315] usb usb8: usbfs: process 6315 (syz.1.399) did not claim interface 0 before use [ 136.681243][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 136.725541][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 137.143909][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.151129][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.212975][ T6208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.254908][ T6228] chnl_net:caif_netlink_parms(): no params data found [ 137.284204][ T6208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.328460][ T6320] can: request_module (can-proto-4) failed. [ 137.427916][ T5090] Bluetooth: hci0: command tx timeout [ 137.446612][ T6208] team0: Port device team_slave_0 added [ 137.530557][ T6208] team0: Port device team_slave_1 added [ 137.673542][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.693615][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.772507][ T6208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.873902][ T6208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.888830][ T6208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.918502][ T6208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.008858][ T6228] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.016108][ T6228] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.024155][ T6228] bridge_slave_0: entered allmulticast mode [ 138.031998][ T6228] bridge_slave_0: entered promiscuous mode [ 138.089574][ T6228] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.099261][ T6228] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.106530][ T6228] bridge_slave_1: entered allmulticast mode [ 138.123804][ T6228] bridge_slave_1: entered promiscuous mode [ 138.240532][ T5090] Bluetooth: hci4: command tx timeout [ 138.251811][ T6208] hsr_slave_0: entered promiscuous mode [ 138.280013][ T6208] hsr_slave_1: entered promiscuous mode [ 138.356876][ T29] audit: type=1800 audit(1719380874.077:17): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.404" name="bus" dev="sda1" ino=1976 res=0 errno=0 [ 138.393612][ T6228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.506298][ T6228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.762841][ T6228] team0: Port device team_slave_0 added [ 138.799065][ T6228] team0: Port device team_slave_1 added [ 138.944809][ T1102] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.318415][ T1102] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.421828][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.469379][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.510838][ T5090] Bluetooth: hci0: command tx timeout [ 139.602515][ T6228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.755377][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.788985][ T1102] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.848113][ T6228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.855101][ T6228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.886874][ T6228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.992886][ T1102] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.192449][ T6228] hsr_slave_0: entered promiscuous mode [ 140.215199][ T6228] hsr_slave_1: entered promiscuous mode [ 140.236984][ T6228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.257835][ T6228] Cannot create hsr debugfs directory [ 140.318317][ T5090] Bluetooth: hci4: command tx timeout [ 140.346145][ T29] audit: type=1326 audit(1719380876.067:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f53f75ae9 code=0x7ffc0000 [ 140.368055][ T29] audit: type=1326 audit(1719380876.087:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f53f75ae9 code=0x7ffc0000 [ 140.391324][ T29] audit: type=1326 audit(1719380876.107:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f53f75ae9 code=0x7ffc0000 [ 140.423205][ T29] audit: type=1326 audit(1719380876.107:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f53f75ae9 code=0x7ffc0000 [ 140.469347][ T29] audit: type=1326 audit(1719380876.117:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f53f75ae9 code=0x7ffc0000 [ 140.491269][ T29] audit: type=1326 audit(1719380876.117:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f53f75ae9 code=0x7ffc0000 [ 140.514654][ T29] audit: type=1326 audit(1719380876.167:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f53f75ae9 code=0x7ffc0000 [ 140.600229][ T29] audit: type=1326 audit(1719380876.177:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f53f6cb67 code=0x7ffc0000 [ 140.666856][ T29] audit: type=1326 audit(1719380876.177:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f53f11539 code=0x7ffc0000 [ 140.694283][ T29] audit: type=1326 audit(1719380876.177:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6398 comm="syz.1.415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f53f6cb67 code=0x7ffc0000 [ 141.016699][ T6117] veth0_vlan: entered promiscuous mode [ 141.058718][ T1102] bridge_slave_1: left allmulticast mode [ 141.075686][ T1102] bridge_slave_1: left promiscuous mode [ 141.097170][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.158162][ T1102] bridge_slave_0: left allmulticast mode [ 141.187067][ T1102] bridge_slave_0: left promiscuous mode [ 141.208021][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.799807][ T6435] loop0: detected capacity change from 0 to 256 [ 142.920278][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.954331][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.975631][ T1102] bond0 (unregistering): Released all slaves [ 143.216480][ T6117] veth1_vlan: entered promiscuous mode [ 143.580151][ T6442] ebt_limit: overflow, try lower: 0/0 [ 144.304606][ T6117] veth0_macvtap: entered promiscuous mode [ 144.377351][ T6208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 144.391029][ T6208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 144.414211][ T6208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 144.424715][ T6446] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 144.462707][ T1102] hsr_slave_0: left promiscuous mode [ 144.486430][ T1102] hsr_slave_1: left promiscuous mode [ 144.623390][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.632543][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.642358][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.651206][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.893492][ T1102] veth1_macvtap: left promiscuous mode [ 144.906231][ T1102] veth0_macvtap: left promiscuous mode [ 144.919914][ T1102] veth1_vlan: left promiscuous mode [ 145.019919][ T1102] veth0_vlan: left promiscuous mode [ 145.928625][ T6459] loop0: detected capacity change from 0 to 256 [ 145.970171][ T6459] FAT-fs (loop0): Directory bread(block 64) failed [ 145.987682][ T6459] FAT-fs (loop0): Directory bread(block 65) failed [ 145.994525][ T6459] FAT-fs (loop0): Directory bread(block 66) failed [ 146.001603][ T6459] FAT-fs (loop0): Directory bread(block 67) failed [ 146.019705][ T6459] FAT-fs (loop0): Directory bread(block 68) failed [ 146.026331][ T6459] FAT-fs (loop0): Directory bread(block 69) failed [ 146.033526][ T6459] FAT-fs (loop0): Directory bread(block 70) failed [ 146.047025][ T6459] FAT-fs (loop0): Directory bread(block 71) failed [ 146.056296][ T6459] FAT-fs (loop0): Directory bread(block 72) failed [ 146.073852][ T6459] FAT-fs (loop0): Directory bread(block 73) failed [ 146.263201][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 146.263219][ T29] audit: type=1800 audit(1719380881.987:103): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.433" name="bus" dev="loop0" ino=1048682 res=0 errno=0 [ 146.596073][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 146.664991][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 148.207349][ T6475] openvswitch: netlink: Flow key attr not present in new flow. [ 148.211384][ T6117] veth1_macvtap: entered promiscuous mode [ 148.244079][ T6208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 148.455825][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.470523][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.481660][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.492428][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.502431][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.513195][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.523334][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.534325][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.547849][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.559233][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.570228][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.600214][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.627668][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.637827][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.649641][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.659642][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.670510][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.691049][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.732874][ T6117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.751339][ T6117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.763341][ T6117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.782520][ T6117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.030900][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.069919][ T6208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.080789][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.173662][ T6208] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.252339][ T29] audit: type=1804 audit(1719380884.977:104): pid=6486 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.441" name="/root/syzkaller.TnhWtf/103/bus" dev="sda1" ino=1979 res=1 errno=0 [ 149.328624][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.335791][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.373578][ T2885] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.426743][ T2885] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.435309][ T6228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.479054][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.486234][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.558643][ T6228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.599104][ T6228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.653904][ T6228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.696812][ T6510] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 149.703395][ T6510] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 149.716445][ T6208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.752863][ T6510] vhci_hcd vhci_hcd.0: Device attached [ 149.796509][ T6514] vhci_hcd: connection closed [ 149.804276][ T12] vhci_hcd: stop threads [ 149.818268][ T12] vhci_hcd: release socket [ 149.822731][ T12] vhci_hcd: disconnect device [ 150.026051][ T6228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.133191][ T6228] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.182548][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.189746][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.228354][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.235513][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.308730][ T6496] loop0: detected capacity change from 0 to 32768 [ 150.313101][ T6208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.322892][ T6496] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.442 (6496) [ 150.402035][ T6496] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.431862][ T6496] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 150.449756][ T6496] BTRFS info (device loop0): using free-space-tree [ 150.511289][ T6208] veth0_vlan: entered promiscuous mode [ 150.602760][ T6208] veth1_vlan: entered promiscuous mode [ 150.610757][ T29] audit: type=1800 audit(1719380886.337:105): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.447" name="file0" dev="sda1" ino=1985 res=0 errno=0 [ 150.634220][ T29] audit: type=1804 audit(1719380886.337:106): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.447" name="/root/syzkaller.3QmAxf/1/file0" dev="sda1" ino=1985 res=1 errno=0 [ 150.681137][ T6496] BTRFS info (device loop0): rebuilding free space tree [ 150.776974][ T6208] veth0_macvtap: entered promiscuous mode [ 150.810536][ T6533] kvm: emulating exchange as write [ 150.826117][ T6208] veth1_macvtap: entered promiscuous mode [ 150.910782][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.929812][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.957298][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.987397][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.024442][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.056504][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.092127][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.112969][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.134589][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.145501][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.167633][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.214752][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.238354][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.240809][ T5088] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.248213][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.248232][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.248243][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.248256][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.248274][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.248287][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.248301][ T6208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.248313][ T6208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.249900][ T6208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.412235][ T6208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.425482][ T6208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.447331][ T6208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.456068][ T6208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.511291][ T6228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.888720][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.896573][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.904886][ T6597] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 151.926920][ T29] audit: type=1804 audit(1719380887.647:107): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.453" name="/root/syzkaller.TnhWtf/109/file0" dev="sda1" ino=1982 res=1 errno=0 [ 152.719906][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.770001][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.835603][ T6228] veth0_vlan: entered promiscuous mode [ 153.863340][ T6228] veth1_vlan: entered promiscuous mode [ 153.941392][ T6228] veth0_macvtap: entered promiscuous mode [ 153.959288][ T6228] veth1_macvtap: entered promiscuous mode [ 154.002480][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.023444][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.044368][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.057333][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.068941][ T25] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.097257][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.110770][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.131762][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.157169][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.167026][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.204608][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.225481][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.246806][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.285189][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.304734][ T25] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 154.321897][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.351085][ T25] usb 3-1: config 0 descriptor?? [ 154.360008][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.417278][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.446091][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.488306][ T6660] fuse: Unknown parameter '0x000000000000000400000000000000000000' [ 154.489482][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.516978][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.528066][ T29] audit: type=1804 audit(1719380890.237:108): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.465" name="/root/syzkaller.TnhWtf/112/file0" dev="sda1" ino=1988 res=1 errno=0 [ 154.698132][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.098854][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.409507][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.450091][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.711430][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.724296][ T6228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.734950][ T6228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.425121][ T25] [drm:udl_init] *ERROR* Selecting channel failed [ 156.438585][ T6228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.510704][ T25] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 156.559409][ T6228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.579427][ T25] [drm] Initialized udl on minor 2 [ 156.597383][ T25] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.607152][ T6228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.629683][ T25] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 156.643147][ T5134] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 156.651339][ T6228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.681486][ T25] usb 3-1: USB disconnect, device number 8 [ 156.687723][ T5134] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 156.695669][ T6228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.718174][ T5134] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 156.789029][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.472'. [ 156.914209][ T2787] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.932423][ T2787] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.003796][ T6694] loop0: detected capacity change from 0 to 4096 [ 157.034104][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.063921][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.107285][ T6705] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 157.226127][ T6707] loop2: detected capacity change from 0 to 1024 [ 157.285769][ T6707] hfsplus: unable to find HFS+ superblock [ 157.617195][ T29] audit: type=1800 audit(1719380893.337:109): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.479" name="file0" dev="sda1" ino=1991 res=0 errno=0 [ 157.707401][ T29] audit: type=1804 audit(1719380893.367:110): pid=6722 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.479" name="/root/syzkaller.SbYpCD/3/file0" dev="sda1" ino=1991 res=1 errno=0 [ 157.893892][ T6730] loop4: detected capacity change from 0 to 1024 [ 158.016515][ T29] audit: type=1800 audit(1719380893.737:111): pid=6730 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.484" name="file1" dev="sda1" ino=1960 res=0 errno=0 [ 159.017370][ T5081] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 159.098799][ T6748] loop2: detected capacity change from 0 to 8192 [ 159.119093][ T6748] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.207373][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 159.230250][ T5081] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 159.247522][ T5081] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.261477][ T5081] usb 1-1: config 0 descriptor?? [ 159.410537][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 159.418944][ T25] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 159.437325][ T25] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.447510][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.465976][ T25] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.476787][ T6766] loop2: detected capacity change from 0 to 512 [ 159.480997][ T25] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.506495][ T25] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.534521][ T6766] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 159.537875][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.674050][ T29] audit: type=1800 audit(1719380895.377:112): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.497" name="bus" dev="sda1" ino=1987 res=0 errno=0 [ 159.730234][ T5081] [drm:udl_init] *ERROR* Selecting channel failed [ 159.766840][ T6777] loop2: detected capacity change from 0 to 16 [ 159.776665][ T5081] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 159.794413][ T25] usb 5-1: usb_control_msg returned -32 [ 159.807750][ T25] usbtmc 5-1:16.0: can't read capabilities [ 159.813640][ T5081] [drm] Initialized udl on minor 2 [ 159.852822][ T6777] erofs: (device loop2): mounted with root inode @ nid 36. [ 159.861098][ T5081] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 159.875032][ T5081] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 159.876323][ T29] audit: type=1800 audit(1719380895.597:113): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.499" name="file1" dev="sda1" ino=1996 res=0 errno=0 [ 159.893150][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 159.916690][ T5081] usb 1-1: USB disconnect, device number 4 [ 159.947268][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 160.161657][ T6780] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 160.168301][ T6780] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 160.224585][ T6780] vhci_hcd vhci_hcd.0: Device attached [ 160.260334][ T6783] vhci_hcd: connection closed [ 160.271980][ T6786] loop2: detected capacity change from 0 to 2048 [ 160.288049][ T2868] vhci_hcd: stop threads [ 160.302577][ T2868] vhci_hcd: release socket [ 160.303420][ T6786] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 160.307032][ T2868] vhci_hcd: disconnect device [ 160.765319][ T6794] loop2: detected capacity change from 0 to 8192 [ 160.791421][ T6794] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 160.917245][ T6808] loop0: detected capacity change from 0 to 512 [ 160.958173][ T6808] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 161.077673][ T6813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 161.261581][ T6819] loop0: detected capacity change from 0 to 2048 [ 161.284685][ T6819] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 161.722903][ T6818] loop2: detected capacity change from 0 to 32768 [ 161.745693][ T6818] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.512 (6818) [ 161.786683][ T6818] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.807196][ T6818] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 161.816204][ T6818] BTRFS info (device loop2): using free-space-tree [ 161.861662][ T6835] loop0: detected capacity change from 0 to 4096 [ 161.876428][ T6835] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 161.894346][ T6836] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 161.899256][ T6818] BTRFS info (device loop2): rebuilding free space tree [ 161.900979][ T6836] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 161.935044][ T6836] vhci_hcd vhci_hcd.0: Device attached [ 161.970671][ T930] usb 5-1: USB disconnect, device number 5 [ 161.988059][ T6851] vhci_hcd: connection closed [ 162.003578][ T2914] vhci_hcd: stop threads [ 162.019778][ T2914] vhci_hcd: release socket [ 162.033242][ T2914] vhci_hcd: disconnect device [ 162.118675][ T6208] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.552484][ T6869] loop2: detected capacity change from 0 to 1024 [ 162.580929][ T6869] hfsplus: unable to find HFS+ superblock [ 163.883107][ T6888] loop2: detected capacity change from 0 to 4096 [ 163.934472][ T6888] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 164.052148][ T6897] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 164.058710][ T6897] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 164.105917][ T6897] vhci_hcd vhci_hcd.0: Device attached [ 164.121004][ T6907] vhci_hcd: connection closed [ 164.122025][ T2787] vhci_hcd: stop threads [ 164.143489][ T2787] vhci_hcd: release socket [ 164.144405][ T25] kernel write not supported for file /input/mice (pid: 25 comm: kworker/1:0) [ 164.159629][ T2787] vhci_hcd: disconnect device [ 164.454817][ T6924] loop2: detected capacity change from 0 to 2048 [ 164.475385][ T6924] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 165.658685][ T25] kernel write not supported for file /input/mice (pid: 25 comm: kworker/1:0) [ 165.684382][ T6945] loop2: detected capacity change from 0 to 4096 [ 165.708749][ T6945] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 165.872038][ T6955] syz.4.563[6955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.872609][ T6955] syz.4.563[6955] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.902471][ T6955] openvswitch: netlink: Missing key (keys=8040, expected=200000) [ 166.487414][ T6956] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 166.493994][ T6956] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 166.583250][ T6956] vhci_hcd vhci_hcd.0: Device attached [ 166.621563][ T6959] vhci_hcd: connection closed [ 166.622329][ T2821] vhci_hcd: stop threads [ 166.651665][ T2821] vhci_hcd: release socket [ 166.679234][ T2821] vhci_hcd: disconnect device [ 166.714840][ T6970] loop0: detected capacity change from 0 to 128 [ 167.944010][ T6996] loop2: detected capacity change from 0 to 1024 [ 167.963770][ T6996] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 168.933972][ T7017] netlink: 64 bytes leftover after parsing attributes in process `syz.4.586'. [ 169.174026][ T7025] futex_wake_op: syz.2.587 tries to shift op by -1; fix this program [ 169.213269][ T7023] mkiss: ax0: crc mode is auto. [ 169.465848][ T29] audit: type=1326 audit(1719380905.187:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.3.584" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb474b75ae9 code=0x0 [ 169.550729][ T7038] loop2: detected capacity change from 0 to 47 [ 169.584656][ T7039] loop0: detected capacity change from 0 to 128 [ 169.968693][ T7053] tap0: tun_chr_ioctl cmd 1074025675 [ 169.981166][ T7053] tap0: persist enabled [ 169.986336][ T7053] tap0: tun_chr_ioctl cmd 1074025675 [ 169.992639][ T7053] tap0: persist disabled [ 170.249001][ T7061] futex_wake_op: syz.3.603 tries to shift op by -1; fix this program [ 170.306117][ T7064] loop4: detected capacity change from 0 to 1024 [ 170.323752][ T7064] EXT4-fs (loop4): VFS: Can't find ext4 filesystem [ 170.847057][ T7089] futex_wake_op: syz.3.617 tries to shift op by -1; fix this program [ 170.880106][ T7086] loop2: detected capacity change from 0 to 2048 [ 170.928654][ T7086] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.040388][ T7086] ext4 filesystem being mounted at /root/syzkaller.SbYpCD/31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 171.159351][ T29] audit: type=1800 audit(1719380906.867:115): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.616" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 171.490752][ T6208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.215073][ T29] audit: type=1326 audit(1719380907.937:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7082 comm="syz.4.614" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7ff30f76cb67 code=0x0 [ 172.674369][ T7124] futex_wake_op: syz.2.628 tries to shift op by -1; fix this program [ 172.720966][ T7119] tap0: tun_chr_ioctl cmd 1074025675 [ 172.732013][ T7119] tap0: persist enabled [ 172.749571][ T7119] tap0: tun_chr_ioctl cmd 1074025675 [ 172.772758][ T7119] tap0: persist disabled [ 172.992885][ T7126] loop2: detected capacity change from 0 to 4096 [ 173.019706][ T7126] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 173.097603][ T7132] loop4: detected capacity change from 0 to 47 [ 173.678290][ T7153] loop2: detected capacity change from 0 to 2048 [ 173.988098][ T7153] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 174.224417][ T7153] ext4 filesystem being mounted at /root/syzkaller.SbYpCD/38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.393293][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.426254][ T29] audit: type=1800 audit(1719380910.147:117): pid=7153 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.643" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 174.536768][ T6208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.562518][ T7167] loop0: detected capacity change from 0 to 256 [ 174.607192][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 174.621900][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 174.645281][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 174.661855][ T7167] FAT-fs (loop0): Directory bread(block 64) failed [ 174.670575][ T7167] FAT-fs (loop0): Directory bread(block 65) failed [ 174.680593][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 174.694735][ T7167] FAT-fs (loop0): Directory bread(block 66) failed [ 174.704702][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 174.717186][ T7167] FAT-fs (loop0): Directory bread(block 67) failed [ 174.723943][ T7167] FAT-fs (loop0): Directory bread(block 68) failed [ 174.735336][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 174.746086][ T7167] FAT-fs (loop0): Directory bread(block 69) failed [ 174.766982][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 174.776534][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.776630][ T7167] FAT-fs (loop0): Directory bread(block 70) failed [ 174.810220][ T7167] FAT-fs (loop0): Directory bread(block 71) failed [ 174.818356][ T7167] FAT-fs (loop0): Directory bread(block 72) failed [ 174.824935][ T7167] FAT-fs (loop0): Directory bread(block 73) failed [ 174.827702][ T7180] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 174.873297][ T7167] FAT-fs (loop0): Filesystem has been set read-only [ 174.888399][ T7177] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 174.894957][ T7177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 174.928445][ T29] audit: type=1800 audit(1719380910.647:118): pid=7167 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.645" name="cpu.stat" dev="loop0" ino=1048692 res=0 errno=0 [ 174.934283][ T7167] FAT-fs (loop0): error, invalid access to FAT (entry 0x00006c61) [ 174.947865][ C1] vkms_vblank_simulate: vblank timer overrun [ 174.966706][ T7177] vhci_hcd vhci_hcd.0: Device attached [ 175.027945][ T9] usb 4-1: usb_control_msg returned -32 [ 175.044061][ T9] usbtmc 4-1:16.0: can't read capabilities [ 175.117761][ T7182] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 175.147479][ T2914] vhci_hcd: stop threads [ 175.165333][ T2914] vhci_hcd: release socket [ 175.170225][ T2914] vhci_hcd: disconnect device [ 175.207637][ T8] usb 13-1: new high-speed USB device number 3 using vhci_hcd [ 176.049014][ T8] usb 13-1: enqueue for inactive port 0 [ 176.157245][ T8] vhci_hcd: vhci_device speed not set [ 176.225227][ T7207] syz.2.659 uses obsolete (PF_INET,SOCK_PACKET) [ 176.873394][ T7219] 9pnet_fd: Insufficient options for proto=fd [ 177.669870][ T7224] loop0: detected capacity change from 0 to 512 [ 177.725002][ T7224] EXT4-fs error (device loop0): ext4_orphan_get:1394: inode #15: comm syz.0.665: casefold flag without casefold feature [ 177.783711][ T7224] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz.0.665: couldn't read orphan inode 15 (err -117) [ 177.839211][ T7224] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.176862][ T7242] xt_hashlimit: max too large, truncated to 1048576 [ 178.584039][ T5134] usb 4-1: USB disconnect, device number 5 [ 179.333526][ T7224] syz.0.665 (7224) used greatest stack depth: 17552 bytes left [ 179.534075][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.784444][ T29] audit: type=1804 audit(1719380915.507:119): pid=7275 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.682" name="/root/syzkaller.s1pGjN/158/bus" dev="sda1" ino=1961 res=1 errno=0 [ 180.142700][ T7291] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 180.149269][ T7291] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 180.175637][ T7291] vhci_hcd vhci_hcd.0: Device attached [ 180.294771][ T7293] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 180.327624][ T35] vhci_hcd: stop threads [ 180.333168][ T35] vhci_hcd: release socket [ 180.354294][ T35] vhci_hcd: disconnect device [ 181.436074][ T5091] Bluetooth: hci2: command 0x0406 tx timeout [ 181.436179][ T5094] Bluetooth: hci1: command 0x0406 tx timeout [ 181.442394][ T5091] Bluetooth: hci3: command 0x0406 tx timeout [ 181.462829][ T7318] ip6t_REJECT: ECHOREPLY is not supported [ 181.532614][ T7318] netlink: 20 bytes leftover after parsing attributes in process `syz.1.698'. [ 181.649092][ T7324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 181.699357][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 181.734141][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 181.808992][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 181.813262][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 181.836646][ T7314] loop2: detected capacity change from 0 to 32768 [ 181.859872][ T7314] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.695 (7314) [ 181.917306][ T7314] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 181.949563][ T7314] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 181.984264][ T7314] BTRFS info (device loop2): using free-space-tree [ 184.404907][ T7354] loop0: detected capacity change from 0 to 164 [ 186.027292][ T7314] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 186.034226][ T7314] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 186.362010][ T7314] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 186.404147][ T7354] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet. [ 186.420065][ T7314] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 186.420747][ T7314] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 186.438165][ T7314] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 186.564659][ T7314] BTRFS error (device loop2): open_ctree failed [ 186.850248][ T7372] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 186.856824][ T7372] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 186.886413][ T7376] xt_hashlimit: max too large, truncated to 1048576 [ 186.895836][ T7372] vhci_hcd vhci_hcd.0: Device attached [ 186.934112][ T7378] vhci_hcd: connection closed [ 186.939863][ T2868] vhci_hcd: stop threads [ 186.971304][ T2868] vhci_hcd: release socket [ 186.975791][ T2868] vhci_hcd: disconnect device [ 187.042724][ T7390] ip6t_REJECT: ECHOREPLY is not supported [ 187.059155][ T7390] netlink: 20 bytes leftover after parsing attributes in process `syz.4.722'. [ 187.162746][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.717'. [ 187.359294][ T7402] loop4: detected capacity change from 0 to 2048 [ 187.375939][ T7402] EXT4-fs: Ignoring removed nomblk_io_submit option [ 187.394610][ T7402] EXT4-fs: Ignoring removed orlov option [ 187.420634][ T2821] Bluetooth: (null): Invalid header checksum [ 187.444386][ T7402] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 187.458415][ T2821] Bluetooth: (null): Invalid header checksum [ 187.516934][ T7406] loop0: detected capacity change from 0 to 512 [ 187.529336][ T2868] Bluetooth: (null): Invalid header checksum [ 187.569041][ T7406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.607217][ T7406] EXT4-fs (loop0): blocks per group (71) and clusters per group (32768) inconsistent [ 187.638835][ T2868] Bluetooth: (null): Too short H5 packet [ 187.644585][ T2868] Bluetooth: (null): Invalid header checksum [ 187.875938][ T7419] loop4: detected capacity change from 0 to 512 [ 187.924553][ T7419] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz.4.735: casefold flag without casefold feature [ 187.945901][ T7419] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.735: couldn't read orphan inode 15 (err -117) [ 187.977181][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 187.987459][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 187.998273][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 187.998711][ T7419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 188.041105][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.052645][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 188.060727][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.069132][ T5092] Bluetooth: hci4: command tx timeout [ 188.261328][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.466153][ T6228] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.486344][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.540776][ T7438] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 188.547337][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 188.569107][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 188.588029][ T7440] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 188.606624][ T11] vhci_hcd: stop threads [ 188.618060][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.626750][ T11] vhci_hcd: release socket [ 188.632955][ T11] vhci_hcd: disconnect device [ 188.713254][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.964781][ T1102] bridge_slave_1: left allmulticast mode [ 188.970749][ T1102] bridge_slave_1: left promiscuous mode [ 188.976504][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.997999][ T1102] bridge_slave_0: left allmulticast mode [ 189.003686][ T1102] bridge_slave_0: left promiscuous mode [ 189.010644][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.578652][ T7463] loop4: detected capacity change from 0 to 128 [ 190.149170][ T5083] Bluetooth: hci0: command tx timeout [ 190.230005][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.427291][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 190.448531][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 190.474814][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 190.505529][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 190.515708][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 190.539263][ T8] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 190.554726][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.555856][ T8] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 190.579755][ T8] usb 4-1: Product: syz [ 190.584223][ T8] usb 4-1: Manufacturer: syz [ 190.590109][ T8] usb 4-1: SerialNumber: syz [ 190.595609][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.597319][ T8] usb 4-1: config 0 descriptor?? [ 190.615924][ T8] usb 4-1: NFC: intf ffff88806566f000 id ffffffff8ec9a2a0 [ 190.636844][ T1102] bond0 (unregistering): Released all slaves [ 190.656844][ T8] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 190.676948][ T7426] chnl_net:caif_netlink_parms(): no params data found [ 190.915189][ T930] usb 4-1: USB disconnect, device number 6 [ 190.937799][ T930] usb 4-1: NFC: intf ffff88806566f000 [ 191.239317][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.246794][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.254637][ T7426] bridge_slave_0: entered allmulticast mode [ 191.262361][ T7426] bridge_slave_0: entered promiscuous mode [ 191.278788][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.291525][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.309847][ T7426] bridge_slave_1: entered allmulticast mode [ 191.320433][ T7426] bridge_slave_1: entered promiscuous mode [ 191.386765][ T1102] hsr_slave_0: left promiscuous mode [ 191.407619][ T1102] hsr_slave_1: left promiscuous mode [ 191.422852][ T7492] loop0: detected capacity change from 0 to 256 [ 191.440766][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.452002][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.461620][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.469529][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.490565][ T7492] FAT-fs (loop0): Directory bread(block 64) failed [ 191.498417][ T1102] veth1_macvtap: left promiscuous mode [ 191.504156][ T1102] veth0_macvtap: left promiscuous mode [ 191.526229][ T7492] FAT-fs (loop0): Directory bread(block 65) failed [ 191.537777][ T1102] veth1_vlan: left promiscuous mode [ 191.543236][ T1102] veth0_vlan: left promiscuous mode [ 191.568015][ T7492] FAT-fs (loop0): Directory bread(block 66) failed [ 191.587627][ T7492] FAT-fs (loop0): Directory bread(block 67) failed [ 191.594294][ T7492] FAT-fs (loop0): Directory bread(block 68) failed [ 191.628249][ T7492] FAT-fs (loop0): Directory bread(block 69) failed [ 191.634925][ T7492] FAT-fs (loop0): Directory bread(block 70) failed [ 191.684747][ T7492] FAT-fs (loop0): Directory bread(block 71) failed [ 191.697622][ T7492] FAT-fs (loop0): Directory bread(block 72) failed [ 191.704198][ T7492] FAT-fs (loop0): Directory bread(block 73) failed [ 192.227252][ T5083] Bluetooth: hci0: command tx timeout [ 194.075581][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 194.137818][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 194.319970][ T5083] Bluetooth: hci0: command tx timeout [ 194.731028][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.747239][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.805227][ T7536] loop0: detected capacity change from 0 to 1024 [ 194.875470][ T7536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.937766][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.022296][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.206345][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.261767][ T7426] team0: Port device team_slave_0 added [ 195.309787][ T7426] team0: Port device team_slave_1 added [ 195.532041][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.555002][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.647324][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.698046][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.705029][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.746525][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.862076][ T7426] hsr_slave_0: entered promiscuous mode [ 195.877626][ T7426] hsr_slave_1: entered promiscuous mode [ 196.245131][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.313212][ T7558] loop0: detected capacity change from 0 to 1024 [ 196.356661][ T5092] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.378864][ T7558] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.398392][ T5092] Bluetooth: hci0: command tx timeout [ 196.402128][ T5094] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.412902][ T5094] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.426138][ T5094] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.434008][ T5094] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 196.441442][ T5094] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 196.467862][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.486219][ T7544] loop4: detected capacity change from 0 to 40427 [ 196.505931][ T7544] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 196.513338][ T7544] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 196.554075][ T7544] F2FS-fs (loop4): Found nat_bits in checkpoint [ 196.600826][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.602299][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.657387][ T7544] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 196.684019][ T7544] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 196.754418][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.789713][ T5094] Bluetooth: hci5: command 0x0406 tx timeout [ 196.926461][ T6228] syz-executor: attempt to access beyond end of device [ 196.926461][ T6228] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.960587][ T6228] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 197.166185][ T7567] loop0: detected capacity change from 0 to 32768 [ 197.196260][ T7567] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.790 (7567) [ 197.238325][ T7567] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 197.257306][ T7567] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 197.266038][ T7567] BTRFS info (device loop0): using free-space-tree [ 197.377029][ T1102] bridge_slave_1: left allmulticast mode [ 197.427149][ T1102] bridge_slave_1: left promiscuous mode [ 197.453293][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.494435][ T1102] bridge_slave_0: left allmulticast mode [ 197.538926][ T5094] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 197.539158][ T1102] bridge_slave_0: left promiscuous mode [ 197.548781][ T5094] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 197.561591][ T5094] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 197.570530][ T5094] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 197.579694][ T5094] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 197.588254][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.597712][ T5094] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 197.805885][ T5088] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 198.456012][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.474839][ T5094] Bluetooth: hci0: command tx timeout [ 198.481856][ T5083] Bluetooth: hci6: command tx timeout [ 198.498908][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.520692][ T1102] bond0 (unregistering): Released all slaves [ 198.637313][ T5081] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.658724][ T7426] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 198.692124][ T7426] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 198.741300][ T29] audit: type=1804 audit(1719380934.467:120): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.797" name="/root/syzkaller.s1pGjN/188/bus" dev="sda1" ino=1988 res=1 errno=0 [ 198.744342][ T7426] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 198.763545][ T29] audit: type=1800 audit(1719380934.467:121): pid=7608 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.797" name="bus" dev="sda1" ino=1988 res=0 errno=0 [ 198.800966][ T7561] chnl_net:caif_netlink_parms(): no params data found [ 198.834256][ T7426] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 198.885837][ T5081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.897001][ T5081] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.908115][ T5081] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 198.922594][ T5081] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.933076][ T5081] usb 5-1: config 0 descriptor?? [ 199.104161][ T1102] hsr_slave_0: left promiscuous mode [ 199.121011][ T1102] hsr_slave_1: left promiscuous mode [ 199.132954][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.150389][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.165660][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.173426][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.206925][ T1102] veth1_macvtap: left promiscuous mode [ 199.213391][ T1102] veth0_macvtap: left promiscuous mode [ 199.220504][ T1102] veth1_vlan: left promiscuous mode [ 199.232920][ T1102] veth0_vlan: left promiscuous mode [ 199.543686][ T5081] wacom 0003:056A:00F8.0001: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0 [ 199.679016][ T5094] Bluetooth: hci5: command tx timeout [ 199.721799][ T5081] usb 5-1: USB disconnect, device number 6 [ 200.527243][ T5134] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 200.561473][ T5094] Bluetooth: hci6: command tx timeout [ 200.622445][ T7628] loop0: detected capacity change from 0 to 2048 [ 200.636216][ T7628] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 200.654556][ T7628] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 200.672117][ T7628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.731721][ T5134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.747239][ T5134] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 200.756324][ T5134] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.780936][ T5134] usb 5-1: config 0 descriptor?? [ 200.885950][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 200.940827][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 201.016817][ T5134] usb 5-1: USB disconnect, device number 7 [ 201.575176][ T7561] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.583874][ T7561] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.615021][ T7561] bridge_slave_0: entered allmulticast mode [ 201.646121][ T7561] bridge_slave_0: entered promiscuous mode [ 201.685923][ T7561] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.734827][ T7561] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.755271][ T7561] bridge_slave_1: entered allmulticast mode [ 201.758482][ T5094] Bluetooth: hci5: command tx timeout [ 201.768970][ T7561] bridge_slave_1: entered promiscuous mode [ 201.792325][ T7639] loop0: detected capacity change from 0 to 8 [ 201.857912][ T7639] SQUASHFS error: lzo decompression failed, data probably corrupt [ 201.865843][ T7639] SQUASHFS error: Failed to read block 0x28d: -5 [ 201.879028][ T7639] SQUASHFS error: Unable to read metadata cache entry [28b] [ 201.886446][ T7639] SQUASHFS error: Unable to read inode 0x11f [ 201.993006][ T7639] loop0: detected capacity change from 0 to 2048 [ 202.056617][ T7561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.105137][ T7639] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.150906][ T7561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.314645][ T7561] team0: Port device team_slave_0 added [ 202.391956][ T7561] team0: Port device team_slave_1 added [ 202.455988][ T7583] chnl_net:caif_netlink_parms(): no params data found [ 202.572961][ T7561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.585814][ T7561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.614963][ T7561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.628497][ T5094] Bluetooth: hci6: command tx timeout [ 202.641231][ T7642] loop4: detected capacity change from 0 to 32768 [ 202.659424][ T7642] bcachefs (/dev/loop4): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 202.684784][ T7561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.693679][ T7561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.720860][ T7561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.833780][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.906358][ T7642] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 202.923341][ T7642] bcachefs (loop4): recovering from clean shutdown, journal seq 13 [ 202.978123][ T7642] bcachefs (loop4): alloc_read... done [ 202.984524][ T7642] bcachefs (loop4): stripes_read... done [ 202.994190][ T7642] bcachefs (loop4): snapshots_read... done [ 203.014480][ T7642] bcachefs (loop4): journal_replay... done [ 203.025522][ T7583] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.033598][ T7583] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.037381][ T7642] bcachefs (loop4): resume_logged_ops... done [ 203.041019][ T7583] bridge_slave_0: entered allmulticast mode [ 203.055861][ T7583] bridge_slave_0: entered promiscuous mode [ 203.072056][ T7642] bcachefs (loop4): going read-write [ 203.110326][ T7668] Illegal XDP return value 4294967274 on prog (id 123) dev N/A, expect packet loss! [ 203.120570][ T7642] bcachefs (loop4): done starting filesystem [ 203.133845][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.191289][ T7561] hsr_slave_0: entered promiscuous mode [ 203.215757][ T7561] hsr_slave_1: entered promiscuous mode [ 203.239549][ T7561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.257211][ T7561] Cannot create hsr debugfs directory [ 203.263444][ T7583] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.280972][ T7583] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.292195][ T7583] bridge_slave_1: entered allmulticast mode [ 203.299900][ T7583] bridge_slave_1: entered promiscuous mode [ 203.463257][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.575262][ T7583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.612663][ T6228] bcachefs (loop4): shutting down [ 203.618775][ T6228] bcachefs (loop4): going read-only [ 203.623465][ T7426] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.627393][ T6228] bcachefs (loop4): finished waiting for writes to stop [ 203.658340][ T6228] bcachefs (loop4): flushing journal and stopping allocators, journal seq 15 [ 203.701423][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.736483][ T6228] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 17 [ 203.751851][ T7583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.790036][ T6228] bcachefs (loop4): shutdown complete, journal seq 18 [ 203.816962][ T6228] bcachefs (loop4): marking filesystem clean [ 203.827486][ T5083] Bluetooth: hci5: command tx timeout [ 203.961634][ T1102] team0: Port device netdevsim0 removed [ 203.979320][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.991511][ T6228] bcachefs (loop4): shutdown complete [ 204.016654][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.023873][ T5129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.116276][ T7583] team0: Port device team_slave_0 added [ 204.190440][ T7583] team0: Port device team_slave_1 added [ 204.212067][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.219273][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.267412][ T7677] loop0: detected capacity change from 0 to 40427 [ 204.278643][ T7677] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 204.285278][ T7677] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 204.334233][ T7583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.341636][ T7583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.387672][ T7583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.438293][ T7677] F2FS-fs (loop0): Found nat_bits in checkpoint [ 204.466323][ T7583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.477979][ T7583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.506189][ T7583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.530379][ T7677] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 204.548207][ T7677] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.608741][ T5088] syz-executor: attempt to access beyond end of device [ 204.608741][ T5088] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 204.628246][ T5088] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 204.696945][ T7426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 204.719411][ T5083] Bluetooth: hci6: command tx timeout [ 204.783553][ T1102] bridge_slave_1: left allmulticast mode [ 204.789764][ T1102] bridge_slave_1: left promiscuous mode [ 204.795578][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.830120][ T1102] bridge_slave_0: left allmulticast mode [ 204.835911][ T1102] bridge_slave_0: left promiscuous mode [ 204.844244][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.127633][ T7681] loop4: detected capacity change from 0 to 1024 [ 205.161777][ T7681] hfsplus: failed to load root directory [ 205.591050][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.613086][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.626887][ T1102] bond0 (unregistering): Released all slaves [ 205.731198][ T7689] tap0: tun_chr_ioctl cmd 1074025675 [ 205.736598][ T7689] tap0: persist enabled [ 205.746523][ T7691] tap0: tun_chr_ioctl cmd 1074025675 [ 205.752317][ T7691] tap0: persist disabled [ 205.910091][ T7583] hsr_slave_0: entered promiscuous mode [ 205.917196][ T5083] Bluetooth: hci5: command tx timeout [ 205.948440][ T7583] hsr_slave_1: entered promiscuous mode [ 205.979653][ T7583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.000689][ T7583] Cannot create hsr debugfs directory [ 206.225332][ T1102] hsr_slave_0: left promiscuous mode [ 206.276418][ T1102] hsr_slave_1: left promiscuous mode [ 206.285602][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.294323][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.337801][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.345230][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.375337][ T1102] veth1_macvtap: left promiscuous mode [ 206.384491][ T1102] veth0_macvtap: left promiscuous mode [ 206.403633][ T1102] veth1_vlan: left promiscuous mode [ 206.412083][ T1102] veth0_vlan: left promiscuous mode [ 206.682708][ T7716] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 207.001814][ T7714] loop0: detected capacity change from 0 to 32768 [ 207.020724][ T7714] bcachefs (/dev/loop0): error reading default superblock: Not a bcachefs superblock (got magic c68573f6-4e1a-4502-8265-f57f48ba6d81) [ 207.173426][ T7714] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 207.189966][ T7714] bcachefs (loop0): recovering from clean shutdown, journal seq 13 [ 207.228301][ T7714] bcachefs (loop0): alloc_read... done [ 207.234088][ T7714] bcachefs (loop0): stripes_read... done [ 207.239979][ T7714] bcachefs (loop0): snapshots_read... done [ 207.247310][ T5133] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 207.257619][ T7714] bcachefs (loop0): journal_replay... done [ 207.266810][ T7714] bcachefs (loop0): resume_logged_ops... done [ 207.283931][ T7714] bcachefs (loop0): going read-write [ 207.302812][ T7714] bcachefs (loop0): done starting filesystem [ 207.358425][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 207.415518][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 207.457053][ T5133] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 207.466600][ T5133] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.485107][ T5133] usb 5-1: Product: syz [ 207.498377][ T5133] usb 5-1: Manufacturer: syz [ 207.503113][ T5133] usb 5-1: SerialNumber: syz [ 207.562894][ T5133] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 207.731163][ T5081] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 207.880244][ T5088] bcachefs (loop0): shutting down [ 207.885344][ T5088] bcachefs (loop0): going read-only [ 207.890775][ T5088] bcachefs (loop0): finished waiting for writes to stop [ 207.904836][ T5088] bcachefs (loop0): flushing journal and stopping allocators, journal seq 15 [ 207.957654][ T5088] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 17 [ 207.998233][ T5088] bcachefs (loop0): shutdown complete, journal seq 18 [ 208.005947][ T5088] bcachefs (loop0): marking filesystem clean [ 208.053186][ T5088] bcachefs (loop0): shutdown complete [ 208.585682][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.868203][ T5081] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 208.937040][ T9] usb 5-1: USB disconnect, device number 8 [ 208.961880][ T5081] ath9k_htc: Failed to initialize the device [ 208.973254][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 209.034449][ T7426] veth0_vlan: entered promiscuous mode [ 209.034712][ T7735] loop0: detected capacity change from 0 to 2048 [ 209.061959][ T7735] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 209.082727][ T7735] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 209.101999][ T7426] veth1_vlan: entered promiscuous mode [ 209.136270][ T7735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.210310][ T7426] veth0_macvtap: entered promiscuous mode [ 209.246960][ T7426] veth1_macvtap: entered promiscuous mode [ 209.313530][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.324422][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.334418][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.351746][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.366508][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.384381][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.394479][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.407289][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.419080][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.444374][ T7561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 209.505975][ T7561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 209.553408][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.581605][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.592191][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.603000][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.613167][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.626481][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.646841][ T7426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.662334][ T7426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.677915][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.696176][ T7561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 209.723665][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.4.833'. [ 209.770414][ T7561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 209.837984][ T7426] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.863431][ T7426] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.875332][ T7426] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.894214][ T7426] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.168054][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.205707][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.268537][ T2787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.288830][ T2787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.352962][ T7583] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 210.378340][ T7583] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 210.676831][ T7583] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 211.401056][ T7583] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 211.532103][ T7765] loop0: detected capacity change from 0 to 512 [ 211.580749][ T7765] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 211.638204][ T7765] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 211.649141][ T7561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.694570][ T7765] EXT4-fs error (device loop0): ext4_orphan_get:1420: comm syz.0.837: bad orphan inode 15 [ 211.706434][ T7583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.726880][ T7765] ext4_test_bit(bit=14, block=2) = 0 [ 211.765673][ T7561] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.774784][ T7765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.839180][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.846339][ T5081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.856620][ T7765] ext2 filesystem being mounted at /root/syzkaller.s1pGjN/213/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.873627][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.880804][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.925082][ T7583] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.951566][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.015901][ T5081] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.023109][ T5081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.042654][ T5081] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.049842][ T5081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.502421][ T7583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.551227][ T7561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.714587][ T7561] veth0_vlan: entered promiscuous mode [ 212.729684][ T7583] veth0_vlan: entered promiscuous mode [ 212.766331][ T7561] veth1_vlan: entered promiscuous mode [ 212.792710][ T7583] veth1_vlan: entered promiscuous mode [ 212.925397][ T7583] veth0_macvtap: entered promiscuous mode [ 212.975269][ T7561] veth0_macvtap: entered promiscuous mode [ 213.001383][ T7561] veth1_macvtap: entered promiscuous mode [ 213.025245][ T7583] veth1_macvtap: entered promiscuous mode [ 213.077378][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.097243][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.112586][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.137826][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.157511][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.176155][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.182933][ T7789] loop0: detected capacity change from 0 to 40427 [ 213.187103][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.195663][ T7789] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 213.209643][ T7789] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 213.211329][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.230087][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.234267][ T7789] F2FS-fs (loop0): Found nat_bits in checkpoint [ 213.240679][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.242677][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.298470][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.310651][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.324061][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.334642][ T7789] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 213.339252][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.347663][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 213.365321][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.367316][ T7789] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.384475][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.402430][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.414908][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.425041][ T7561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.437146][ T7561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.449878][ T5088] syz-executor: attempt to access beyond end of device [ 213.449878][ T5088] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 213.454361][ T7561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.471956][ T5088] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 213.498222][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.518337][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.536581][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.551740][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.579794][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.593162][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.608178][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.626057][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 213.635643][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.646103][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.654361][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.672901][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.683312][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.684213][ T25] usb 5-1: config 0 descriptor?? [ 213.693747][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.693768][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.693782][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.695749][ T7583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.759957][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.772459][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.782978][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.796730][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.807127][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.818289][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.835928][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.846712][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.856956][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.869862][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.879981][ T7583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.893160][ T7583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.905360][ T7583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.939666][ T7561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.956947][ T7561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.977164][ T7561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.985977][ T7561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.037553][ T7583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.050908][ T7583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.062314][ T7583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.071209][ T7583] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.140724][ T25] wacom 0003:056A:00F8.0002: hidraw0: USB HID v0.00 Device [HID 056a:00f8] on usb-dummy_hcd.4-1/input0 [ 214.277604][ T5081] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 214.292625][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.312437][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.356082][ T5132] usb 5-1: USB disconnect, device number 9 [ 214.449913][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.478536][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.490334][ T5081] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 214.532476][ T2787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.546592][ T5081] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 214.579414][ T2787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.593474][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.606992][ T5081] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 214.618833][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.633853][ T5081] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.662925][ T7809] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 215.903162][ T5132] usb 3-1: USB disconnect, device number 9 [ 215.996609][ T7830] loop4: detected capacity change from 0 to 256 [ 216.093350][ T29] audit: type=1804 audit(1719380951.817:122): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.854" name="/root/syzkaller.xqLUQW/85/file1/file0/bus" dev="loop4" ino=1048703 res=1 errno=0 [ 216.122762][ T7830] FAT-fs (loop4): error, invalid access to FAT (entry 0x000004ff) [ 216.172900][ T29] audit: type=1800 audit(1719380951.817:123): pid=7830 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.854" name="bus" dev="loop4" ino=1048703 res=0 errno=0 [ 216.335273][ T7835] loop0: detected capacity change from 0 to 164 [ 216.362546][ T7835] iso9660: Unknown parameter '' [ 216.836399][ T7848] x_tables: unsorted entry at hook 3 [ 217.064020][ T7853] loop2: detected capacity change from 0 to 512 [ 217.089662][ T7853] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 217.111880][ T30] INFO: task syz.1.8:5171 blocked for more than 143 seconds. [ 217.130378][ T7853] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 217.142654][ T30] Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 217.156404][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 217.194467][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 217.221344][ T7856] nlmon0: entered promiscuous mode [ 217.232947][ T7853] EXT4-fs error (device loop2): ext4_orphan_get:1420: comm syz.2.862: bad orphan inode 15 [ 217.268403][ T30] task:syz.1.8 state:D stack:24992 pid:5171 tgid:5170 ppid:5085 flags:0x00004004 [ 217.278319][ T7856] nlmon0: entered allmulticast mode [ 217.296600][ T7840] loop0: detected capacity change from 0 to 128 [ 217.314231][ T30] Call Trace: [ 217.315538][ T7853] ext4_test_bit(bit=14, block=2) = 0 [ 217.334465][ T7840] ufs: Invalid option: "ð—~" or missing value [ 217.341258][ T7840] ufs: wrong mount options [ 217.351992][ T7853] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.352163][ T30] [ 217.374493][ T7858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.864'. [ 217.404606][ T7853] ext2 filesystem being mounted at /root/syzkaller.xtY0oW/8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.427278][ T30] __schedule+0x1796/0x49d0 [ 217.480685][ T30] ? __pfx___schedule+0x10/0x10 [ 217.502908][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 217.530605][ T30] ? __pfx_lock_release+0x10/0x10 [ 217.557379][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 217.571906][ T30] ? schedule+0x90/0x320 [ 217.601786][ T30] schedule+0x14b/0x320 [ 217.609711][ T30] io_schedule+0x8d/0x110 [ 217.622247][ T30] lock_metapage+0x255/0x370 [ 217.639907][ T30] ? lock_metapage+0x173/0x370 [ 217.674329][ T30] ? __pfx_lock_metapage+0x10/0x10 [ 217.687785][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 217.694839][ T30] ? __pfx_metapage_read_folio+0x10/0x10 [ 217.700996][ T30] __get_metapage+0x513/0x1050 [ 217.706054][ T30] ? mempool_alloc_noprof+0x197/0x5a0 [ 217.711719][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 217.737488][ T30] diIAGRead+0xcb/0x140 [ 217.772191][ T30] diNewExt+0x26ea/0x37e0 [ 217.795719][ T30] ? __pfx_diNewExt+0x10/0x10 [ 217.805179][ T30] ? __get_metapage+0x9b2/0x1050 [ 217.811943][ T30] diAllocAG+0xbec/0x1e50 [ 217.817486][ T30] ? __mutex_lock+0x2ef/0xd70 [ 217.827173][ T30] ? diAlloc+0x1b7/0x1760 [ 217.831694][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 217.853341][ T30] ? __pfx_diAllocAG+0x10/0x10 [ 217.858575][ T30] ? dbNextAG+0x518/0x630 [ 217.866756][ T30] diAlloc+0x1d3/0x1760 [ 217.894824][ T30] ? new_inode+0x1b7/0x1d0 [ 217.926351][ T30] ialloc+0x8f/0x900 [ 217.946342][ T30] jfs_mkdir+0x1c5/0xb90 [ 217.967333][ T30] ? smk_access+0x4ab/0x4e0 [ 217.988565][ T30] ? __pfx_jfs_mkdir+0x10/0x10 [ 218.008389][ T30] ? generic_permission+0x1e0/0x550 [ 218.036703][ T30] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 218.069248][ T30] ? security_inode_mkdir+0xc2/0x110 [ 218.088308][ T30] vfs_mkdir+0x2f9/0x4f0 [ 218.088479][ T7857] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 64: padding at end of block bitmap is not set [ 218.128327][ T30] do_mkdirat+0x264/0x3a0 [ 218.174354][ T30] ? __might_fault+0xc6/0x120 [ 218.181362][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 218.189357][ T30] ? getname_flags+0x1fe/0x4f0 [ 218.196457][ T30] __x64_sys_mkdir+0x6e/0x80 [ 218.201955][ T30] do_syscall_64+0xf3/0x230 [ 218.218606][ T30] ? clear_bhb_loop+0x35/0x90 [ 218.223513][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.250533][ T30] RIP: 0033:0x7f3701575ae9 [ 218.261876][ T30] RSP: 002b:00007f3702431048 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 218.285262][ T30] RAX: ffffffffffffffda RBX: 00007f3701703fa0 RCX: 00007f3701575ae9 [ 218.305250][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000340 [ 218.321855][ T30] RBP: 00007f37015f6746 R08: 0000000000000000 R09: 0000000000000000 [ 218.350749][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 218.395054][ T30] R13: 000000000000000b R14: 00007f3701703fa0 R15: 00007fff913b9438 [ 218.434082][ T30] [ 218.447228][ T30] [ 218.447228][ T30] Showing all locks held in the system: [ 218.455402][ T7858] nlmon0: left promiscuous mode [ 218.461930][ T7426] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.471525][ T7858] nlmon0: left allmulticast mode [ 218.497546][ T30] 2 locks held by kworker/1:0/25: [ 218.502614][ T30] 1 lock held by khungtaskd/30: [ 218.587178][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 218.629008][ T30] 3 locks held by kworker/0:2/58: [ 218.649478][ T30] #0: ffff8880b943e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 218.674401][ T30] #1: ffff8880b9428948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770 [ 218.691833][ T30] #2: ffffffff8e334000 (rcu_read_lock_bh){....}-{1:2}, at: wg_packet_tx_worker+0x25f/0x810 [ 218.706256][ T30] 2 locks held by getty/4841: [ 218.717180][ T30] #0: ffff88802aa650a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 218.740802][ T30] #1: ffffc90002f0e2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 218.761377][ T30] 4 locks held by syz.1.8/5171: [ 218.766256][ T30] #0: ffff88807b3e6420 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 218.793802][ T30] #1: ffff88806218b3c0 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 218.813369][ T30] #2: ffff8880606d8920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diAlloc+0x1b7/0x1760 [ 218.835855][ T30] #3: ffff88806218a638 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diAllocAG+0x2c1/0x1e50 [ 218.846866][ T30] 4 locks held by syz.3.278/5930: [ 218.852031][ T30] #0: ffff888018b3a420 (sb_writers#13){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 218.861659][ T30] #1: ffff88806217bd00 (&type->i_mutex_dir_key#9/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 218.883351][ T30] #2: ffff888022220920 (&(imap->im_aglock[index])){+.+.}-{3:3}, at: diAlloc+0x1b7/0x1760 [ 218.907141][ T30] #3: ffff88806217af78 (&jfs_ip->rdwrlock/1){.+.+}-{3:3}, at: diAllocAG+0x2c1/0x1e50 [ 218.944992][ T30] 1 lock held by syz.3.782/7816: [ 218.950946][ T30] 2 locks held by syz.0.856/7833: [ 218.967185][ T30] #0: ffffffff8f5d4a88 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x8a/0x1f0 [ 218.978544][ T30] #1: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 219.007266][ T30] 1 lock held by syz.0.856/7835: [ 219.017271][ T30] [ 219.019674][ T30] ============================================= [ 219.019674][ T30] [ 219.045458][ T30] NMI backtrace for cpu 1 [ 219.049827][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 219.059720][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 219.069766][ T30] Call Trace: [ 219.073046][ T30] [ 219.075966][ T30] dump_stack_lvl+0x241/0x360 [ 219.080639][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.085824][ T30] ? __pfx__printk+0x10/0x10 [ 219.090412][ T30] ? vprintk_emit+0x631/0x770 [ 219.095102][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 219.100118][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 219.105045][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 219.110486][ T30] ? _printk+0xd5/0x120 [ 219.114629][ T30] ? __pfx__printk+0x10/0x10 [ 219.119208][ T30] ? __wake_up_klogd+0xcc/0x110 [ 219.124053][ T30] ? __pfx__printk+0x10/0x10 [ 219.128629][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 219.133636][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 219.139620][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 219.145583][ T30] watchdog+0xfde/0x1020 [ 219.149811][ T30] ? watchdog+0x1ea/0x1020 [ 219.154207][ T30] ? __pfx_watchdog+0x10/0x10 [ 219.158865][ T30] kthread+0x2f0/0x390 [ 219.162913][ T30] ? __pfx_watchdog+0x10/0x10 [ 219.167578][ T30] ? __pfx_kthread+0x10/0x10 [ 219.172149][ T30] ret_from_fork+0x4b/0x80 [ 219.176548][ T30] ? __pfx_kthread+0x10/0x10 [ 219.181150][ T30] ret_from_fork_asm+0x1a/0x30 [ 219.185903][ T30] [ 219.188928][ C1] vkms_vblank_simulate: vblank timer overrun [ 219.197949][ T30] Sending NMI from CPU 1 to CPUs 0: [ 219.203256][ C0] NMI backtrace for cpu 0 [ 219.203268][ C0] CPU: 0 PID: 7835 Comm: syz.0.856 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 219.203286][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 219.203297][ C0] RIP: 0010:iowrite16+0x37/0x90 [ 219.203318][ C0] Code: 21 e9 fc 48 81 fb 00 00 04 00 72 0a e8 22 21 e9 fc 66 89 2b eb 59 48 81 fb 01 00 01 00 72 0d e8 0f 21 e9 fc 89 e8 89 da 66 ef 43 8b 2d 61 d2 f5 09 31 ff 89 ee e8 38 25 e9 fc 85 ed 74 2b e8 [ 219.203332][ C0] RSP: 0018:ffffc90003677928 EFLAGS: 00000246 [ 219.203347][ C0] RAX: 0000000000000000 RBX: 000000000001c0b0 RCX: 0000000000040000 [ 219.203359][ C0] RDX: 000000000001c0b0 RSI: 000000000003ffff RDI: 0000000000040000 [ 219.203369][ C0] RBP: 0000000000000000 R08: ffffffff851c8fb0 R09: ffff88801fa38998 [ 219.203381][ C0] R10: dffffc0000000000 R11: ffffffff851de6f0 R12: dffffc0000000000 [ 219.203393][ C0] R13: 00000000000080aa R14: dffffc0000000000 R15: ffff88801f1d9400 [ 219.203405][ C0] FS: 00007fcfaa3716c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 219.203419][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 219.203431][ C0] CR2: 0000555572047608 CR3: 00000000684de000 CR4: 00000000003506f0 [ 219.203445][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 219.203454][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 219.203465][ C0] Call Trace: [ 219.203472][ C0] [ 219.203479][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 219.203496][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 219.203516][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 219.203538][ C0] ? nmi_handle+0x2a/0x5a0 [ 219.203569][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 219.203587][ C0] ? nmi_handle+0x14f/0x5a0 [ 219.203610][ C0] ? nmi_handle+0x2a/0x5a0 [ 219.203633][ C0] ? iowrite16+0x37/0x90 [ 219.203649][ C0] ? default_do_nmi+0x63/0x160 [ 219.203667][ C0] ? exc_nmi+0x123/0x1f0 [ 219.203683][ C0] ? end_repeat_nmi+0xf/0x53 [ 219.203707][ C0] ? __pfx_vp_notify+0x10/0x10 [ 219.203729][ C0] ? virtqueue_kick+0x370/0x5c0 [ 219.203753][ C0] ? iowrite16+0x37/0x90 [ 219.203770][ C0] ? iowrite16+0x37/0x90 [ 219.203787][ C0] ? iowrite16+0x37/0x90 [ 219.203803][ C0] [ 219.203808][ C0] [ 219.203814][ C0] vp_notify+0x57/0x80 [ 219.203837][ C0] virtqueue_kick+0x39b/0x5c0 [ 219.203861][ C0] copy_data+0x237/0x370 [ 219.203886][ C0] ? __pfx_copy_data+0x10/0x10 [ 219.203909][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 219.203932][ C0] virtio_read+0x151/0x200 [ 219.203955][ C0] ? __pfx_virtio_read+0x10/0x10 [ 219.203975][ C0] rng_dev_read+0x248/0x6d0 [ 219.203995][ C0] ? mark_lock+0x9a/0x350 [ 219.204014][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 219.204037][ C0] ? security_file_permission+0x7f/0xa0 [ 219.204055][ C0] ? rw_verify_area+0x51b/0x6b0 [ 219.204081][ C0] vfs_readv+0x6c6/0xa90 [ 219.204104][ C0] ? __pfx_rng_dev_read+0x10/0x10 [ 219.204125][ C0] ? __pfx_vfs_readv+0x10/0x10 [ 219.204151][ C0] ? __fget_files+0x29/0x470 [ 219.204176][ C0] __x64_sys_preadv+0x1c7/0x2d0 [ 219.204193][ C0] ? __pfx___x64_sys_preadv+0x10/0x10 [ 219.204210][ C0] ? do_syscall_64+0x100/0x230 [ 219.204233][ C0] ? do_syscall_64+0xb6/0x230 [ 219.204257][ C0] do_syscall_64+0xf3/0x230 [ 219.204278][ C0] ? clear_bhb_loop+0x35/0x90 [ 219.204302][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.204323][ C0] RIP: 0033:0x7fcfa9575ae9 [ 219.204337][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.204351][ C0] RSP: 002b:00007fcfaa371048 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 219.204366][ C0] RAX: ffffffffffffffda RBX: 00007fcfa9703fa0 RCX: 00007fcfa9575ae9 [ 219.204378][ C0] RDX: 0000000000000001 RSI: 0000000020000240 RDI: 000000000000000a [ 219.204389][ C0] RBP: 00007fcfa95f6746 R08: 0000000000000000 R09: 0000000000000000 [ 219.204399][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.204409][ C0] R13: 000000000000000b R14: 00007fcfa9703fa0 R15: 00007fff5c967ee8 [ 219.204428][ C0] [ 219.630202][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 219.637089][ T30] CPU: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 219.646981][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 219.657027][ T30] Call Trace: [ 219.660298][ T30] [ 219.663226][ T30] dump_stack_lvl+0x241/0x360 [ 219.667913][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.673124][ T30] ? __pfx__printk+0x10/0x10 [ 219.677711][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 219.683687][ T30] ? vscnprintf+0x5d/0x90 [ 219.688005][ T30] panic+0x349/0x860 [ 219.691926][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 219.698069][ T30] ? __pfx_panic+0x10/0x10 [ 219.702476][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 219.707854][ T30] ? __irq_work_queue_local+0x137/0x410 [ 219.713403][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 219.718776][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 219.724915][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 219.731065][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 219.737210][ T30] watchdog+0x101d/0x1020 [ 219.741536][ T30] ? watchdog+0x1ea/0x1020 [ 219.745944][ T30] ? __pfx_watchdog+0x10/0x10 [ 219.750613][ T30] kthread+0x2f0/0x390 [ 219.754681][ T30] ? __pfx_watchdog+0x10/0x10 [ 219.759350][ T30] ? __pfx_kthread+0x10/0x10 [ 219.763930][ T30] ret_from_fork+0x4b/0x80 [ 219.768339][ T30] ? __pfx_kthread+0x10/0x10 [ 219.772920][ T30] ret_from_fork_asm+0x1a/0x30 [ 219.777687][ T30] [ 219.780903][ T30] Kernel Offset: disabled [ 219.785241][ T30] Rebooting in 86400 seconds..