last executing test programs: 24.000043379s ago: executing program 0 (id=2529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 23.750588454s ago: executing program 0 (id=2532): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x86, 0x680, &(0x7f0000000340)="$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") syz_usb_connect(0x0, 0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000c81ab9407a250926227e0000000109021a00010000000009049c0400099c1c00080b"], 0x0) 21.501318252s ago: executing program 0 (id=2544): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 11.734925056s ago: executing program 5 (id=2595): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xa, 0x13, 0x20, 0xbc, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4d}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096}, 0x70) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f00000003c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @exit], &(0x7f0000000480)='syzkaller\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 11.37004303s ago: executing program 5 (id=2598): r0 = socket(0x1e, 0x4, 0x0) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000}, 0x20) getsockname$inet(r1, &(0x7f0000000000), &(0x7f0000000100)=0x10) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000), 0x1e6}], 0x1038) sendmmsg(r0, &(0x7f0000000080), 0x1a1, 0x0) 11.141117981s ago: executing program 5 (id=2600): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 10.981533485s ago: executing program 5 (id=2601): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000500)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x3, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_PROTO_DOWN={0x5}, @IFLA_AF_SPEC={0x4}]}, 0x2c}, 0x1, 0x2}, 0x0) 10.851071378s ago: executing program 5 (id=2602): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r1 = dup(r0) fcntl$setstatus(r1, 0x4, 0x42000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 9.718084953s ago: executing program 5 (id=2609): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 4.249064861s ago: executing program 4 (id=2631): socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={0x0, 0x6}) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 4.016356312s ago: executing program 4 (id=2633): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1b, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) 3.775333827s ago: executing program 3 (id=2634): openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xb622ca13b1d15cda, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000040)=0x1, 0x4) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000000)) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x15, @local, 0x40}, 0x1c) syz_open_dev$vim2m(0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000080)={0x3, 0x1, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000040)=0x1) close(r3) r4 = socket(0x28, 0x0, 0x0) r5 = socket(0x0, 0x5, 0x0) listen(r5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x1f, 0x0, 0x8000000000000000, 0x0, 0x3, 0x0, 0x0, 0x200000}, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 3.402153922s ago: executing program 4 (id=2635): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @broadcast}}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) sigaltstack(&(0x7f0000000040)={0x0}, &(0x7f00000000c0)={0x0}) 3.379632547s ago: executing program 3 (id=2636): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) writev(r1, &(0x7f0000000680)=[{&(0x7f0000000580)='\x00', 0x1}], 0x1) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)="7c220752098d1a03003fb4d50b17b9653538f559e8ca1a63dfa1a8f54135abe90913a7bb3930c14e8d1808268429578d92871b8681b42a7a264d4c578a7c26845616d98fc09729e3d8c0aa68e95af732c067f9dd1d9fdd4ee2008561e5a690de23248e60f4ab6390f520377d0a68cc822a17c773be19ee5b51b2428acd21725b17f5fadc10e18e574983e260010d619f74dd4c30b5bf", 0x96}], 0x1, &(0x7f00000004c0)=ANY=[], 0x170}}], 0x1, 0x0) recvmsg$kcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) 3.178232741s ago: executing program 3 (id=2637): prctl$PR_SET_MM_AUXV(0x23, 0xc, 0x0, 0xd) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) eventfd2(0x2, 0x0) fcntl$getown(r0, 0x9) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r1, 0x7a6, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000440)=ANY=[], 0x81, 0x1505, &(0x7f0000002180)="$eJzs3Au4jtW2OPAx5pwvi6QvyX2OOV6+5DJJklwSEkmSJEluCUmSJCGxyC0JScg9yT0kt1jJ/X7LPUm2JElCQpL5f7Q7x9mnfU77/Pc+23n2Gr/nmc+aY73fmN+Ya6zn+973Xc/6vu04uGr9apXrMjP8XfDPX1IBIAUA+gHANQAQAUCpbKWyAS6fnklj6t/3JOIf66FpV7oCcSVJ/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0TfovRHq2dXrua2Wk3/HPu/8PIPf//6+R9/9/IYeLjflyfbHrO/0PUqT/6Zv0P32T/qdv0v/0Tfqfvkn//8VFAJX+m8PS/39Nf+ttFum/EOnZlb7//E8YKQBwpWv4Pzuu9O+fEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoj04Vy4zADAv82vdF1CCCGEEEIIIYT4xwkZr3QFQgghhBBCCCGE+N+HoECDgQgyQEZIgUyQGa6CLHA1ZIVrIAHXQja4DrLD9ZADckIuyA15IC/kAwsEDhhiyA8FIAk3QEG4EQpBYSgCRcFDMSgON0EJuBlKwi1QCm6F0nAblIGyUA7Kw+1QAe6AilAJKsOdUAXugqpQDe6G6nAP1IB7oSbcB7XgfqgND0AdeBDqwkNQDx6G+vAINIBHoSE0gsbQBJr+f+W/CF3hJegG3SEVekBPeBl6QW/oA32hH7wC/eFVGACvwUAYBIPhdRgCb8BQeBOGwXAYAW/BSBgFo2EMjIVxMB7ehgnwDkyEd2ESTIYpMBWmwXSYAe/BTJgFs+F9mAMfwFyYB/NhASyED2ERLIY0+AiWwMewFJbBclgBK2EVrIY1sBbWwXrYABthE2yGLbAVPoFtsB12wE7YBbthD3wKe+Ez2Aefw3744n+Yf/Y/5XdCQECFCg0azIAZMAVTMDNmxiyYBbNiVkxgArNhNsyO2TEH5sBcmAvzYB7Mh/mQkJCRMT/mxyQmsSAWxEJYCItgEfTosTgWxxJ4M5bEklgKS2FpLI1lsCyWxfJYHitgBayIFbEyVsYqWAWrYlW8G+/Ge7AG1sCaWBNrYS2sjbWxDtbBulgX62E9rI/1sQE2wIbYEBtjY2yKTbEZNsPm2BxbYktsha2wNbbGNtgG22JbbIftsD22xw7YATtiR+yEnbEzvogv4kv4EnbHKqoH9sSe2At7YR/si33xFeyPr+Kr+BoOxEE4GF/H1/ENHIpncBgOxxE4AiuoUTgaxyCrcTgex+MEnIATcSJOwsk4GafiNJyOM3AGzsRZOAvfxzn4AX6A83AeLsCFuBAX4WJMwzRcgmdxKS7D5bgCV+IqXIlrcC2uwfW4AdfjJtyEW3ALfoKf4HbcjjtxJ+7G3fgpfoqf4Wc4EPfjfjyAB/AgHsRDeAgP42E8gkfwKB7FY3gMj+NxPIEn8RSexNN4Gs/gWTyH5/A8nscL+Hyer+vtLrxuIKhLjDIqg8qgUlSKyqwyqywqi8qqsqqESqhsKpvKrrKrHCqHyqVyqTwqj8qn8ilSpFjFKr/Kr5IqqQqqgqqQKqSKqCLKK6+Kq+KqhCqhSqqSqpS6VZVWt6kyqqxq4cur8qqCaukrqkqqsqqsqqi7VFVVTVVT1VV1VUPVUDVVTVVL1VK11QOqjuqBffAhdakz9dUgbKAGY0PVSDVWTdQb+JhqpoZic9VCtVRPqOE4DFurZr6Nelq1VaOxnXpWjcHnVAc1DjuqF1Qn1Vl1US+qrqq575bht5dANRV7qd6qj+qrZuJd6lLHqqrX1EA1SA1Wr6sF+IYaqt5Uw9RwNUK9pUaqUWq0GqPGqnFqvHpbTVDvqInqXTVJTVZT1FQ1TU1XM9R7aqaapWar99Uc9YGaq+ap+WqBWqg+VIvUYpWmPlJL1MdqqVqmlqsVaqVapVarNWqtWqfWqw1qo9qkNqstaqv6RG1T29UOtVPtUrvVHvWp2qs+U/vU52q/+kIdUH9SB9WX6pD6Sh1WX6sj6ht1VH2rjqnv1HH1vTqhTqpT6gd1Wv2ozqiz6pz6SZ1XP6sL6hd1UQUFGrXSWhsd6Qw6o07RmXRmfZXOoq/WWfU1OqGv1dn0dTq7vl7n0Dl1Lp1b59F5dT5tNWmnWcc6vy6gk/oGXVDfqAvpwrqILqq9LqaL65t0CX2zLqlv0aX0rbq0vk2X0WV1OV1e364r6Dt0RV1JV9Z36ir6Ll1VV9N36+r6Hl1D36tr6vt0LX2/rq0f0HX0g7qufkjX0w/r+voR3UA/qhvqRrqxbqKb6sd0M/24bq5b6Jb6Cd1KP6lb66d0G/20bquf0e30s7q9fk530M/rjvoF3Ul31l30L/qiDrqb7q5TdQ/dU7+se+neuo/uq/vpV3R//aoeoF/TA/UgPVi/rofoN/RQ/aYepofrEfotPVKP0qP1GD1Wj9Pj9dt6gn5HT9Tv6kl6sp6ip+pperru89tKs/+G/Hf+Sv6AX599i96qP9Hb9Ha9Q+/Uu/RuvUfv0Xv1Xr1P79P79X59QB/QB/VBfUgf0of1YX1EH9FH9VF9TB/Tx/VxfUKf1D/pH/Rp/aM+o8/qs/onfV6f1xd++xmAQaOMNsZEJoPJaFJMJpPZXGWymKtNVnONSZhrTTZznclurjc5TE6Ty+Q2eUxek89YQ8YZNrHJbwqYpLnBFDQ3mkKmsCliihpvipni5qa/O/+P6mtqmppmpplpbpqblqalaWVamdamtWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpkupovparqabqabSTWppqd52fQyvU0f09f0M6+Y/qa/GWAGmIFmoBlsBpshZogZaoaaYWaYGWFGmJFmpBltRpuxZqwZb8abCWaCmWgmmklmkplipphpZpqZYWaYmWammW1mmzlmjplr5pr5Zr5ZaBaaRWaRSTNpZolZYpaaZWaZWWFWmFVmlVlj1ph1Zp3ZYDaYTWaTWWq2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX1mv9lvDpgD5qA5aA6ZQ+awOWyOmCPmqDlqjplj5rg5bk6YE+aUOWVOm9PmjDljzplz5rw5by6YC+aiuXjptC9SkYpMZKIMUYYoJUqJMkeZoyxRlihrlDVKRIkoW5Qtyh5dH+WIcka5otxRnihvlC+yEUUu4iiO8kcFomR0Q1QwujEqFBWOikRFIx8Vi4pHN0UlopujktEtUano1qh0dFtUJioblYvKR7dHFaI7oopRpahydGdUJborqhpVi+6Oqkf3RDWie6Oa0X1Rrej+qHb0QFQnejCqGz0U1YsejupHj0QNokejhlGjqHHUJGr6D10/hDM5H/fdbHebanvYnvZl28v2tn1sX9vPvmL721ftAPuaHWgH2cH2dTvEvmGH2jftMDvcjrBv2ZF2lB1tx9ixdpwdb9+2E+w7dqJ9106yk+0UO9VOs9PtDPuenWln2dn2fTvHfmDn2nl2vl1gF9oP7SK72KbZj+wS+7FdapfZ5XaFXWlX2dV2jV1r19n1doPdaDfZzXaL3Wo/sdvsdrvD7rS77G67x35q99rP7D77ud1vv7AH7J/sQfulPWS/soft1/aI/cYetd/aY/Y7e9x+b0/Yk/aU/cGetj/aM/asPWd/suftz/aC/cVetOHSyf2lt3cyZCgDZaAUSqHMlJmyUBbKSlkpQQnKRtkoO2WnHJSDclEuykN5KB/lo0uYmPJTfkpSkgpSQSpEhagIFSFPnopTcSpBJagklaRSVIpKU2kqQ2WoHJWj2+l2uoPuoEpUie6kO+kuuouqUTWqTtWpBtWgmlSTalEtqk21qQ7VobpUl+pRPapP9akBNaCG1JAaU2NqSk2pGTWj5tScWlJLakWtqDW1pjbUhtpSW2pH7ag9tacO1IE6UkfqRJ2oC3WhrtSVulE3SqVU6kk9qRf1oj7Uh/pRP+pP/WkADaCBNJAG02AaQkNoKA2lYTScRtBbNJJG0WgaQ2NpHI2n8TSBJtBEmkiTaBJNoSk0jabRDJpBM2kmzabZNIfm0FyaS/NpPi2khbSIFlEapdESWkJLaSktp+W0klbSalpNa2ktraf1tJE20mbaTFtpK22jbbSDdtAu2kV7aA/tpb20j/bRftpPB+gAHaSDdIgO0WE6TEfoCB2lo3SMjtFxOk4n6ASdolN0mk7TGTpD5+gcnaef6QL9QhcpUIpTkNld5bK4q11Wd41LcZncpTgCgEtxLpfb5XF5XT5nXQ6X8y9ics4VcoVdEVfUeVfMFXc3/S4u48q6cq68u91VcHe4ir+Lq7t7XA13r6vp7nPV3N1/Eddy97va7hFXxz3q6rpGrp5r4uq7R1wD96hr6Bq5xq6Ja+WedK3dU66Ne9q1dc/8Ll7kFru1bp1b7za4ve4zd8795I66b91597Pr5rq7fu4V19+96ga419xAN+h38Qj3lhvpRrnRbowb68b9Lp7iprppbrqb4d5zM92s38UL3Ydujktzc908N98t+DW+VFOa+8gtcR+7pW6ZW+5WuJVulVvt1vx7rSvcJrfZbXF73Kdum9vudridbpfb/Wt8aR/73Oduv/vCHXHfuIPuS3fIHXOH3de/xpf2d8x95467790Jd9Kdcj+40+5Hd8ad/XX/l/b+g/vFXXTBASMr1mw44gyckVM4E2fmqzgLX81Z+RpO8LWcja/j7Hw95+CcnItzcx7Oy/nYMrFj5pjzcwFO8g1ckG/kQlyYi3BR9lyMi/NNXIJv5pJ8C5fiW7k038ZluCyX4/J8O1fgO7giV+LKfCdXCYGrcjW+m6vzPVyD7+WafB/X4vu5Nj/AdfhBrssPcT1+mOvzI9yAH+WG3IgbcxNuyo9xM36cm3MLbslPcCt+klvzU9yGn+a2/Ay342e5PT/HHfh57sgvcCfuzF34Re7KL3E37s6p3IN78svci3tzH+7L/fgV7s+v8gB+jQfyIB7Mr/MQfoOH8ps8jIfzCH6LR/IoHs1jeCyP4/H8Nk/gd3giv8uTeDJP4ak8jafzDH6PZ/Isns3v8xz+gOfyPJ7PC3ghf8iLeDGn8Ue8hD/mpbyMl/MKXsmreDWv4bW8jtfzBt7Im3gzb+Gt/Alv4+28g3fyLt7Ne/hT3suf8T7+nPfzF3yA/8QH+Us+xF/xYf6aj/A3fJS/5WP8HR/n7/kEn+RT/AOf5h/5DJ/lc/wTn+ef+QL/whc5MMQYq1jHJo7iDHHGOCXOFGeOr4qzxFfHWeNr4kR8bZwtvi7OHl8f54hzxrni3HGeOG+cL7YxxS7mOI7zxwXiZHxDXDC+MS4UF46LxEVjHxeLi8c3xSXim+OS8S1xqfjWuHR8W1wmLhs/cl/5+Pa4QnxHXDGuFFeO74yrxHfFVeNq8d1x9fieuEZ8b1wzvi8uGd8f144fiOvED8Z144fievHDcf34kbhB/GjcMG4UN46bxE3jx+Jm8eNx87hF3DJ+Im4VPxm3jp+K28RPx23jZ/7weGrcI+4Zvxy/HIdwr56fXJBcmPwwuSi5OJmW/Ci5JPlxcmlyWXJ5ckVyZXJVcnVyTXJtcl1yfXJDcmNyU3JzcksyhGoZwaNXXnvjI5/BZ/QpPpPP7K/yWfzVPqu/xif8tT6bv85n99f7HD6nz+Vz+zw+r8/nrSfvPPvY5/cFfNLf4Av6G30hX9gX8UW998V8cd/EN/VNfTP/uG/uW/iW/gn/hH/SP+mf8k/5p31b/4xv55/17f1zvoN/3j/vX/CdfGffxb/ou/qXfDff3af6VN/T9/S9fC/fx/fx/Xw/39/39wP8AD/QD/SD/WA/xA/xQ/1QP8wP8yP8CD/Sj/Sj/Wg/1o/14/14P8FP8BP9RD/JT/JT/BQ/zU/zM/wMP9PP9LP9bD+n0Bw/18/18/18v9Av9Iv8Ip/m0/wSv8Qv9Uv9cr/cr/Qr/Wq/2q/1a/16v95v9Bv9Zr/Zb/Vb/Ta/ze/wO/wuv8vv8Xv8Xr/X7/P7/H6/3x/wB/xBf9Af8l/5w/5rf8R/44/6b/0x/50/7r/3J/xJf8r/4E/7H/0Zf9af8z/58/5nf8H/4i/64Mcn3k5MSLyTmJh4NzEpMTkxJTE1MS0xPTEj8V5iZmJWYnbi/cScxAeJuYl5ifmJBYmFiQ8TixKLE2mJjxJLEh8nliaWJZYnViRWJlYlQsi7LQ75Q4GQDDeEguHGUCgUDkVC0eBDsVA83BRKhJtDyXBLKBVuDaXDbaFMKBvKhUdDw9AoNA5NQtPwWGgWHg/NQ4vQMjwRWoUnQ+vwVGgTng5twzOhXXg2tA/PhQ7h+dAxvBA6hc6hS3gxdA0vhW6he0gNPULP8HLoFXqHPqFv6BdeCf3Dq2FAeC0MDIPC4PB6GBLeCEPDm2FYGB5GhLfCyDAqjA5jwtgwLowPb4cJ4Z0wMbwbJoXJYUqYGqaF6WFGeC/MDLPC7PB+mBM+CHPDvDA/LAgLw4dhUVgc0sJHYUn4OCwNy8LysCKsDKvC6rAmrA3rwvqwIWwMm8LmsCVsDZ+EbWF72BF2hl1hd9gTPg17w2dhX/g87A9fhAPhT+Fg+DIcCl+Fw+HrcCR8E46Gb8Ox8F04Hr4PJ8LJcCr8EE6HH8OZcDacCz+F8+HncCH8Ei7K/6wJIYQQQvxN9B8c7/FXvqd+G5f0BICrt+c+/J/X3Jjjz/PeKk+rBAA83b3jQ/82qlRJTU397bFLNUQF5gFA4nL+r3+W+y1eBi3hSWgDLaDEX62vt+p8nv9g/eStAJn/Q04KXI4vr3/zf7H+Y0+MWFQ6Ppftv1l/HkChApdzMsHl+PL6Jf+L9XM2+4P6M305HqD5f8jJApfjy+sXh8fhGWjzF48UQgghhBBCCCH+rLcq1/6Prp8vXZ/nMZdzMsLl+I+uz4UQQgghhBBCCHHlPde5y1OPtWnTor1MZCITmfz75Eq/MgkhhBBCCCH+0S6f9F/pSoQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiPTrn/FxYld6j0IIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcSV9v8CAAD//4H6O6c=") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r2, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, 0x0) getpid() r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000380)={0x0, 0x0, 0x1f, 0xc0c0c0c0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b80)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}}}}]}, 0x58}}, 0x0) 2.427641853s ago: executing program 1 (id=2640): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r0) 2.360709426s ago: executing program 2 (id=2641): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r1}}]}) 2.242464052s ago: executing program 1 (id=2642): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x100f]}) 2.236260013s ago: executing program 2 (id=2643): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000004c0)='./bus\x00', 0x1000840, &(0x7f00000002c0)={[{@fat=@check_strict}, {@utf8no}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp737'}}, {@shortname_winnt}, {@uni_xlateno}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@utf8no}, {@utf8no}, {@shortname_winnt}]}, 0x3, 0x350, &(0x7f0000000c00)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 2.118730279s ago: executing program 1 (id=2644): socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={0x0, 0x6}) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 1.949955711s ago: executing program 1 (id=2645): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = socket(0x11, 0xa, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000440)={0x80}) getpeername$packet(r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) r4 = socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) bind$tipc(r5, 0x0, 0xffffffffffffff4e) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000500)={0x43}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000200)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000100)={&(0x7f0000000080), 0x10, 0x0}, 0x40000) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 1.686391616s ago: executing program 2 (id=2646): r0 = socket(0x200000100000011, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}}}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390426bd700000e5ffffff000000", @ANYRES32=r3, @ANYBLOB="03000000000000001800128008000100736974000c00028008000300ac"], 0x38}}, 0x0) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="0fd126608032"}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="09040000f63e"], 0x3f00}], 0x1}, 0x0) 1.684889399s ago: executing program 4 (id=2647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x1b, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}}, 0x0) 1.609851927s ago: executing program 3 (id=2648): r0 = fsmount(0xffffffffffffffff, 0x1, 0x2) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f00000007c0)=@delqdisc={0x124, 0x25, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x4, 0x8}, {0x10, 0xfff2}, {0x10}}, [@q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x17}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x16}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x35}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x22}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x18}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x101}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x20004000}, 0x801) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x44, r1, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x9855) getresgid(&(0x7f0000000000), &(0x7f0000000300), &(0x7f0000000340)=0x0) setgid(r2) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4040000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x84) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x0, 0xffffffff, 0xffffffff, 0x128, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000400), {[{{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xff000000, 'batadv_slave_0\x00', 'wg2\x00', {0xff}, {0xff}, 0x88, 0x1, 0x2}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xb, 0x1, 0x1ff, 0x9, 'snmp\x00', 'syz1\x00', {0xfff}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x6, 0x0, 0x7, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x0, @loopback}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x107}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8, 0x2}}}}]}, 0x38}}, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x80000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7f000000", @ANYRES16=r6, @ANYBLOB="f74b00000000000000000500000003002c0000000000"], 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000001080)={0x194, r7, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x54}, @void, @val={0xc, 0x99, {0xc91, 0x1c}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x7ff}, @NL80211_ATTR_VENDOR_DATA={0x2c, 0xc5, "65502f603c25d62af7101f4b00d672c4a75850438d366f2ecdc473e44f227160889ca7e46d236310"}, @NL80211_ATTR_VENDOR_DATA={0x86, 0xc5, "06e3e57a3d38a5adceed38c31472b89adb94f35a678a923bb95fde790e7f55b26b11587ad8e941e8cad7675ed251d88cd491d3a7012c3f4c39185b701ab185c38eddb2381f0579055d33648f2ae58a64f20fe3bb0e154554c399bc176652ee35345bf356e5e86844d61c6e73d4ef4013472bc72e8160ccb42913dab0956c928011b5"}, @NL80211_ATTR_VENDOR_DATA={0xaf, 0xc5, "f6282880dc0f33c4d31c462c68b09a23ba6c60135f5c9910e6f5badd6e7a837d23f474bc919964e8706b3d7202486d6bad7d070c2de4b3a93cfda37c9747bada1818f0b7ab085bdd8127aced9e8a44c2ed604401485ef27bb997f158307e7881cdf6cdb1665e93639db14e3c4c3cdb4a57e6eca19ee4e88163f09d2e04077ccb17e1e6421532bf1016095739dc071ee3289da3b29c8a1707b4c66bfb74be4a32499049014d1cf42f88401d"}]}, 0x194}, 0x1, 0x0, 0x0, 0x4001}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r6, 0x300, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xce}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname(r9, &(0x7f00000000c0)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000140)=0x80) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010008105004400"/20, @ANYRES32=r10, @ANYBLOB="0580040000000000500012804c00010069703665727370616e43da4db4c44e6bf76bf34dffefa7665992418413335196f352648036cfacb5c7f21bbf4eec"], 0x70}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xd}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000011) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xfed4}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x58}}, 0x0) 1.523238508s ago: executing program 0 (id=2597): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_DF={0x5, 0xd, 0x4f}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 1.495848446s ago: executing program 4 (id=2649): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f0000000240)=@tipc, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/207, 0xcf}, {&(0x7f0000001940)=""/163, 0xa3}, {&(0x7f00000002c0)=""/88, 0x58}, {&(0x7f0000001a00)=""/65, 0x41}, {&(0x7f0000001a80)=""/52, 0x34}, {&(0x7f0000002400)=""/41, 0x29}, {&(0x7f0000001b40)=""/5, 0x5}, {&(0x7f0000001b80)=""/201, 0xc9}], 0x9, &(0x7f0000001d40)=""/39, 0x27}, 0x35b}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000001d80)=""/105, 0x69}, {&(0x7f0000001e00)=""/18, 0x12}, {&(0x7f0000002440)=""/192, 0xc0}, {&(0x7f0000001f00)=""/107, 0x6b}, {&(0x7f0000001f80)=""/135, 0x87}, {&(0x7f0000002040)=""/190, 0xbe}, {&(0x7f0000002100)=""/110, 0x6e}, {&(0x7f0000002180)=""/138, 0x8a}, {&(0x7f0000002240)=""/216, 0xd8}], 0x9, &(0x7f0000007080)=""/4103, 0x1007}, 0x1}, {{&(0x7f0000003400)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000003500)=[{&(0x7f0000003480)=""/90, 0x5a}, {&(0x7f00000038c0)=""/4096, 0x1000}], 0x2, &(0x7f0000005ac0)=""/188, 0xbc}}, {{&(0x7f0000003600)=@xdp, 0x80, &(0x7f0000005bc0)=[{&(0x7f0000003680)=""/27, 0x1b}, {&(0x7f00000036c0)=""/202, 0xca}, {&(0x7f00000037c0)=""/132, 0x84}, {&(0x7f00000048c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000005940)=""/115, 0x73}, {&(0x7f00000059c0)=""/168, 0xa8}, {&(0x7f0000005a80)=""/26, 0x1a}, {&(0x7f0000006fc0)=""/175, 0xaf}, {&(0x7f00000000c0)=""/4, 0x4}], 0xa}, 0x3ff}, {{&(0x7f0000005c80)=@tipc, 0x80, &(0x7f0000006e00)=[{&(0x7f0000006d00)=""/226, 0xe2}], 0x1}, 0x9}], 0x5, 0x40000000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = getpid() lseek(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000003c0)="bd94f8407fcbcb6caf011a0eef6ba2", 0xf) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) unshare(0x8000480) semget$private(0x0, 0x4000, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) semctl$GETALL(0x0, 0x0, 0x11, &(0x7f0000000040)=""/116) syz_open_procfs(r3, &(0x7f0000000000)='net/tcp\x00') bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(r3, 0x0) 645.531726ms ago: executing program 1 (id=2650): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) r0 = syz_open_dev$loop(0x0, 0x0, 0x103382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}, &(0x7f0000000440)=0xc) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x20, &(0x7f0000000000)={[{@gid={'gid', 0x3d, r1}}]}) 373.215709ms ago: executing program 0 (id=2655): syz_mount_image$xfs(&(0x7f0000000100), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@uquota}]}, 0x1, 0x9847, &(0x7f000001c900)="$eJzs3QW4ZXWhuP8zw9CNhYEMjUU3BqEggoCElBLSkgJKGIAIAqKApKAIKFIiSHd3d3d3d/6fYWYUxxeu/n/3udzr+77Pc87ee+2116z9/ay1ztmsw97LL7T0AgMDEw0Mb+Tl3zv45U8fufnLC+xw9PWHvbTwoYseOWLyGMMvhgwdcTnFiMspBwYGBo1YzqDh0wYPOf6EwQNjDQwMfudyxxt73EHjDQysMeLmfCMu5xx+Mf41I+d7a5R4RYetxqCdh38N/0cHBgbGHnblmYEZl3vnckas10z/9ESlLT//wgv93epvbsPGb8iI6+/8GmP41/iXDQyMf+kAbx+D3t9n9Pa/P9GeF6yw4vu8Hv8nWn7+hRcZxX/YvjjaiGlzDtvHR90HjY26nQ+d846Rx6BBeOD8P9Ly8y+02MC7H+cHVn7zgE3fevu4OXicgYHB4w4MDB5vYGDw+AMDgycYGBg84fvtUv9vva8bX1VVVb0vzb/ArAsMe703yu8DY438vZZ+L1zpjSXuGBgYGH34PIPnGPlasKqqqqqqqqr+dzb/ArMuCK//J3qv1//Hnfrq9L3+r6qqqqqqqvq/0yLzLzDrsNfxo7z+n/S9Xv9v88CL64/42/85hz/qzff3SVRVVVVVVVXVe7bU199+/T/uKK//h77X6/+H593pwRHzjfzvBm+8Y5GD3vH3BK+9Y/po75j/1XdMH/KO6e+cf4yBgcFDRkx//e+TB48z7L5/nn/wRMPWe8T0V94xfaa////NQ6Z+x/SZ3zF92ndMn2XEug6bPt07ps/+jvmn/1fGtqqqqqqqqqqqqqqqqqqq6n+qN5849cy/v+f7Jwfe8f7tf3sf9xF/FzDomLOvvvp9W9H/HQ3657+H2Ob9Xqf/14Y5j3XE0IGBDZd9v1el3ofe789rqPe3/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Luc///b+/9PdugaI/+f+TkP3nXyCd752HXfcX2s/9G1ft/6Tz3/P7DuoIGBEb4TDXNdfP6llpl+YGBggsl3PXi2gb/dN9ew++adZLQRb5Aw/G0QphnCC95mxKeibzNi1hHLOObt5S/y1kGjDRplJd7RxCcecsg6y78026iX07778xg88sqHLtliwZHvZTF4lJnebTsdufyRz2VU5xHrPv2wdZ9xsw02nnHTLbf63LobrLb2mmuvueHcc8451+xzzjH3LDOute76a840/Pu7jdnQt79P9a+M2aSjjtkT879zzEZ9bu82ZkPfe8zeXuKYe6yy3sgxG3XV/qsxm+q9x2zouiP+oSFDRx9Y9e2xGTQwMGTq0Qe2GHZj5jEHBoZMM2LeSYfN+/lJBg8M7Pb3Jzrs2ph/2wYHbTNsnuUXWnqBv3/s/j9//P67fJ79GMMvhowYkiFTjLiccvg/M9HA3zfFwUOOP2HwsOf+D8M83tjjDhpvYGCNETfnG3E594h7rxw537t8zvooK/r226zsPPzrbx5jD7ty1JIT3vTO5bwLwX9H/79+/v+T11yD/jZQg0Z8jZhnuNf8Cy/y93/r7WGYb+R7wgz72TLM5P/hY+z/y/5pfYeO9fab3L7b+r7H++IOf/6wfU372HlD/7veF5ePHYu9/X3ov3LsGHjvY8dof7/696lrXjHZqMeORd99Ff9hvxg5RmOOMtO7HTum33f+rd8+Nr33sWOxdUd80NDfjx2DBwaGTDXy2DHsQDLt6AO7Dbsxy7Ab040+cNiwG7O+fWPsgbOH3Zhh9Y3WX2PQ22/bM2K5Mw1b7nyTDHr7yV894/xHjrbnW29NPWJdZhrlwDpi+xj6zp+P808yfNhGPpaWe/dmw++bdsRyZ/43ljvysbTcuTYZft90I5Y7yyjLHe09ljvysSP3h2Gzvr0/TD/oH/7wE/bfhUbZfweNPKy/4yEjv8YY/jX+ZSM/Gwr2l3/ruEP770Tvsb7v8blWuL0Nm7bd4lec+t/1uVa0vmO99/q+2+dwv+v6rjf2Fkv8N6zvoHes7z9sZxvPM3xbmX7Edjb7v7H9jnzsqMex0d++dzjD9P/KcWy+fzqObTva4FFW/h292+9Aa8D8w69P+relzX34aBOOHPvRR1nuf/U70PTvfRybaN1RHrfQgQODaMwffvyQdcb8L8Z89IF//F195JiPfOx7jfl0/zzmg/5pzOd67zH/V3/vnH6q4feP9h5jPnjHTRcfOeZj/JtjPt2/O+bzDYxGY77bfsPH7b2Op+825iMf+49jPmTgKwMDA1OPGPNp/5XtfKb/nu18HJh/+PUH/jbpksnO2OUdx5hB/86YT/vvjvnQv23nU79935SDB8YYY2CL1TbbbJOZh38feXOW4d/5WPT0/cPH+b1+lr6b0cjHvtd+MfW/YjT0v8foY0P+ef6RLzpG3l727KMm/v97LJr63zMatNAAH4tOvmj4uL3X70XvNuYjH0s/B4e+4/Gjvq57j/ejxOc0bNo+++51+8hFjnhY70f5r/cPm+3I/8a37qgH+fpPrf/+7y5/d/m7y99d/uLe5fz/397//+GJln5sxIvk0XefZ+3V3+/1fZ/7jz7/P8L3H87/r772PLsPeyk44r73PD87fJ7/ledn5xx+Mf41I+cb9fwgr+i7n5+dbo8Zlhr4nzk/+/+rkfvqv/A6vuO/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9y7nP8f+TfKQ/d/4/5tRpwIHX3vvVZ/4/1e3/e5/+jz/yN8/+H8/xur77X34IG/3fee5/+Hz+M4/7/E/nueMPC/+Pz/yH218//1X5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt7l/P/8438O4A5Vllr55F/D7DhzF/a/v1e3/e5/9Tz/33+v7eO/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn9xI87/D4zysY5Ltl1gcP7//3bv4v+N/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzN/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/L+VP2bx/3b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/kz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8vf8ziv0n+mMV/0/wxi/9m+WMW/+/nj1n8f5A/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+t88cs/tvkj1n8t80fs/j/NH/M4r9d/pjF/2f5Yxb/7fPHLP475I9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y/yxyz+u+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv/d88cs/r/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xnoP+R/bLX+t2bxP7P9H7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxHzSQP2bxH5Q/ZvEfnD9m8R8tf8ziPyR/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8J8kfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4j9p/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf7L8MYv/J/PHLP6T549Z/Ifmj1n8p8gfs/hPmT9m8Z8qf8ziP3X+mMV/mvwxi/+0+WMW/+nyxyz+0+ePWfw/lT9m8f90/pjF/zP5Yxb/z+aPWfw/lz9m8Z8hf8ziP2P+mMV/pvwxi//M+WMW/1nyxyz+s+aPWfxnyx+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/D+fP2bx/0L+mMX/i/m/o23+ds3i/6X8MYv/fPljFv/588cs/gvkj1n8F8wfs/h/OX/M4v+V/DGL/0L5Yxb/hfPHLP5fzR+z+C+SP2bx/1r+mMV/0fwxi/9i+WMW/6/nj1n8F88fs/gvkT9m8V8yf8zi/438MYv/UvljFv+l88cs/svkj1n8l80fs/h/M3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8v5U/ZvH/dv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/L+TP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4fy9/zOK/Sf6YxX/T/DGL/2b5Yxb/7+ePWfx/kD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/63zxyz+2+SPWfy3zR+z+P80f8ziv13+mMX/Z/ljFv/t88cs/jvkj1n8f54/ZvHfMX/M4r9T/pjFf+f8MYv/L/LHLP675I9Z/H+ZP2bx/1X+mMV/1/wxi/9u+WMW/93zxyz+v84fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+v8kfs/jvlz9m8d8/f8zi/9v8MYv/7/LHLP4H5I9Z/H+fP2bxPzB/zOJ/UP6Yxf/g/DGL/x/yxyz+f8wfs/gfkj9m8f9T/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/j/OX/M4n9U/pjF/y/5Yxb/o/PHLP7H5I9Z/P+aP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/Q/6D/wfX639pFv9n2/8xi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/JvF/+2r+/5zFf1D+mMV/cP6YxX+0/DGL/5D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8R+aP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58sdG+I8+8B/uP3f+mGX/nyd/zOI/b/6Yxf/z+WMW/y/kj1n8v5g/ZvH/Uv6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+cP2bx/0r+mMV/ofwxi//C+WMW/6/mj1n8F8kfs/h/LX/M4r9o/pjFf7H8MYv/1/PHLP6L549Z/JfIH7P4L5k/ZvH/Rv6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/L+ZP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/lfLHLP7fyh+z+H87f8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+38kfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfy/mz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+G+ePWfy/lz9m8d8kf8ziv2n+mMV/s/wxi//388cs/j/IH7P4b54/ZvHfIn/M4r9l/pjFf6v8MYv/D/PHLP4/yh+z+P84f8zi/5P8MYv/1vljFv9t8scs/tvmj1n8f5o/ZvHfLn/M4v+z/DGL//b5Yxb/HfLHLP4/zx+z+O+YP2bx3yl/zOK/c/6Yxf8X+WMW/13yxyz+v8wfs/j/Kn/M4r9r/pjFf7f8MYv/7vljFv9f549Z/PfIH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/f5I9Z/PfLH7P4758/ZvH/bf6Yxf93+WMW/wPyxyz+v88fs/gfmD9m8T8of8zif3D+mMX/D/ljFv8/5o9Z/A/JH7P4/yl/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/P+cP2bxPyp/zOL/l/wxi//R+WMW/2Pyxyz+f80fs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+J+aP2bxPy1/zOJ/ev6Yxf+M/DGL/5n5Yxb/s/LHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyT+ow3kj1n8B+WPWfwH549Z/EfLH7P4D8kfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+E+aP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bxnyx/zOL/yfwxi//k+WMW/6H5Yxb/KfLHLP5T5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv9P5Y9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/GfIH7P4z5g/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/8/nj1n8v5A/ZvH/Yv6Yxf9L+WMW//nezf+tMf+HVux/Zxb/+dv/MYv/AvljFv8F88cs/l/OH7P4fyV/zOK/UP6YxX/h/DGL/1fzxyz+i+SPWfy/lj9m8V80f8ziv1j+mMX/6/ljFv/F88cs/kvkj1n8l8wfs/h/I3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/MH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv9v5Y9Z/L+dP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP7fyx+z+G+SP2bx3zR/zOK/Wf6Yxf/7+WMW/x/kj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMV/6/wxi/82+WMW/23zxyz+P80fs/hvlz9m8f9Z/pjFf/v8MYv/DvljFv+f549Z/HfMH7P475Q/ZvHfOX/M4v+L/DGL/y75Yxb/X+aPWfx/lT9m8d81f8ziv1v+mMV/9/wxi/+v88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9v8scs/vvlj1n8988fs/j/Nn/M4v+7/DGL/wH5Yxb/3+ePWfwPzB+z+B+UP2bxPzh/zOL/h/wxi/8f88cs/ofkj1n8/5Q/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/n/OH7P4H5U/ZvH/S/6Yxf/o/DGL/zH5Yxb/v+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/IQP5Yxb/QfljFv/B+WMW/9Hyxyz+Q/LHLP6j549Z/MfIH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/8H8scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/pPmj1n8P5o/ZvH/WP6Yxf/j+WMW/0/kj1n8J8sfs/h/Mn/M4j95/pjFf2j+mMV/ivwxi/+U+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6Yxf9T+WMW/0/nj1n8P5M/ZvH/bP6Yxf9z+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjFf778MYv//PljFv8F8scs/gvmj1n8v5w/ZvH/Sv6YxX+h/DGL/8L5Yxb/r+aPWfwXyR+z+H8tf8ziv2j+mMV/sfwxi//X88cs/ovnj1n8l8gfs/gvmT9m8f9G/pjFf6n8MYv/0vljFv9l8scs/svmj1n8v5k/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+V8scs/t/KH7P4fzt/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP7fyR+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/L+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP4b549Z/L+XP2bx3yR/zOK/af6YxX+z/DGL//fzxyz+P8gfs/hvnj9m8d8if8ziv2X+mMV/q/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi//W+WMW/23yxyz+2+aPWfx/mj9m8d8uf8zi/7P8MYv/9vljFv8d8scs/j/PH7P475g/ZvHfKX/M4r9z/pjF/xf5Yxb/XfLHLP6/zB+z+P8qf8ziv2v+mMV/t/wxi//u+WMW/1/nj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW/9/kj1n898sfs/jvnz9m8f9t/pjF/3f5Yxb/A/LHLP6/zx+z+B+YP2bxPyh/zOJ/cP6Yxf8P+WMW/z/mj1n8D8kfs/j/KX/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8/5w/ZvE/Kn/M4v+X/DGL/9H5Yxb/Y/LHLP5/zR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHJP6jD+SPWfwH5Y9Z/Afnj1n8R8sfs/gPyR+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4T5o/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvGfLH/M4v/J/DGL/+T5Yxb/ofljFv8p8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/cv6Yxf8r+WMW/4Xyxyz+C+ePWfy/mj9m8V8kf8zi/7X8MYv/ovljFv/F8scs/l/PH7P4L54/ZvFfIn/M4r9k/pjF/xv5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Zv6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4fyt/zOL/7fwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+H8nf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bx/27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/17+mMV/k/wxi/+m+WMW/83yxyz+388fs/j/IH/M4r95/pjFf4v8MYv/lvljFv+t8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/lvnj1n8t8kfs/hvmz9m8f9p/pjFf7v8MYv/z/LHLP7b549Z/HfIH7P4/zx/zOK/Y/6YxX+n/DGL/875Yxb/X+SPWfx3yR+z+P8yf8zi/6v8MYv/rvljFv/d8scs/rvnj1n8f50/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n8f5M/ZvHfL3/M4r9//pjF/7f5Yxb/3+WPWfwPyB+z+P8+f8zif2D+mMX/oPwxi//B+WMW/z/kj1n8/5g/ZvE/JH/M4v+n/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvH/c/6Yxf+o/DGL/1/yxyz+R+ePWfyPyR+z+P81f8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGJ/5CB/DGJ/+g35I9Z/G/MH7P435Q/ZvG/Weu/9Xvea/G/Rev/3ln8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/MQbyxyz+g/LHLP6D88cs/qPlj1n8h+SPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/CfNH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6YxX/y/DGL/9D8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fzl/zOL/lfwxi/9C+WMW/4Xzxyz+X80fs/gvkj9m8f9a/pjFf9H8MYv/YvljFv+v549Z/BfPH7P4L5E/ZvFfMn/M4v+N/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzN/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/L+VP2bx/3b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/kz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8vf8ziv0n+mMV/0/wxi/9m+WMW/+/nj1n8f5A/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+t88cs/tvkj1n8t80fs/j/NH/M4r9d/pjF/2f5Yxb/7fPHLP475I9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y/yxyz+u+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv/d88cs/r/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHHMgfs/gPyh+z+A/OH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnzR/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+Q/PHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/5fwxi/9X8scs/gvlj1n8F84fs/h/NX/M4r9I/pjF/2v5Yxb/RfPHLP6L5Y9Z/L+eP2bxXzx/zOK/RP6YxX/J/DGL/zfyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/zfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/1b+mMX/2/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9O/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/738MYv/JvljFv9N88cs/pvlj1n8v58/ZvH/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/3b5Yxb/n+WPWfy3zx+z+O+QP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+v8gfs/jvkj9m8f9l/pjF/1f5Yxb/XfPHLP675Y/95/uPMezbmLvnj/3n+7/dmL/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHGsgfs/gPyh+z+A/OH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnzR/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+Q/PHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/5fwxi/9X8scs/gvlj1n8F84fs/h/NX/M4r9I/pjF/2v5Yxb/RfPHLP6L5Y9Z/L+eP2bxXzx/zOK/RP6YxX/J/DGL/zfyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/zfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/1b+mMX/2/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9O/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/738MYv/JvljFv9N88cs/pvlj1n8v58/ZvH/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/3b5Yxb/n+WPWfy3zx+z+O+QP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+v8gfs/jvkj9m8f9l/pjF/1f5Yxb/XfPHLP675Y9Z/HfPH7P4/zp/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4/yZ/zOK/X/6YxX///DGL/2/zxyz+v8sfs/gfkD9m8f99/pjF/8D8MYv/QfljFv+D88cs/n/IH7P4/zF/zOJ/SP6Yxf9P+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOL/5/wxi/9R+WMW/7/kj1n8j84fs/gfkz9m8f9r/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT8m8R97IH/M4j8of8ziPzh/zOI/Wv6YxX9I/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+E+SP2bx/0D+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/0vwxi/9H88cs/h/LH7P4fzx/zOL/ifwxi/9k+WMW/0/mj1n8J88fs/gPzR+z+E+RP2bxnzJ/zOI/Vf6YxX/q/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4fyp/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOI/Q/6YxX/G/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/h/Pn/M4v+F/DGL/xfzxyz+X8ofs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+X88cs/l/JH7P4L5Q/ZvFfOH/M4v/V/DGL/yL5Yxb/r+WPWfwXzR+z+C+WP2bx/3r+mMV/8fwxi/8S+WMW/yXzxyz+38gfs/gvlT9m8V86f8ziv0z+mMV/2fwxi/8388cs/svlj1n8l88fs/ivkD9m8V8xf8ziv1L+mMX/W/ljFv9v549Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjF/zv5Yxb/1fPHLP5r5I9Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/d/PHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjFf+P8MYv/9/LHLP6b5I9Z/DfNH7P4b5Y/ZvH/fv6Yxf8H+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx3zp/zOK/Tf6YxX/b/DGL/0/zxyz+2+WPWfx/lj9m8d8+f8ziv0P+mMX/5/ljFv8d88cs/jvlj1n8d84fs/j/In/M4r9L/pjF/5f5Yxb/X+WPWfx3zR+z+O+WP2bx3z1/zOL/6/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOL/m/wxi/9++WMW//3zxyz+v80fs/j/Ln/M4n9A/pjF//f5Yxb/A/PHLP4H5Y9Z/A/OH7P4/yF/zOL/x/wxi/8h+WMW/z/lj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/+f88cs/kflj1n8/5I/ZvE/On/M4n9M/pjF/6/5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjEf5yB/DGL/6D8MYv/4Pwxi/9o+WMW/yH5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv9J88cs/h/NH7P4fyx/zOL/8fwxi/8n8scs/pPlj1n8P5k/ZvGfPH/M4j80f8ziP0X+mMV/yvwxi/9U+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOL/qfwxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4j9f/pjFf/78MYv/AvljFv8F88cs/l/OH7P4fyV/zOK/UP6YxX/h/DGL/1fzxyz+i+SPWfy/lj9m8V80f8ziv1j+mMX/6/ljFv/F88cs/kvkj1n8l8wfs/h/I3/M4r9U/pjFf+n8MYv/MvljFv9l88cs/t/MH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/SvljFv9v5Y9Z/L+dP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/7+SPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0b5Yxb/jfPHLP7fyx+z+G+SP2bx3zR/zOK/Wf6Yxf/7+WMW/x/kj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMV/6/wxi/82+WMW/23zxyz+P80fs/hvlz9m8f9Z/pjFf/v8MYv/DvljFv+f549Z/HfMH7P475Q/ZvHfOX/M4v+L/DGL/y75Yxb/X+aPWfx/lT9m8d81f8ziv1v+mMV/9/wxi/+v88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9v8scs/vvlj1n8988fs/j/Nn/M4v+7/DGL/wH5Yxb/3+ePWfwPzB+z+B+UP2bxPzh/zOL/h/wxi/8f88cs/ofkj1n8/5Q/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/n/OH7P4H5U/ZvH/S/6Yxf/o/DGL/zH5Yxb/v+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/cQfyxyz+g/LHLP6D88cs/qPlj1n8h+SPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/CfNH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6YxX/y/DGL/9D8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fzl/zOL/lfwxi/9C+WMW/4Xzxyz+X80fs/gvkj9m8f9a/pjFf9H8MYv/YvljFv+v549Z/BfPH7P4L5E/ZvFfMn/M4v+N/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzN/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/L+VP2bx/3b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/kz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8vf8ziv0n+mMV/0/wxi/9m+WMW/+/nj1n8f5A/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+t88cs/tvkj1n8t80fs/j/NH/M4r9d/pjF/2f5Yxb/7fPHLP475I9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y/yxyz+u+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv/d88cs/r/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfzHG8gfs/gPyh+z+A/OH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnzR/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+Q/PHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/5fwxi/9X8scs/gvlj1n8F84fs/h/NX/M4r9I/pjF/2v5Yxb/RfPHLP6L5Y9Z/L+eP2bxXzx/zOK/RP6YxX/J/DGL/zfyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/zfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/1b+mMX/2/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9O/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/738MYv/JvljFv9N88cs/pvlj1n8v58/ZvH/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/3b5Yxb/n+WPWfy3zx+z+O+QP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+v8gfs/jvkj9m8f9l/pjF/1f5DwyM9c+TLP675o9Z/HfLH7P4754/ZvH/df6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvH/Tf6YxX+//DGL//75Yxb/3+aPWfx/lz9m8T8gf8zi//v8MYv/gfljFv+D8scs/gfnj1n8/5A/ZvH/Y/6Yxf+Q/DGL/5/yxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf/P+WMW/6Pyxyz+f8kfs/gfnT9m8T8mf8zi/9f8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP/5A/pjFf1D+mMV/cP6YxX+0/DGL/5D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOL/gfwxi/8H88cs/h/KH7P4fzh/zOL/kfwxi/+k+WMW/4/mj1n8P5Y/ZvH/eP6Yxf8T+WMW/8nyxyz+n8wfs/hPnj9m8R+aP2bxnyJ/zOI/Zf6YxX+q/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvH/VP6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/y/nj1n8v5I/ZvFfKH/M4r9w/pjF/6v5Yxb/RfLHLP5fyx+z+C+aP2bxXyx/zOL/9fwxi//i+WMW/yXyxyz+S+aPWfy/kT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/2/mj1n8l8sfs/gvnz9m8V8hf8ziv2L+mMV/pfwxi/+38scs/t/OH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/d/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/v5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/xvljFv/v5Y9Z/DfJH7P4b5o/ZvHfLH/M4v/9/DGL/w/yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOK/df6YxX+b/DGL/7b5Yxb/n+aPWfy3yx+z+P8sf8ziv33+mMV/h/wxi//P88cs/jvmj1n8d8ofs/jvnD9m8f9F/pjFf5f8MYv/L/PHLP6/yh+z+O+aP2bx3y1/zOK/e/6Yxf/X+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6Yxf83+WMW//3yxyz+++ePWfx/mz9m8f9d/pjF/4D8MYv/7/PHLP4H5o/9J/oPGhjYZmAU/4Pyx/4T/Wn/Pzh/zOL/h/wxi/8f88cs/ofkj1n8/5Q/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/n/OH7P4H5U/ZvH/S/6Yxf/o/DGL/zH5Yxb/v+aPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5YxL/CQbyxyz+g/LHLP6D88cs/qPlj1n8h+SPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/CfNH7P4fzR/zOL/sfwxi//H88cs/p/IH7P4T5Y/ZvH/ZP6YxX/y/DGL/9D8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/+n8scs/p/OH7P4fyZ/zOL/2fwxi//n8scs/jPkj1n8Z8wfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fzl/zOL/lfwxi/9C+WMW/4Xzxyz+X80fs/gvkj9m8f9a/pjFf9H8MYv/YvljFv+v549Z/BfPH7P4L5E/ZvFfMn/M4v+N/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4fzN/zOK/XP6YxX/5/DGL/wr5Yxb/FfPHLP4r5Y9Z/L+VP2bx/3b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfy/kz9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+H83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfw3zh+z+H8vf8ziv0n+mMV/0/wxi/9m+WMW/+/nj1n8f5A/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+t88cs/tvkj1n8t80fs/j/NH/M4r9d/pjF/2f5Yxb/7fPHLP475I9Z/H+eP2bx3zF/zOK/U/6YxX/n/DGL/y/yxyz+u+SPWfx/mT9m8f9V/pjFf9f8MYv/bvljFv/d88cs/r/OH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/r/JH7P475c/ZvHfP3/M4v/b/DGL/+/yxyz+B+SPWfx/nz9m8T8wf8zif1D+mMX/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Y6P4H/uf6n94/phl/z8if8zif2T+mMX/z/ljFv+j8scs/n/JH7P4H50/ZvE/Jn/M4v/X/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH7P4v5k/ZvF/K39M4j/hQP6YxX9Q/pjFf3D+mMV/tPwxi/+Q/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEf5/9j5+7Dva7rO45/gQ9K3oDO1ULDCETRVBBUJPMGLfUIHO3GUhKUFG8mKFMKdKVkN9ZWznKVayvNm9SRWjhrruEo55wumhXVNhtjM8da4bKcuFWy68A5xDm9O5fny3dfr3w/Hn9wzu93ev9SntfVi9/hOukfytJ/R/1DWfrvpH8oS/+d9Q9l6T9c/1CW/iP0D2Xpv4v+oSz9d9U/lKX/b+gfytJ/N/1DWfr/pv6hLP1frH8oS/+X6B/K0v+39A9l6f9S/UNZ+o/UP5Sl/+76h7L030P/UJb+L9M/lKX/KP1DWfrvqX8oS/+X6x/K0n+0/qEs/V+hfyhL/zH6h7L0H6t/KEv/vfQPZek/Tv9Qlv576x/K0n8f/UNZ+o/XP5Sl/776h7L030//UJb+r9Q/lKX//vqHsvQ/QP9Qlv4H6h/K0n+C/qEs/SfqH8rS/yD9Q1n6T9I/lKX/ZP1DWfofrH8oS/9D9A9l6X+o/qEs/afoH8rS/zD9Q1n6T9U/lKX/q/QPZel/uP6hLP1frX8oS/8j9A9l6X+k/qEs/Y/SP5Sl/9H6h7L0n6Z/KEv/Y/QPZel/rP6hLP1fo38oS//X6h/K0v84/UNZ+h+vfyhL/xP0D2Xp36F/KEv/E/UPZek/Xf9Qlv4z9A9l6T9T/1CW/p36h7L0P0n/UJb+J+sfytL/dfqHsvR/vf6hLP3foH8oS/836h/K0v8U/UNZ+r9J/1CW/m/WP5Sl/6n6h7L0P03/UJb+s/QPZen/Fv1DWfqfrn8oS//Z+oey9J+jfyhL/zP0D2Xpf6b+oSz95+ofytL/rfqHsvQ/S/9Qlv5n6x/K0n+e/qEs/c/RP5Sl/7n6h7L0P0//UJb+5+sfytL/t/UPZel/gf6hLP3n6x/K0n+B/qEs/S/UP5Sl/0X6h7L0X6h/KEv/39E/lKX/xfqHsvS/RP9Qlv6L9A9l6f82/UNZ+r9d/1CW/ov1D2Xpv0T/UJb+l+ofytL/Mv1DWfr/rv6hLP3foX8oS/936h/K0v9y/UNZ+l+hfyhL/6X6h7L0f5f+oSz9r9Q/lKX/u/UPZen/Hv1DWfq/V/9Qlv7v0z+Upf9V+oey9H+//qEs/T+gfyhL/9/TP5Sl/+/rH8rS/4P6h7L0/5D+oSz9r9Y/lKX/H+gfytL/Gv1DWfp/WP9Qlv4f0T+Upf+1+oey9P9D/UNZ+n9U/1CW/h/TP5Sl/8f1D2Xpf53+oSz9/0j/UJb+n9A/lKX/H+sfytL/T/QPZen/Sf1DWfp/Sv9Qlv7X6x/K0v8G/UNZ+n9a/1CW/jfqH8rS/yb9Q1n636x/KEv/W/QPZen/Gf1DWfrfqn8oS//b9A9l6X+7/qEs/f9U/1CW/sv0D2Xp/1n9Q1n636F/KEv/O/UPZel/l/6hLP0/p38oS//P6x/K0n+5/qEs/e/WP5Sl/5/pH8rS/x79Q1n6f0H/UJb+X9Q/lKX/n+sfytL/Xv1DWfr/hf6hLP2/pH8oS/+/1D+Upf8K/UNZ+t+nfyhL/7/SP5Sl/0r9Q1n6f1n/UJb+X9E/lKX//fqHsvT/a/1DWfo/oH8oS/+/0T+Upf+D+oey9P9b/UNZ+j+kfyhL/4f1D2Xp/3f6h7L0/6r+oSz9V+kfytL/a/qHsvT/e/1DWfo/on8oS/+v6x/K0v8b+oey9P+m/qEs/VfrH8rS/1v6h7L0/7b+oSz9v6N/KEv/f9A/lKX/P+ofytL/n/QPZen/qP6hLP2/q38oS/9/1j+Upf8a/UNZ+v+L/qEs/dfqH8rS/1/1D2Xp/2/6h7L0f0z/UJb+39M/lKX/4/qHsvT/d/1DWfqv0z+Upf9/6B/K0v/7+oey9P9P/UNZ+v9A/1CW/j/UP5Sl/3r9Q1n6P6F/KEv//9I/lKX/j/QPZen/pP6hLP1/rH8oS/+f6B/K0v8p/UNZ+v+3/qEs/Z/WP5Sl/wb9Q1n6P6N/KEv//9E/lKX//+ofytL/p/qHsvT/mf6hLP1/rn8oS/9n9Q9l6b9R/1CS/rtU+oey9B+kfyhL/8H6h7L0H6J/KEv/on8oS/+h+oey9N9O/1CW/tvrH8rSf5j+oSz9X6R/KEv/HfQPZem/o/6hLP130j+Upf/O+oey9B+ufyhL/xH6h15w/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAquronLZ+yKBeTw3Z+sGoVfM2fTx4w6nn3XLLF3bt+dj95enBSw7e+sHGjRs3Dn6q+mr3w+2rqur6b9ul+/Gwvsddr3/FtOvGb35URt/4zH7LFj9zzPvuWn3bhuNvnb5s6KZnh1ZnnnP+/HkTB1dVGTu0WtL14KBBVVX2Hlpd0/VgUteDfYZWt3U9mLzpwYuqlV0PDjzrovlndz0xvvbvGQD8uuvoXFoN6bXYVa8/DWy9/1dMu3tpz8d+XrLn1UrVvf/3Lt/t7X2+1uNX7H/P65dX9N3/Af8LAgC/ZGD7f//ono/9vOQvvf+feeHHVkdf+9X73/P6ZYz9B4DmBd//77XRfb/v3+f7/9GfA7bcX3DGtdt37f+tG05Z1P1UeS7f///F65exffd/cK/v/w+qqrJXz/f/t6+qMm4bfzsAIIWOznet7+/9f//7X3bvczNo6/3f9Y6Vp3Tt/5od7npJ91NDB7j/e/X3/v+4Pv+sAMBz09H56Y193v8PYP+rvYOX3LL/xy556MVd+//1Nd8bvdXXBrL/4/ru/4RFCxZOuOTSyw44f8Hcc+edO+/CqVOmHHbIlEOnTpqw6TsCm3/dxt8UAHiB27b3/9UOfW4GVdXjW+4/uGLUQ137P+kTJ5zX/dSwAe7/3v2+/x/t/T8A9DJmcLXddtWSuYsWXXzQ5l97Hk7a/Ovm/1iw/wP4+/+xPT9E1/Mzg4Oq6qVb7jsvef/grv2/aezuK7qf2m6A+79Pv/t/dO+fVQQAnpttfP9/dp+bXvs/YsjtU7v2/8Rx+17V/dRA//5/fL/7f4P3/wBQR0dn9f/6Jrpr/6/c6efX17su+/r5PwBoXhv7/8Sod4+pd132s/8A0Lw29n/eUTvfU++6vNL+A0Dz2tj/BzuunV3vuuxv/wGgeW3s/4wLRj1c77ocYP8BoHlt7P/oy85aXO+6HGj/AaB5bez/slPXr613XSbYfwBoXhv7f/qwNU/Wuy4T7T8ANK+N/f/OfiefU++6HGT/AaB5bez/lw4/8NF612WS/QeA5rWx/xNH3jCj3nWZbP8BoHlt7P9HLjry5nrX5WD7DwDNa2P/R8783OR61+UQ+w8AzWtj/992+teurnddDrX/ANC8Nvb/2cuPHlnvukyx/wDQvDb2f+WDe86qd10Os/8A0Lw29n/649esqnddptp/AGheG/u/z1NPLKx3XV5l/wGgeW3s/2e/fea6etflcPsPAM1rY/+H3/DsiHrX5dX2HwCa18b+v/fKhdfVuy5H2H8AaF4b+//9a4ePq3ddjrT/ANC8Nvb/rZ9furzedTnK/gNA89rY/288Nnl6vetytP0HgOa1sf+nfXnFd+tdl2n2HwCa18b+H/LI/XPrXZdj7D8ANK+N/b/vxzOfrnddjrX/ANC8Nvb/Ze/55p71rstr7D8ANK+N/f/4Z2Z/oN51ea39B4DmtbH/P/3i2IPrXZfj7D8ANK+N/V/40Ttuqnddjrf/ANC8Nva/c/+frK13XU6w/wDQvDb2/4Hh71xc77p02H8AaF4b+3/7y4c8XO+6nGj/AaB5bez/mCM+NLvedZlu/wGgeW3s/9Lpu91T77rMsP8A0Lw29n/H8z85pt51mWn/AaB5bez/uUseu77edem0/wDQvDb2/4ezFgyrd11Osv8A0Lw29n+PHeaMrHddTrb/ANC8Nvb/mvGPXF3vurzO/gNA89rY/59NvXNyvevyevsPAM1rY/8X7zH65nrX5Q32HwCa18b+f2vBfTPqXZc32n8AaF4b+z/npImP1rsup9h/AGheG/s/aU7nOfWuy5vsPwA0r439v/cdK5+sd13ebP8BoHlt7P9VD3xqeb3rcqr9B4DmtbH/O63bZVy963Ka/QeA5rWx/2c+feF19a7LLPsPAM1rY/9/sHrtiHrX5S32HwCa18b+d9x4+bp61+V0+w8AzWtj/7+y9EcL612X2fYfAJrXxv7f+eGrV9W7LnPsPwA0r439H3d3NavedTnD/gNA8y659LIL5s6fP+9in/jEJz7Z8snz/b9MAABA037xh/7n+58EAAAAAAAAAAAAAAAAAAAA8mrj/07s+f53BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/YwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAABB/tYrDFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAVwAAAP//4u3Sjw==") fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', 0x0, 0x2) 339.207371ms ago: executing program 2 (id=2656): socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={0x0, 0x6}) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) 170.018084ms ago: executing program 1 (id=2657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) fstat(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r5, r4, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r6, 0x0, 0x1, &(0x7f0000000000), 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c) r7 = socket$inet(0x2, 0x80000, 0x4) getsockopt$inet_opts(r7, 0x0, 0x1, &(0x7f00000000c0)=""/119, &(0x7f0000000040)=0x77) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 145.121267ms ago: executing program 3 (id=2658): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x0) 0s ago: executing program 2 (id=2659): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), 0x4) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'vxcan1\x00', {0x2, 0x0, @broadcast}}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) fsopen(&(0x7f0000000280)='cifs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r6, 0x40044160, 0x3) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000002"], 0x110) setsockopt$inet_group_source_req(r7, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) setsockopt$inet_group_source_req(r7, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @private}}}, 0x108) sigaltstack(&(0x7f0000000040)={0x0}, &(0x7f00000000c0)={0x0}) kernel console output (not intermixed with test programs): 359] veth1_macvtap: entered promiscuous mode [ 568.731040][T11455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.744237][T10659] bcachefs (loop2): shutting down [ 568.759210][T10659] bcachefs (loop2): going read-only [ 568.765430][T10659] bcachefs (loop2): finished waiting for writes to stop [ 568.840313][T11736] bch-copygc/loop (11736) used greatest stack depth: 11200 bytes left [ 568.849066][T10659] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 568.864877][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.913317][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.948413][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.967648][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.993916][T11359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.006084][T10659] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 569.079773][T10659] bcachefs (loop2): shutdown complete, journal seq 13 [ 569.081507][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.087885][T10659] bcachefs (loop2): marking filesystem clean [ 569.097114][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.097143][T11359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.125466][T11359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.150893][T11359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.196470][T11359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.225670][T11359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.234794][T11359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.255893][T11359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.411040][T10659] bcachefs (loop2): shutdown complete [ 569.439975][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.609276][T11755] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 570.072672][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.121160][T11375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 570.236868][ T5529] bridge0: port 1(bridge_slave_0) entered blocking state [ 570.244234][ T5529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 570.365485][ T5529] bridge0: port 2(bridge_slave_1) entered blocking state [ 570.372819][ T5529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 570.489462][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.514143][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.587529][T11455] veth0_vlan: entered promiscuous mode [ 570.678357][T11519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 570.693090][T11519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 570.735211][T11758] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.771052][ T7740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.786138][T11375] veth0_vlan: entered promiscuous mode [ 570.794983][ T7740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.846431][T11455] veth1_vlan: entered promiscuous mode [ 570.923788][T11375] veth1_vlan: entered promiscuous mode [ 571.133035][T11375] veth0_macvtap: entered promiscuous mode [ 571.227275][T11375] veth1_macvtap: entered promiscuous mode [ 571.263770][T11455] veth0_macvtap: entered promiscuous mode [ 571.330932][T11455] veth1_macvtap: entered promiscuous mode [ 571.419675][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.442950][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.465587][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.493217][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.517974][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.530652][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.543563][T11375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 571.576602][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.589966][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.604973][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.627276][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.642860][T11375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 571.660375][T11375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.682882][T11375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.697520][T11375] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.706688][T11375] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.725809][T11375] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.737605][T11375] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.791103][T11779] loop2: detected capacity change from 0 to 1024 [ 571.862604][ T29] audit: type=1326 audit(1721053824.953:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11773 comm="syz.0.2015" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x0 [ 571.885901][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.909351][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.923111][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.946602][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 571.962304][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 571.997746][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.037947][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 572.072966][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.129295][T11455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 572.147977][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 572.824218][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 572.905524][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 572.949766][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.015819][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.083179][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.124103][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.153169][T11455] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 573.175025][T11455] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 573.238843][T11455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.307453][T11455] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.362530][T11455] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.402549][T11455] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.432733][T11455] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.679781][ T5252] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 573.714320][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.771504][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.912140][ T5252] usb 4-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 573.932660][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.955472][ T5252] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.959323][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.996031][ T5252] usb 4-1: config 0 descriptor?? [ 574.017103][ T5252] ums-realtek 4-1:0.0: USB Mass Storage device detected [ 574.186992][ T143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.208409][ T143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.245705][ T5870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 574.255598][T11519] veth0_vlan: entered promiscuous mode [ 574.278466][ T5870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 574.352002][ T780] usb 4-1: USB disconnect, device number 10 [ 574.478263][T11519] veth1_vlan: entered promiscuous mode [ 574.733170][T11817] hub 6-0:1.0: USB hub found [ 574.752236][T11817] hub 6-0:1.0: 1 port detected [ 574.877543][T11519] veth0_macvtap: entered promiscuous mode [ 574.962189][T11821] loop2: detected capacity change from 0 to 64 [ 575.015404][T11824] loop1: detected capacity change from 0 to 512 [ 575.032691][T11519] veth1_macvtap: entered promiscuous mode [ 575.638732][ T29] audit: type=1800 audit(1721053828.693:343): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2027" name="file0" dev="loop2" ino=21 res=0 errno=0 [ 575.733438][T11824] netlink: 'syz.1.2029': attribute type 6 has an invalid length. [ 575.785012][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.846798][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.868407][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.881493][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.892707][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.903571][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.915761][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.941096][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 575.963879][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 575.985706][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.021485][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.042745][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.063724][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.080377][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.092227][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.107899][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.123701][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.133735][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.145785][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.156247][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 576.167372][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 576.181620][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.225840][T11519] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.250690][T11519] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.289032][T11519] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.298045][T11519] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 576.322879][T11840] loop2: detected capacity change from 0 to 1024 [ 576.417182][T11840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 576.665859][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.704771][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 576.739275][T10659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.881101][ T5870] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 576.890223][ T5870] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 577.222719][T11842] loop3: detected capacity change from 0 to 32768 [ 578.574053][T11877] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 578.722608][ T5431] Bluetooth: hci0: command 0x0419 tx timeout [ 578.916949][ T29] audit: type=1326 audit(1721053832.003:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11890 comm="syz.5.2054" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a175bd9 code=0x0 [ 579.284036][T11901] loop1: detected capacity change from 0 to 1024 [ 580.825966][T11918] hub 6-0:1.0: USB hub found [ 580.852391][T11918] hub 6-0:1.0: 1 port detected [ 581.151394][ T25] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 581.186459][T11896] loop4: detected capacity change from 0 to 32768 [ 581.202738][T11896] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2053 (11896) [ 581.233253][T11896] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 581.271809][T11896] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 581.299039][T11896] BTRFS info (device loop4): using free-space-tree [ 581.373018][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.419142][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.451981][ T25] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 581.468413][ T25] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 581.480759][ T25] usb 1-1: Product: syz [ 581.485198][T11939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 581.495390][ T25] usb 1-1: config 0 descriptor?? [ 581.501401][ T5529] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 581.709322][ T5529] usb 6-1: Using ep0 maxpacket: 16 [ 581.727346][ T5529] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 581.799916][ T5529] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 581.818888][ T5529] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.835995][ T5529] usb 6-1: Product: syz [ 581.877472][ T5529] usb 6-1: Manufacturer: syz [ 581.888801][ T5529] usb 6-1: SerialNumber: syz [ 581.908419][ T5529] usb 6-1: config 0 descriptor?? [ 581.930492][T11455] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 581.960780][ T25] konepure 0003:1E7D:2DB4.000F: item fetching failed at offset 10/11 [ 581.980240][ T25] konepure 0003:1E7D:2DB4.000F: parse failed [ 581.987957][ T25] konepure 0003:1E7D:2DB4.000F: probe with driver konepure failed with error -22 [ 582.064594][T11957] loop3: detected capacity change from 0 to 64 [ 583.128660][ T5402] usb 6-1: USB disconnect, device number 11 [ 583.188763][ T29] audit: type=1326 audit(1721053836.273:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11961 comm="syz.1.2074" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a10175bd9 code=0x0 [ 583.375040][ T25] usb 1-1: USB disconnect, device number 22 [ 583.578777][T11971] loop2: detected capacity change from 0 to 8 [ 584.129481][ T29] audit: type=1326 audit(1721053837.213:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11970 comm="syz.2.2078" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc175bd9 code=0x0 [ 585.251659][T11988] loop4: detected capacity change from 0 to 1024 [ 585.259191][T11988] hfsplus: unable to parse mount options [ 585.696206][T11998] loop2: detected capacity change from 0 to 64 [ 586.477512][T12002] ipt_rpfilter: unknown options [ 587.591721][T12021] loop2: detected capacity change from 0 to 8 [ 587.651525][T12023] loop3: detected capacity change from 0 to 1024 [ 588.154169][ T29] audit: type=1326 audit(1721053841.243:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12019 comm="syz.2.2095" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3cdc175bd9 code=0x0 [ 589.369280][T12038] hub 6-0:1.0: USB hub found [ 589.399598][T12038] hub 6-0:1.0: 1 port detected [ 590.008826][ T5509] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 590.397351][ T5509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 590.455867][ T5509] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.539384][ T5509] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 590.586542][ T5509] usb 1-1: New USB device strings: Mfr=0, Product=9, SerialNumber=0 [ 590.649146][ T5509] usb 1-1: Product: syz [ 590.674964][ T5509] usb 1-1: config 0 descriptor?? [ 591.157204][ T5509] konepure 0003:1E7D:2DB4.0010: item fetching failed at offset 10/11 [ 591.202621][ T5509] konepure 0003:1E7D:2DB4.0010: parse failed [ 591.231248][ T5509] konepure 0003:1E7D:2DB4.0010: probe with driver konepure failed with error -22 [ 591.821858][ T5509] usb 1-1: USB disconnect, device number 23 [ 592.204752][ T5428] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 592.419137][T12076] loop3: detected capacity change from 0 to 8192 [ 592.571350][T12076] loop3: AHDI p1 p2 p3 [ 592.575730][T12076] loop3: p1 start 4278255615 is beyond EOD, truncated [ 592.579392][T12075] loop2: detected capacity change from 0 to 1024 [ 592.646143][T12075] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 592.646186][T12076] loop3: p2 size 4164158976 extends beyond EOD, [ 592.662761][T12081] loop4: detected capacity change from 0 to 256 [ 592.684631][T12076] truncated [ 592.727244][T12075] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 592.834825][T12075] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 592.890298][T12075] EXT4-fs (loop2): orphan cleanup on readonly fs [ 593.010086][T12075] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz.2.2111: Freeing blocks not in datazone - block = 0, count = 4096 [ 593.032657][T12086] netlink: 'syz.0.2116': attribute type 3 has an invalid length. [ 593.111626][T12075] EXT4-fs (loop2): Remounting filesystem read-only [ 593.118905][ T29] audit: type=1326 audit(1721053846.163:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 593.118981][ T29] audit: type=1326 audit(1721053846.183:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 593.119038][ T29] audit: type=1326 audit(1721053846.183:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 593.119136][ T29] audit: type=1326 audit(1721053846.183:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz.0.2116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 593.249110][T12075] EXT4-fs (loop2): 1 orphan inode deleted [ 593.401172][T12075] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 594.460879][T12111] loop1: detected capacity change from 0 to 32768 [ 594.502512][T12112] loop5: detected capacity change from 0 to 1024 [ 594.699907][T12111] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 594.922201][ T5870] hfsplus: b-tree write err: -5, ino 4 [ 594.930356][T12111] XFS (loop1): Ending clean mount [ 594.943935][T12111] XFS (loop1): Quotacheck needed: Please wait. [ 596.353226][T12111] XFS (loop1): Quotacheck: Done. [ 596.370198][T12136] loop3: detected capacity change from 0 to 512 [ 596.574631][T12136] EXT4-fs (loop3): Invalid log cluster size: 83886081 [ 596.993174][T10659] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 597.002862][T12137] loop4: detected capacity change from 0 to 8192 [ 597.078523][T11375] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 597.097087][T12137] loop4: AHDI p1 p2 p3 [ 597.118967][T12137] loop4: p1 start 4278255615 is beyond EOD, truncated [ 597.179938][T12137] loop4: p2 size 4164158976 extends beyond EOD, truncated [ 597.472909][ T29] audit: type=1326 audit(1721053850.563:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12143 comm="syz.2.2132" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3cdc175bd9 code=0x0 [ 598.186753][T12163] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 598.218148][T12163] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 598.550944][T12169] loop2: detected capacity change from 0 to 1024 [ 599.099883][T12168] loop4: detected capacity change from 0 to 8192 [ 599.599122][T12179] loop5: detected capacity change from 0 to 2048 [ 599.647780][T12179] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096) [ 599.869756][ T51] hfsplus: b-tree write err: -5, ino 4 [ 600.776605][T12193] loop5: detected capacity change from 0 to 8 [ 600.792181][T12197] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (46336) [ 600.796407][T12190] loop3: detected capacity change from 0 to 2048 [ 600.827093][T12197] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 600.870124][T12190] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 600.944831][T12201] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.145822][T12198] loop2: detected capacity change from 0 to 4096 [ 601.163214][T12198] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 601.284544][T12208] 9pnet_fd: Insufficient options for proto=fd [ 601.364763][ T29] audit: type=1326 audit(1721053854.443:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12192 comm="syz.5.2153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7e3a175bd9 code=0x0 [ 601.596369][T12198] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 601.863833][T12198] ntfs3: loop2: Failed to load $MFT (-22). [ 601.954190][T12212] loop4: detected capacity change from 0 to 2048 [ 602.044322][T12212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 602.449771][T12221] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 602.455470][T12235] input: syz1 as /devices/virtual/input/input35 [ 602.740936][T11455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.888802][ T5428] Bluetooth: hci3: command 0x0406 tx timeout [ 605.208985][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.279077][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.394542][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.476455][T12265] loop2: detected capacity change from 0 to 64 [ 605.501574][T12267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2179'. [ 605.530951][T12262] loop1: detected capacity change from 0 to 4096 [ 605.550573][T12262] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 605.634271][T12262] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 605.662889][T12262] ntfs3: loop1: Failed to load $MFT (-22). [ 605.870937][T12281] input: syz1 as /devices/virtual/input/input36 [ 606.176883][T12293] loop1: detected capacity change from 0 to 2048 [ 606.249237][T12293] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 606.321264][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.336176][T12298] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 606.465898][T12295] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 606.602539][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 606.792553][T12303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2194'. [ 606.830247][ T8] usb 6-1: too many configurations: 65, using maximum allowed: 8 [ 606.953275][ T8] usb 6-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 606.972826][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.988168][T12285] loop2: detected capacity change from 0 to 32768 [ 607.030631][ T8] usb 6-1: Found UVC 0.00 device (046d:08c1) [ 607.039894][ T8] usb 6-1: No valid video chain found. [ 607.301188][T12285] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 607.796604][T12309] fuse: Unknown parameter 'fd0x0000000000000007' [ 607.810138][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.903380][T12322] loop3: detected capacity change from 0 to 64 [ 608.034108][T12285] XFS (loop2): Ending clean mount [ 608.252218][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.416869][T10659] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 608.812043][T12339] loop3: detected capacity change from 0 to 8192 [ 608.822497][ T25] usb 6-1: USB disconnect, device number 12 [ 608.880071][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.025088][T12351] loop4: detected capacity change from 0 to 2048 [ 609.047838][T12351] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 609.199896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.230475][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.273264][T12359] loop3: detected capacity change from 0 to 1024 [ 610.717071][T12371] loop4: detected capacity change from 0 to 1024 [ 610.824027][T12375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 610.970642][T12371] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 611.103024][T12371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.339175][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.465802][T11455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.769534][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.028792][ T5407] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 612.239968][ T5407] usb 1-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 612.281929][ T5407] usb 1-1: config 1 interface 0 has no altsetting 0 [ 612.303189][ T5407] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 612.323918][ T5407] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 612.350250][ T5407] usb 1-1: SerialNumber: syz [ 612.367959][T12417] loop1: detected capacity change from 0 to 1024 [ 612.399549][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.413194][T12417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 612.454698][T12417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.870762][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.188445][T12426] loop3: detected capacity change from 0 to 128 [ 616.111638][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.146625][ T1585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.155634][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.169295][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.211494][T11375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.303346][ T5407] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 616.358781][T12433] loop1: detected capacity change from 0 to 8 [ 617.680984][ T29] audit: type=1326 audit(1721053870.773:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12432 comm="syz.1.2238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4a10175bd9 code=0x0 [ 617.705921][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.722225][ T25] usb 1-1: USB disconnect, device number 24 [ 617.760507][ T25] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 618.178983][T12457] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2245'. [ 618.837606][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.233606][ T1585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.744693][T12488] loop4: detected capacity change from 0 to 2048 [ 619.849167][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.859406][T12488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.283433][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.294669][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.851690][ T29] audit: type=1800 audit(1721053875.923:355): pid=12508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2259" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 623.070489][T12497] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 623.284605][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.291544][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.364349][ T4270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.379515][ T780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.393490][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.560758][T12522] loop5: detected capacity change from 0 to 4096 [ 623.591497][T11455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.024966][T12531] loop3: detected capacity change from 0 to 128 [ 624.070600][ T5402] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 624.815192][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.862194][ T5402] usb 1-1: Using ep0 maxpacket: 8 [ 624.876807][ T5402] usb 1-1: config 0 has an invalid interface number: 211 but max is 0 [ 624.889989][ T5402] usb 1-1: config 0 has no interface number 0 [ 624.896313][ T5402] usb 1-1: config 0 interface 211 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 624.910025][ T5402] usb 1-1: config 0 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 624.934590][T12538] loop1: detected capacity change from 0 to 512 [ 624.935972][ T5402] usb 1-1: config 0 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 624.963207][T12538] EXT4-fs (loop1): Invalid log cluster size: 83886081 [ 624.974845][ T5402] usb 1-1: config 0 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 625.045727][ T5402] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 625.060906][T12541] tipc: Failed to remove unknown binding: 66,1,1/0:4269976686/4269976688 [ 625.089356][ T5402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.093429][T12541] tipc: Failed to remove unknown binding: 66,1,1/0:4269976686/4269976688 [ 625.124980][ T5402] usb 1-1: Product: syz [ 625.139288][ T5402] usb 1-1: Manufacturer: syz [ 625.148662][ T5402] usb 1-1: SerialNumber: syz [ 625.171662][ T5402] usb 1-1: config 0 descriptor?? [ 625.183425][T12523] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 625.204235][ T4270] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.215168][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.237449][ T5407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.324864][T12544] 9pnet_fd: Insufficient options for proto=fd [ 625.373883][ T2397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.572072][T12544] loop2: detected capacity change from 0 to 2048 [ 625.701824][T12557] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 626.110764][ T5402] ums_eneub6250 1-1:0.211: USB Mass Storage device detected [ 626.287144][ T5402] usb 1-1: USB disconnect, device number 25 [ 627.080202][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2297'. [ 627.800069][T12599] loop2: detected capacity change from 0 to 512 [ 628.160123][T12599] EXT4-fs: Ignoring removed bh option [ 628.217078][T12599] EXT4-fs (loop2): blocks per group (255) and clusters per group (8192) inconsistent [ 628.238711][ T5407] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 628.461325][ T5407] usb 6-1: Using ep0 maxpacket: 8 [ 628.670256][ T5402] net_ratelimit: 5 callbacks suppressed [ 628.670279][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.693272][ T5407] usb 6-1: config 0 has an invalid interface number: 211 but max is 0 [ 628.738690][ T5407] usb 6-1: config 0 has no interface number 0 [ 628.744882][ T5407] usb 6-1: config 0 interface 211 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 628.968790][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.992784][ T5407] usb 6-1: config 0 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.013363][ T5407] usb 6-1: config 0 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.028651][ T5407] usb 6-1: config 0 interface 211 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.040078][ T5870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.041512][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.429754][T12624] ipt_rpfilter: unknown options [ 632.070626][ T5252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.086540][ T5252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.145201][ T5407] usb 6-1: string descriptor 0 read error: -71 [ 632.206994][ T5407] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=8f.d5 [ 632.226668][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.281354][ T5407] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 632.317997][ T5407] usb 6-1: config 0 descriptor?? [ 632.364499][ T5407] usb 6-1: can't set config #0, error -71 [ 632.387677][ T5407] usb 6-1: USB disconnect, device number 13 [ 632.462873][T12632] loop2: detected capacity change from 0 to 128 [ 633.628891][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.759685][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.977317][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2316'. [ 633.997923][T12638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 634.160101][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.173771][T12649] pimreg: entered allmulticast mode [ 634.286026][T12658] pimreg: left allmulticast mode [ 634.306171][T12659] Bluetooth: MGMT ver 1.22 [ 634.319953][T12655] loop2: detected capacity change from 0 to 128 [ 634.351039][T12655] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 634.485679][T12664] syz.2.2325: attempt to access beyond end of device [ 634.485679][T12664] loop2: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 634.578161][T12670] sysv_free_block: trying to free block not in datazone [ 634.671534][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.720655][T12675] netlink: 'syz.4.2329': attribute type 2 has an invalid length. [ 634.830413][T12672] virtio-fs: tag <(null)> not found [ 634.839107][T10659] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 635.271152][T12682] loop4: detected capacity change from 0 to 512 [ 635.326106][T12682] EXT4-fs: Ignoring removed bh option [ 635.352072][T12682] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 635.679152][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.836286][T12712] netlink: 'syz.4.2344': attribute type 2 has an invalid length. [ 636.661002][T12728] loop1: detected capacity change from 0 to 1024 [ 636.720768][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.757724][T12728] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 636.800882][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.011248][T12736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2352'. [ 637.045275][T12698] loop2: detected capacity change from 0 to 32768 [ 637.239911][ T5800] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 637.264472][T12698] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 637.822058][T12751] loop4: detected capacity change from 0 to 8 [ 638.129725][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.218779][ T5800] usb 2-1: Using ep0 maxpacket: 16 [ 638.259303][ T5800] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 638.357407][T12698] XFS (loop2): Ending clean mount [ 638.384371][ T5800] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 638.418753][ T5800] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 638.449964][ T5800] usb 2-1: config 0 descriptor?? [ 638.498706][ T29] audit: type=1326 audit(1721053891.583:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 638.537746][ T29] audit: type=1326 audit(1721053891.583:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 638.605384][ T29] audit: type=1326 audit(1721053892.664:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 638.628134][ T29] audit: type=1326 audit(1721053892.664:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 638.650502][ C1] vkms_vblank_simulate: vblank timer overrun [ 638.666327][ T29] audit: type=1326 audit(1721053892.664:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 638.734826][ T29] audit: type=1326 audit(1721053892.664:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 638.757761][ T29] audit: type=1326 audit(1721053892.664:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 638.770519][T12768] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 638.781065][ T29] audit: type=1326 audit(1721053892.874:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 639.110073][ T29] audit: type=1326 audit(1721053893.204:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 639.182399][ T5800] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 639.192468][ T29] audit: type=1326 audit(1721053893.204:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12762 comm="syz.4.2358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5faf775bd9 code=0x7ffc0000 [ 639.217744][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.236425][ T5800] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 639.294407][ T5800] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 639.316245][ T5800] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 639.327938][T12773] loop4: detected capacity change from 0 to 1024 [ 639.334591][ T5800] microsoft 0003:045E:07DA.0011: unknown main item tag 0x0 [ 639.407957][ T5800] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input38 [ 639.582878][ T5800] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 639.602860][T10659] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 639.651302][ T5800] usb 2-1: USB disconnect, device number 11 [ 639.839055][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.916350][T12785] loop4: detected capacity change from 0 to 164 [ 639.926659][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.007074][T12785] ISOFS: Unable to identify CD-ROM format. [ 640.249454][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.359159][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 640.380195][ C1] vkms_vblank_simulate: vblank timer overrun [ 640.474671][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 640.595086][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 640.665979][T12794] loop4: detected capacity change from 0 to 16 [ 640.673838][T12794] erofs: Unknown parameter 'ÿÿÿÿt’5Æ;Àâ} ï7_cŠúÏèðÎîËN”Øü÷û"LŽõ‚öaÂm)p÷«ñ„°ƒº'6~—' [ 642.848650][T12732] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 642.974979][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.997231][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.105711][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 643.245243][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 643.265081][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 643.294630][T12798] loop5: detected capacity change from 0 to 2048 [ 643.307392][T12798] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 643.331172][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 643.683610][T12817] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 643.736096][T11519] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 643.742739][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 643.746606][T11519] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 643.904556][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 643.935386][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 644.008217][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.011024][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 644.123344][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 644.199121][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 644.277748][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 644.330830][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 644.406772][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.467555][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 644.544179][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 644.611269][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 644.663880][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 644.817545][ T2449] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.980425][T12839] loop4: detected capacity change from 0 to 512 [ 645.011468][T12839] EXT4-fs: Ignoring removed nobh option [ 645.049872][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.059003][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.075165][T12839] EXT4-fs (loop4): blocks per group (71) and clusters per group (32768) inconsistent [ 645.152314][ T2449] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.374866][T11375] EXT4-fs error: 171 callbacks suppressed [ 645.374896][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.426503][ T2449] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.488282][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.571156][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.609498][T12853] team0: Device veth0_macvtap failed to register rx_handler [ 645.634158][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.680394][ T5428] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 645.686691][T11375] EXT4-fs warning: 81 callbacks suppressed [ 645.686720][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 645.720518][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.745788][ T5428] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 645.758174][T12853] tracefs: Bad value for 'gid' [ 645.758667][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.782807][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 645.795447][ T5428] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 645.806964][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.862509][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.883234][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 645.895544][T11375] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /56/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.917075][ T5428] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 645.925118][T11375] EXT4-fs error (device loop1): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 645.948732][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 645.963502][ T5428] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 645.971657][ T5428] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 645.983647][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 645.997580][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 646.010683][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 646.030961][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 646.046285][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 646.054076][ T2449] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.062425][T11375] EXT4-fs warning (device loop1): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 646.108723][T12860] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2392'. [ 646.123914][ T5800] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.230661][T12866] 9pnet_fd: Insufficient options for proto=fd [ 646.363694][T12866] loop4: detected capacity change from 0 to 2048 [ 646.478259][T12871] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 646.690136][T11375] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.959504][ T2449] bridge_slave_1: left allmulticast mode [ 646.965222][ T2449] bridge_slave_1: left promiscuous mode [ 646.983917][ T2449] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.004488][ T2449] bridge_slave_0: left allmulticast mode [ 647.017002][ T2449] bridge_slave_0: left promiscuous mode [ 647.026882][ T2449] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.154778][T12887] loop4: detected capacity change from 0 to 1024 [ 647.200124][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.224150][T12887] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 647.279654][ T29] kauditd_printk_skb: 353 callbacks suppressed [ 647.279677][ T29] audit: type=1326 audit(1721053901.374:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 647.367563][ T29] audit: type=1326 audit(1721053901.414:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 647.441908][ T5501] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.822053][ T29] audit: type=1326 audit(1721053901.434:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.084717][ T5428] Bluetooth: hci0: command tx timeout [ 648.288680][ T29] audit: type=1326 audit(1721053901.434:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.302811][ T5252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.358665][ T29] audit: type=1326 audit(1721053901.434:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.446124][ T29] audit: type=1326 audit(1721053901.434:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.482258][ T5431] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 648.497559][ T5431] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 648.507960][ T5431] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 648.519484][ T5431] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 648.542115][ T29] audit: type=1326 audit(1721053901.434:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.566945][ T5431] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 648.574654][ T5431] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 648.576028][ T29] audit: type=1326 audit(1721053901.434:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.613570][ T29] audit: type=1326 audit(1721053901.434:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.643064][ T29] audit: type=1326 audit(1721053901.434:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12891 comm="syz.3.2405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 648.666397][T12890] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 648.805956][T12906] 9pnet_fd: Insufficient options for proto=fd [ 649.145978][ T2449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.158313][ T2449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.170656][ T2449] bond0 (unregistering): Released all slaves [ 649.394613][T12861] chnl_net:caif_netlink_parms(): no params data found [ 649.425247][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.538723][ T5509] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.159773][ T5431] Bluetooth: hci0: command tx timeout [ 650.172394][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.719062][ T5431] Bluetooth: hci2: command tx timeout [ 650.759064][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.767296][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.813590][T12935] input: syz1 as /devices/virtual/input/input39 [ 650.813739][T11455] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /58/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 650.901585][ T2449] hsr_slave_0: left promiscuous mode [ 650.917116][ T2449] hsr_slave_1: left promiscuous mode [ 650.929363][T11455] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 650.960113][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 650.974376][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.980070][T11455] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /58/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 650.990632][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.010868][T12942] xt_policy: neither incoming nor outgoing policy selected [ 651.021220][T11455] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 651.056826][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 651.071309][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.079071][T11455] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /58/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 651.080017][T11455] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 651.113841][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.168936][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 651.176253][ T2449] veth1_macvtap: left promiscuous mode [ 651.197331][T11455] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /58/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 651.200111][ T2449] veth0_macvtap: left promiscuous mode [ 651.238583][ T2449] veth1_vlan: left promiscuous mode [ 651.244182][ T2449] veth0_vlan: left promiscuous mode [ 651.346667][T11455] EXT4-fs error (device loop4): ext4_empty_dir:3095: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 651.428361][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 651.513579][T11455] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /58/bus/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 651.813529][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 651.840798][ T5252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.010603][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 652.258905][ T5431] Bluetooth: hci0: command tx timeout [ 652.276700][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 652.338253][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 652.383032][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 652.396262][T11455] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #11: comm syz-executor: directory missing '.' [ 652.567799][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 652.567821][ T29] audit: type=1326 audit(1721053906.654:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 652.644282][ T29] audit: type=1326 audit(1721053906.694:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 652.703065][ T29] audit: type=1326 audit(1721053906.714:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 652.728036][ T29] audit: type=1326 audit(1721053906.714:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 652.752052][ T29] audit: type=1326 audit(1721053906.714:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 652.861768][ T5431] Bluetooth: hci2: command tx timeout [ 653.020734][ T29] audit: type=1326 audit(1721053906.714:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 653.325616][ T29] audit: type=1326 audit(1721053906.714:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 653.509485][ T29] audit: type=1326 audit(1721053906.714:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 653.543032][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.592266][ T29] audit: type=1326 audit(1721053906.714:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 653.662995][ T29] audit: type=1326 audit(1721053906.714:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12961 comm="syz.0.2431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4664575bd9 code=0x7ffc0000 [ 653.844305][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.232588][ T2449] team0 (unregistering): Port device team_slave_1 removed [ 654.311152][ T2449] team0 (unregistering): Port device team_slave_0 removed [ 654.334622][ T5431] Bluetooth: hci0: command tx timeout [ 654.587874][ T5402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.968834][ T5431] Bluetooth: hci2: command tx timeout [ 655.207001][T12970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2433'. [ 655.331741][T12978] xt_policy: neither incoming nor outgoing policy selected [ 655.431065][T11455] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.456647][T12861] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.489371][T12861] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.548890][T12861] bridge_slave_0: entered allmulticast mode [ 655.571537][T12861] bridge_slave_0: entered promiscuous mode [ 655.745937][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.792665][T12861] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.807898][T12861] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.898815][T12861] bridge_slave_1: entered allmulticast mode [ 656.070613][T12861] bridge_slave_1: entered promiscuous mode [ 656.560089][T12861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.628353][T12861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.806835][T12898] chnl_net:caif_netlink_parms(): no params data found [ 656.832572][ T5252] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.838839][T12993] program syz.2.2442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 656.908798][ T5529] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.955388][T12861] team0: Port device team_slave_0 added [ 656.984090][T12861] team0: Port device team_slave_1 added [ 657.105433][ T5431] Bluetooth: hci2: command tx timeout [ 657.189246][T12996] loop3: detected capacity change from 0 to 512 [ 657.223300][T12996] EXT4-fs: Ignoring removed nobh option [ 657.268462][T12996] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 657.796367][ T5428] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 657.808737][ T5428] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 657.817905][ T5428] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 657.828756][ T5428] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 657.837828][ T5428] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 657.845577][ T5428] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 657.905480][T12861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 657.934430][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 657.978008][T12861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.007385][T12861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.028044][T12861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.054209][ T780] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.064800][T12861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 658.088688][ T5252] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 658.201545][T12898] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.228842][T12898] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.236150][T12898] bridge_slave_0: entered allmulticast mode [ 658.268751][T12898] bridge_slave_0: entered promiscuous mode [ 658.309262][ T5252] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.2d [ 658.328702][ T5252] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 658.357334][ T5252] usb 3-1: Product: syz [ 658.364675][ T5252] usb 3-1: SerialNumber: syz [ 658.389751][ T5252] usb 3-1: config 0 descriptor?? [ 658.417316][T13012] input: syz0 as /devices/virtual/input/input40 [ 658.434068][T12898] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.452175][T12898] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.462345][T12898] bridge_slave_1: entered allmulticast mode [ 658.471898][T12898] bridge_slave_1: entered promiscuous mode [ 658.604595][T12861] hsr_slave_0: entered promiscuous mode [ 658.620246][T12861] hsr_slave_1: entered promiscuous mode [ 658.631093][T12861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 658.649524][T12861] Cannot create hsr debugfs directory [ 658.671059][ T5252] ch341 3-1:0.0: ch341-uart converter detected [ 658.692340][T13018] xt_policy: neither incoming nor outgoing policy selected [ 658.702720][ T5252] usb 3-1: failed to receive control message: -71 [ 658.711983][ T5252] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 658.725936][T12898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.742107][T12898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.748302][ T5252] usb 3-1: USB disconnect, device number 13 [ 658.798473][ T5252] ch341 3-1:0.0: device disconnected [ 658.864614][ T2449] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.984760][T12898] team0: Port device team_slave_0 added [ 659.003799][T12898] team0: Port device team_slave_1 added [ 659.085081][ T2449] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.318831][ T5252] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 659.491454][T13033] loop2: detected capacity change from 0 to 4096 [ 659.515681][T13033] NILFS (loop2): invalid segment: Checksum error in segment payload [ 659.523881][T13033] NILFS (loop2): trying rollback from an earlier position [ 659.531527][T13033] NILFS (loop2): invalid segment: Checksum error in segment payload [ 659.539595][T13033] NILFS (loop2): error -22 while searching super root [ 659.549358][ T5252] usb 4-1: Using ep0 maxpacket: 8 [ 659.557588][ T5252] usb 4-1: config 0 has no interfaces? [ 659.566734][ T5252] usb 4-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=56.a0 [ 659.581139][ T2449] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.612257][ T5252] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.928902][ T5252] usb 4-1: Product: syz [ 659.933434][ T5252] usb 4-1: Manufacturer: syz [ 659.938197][ T5252] usb 4-1: SerialNumber: syz [ 659.968899][ T5428] Bluetooth: hci4: command tx timeout [ 660.191123][ T5252] usb 4-1: config 0 descriptor?? [ 660.634086][ T5252] usb 4-1: USB disconnect, device number 11 [ 660.654306][T12898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.661643][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.691682][T12898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.775280][ T2449] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.816935][T12898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.824358][T12898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 660.852551][T12898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.988220][T13043] xt_policy: neither incoming nor outgoing policy selected [ 661.065226][T12898] hsr_slave_0: entered promiscuous mode [ 661.107328][T12898] hsr_slave_1: entered promiscuous mode [ 661.150153][T12898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 661.164348][T12898] Cannot create hsr debugfs directory [ 661.199827][ T5428] Bluetooth: hci1: command 0x0406 tx timeout [ 661.642885][T13064] loop3: detected capacity change from 0 to 64 [ 661.751122][T13001] chnl_net:caif_netlink_parms(): no params data found [ 661.999495][ T5431] Bluetooth: hci4: command tx timeout [ 662.083646][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 662.083670][ T29] audit: type=1804 audit(1721053916.174:783): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2462" name="/newroot/88/file0/file1" dev="loop3" ino=2 res=1 errno=0 [ 662.227484][T13064] syz.3.2462: attempt to access beyond end of device [ 662.227484][T13064] loop3: rw=0, sector=1701603686, nr_sectors = 1 limit=64 [ 662.243154][T13064] Buffer I/O error on dev loop3, logical block 1701603686, async page read [ 662.326155][T13064] syz.3.2462: attempt to access beyond end of device [ 662.326155][T13064] loop3: rw=0, sector=1701603686, nr_sectors = 1 limit=64 [ 662.347077][T13064] Buffer I/O error on dev loop3, logical block 1701603686, async page read [ 662.357029][ T29] audit: type=1800 audit(1721053916.454:784): pid=13064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2462" name="file1" dev="loop3" ino=2 res=0 errno=0 [ 662.404520][T13054] loop2: detected capacity change from 0 to 32768 [ 662.518855][T13054] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 662.642355][T13054] XFS (loop2): Ending clean mount [ 662.705330][T13054] XFS (loop2): Quotacheck needed: Please wait. [ 662.839389][ T2449] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.899211][T13054] XFS (loop2): Quotacheck: Done. [ 663.059515][T10659] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 663.357746][ T2449] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.520923][T13001] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.549458][T13001] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.556808][T13001] bridge_slave_0: entered allmulticast mode [ 663.584480][T13001] bridge_slave_0: entered promiscuous mode [ 663.613985][T13001] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.626867][T13001] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.648177][T13001] bridge_slave_1: entered allmulticast mode [ 663.657554][T13001] bridge_slave_1: entered promiscuous mode [ 663.786566][ T2449] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.973002][T13099] loop3: detected capacity change from 0 to 512 [ 663.983623][T13099] EXT4-fs: Ignoring removed nobh option [ 663.992268][T13099] EXT4-fs (loop3): blocks per group (71) and clusters per group (32768) inconsistent [ 664.079080][ T5431] Bluetooth: hci4: command tx timeout [ 664.095762][ T2449] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.181606][T13001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.221491][T13001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.382940][T13001] team0: Port device team_slave_0 added [ 664.397265][T13001] team0: Port device team_slave_1 added [ 664.460592][T13001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.468458][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.505332][T13001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.606797][T13001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.650735][T13119] loop2: detected capacity change from 0 to 4096 [ 664.665369][T13119] NILFS (loop2): invalid segment: Checksum error in segment payload [ 664.674236][T13119] NILFS (loop2): trying rollback from an earlier position [ 664.681891][T13119] NILFS (loop2): invalid segment: Checksum error in segment payload [ 664.690158][T13119] NILFS (loop2): error -22 while searching super root [ 664.708842][T13001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.734765][ C1] vkms_vblank_simulate: vblank timer overrun [ 664.798483][T13001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.757639][ T2449] bridge_slave_1: left allmulticast mode [ 665.773117][ T2449] bridge_slave_1: left promiscuous mode [ 665.788902][ T2449] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.826505][ T2449] bridge_slave_0: left allmulticast mode [ 665.838877][ T2449] bridge_slave_0: left promiscuous mode [ 665.845836][ T2449] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.877154][ T2449] bridge_slave_1: left allmulticast mode [ 665.886950][ T2449] bridge_slave_1: left promiscuous mode [ 665.900452][ T2449] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.921207][ T2449] bridge_slave_0: left allmulticast mode [ 665.927197][ T2449] bridge_slave_0: left promiscuous mode [ 665.960830][ T2449] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.015667][T13138] loop3: detected capacity change from 0 to 512 [ 666.039767][T13138] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 666.178712][ T5431] Bluetooth: hci4: command tx timeout [ 667.526689][T13141] loop3: detected capacity change from 0 to 32768 [ 667.540121][T13141] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2483 (13141) [ 667.575033][T13141] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 667.585459][T13141] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 667.594809][T13141] BTRFS info (device loop3): using free-space-tree [ 668.201423][T11359] BTRFS info (device loop3): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 668.674383][T13164] loop3: detected capacity change from 0 to 128 [ 668.838202][T13164] syz.3.2485: attempt to access beyond end of device [ 668.838202][T13164] loop3: rw=2049, sector=153, nr_sectors = 88 limit=128 [ 668.934112][ T2449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.008465][ T2449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.019415][T13168] syz.3.2485: attempt to access beyond end of device [ 669.019415][T13168] loop3: rw=2049, sector=241, nr_sectors = 1 limit=128 [ 669.061930][ T2449] bond0 (unregistering): Released all slaves [ 669.082804][ T29] audit: type=1804 audit(1721053923.164:785): pid=13164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2485" name="/newroot/96/file0/bus" dev="loop3" ino=1048824 res=1 errno=0 [ 669.283158][T13164] syz.3.2485: attempt to access beyond end of device [ 669.283158][T13164] loop3: rw=2049, sector=377, nr_sectors = 1 limit=128 [ 669.297776][ T29] audit: type=1804 audit(1721053923.374:786): pid=13168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2485" name="/newroot/96/file0/bus" dev="loop3" ino=1048824 res=1 errno=0 [ 669.553749][ T7740] kworker/u8:13: attempt to access beyond end of device [ 669.553749][ T7740] loop3: rw=1, sector=242, nr_sectors = 1 limit=128 [ 669.573467][ T7740] Buffer I/O error on dev loop3, logical block 242, lost async page write [ 669.587095][ T7740] kworker/u8:13: attempt to access beyond end of device [ 669.587095][ T7740] loop3: rw=1, sector=243, nr_sectors = 1 limit=128 [ 669.603746][ T7740] Buffer I/O error on dev loop3, logical block 243, lost async page write [ 669.616840][ T2449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.624521][ T7740] kworker/u8:13: attempt to access beyond end of device [ 669.624521][ T7740] loop3: rw=1, sector=244, nr_sectors = 1 limit=128 [ 669.640198][ T7740] Buffer I/O error on dev loop3, logical block 244, lost async page write [ 669.648944][ T7740] kworker/u8:13: attempt to access beyond end of device [ 669.648944][ T7740] loop3: rw=1, sector=245, nr_sectors = 1 limit=128 [ 669.662516][ T7740] Buffer I/O error on dev loop3, logical block 245, lost async page write [ 669.663058][ T2449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.671115][ T7740] kworker/u8:13: attempt to access beyond end of device [ 669.671115][ T7740] loop3: rw=1, sector=246, nr_sectors = 1 limit=128 [ 669.671150][ T7740] Buffer I/O error on dev loop3, logical block 246, lost async page write [ 669.671198][ T7740] kworker/u8:13: attempt to access beyond end of device [ 669.671198][ T7740] loop3: rw=1, sector=247, nr_sectors = 1 limit=128 [ 669.671229][ T7740] Buffer I/O error on dev loop3, logical block 247, lost async page write [ 669.671275][ T7740] kworker/u8:13: attempt to access beyond end of device [ 669.671275][ T7740] loop3: rw=1, sector=248, nr_sectors = 1 limit=128 [ 669.671305][ T7740] Buffer I/O error on dev loop3, logical block 248, lost async page write [ 669.672816][ T7740] Buffer I/O error on dev loop3, logical block 378, lost async page write [ 669.759104][ T7740] Buffer I/O error on dev loop3, logical block 379, lost async page write [ 669.767729][ T7740] Buffer I/O error on dev loop3, logical block 380, lost async page write [ 669.789252][ T2449] bond0 (unregistering): Released all slaves [ 669.810180][T13001] hsr_slave_0: entered promiscuous mode [ 669.827722][T13001] hsr_slave_1: entered promiscuous mode [ 669.834724][T13001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.845560][T13001] Cannot create hsr debugfs directory [ 670.427809][T13175] loop2: detected capacity change from 0 to 2048 [ 670.475250][T13175] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 670.495732][T13175] UDF-fs: Scanning with blocksize 512 failed [ 670.526286][T13175] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 670.870728][T13179] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2488'. [ 671.053028][ T2449] hsr_slave_0: left promiscuous mode [ 671.079667][ T2449] hsr_slave_1: left promiscuous mode [ 671.117743][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.135249][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.159867][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.178789][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.204567][T13188] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2493'. [ 671.219132][ T2449] hsr_slave_0: left promiscuous mode [ 671.236374][ T2449] hsr_slave_1: left promiscuous mode [ 671.265230][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 671.284806][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 671.319963][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 671.327471][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 671.487029][ T2449] veth1_macvtap: left promiscuous mode [ 671.503846][ T2449] veth0_macvtap: left promiscuous mode [ 671.509916][ T2449] veth1_vlan: left promiscuous mode [ 671.515318][ T2449] veth0_vlan: left promiscuous mode [ 671.543764][ T2449] veth1_macvtap: left promiscuous mode [ 671.550547][ T2449] veth0_macvtap: left promiscuous mode [ 671.556662][ T2449] veth1_vlan: left promiscuous mode [ 671.562272][ T2449] veth0_vlan: left promiscuous mode [ 672.892682][ T2449] team0 (unregistering): Port device team_slave_1 removed [ 673.033571][ T2449] team0 (unregistering): Port device team_slave_0 removed [ 673.826363][T13216] loop2: detected capacity change from 0 to 1024 [ 674.149241][ T25] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 674.355042][ T25] usb 3-1: config 0 has an invalid interface number: 156 but max is 0 [ 674.364204][ T25] usb 3-1: config 0 has no interface number 0 [ 674.373147][ T25] usb 3-1: config 0 interface 156 has no altsetting 0 [ 674.380205][ T25] usb 3-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 674.389688][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.402494][ T25] usb 3-1: config 0 descriptor?? [ 674.409648][ T25] hub 3-1:0.156: bad descriptor, ignoring hub [ 674.416005][ T25] hub 3-1:0.156: probe with driver hub failed with error -5 [ 674.425984][ T25] option 3-1:0.156: GSM modem (1-port) converter detected [ 674.759103][ T25] usb 3-1: USB disconnect, device number 14 [ 674.766063][ T25] option 3-1:0.156: device disconnected [ 674.982506][ T2449] team0 (unregistering): Port device team_slave_1 removed [ 675.086205][ T2449] team0 (unregistering): Port device team_slave_0 removed [ 676.274152][T12861] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 676.323188][T12861] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 676.389500][T12861] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 676.417674][T13236] netlink: 'syz.3.2511': attribute type 8 has an invalid length. [ 676.442152][T12861] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 676.623949][T13240] loop3: detected capacity change from 0 to 1024 [ 676.807702][T12898] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 676.867144][T12898] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 676.958860][ T780] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 676.985158][T12898] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 677.017766][T12898] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 677.169322][ T780] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 677.177863][ T780] usb 4-1: config 0 has no interface number 0 [ 677.200730][ T780] usb 4-1: config 0 interface 156 has no altsetting 0 [ 677.208473][ T780] usb 4-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 677.228802][ T780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.267169][ T780] usb 4-1: config 0 descriptor?? [ 677.292230][ T780] hub 4-1:0.156: bad descriptor, ignoring hub [ 677.298486][ T780] hub 4-1:0.156: probe with driver hub failed with error -5 [ 677.353008][ T780] option 4-1:0.156: GSM modem (1-port) converter detected [ 677.660157][ T780] usb 4-1: USB disconnect, device number 12 [ 677.679974][ T780] option 4-1:0.156: device disconnected [ 677.974957][T12861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.093470][T12861] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.115611][T12898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.199479][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.206857][ T5252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.318108][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.325477][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.345568][T13001] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 678.380158][T13001] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 678.407403][T13001] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 678.540344][T13001] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 678.693069][T12898] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.855919][ T780] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.863272][ T780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.950904][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.958181][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.648162][T13001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 679.745668][T13001] 8021q: adding VLAN 0 to HW filter on device team0 [ 679.799949][ T5402] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.807203][ T5402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.874289][ T5402] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.881604][ T5402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 680.142776][T12898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.249559][T12861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.371414][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 680.450731][T12898] veth0_vlan: entered promiscuous mode [ 680.514090][T12898] veth1_vlan: entered promiscuous mode [ 680.675713][ T25] kernel write not supported for file /sysvipc/msg (pid: 25 comm: kworker/1:0) [ 680.771772][T12898] veth0_macvtap: entered promiscuous mode [ 680.791293][T12898] veth1_macvtap: entered promiscuous mode [ 680.819725][ T8] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 680.827982][ T8] usb 1-1: config 0 has no interface number 0 [ 680.849491][ T8] usb 1-1: config 0 interface 156 has no altsetting 0 [ 680.863137][ T8] usb 1-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 680.886803][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.915875][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.920669][ T8] usb 1-1: config 0 descriptor?? [ 680.946613][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.962202][ T8] hub 1-1:0.156: bad descriptor, ignoring hub [ 680.964430][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.968326][ T8] hub 1-1:0.156: probe with driver hub failed with error -5 [ 680.978383][ T8] option 1-1:0.156: GSM modem (1-port) converter detected [ 680.996128][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.998501][T13321] loop2: detected capacity change from 0 to 256 [ 681.016551][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.027527][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.052425][T12898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.103087][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.118140][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.131604][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.142210][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.157322][T12898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.188176][T12898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.375957][T12898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.435250][T12898] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.454956][T12898] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.465237][ T5501] usb 1-1: USB disconnect, device number 26 [ 681.468665][T12898] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.472689][ T5501] option 1-1:0.156: device disconnected [ 681.498686][T12898] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.561796][T13001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 681.836038][T12861] veth0_vlan: entered promiscuous mode [ 682.030535][ T143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.033493][T12861] veth1_vlan: entered promiscuous mode [ 682.038386][ T143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.240106][ T2397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.252869][ T2397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.323645][T12861] veth0_macvtap: entered promiscuous mode [ 682.423009][T12861] veth1_macvtap: entered promiscuous mode [ 682.537026][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.575759][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.602724][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.623081][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.639149][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.653267][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.663452][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 682.674233][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.687132][T12861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 682.784660][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.815247][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.851749][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.874860][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.892550][T13356] loop1: detected capacity change from 0 to 128 [ 682.900543][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.928296][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.963339][T12861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.994163][T12861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.032918][T13356] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 683.050810][T12861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 683.079421][T13356] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 683.108175][T12861] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.138052][T12861] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.157619][T12861] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.183974][T12861] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 683.862087][T13001] veth0_vlan: entered promiscuous mode [ 683.916272][T13001] veth1_vlan: entered promiscuous mode [ 683.939581][T12898] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 684.240363][T13001] veth0_macvtap: entered promiscuous mode [ 684.371013][T13001] veth1_macvtap: entered promiscuous mode [ 684.381756][ T2397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 684.393482][ T2397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 684.443301][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.456954][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.460076][T13373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 684.477340][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.490486][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.510840][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.549937][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.571295][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.609089][ T5501] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 684.656359][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.695867][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 684.716748][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.732977][ T1237] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.740725][ T1237] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.796778][T13001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.912450][ T5501] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 685.066963][ T5501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 685.243493][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2554'. [ 685.370396][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.405306][ T5501] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1561, setting to 1024 [ 685.440951][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.472562][ T5501] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 685.490063][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.534507][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.561886][ T5501] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 685.598667][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.599364][ T5501] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 685.623192][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.633382][T13383] loop3: detected capacity change from 0 to 256 [ 685.650727][ T5501] usb 2-1: Manufacturer: syz [ 685.658877][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.665861][T13383] FAT-fs (loop3): Directory bread(block 64) failed [ 685.678384][T13383] FAT-fs (loop3): Directory bread(block 65) failed [ 685.681471][ T5501] usb 2-1: config 0 descriptor?? [ 685.692277][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.693721][T13383] FAT-fs (loop3): Directory bread(block 66) failed [ 685.702861][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.717482][T13383] FAT-fs (loop3): Directory bread(block 67) failed [ 685.725940][T13375] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 685.731941][T13383] FAT-fs (loop3): Directory bread(block 68) failed [ 685.734837][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.752792][T13001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 685.773604][T13001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 685.777088][T13383] FAT-fs (loop3): Directory bread(block 69) failed [ 685.790761][T13001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 685.836849][T13383] FAT-fs (loop3): Directory bread(block 70) failed [ 685.851907][T13383] FAT-fs (loop3): Directory bread(block 71) failed [ 685.856295][T13001] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.873742][T13383] FAT-fs (loop3): Directory bread(block 72) failed [ 685.893955][T13001] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.903467][T13001] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.905388][T13383] FAT-fs (loop3): Directory bread(block 73) failed [ 685.912418][T13001] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 686.241141][ T7740] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.264549][ T7740] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.299133][ T5501] usbhid 2-1:0.0: can't add hid device: -71 [ 686.305942][ T5501] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 686.359792][ T5501] usb 2-1: USB disconnect, device number 12 [ 686.408807][T13396] loop5: detected capacity change from 0 to 128 [ 686.442965][T13396] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 686.457334][ T2397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 686.470172][ T2397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.487282][T13396] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 686.710209][T12861] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 686.977460][ T8] libceph: connect (1)[c::]:6789 error -101 [ 686.994290][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 687.086515][T13411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2564'. [ 687.104516][T13405] ceph: No mds server is up or the cluster is laggy [ 687.216446][T13417] loop2: detected capacity change from 0 to 2048 [ 687.238035][T13422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2564'. [ 687.319366][ T5252] libceph: connect (1)[c::]:6789 error -101 [ 687.331055][ T5252] libceph: mon0 (1)[c::]:6789 connect error [ 687.342872][T13417] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 687.558047][T13417] bio_check_eod: 10 callbacks suppressed [ 687.558072][T13417] syz.2.2565: attempt to access beyond end of device [ 687.558072][T13417] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 687.582797][T13429] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 687.916654][T13435] netlink: 'syz.2.2570': attribute type 8 has an invalid length. [ 688.096907][T13439] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 688.333366][T13442] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.2573' sets config #-1 [ 688.683142][T13431] loop5: detected capacity change from 0 to 32768 [ 688.708135][T13431] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2568 (13431) [ 688.748652][T13431] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 688.766443][T13431] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 688.775511][T13431] BTRFS info (device loop5): using free-space-tree [ 689.487898][T12861] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 689.717507][T13481] loop1: detected capacity change from 0 to 2048 [ 689.756539][T13484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2585'. [ 689.774916][T13481] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 689.891305][T13488] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2585'. [ 689.923202][T13489] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 689.924715][T13481] syz.1.2583: attempt to access beyond end of device [ 689.924715][T13481] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 690.321240][ T5428] Bluetooth: hci4: command tx timeout [ 692.102089][T13511] loop4: detected capacity change from 0 to 32768 [ 692.147870][T13510] loop1: detected capacity change from 0 to 32768 [ 692.169950][T13511] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2593 (13511) [ 692.209943][ T29] audit: type=1326 audit(1721053946.284:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.263095][ T29] audit: type=1326 audit(1721053946.284:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.297023][T13510] BTRFS: device /dev/loop1 (7:1) using temp-fsid e026e4ea-d33c-4455-8646-d26401dd3133 [ 692.297762][T13511] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 692.340290][T13511] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 692.357424][ T29] audit: type=1326 audit(1721053946.284:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.365337][T13510] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2592 (13510) [ 692.388660][T13511] BTRFS info (device loop4): using free-space-tree [ 692.440431][T13518] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 692.479141][T13510] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 692.494352][T13510] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 692.503141][T13510] BTRFS info (device loop1): using free-space-tree [ 692.506246][ T29] audit: type=1326 audit(1721053946.294:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.521380][T13528] loop2: detected capacity change from 0 to 128 [ 692.539345][T13518] CIFS mount error: No usable UNC path provided in device string! [ 692.539345][T13518] [ 692.576343][T13518] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 692.608478][ T29] audit: type=1326 audit(1721053946.294:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.647848][T13528] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 692.692550][ T29] audit: type=1326 audit(1721053946.294:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.765924][T13528] ext4 filesystem being mounted at /181/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 692.860554][ T29] audit: type=1326 audit(1721053946.294:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.875681][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2603'. [ 692.944671][ T29] audit: type=1326 audit(1721053946.304:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 692.985576][ T5431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 693.001826][ T5431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 693.019300][ T5431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 693.035517][ T5431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 693.053199][ T5431] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 693.069648][ T5431] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 693.093430][T10659] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 693.111833][T13572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2603'. [ 693.121625][ T29] audit: type=1326 audit(1721053946.304:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 693.166757][T12898] BTRFS info (device loop1): last unmount of filesystem e026e4ea-d33c-4455-8646-d26401dd3133 [ 693.254689][ T29] audit: type=1326 audit(1721053946.304:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13517 comm="syz.3.2596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 693.332040][T13001] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 693.928448][T13566] chnl_net:caif_netlink_parms(): no params data found [ 694.286143][T13593] loop3: detected capacity change from 0 to 4096 [ 694.327670][T13593] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 694.344257][T13594] loop1: detected capacity change from 0 to 16 [ 694.357483][T13593] ntfs3: loop3: Failed to load $MFT (-2). [ 694.367777][T13566] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.371244][T13594] erofs: (device loop1): mounted with root inode @ nid 36. [ 694.386600][T13566] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.394500][T13566] bridge_slave_0: entered allmulticast mode [ 694.410997][T13566] bridge_slave_0: entered promiscuous mode [ 694.447517][T13566] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.469108][T13594] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36 [ 694.489060][T13566] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.499534][T13566] bridge_slave_1: entered allmulticast mode [ 694.526140][T13566] bridge_slave_1: entered promiscuous mode [ 694.584038][T13593] overlayfs: failed to resolve 'default_permissions': -2 [ 694.694724][T13566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.764056][T13566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.877400][T13605] loop4: detected capacity change from 0 to 1024 [ 695.026448][T13607] loop2: detected capacity change from 0 to 256 [ 695.054473][T13566] team0: Port device team_slave_0 added [ 695.097219][T13566] team0: Port device team_slave_1 added [ 695.219350][ T5431] Bluetooth: hci5: command tx timeout [ 695.431290][T13566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.449068][T13566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.479040][ T5402] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 695.517627][T13566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.546318][T13566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.562679][T13566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.640069][T13566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.711641][ T5402] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 695.735799][ T5402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 695.780337][ T5402] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1561, setting to 1024 [ 695.805163][T13602] loop1: detected capacity change from 0 to 32768 [ 695.808557][ T5402] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 695.865571][ T5402] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 695.878726][T13566] hsr_slave_0: entered promiscuous mode [ 695.894634][ T5402] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 695.908571][ T5402] usb 4-1: Manufacturer: syz [ 695.914064][T13566] hsr_slave_1: entered promiscuous mode [ 695.924706][ T5402] usb 4-1: config 0 descriptor?? [ 695.936499][T13602] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 695.939431][T13609] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 695.953488][T13566] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.988633][T13566] Cannot create hsr debugfs directory [ 696.204809][T13602] XFS (loop1): Ending clean mount [ 696.233299][T13602] XFS (loop1): Quotacheck needed: Please wait. [ 696.437010][T13602] XFS (loop1): Quotacheck: Done. [ 696.508826][ T5402] usbhid 4-1:0.0: can't add hid device: -71 [ 696.542403][ T5402] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 696.580586][ T5402] usb 4-1: USB disconnect, device number 13 [ 696.687500][T13566] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 696.726471][T12898] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 696.932676][T13566] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.132877][T13566] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.288690][ T5431] Bluetooth: hci5: command tx timeout [ 697.344942][T13566] bond0: (slave netdevsim0): Releasing backup interface [ 697.388231][T13566] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.750973][T13566] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 697.773019][T13566] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 697.811953][T13566] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 697.883611][T13566] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 698.205060][T13566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.262422][T13627] loop1: detected capacity change from 0 to 32768 [ 698.276719][T13566] 8021q: adding VLAN 0 to HW filter on device team0 [ 698.316902][T13627] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2617 (13627) [ 698.321506][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.337031][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 698.386028][T13627] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 698.402105][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.409376][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 698.420887][T13627] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 698.455480][T13627] BTRFS info (device loop1): using free-space-tree [ 698.729045][T12898] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 698.865006][T13663] loop3: detected capacity change from 0 to 256 [ 699.003139][T13663] FAT-fs (loop3): Directory bread(block 64) failed [ 699.039330][T13663] FAT-fs (loop3): Directory bread(block 65) failed [ 699.046088][T13663] FAT-fs (loop3): Directory bread(block 66) failed [ 699.086243][T13663] FAT-fs (loop3): Directory bread(block 67) failed [ 699.096085][T13663] FAT-fs (loop3): Directory bread(block 68) failed [ 699.132386][T13566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.140630][T13663] FAT-fs (loop3): Directory bread(block 69) failed [ 699.148096][T13663] FAT-fs (loop3): Directory bread(block 70) failed [ 699.179196][T13663] FAT-fs (loop3): Directory bread(block 71) failed [ 699.216007][T13663] FAT-fs (loop3): Directory bread(block 72) failed [ 699.258651][T13663] FAT-fs (loop3): Directory bread(block 73) failed [ 699.268955][T13566] veth0_vlan: entered promiscuous mode [ 699.333610][T13566] veth1_vlan: entered promiscuous mode [ 699.368915][ T5501] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 699.388629][ T5431] Bluetooth: hci5: command tx timeout [ 699.561354][T13566] veth0_macvtap: entered promiscuous mode [ 699.593561][T13566] veth1_macvtap: entered promiscuous mode [ 699.609380][ T5501] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 699.639760][ T5501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 699.669994][ T5501] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1561, setting to 1024 [ 699.687849][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.707418][ T5501] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 699.724218][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.739200][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.756570][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.768713][ T5501] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 699.779053][ T5501] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 699.787323][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.801656][ T5501] usb 3-1: Manufacturer: syz [ 699.806435][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.822359][ T5501] usb 3-1: config 0 descriptor?? [ 699.859045][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.874971][T13667] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 699.893547][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.923903][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.955540][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 699.978156][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 699.989399][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.036332][T13566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.063208][T13676] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2633'. [ 700.136184][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.186349][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.214444][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.242791][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.255361][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.275799][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.295641][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.326998][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.365584][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.394482][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.431817][T13566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.455070][T13566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.486921][T13566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.566765][T13566] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.608764][T13566] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.628153][ T5501] usbhid 3-1:0.0: can't add hid device: -71 [ 700.637875][ T5501] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 700.645832][T13566] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.662884][ T5501] usb 3-1: USB disconnect, device number 15 [ 700.669156][T13566] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.756620][T13690] loop3: detected capacity change from 0 to 256 [ 700.776625][T13690] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 700.909835][T13690] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 701.040773][ T4270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.087253][ T4270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.328232][T13701] Unknown gid [ 701.439009][ T5431] Bluetooth: hci5: command tx timeout [ 701.461603][T13705] loop2: detected capacity change from 0 to 256 [ 701.593383][T13705] FAT-fs (loop2): Directory bread(block 64) failed [ 701.602691][T13705] FAT-fs (loop2): Directory bread(block 65) failed [ 701.628989][T13705] FAT-fs (loop2): Directory bread(block 66) failed [ 701.651118][T13705] FAT-fs (loop2): Directory bread(block 67) failed [ 701.659912][T13705] FAT-fs (loop2): Directory bread(block 68) failed [ 701.667602][T13705] FAT-fs (loop2): Directory bread(block 69) failed [ 701.692860][T13705] FAT-fs (loop2): Directory bread(block 70) failed [ 701.705521][T13705] FAT-fs (loop2): Directory bread(block 71) failed [ 701.722910][T13705] FAT-fs (loop2): Directory bread(block 72) failed [ 701.731224][T13705] FAT-fs (loop2): Directory bread(block 73) failed [ 701.880503][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.893088][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 702.029391][T13712] netlink: 11 bytes leftover after parsing attributes in process `syz.4.2647'. [ 703.328207][T13731] loop4: detected capacity change from 0 to 4096 [ 703.349270][T13731] ntfs3: loop4: It is recommened to use chkdsk. [ 703.362680][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 703.391315][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 703.399890][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 703.412779][T13737] Unknown gid [ 703.420492][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc0c00 [ 703.459086][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc1c00 [ 703.488748][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc2c00 [ 703.517807][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc4c00 [ 703.525985][ T5431] Bluetooth: hci5: command tx timeout [ 703.549373][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffc8c00 [ 703.557429][T13731] ntfs3: loop4: try to read out of volume at offset 0x3fffffd0c00 [ 703.794698][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 703.794725][ T29] audit: type=1326 audit(1721053957.884:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 703.848481][T13731] [ 703.850865][T13731] ====================================================== [ 703.857893][T13731] WARNING: possible circular locking dependency detected [ 703.864957][T13731] 6.10.0-syzkaller #0 Not tainted [ 703.870000][T13731] ------------------------------------------------------ [ 703.877209][T13731] syz.4.2653/13731 is trying to acquire lock: [ 703.883291][T13731] ffff88807bbe7398 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0xaa/0x120 [ 703.892249][T13731] [ 703.892249][T13731] but task is already holding lock: [ 703.899626][T13731] ffff88805f6201e0 (&indx->run_lock){++++}-{3:3}, at: ni_fiemap+0x373/0x1230 [ 703.908485][T13731] [ 703.908485][T13731] which lock already depends on the new lock. [ 703.908485][T13731] [ 703.918943][T13731] [ 703.918943][T13731] the existing dependency chain (in reverse order) is: [ 703.927986][T13731] [ 703.927986][T13731] -> #2 (&indx->run_lock){++++}-{3:3}: [ 703.935684][T13731] lock_acquire+0x1ed/0x550 [ 703.940739][T13731] down_read+0xb1/0xa40 [ 703.945444][T13731] indx_read+0x2a5/0xc50 [ 703.950233][T13731] indx_find+0x47a/0xbf0 [ 703.955150][T13731] dir_search_u+0x1b7/0x3a0 [ 703.960196][T13731] ntfs_lookup+0x106/0x1f0 [ 703.965192][T13731] lookup_one_qstr_excl+0x121/0x260 [ 703.970934][T13731] filename_create+0x297/0x540 [ 703.976256][T13731] do_mkdirat+0xbd/0x3a0 [ 703.981053][T13731] __x64_sys_mkdirat+0x89/0xa0 [ 703.986367][T13731] do_syscall_64+0xf3/0x230 [ 703.991429][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 703.997884][T13731] [ 703.997884][T13731] -> #1 (&ni->ni_lock/4){+.+.}-{3:3}: [ 704.005509][T13731] lock_acquire+0x1ed/0x550 [ 704.010564][T13731] __mutex_lock+0x136/0xd70 [ 704.015625][T13731] attr_data_get_block+0x444/0x2e10 [ 704.021385][T13731] ntfs_file_mmap+0x505/0x880 [ 704.026970][T13731] mmap_region+0xe91/0x2090 [ 704.032045][T13731] do_mmap+0x8ad/0xfa0 [ 704.036673][T13731] vm_mmap_pgoff+0x1dd/0x3d0 [ 704.041815][T13731] ksys_mmap_pgoff+0x4f1/0x720 [ 704.047140][T13731] do_syscall_64+0xf3/0x230 [ 704.052200][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.058656][T13731] [ 704.058656][T13731] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 704.066257][T13731] validate_chain+0x18e0/0x5900 [ 704.071660][T13731] __lock_acquire+0x1346/0x1fd0 [ 704.077058][T13731] lock_acquire+0x1ed/0x550 [ 704.082104][T13731] __might_fault+0xc6/0x120 [ 704.087166][T13731] _copy_to_user+0x2a/0xb0 [ 704.092259][T13731] fiemap_fill_next_extent+0x235/0x410 [ 704.098466][T13731] ni_fiemap+0xa5e/0x1230 [ 704.103350][T13731] ntfs_fiemap+0x132/0x180 [ 704.108401][T13731] do_vfs_ioctl+0x1c09/0x2e50 [ 704.113637][T13731] __se_sys_ioctl+0x81/0x170 [ 704.118775][T13731] do_syscall_64+0xf3/0x230 [ 704.123840][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.130292][T13731] [ 704.130292][T13731] other info that might help us debug this: [ 704.130292][T13731] [ 704.140530][T13731] Chain exists of: [ 704.140530][T13731] &mm->mmap_lock --> &ni->ni_lock/4 --> &indx->run_lock [ 704.140530][T13731] [ 704.153451][T13731] Possible unsafe locking scenario: [ 704.153451][T13731] [ 704.160903][T13731] CPU0 CPU1 [ 704.166273][T13731] ---- ---- [ 704.171640][T13731] rlock(&indx->run_lock); [ 704.176161][T13731] lock(&ni->ni_lock/4); [ 704.183049][T13731] lock(&indx->run_lock); [ 704.190004][T13731] rlock(&mm->mmap_lock); [ 704.194436][T13731] [ 704.194436][T13731] *** DEADLOCK *** [ 704.194436][T13731] [ 704.202579][T13731] 2 locks held by syz.4.2653/13731: [ 704.207780][T13731] #0: ffff88805f620100 (&ni->ni_lock/4){+.+.}-{3:3}, at: ntfs_fiemap+0xff/0x180 [ 704.216997][T13731] #1: ffff88805f6201e0 (&indx->run_lock){++++}-{3:3}, at: ni_fiemap+0x373/0x1230 [ 704.226340][T13731] [ 704.226340][T13731] stack backtrace: [ 704.232232][T13731] CPU: 1 PID: 13731 Comm: syz.4.2653 Not tainted 6.10.0-syzkaller #0 [ 704.240404][T13731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 704.250481][T13731] Call Trace: [ 704.253772][T13731] [ 704.256715][T13731] dump_stack_lvl+0x241/0x360 [ 704.261429][T13731] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.266666][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.272319][T13731] ? print_circular_bug+0x130/0x1a0 [ 704.277545][T13731] check_noncircular+0x36a/0x4a0 [ 704.282513][T13731] ? __pfx_check_noncircular+0x10/0x10 [ 704.288001][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.293663][T13731] ? lockdep_lock+0x123/0x2b0 [ 704.298536][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.304196][T13731] ? lockdep_unlock+0x16a/0x300 [ 704.309075][T13731] ? __pfx_lockdep_unlock+0x10/0x10 [ 704.314290][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.319974][T13731] validate_chain+0x18e0/0x5900 [ 704.324874][T13731] ? __pfx_validate_chain+0x10/0x10 [ 704.330099][T13731] ? __pfx_validate_chain+0x10/0x10 [ 704.335325][T13731] ? __pfx_validate_chain+0x10/0x10 [ 704.340548][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.346201][T13731] ? validate_chain+0x11e/0x5900 [ 704.351171][T13731] ? validate_chain+0x11e/0x5900 [ 704.356139][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.361791][T13731] ? mark_lock+0x9a/0x350 [ 704.366145][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.371798][T13731] ? mark_lock+0x9a/0x350 [ 704.376152][T13731] __lock_acquire+0x1346/0x1fd0 [ 704.381037][T13731] lock_acquire+0x1ed/0x550 [ 704.385554][T13731] ? __might_fault+0xaa/0x120 [ 704.390268][T13731] ? __pfx_lock_acquire+0x10/0x10 [ 704.395313][T13731] ? __pfx___might_resched+0x10/0x10 [ 704.400634][T13731] ? __pfx_validate_chain+0x10/0x10 [ 704.405858][T13731] ? __pfx___might_resched+0x10/0x10 [ 704.411217][T13731] ? __lock_acquire+0x1346/0x1fd0 [ 704.416376][T13731] ? __might_fault+0xaa/0x120 [ 704.421179][T13731] __might_fault+0xc6/0x120 [ 704.425727][T13731] ? __might_fault+0xaa/0x120 [ 704.430450][T13731] _copy_to_user+0x2a/0xb0 [ 704.434902][T13731] fiemap_fill_next_extent+0x235/0x410 [ 704.440407][T13731] ? __pfx_fiemap_fill_next_extent+0x10/0x10 [ 704.446428][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.452092][T13731] ? run_lookup_entry+0x3fa/0x560 [ 704.457151][T13731] ni_fiemap+0xa5e/0x1230 [ 704.461532][T13731] ? __pfx_ni_fiemap+0x10/0x10 [ 704.466335][T13731] ? __pfx___might_resched+0x10/0x10 [ 704.471656][T13731] ? fiemap_prep+0x19e/0x240 [ 704.476309][T13731] ntfs_fiemap+0x132/0x180 [ 704.480782][T13731] ? __pfx_ntfs_fiemap+0x10/0x10 [ 704.485755][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.491411][T13731] ? __might_fault+0xc6/0x120 [ 704.496127][T13731] ? __pfx_ntfs_fiemap+0x10/0x10 [ 704.501096][T13731] do_vfs_ioctl+0x1c09/0x2e50 [ 704.505804][T13731] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 704.510860][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.516518][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.522174][T13731] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 704.528527][T13731] ? tomoyo_path_number_perm+0x208/0x880 [ 704.534200][T13731] ? __pfx_lock_release+0x10/0x10 [ 704.539432][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.545095][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.550754][T13731] ? kfree+0x149/0x360 [ 704.554863][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.560518][T13731] ? tomoyo_path_number_perm+0x71a/0x880 [ 704.566193][T13731] ? tomoyo_path_number_perm+0x208/0x880 [ 704.571861][T13731] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 704.577907][T13731] ? __fget_files+0x29/0x470 [ 704.582529][T13731] ? __fget_files+0x29/0x470 [ 704.587146][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.592805][T13731] ? srso_alias_return_thunk+0x5/0xfbef5 [ 704.598457][T13731] ? security_file_ioctl+0x87/0xb0 [ 704.603597][T13731] __se_sys_ioctl+0x81/0x170 [ 704.608210][T13731] do_syscall_64+0xf3/0x230 [ 704.612785][T13731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.618711][T13731] RIP: 0033:0x7f9532b75bd9 [ 704.623138][T13731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 704.642876][T13731] RSP: 002b:00007f95338ae048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 704.651314][T13731] RAX: ffffffffffffffda RBX: 00007f9532d03f60 RCX: 00007f9532b75bd9 [ 704.659302][T13731] RDX: 00000000200000c0 RSI: 00000000c020660b RDI: 0000000000000004 [ 704.667291][T13731] RBP: 00007f9532be4e60 R08: 0000000000000000 R09: 0000000000000000 [ 704.675276][T13731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.683258][T13731] R13: 000000000000000b R14: 00007f9532d03f60 R15: 00007fff420dd5d8 [ 704.691261][T13731] [ 704.694385][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.021946][ T29] audit: type=1326 audit(1721053957.884:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 705.081473][ T29] audit: type=1326 audit(1721053959.144:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 705.148663][ T29] audit: type=1326 audit(1721053959.144:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000 [ 705.268699][ T29] audit: type=1326 audit(1721053959.144:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13746 comm="syz.3.2658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccdf775bd9 code=0x7ffc0000