last executing test programs: 1m25.644990839s ago: executing program 4 (id=570): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f00000001c0)={0x0, 0x4}, 0x8) 1m25.339859189s ago: executing program 4 (id=575): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x20444c, &(0x7f00000004c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES64=0x0, @ANYBLOB="a576b3db0867cdeef9f01bd19bc444c34a01fa68574ae683d6f2a98f883898c48dbdd72b4c3469be9850633e7e3ef8f93c7b8ba099c4ef87599180cff6e193592068ff02fd5e06fedf7772d233a5749838afe1a14aae07d74b69d420ebb4de5b9c1b3e16c39e2df5f50f17cf5e0bc04ba7264818f86d4b188cb6db5ed7126d98db49ed18aab5524bbfdd8fbb942f9aa7b73b94fd975012be45590c427486d7b2c6a3a8904909c33a3b7ef54ccc948be77ed5e056aa8e8b3f006bd08d01138c64109893a061283b76ec8db6a8f0883edabd7f208b05e2cb5ec31d11b97d4deca63555ceae79f2dc436ef54b", @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105c7d95f5267121c170995cd3bb174096f3c", @ANYBLOB="a51b7d19e69bbcb11700c2dcb2d851f79d44e9bb8469d2a5dd66597db213ade6acfaffd88afce31be876c207fb5d362b6e91010b006a4279f2d4d02752a02b76b5413c5e7cd22d3cfad489bd1b84a85aa8ad47cc69d09522d51cf5cf88cf9da13593310d5e0d03a6e17940ddd391c7796ad75f4fa75bd62cb78c43c92e61de110508c5d605a2f981314c38526ac5aac6e4445e32d7cf128b440ca715e901f8b4299226dfd9bfec7a37f3bf63e1906fe520b65051ea9c14827e9cd737a6952d478ff3cb4436a913", @ANYBLOB="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", @ANYRES16, @ANYRES32], 0x0, 0x1e1, &(0x7f0000001700)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x290a055, 0x0, 0xfd, 0x0, 0x0) 1m24.700431329s ago: executing program 4 (id=579): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x20, 0x80, 0x1c, {0xff, 0x2070, 0xfff, 0x9, 0x4, 0x8000, 0xfffd, 0xec, 0x3906, 0xfffc, 0x4, 0xfb}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m21.712730965s ago: executing program 4 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 1m21.343930547s ago: executing program 4 (id=601): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xb}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m20.514471213s ago: executing program 4 (id=610): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000040)) 1m20.110131196s ago: executing program 32 (id=610): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, &(0x7f0000000040)) 41.011584107s ago: executing program 3 (id=896): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000240)={0x0, r1}) read(r1, &(0x7f00000001c0)=""/80, 0x50) 40.413904256s ago: executing program 3 (id=900): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = inotify_init1(0x80800) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x610003d5) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file0\x00', 0x40000000) inotify_add_watch(r1, &(0x7f0000000240)='./file0\x00', 0xc0) 40.168833714s ago: executing program 3 (id=902): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r1, 0x1000006) sendfile(r1, r1, 0x0, 0x100000000) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x1000000}) 38.691370312s ago: executing program 3 (id=917): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f0000000440)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB="00646d61736b3d303030303030303030303030303135322c696f636861720300000069736f383835392d312c6769643d00000000000000", @ANYRESHEX=r2, @ANYRESHEX, @ANYBLOB="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", @ANYRES64], 0x91, 0x14f5, &(0x7f0000001580)="$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") chown(&(0x7f0000000000)='./file0\x00', 0x0, r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 38.290367234s ago: executing program 3 (id=920): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f00000000c0)=ANY=[], 0x1, 0x5547, &(0x7f0000006040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x183b41, 0x12b) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000340)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x800800}) pwritev2(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)="d5", 0x1}], 0x1, 0x7, 0x3, 0x5) ioctl$OCFS2_IOC_RESVSP64(r0, 0x4030582a, &(0x7f00000000c0)={0x2, 0x2, 0x8, 0x4, 0xd}) 37.510450749s ago: executing program 3 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r0) 37.244497828s ago: executing program 33 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fsync(r0) 4.483347486s ago: executing program 2 (id=1168): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) r1 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.038824611s ago: executing program 5 (id=1174): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@broadcast, @remote, @val={@void, {0x8100, 0x7, 0x1}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast2, @dev}}}}}}, 0x0) 3.940495073s ago: executing program 2 (id=1175): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000140)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c002a8147bd45d266c8b59269"], 0x1, 0x9e28, &(0x7f000000a040)="$eJxUk9Mf54W7BzfvZtt2TbZt27Y9ue/HRrZt1yLbtrHZbRvP63d5nj/guXjPzJi51t3wngHeO8D7Bnj/AB8Y4IMDHD7AEQMcOcBRA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXAxw9wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D3DMAP8Y4NgB/jnAvwb49wD/GeC/A/xvgEMCHCfAcQMcL8DxA5wgwAkDnCjAoQEOC3DiACcJcNIAJwtw8gCnCHDKAKcKcOoApwlw2gCnC3D6AGcIcMYAZwpw5gBnCXDWAGcLcPYA5whwzgDnCnDuAOcJcN4A5wtw/gAXCHDBABcKcOEAFwlw0QAXC3DxAJcIcMkACXCpAJcOcJkAlw1wuQCXD3CFAFcMcKUAVw5wlQBXDXC1AFcPcI0A1wxwrQDXDnCdANcNcL0A1w9wgwA3DHCjADcOcJMANw1wswA3D3CLALcMcKsAtw5wmwC3DXC7ALcPcIcAdwxwpwB3DnCXAHcNcLcAdw9wjwD3DHCvAPcOcJ8A9w1wvwD3D/CAAA8M8KAADw7wkAAPDfCwAA8P8IgAjwzwqACPDvCYAI8N8LgAjw/whABPDPCkAA3w5ABPCfDUAE8L8PQAzwjwzADPCnAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB/g2QGeE+C5AZ4X4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAd4T4L0B3hfg/QE+EOCDAQ4PcESAIwMcFeBDAT4c4CMBPhrgYwE+HuATAT4Z4FMBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhng6AC/CvDrAL8J8NsAvwvw+wB/CPDHAH8K8OcAfwnw1wB/C/D3AMcE+EeAYwP8M8C/Avw7wH8C/DfA/wIcEuI4IY4b4nghjh/iBCFOGOJEIQ4NcViIE4c4SYiThjhZiJOHOEWIU4Y4VYhThzhNiNOGOF2I04c4Q4gzhjhTiDOHOEuIs4Y4W4izhzhHiHOGOFeIc4c4T4jzhjhfiPOHuECIC4a4UIgLh7hIiIuGuFiIi4e4RIhLhkiIS4W4dIjLhLhsiMuFuHyIK4S4YogrhbhyiKuEuGqIq4W4eohrhLhmiGuFuHaI64S4bojrhbh+iBuEuGGIG4W4cYibhLhpiJuFuHmIW4S4ZYhbhbh1iNuEuG2I24W4fYg7hLhjiDuFuHOIu4S4a4i7hbh7iHuEuGeIe4W4d4j7hLhviPuFuH+IB4R4YIgHhXhwiIeEeGiIh4V4eIhHhHhkiEeFeHSIx4R4bIjHhXh8iCeEeGKIJ4VoiCeHeEqIp4Z4Woinh3hGiGeGeFaIgxCDEMMQoxDjEJMQ0xCHjIN5iEWIZYhViHWITYhtiF2IfYhnh3hOiOeGeF6I54d4QYgXhnhRiBeHeEmIl4Z4WYiXh3hFiFeGeFWIV4d4TYjXhnhdiNeHeEOIN4Z4U4g3h3hLiLeGeFuIt4d4R4h3hnhXiHeHeE+I94Z4X4j3h/hAiA+GODzEESGODHFUiA+F+HCIj4T4aIiPhfh4iE+E+GSIT4X4dIjPhPhsiM+F+HyIL4T4YogvhfhyiK+E+GqIr4X4eohvhPhmiG+F+HaI74T4bojvhfh+iB+E+GGIH4X4cYifhPhpiJ+F+HmIX4T4ZYijQ/wqxK9D/CbEb0P8LsTvQ/whxB9D/CnEn0P8JcRfQ/wtxN9DHBPiHyGODfHPEP8K8e8Q/wnx3xD/+x/TCMeJcNwIx4tw/AgniHDCCCeKcGiEwyKcOMJJIpw0wskinDzCKSKcMsKpIpw6wmkinDbC6SKcPsIZIpwxwpkinDnCWSKcNcLZIpw9wjkinDPCuSKcO8J5Ipw3wvkinD/CBSJcMMKFIlw4wkUiXDTCxSJcPMIlIlwyQiJcKsKlI1wmwmUjXC7C5SNcIcIVI1wpwpUjXCXCVSNcLcLVI1wjwjUjXCvCtSNcJ8J1I1wvwvUj3CDCDSPcKMKNI9wkwk0j3CzCzSPcIsItI9wqwq0j3CbCbSPcLsLtI9whwh0j3CnCnSPcJcJdI9wtwt0j3CPCPSPcK8K9I9wnwn0j3C/C/SM8IMIDIzwowoMjPCTCQyM8LMLDIzwiwiMjPCrCoyM8JsJjIzwuwuMjPCHCEyM8KUIjPDnCUyI8NcLTIjw9wjMiPDPCsyIcRBhEGEYYRRhHmESYRphFmEdYRFhGWEVYR9hE2EbYRdhHeHaE50R4boTnRXh+hBdEeGGEF0V4cYSXRHhphJdFeHmEV0R4ZYRXRXh1hNdEeG2E10V4fYQ3RHhjhDdFeHOEt0R4a4S3RXh7hHdEeGeEd0V4d4T3RHhvhPdFeH+ED0T4YITDIxwR4cgIR0X4UIQPR/hIhI9G+FiEj0f4RIRPRvhUhE9H+EyEz0b4XITPR/hChC9G+FKEL0f4SoSvRvhahK9H+EaEb0b4VoRvR/hOhO9G+F6E70f4QYQfRvhRhB9H+EmEn0b4WYSfR/hFhF9GODrCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcIxEf4R4dgI/4zwrwj/jvCfCP+N8L8Ih8Q4TozjxjhejOPHOEGME8Y4UYxDYxwW48QxThLjpDFOFuPkMU4R45QxThXj1DFOE+O0MU4X4/QxzhDjjDHOFOPMMc4S46wxzhbj7DHOEeOcMc4V49wxzhPjvDHOF+P8MS4Q44IxLhTjwjEuEuOiMS4W4+IxLhHjkjES41IxLh3jMjEuG+NyMS4f4woxrhjjSjGuHOMqMa4a42oxrh7jGjGuGeNaMa4d4zoxrhvjejGuH+MGMW4Y40YxbhzjJjFuGuNmMW4e4xYxbhnjVjFuHeM2MW4b43Yxbj/+kCH/23fHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYBzEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2MZ4d4zkxnhvjeTGeH+MFMV4Y40UxXhzjJTFeGuNlMV4e4xUxXhnjVTFeHeM1MV4b43UxXh/jDTHeGONNMd4c4y0x3hrjbTHeHuMdMd4Z410x3h3jPTHeG+N9Md4f4wMxPhjj8BhHxDgyxlExPhTjwzE+EuOjMT4W4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMY6O8asYv47xmxi/jfG7GL+P8YcYf4zxpxh/jvGXGH+N8bcYf49xTIx/xDg2xj9j/CvGv2P8J8Z/Y/wvxiEJjpPguAmOl+D4CU6Q4IQJTpTg0ASHJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJUwwZMgQZ0hwxgRnSnDmBGdJcNYEZ0tw9gTnSHDOBOdKcO4E50lw3gTnS3D+BBdIcMEEF0pw4QQXSXDRBBdLcPEEl0hwyQRJcKkEl05wmQSXTXC5BJdPcIUEV0xwpQRXTnCVBFdNcLUEV09wjQTXTHCtBNdOcJ0E101wvQTXT3CDBDdMcKMEN05wkwQ3TXCzBDdPcIsEt0xwqwS3TnCbBLdNcLsEt09whwR3THCnBHdOcJcEd01wtwR3T3CPBPdMcK8E905wnwT3TXC/BPdP8IAED0zwoAQPTvCQBA9N8LAED0/wiASPTPCoBI9O8JgEj03wuASPT/CEBE9M8KQETfDkBE9J8NQET0vw9ATPSPDMBM9KcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+DZCZ6T4LkJnpfg+QlekOCFCV6U4MUJXpLgpQleluDlCV6R4JUJXpXg1Qlek+C1CV6X4PUJ3pDgjQnelODNCd6S4K0J3pbg7QnekeCdCd6V4N0J3pPgvQnel+D9CT6Q4IMJDk9wRIIjExyV4EMJPpzgIwk+muBjCT6e4BMJPpngUwk+neAzCT6b4HMJPp/gCwm+mOBLCb6c4CsJvprgawm+nuAbCb6Z4FsJvp3gOwm+m+B7Cb6f4AcJfpjgRwl+nOAnCX6a4GcJfp7gFwl+meDoBL9K8OsEv0nw2wS/S/D7BH9I8McEf0rw5wR/SfDXBH9L8PcExyT4R4JjE/wzwb8S/DvBfxL8N8H/EhyS4jgpjpvieCmOn+IEKU6Y4kQpDk1xWIoTpzhJipOmOFmKk6c4RYpTpjhVilOnOE2K06Y4XYrTpzhDijOmOFOKM6c4S4qzpjhbirOnOEeKc6Y4V4pzpzhPivOmOF+K86e4QIoLprhQigunuEiKi6a4WIqLp7hEikumSIpLpbh0isukuGyKy6W4fIorpLhiiiuluHKKq6S4aoqrpbh6imukuGaKa6W4dorrpLhuiuuluH6KG6S4YYobpbhxipukuGmKm6W4eYpbpLhliluluHWK26S4bYrbpbh9ijukuGOKO6W4c4q7pLhriruluHuKe6S4Z4p7pbh3ivukuG+K+6W4f4oHpHhgigeleHCKh6R4aIqHpXh4ikekeGSKR6V4dIrHpHhsiseleHyKJ6R4YoonpWiKJ6d4SoqnpnhaiqeneEaKZ6Z4VoqDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsUz07xnBTPTfG8FM9P8YIUL0zxohQvTvGSFC9N8bIUL0/xihSvTPGqFK9O8ZoUr03xuhSvT/GGFG9M8aYUb07xlhRvTfG2FG9P8Y4U70zxrhTvTvGeFO9N8b4U70/xgRQfTHF4iiNSHJniqBQfSvHhFB9J8dEUH0vx8RSfSPHJFJ9K8ekUn0nx2ZTkuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9McXSKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4pjUvwjxbEp/pniXyn+neI/Kf6b4n8pDslwnAzHzXC8DMfPcIIMJ8xwogyHZjgsw4kznCTDSTOcLMPJM5wiwykznCrDqTOcJsNpM5wuw+kznCHDGTOcKcOZM5wlw1kznC3D2TOcI8M5M5wrw7kznCfDeTOcL8P5M1wgwwUzXCjDhTNcJMNFM1wsw8UzXCLDJTMkw6UyXDrDZTJcNsPlMlw+wxUyXDHDlTJcOcNVMlw1w9UyXD3DNTJcM8O1Mlw7w3UyXDfD9TJcP8MNMtwww40y3DjDTTLcNMPNMtw8wy0y3DLDrTLcOsNtMtw2w+0y3D7DHTLcMcOdMtw5w10y3DXD3TLcPcM9Mtwzw70y3DvDfTLcN8P9Mtw/wwMyPDDDgzI8OMNDMjw0w8MyPDzDIzI8MsOjMjw6w2MyPDbD4zI8PsMTMjwxw5MyNMOTMzwlw1MzPC3D0zM8I8MzMzwrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZnZ3hOhudmeF6G52d4QYYXZnhRhhdneEmGl2Z4WYaXZ3hFhldmeFWGV2d4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9mODzDERmOzHBUhg9l+HCGj2T4aIaPZfh4hk9k+GSGT2X4dIbPZPhshs9l+HyGL2T4YoYvZfhyhq9k+GqGr2X4eoZvZPhmhm9l+HaG72T4bobvZfh+hh9k+GGGH2X4cYafZPhphp9l+HmGX2T4ZYajM/wqw68z/CbDbzP8LsPvM/whwx8z/CnDnzP8JcNfM/wtw98zHJPhHxmOzfDPDP/K8O8M/8nw3wz/y3BIjuPkOG6O4+U4fo4T5DhhjhPlODTHYTlOnOMkOU6a42Q5Tp7jFDlOmeNUOU6d4zQ5TpvjdDlOn+MMOc6Y40w5zpzjLDnOmuNsOc6e4xw5zpnjXDnOneM8Oc6b43w5zp/jAjkumONCOS6c4yI5LprjYjkunuMSOS6ZIzkulePSOS6T47I5Lpfj8jmukOOKOa6U48o5rpLjqjmuluPqOa6R45o5rjV0yJD/bbFOjuvmuF6O6+e4QY4b5rhRjhvnuEmOm+a4WY6b57hFjlvmuFWOW+e4TY7b5rhdjtvnuEOOO+a4U44757hLjrvmuFuOu+e4R4575rhXjnvnuE+O++a4X47753hAjgfmeFCOB+d4SI6H5nhYjofneESOR+Z4VI5H53hMjsfmeFyOx+d4Qo4n5nhSjuZ4co6n5HhqjqfleHqOZ+R4Zo5n5TjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/x7BzPyfHcHM/L8fwcL8jxwhwvyvHiHC/J8dIcL8vx8hyvyPHKHK/K8eocr8nx2hyvy/H6HG/I8cYcb8rx5hxvyfHWHG/L8fYc78jxzhzv+h+v0WePvSfHe//n8pD/f8NzHJHjyBxH5fjQ/9wfMmTIIzk+muNjOT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzl+mePoHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fccx+T4R45jc/wzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFDi1wWIETFzhJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgUsWSIFLFbh0gcsUuOGMzdjlCly+wBUKXLHAlQpcucBVCvyfB6sVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEb/O9fgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUuGuBuxW4e4F7FLhngXsVuHeB+xS4b4H7Fbh/gQcUeGCBBxV4cIGHFHhogYddhIcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgRZ4coGnFHhqgacVeHqBZxR4ZoFnFTgoMCgwLDAqMC4wKTAtMCswL7AosCywKrAusCmwLbArsC/w7ALPKfDcAs8r8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCrynw2gKvK/D6Am8o8MYCbyrw5gJvKfDWAm8r8PYC7yjwzgLvKvDuAu8p8N4C7yvw/gIfKPDBAocXOKLAkQWOKvChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyxwdIFfFfh1gd8U+G2B3xX4fYE/FPhjgT8V+HOBvxT4a4G/Ffh7gWMK/KPAsQX+WeBfBf5d4D8F/lvgf/9rocRxShy3xPFKHL/ECUqcsMSJShxa4rASJy5xkhInLXGyEicvcYoSpyxxqhKnLnGaEqctcboSpy9xhhJnLHGmEmcucZYSZy1xthJnL3GOEucsca4S5y5xnhLnLXG+EucvcYESFyxxoRIXLnGREhctcbESFy9xiRKXLJESlypx6RKXKXHZEpcrcfkSVyhxxRJXKnHlElcpcdUSVytx9RLXKHHNEtcqce0S1ylx3RLXK3H9EjcoccMSNypx4xI3KXHTEjcrcfMStyhxyxK3KnHrErcpcdsStytx+xJ3KHHHEncqcecSdylx1xJ3K3H3Evcocc8S9ypx7xL3KXHfEvcrcf8SDyjxwBIPKvHgEg8p8dASDyvx8BKPKPHIEo8q8egSjynx2BKPK/H4Ek8o8cQSTyrREk8u8ZQSTy3xtBJPL/GMEs8s8awSByUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2JZ5dLjl0yBA8t8TzSjy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0q8u8R7Sry3xPtKvL/EB0p8sMThJY4ocWSJo0p8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixC9LHF3iVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuKYEv8ocWyJf5b4V4l/l/hPif+W+F+JQyocp8JxKxyvwvErnKDCCSucqMKhFQ6rcOIKJ6lw0gonq3DyCqeocMoKp6pw6gqnqXDaCqercPoKZ6hwxgpnqnDmCmepcNYKZ6tw9grnqHDOCueqcO4K56lw3grnq3D+CheocMEKF6pw4QoXqXDRChercPEKl6hwyQqpcKkKl65wmQqXrXC5CpevcIUKV6xwpQpXrnCVCletcLUKV69wjQrXrHCtCteucJ0K161wvQrXr3CDCjescKMKN65wkwo3rXCzCjevcIsKt6xwqwq3rnCbCretcLsKt69whwp3rHCnCneucJcKd61wtwp3r3CPCvescK8K965wnwr3rXC/Cvev8IAKD6zwoAoPrvCQCg+t8LAKD6/wiAqPrPCoCo+u8JgKj63wuAqPr/CECk+s8KQKrfDkCk+p8NQKT6vw9ArPqPDMCs+qcFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+HZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVDq9wRIUjKxxV4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hFxV+WeHoCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcKx1T4R4VjK/yzwr8q/LvCfyr8t8L/KhxS4zg1jlvjeDWOX+MENU5Y40Q1Dq1xWI0T1zhJjZPWOFmNk9c4RY1T1jhVjVPXOE2N09Y4XY3T1zhDjTPWOFONM9c4S42z1jhbjbPXOEeNc9Y4V41z1zhPjfPWOF+N89e4QI0L1rhQjQvXuEiNi9a4WI2L17hEjUvWSI1L1bh0jcvUuGyNy9W4fI0r1LhijSvVuHKNq9S4ao2r1bh6jWvUuGaNa9W4do3r1LhujevVuH6NG9S4YY0b1bhxjZvUuGmNm9W4eY1b1LhljVvVuHWN29S4bY3b1bh9jTvUuGONO9W4c4271LhrjbvVuHuNe9S4Z4171bh3jfvUuG+N+9W4f40H1HhgjQfVeHCNh9R4aI2H1Xh4jUfUeGSNR9V4dI3H1HhsjcfVeHyNJ9R4Yo0n1WiNJ9d4So2n1nhajafXeEaNZ9Z4Vo2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgRofrHF4jSNqHFnjqBofqvHhGh+p8dEaH6vx8RqfqPHJGp+q8ekan6nx2Rqfq/H5Gl+o8cUaX6rx5RpfqfHVGl+r8fUa36jxzRrfqvHtGt+p8d0a36vx/Ro/qPHDGj+q8eMaP6nx0xo/q/HzGr+o8csaR9f4VY1f1/hNjd/W+F2N39f4Q40/1vhTjT/X+EuNv9b4W42/1zimxj9qHFvjnzX+VePfNf5T4781/lfjkAbHaXDcBsdrcPwGJ2hwwgYnanBog8ManLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRvcp8F9G9yvwf0bPKDBAxs8qMGDGzykwUMbPKzBwxs8osEjGzyqwaMbPKbBYxs8rsHjGzyhwRMbPKlBGzy5wVMaPLXB0xo8vcEzGjyzwbMaHDQYNBg2GDUYN5g0mDaYNZg3WDRYNlg1WDfYNNg22DXYN3h2g+c0eG6D5zV4foMXNHhhgxc1eHGDlzR4aYOXNXh5g1c0eGWDVzV4dYPXNHhtg9c1eH2DNzR4Y4M3NXhzg7c0eGuDtzV4e4N3NHhng3c1eHeD9zR4b4P3NXh/gw80+GCDwxsc0eDIBkc1+FCDDzf4SIOPNvhYg483+ESDTzb4VINPN/hMg882+FyDzzf4QoMvNvhSgy83+EqDrzb4WoOvN/hGg282+FaDbzf4ToPvNvheg+83+EGDHzb4UYMfN/hJg582+FmDnzf4RYNfNji6wa8a/LrBbxr8tsHvGvy+wR8a/LHBnxr8ucFfGvy1wd8a/L3BMQ3+0eDYBv9s8K8G/27wnwb/bfC/Boe0OE6L47Y4XovjtzhBixO2OFGLQ1sc1uLELU7S4qQtTtbi5C1O0eKULU7V4tQtTtPitC1O1+L0Lc7Q4owtztTizC3O0uKsLc7W4uwtztHinC3O1eLcLc7T4rwtztfi/C0u0OKCLS7U4sItLtLioi0u1uLiLS7R4pIt0uJSLS7d4jItLtvici0u3+IKLa7Y4kotrtziKi2u2uJqLa7e4hotrtniWi2u3eI6La7b4notrt/iBi1u2OJGLW7c4iYtbtriZi1u3uIWLW7Z4lYtbt3iNi1u2+J2LW7f4g4t7tjiTi3u3OIuLe7a4m4t7t7iHi3u2eJeLe7d4j4t7tvifi3u3+IBLR7Y4kEtHtziIS0e2uJhLR7e4hEtHtniUS0e3eIxLR7b4nEtHt/iCS2e2OJJLdriyS2e0uKpLZ7W4uktntHimS2e1eKgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHWxze4ogWR7Y4qsWHWny4xUdafLTFx1p8vMUnWnyyxadafLrFZ1p8tsXnWny+Zdj/unmxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxdEtftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8t/tbi7y2OafGPaXBsi3+2+FeLf7f4T4v/tvhfi0M6HKfDcTscr8PxO5ygwwk7nKjDoR0O63DiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFjmFDhgxxpQ5X7nCVDlftcLUOV+9wjQ7X7HCtDtfucJ0O1+1wvQ7X73CDDjfscKMON+5wkw437XCzDjfvcIsOt+xwqw637nCbDrftcLsOt+9whw537HCnDnfucJcOd+1wtw5373CPDvfscK8O9+5wnw737XC/Dvfv8IAOD+zwoA4P7vCQDg/t8LAOD+/wiA6P7PCoDo/u8JgOj+3wuA6P7/CEDk/s8KQO7fDkDk/p8NQOT+vw9A7P6PDMDs/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HZHZ7T4bkdntfh+R1e0OGFHV7U4cUdXtLhpR1e1uHlHV7R4ZUdXtXh1R1e0+G1HV7X4fUd3tDhjR3e1OHNHd7S4a0d3tbh7R3e0eGdHd7V4d0d3tPhvR3e1+H9HT7Q4YMdDu9wRIcjOxzV4UMdPtzhIx0+2uFjHT7e4RMdPtnhUx0+3eEzHT7b4XMdPt/hCx2+2OFLHb7c4Ssdvtrhax2+3uEbHb7Z4Vsdvt3hOx2+2+F7Hb7f4QcdftjhRx1+3OEnHX7a4Wcdft7hFx1+2eHoDr/q8OsOv+nw2w6/6/D7Dn/o8McOf+rw5w5/6fDXDn/r8PcOx3T4R4djO/yzw786/LvDfzr8t8P/OhzS4zg9jtvjeD2O3+MEPU7Y40Q9Du1xWI8T9zhJj5P2OFmPk/c4RY9T9jhVj1P3OE2P0/Y4XY/T9zhDjzP2OFOPM/c4S4+z9jhbj7P3OEePc/Y4V49z9zhPj/P2OF+P8/e4QI8L9rhQjwv3uEiPi/a4WI+L97hEj0v2SI9L9bh0j8v0uGyPy/W4fI8r9Lhijyv1uHKPq/S4ao+r9bh6j2v0uGaPa/W4do/r9Lhuj+v1uH6PG/S4YY8b9bhxj5v0uGmPm/W4eY9b9Lhlj1v1uHWP2/S4bY/b9bh9jzv0uGOPO/W4c4+79Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/R4Yo8n9WiPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvsez+7xnB7P7fG8Hs/v8YIeL+zxoh4v7vGSHi/t8bIeL+/xih6v7PGqHq/u8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7HF4jyN6HNnjqJ7/Y9kem/A8GAUIp7Ztm1vbtm3b3hqp/dw2atttWNu2bTc5c2bev3DNfl2HDXD4AEcMcOQARw1w9AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+Abg/GHvDnAtwb49gDfGeC7A3xvgO8P8IMBfjjAjwb48QA/GeCnA/xsgJ8P8IsBfjnArwb49QC/GeC3A/xugN8P8IcB/jjAnwb48wB/GeCvA/xtgL8P8I8B/jnAvwb49wD/GeC/A/xvgGMGOHaAQwIcJ8BxAxwvwPEDnCDACQOcKMCJA5wkwEkDnCzAyQOcIsApA5wqwKkDnCbAaQOcLsDpA5whwBkDnCnAmQOcJcBZA5wtwNkDnCPAOQOcK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLMDFA1wiwCUDXCrApQMkwGUCXDbA5QJcPsAVAlwxwJUCXDnAVQJcNcDVAlw9wDUCXDPAtQJcO8B1Alw3wPUCXD/ADQLcMMCNAtw4wE0C3DTAzQLcPMAtAtwywK0C3DrAbQLcNsDtAtw+wB0C3DHAnQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8McCTAjw5wFMCNMBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/AoQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeAgwCDAMMAowDjAJMA0wCzAPMAiwDLAKsA6wCbANsAuwD7AawK8NsDrArw+wBsCvDHAmwK8OcBbArw1wNsCvD3AOwK8M8C7Arw7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAhwW4PAARwQ4MsBRAY4O8PEAnwjwyQCfCvDpAJ8J8NkAnwvw+QBfCPDFAF8K8OUAXwnw1QBfC/D1AN8I8M0A3wrw7QDfCfDdAN8L8P0APwjwwwA/CvDjAD8J8NMAPwvw8wC/CPDLAL8K8OsAvwnw2wC/C/D7AH8I8McAfwrw5wB/CfDXAH8L8PcA/wjwzwD/CvDvAP8J8N8A/wtwTIBjAxwS4jghjhvieCGOH+IEIU4Y4kQhThziJCFOGuJkIU4e4hQhThniVCFOHeI0IU4b4nQhTh/iDCHOGOJMIc4c4iwhzhribCHOHuIcIc4Z4lwhzh3iPCHOG+J8Ic4f4gIhLhjiQiEuHOIiIS4a4mIhLh7iEiEuGeJSIS4dIiEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iGuEeKaIa4V4tohrhPiuiGuF+L6IW4Q4oYhbhTixiFuEuKmIW4W4uYhbhHiliFuFeLWIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiriHuFuLuIe4R4p4h7hXi3iHuE+K+Ie4X4v4hHhDigSEeFOLBIR4S4qEhHhbi4SEeEeKRIR4V4tEhHhPisSEeF+LxIZ4Q4okhnhTiySGeEqIhnhriaSGeHuIZIZ4Z4lkhnh3iOSGeG+J5IQ4N8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQByEGIYYhRiHGISYhpiFmIeYhFiGWIVYh1iE2IbYhdiH2IV4T4rUhXhfi9SHeEOKNId4U4s0h3hLirSHeFuLtId4R4p0h3hXi3SHeE+K9Id4X4v0hPhDigyE+FOLDIT4S4qMhPhbisBCHhzgixJEhjgpxdIiP/7/nEHwyxKdCfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhKdEaISnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6EQyM8P8ILIrwwwosivDjCSyK8NMLLIrw8wisivDLCqyK8OsJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2E10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hPdEeG+E90V4f4QPRPhghA9F+HCEj0T4aISPRTgswuERjohwZISjIhwd4eMRPhHhkxE+FeHTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYlw6RmJcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M8JUZjPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYhwa4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGYTEOj3FEjCNjHBXj6Bgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYv4zxqxi/jvGbGL+N8bsYv4/xhxh/jPGnGH+O8ZcYf43xtxh/j/GPGP+M8a8Y/47xnxj/jfG/GMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpXg0gmS4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6c4CkJmuCpCZ6W4OkJnpHgmQmeleDZCZ6T4LkJnpfg0ATPT/CCBC9M8KIEL07wkgQvTfCyBC9P8IoEr0zwqgSvTnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCT6Y4EMJPpzgIwk+muBjCQ5LcHiCIxIcmeCoBEcn+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJPhlgl8l+HWC3yT4bYLfJfh9gj8k+GOCPyX4c4K/JPhrgr8l+HuCfyT4Z4J/Jfh3gv8k+G+C/yU4JsGxCQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xkhQnTXGyFCdPcYoUp0xxqhSnTnGaFKdNcboUp09xhhRnTHGmFGdOcZYUZ01xthRnT3GOFOdMca4U505xnhTnTXG+FOdPcYEUF0xxoRQXTnGRFBdNcbEUF09xiRSXTHGpFJdOkRSXSXHZFJdLcfkUV0hxxRRXSnHlFFdJcdUUV0tx9RTXSHHNFNdKce0U10lx3RTXS3H9FDdIccMUN0px4xQ3SXHTFDdLcfMUt0hxyxS3SnHrFLdJcdsUt0tx+xR3SHHHFHdKcecUd0lx1xR3S3H3FPdIcc8U90px7xT3SXHfFPdLcf8UD0jxwBQPSvHgFA9J8dAUD0vx8BSPSPHIFI9K8egUj0nx2BSPS/H4FE9I8cQUT0rx5BRPSdEUT03xtBRPT/GMFM9M8awUz07xnBTPTfG8FIemeH6KF6R4YYoXpXhxipekeGmKl6V4eYpXpHhlileleHWKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FK9J8doUr0vx+hRvSPHGFG9K8eYUb0nx1hRvS/H2FO9I8c4U70rx7hTvSfHeFO9L8f4UH0jxwRQfSvHhFB9J8dEUH0txWIrDUxyR4sgUR6U4OsXHU3wixSdTfCrFp1N8JsVnU3wuxedTfCHFF1N8KcWXU3wlxVdTfC3F11N8I8U3U3wrxbdTfCfFd1N8L8X3U/wgxQ9T/CjFj1P8JMVPU/wsxc9T/CLFL1P8KsWvU/wmxW9T/C7F71P8IcUfU/wpxZ9T/CXFX1P8LcXfU/wjxT9T/CvFv1P8J8V/U/wvxTEpjk1xSIbjZDhuhuNlOH6GE2Q4YYYTZThxhpNkOGmGk2U4eYZTZDhlhlNlOHWG02Q4bYbTZTh9hjNkOGOGM2U4c4azZDhrhrNlOHuGc2Q4Z4ZzZTh3hvNkOG+G82U4f4YLZLhghgtluHCGi2T4ToaLZbh4hktkuGSGS2W4dIZkuEyGy2a4XIbLZ7hChitmuFKGK2e4SoarZrhahqtnuEaGa2a4VoZrZ7hOhutmuF6G62e4QYYbZrhRhhtnuEmGm2a4WYabZ7hFhltmuFWGW2e4TYbbZrhdhttnuEOGO2a4U4Y7Z7hLhrtmuFuGu2e4R4Z7ZrhXhntnuE+G+2a4X4b7Z3hAhgdmeFCGB2d4SIaHZnhYhodneESGR2Z4VIZHZ3hMhsdmeFyGx2d4QoYnZnhShidneEqGZnhqhqdleHqGZ2R4ZoZnZXh2hudkeG6G52U4NMPzM7wgwwszvCjDizO8JMNLM7wsw8szvCLDKzO8KsOrMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TYbXZnhdhtdneEOGN2Z4U4Y3Z3hLhrdmeFuGt2d4R4Z3ZnhXhndneE+G92Z4X4b3Z/hAhg9m+FCGD2f4SIaPZvhYhsMyHJ7hiAxHZjgqw9EZPp7hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+/b+G383wvQzfz/CDDD/M8KMMP87wkww/zfCzDD/P8IsMv8zwqwy/zvCbDL/N8LsMv8/whwx/zPCnDH/O8JcMf83wtwx/z/CPDP/M8K8M/87wnwz/zfC/DMdkODbDITmOk+O4OY6X4/g5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5LpXj0jmS4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e/+//zfGoHI/O8Zgcj83xuByPz/GEHE/M8aQcT87xlBzN8dQcT8vx9BzPyPHMHM/K8ewcz8nx3BzPy3FojufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5nhVjlfnOMgxyDHMMcoxHjPWJMc0xyzHPMcixzLHKsc6xybHNscuxz7Ha3K8Nsfrcrw+xxtyvDHHm3K8Ocdbcrw1x9tyvD3HO3K8M8e7crw7x3tyvDfH+3K8P8cHcnwwx4dyfDjHR3J8NMfHchyW4/AcR+Q4MsdROY7O8fEcn8jxyRyfyvHpHJ/J8dkcn8vx+RxfyPHFHF/K8eUcX8nx1Rxfy/H1HN/I8c0c38rx7RzfyfHdHN/L8f0cP8jxwxw/yvHjHD/J8dMcP8vx8xy/yPHLHL/K8escv8nx2xy/y/H7HH/I8cccf8rx5xx/yfHXHH/L8fcc/8jxzxz/yvHvHP/J8d8c/8txTI5jcxxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAVOWuBkBU5e4BQFTlngVAVOXeA0BU5b4HQFTl/gDAXOWOBMBc5c4CwFzlrgbAXOXuAcBc5Z4FwFzl3gPAXOW+B8Bc5f4AIFLljgQgUuXOAiBS5a4GIFLl7gEgUuWeBSBS5dIAUuU+CyBS5X4PIFrlDgigWuVODKBa5S4KoFrlbg6gWuUeCaBa5V4NoFrlPgugWuV+D6BW5Q4IYFblTgxgVuUuCmBW5W4OYFblHglgVuVeDWBW5T4LYFblfg9gXuUOCOBe5U4M4F7lLgrgXuVuDuBe5R4J4F7lXg3gXuU+C+Be5X4P4FHlDggQUeVODBBR5S4KEFHlbg4QUeUeCRBR5V4NEFHlPgsQUeV+DxBZ5Q4IkFnlTgyQWeUqAFnlrgaQWeXuAZBZ5Z4FkFnl3gOQWeW+B5BQ4t8PwCLyjwwgIvKvDiAi8p8NICLyvw8gKvKPDKAq8q8OoCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BV5T4LUFXlfg9QXeUOCNBd5U4M0F3lLgrQXeVuDtBd5R4J0F3lXg3QXeU+C9Bd5X4P0FPlDggwU+VODDBT5S4KMFPlbgsAKHFziiwJEFjipwdIGPF/hEgU8W+FSBTxf4TIHPFvhcgc8X+EKBLxb4UoEvF/hKga8W+FqBrxf4RoFvFvhWgW8X+E6B7xb4XoHvF/hBgR8W+FGBHxf4SYGfFvhZgZ8X+EWBXxb4VYFfF/hNgd8W+F2B3xf4Q4E/FvhTgT8X+EuBv/6/z6T4e4F/FPhngX8V+HeB/xT4b4H/FTimwLEFDilxnBLHLXG8EscvcYISJyxxohInLnGSEictcbISJy9xihKnLHGqEqcucZoSpy1xuhKnL3GGEmcscaYSZy5xlhJnLXG2EmcvcY4S5yxxrhLnLnGeEuctcb4S5y9xgRIXLHGhEhcucZESFy1xsRIXL3GJEpcscakSly6REpcpcdkSlytx+RJXKHHFElcqceUSVylx1RJXK3H1Etcocc0S1ypx7RLXKXHdEtcrcf0SNyhxwxI3KnHjEjcpcdMSNytx8xK3KHHLErcqcesStylx2xK3K3H7EncocccSdypx5xJ3KXHXEncrcfcS9yhxzxL3KnHvEvcpcd8S9ytx/xIPKPHAEg8q8eASDynx0BIPK/HwEo8o8cgSjyrx6BKPKfHYEo8r8fgSTyjxxBJPKvHkEk8p0RJPLfG0Ek8v8YwSzyzxrBLPLvGcEs8t8bwSh5Z4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYmDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsSrynx2hKvK/H6Em8o8cYSbyrx5hJvKfHWEm8r8fYS7yjxzhLvKvHuEu8p8d4S7yvx/hIfKPHBEh8q8eESHynx0RIfK3FYicNLHFHiyBJHlTi6xMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EMSWOLXFIheNUOG6F41U4foUTVDhhhRNVOHGFk1Q4aYWTVTh5hVNUOGWFU1U4dYXTVDhthdNVOH2FM1Q4Y4UzVThzhbNUOGuFs1U4e4VzVDhnhXNVOHeF81Q4b4XzVTh/hQtUuGCFC1W4cIWLVLhohYtVuHiFS1S4ZIVLVbh0hVS4TIXLVrhchctXuEKFK1a4UoUrV7hKhatWuFqFq1e4RoVrVrhWhWtXuE6F61a4XoXrV7hBhRtWuFGFG1e4SYWbVrhZhZtXuEWFW1a4VYVbV7hNhdtWuF2F21e4Q4U7VrhThTtXuEuFu1a4W4W7V7hHhXtWuFeFe1e4T4X7VrhfhftXeECFB1Z4UIUHV3hIhYdWeFiFh1d4RIVHVnhUhUdXeEyFx1Z4XIXHV3hChSdWeFKFJ1d4SoVWeGqFp1V4eoVnVHhmhWdVeHaF51R4boXnVTi0wvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrHFQYVBhWGFUYV5hUmFaYVZhXWFRYVlhVWFfYVNhW2FXYV3hNhddWeF2F11d4Q4U3VnhThTdXeEuFt1Z4W4W3V3hHhXdWeFeFd1d4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFwyocXuGICkdWOKrC0RU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FY6pcGyFQ2ocp8ZxaxyvxvFrnKDGCWucqMaJa5ykxklrnKzGyWucosYpa5yqxqlrnKbGaWucrsbpa5yhxhlrnKnGmWucpcZZa5ytxtlrnKPGOWucq8a5a5ynxnlrnK/G+WtcoMYFa1yoxoVrXKTGRWtcrMbFa1yixiVrXKrGpWukxmVqXLbG5WpcvsYValyxxpVqXLnGVWpctcbValy9xjVqXLPGtWpcu8Z1aly3xvVqXL/GDWrcsMaNaty4xk1q3PR/JpvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Ti0xvNrvKDGC2u8qMaLa7ykxktrvKzGy2u8osYra7yqxqtrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hNjdfWeF2N19d4Q4031nhTjTfXeEuNt9Z4W42313hHjXfWeFeNd9d4T4331nhfjffX+ECND9b4UI0P1/hIjY/W+FiNw2ocXuOIGkfWOKrG0TU+XuMTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e4xc1flnjVzV+XeM3NX5b43c1fl/jDzX+WONPNf5c4y81/lrjbzX+XuMfNf5Z4181/l3jPzX+W+N/NY6pcWyNQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcfsIhrtDgig2u1ODKDa7S4KoNrtbg6g2u0eCaDa7V4NoNrtPgug2u1+D6DW7Q4IYNbtTgxg1u0uCmDW7W4OYNbtHglg1u1eDWDW7T4LYNbtfg9g3u0OCODe7U4M4N7tLgrg3u1uDuDe7R4J4N7tXg3g3u0+C+De7X4P4NHtDggQ0e1ODBDR7S4KENHtbg4Q0e0eCRDR7V4NENHtPgsQ0e1+DxDZ7Q4IkNntTgyQ2e0qANntrgaQ2e3uAZDZ7Z4FkNnt3gOQ2e2+B5DQ5t8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGBw0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32DV7T4LUNXtfg9Q3e0OCNDd7U4M0N3tLgrQ3e1uDtDd7R4J0N3tXg3Q3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbgsAaHNziiwZENjmpwdIOPN/hEg082+FSDTzf4TIPPNvhcg883+EKDLzb4UoMvN/hKg682+FqDrzf4RoNvNvhWg283+E6D7zb4XoPvN/hBgx82+FGDHzf4SYOfNvhZg583+EWDXzb4VYNfN/hNg982+F2D3zf4Q4M/NvhTgz83+EuDvzb4W4O/N/hHg382+FeDfzf4T4P/Nvhfg2MaHNvgkBbHaXHcFsdrcfwWJ2hxwhYnanHiFidpcdIWJ2tx8hanaHHKFqdqceoWp2lx2hana3H6FmdoccYWZ2px5hZnaXHWFmdrcfYW52hxzhbnanHuFudpcd4W52tx/hYXaHHBFhdqceEWF2lx0RYXa3HxFpdocckWl2px6RZpcZkWl21xuRaXb3GFFldscaUWV25xlRZXbXG1FldvcY0W12xxrRbXbnGdFtdtcb0W129xgxY3bHGjFjducZMWN21xsxY3b3GLFrdscasWt25xmxa3bXG7FrdvcYcWd2xxpxZ3bnGXFndtcbcWd29xjxb3bHGvFvducZ8W921xvxb3b/GAFg9s8aAWD27xkBYPbfGwFg9v8YgWj2zxqBaPbvGYFo9t8bgWj2/xhBZPbPGkFk9u8ZQWbfHUFk9r8fQWz2jxzBbPavHsFs9p8dwWz2txaIvnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXtzhoMWgxbDFqMW4xaTFtMWsxb7FosWyxarFusWmxbbFrsW/xmhavbfG6Fq9v8YYWb2zxphZvbvGWFm9t8bYWb2/xjhbvbPGuFu9u8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFoe1OLzFES2ObHFUi6NbfLzFJ1p8ssWnWny6xWdafLbF51p8vsUXWnyxxZdafLnFV1p8tcXXWny9xTdafLPFt1p8u8V3Wny3xfdafL/FD1r8sMWPWvy4xU9a/LTFz1r8vMUvWvyyxa9a/LrFb1r8tsXvWvy+xR9a/LHFn1r8ucVfWvy1xd9a/L3FP1r8s8W/Wvy7xX9a/LfF/1oc0+LYFod0OE6H43Y4XofjdzhBhxN2OFGHE3c4SYeTdjhZh5N3OEWHU3Y4VYdTdzhNh9N2OF2H03c4Q4czdjhThzN3OEuHs3Y4W4ezdzhHh3N2OFeHc3c4T4fzdjhfh/N3uECHC3a4UIcLd7hIh4t2uFiHi3e4RIdLdrhUh0t3SIfLdLhsh8t1uHyHK3S4Yocrdbhyh6t0uGqHq3W4eodrdLhmh2t1uHaH63S4bofrdbh+hxt0uGGHG3W4cYebdLhph5t1uHmHW3S4ZYdbdbh1h9t0uG2H23W4fYc7dLhjhzt1uHOHu3S4a4e7dbh7h3t0uGeHe3W4d4f7dLhvh/t1uH+HB3R4YIcHdXhwh4d0eGiHh3V4eIdHdHhkh0d1eHSHx3R4bIfHdXh8hyd0eGKHJ3V4coendGiHp3Z4Woend3hGh2d2eFaHZ3d4Tofndnheh0M7PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd9h9d0eG2H13V4fYc3dHhjhzd1eHOHt3R4a4e3dXh7h3d0eGeHd3V4d4f3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3U4rMPhHY7ocGSHozoc3eHjHT7R4ZMdPtXh0x0+0+GzHT7X4fMdvtDhix2+1OHLHb7S4asdvtbh6x2+0eGbHb7V4dsdvtPhux2+1+H7HX7Q4YcdftThxx1+0uGnHX7W4ecdftHhlx1+1eHXHX7T4bcdftfh9x3+0OGPHf7U4c8d/tLhrx3+1uHvQ4f4R4d/dvhXh393+E+H/3b4X4djOhzb4ZAex+lx3B7H63H8HifoccIeJ+px4h4n6XHSHifrcfIep+hxyh6n6nHqHqfpcdoep+tx+h5n6HHGHmfqceYeZ+lx1h5n63H2Hufocc4e5+px7h7n6XHeHufrcf4eF+hxwR4X6nHhHhfpcdEeF+tx8R6X6HHJHpfqceke6XGZHpftcbkel+9xhR5X7HGlHlfucZUeV+1xtR5X73GNHtfsca0e1+5xnR7X7XG9HtfvcYMeN+xxox437nGTHjftcbMeN+9xix637HGrHrfucZset+1xux6373GHHnfscaced+5xlx537XG3HnfvcY8e9+xxrx737nGfHvftcb8e9+/xgB4P7PGgHg/u8ZAeD+3xsB4P7/GIHo/s8agej+7xmB6P7fG4Ho/v8YQeT+zxpB5P7vGUHu3x1B5P6/H0Hs/o8cwez+rx7B7P6fHcHs/rcWiP5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/c46DHoMewx6jHuMekx7THrMe+x6LHsseqx7rHpse2x67Hv8Zoer+3xuh6v7/GGHm/s8aYeb+7xlh5v7fG2Hm/v8Y4e7+zxrh7v7vGeHu/t8b4e7+/xgR4f7PGhHh/u8ZEeH+3xsR6H9Ti8xxE9juxxVI+je/6Ppnfu4fxwnG+3W2xt29apbdu2bZ/ato33y0ZtL7q7tW3bvPnmfn4PYU4yf0wyyfGZAT47wOEDHDHAkQMcNcDnBjh6gGMGOHaAzw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwIcJ8ChAY4b4HgBjh/gBAEOC3DCACcKcOIAJwlw0gAnC3DyAKcIcMoApwpw6gCnCXDaAKcLcPoAZwhwxgBnCnDmAGcJcNYAZwtw9gDnCHDOAOcKcO4A5wlw3gDnC3D+ABcIcMEAFwpw4QAXCXDRABcLcPEAlwhwyQAJcKkAlw5wmQCXDXC5AJcPcIUAVwxwpQBXDnCVAFcNcLUAVw9wjQDXDHCtANcOcJ0A1w1wvQDXD3CDADcMcKMANw5wkwA3DXCzADcPcIsAtwxwqwC3DnCbALcNcLsAtw9whwB3DHCnAHcOcJcAdw1wtwB3D3CPAPcMcK8A9w5wnwD3DXC/APcP8IBh/xNXBHhwgIcEeGiAhwV4eIBHBHhkgEcFeHSAxwR4bIDHBXh8gCcEeGKAJwVogCcHeEqApwZ4WoCnB3hGgGcGeFaAZwd4ToDnBnhegOcHeEGAFwZ4UYAXB3hJgJcGeFmAlwd4RYBXBnhVgFcHeE2A1wZ4XYDXB3hDgDcGeFOANwd4S4C3BnhbgLcHeEeAdwZ4V4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsA7w7wngDvDfC+AO8P8IEAHwzwoQAfDvCRAB8N8LEAHw/wiQCfDPCpAJ8O8JkAnw1weIAjAhwZ4KgAnwtwdIBjAhwb4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8B/hXg3wH+E+C/Af4XjOuQEMcJcWiI44Y4XojjhzhBiMNCnDDEiUKcOMRJQpw0xMlCnDzEKUKcMsSpQpw6xGlCnDbE6UKcPsQZQpwxxJlCnDnEWUKcNcTZQpw9xDlCnDPEuUKcO8R5Qpw3xPlCnD/EBUJcMMSFQlw4xEVCXDTExUJcPMQlQlwyREJcKsSlQ1wmxGVDXC7E5UNcIcQVQ1wpxJVDXCXEVUNcLcTVQ1wjxDVDXCvEtUNcJ8R1Q1wvxPVD3CDEDUPcKMSNQ9wkxE1D3CzEzUPcIsQtQ9wqxK1D3CbEbUPcLsTtQ9whxB1D3CnEnUPcJcRdQ9wtxN1D3CPEPUPcK8S9Q9wnxH1D3C/E/UM8IMQDQzwoxINDPCTEQ0M8LMTDQzwixCNDPCrEo0M8JsRjQzwuxONDPCHEE0M8KURDPDnEU0I8NcTTQjw9xDNCPDPEs0I8O8RzQjw3xPNCPD/EC0K8MMSLQrw4xEtCvDTEy0K8PMQrQrwyxKtCvDrEa0K8NsTrQrw+xBtCvDHEm0K8OcRbQrw1xNtCvD3EO0K8M8S7QhyEGIQYhhiFGIeYhJiGmIWYh1iEWIZYhViH2ITYhtiF2Id4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+F+HSIz4T4bIjDQxwR4sgQR4X4XIijQxwT4tgQnw/xhRBf/H+ioRBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEODTCcSMcL8LxI5wgwmERThjhRBFOHOEkEU4a4WQRTh7hFBFOGeFUEU4d4TQRThvhdBFOH+EMEc4Y4UwRzhzhLBHOGuFsEc4e4RwRzhnhXBHOHeE8Ec4b4XwRzh/hAhEuGOFCES4c4SIRLhrhYhEuHuESES4ZIREuFeHSES4T4bIRLhfh8hGuEOGKEa4U4coRrhLhqhGuFuHqEa4R4ZoRrhXh2hGuE+G6Ea4X4foRbhDhhhFuFOHGEW4S4aYRbhbh5hFuEeGWEW4V4dYRbhPhthFuF+H2Ee4Q4Y4R7hThzhHuEuGuEe4W4e4R7hHhnhHuFeHeEe4T4b4R7hfh/hEeEOGBER4U4cERHhLhoREeFuHhER4R4ZERHhXh0REeE+GxER4X4fERnhDhiRGeFKERnhzhKRGeGuFpEZ4e4RkRnhnhWRGeHeE5EZ4b4XkRnh/hBRFeGOFFEV4c4SURXhrhZRFeHuEVEV4Z4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEQ4iDCIMI4wijCNMIkwjzCLMIywiLCOsIqwjbCJsI+wi7CO8O8J7Irw3wvsivD/CByJ8MMKHInw4wkcifDTCxyJ8PMInInwywqcifDrCZyJ8NsLhEY6IcGSEoyJ8LsLREY6JcGyEz0f4QoQvRvhShC9H+EqEr0b4WoSvR/hGhG9G+FaEb0f4ToTvRvhehO9H+EGEH0b4UYQfR/hJhJ9G+FmEn0f4RYRfRvhVhF9H+E2E30b4XYTfR/hDhD9G+FOEP0f4S4S/RvhbhL9H+EeEf0b4V4R/R/hPhP9G+F+EQ2IcJ8ahMY4b43gxjh/jBDEOi3HCGCeKceIYJ4lx0hgni3HyGKeIccoYp4px6hiniXHaGKeLcfoYZ4hxxhhninHmGGeJcdYYZ4tx9hjniHHOGOeKce4Y54lx3hjni3H+GBeIccEYF4px4RgXiXHRGBeLcfEYl4hxyRiJcakYl45xmRiXjXG5GJePcYUYV4xxpRhXjnGVGFeNcbUYV49xjRjXjHGtGNeOcZ0Y141xvRjXj3GDGDeMcaMYN45xkxg3HTpkyP9x2zzGLWLcMsatYtw6xm1i3DbG7WLcPsYdYtwxxp1i3DnGXWLcNcbdYtw9xj1i3DPGvWLcO8Z9Ytw3xv1i3D/GA2I8MMaDYjw4xkNiPDTGw2I8PMYjYjwyxqNiPDrGY2I8NsbjYjw+xhNiPDHGk2I0xpNjPCXGU2M8LcbTYzwjxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa2O8LsbrY7whxhtjvCnGm2O8JcZbY7wtxttjvCPGO2O8K8ZBjEGMYYxRjHGMSYxpjFmMeYxFjGWMVYx1jE2MbYxdjH2Md8d4T4z3xnhfjPfH+ECMD8b4UIwPx/hIjI/G+FiMj8f4RIxPxvhUjE/H+EyMz8Y4PMYRMY6McVSMz8U4OsYxMY6N8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcUiC4yQ4NMFxExwvwfETnCDBYQlOmOBECU6c4CQJTprgZAlOnuAUCU6Z4FQJTp3gNAlOm+B0CU6f4AwJzpjgTAnOnOAsCc6a4GwJzp7gHAnOmeBcCc6d4DwJzpvgfAnOn+ACCS6Y4EIJLpzgIgkumuBiCS6e4BIJLpkgCS6V4NIJLpPgsgkul+DyCa6Q4IoJrpTgygmukuCqCa6W4OoJrpHgmgmuleDaCa6T4LoJrpfg+glukOCGCW6U4MYJbpLgpgluluDmCW6R4JYJbpXg1gluk+C2CW6X4PYJ7pDgjgnulODOCe6S4K4J7pbg7gnukeCeCe6V4N4J7pPgvgnul+D+CR6Q4IEJHpTgwQkekuChCR6W4OEJHpHgkQkeleDRCR6T4LEJHpfg8QmekOCJCZ6UoAmenOAp503sqQmeluDpCZ6R4JkJnpXg2Qmek+C5CZ6X4PkJXpDghQlelODFCV6S4KUJXpbg5QlekeCVCV6V4NUJXpPgtQlel+D1Cd6Q4I0J3pTgzQnekuCtCd6W4O0J3pHgnQneleAgwSDBMMEowTjBJME0wSzBPMEiwTLBKsE6wSbBNsEuwT7BuxO8J8F7E7wvwfsTfCDBBxN8KMGHE3wkwUcTfCzBxxN8IsEnE3wqwacTfCbBZxMcnuCIBEcmOCrB5xIcneCYBMcm+HyCLyT4YoIvJfhygq8k+GqCryX4eoJvJPhmgm8l+HaC7yT4boLvJfh+gh8k+GGCHyX4cYKfJPhpgp8l+HmCXyT4ZYJfJfh1gt8k+G2C3yX4fYI/JPhjgj8l+HOCvyT4a4K/Jfh7gn8k+GeCfyX4d4L/JPhvgv8lOCTFcVIcmuK4KY6X4vgpTpDisBQnTHGiFCdOcZIUJ01xshQnT3GKFKdMcaoUp05xmhSnTXG6FKdPcYYUZ0xxphRnTnGWFGdNcbYUZ09xjhTnTHGuFOdOcZ4U501xvhTnT3GBFBdMcaEUF05xkRQXTXGxFBdPcYkUl0yRFJdKcekUl0lx2RSXS3H5FFdIccUUV0px5RRXSXHVFFdLcfUU10hxzRTXSnHtFNdJcd0U10tx/RQ3SHHDFDdKceMUN0lx0xQ3S3HzFLdIccsUt0px6xS3SXHbFLdLcfsUd0hxxxR3SnHnFHdJcdcUd0tx9xT3SHHPFPdKce8U9/kf7/1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8VzUzwvxfNTvCDFC1O8KMWLU7wkxUtTvCzFy1O8IsUrU7wqxatTvCbFa1O8LsXrU7whxRtTvCnFm1O8JcVbU7wtxdtTvCPFO1O8K8VBikGKYYpRinGKSYppilmKeYpFimWKVYp1ik2KbYpdin2Kd6d4T4r3pnhfiven+ECKD6b4UIoPp/hIio+m+FiKj6f4RIpPpvhUik+n+EyKz6Y4PMURKY5McVSKz6U4OsUxKY5N8fkUX0jxxRRfSvHlFF9J8dUUX0vx9RTfSPHNFN9K8e0U30nx3RTfS/H9FD9I8cMUP0rx4xQ/SfHTFD9L8fMUv0jxyxS/SvHrFL9J8dsUv0vx+xR/SPHHFH9K8ecUf0nx1xR/S/H3FP9I8c8U/0rx7xT/SfHfFP9LcUiG42Q4NMNxMxwvw/EznCDDYRlOmOFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZLpkhGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4a4Z7pbh7hnukeGeGe6V4d4Z7pPhvtn/DQzcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjTDkzM8JcNTMzwtw9MzPCPDMzM8K8OzMzwnw3MzPC/D8zO8IMMLM7wow4szvCTDSzO8LMPLM7wiwyszvCrDqzO8JsNrM7wuw+szvCHDGzO8KcObM7wlw1szvC3D2zO8I8M7M7wrw0GGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2GfYZ3Z3hPhvdmeF+G92f4QIYPZvhQhg9n+EiGj2b4WIaPZ/hEhk9m+FSGT2f4TIbPZjg8wxEZjsxwVIbPZTg6wzEZjs3w+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twSI7j5Dg0x3FzHC/H8XOcIMdhOU6Y40Q5TpzjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumSM5LpXj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49o5rpPjujmul+P6OW6Q44Y5bpTjxjlukuOmOW6W4+Y5bpHjljlulePWOW6T47Y5bpfj9jnukOOOOe6U48457pLjrjnuluPuOe6R45457pXj3jnuk+O+Oe6X4/45HpDjgTkelOPBOR6S46E5Hpbj4TkekeOROR6V49E5HpPjsTkel+PxOZ6Q44k5npSjOZ6c4yk5nprjaTmenuMZOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTkOcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuxzvDvHe3K8N8f7crw/xwdyfDDHh3J8OMdHcnw0x8dyfDzHJ3J8Msencnw6x2dyfDbH4TmOyHFkjqNyfC7H0TmOyXFsjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjkMKHKfAoQWOW+B4BY5f4AQFDitwwgInKnDiAicpcNICJytw8gKnKHDKAqcqcOoCpylw2gKnK3D6AmcocMYCZypw5gJnKXDWAmcrcPYC5yhwzgLnKnDuAucpcN4C5ytw/gIXKHDBAhcqcOECFylw0QIXK3DxApcocMkCKXCpApcucJkCly1wuQKXL3CFAlcscKUCVy5wlQJXLXC1AlcvcI0C1yxwrQLXLnCdAtctcL0C1y9wgwI3LHCjAjcucJMCNy1wswI3L3CLArcscKsCty5wmwK3LXC7ArcvcIcCdyxwpwJ3LnCXAnctcLcCdy9wjwL3LHCvAvcucJ8C9y1wvwL3L/CAAg8s8KACDy7wkAIPLfCwAg8v8IgCjyzwqAKPLvCYAo8t8LgCjy/whAJPLPCkAi3w5AJPKfDUAk8r8PQCzyjwzALPKvDsAs8p8NwCzyvw/AIvKPDCAi8q8OICLynw0gIvK/DyAq8o8MoCryrw6gKvKfDaAq8r8PoCbyjwxgJvKvDmAm8p8NYCbyvw9gLvKPDOAu8qcFBgUGBYYFRgXGBSYFpgVmBeYFFgWTBsyJAh1gU2BbYFdgX2Bd5d4D0F3lvgfQXeX+ADBT5Y4EMFPlzgIwU+WuBjBT5e4BMFPlngUwU+XeAzBT5b4PACRxQ4ssBRBT5X4OgCxxQ4tsDnC3yhwBcLfKnAlwt8pcBXC3ytwNcLfKPANwt8q8C3C3ynwHcLfK/A9wv8oMAPC/yowI8L/KTATwv8rMDPC/yiwC8L/KrArwv8psBvC/yuwO8L/KHAHwv8qcCfC/ylwF8L/K3A3wv8o8A/C/yrwL8L/KfAfwv8r8AhJY5T4tASxy1xvBLHL3GCEoeVOGGJE5U4cYmTlDhpiZOVOHmJU5Q4ZYlTlTh1idOUOG2J05U4fYkzlDhjiTOVOHOJs5Q4a4mzlTh7iXOUOGeJc5U4d4nzlDhvifOVOH+JC5S4YIkLlbhwiYuUuGiJi5W4eIlLlLhkiZS4VIlLl7hMicuWuFyJy5e4QokrlrhSiSuXuEqJq5a4Womrl7hGiWuWuFaJa5e4TonrlrheieuXuEGJG5a4UYkbl7hJiZuWuFmJm5e4RYlblrhViVuXuE2J25a4XYnbl7hDiTuWuFOJO5e4S4m7lrhbibuXuEeJe5a4V4l7l7hPifuWuF+J+5d4QIkHlnhQiQeXeEiJh5Z4WImHl3hEiUeWeFSJR5d4TInHlnhciceXeEKJJ5Z4UomWeHKJp5R4aomnlXh6iWeUeGaJZ5V4donnlHhuieeVeH6JF5R4YYkXlXhxiZeUeGmJl5V4eYlXlHhliVeVeHWJ15R4bYnXlXh9iTeUeGOJN5V4c4m3lHhribeVeHuJd5R4Z4l3lTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x7hLvKfHeEu8r8f4SHyjxwRIfKvHhEh8p8dESHyvx8RKfKPHJEp8q8ekSnynx2RKHlziixJEljirxuRJHlzimHOrYEp8v8YUSXyzxpRJfLvGVEl8t8bUSX5/of7+AEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcUiF41Q4tMJxKxyvwvErnKDCYRVOWOFEFU5c4SQVTlrhZBVOXuEUFU5Z4VQVTl3hNBVOW+F0FU5f4QwVzljhTBXOXOEsFc5a4WwVzl7hHBXOWeFcFc5d4TwVzlvhfBXOX+ECFS5Y4UIVLlzhIhUuWuFiFS5e4RIVLlkhFS5V4dIVLlPhshUuV+HyFa5Q4YoVrlThyhWuUuGqFa5W4eoVrlHhmhWuVeHaFa5T4boVrlfh+hVuUOGGFW5U4cYVblLhphVuVuHmFW5R4ZYVblXh1hVuU+G2FW5X4fYV7lDhjhXuVOHOFe5S4a4V7lbh7hXuUeGeFe5V4d4V7lPhvhXuV+H+FR5Q4YEVHlThwRUeUuGhFR5W4eEVHlHhkRUeVeHRFR5T4bEVHlfh8RWeUOGJFZ5UoRWeXOEpFZ5a4WkVnl7hGRWeWeFZFZ5d4TkVnlvheRWeX+EFFV5Y4UUVXlzhJRVeWuFlFV5e4RUVXlnhVRVeXeE1FV5b4XUVXl/hDRXeWOFNFd5c4S0V3lrhbRXeXuEdFd5Z4V0VDioMKgwrjCqMK0wqTCvMKswrLCosK6wqrCtsKmwr7CrsK7y7wnsqvLfC+yq8v8IHKnywwocqfLjCRyp8tMLHKny8wicqfLLCpyp8usJnKny2wuEVjqhwZIWjKnyuwtEVjqlwbIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4VDahynxqE1jlvjeDWOX+MENQ6rccIaJ6px4honqXHSGiercfIap6hxyhqnqnHqGqepcdoap6tx+hpnqHHGGmeqceYaZ6lx1hpnq3H2Gueocc4a56px7hrnqXHeGuercf4aF6hxwRoXqnHhGhepcdEaF6tx8RqXqHHJGqlxqRqXrnGZGpetcbkal69xhRpXrHGlGleucZUaV61xtRpXr3GNGtesca0a165xnRrXrXG9GtevcYMaN6xxoxo3rnGTGjetcbMaN69xixq3rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go+v8YQaT6zxpBqt8eQaT6nx1BpPq/H0Gs+o8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqnFQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/j3TXeU+O9Nd5X4/01PlDjgzU+VOPDNT5S46M1Plbj4zU+UeOTNT5V49M1PlPjszUOr3FEjSNrHFXjczWOrnFMjWNrfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHNLgOA0ObXDcBsdrcPwGJ2hwWIMTNjhRgxM3OEmDkzY4WYOTNzhFg1M2OFWDUzc4TYPTNjhdg9M3OEODMzY4U4MzNzhLg7M2OFuDszc4R4NzNjhXg3M3OE+D8zY4X4PzN7hAgws2uFCDCze4SIOLNrhYg4s3uESDSzZIg0s1uHSDyzS4bIPLNbh8gys0uGKDKzW4coOrNLhqg6s1uHqDazS4ZoNrNbh2g+s0uG6D6zW4foMbNLhhgxs1uHGDmzS4aYObNbh5g1s0uGWDWzW4dYPbNLhtg9s1uH2DOzS4Y4M7Nbhzg7s0uGuDuzW4e4N7NLhng3s1uHeD+zS4b4P7Nbh/gwc0eGCDBzV4cIOHNHhog4c1eHiDRzR4ZINHNXh0g8c0eGyDxzV4fIMnNHhigyc1aIMnN3hKg6c2eFqDpzd4RoNnNnhWg2c3eE6D5zZ4XoPnN3hBgxc2eFGDFzd4SYOXNnhZg5c3eEWDVzZ4VYNXN3hNg9c2eF2D1zd4Q4M3NnhTgzc3eEuDtzZ4W4O3N3hHg3c2eFeDgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bu9u8J4G723wvgbvb/CBBh9s8KEGH27wkQYfbfCxBh9v8IkGn2zwqQafbvCZBp9tcHiDIxoc2eCoBp9rcHSDYxoc2+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+CQFsdpcWiL47Y4XovjtzhBi8NanLDFiVqcuMVJWpy0xclanLzFKVqcssWpWpy6xWlanLbF6VqcvsUZWpyxxZlanLnFWVqctcXZWpy9xTlanLPFuVqcu8V5Wpy3xflanL/FBVpcsMWFWly4xUVaXLTFxVpcvMUlWlyyRVpcqsWlW1ymxWVbXK7F5VtcocUVW1ypxZVbXKXFVVtcrcXVW1yjxTVbXKvFtVtcp8V1W1yvxfVb3KDFDVvcqMWNW9ykxU1b3KzFzVvcosUtW9yqxa1b3KbFbVvcrsXtW9yhxR1b3KnFnVvcpcVdW9ytxd1b3KPFPVvcq8W9W9ynxX1b3K/F/Vs8oMUDWzyoxYNbPKTFQ1s8rMXDWzyixSNbPKrFo1s8psVjWzyuxeNbPKHFE1s8qUVbPLnFU1o8tcXTWjy9xTNaPLPFs1o8u8VzWjy3xfNaPL/FC1q8sMWLWry4xUtavLTFy1q8vMUrWryyxatavLrFa1q8tsXrWry+xRtavLHFm1q8ucVbWry1xdtavL3FO1q8s8W7Why0GLQYthi1GLeYtJi2mLWYt1i0WLZYtVi32LTYtti12Ld4d4v3tHhvi/e1eH+LD7T4YIsPtfhwi4+0+GiLj7X4eItPtPhki0+1+HSLz7T4bIvDWxzR4sgWR7X/f19GtzimxbEtPt/iCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy1+OSF+1eLXLX7T4rctftfi9y3+0OKPLf7U4s8t/tLiry3+1uLvLf7R4p8t/tXi3y3+0+K/Lf73f3k6HKfDoR2O2+F4HY7f4QQdDutwwg4n6nDiDifpcNIOJ+tw8g6n6HDKDqfqcOoOp+lw2g6n63D6DmfocMYOZ+pw5g5n6XDWDmfrcPYO5+hwzg7n6nDuDufpcN4O5+tw/g4X6HDBDhfqcOEOF+lw0Q4X63DxDpfocMkO6XCpDpfucJkOl+1wuQ6X73CFDlfscKUOV+5wlQ5X7XC1DlfvcI0O1+xwrQ7X7nCdDtftcL0O1+9wgw437HCjDjfucJMON+1wsw4373CLDrfscKsOt+5wmw637XC7DrfvcIcOd+xwpw537nCXDnftcLcOd+9wjw737HCvDvfucJ8O9+1wvw737/CADg/s8KAOD+7wkA4P7fCwDg/v8IgOj+zwqA6P7vCYDo/t8LgOj+/whA5P7PCkDu3w5A5P6fDUDk/r8PQOz+jwzA7P6vDsDs/p8NwOz+vw/A4v6PDCDi/q8OIOL+nw0g4v6/DyDq/o8MoOr+rw6g6v6fDaDq/r8PoOb+jwxg5v6vDmDm/p8NYOb+vw9g7v6PDODu/qcNBh0GHYYdRh3GHSYdph1mHeYdFh2WHVYd1h02HbYddh3+HdHd7T4b0d3tfh/R0+0OGDHT7U4cMdPtLhox0+1uHjHT7R4ZMdPtXh0x0+0+GzHQ7vcESHIzsc1eFzHY7ucEyHYzt8vsMXOnyxw5c6fLnDVzp8tcPXOny9wzc6fLPDtzp8u8N3Ony3w/c6fL/DDzr8sMOPOvy4w086/LTDzzr8vMMvOvyyw686/LrDbzr8tsPvOvy+wx86/LHDnzr8ucNfOvy1w986/L3DPzr8s8O/Ovy7w386/LfD/zoc0uM4PQ7tcdwex+tx/B4n6HFYjxP2OFGPE/c4SY+T9jhZj5P3OEWPU/Y4VY9T9zhNj9P2OF2P0/c4Q48z9jhTjzP3OEuPs/Y4W4+z9zhHj3P2OFePc/c4T4/z9jhfj/P3uECPC/a4UI8L97hIj4v2uFiPi/e4RI9L9kiPS/W4dI/L9Lhsj8v1uHyPK/S4Yo8r9bhyj6v0uGqPq/W4eo9r9Lhmj2v1uHaP6/S4bo/r9bh+jxv0uGGPG/W4cY+b9Lhpj5v1uHmPW/S4ZY9b9bh1j9v0uG2P2/W4fY879Lhjjzv1uHOPu/S4a4+79bh7j3v0uGePe/W4d4/79Lhvj/v1uH+PB/R4YI8H9Xhwj4f0eGiPh/V4eI9H9Hhkj0f1eHSPx/R4bI/H9Xh8jyf0eGKPJ/Vojyf3eEqPp/Z4Wo+n93hGj2f2eFaPZ/d4To/n9nhej+f3eEGPF/Z4UY8X93hJj5f2eFmPl/d4RY9X9nhVj1f3eE2P1/Z4XY/X93hDjzf2eFOPN/d4S4+39nhbj7f3eEePd/Z4V4+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7+7xnh7v7fG+Hu/v8YEeH+zxoR4f7vGRHh/t8bEeH+/xiR6f7PGpHp/u8Zken+1xeI8jehzZ46gen+txdI9jehzb/380nGPz2AcDZZM2RWrbdntq27Zt26dtatu23eb/s1HbRmobabjzzO7eb3Bn7n135uDrA/jGAL45gG8N4NsD+M4AvjuA7w3g+wP4wQB+OIAfDeDHA/jJAH46gJ8N4OcDOGIAvxjALwfwqwH8egC/GcBvB/C7Afx+AH8YwB8H8KcB/HkAfxnAXwfwtwH8fQD/GMA/B/CvAfx7AP8ZwH8HcOQA/jeAowZw9ACOGcCxAzhuAMcP4KAABwc4QYATBjgkwIkCnDjASQKcNMChAU4W4OQBThHglAFOFeDUAU4T4LQBThfg9AHOEOCMAc4U4MwBzhLgrAHOFuDsAc4R4JwBzhXg3AHOE+C8Ac4X4PwBLhDgggEuFODCAS4S4KIBLhbg4gEuEeCSAS4V4NIBLhMgAS4b4HIBLh/gCgGuGOBKAa4c4CoBrhrgagGuHuAaAa4Z4FoBrh3gOgGuG+B6Aa4f4AYBbhjgRgFuHOAmAW4a4GYBbh7gFgFuGeBWAW4d4DYBbhvgdgFuH+AOAe4Y4E4B7hzgLgHuGuBuAe4e4B4B7hngXgHuHeA+Ae4b4H4B7h/gAQEeGOBBAR4c4CEBHhrgYQEeHuARAR4Z4FEBHh3gMQEeG+BxAR4f4AkBnhjgSQGeHOApAZ4aoAGeFuDpAZ4R4LAAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQCfDnB4gAMBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBjgjwiwC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8A/wzwrwD/DvCfAP8NcGSA/wU4KsDRAY4JcGyA4wIcH+CgEAeHOEGIE4Y4JMSJQpw4xElCnDTEoSFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFeLSIS4TIiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhziKSGeGqIhnhbi6SGeEeKwEM8M8awQzw7xnBDPDfG8EM8P8YIQLwzxohAvDvGSEC8N8bIQLw/xihCvDPGqEK8O8ZoQrw3xuhCvD/GGEG8M8aYQbw7xlhBvDfG2EG8P8Y4Q7wzxrhDvDvGeEO8N8b4Q7w/xgRAfDPGhEB8O8ZEQHw3xsRAfD/GJEJ8M8akQnw5xeIgDIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhPisyE+F+LzIb4Q4oshvhTiyyG+EuKrIb4W4ushvhHimyG+FeLbIb4T4rshvhfi+yF+EOKHIX4U4schfhLipyF+FuLnIY4I8YsQvwzxqxC/DvGbEL8N8bsQvw/xhxB/DPGnEH8O8ZcQfw3xtxB/D/GPEP8M8a8Q/w7xnxD/DXFkiP+FOCrE0SGOCXFsiONCHB/ioAgHRzhBhBNGOCTCiSKcOMJJIpw0wqERThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIRLhXh0hEuEyERLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBv/f5RDhxhFuEuGmEW4W4eYRbhHhlhFuFeHWEW4T4bYRbhfh9hHuEOGOEe4U4c4R7hLhrhHuFuHuEe4R4Z4R7hXh3hHuE+G+Ee4X4f4RHhDhgREeFOHBER4S4aERHhbh4REeEeGRER4V4dERHhPhsREeF+HxEZ4Q4YkRnhThyRGeEuGpERrhaRGeHuEZEQ6L8MwIz4rw7AjPifDcCM+L8PwIL4jwwggvivDiCC+J8NIIL4vw8giviPDKCK+K8OoIr4nw2givi/D6CG+I8MYIb4rw5ghvifDWCG+L8PYI74jwzgjvivDuCO+J8N4I74vw/ggfiPDBCB+K8OEIH4nw0Qgfi/DxCJ+I8MkIn4rw6QiHRzgQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hMxE+G+FzET4f4QsRvhjhSxG+HOErEb4a4WsRvh7hGxG+GeFbEb4d4TsRvhvhexG+H+EHEX4Y4UcRfhzhJxF+GuFnEX4e4YgIv4jwywi/ivDrCL+J8NsIv4vw+wh/iPDHCH+K8OcIf4nw1wh/i/D3CP+I8M8I/4rw7wj/ifDfCEdG+F+EoyIcHeGYCMdGOC7C8REOinFwjBPEOGGMQ2KcKMaJY0aO/79xaIyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxbh0jMvESIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4Q4w7xrhTjDvHuEuMu8a4W4y7x7hHjHvGuFeMe8e4T4z7xrhfjPvHeECMB8Z4UIwHx3hIjIfGeFiMh8d4RIxHxnhUjEfHeEyMx8Z4XIzHx3hCjCfGeFKMJ8d4SoynxmiMp8V4eoxnxDgsxjNjPCvGs2M8J8ZzYzwvxvNjvCDGC2O8KMaLY7wkxktjvCzGy2O8IsYrY7wqxqtjvCbGa/+3n0GDBl0f4w0x3hjjTTHeHOMtMd4a420x3h7jHTHeGeNdMd4d4z0x3hvjfTHeH+MDMT4Y40MxPhzjIzE+GuNjMT4e4xMxPhnjUzE+HePwGAdiDGIMY4xijGNMYkxjzGLMYyxiLGOsYqxjbGJsY+xi7GN8JsZnY3wuxudjfCHGF2N8KcaXY3wlxldjfC3G12N8I8Y3Y3wrxrdjfCfGd2N8L8b3Y/wgxg9j/CjGj2P8JMZPY/wsxs9jHBHjFzF+GeNXMX4d4zcxfhvjdzF+H+MPMf4Y408x/hzjLzH+GuNvMf4e4x8x/hnjXzH+HeM/Mf4b48gY/4txVIyjYxwT49gYx8U4PsZBCQ5OcIIEJ0xwSIITJThxgpMkOGmCQxOcLMHJE5wiwSkTnCrBqROcJsFpE5wuwekTnCHBGROcKcGZE5wlwVkTnC3B2ROcI8E5E5wrwbkTnCfBeROcL8H5E1wgwQUTXCjBhRNcJMFFE1wswcUTXCLBJRNcKsGlE1wmQRJcNsHlElw+wRUSXDHBlRJcOcFVElw1wdUSXD3BNRJcM8G1Elw7wXUSXDfB9RJcP8ENEtwwwY0S3DjBTRLcNMHNEtw8wS0S3DLBrRLcOsFtEtw2we0S3D7BHRLcMcGdEtw5wV0S3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjwxwZMSPDnBUxI8NUETPC3B0xM8I8FhCZ6Z4FkJnp3gOQmem+B5CZ6f4AUJXpjgRQlenOAlCV6a4GUJXp7gFQlemeBVCV6d4DUJXpvgdQlen+ANCd6Y4E0J3pzgLQnemuBtCd6e4B0J3pngXQneneA9Cd6b4H0J3p/gAwk+mOBDCT6c4CMJPprgYwk+nuATCT6Z4FMJPp3g8AQHEgwSDBOMEowTTBJME8wSzBMsEiwTrBKsE2wSbBPsEuwTfCbBZxN8LsHnE3whwRcTfCnBlxN8JcFXE3wtwdcTfCPBNxN8K8G3E3wnwXcTfC/B9xP8IMEPE/wowY8T/CTBTxP8LMHPExyR4BcJfpngVwl+neA3CX6b4HcJfp/gDwn+mOBPCf6c4C8J/prgbwn+nuAfCf6Z4F8J/p3gPwn+m+DIBP9LcFSCoxMck+DYBMclOD7BQSkOTnGCFCdMcUiKE6U4cYqTpDhpikNTnCzFyVOcIsUpU5wqxalTnCbFaVOcLsXpU5whxRlTnCnFmVOcJcVZU5wtxdlTnCPFOVOcK8W5U5wnxXlTnC/F+VNcIMUFU1woxYVTXCTFRVNcLMXFU1wixSVTXCrFpVNcJkVSXDbF5VJcPsUVUlwxxZVSXDnFVVJcNcXVUlw9xTVSXDPFtVJcO8V1Ulw3xfVSXD/FDVLcMMWNUtw4xU1S3DTFzVLcPMUtUtwyxa1S3DrFbVLcNsXtUtw+xR1S3DHFnVLcOcVdUtw1xd1S3D3FPVLcM8W9Utw7xX1S3DfF/VLcP8UDUjwwxYNSPDjFQ1I8NMXDUjw8xSNSPDLFo1I8OsVjUjw2xeNSPD7FE1I8McWTUjw5xVNSPDVFUzwtxdNTPCPFYSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KV6b4nUpXp/iDSnemOJNKd6c4i0p3pribSnenuIdKd6Z4l0p3p3iPSnem+J9Kd6f4gMpPpjiQyk+nOIjKT6a4mMpPp7iEyk+meJTKT6d4vAUB1IMUgxTjFKMU0xSTFPMUsxTLFIsU6xSrFNsUmxT7FLsU3wmxWdTfC7F51N8IcUXU3wpxZdTfCXFV1N8LcXXU3wjxTdTfCvFt1N8J8V3U3wvxfdT/CDFD1P8KMWPU/wkxU9T/CzFz1MckeIXKX6Z4lcpfp3iNyl+m+J3KX6f4g8p/pjiTyn+nOIvKf6a4m8p/p7iHyn+meJfKf6d4j8p/pviyBT/S3FUiqNTHJPi2BTHpTg+xUEZDs5wggwnzHBIhhNlOHGGk2Q4aYZDM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTNcIsMlM1wqw6UzXCZDMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyPDHDkzI8OcNTMjw1QzM8LcPTMzwjw2EZnpnhWRmeneE5GZ6b4XkZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4T0Z3pvhfRnen+EDGT6Y4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neHwDAcyDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DN8JsNnM3wuw+czfCHDFzN8KcOXM3wlw1czfC3D1zN8I8M3M3wrw7czfCfDdzN8L8P3M/wgww8z/CjDjzP8JMNPM/wsw88zHJHhFxl+meFXGX6d4TcZfpvhdxl+n+EPGf6Y4U8Z/pzhLxn+muFvGf6e4R8Z/pnhXxn+neE/Gf6b4cgM/8twVIajMxyT4dgMx2U4PsNBOQ7OcYIcJ8xxSI4T5ThxjpPkOGmOQ3OcLMfJc5wixylznCrHqXOcJsdpc5wux+lznCHHGXOcKceZc5wlx1lznC3H2XOcI8c5c5wrx7lznCfHeXOcL8f5c1wgxwVzXCjHhXNcJMdFc1wsx8VzXCLHJXNcKselc1wmR3JcNsflclw+xxVyXDHHlXJcOcdVclw1x9VyXD3HNXJcM8e1clw7x3VyXDfH9XJcP8cNctwwx41y3DjHTXLcNMfNctw8xy1y3DLHrXLcOsdtctw2x+1y3D7HHXLcMcedctw5x11y3DXH3XLcPcc9ctwzx71y3DvHfXLcN8f9ctw/xwNyPDDHg3I8OMdDcjw0x8NyPDzHI3I8Msejcjw6x2NyPDbH43I8PscTcjwxx5NyPDnHU3I8NUdzPC3H03M8I8dhOZ6Z41k5np3jOTmem+N5OZ6f4wU5XpjjRTlenOMlOV6a42U5Xp7jFTlemeNVOV6d4zU5XpvjdTlen+MNOd6Y40053pzjLTnemuNtOd6e4x053pnjXTneneM9Od6b43053p/jAzk+mONDOT6c4yM5PprjYzk+nuMTOT6Z41M5Pp3j8BwHcgxyDHOMcoxzTHJMc8xyzHMscixzrHKsc2xybHPscuyHDhr0v088m+NzOT6f4ws5vpjjSzm+nOMrOb6a42s5vp7jGzm+meNbOb6d4zs5vpvjezm+n+MHOX6Y40c5fpzjJzl+muNnOX6e44gcv8jxyxy/yvHrHL/J8dscv8vx+xx/yPHHHH/K8eccf8nx1xx/y/H3HP/I8c8c/8rx7xz/yfHfHEfm+F+Oo3IcneOYHMfmOC7H8TkOKnBwgRMUOGGBQwqcqMCJC5ykwEkLHFrgZAVOXuAUBU5Z4FQFTl3gNAVOW+B0BU5f4AwFzljgTAXOXOAsBc5a4GwFzl7gHAXOWeBcBc5d4DwFzlvgfAXOX+ACBS5Y4EIFLlzgIgUuWuBiBS5e4BIFLlngUgUuXeAyBVLgsgUuV+DyBa5Q4IoFrlTgygWuUuCqBa5W4OoFrlHgmgWuVeDaBa5T4LoFrlfg+gVuUOCGBW5U4MYFblLgpgVuVuDmBW5R4JYFblXg1gVuU+C2BW5X4PYF7lDgjgXuVODOBe5S4K4F7lbg7gXuUeCeBe5V4N4F7lPgvgXuV+D+BR5Q4IEFHlTgwQUeUuChBR5W4OEFHlHgkQUeVeDRBR5T4LEFHlfg8QWeUOCJBZ5U4MkFnlLgqQVa4GkFnl7gGQUOK/DMAs8q8OwCzynw3ALPK/D8Ai8o8MICLyrw4gIvKfDSAi8r8PICryjwygKvKvDqAq8p8NoCryvw+gJvKPDGAm8q8OYCbynw1gJvK/D2Au8o8M4C7yrw7gLvKfDeAu8r8P4CHyjwwQIfKvDhAh8p8NECHyvw8QKfKPDJAp8q8OkChxc4UGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2Bf4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuCIAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCfyvw9wL/KPDPAv8q8O8C/ynw3wJHFvhfgaMKHF3gmALHFjiuwPEFDipxcIkTlDhhiUNKnKjEiUucpMRJSxxa4mQlTl7iFCVOWeJUJU5d4jQlTlvidCVOX+IMJc5Y4kwlzlziLCXOWuJsJc5e4hwlzlniXCXOXeI8Jc5b4nwlzl/iAiUuWOJCJS5c4iIlLlriYiUuXuISJS5Z4lIlLl3iMiVS4rIlLlfi8iWuUOKKJa5U4solrlLiqiWuVuLqJa5R4polrlXi2iWuU+K6Ja5X4volblDihiVuVOLGJW5S4qYlblbi5iVuUeKWJW5V4tYlblPitiVuV+L2Je5Q4o4l7lTiziXuUuKuJe5W4u4l7lHiniXuVeLeJe5T4r4l7lfi/iUeUOKBJR5U4sElHlLioSUeVuLhJR5R4pElHlXi0SUeU+KxJR5X4vElnlDiiSWeVOLJJZ5S4qklWuJpJZ5e4hklDivxzBLPKvHsEs8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8o8cESHyrx4RIfKfHREh8r8fESnyjxyRKfKvHpEoeXOFBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX+IzJT5b4nMlPl/iCyW+WOJLJb5c4islvlriayW+XuIbJb5Z4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iiBK/KPHLEr8q8esSvynx2xK/K/H7En8o8ccSfyrx5xJ/KfHXEn8r8fcS/yjxzxL/KvHvEv8p8d8SR5b4X4mjShxd4pgSx5Y4rsTxJQ6qcHCFE1Q4YYVDKpyowokrnKTCSSscWuFkFU5e4RQVTlnhVBVOXeE0FU5b4XQVTl/hDBXOWOFMFc5c4SwVzlrhbBXOXuEcFc5Z4VwVzl3hPBXOW+F8Fc5f4QIVLljhQhUuXOEiFS5a4WIVLl7hEhUuWeFSFS5d4TIVUuGyFS5X4fIVrlDhihWuVOHKFa5S4aoVrlbh6hWuUeGaFa5V4doVrlPhuhWuV+H6FW5Q4YYVblThxhVuUuGmFW5W4eYVblHhlhVuVeHWFW5T4bYVblfh9hXuUOGOFe5U4c4V7lLhrhXuVuHuFe5R4Z4V7lXh3hXuU+G+Fe5X4f4VHlDhgRUeVOHBFR5S4aEVHlbh4RUeUeGRFR5V4dEVHlPhsRUeVzFi+KBBnlDhiRWeVOHJFZ5S4akVWuFpFZ5e4RkVDqvwzArPqvDsCs+p8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKr6rw6gqvqfDaCq+r8PoKb6jwxgpvqvDmCm+p8NYKb6vw9grvqPDOCu+q8O4K76nw3grvq/D+Ch+o8MEKH6rw4QofqfDRCh+r8PEKn6jwyQqfqvDpCodXOFBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX+EzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOEnFX5a4WcVfl7hiAq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwr/qvDvCv+p8N8KR1b4X4WjKhxd4ZgKx1Y4rsLxFQ6qcXCNE9Q4YY1DapyoxolrnKTGSWscWuNkNU5e4xQ1TlnjVDVOXeM0NU5b43Q1Tl/jDDXOWONMNc5c4yw1zlrjbDXOXuMcNc5Z41w1zl3jPDXOW+N8Nc5f4wI1LljjQjUuXOMiNS5a42I1Ll7jEjUuWeNSNS5d4zI1UuOyNS5X4/I1rlDjijWuVOPKNa5S46o1rlbj6jWuUeOaNa5V49o1rlPjujWuV+P6NW5Q44Y1blTjxjVuUuOmNW5W4+Y1blHjljVuVePWNW5T47Y1blfj9jXuUOOONe5U48417lLjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5Q44k1nlTjyTWeUuOpNVrjaTWeXuMZNQ6r8cwaz6rx7BrPqfHcGs+r8fwaL6jxwhovqvHiGi+p8dIaL6vx8hqvqPHKGq+q8eoar6nx2hqvq/H6Gm+o8cYab6rx5hpvqfHWGm+r8fYa76jxzhrvqvHuGu+p8d4a76vx/hofqPHBGh+q8eEaH6nx0Rofq/HxGp+o8ckan6rx6RqH1zhQY1BjWGNUY1xjUmNaY1ZjXmNRY1ljVWNdY1NjW2NXY1/jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjJzV+WuNnNX5e44gav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8a/6rx7xr/qfHfGkfW+F+No2ocXeOYGsfWOK7G8TUOanBwgxM0OGGDQxqcqMGJG5ykwUkbHNrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2uBiDS7e4BINLtngUg0u3eAyDdLgsg0u1+DyDa7Q4IoNrtTgyg2u0uCqDa7W4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7U4MkNntLgqQ3a4GkNnt7gGQ0Oa/DMBs9q8OwGz2nw3AbPa/D8Bi9o8MIGL2rw4gYvafDSBi9r8PIGr2jwygavavDqBq9p8NoGr2vw+gZvaPDGBm9q8OYGb2nw1gZva/D2Bu9o8M4G72rw7gbvafDeBu9r8P4GH2jwwQYfavDhBh9p8NEGH2vw8QafaPDJBp9q8OkGhzc40GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4DMNPtvgcw0+3+ALDb7Y4EsNvtzgKw2+2uBrDb7e4BsNvtngWw2+3eA7Db7b4HsNvt/gBw1+2OBHDX7c4CcNftrgZw1+3uCIBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wZHNvhfg6MaHN3gmAbHNjiuwfENDmpxcIsTtDhhi0NanKjFiVucpMVJWxza4mQtTt7iFC1O2eJULU7d4jQtTtvidC1O3+IMLc7Y4kwtztziLC3O2uJsLc7e4hwtztniXC3O3eI8Lc7b4nwtzt/iAi0u2OJCLS7c4iItLtriYi0u3uISLS7Z4lItLt3iMi3S4rItLjdmsMu3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7d4SountmiLp7V4eotntDisxTNbPKvFs1s8p8VzWzyvxfNbvKDFC1u8qMWLW7ykxUtbvKzFy1u8osUrW7yqxatbvKbFa1u8rsXrW7yhxRtbvKnFm1u8pcVbW7ytxdtbvKPFO1u8q8W7W7ynxXtbvK/F+1t8oMUHW3yoxYdbfKTFR1t8rMXHW3yixSdbfKrFp1sc3uJAi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32Lz7T4bIvPtfh8iy+0+GKLL7X4couvtPj/2Nhhr7f4RotvtvhWi2+3+E6L77b4Xovvt/hBix+2+FGLH7f4SYuftvhZi5+3OKLFL1r8ssWvWvy6xW9a/LbF71r8vsUfWvyxxZ9a/LnFX1r8tcXfWvy9xT9a/LPFv1r8u8V/Wvy3xZEt/tfiqBZHtzimxbEtjvtfhxYHdTi4wwk6nLDDIR1O1OHEHU7S4aQdDu1wsg4n73CKDqfscKoOp+5wmg6n7XC6DqfvcIYOZ+xwpg5n7nCWDmftcLYOZ+9wjg7n7HCuDufucJ4O5+1wvg7n73CBDhfscKEOF+5wkQ4X7XCxDhfvcIkOl+xwqQ6X7nCZDulw2Q6X63D5DlfocMUOV+pw5Q5X6XDVDlfrcPUO1+hwzQ7X6nDtDtfpcN0O1+tw/Q436HDDDjfqcOMON+lw0w4363DzDrfocMsOt+pw6w636XDbDrfrcPsOd+hwxw536nDnDnfpcNcOd+tw9w736HDPDvfqcO8O9+lw3w7363D/Dg/oGDJo0CAP6vDgDg/p8NAOD+vw8A6P6PDIDo/q8OgOj+nw2A6P6/D4Dk/o8MQOT+rw5A5P6fDUDu3wtA5P7/CMDod1eGaHZ3V4dofndHhuh+d1eH6HF3R4YYcXdXhxh5d0eGmHl3V4eYdXdHhlh1d1eHWH13R4bYfXdXh9hzd0eGOHN3V4c4e3dHhrh7d1eHuHd3R4Z4d3dXh3h/d0eG+H93V4f4cPdPhghw91+HCHj3T4aIePdfh4h090+GSHT3X4dIfDOxzoMOgw7DDqMO4w6TDtMOsw77DosOyw6rDusOmw7bDrsO/wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/vcESHX3T4ZYdfdfh1h990+G2H33X4fYc/dPhjhz91+HOHv3T4a4e/dfh7h390+GeHf3X4d4f/dPhvhyM7/K/DUR2O7nBMh2M7HNfh+A4H9Ti4xwl6nLDHIT1O1OPEPU7S46Q9Du1xsh4n73GKHqfscaoep+5xmh6n7XG6HqfvcYYeZ+xxph5n7nGWHmftcbYeZ+9xjh7n7HGuHufucZ4e5+1xvh7n73GBHhfscaEeF+5xkR4X7XGxHhfvcYkel+xxqR6X7nGZHulx2R6X63H5HlfoccUeV+px5R5X6XHVHlfrcfUe1+hxzR7X6nHtHtfpcd0e1+tx/R436HHDHjfqceMeN+lx0x4363HzHrfoccset+px6x636XHbHrfrcfsed+hxxx536nHnHnfpcdced+tx9x736HHPHvfqce8e9+lx7Pjx4/frcf8eD+jxwB4P6vHgHg/p8dAeD+vx8B6P6PHIHo/q8egej+nx2B6P6/H4Hk/o8cQeT+rx5B5P6fHUHu3xtB5P7/GMHof1eGaPZ/V4do/n9Hhuj+f1eH6PF/R4YY8X9Xhxj5f0eGmPl/V4eY9X9Hhlj1f1eHWP1/R4bY/X9Xh9jzf0eGOPN/V4c4+39Hhrj7f1eHuPd/R4Z4939Xh3j/f0eG+P9/V4f48P9Phgjw/1+HCPj/T4aI+P9fh4j0/0+GSPT/X4dI/Dexzo8f8EAAD//9eYyt4=") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f0000000280)=ANY=[], 0xa, 0x0, &(0x7f0000000180)) write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"7f9654d636ab18b7938a2804505c72e9994ca22404fc203334cc21ed3d6a776fd12d13f9602b2980f983c31a5d1e431db778099ce3af3fb20e1ee1f4fdb77cbb36154982a93c19825d6fd273ab1eb5bcd47adad50de8a6791486e482e29ecc94284921f33b941cfc1000c9781d9a828c5ec7a2c77b4e624a5aa0e9e39782bad733eda81ba47e1c6116e4170e6587dd6210a57abe91f1f80c4e31139d8b73fe35ac1f99ea82dd6aa9c9aa67de88ae3e141020e1a876bbc449d2d843aa7e6d90b948b7e28770e6ac71010c63f17e90fd20806a9f8d9f418ee3af74aac64b04a27c4f5e3626ca2da546c79d24acadd11e8d272a22fc54078fd5e64475993668980a9f95aff964dee674356af492b8377a759d8ccf1accb9a18ef7ad16f438dde69cd020d71552b0810688c882a26a22b23f4b35471b08b379193db1cd7934a4049ff1b00d9795cda6e73951641d5e2365c24facd5afd09ed1d096d758b4fef66fe1aa22395d67b7e1db623d4a60a7dc93893d6c4a91df79535a855868c5dc0033d5c428cd25b85c5deb6e81068553bc84cead4d1eba8aa57e2b354a6899e44acbd3834491219b3e231cd55d82f161774a689efe197cc193ac0124c67738a0a1d5f16a6768c2c2ba7386c8c95ca08c55117f344f5a2bca0d09e79ea3fc49491f2c7adc513c2779c1bf62b1a8643d23e9e8b2ae41d4a59f1b82b82e092b36eb851b8456da871b4057aec325a9d4cccafde61f2abc85e3cabeabb856f6ffbfe23d69219ec8fae6beb54abe7870dbae823d49806a967a1c7f252999804f106745f20490bb3347b59321dc69765567abcbd89de04d89622170005df5871ed0fb72345a11da074060d7d4ee2e437f71a45723fb6b02de56067e54f54c52d10f7874a13cbfb3bd65ce54f9d6719ea210e0cf79e4e2157736ec07ac5915682ab81bced665c1e72fab8d8cfe509de0f21fe374b957b379fd5918061e21c2e96985cc1354b2de859b0f1a463ab04683b1253eda671c2353b5c208aca652f5419ffc4949a7fa909b95653f42d97390c400b4a1c308b11e73e9a06d3b164d3361e75584d70e6bc61d570a7e0c7da330f643194c1893fcd6489fac605eead61b53dff18caf526ecccc9bbd9146bc3c3bb67677695e6fddaab081786e9084014e60f5c03ae5a9087726b05e17402cd2fbb80d773b8a41470b1f901a8c2b2d57450181f4fc5bc53c7cb3dc032b84567492607cb08832eca9f79da9210d197863e5db5a74a9823dc0cc8bd9f3a9b6ff5a7d15d4747a9b26e088f4fad96d81cd1214226b1c4585d418d593220fcbb9ad949266cc48163e3498b46ebcdf7b2b5ecfe67539a61ed9e39b02d5b35ac0d0e7fa830034ca2da8a7ddf04bcf2cee939994369feb77023e0e3de04b21db7a640a92c17748245005cd75a7deba4ff0e4c104a9db2d9a98ec8edb3562050a3bac5f322290e3d8b6fb21770ac436d4cb12b97fc8f76d7bb9eeed85663eb0626f1ad1719ee4b07f7de2c1d1a31c27c6879f4fa3dbdfb2bfc0898beabafbeca9f13050e6b2f6c432e423cd5cb6b8fa56fe32c3e50104e44462c0a5c69de6a7ac5ae3d9f07ceed64dbffa42e4663838bfcde92f0fcb895f3b93c59b0e48c09890dfc36436db56b708f6e7cbbd2a6305f573cee099dbcd263cb96d9fb69cbc3cb06d8f5e3789698a17e71d22b4665ff5447fcc17a31bb136c8bb4b984573bcaf1cb650198c1266e6ddfd42d44f9de02cb9d915c5334c550fac3fcee56790aeb09d81e7690a32d8b0cc477b23f15257820de227be1ffaec2f63f3266b8f5dd78947dcee355fe59bfb100e5244425532bb1d115acd211b8c16b0ec0aae00fca5d4511a05c3ff027a1cac56210a10d81c01b90e156cc7b33de0fac825dc516d398166096013e068db935483c93ba95da39b5ae4087d84479a4c4809f28f93790dc279637bd6f3dc441d315cf6bd7b0e3d92070a45baf4445ce063fd12690eb002f5ca068a256bc54100c99a02a346beca39072163c4b297d117f1ed9fef42e3dbc11d36a0a0db52e84461c6fbb4aad62cd6c8dc9ae6a3390a5e8773ac599e67436220c8d541a9039762bffaa7f490e31dddbc362fb4ff686cda905f3b02a1db76d4d570d970434921ca8a4765af6d5c8b881e1f4ffa7e2d9ef5f5511b94f88474674ec790bb5186c73446a227bf1ffd19b605733abd1bd41e421aeaf2ed4617088c7ceef85451225056435993e89e4bccd2c2e4b39af99feef11fea645eeb5cf9f77b1e19a72d3efb613100969b84302789714bca65bcbc96762b4012a5700c62aed706433b9f142b7302442b6a9958b0e28e8b1cfa9eeb4ac0d71f497b23babf9f0221dcb658d9f4db5d45bee30d2ad7c97d6a562e014a7701c15325ec5d42ab732b37714a77a95c03fb15bbfba6fade32bf50f985a1df362ca7216cc152907dd931acb58a63920f581e82b590c0d6a0033009f8e50c3263d3f58596b63d507cadbc809a6690561f74d0772bf92d04e06c47a350724b106f5e83f7e71c4b2a983bf5ad7d8684e7b8b5dc1273d0fa5879b8e61bde33d602bc8ff0913b6d32dcac366d568dc7cf82bbfc405cbe418a2644c26592b32ca1a632fc95123efb784cfb6953a94ebeccd24fba389a0e56b043df07d9a2dd38a1196e5e55576b25f85cb96f6560802a4a58b7a6857e8454faa2c880bf32d464562b2bdc5f0df22b663f2c01fc944f1cfd1908f617f8295a5440bb79ae178ea46a95baeea48322105146ac3ed2de7d3796ddddcc848a8ecf4a00dd055733b4f59211f5a40deea44e74b3bc57953b26ed61e6fd67889edfe8d0902385e37666aacec072735630ecc441c3cc6b09bb2f63aa4e332c6df728dc74078a83ce20454dfd616d116270666ddc09c5fea2e8442bc43455d0257fac92f3780061178f9420bf8e463f29896c12383dbb9a81bc5c87376e647c8a7986cb514fb9696d9c0a8d303c5c4b5b7c5f601c01fa19323e02f675c371bc44fbc1ac5704d41a89a2a4ccec6ac8440c532f07da25aa2dce6a5d2ebe694eb4017d178b221213bfe2a01d9cfe689bd190776bca6c032f446eb8862587a7826e35f3f691763212eee6af2e49bbeb0a27e07c5714b74e373798c7bebce265f7ebef3a1ea64078cf1e8a9d433af32c53090c972ffedbadafb50b9a6e540abd84f8e938583ea725954be3b236c5d8aca7d486d21902a2902f25a7c02dbe83c39bd0b81513f9ef198c49d560e930ae224ff47f92e4851e1f7ab5bb406abcf6596569261e6b0c67bb3b854e9c6de60bfb60fcf29241ff237151310ecd19f8b2cfe764c1df1a2de9d840eca47aa169ba9a415901204ec31ccdfd76e908029ae34fb12dc286758c64fd6d42bc82b14e07e421f4b42b180cd6ef40cac8062928b4a420a4577f24295f54de9048ac9d34307bf93e463cea4967cf4880166f68ed1eb965db2e4fb9f5f0b1c695d621e427ccb9a3188073ee6fde729c6698346efa1c0ba643c1efd20858965511da750060d551c44c435a5f1603fae7357e0bc78e92aad3d88790ec2aa1a42d6fe7e0ffc57f3599e406db63be7dd32692df32ce33dee0a2becdb02d6e435e09de3d356497543db23f53da25643f9c585e275297800d8beed47f0e622f86fc25d2e87036fdceebfe7257cb6de0c02412d1c0758acfcd0862e99ad17a118f46f635a87477e8b825423d94ada35bf0b5444aa7d3de4bb7eec7ae5129fcc2cba651cc972f5500fc5161149d29f452962afb102a01ae76825cb4477460be0b85d75058595c27e9b7fae3492ec3925c671bee5f4ca534d5a294f783d6cc073c992139b61d21fd98297b04c0578dafd5f7ebcaf8d4d9185aea3d76e813421f4573b38c25093c015a65e44fb297f0f6ac2d02c4237b37a3bfca2406c5c95ae5812816bacad59ba7c6f72d7c644ff25b592ed1e89b276e05866c01a4ced7fc6dd9f190c20d420d7c8a1fe908833a24c5e5bd7a95a2a6fbf147fc4b29a179718166dd0fbae2fc6b8c8aac6194fa6baf0d3edc36b2316c56c441ba53e3e7aaaf0a1405566ff584f73a637b74dde9bcb4d41da2be6c9df5d533fbac54f5fb52a8a793757cfe19aa90048c6d07e3474136ae1be2455b0d0d02eb4b5961ba883209355c0dd2af4aad98e7b971e358a7d9b55fe17cd6095f257355d9b99e5ea52848f17b35a80792d9ed0fef6fe3eef9a324902409969823be20bbe0e8dba9c747cd1a14d3642d877b86271f3f0c322a142c4ff635b37d542c3265b5fe8589a732bb1a55010b930dd0196cd43ac3634c01b4a44c517197d03a3d89c67f5c09aab409e84c0af466bfbd0c96d240101a2542c66b4b4b8ef65b41b0079995c52cc9720d2c1d7c128c6f17a65cc798c1986cfbd8888460c54438edc4f91f3580391c8b57d9aee209a59a116c1c44775437e9c30e6d87e82ce84e28532b19441e32ab9aea22177bac9daad25a6c88395e9348d6780de630cddb266c411011175bdb6255a36535180818447d43ffba3758d311539fe9f6811fa470bf3767b4c2d4cdf37854c7ee28730bb1d39d5c0dfffcdbf353cca3e13079f3ae66b839c7dd36914022a0e75bca5b622f521420b73249ef47f03c1fb03ecf7557882afcaa7cf454a68ad237d4ce860bd6b1531c1cafe2cfb76bc4188271ef6bdfb304ee0e6932463a1909f03d6e8a27b5f137d6b342841d613863dfdf37d5ec3a98d667810fb6f82d67620bdefed8b3ff98420a6c7ee577c3ba68b95a20403608a7ba6526ec9e8662c6e15ab09b1a9019d4958af04cb2e4890ee6b1077fcaa5cc0817f388461b230fe631e75f18ab392a5ca5de4a024ca16dd05fcfdf92114e43a5c4a169d462ff0dba57deeaf5eaafd892f8ccbd72ac56471162e1416bca39859b4184ba0d1b3f7ec05db4ef4cf0142867fa9be328a0be8aa74c716aad9411008607980861f4f72e9bfa60195e2f939d3f6a44a6cec07dd376d1bccaa126686f313d5f7918ecd1215026982c82ed1922ef70e36e8ed59b2d5ceab3b4aad7e53049062dd5ba0e87f7005c3f4d2b788245cdc2f35ef2572bea5ea92dfad406ade6d5ad18be8eeb4c652e5277b244645c68c0c0f5a68d42e00d59b75941917b2cdf31fdf809f2078ca97fd5beba65b34e0621138ea0e94feb87166b2dac2232ebca575e5c0a4d565d9992f733bbfbe68a63d99ee93398604065d5517c33ed0e067bdb643e73102f16137afd7d4bf21e8065ea028c392a6dcefbe642dc3fb03a239d9c8b17023eacc8e19fea11c34a10644af1b786fc0f4504038c2ee59c1b353f3d7b9313df025b4b5874ca63ec164a3fe35bf390d266f53dcda6a8e190e63a56ffdf4f7c5c02aa22d376db06d4d2b96be5b331f897d1ecfd25c13a1c194c265dd95a5724a6435bc8138224d9db28b689b9cea5132cd19601dbc4a43e70c71e27e8fd0689d09484974e8a4605f8553735fffaf5654a087e323ca14e02b681b9bbe592bd6b719ae2e86bdf918b27c79d52dd334d1aa7ebc1bff76e97572faad092010a1022f7d33089049107a89c364ae7dd022d119e8f6ab795fd71d76a90e8202339401ff9e9918ea8c8e12f7b0ba10d9ebde5d1bc5988f2d07b34579d8c282628204f2978d8b0cf95dc41f3775a4053f833267c64b42336d7c850f2918ef0dd6d62e43fcc173254eb34748efd4754609ce25afd648ee5a8fc5c64346603f8258592d67b9613e8f7ac0def0958f13436581d729e0b3e062738eb06b2116abe837529690a614fc5d3f53b4d4602e5706000", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 3.803229148s ago: executing program 5 (id=1176): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000340)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000000, &(0x7f0000000180)=ANY=[@ANYBLOB="64656275672c757466383d312c757466383d302c757466383d312c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002bc08d8cca74e8ecafb48437094fe1a4a2383bd9d85bff651d1101fd722e01b9b5d22f08b5fc0ac7cbf33fb553a90ae4d01d71ddeeb089f517aeaaa271899287d5b8949b02b23c2807b7d81714b89e9682f6c3faa6107733a77a4cf985560ed64ec24e255dee3654aa2ba55be4bf3ae257adba34bed8e52e4122bb46aa57a75dab0288098e42f886f09bdf63537db28a454b02a4204a7e7dac3c30a6d4b5c814916b02d7147f667ec516545366cc56018bc1b563b100a2e4c51c06546a25a2005847c9fcede77362f54890e96075086110ee9cec7a20b139d819c94dc4c36c0b9ae55721f33f037cf92f2c4941a4bc36eb6c79859a1e120eb2c9ff5210b7cf35bf5d1d0b61a8fc3c5f55888eca4c844ed0436afaa9e9ca1a8fa1ffbbdf0fd03a6263fc21bcaaeae592a90fd64085944d4b5de552f49e2ff3a09de62f85d0c6020cdb7ef052a53afe", @ANYRESOCT=0x0], 0x3, 0x26f, &(0x7f0000000680)="$eJzs2s9rHGUYB/BnY2I3KelG/EUL4ose1MvS5OyhRSKIAUWNUAXp1Ex0zbgbMktgRUxOevVP8CwevQnSo5dc/As8eMslxx7Ekd3Z1CQWWjHdhPr5HIaHyXxn3nnf8PLssvuvfvv5xnrZXs/6MdVoxNS12I07jViIqTi0G6+8dOOX59698cGb11dWmuOzSymlS8///OGXP7xwu3/x/R8v/XQh9hY+2j9Y+n3vmb3L+3++92mnTJ0ydXv9lKVbvV4/u1Xkaa1TbrRTervIszJPnW6Zbx37+3rR29wcpKy7Nj+3uZWXZcq6g7SRD1K/l/pbg5R9knW6qd1up/m54L9Y/f5OVcVBNXMzqqqa/S4u3o7536IVjSdS48lrjadvNp7dbVw+qKrWyejs2YyY01Wv/+Pxr9efR8J4U19+J6VmTA+3hO3ViOKb4TGiGdfXoxNF5HE1ZuOP0b/JWF2//sbK8tU0shBfFzvbdX5ne/Wx0f3v5hejFQv3zi/W+XSYvxARw+Pc0fxStOKpe+eXTuTr5zfj5ReP5NvRil8/jl4UsRbDbOyMp2D5q8WUXntr5UT+yug6AIBHTbtunWai7t+GTdux/q09vuCf/V2dP9Iftu7TH57or6bjyvTZvjsR5eCLjawo8q3hB7xRcffMKRQz46ec2g0nUcwenZYHKQ6/Cnl4A5s6tmbnZaL+v8Xu+RjGQy0iPpv4bsSk/b3o9720OZEBAQAAAAAAAAAA8EAm8XPCs35HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgfPsrAAD//6c2uyA=") pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) vmsplice(r1, &(0x7f0000001700)=[{&(0x7f00000001c0)="80", 0x1}], 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) splice(r0, 0x0, r2, 0x0, 0x1, 0xb) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file0\x00', 0x2) 3.525959467s ago: executing program 2 (id=1177): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)="80") preadv(r1, &(0x7f0000002140)=[{&(0x7f0000000440)=""/4093, 0xffd}], 0x1, 0x8, 0x1) 3.457451299s ago: executing program 5 (id=1178): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r0, r0, 0x0) 3.153700649s ago: executing program 5 (id=1181): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x60, 0x10, 0xffffff1f, 0xfffffffe, 0x1, {0x0, 0x0, 0x0, 0x0, 0x10006, 0x4408}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0x0, 0x42}}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.574117557s ago: executing program 5 (id=1187): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0003f0"], 0x0, 0x0}, 0x0) 1.87042388s ago: executing program 6 (id=1192): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r0, r0, 0x0) 1.54338267s ago: executing program 6 (id=1194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x804}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x14, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf, 0x1, "9915487c28dd58bd7ae4cc"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x14, 0xe, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) 1.465548653s ago: executing program 6 (id=1195): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) 1.407666345s ago: executing program 2 (id=1196): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYBLOB="05000400220003"], 0x10) 1.301760768s ago: executing program 6 (id=1197): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 1.23613759s ago: executing program 2 (id=1198): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r3, 0x25, 0x6, @void}, 0x10) 1.178692692s ago: executing program 1 (id=1199): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000c80)='./file0\x00', 0x0, &(0x7f0000001a40)=ANY=[@ANYBLOB="009917593d44d685cf8176521846a9e90205b4b89c0ed49b3e1201fa4a79b0b9651316a89d7e4038e94e54fdffa25c529d1cb4e43bf7e12bd2a555681300b85d6621470c304d6ba5731161f3f1da1193a85525e8c9a5a95798070ca48fa7edcf62e37626480f673141bee1ea2522f8b61aac12f984c1216683ae80e6146169cfb7aa7c50dd4c52259faaee2fedc1077bda4c3e65d7005d0ab71db65617abeb3c51b056d955f1285ed9d26d7c910bf3291f6b349ce7eee33a31a484c31993effe39fcfa55e722a20bf90b2f43ffbfd19afaeb1d6e9683ce09f4c8eb9591f0772a12"], 0x1, 0xc3c, &(0x7f0000000d00)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c60) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file7\x00', 0x21c0, 0x103) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 1.070308515s ago: executing program 2 (id=1200): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x0, 0x4, {0x60, 0xfc4bb9d65abf589f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 962.159189ms ago: executing program 0 (id=1201): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141430e0000003808a8972bd0b72e4108296a3d206163944f8afc1bf505602da9168d6f9ce320068ff1f7e345a170d1423c2e18c8ed410c8aab9a20b514d2b583b90a86da4483488c0fdc6c2"], 0xdd12}], 0x1, 0x0, 0x0, 0x4000}, 0x1) 959.536939ms ago: executing program 1 (id=1202): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='+cpu'], 0xb) 850.407332ms ago: executing program 0 (id=1203): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x4, 0x0, &(0x7f0000000080)) 749.733086ms ago: executing program 0 (id=1204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0xfffffffc}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 673.144258ms ago: executing program 1 (id=1205): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x6, 0x10, &(0x7f0000000e40)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000280)=ANY=[], 0x0) 533.040282ms ago: executing program 0 (id=1206): r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) 476.506324ms ago: executing program 1 (id=1207): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 296.85202ms ago: executing program 0 (id=1208): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) 261.211491ms ago: executing program 1 (id=1209): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x3, 0x2, 0xd3f, 0x2, 0x6}, 0x8}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 194.726283ms ago: executing program 6 (id=1210): r0 = epoll_create1(0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r2 = gettid() rt_sigqueueinfo(r2, 0x21, &(0x7f00000002c0)) 107.144956ms ago: executing program 5 (id=1211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff}) stat(0x0, 0x0) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x8040ae9f, &(0x7f0000000000)) 96.528547ms ago: executing program 0 (id=1212): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0xffffffff}, 0x1c) bpf$MAP_CREATE(0x0, 0x0, 0x48) 19.970559ms ago: executing program 1 (id=1213): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r2, 0x8d, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@empty, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x8000000000000000}, 0x200, 0x0, 0x0, 0x1, 0x1}, [@sec_ctx={0xc, 0x8, {0xffffffffffffff21, 0x8, 0x0, 0xd}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 0s ago: executing program 6 (id=1214): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x0, 0x8, 0x8}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000240)=r3, 0x8) kernel console output (not intermixed with test programs): 3 has an invalid bInterval 0, changing to 7 [ 119.508181][ T4358] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 119.519899][ T4358] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.533458][ T4358] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.542613][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.555142][ T5077] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 119.744015][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 119.795566][ T4358] usb 4-1: USB disconnect, device number 5 [ 119.877418][ T126] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input6 [ 119.899918][ T5096] loop0: detected capacity change from 0 to 512 [ 119.976204][ T5096] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 120.024691][ T5096] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.070829][ T5096] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 1: comm syz.0.280: invalid block [ 120.149602][ T4320] usb 3-1: USB disconnect, device number 5 [ 120.155521][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 120.155591][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 120.181442][ T4320] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 120.199105][ T5096] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.280: couldn't read orphan inode 11 (err -117) [ 120.226333][ T5096] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.763919][ T5120] 9pnet: p9_errstr2errno: server reported unknown error è00000000000000000000004 [ 120.854825][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 121.211051][ T4315] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 121.257048][ T4320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 121.409143][ T4315] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 121.425887][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.447017][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 121.453894][ T4320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.466122][ T4315] usb 4-1: config 0 descriptor?? [ 121.474561][ T4315] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 121.505108][ T4320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.517970][ T5135] loop1: detected capacity change from 0 to 1024 [ 121.547906][ T4320] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 121.581702][ T4320] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.664845][ T4320] usb 1-1: config 0 descriptor?? [ 121.679637][ T4315] gp8psk: usb in 128 operation failed. [ 121.705978][ T4320] hub 1-1:0.0: USB hub found [ 121.735641][ T5135] hfsplus: invalid catalog entry type [ 121.852714][ T75] hfsplus: b-tree write err: -5, ino 3 [ 121.889635][ T4315] gp8psk: usb in 146 operation failed. [ 121.900157][ T4315] gp8psk: failed to get FW version [ 121.903074][ T4320] hub 1-1:0.0: 1 port detected [ 121.930303][ T4315] gp8psk: usb in 149 operation failed. [ 121.935824][ T4315] gp8psk: failed to get FPGA version [ 122.007273][ T5145] netlink: 'syz.1.302': attribute type 7 has an invalid length. [ 122.031905][ T5145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.041048][ T5145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.049857][ T5145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.058651][ T5145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.097449][ T5147] loop4: detected capacity change from 0 to 128 [ 122.107461][ T5145] netlink: 'syz.1.302': attribute type 7 has an invalid length. [ 122.163455][ T4315] gp8psk: usb out operation failed. [ 122.169004][ T4315] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 122.213376][ T4315] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 122.237285][ T4315] usb 4-1: USB disconnect, device number 6 [ 122.443379][ T5153] loop2: detected capacity change from 0 to 2048 [ 122.495386][ T5153] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.518690][ T4339] hub 1-1:0.0: activate --> -90 [ 122.672926][ T5162] capability: warning: `syz.4.310' uses deprecated v2 capabilities in a way that may be insecure [ 122.724742][ T4339] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 122.726434][ T4315] usb 1-1: USB disconnect, device number 3 [ 122.926525][ T5168] netlink: 100 bytes leftover after parsing attributes in process `syz.2.312'. [ 123.294430][ T5178] loop4: detected capacity change from 0 to 4096 [ 123.354619][ T5178] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 123.996979][ T4339] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 124.066566][ T5195] use of bytesused == 0 is deprecated and will be removed in the future, [ 124.077048][ T4315] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 124.112184][ T5195] use the actual size instead. [ 124.187104][ T4339] usb 3-1: Using ep0 maxpacket: 16 [ 124.194298][ T4339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.220549][ T48] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 124.230449][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 124.237868][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 124.247956][ T48] Workqueue: hci0 hci_rx_work [ 124.252712][ T48] Call Trace: [ 124.256004][ T48] [ 124.258966][ T48] dump_stack_lvl+0x188/0x24e [ 124.263680][ T48] ? show_regs_print_info+0x12/0x12 [ 124.268893][ T48] ? load_image+0x400/0x400 [ 124.273420][ T48] sysfs_create_dir_ns+0x26a/0x290 [ 124.278549][ T48] ? sysfs_warn_dup+0xa0/0xa0 [ 124.283263][ T48] ? do_raw_spin_unlock+0x11d/0x230 [ 124.288466][ T48] kobject_add_internal+0x61c/0xcc0 [ 124.293672][ T48] kobject_add+0x160/0x230 [ 124.298096][ T48] ? kobject_init+0x1d0/0x1d0 [ 124.302782][ T48] ? klist_children_get+0x50/0x50 [ 124.307812][ T48] ? get_device_parent+0x121/0x3f0 [ 124.312948][ T48] device_add+0x483/0xfb0 [ 124.317283][ T48] ? kmem_cache_free+0xf7/0x290 [ 124.322139][ T48] hci_conn_add_sysfs+0xd1/0x1e0 [ 124.327091][ T48] le_conn_complete_evt+0x1062/0x1670 [ 124.332484][ T48] ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0 [ 124.338752][ T48] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 124.344402][ T48] ? skb_pull_data+0xf7/0x200 [ 124.349089][ T48] hci_le_conn_complete_evt+0x183/0x440 [ 124.354668][ T48] ? hci_remote_host_features_evt+0x270/0x270 [ 124.360760][ T48] hci_event_packet+0x7b9/0x1280 [ 124.365720][ T48] ? bis_list+0x280/0x280 [ 124.370057][ T48] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 124.375962][ T48] ? kcov_remote_start+0x4c7/0x7e0 [ 124.381104][ T48] ? patch_conexant_auto+0x1260/0x1650 [ 124.386577][ T48] ? hci_send_to_monitor+0x9c/0x4a0 [ 124.391790][ T48] hci_rx_work+0x3eb/0xd40 [ 124.396214][ T48] ? _raw_spin_unlock+0x40/0x40 [ 124.401109][ T48] ? process_one_work+0x7b0/0x1160 [ 124.406247][ T48] process_one_work+0x8a2/0x1160 [ 124.411207][ T48] ? worker_detach_from_pool+0x240/0x240 [ 124.416866][ T48] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.421936][ T48] ? _raw_spin_lock_irqsave+0x100/0x100 [ 124.427517][ T48] ? kthread_data+0x4b/0xc0 [ 124.432033][ T48] worker_thread+0xaa2/0x1270 [ 124.436737][ T48] kthread+0x29d/0x330 [ 124.440808][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 124.445850][ T48] ? kthread_blkcg+0xd0/0xd0 [ 124.450441][ T48] ret_from_fork+0x1f/0x30 [ 124.454877][ T48] [ 124.461733][ T48] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 124.475284][ T48] Bluetooth: hci0: failed to register connection device [ 124.496066][ T4315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.534015][ T4315] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 124.543139][ T4315] usb 4-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 124.552529][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.563523][ T4315] usb 4-1: config 0 descriptor?? [ 124.573166][ T4339] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.634472][ T4339] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.685774][ T4339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.699551][ T4339] usb 3-1: Product: syz [ 124.703768][ T4339] usb 3-1: Manufacturer: syz [ 124.714901][ T4339] usb 3-1: SerialNumber: syz [ 124.920098][ T14] usb 4-1: USB disconnect, device number 7 [ 124.934000][ T4339] usb 3-1: 0:2 : does not exist [ 124.963989][ T4339] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 125.008094][ T4339] usb 3-1: USB disconnect, device number 6 [ 125.585003][ T5221] loop1: detected capacity change from 0 to 8192 [ 125.967326][ T5214] loop4: detected capacity change from 0 to 131072 [ 125.997451][ T5214] F2FS-fs (loop4): invalid crc value [ 126.003813][ T5221] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 126.019862][ T5214] F2FS-fs (loop4): Found nat_bits in checkpoint [ 126.061756][ T5221] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 126.087025][ T5221] REISERFS (device loop1): using ordered data mode [ 126.095705][ T5221] reiserfs: using flush barriers [ 126.105997][ T5221] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 126.122247][ T5214] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 126.131352][ T5221] REISERFS (device loop1): checking transaction log (loop1) [ 126.147983][ T4437] udevd[4437]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 126.324207][ T5221] REISERFS (device loop1): Using tea hash to sort names [ 126.365867][ T5221] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 126.488673][ T5237] loop2: detected capacity change from 0 to 512 [ 126.599152][ T5237] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.339: inode has both inline data and extents flags [ 126.678902][ T5237] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.339: couldn't read orphan inode 15 (err -117) [ 126.741473][ T5237] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 127.093729][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 127.341475][ T5259] loop2: detected capacity change from 0 to 2048 [ 127.395218][ T5259] Alternate GPT is invalid, using primary GPT. [ 127.414495][ T5259] loop2: p2 p3 p7 [ 127.563801][ T5264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 127.972096][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 127.991706][ T5277] raw_sendmsg: syz.4.351 forgot to set AF_INET. Fix it! [ 128.046498][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 128.166996][ T4339] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 128.168140][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 128.246375][ T5272] ipt_CLUSTERIP: Please specify destination IP [ 128.356972][ T4339] usb 3-1: Using ep0 maxpacket: 8 [ 128.364553][ T4339] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 128.387507][ T4339] usb 3-1: config 0 has no interface number 0 [ 128.405086][ T4339] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 128.435345][ T4339] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 128.456922][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.478194][ T4339] usb 3-1: config 0 descriptor?? [ 128.514605][ T4339] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 128.769537][ T3598] usb 3-1: USB disconnect, device number 7 [ 128.984833][ T5298] loop1: detected capacity change from 0 to 2048 [ 129.037975][ T5298] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.516557][ T5307] netlink: 'syz.0.367': attribute type 3 has an invalid length. [ 129.671375][ T5312] loop0: detected capacity change from 0 to 128 [ 129.701479][ T5312] FAT-fs (loop0): bogus sectors per cluster 7 [ 129.714495][ T5312] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 129.736618][ T5312] FAT-fs (loop0): Can't find a valid FAT filesystem [ 129.806408][ T5312] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 129.957218][ T5318] loop3: detected capacity change from 0 to 512 [ 130.018710][ T5318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.371: inode #1: comm syz.3.371: iget: illegal inode # [ 130.091461][ T5318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.371: error while reading EA inode 1 err=-117 [ 130.175772][ T5318] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.207234][ T5318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: comm syz.3.371: inode #1: comm syz.3.371: iget: illegal inode # [ 130.266939][ T5318] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.371: error while reading EA inode 1 err=-117 [ 130.308630][ T5318] EXT4-fs (loop3): 1 orphan inode deleted [ 130.314473][ T5318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 130.481752][ T5318] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.371: invalid indirect mapped block 234881024 (level 0) [ 130.527966][ T5318] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.371: invalid indirect mapped block 2147483648 (level 1) [ 130.624244][ T5329] syz.2.376 uses obsolete (PF_INET,SOCK_PACKET) [ 130.687183][ T4283] Bluetooth: hci0: command 0x0406 tx timeout [ 130.729106][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 130.793564][ T5337] loop1: detected capacity change from 0 to 512 [ 130.824227][ T5337] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.905772][ T5337] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.379: bad orphan inode 131083 [ 130.933450][ T5337] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.978107][ T5343] loop4: detected capacity change from 0 to 128 [ 131.012323][ T5346] loop3: detected capacity change from 0 to 1024 [ 131.019685][ T5346] EXT4-fs: Ignoring removed orlov option [ 131.031444][ T5343] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 131.081560][ T5343] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 131.102038][ T5346] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 131.111385][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 131.147481][ T5343] syz.4.381 (pid 5343) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 131.350226][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 131.532872][ T5357] loop2: detected capacity change from 0 to 2048 [ 131.609321][ T5357] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.625968][ T5364] binder: 5358:5364 ioctl c0306201 200000000480 returned -14 [ 131.635601][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.388'. [ 131.658286][ T5363] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 131.667620][ T5357] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 131.699043][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.726543][ T5365] netlink: 16 bytes leftover after parsing attributes in process `syz.0.388'. [ 131.762550][ T5365] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 131.843561][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 132.013587][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 132.110243][ T5375] Illegal XDP return value 4294967294 on prog (id 34) dev N/A, expect packet loss! [ 132.120295][ T4320] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 132.197102][ T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 132.319097][ T4320] usb 2-1: config 248 has an invalid interface number: 103 but max is 0 [ 132.330452][ T4320] usb 2-1: config 248 has no interface number 0 [ 132.336740][ T4320] usb 2-1: config 248 interface 103 has no altsetting 0 [ 132.346780][ T4320] usb 2-1: New USB device found, idVendor=19d2, idProduct=1170, bcdDevice=66.cd [ 132.371322][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.380270][ T4320] usb 2-1: Product: syz [ 132.384555][ T4320] usb 2-1: Manufacturer: syz [ 132.399968][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 132.417256][ T4320] usb 2-1: SerialNumber: syz [ 132.423157][ T126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 132.463965][ T126] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 132.485035][ T126] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 132.515387][ T126] usb 5-1: Product: syz [ 132.527182][ T126] usb 5-1: Manufacturer: syz [ 132.531900][ T126] usb 5-1: SerialNumber: syz [ 132.549989][ T126] usb 5-1: config 0 descriptor?? [ 132.555586][ T5369] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 132.610716][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.617552][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.648676][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.657781][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.678269][ T4320] option 2-1:248.103: GSM modem (1-port) converter detected [ 132.693600][ T4320] usb 2-1: USB disconnect, device number 2 [ 132.710579][ T4320] option 2-1:248.103: device disconnected [ 132.780582][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.787790][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.797133][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.804064][ T126] usb 5-1: USB disconnect, device number 4 [ 132.804463][ T5388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.820286][ T5388] device bridge0 entered promiscuous mode [ 133.357031][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 133.454562][ T5416] loop4: detected capacity change from 0 to 512 [ 133.567965][ T14] usb 4-1: config index 0 descriptor too short (expected 30768, got 18) [ 133.576381][ T14] usb 4-1: config 102 has too many interfaces: 102, using maximum allowed: 32 [ 133.615858][ T14] usb 4-1: config 102 has an invalid descriptor of length 102, skipping remainder of the config [ 133.647419][ T14] usb 4-1: config 102 has 0 interfaces, different from the descriptor's value: 102 [ 133.666061][ T14] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 133.695765][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.706923][ T14] usb 4-1: Product: syz [ 133.711186][ T14] usb 4-1: Manufacturer: syz [ 133.715805][ T14] usb 4-1: SerialNumber: syz [ 133.914568][ T5424] loop4: detected capacity change from 0 to 1024 [ 134.165195][ T31] hfsplus: b-tree write err: -5, ino 8 [ 134.223631][ T5410] loop1: detected capacity change from 0 to 40427 [ 134.269344][ T5410] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 134.298427][ T5410] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 134.333178][ T5410] F2FS-fs (loop1): invalid crc value [ 134.364926][ T14] usb 4-1: USB disconnect, device number 8 [ 134.375300][ T5410] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.534279][ T5410] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 134.546945][ T5410] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.762774][ T5445] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 134.834331][ T4279] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 134.834408][ T4279] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 134.844067][ T4279] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 134.853302][ T4279] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 134.864660][ T4279] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 134.874113][ T4279] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 134.888606][ T4279] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 134.937004][ T14] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 135.177160][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 135.185159][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.213010][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 135.272182][ T14] usb 1-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 135.300381][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.341227][ T14] usb 1-1: config 0 descriptor?? [ 135.418188][ T5455] loop3: detected capacity change from 0 to 4096 [ 135.425725][ T5455] EXT4-fs: inline encryption not supported [ 135.473410][ T5455] ext4: Unknown parameter 'nouser_xattr' [ 135.762268][ T14] ntrig 0003:1B96:0003.0003: unknown main item tag 0x2 [ 135.787697][ T14] ntrig 0003:1B96:0003.0003: unknown main item tag 0x0 [ 135.794619][ T14] ntrig 0003:1B96:0003.0003: unknown main item tag 0x0 [ 135.817031][ T14] ntrig 0003:1B96:0003.0003: unknown main item tag 0x0 [ 135.824051][ T14] ntrig 0003:1B96:0003.0003: unknown main item tag 0x0 [ 135.861517][ T14] ntrig 0003:1B96:0003.0003: unknown main item tag 0x0 [ 135.880121][ T14] ntrig 0003:1B96:0003.0003: hidraw0: USB HID v0.04 Device [HID 1b96:0003] on usb-dummy_hcd.0-1/input0 [ 135.970537][ T14] usb 1-1: USB disconnect, device number 4 [ 136.312763][ T5469] fido_id[5469]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 136.466313][ T5461] loop2: detected capacity change from 0 to 32768 [ 136.528749][ T5461] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.431 (5461) [ 136.653645][ T5461] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 136.695203][ T5461] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 136.724168][ T5461] BTRFS info (device loop2): setting nodatasum [ 136.767927][ T5461] BTRFS info (device loop2): force zlib compression, level 3 [ 136.792086][ T5461] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 136.831088][ T5461] BTRFS info (device loop2): use lzo compression, level 0 [ 136.854603][ T5461] BTRFS info (device loop2): turning on flush-on-commit [ 136.882266][ T5461] BTRFS info (device loop2): enabling auto defrag [ 136.934709][ T5461] BTRFS info (device loop2): max_inline at 4096 [ 136.961622][ T5461] BTRFS info (device loop2): using free space tree [ 137.383505][ T5513] netlink: 27 bytes leftover after parsing attributes in process `syz.4.443'. [ 137.453671][ T5461] BTRFS info (device loop2): enabling ssd optimizations [ 137.669899][ T4281] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.377720][ T27] audit: type=1326 audit(1779417923.717:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5530 comm="syz.0.447" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc84939ce59 code=0x0 [ 138.614925][ T5546] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 139.550628][ T5581] netlink: 8 bytes leftover after parsing attributes in process `syz.4.468'. [ 139.607551][ T5586] loop1: detected capacity change from 0 to 256 [ 139.629697][ T5586] exfat: Deprecated parameter 'namecase' [ 139.694084][ T5586] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36332e94, utbl_chksum : 0xe619d30d) [ 140.211162][ T5610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.481'. [ 140.253073][ T5610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.481'. [ 140.279595][ T5610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.481'. [ 140.293576][ T5610] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 140.526397][ T5613] loop0: detected capacity change from 0 to 1764 [ 140.729481][ T5607] mmap: syz.3.480 (5607) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.892479][ T5623] 9pnet: p9_errstr2errno: server reported unknown error  [ 141.221184][ T5632] device veth1_to_bond entered promiscuous mode [ 141.243255][ T5632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 141.429160][ T5632] device veth1_to_bond left promiscuous mode [ 141.515227][ T5632] bond0: (slave bond_slave_1): Releasing backup interface [ 141.531360][ T5634] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 141.539600][ T5634] netlink: 'syz.4.491': attribute type 4 has an invalid length. [ 141.548374][ T5634] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.491'. [ 142.442848][ T5662] loop1: detected capacity change from 0 to 2048 [ 142.508498][ T5662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.746944][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.850122][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 142.877090][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 142.897190][ T5671] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.906017][ T5671] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.914886][ T5671] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.923664][ T5671] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.960932][ T14] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 142.976908][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.985032][ T14] usb 1-1: Product: syz [ 143.008269][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.509'. [ 143.026966][ T14] usb 1-1: Manufacturer: syz [ 143.031719][ T14] usb 1-1: SerialNumber: syz [ 143.042643][ T5671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 143.057951][ T14] usb 1-1: config 0 descriptor?? [ 143.079337][ T5658] loop4: detected capacity change from 0 to 40427 [ 143.086589][ T14] hub 1-1:0.0: bad descriptor, ignoring hub [ 143.092734][ T14] hub: probe of 1-1:0.0 failed with error -5 [ 143.120510][ T5658] F2FS-fs (loop4): invalid crc value [ 143.152213][ T5658] F2FS-fs (loop4): Found nat_bits in checkpoint [ 143.270353][ T14] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 143.307895][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 143.332075][ T5681] loop2: detected capacity change from 0 to 128 [ 143.339879][ T14] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 143.358984][ T5658] F2FS-fs (loop4): Start checkpoint disabled! [ 143.376985][ T14] usb 1-1: media controller created [ 143.399997][ T5658] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 143.430223][ T5681] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 143.456134][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.483545][ T5681] hpfs: filesystem error: improperly stopped [ 143.512391][ T5681] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 143.535126][ T5681] hpfs: You really don't want any checks? You are crazy... [ 143.560315][ T5681] hpfs: hpfs_map_sector(): read error [ 143.575640][ T5658] syz.4.502: attempt to access beyond end of device [ 143.575640][ T5658] loop4: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 143.576414][ T5681] hpfs: code page support is disabled [ 143.651944][ T5681] hpfs: hpfs_map_4sectors(): unaligned read [ 143.687350][ T5681] hpfs: hpfs_map_4sectors(): unaligned read [ 143.713731][ T5681] hpfs: filesystem error: unable to find root dir [ 143.835434][ T14] DVB: Unable to find symbol dib7000p_attach() [ 143.849236][ T14] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 143.927382][ T9] kworker/u4:0: attempt to access beyond end of device [ 143.927382][ T9] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 144.137062][ T14] rc_core: IR keymap rc-dib0700-rc5 not found [ 144.143256][ T14] Registered IR keymap rc-empty [ 144.151389][ T14] dvb-usb: could not initialize remote control. [ 144.179926][ T14] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 144.252382][ T14] usb 1-1: USB disconnect, device number 5 [ 144.356539][ T14] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 144.629669][ T5711] "syz.2.526" (5711) uses obsolete ecb(arc4) skcipher [ 144.643775][ T5713] loop1: detected capacity change from 0 to 256 [ 144.672251][ T5713] exfat: Unknown parameter 'âÎa Ú>f' [ 144.941184][ T5721] loop1: detected capacity change from 0 to 512 [ 144.942686][ T5527] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.966543][ T5721] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 144.989912][ T5721] UDF-fs: Scanning with blocksize 512 failed [ 145.017258][ T5721] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 145.045340][ T5721] UDF-fs: Scanning with blocksize 1024 failed [ 145.068502][ T5721] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 145.078262][ T5721] UDF-fs: Scanning with blocksize 2048 failed [ 145.094789][ T5721] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 145.111361][ T5721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.138928][ T5527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.156600][ T5527] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.181015][ T5527] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.211949][ T5527] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.241018][ T5527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.269978][ T5527] usb 5-1: config 0 descriptor?? [ 145.423245][ T5734] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 145.624143][ T5740] capability: warning: `syz.0.538' uses 32-bit capabilities (legacy support in use) [ 145.699475][ T5527] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 145.748902][ T5527] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 146.517054][ T5773] netlink: 'syz.1.547': attribute type 13 has an invalid length. [ 146.526051][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 146.542229][ T5773] netlink: 'syz.1.547': attribute type 13 has an invalid length. [ 146.550473][ T5773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.547'. [ 146.579885][ T14] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 146.600819][ T3598] usb 5-1: USB disconnect, device number 5 [ 146.798385][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 146.809755][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 146.826516][ T14] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 146.848560][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.856606][ T14] usb 3-1: Product: syz [ 146.871382][ T14] usb 3-1: Manufacturer: syz [ 146.876035][ T14] usb 3-1: SerialNumber: syz [ 146.892417][ T14] usb 3-1: config 0 descriptor?? [ 146.907126][ T14] hub 3-1:0.0: bad descriptor, ignoring hub [ 146.913234][ T14] hub: probe of 3-1:0.0 failed with error -5 [ 146.926684][ T14] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9 [ 147.051440][ T5785] netlink: 104 bytes leftover after parsing attributes in process `syz.1.553'. [ 147.155041][ T5787] loop3: detected capacity change from 0 to 4096 [ 147.243866][ T5787] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 147.290100][ T4283] Bluetooth: Wrong link type (-71) [ 147.296938][ T4283] Bluetooth: hci4: link tx timeout [ 147.302508][ T4283] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 147.437231][ T951] usb 3-1: USB disconnect, device number 8 [ 147.445844][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 147.863057][ T5803] netlink: 'syz.3.558': attribute type 7 has an invalid length. [ 147.898273][ T5803] netlink: 'syz.3.558': attribute type 7 has an invalid length. [ 148.500346][ T5800] loop0: detected capacity change from 0 to 131072 [ 148.514741][ T5800] F2FS-fs (loop0): invalid crc value [ 148.576403][ T5800] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.621910][ T5800] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 148.640083][ T5813] overlayfs: statfs failed on './file0' [ 148.652179][ T5800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 148.706292][ T27] audit: type=1326 audit(1779417934.047:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5815 comm="syz.3.562" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe56e79ce59 code=0x0 [ 148.841984][ T27] audit: type=1800 audit(1779417934.087:7): pid=5800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.557" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 149.327019][ T4283] Bluetooth: hci4: command 0x0406 tx timeout [ 149.674715][ T5843] loop1: detected capacity change from 0 to 128 [ 149.777809][ T5843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 149.794401][ T5843] ext4 filesystem being mounted at /139/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 149.948594][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 150.045200][ T5851] device vlan2 entered promiscuous mode [ 150.058670][ T5853] loop4: detected capacity change from 0 to 8 [ 150.098685][ T5851] device bond0 entered promiscuous mode [ 150.118115][ T5851] device bond_slave_0 entered promiscuous mode [ 150.124471][ T5851] device bond_slave_1 entered promiscuous mode [ 150.523844][ T5897] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.577'. [ 151.126982][ T14] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.361588][ T14] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 151.373460][ T5920] loop1: detected capacity change from 0 to 4096 [ 151.408929][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.477377][ T14] usb 5-1: Product: syz [ 151.498229][ T14] usb 5-1: Manufacturer: syz [ 151.548639][ T14] usb 5-1: SerialNumber: syz [ 151.684594][ T5920] ntfs3: loop1: ino=5, "/" directory corrupted [ 152.546989][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.610285][ T14] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 152.718348][ T5966] loop0: detected capacity change from 0 to 32768 [ 152.734067][ T5966] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.595 (5966) [ 152.748713][ T22] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 152.760146][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.791337][ T22] usb 4-1: config 0 descriptor?? [ 152.803340][ T5966] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.816393][ T5966] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 152.816415][ T22] cp210x 4-1:0.0: cp210x converter detected [ 152.848172][ T5966] BTRFS info (device loop0): setting nodatasum [ 152.861807][ T14] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 152.875581][ T5966] BTRFS info (device loop0): force zlib compression, level 3 [ 152.887383][ T5966] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 152.919220][ T14] usb 5-1: USB disconnect, device number 6 [ 152.947791][ T14] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 152.957501][ T5966] BTRFS info (device loop0): use lzo compression, level 0 [ 152.964668][ T5966] BTRFS info (device loop0): turning on flush-on-commit [ 153.016098][ T5966] BTRFS info (device loop0): enabling auto defrag [ 153.035075][ T5966] BTRFS info (device loop0): max_inline at 4096 [ 153.056314][ T5966] BTRFS info (device loop0): using free space tree [ 153.084187][ T5968] loop1: detected capacity change from 0 to 1024 [ 153.236287][ T5968] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 153.286024][ T5968] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.325763][ T5966] BTRFS info (device loop0): enabling ssd optimizations [ 153.349160][ T5967] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.596: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.392693][ T5959] loop3: detected capacity change from 0 to 2048 [ 153.428909][ T5959] UDF-fs: bad mount option "184467440737095516150x000000000000000301777777777777777777777ÿÿÿÿ" or missing value [ 153.513803][ T5967] EXT4-fs (loop1): Remounting filesystem read-only [ 153.541041][ T5968] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.596: Freeing blocks not in datazone - block = 0, count = 1 [ 153.560859][ T22] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 153.585693][ T22] usb 4-1: cp210x converter now attached to ttyUSB0 [ 153.609400][ T4273] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.635164][ T5968] EXT4-fs (loop1): Remounting filesystem read-only [ 153.676343][ T5967] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.596: lblock 0 mapped to illegal pblock 0 (length 1) [ 153.743463][ T5967] EXT4-fs (loop1): Remounting filesystem read-only [ 153.792012][ T22] usb 4-1: USB disconnect, device number 9 [ 153.850225][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 153.896623][ T22] cp210x 4-1:0.0: device disconnected [ 154.048466][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 154.780894][ T5918] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.948761][ T5918] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.090207][ T5918] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.303743][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.2.617'. [ 155.349863][ T5918] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.606992][ T4315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.649264][ T6046] loop1: detected capacity change from 0 to 4096 [ 155.799452][ T4315] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 155.813007][ T4315] usb 1-1: config 0 has no interface number 0 [ 155.849188][ T4315] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 155.867054][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.877757][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.886456][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.894972][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.903566][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.910830][ T4315] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 155.924618][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.932206][ T4315] usb 1-1: config 0 interface 255 has no altsetting 0 [ 155.939595][ T4315] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 155.950783][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.979225][ T4315] usb 1-1: config 0 descriptor?? [ 155.994565][ T4315] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 156.202930][ T4315] usb 1-1: USB disconnect, device number 6 [ 156.251411][ T6046] EXT4-fs (loop1): Test dummy encryption mode enabled [ 156.283650][ T6046] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0103] [ 156.314289][ T6046] System zones: 0-5 [ 156.357695][ T6046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 156.629293][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 156.930375][ T6053] chnl_net:caif_netlink_parms(): no params data found [ 157.440457][ T6053] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.448777][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 157.493363][ T6053] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.513895][ T6053] device bridge_slave_0 entered promiscuous mode [ 157.541478][ T6053] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.554518][ T6053] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.583156][ T6053] device bridge_slave_1 entered promiscuous mode [ 157.679579][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.710402][ T4315] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 157.725434][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.744192][ T4315] usb 2-1: config 0 descriptor?? [ 157.771351][ T4315] pwc: Askey VC010 type 2 USB webcam detected. [ 157.895355][ T6053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.931304][ T6053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.967434][ T4283] Bluetooth: hci1: command 0x0409 tx timeout [ 158.056743][ T5918] device hsr_slave_0 left promiscuous mode [ 158.084295][ T5918] device hsr_slave_1 left promiscuous mode [ 158.114977][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.149413][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.161022][ T4315] pwc: recv_control_msg error -32 req 02 val 2b00 [ 158.166126][ T6125] loop0: detected capacity change from 0 to 128 [ 158.179098][ T4315] pwc: recv_control_msg error -32 req 02 val 2700 [ 158.197910][ T5918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.207134][ T4315] pwc: recv_control_msg error -32 req 02 val 2c00 [ 158.225747][ T5918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.247395][ T5918] device bridge_slave_1 left promiscuous mode [ 158.255780][ T5918] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.284692][ T6125] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 158.319508][ T5918] device bridge_slave_0 left promiscuous mode [ 158.325894][ T5918] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.417329][ T4315] pwc: recv_control_msg error -71 req 04 val 1300 [ 158.430586][ T4315] pwc: recv_control_msg error -71 req 04 val 1400 [ 158.453440][ T4315] pwc: recv_control_msg error -71 req 02 val 2000 [ 158.474201][ T5918] device veth1_macvtap left promiscuous mode [ 158.481047][ T4315] pwc: recv_control_msg error -71 req 02 val 2100 [ 158.489137][ T5918] device veth0_macvtap left promiscuous mode [ 158.510763][ T4315] pwc: recv_control_msg error -71 req 04 val 1500 [ 158.517956][ T5918] device veth1_vlan left promiscuous mode [ 158.531059][ T5918] device veth0_vlan left promiscuous mode [ 158.537709][ T4315] pwc: recv_control_msg error -71 req 02 val 2500 [ 158.554159][ T4315] pwc: recv_control_msg error -71 req 02 val 2400 [ 158.566433][ T4315] pwc: recv_control_msg error -71 req 02 val 2600 [ 158.606523][ T4315] pwc: recv_control_msg error -71 req 02 val 2900 [ 158.629476][ T4315] pwc: recv_control_msg error -71 req 02 val 2800 [ 158.646604][ T4315] pwc: recv_control_msg error -71 req 04 val 1100 [ 158.662232][ T4315] pwc: recv_control_msg error -71 req 04 val 1200 [ 158.689916][ T4315] pwc: Registered as video103. [ 158.703368][ T4315] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 158.755749][ T4315] usb 2-1: USB disconnect, device number 3 [ 158.846730][ T6135] loop0: detected capacity change from 0 to 1024 [ 158.892945][ T6135] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 158.922937][ T6135] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 158.957664][ T6135] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 159.000010][ T6135] EXT4-fs error (device loop0): ext4_get_journal_inode:5762: comm syz.0.641: inode #1: comm syz.0.641: iget: illegal inode # [ 159.063020][ T6135] EXT4-fs (loop0): no journal found [ 159.094478][ T6142] loop2: detected capacity change from 0 to 4096 [ 159.139390][ T6142] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 159.250973][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 159.859334][ T5523] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 159.998801][ T5918] team0 (unregistering): Port device team_slave_1 removed [ 160.045680][ T5918] team0 (unregistering): Port device team_slave_0 removed [ 160.063736][ T4283] Bluetooth: hci1: command 0x041b tx timeout [ 160.077137][ T5523] usb 1-1: Using ep0 maxpacket: 8 [ 160.085251][ T5523] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.096022][ T5523] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 160.110332][ T5523] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.121784][ T5523] usb 1-1: config 0 descriptor?? [ 160.130519][ T5523] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 160.145115][ T5918] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.193592][ T5918] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.425909][ T6162] loop2: detected capacity change from 0 to 256 [ 160.569204][ T27] audit: type=1326 audit(1779417945.917:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.604462][ T27] audit: type=1326 audit(1779417945.917:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.659391][ T27] audit: type=1326 audit(1779417945.927:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.691036][ T27] audit: type=1326 audit(1779417945.927:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.717065][ T27] audit: type=1326 audit(1779417945.937:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.741970][ T27] audit: type=1326 audit(1779417945.937:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.767581][ T27] audit: type=1326 audit(1779417945.937:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.793073][ T27] audit: type=1326 audit(1779417945.977:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.857354][ T27] audit: type=1326 audit(1779417945.977:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.893712][ T27] audit: type=1326 audit(1779417945.977:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.2.647" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7f9c1259ce59 code=0x7ffc0000 [ 160.998942][ T5918] bond0 (unregistering): Released all slaves [ 161.180451][ T6053] team0: Port device team_slave_0 added [ 161.190238][ T6053] team0: Port device team_slave_1 added [ 161.345204][ T5523] gspca_vc032x: reg_w err -71 [ 161.350107][ T5523] vc032x: probe of 1-1:0.0 failed with error -71 [ 161.375369][ T5523] usb 1-1: USB disconnect, device number 7 [ 161.382890][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.403667][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.534604][ T6053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.586381][ T6053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.610655][ T6053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.723582][ T6053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.872875][ T6053] device hsr_slave_0 entered promiscuous mode [ 161.920537][ T6053] device hsr_slave_1 entered promiscuous mode [ 161.947577][ T6053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.955208][ T6053] Cannot create hsr debugfs directory [ 162.019854][ T6186] loop1: detected capacity change from 0 to 128 [ 162.127477][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 162.607623][ T6053] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 162.656640][ T6053] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 162.705648][ T6053] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 162.748583][ T6053] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 162.975813][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.033439][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.077697][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.088727][ T6053] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.131592][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.178989][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 163.208820][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.216013][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.257334][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 163.275151][ T6231] loop0: detected capacity change from 0 to 128 [ 163.332337][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 163.349370][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 163.387885][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.395031][ T5891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.423448][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 163.482143][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.541716][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.583377][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.624187][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.671981][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.710997][ T6053] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.757660][ T6053] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.782929][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.798193][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.848449][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.866053][ T6242] tls_set_device_offload_rx: netdev not found [ 163.876765][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.912206][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.949190][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.213311][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 164.479862][ T6256] loop2: detected capacity change from 0 to 128 [ 164.568259][ T6256] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 164.582602][ T6256] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.594369][ T6233] loop1: detected capacity change from 0 to 40427 [ 164.689224][ T6233] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 164.750903][ T6233] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 164.824903][ T6233] F2FS-fs (loop1): invalid crc value [ 164.907273][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 164.918194][ T6233] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.938224][ T6250] loop3: detected capacity change from 0 to 32768 [ 165.168553][ T6233] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 165.193097][ T6233] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 165.376647][ T5918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.417627][ T5918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.432207][ T6053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.442962][ T6233] F2FS-fs (loop1): access invalid blkaddr:2048 [ 165.477689][ T6233] CPU: 0 PID: 6233 Comm: syz.1.669 Not tainted syzkaller #0 [ 165.485045][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 165.495144][ T6233] Call Trace: [ 165.498464][ T6233] [ 165.501448][ T6233] dump_stack_lvl+0x188/0x24e [ 165.506210][ T6233] ? show_regs_print_info+0x12/0x12 [ 165.511500][ T6233] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 165.517369][ T6233] f2fs_is_valid_blkaddr+0xc7e/0x1250 [ 165.522797][ T6233] f2fs_map_blocks+0xd3a/0x3480 [ 165.527733][ T6233] ? f2fs_get_block+0x140/0x140 [ 165.532637][ T6233] ? xa_load+0x2b3/0x2e0 [ 165.536920][ T6233] ? xa_load+0x60/0x2e0 [ 165.541127][ T6233] ? page_index+0xe7/0x470 [ 165.545601][ T6233] f2fs_mpage_readpages+0xa9a/0x2850 [ 165.550946][ T6233] ? dquot_release_reservation_block+0xa0/0xa0 [ 165.557164][ T6233] ? __mod_lruvec_page_state+0xa1/0x410 [ 165.562744][ T6233] ? f2fs_readahead+0x180/0x380 [ 165.567623][ T6233] ? blk_start_plug+0x94/0x110 [ 165.572412][ T6233] read_pages+0x185/0x850 [ 165.576801][ T6233] ? folio_put+0xd0/0xd0 [ 165.581083][ T6233] ? page_cache_ra_unbounded+0x770/0x770 [ 165.586741][ T6233] ? filemap_add_folio+0x188/0x3c0 [ 165.591879][ T6233] page_cache_ra_unbounded+0x690/0x770 [ 165.597368][ T6233] f2fs_readdir+0x487/0xa00 [ 165.601912][ T6233] ? f2fs_fill_dentries+0xce0/0xce0 [ 165.607158][ T6233] ? end_current_label_crit_section+0x14b/0x170 [ 165.613415][ T6233] ? iterate_dir+0x10d/0x560 [ 165.618028][ T6233] ? down_read_killable+0x1cc/0x340 [ 165.623249][ T6233] ? fsnotify_perm+0x248/0x550 [ 165.628037][ T6233] iterate_dir+0x218/0x560 [ 165.632489][ T6233] ? f2fs_fill_dentries+0xce0/0xce0 [ 165.637798][ T6233] __se_sys_getdents64+0xf2/0x270 [ 165.642854][ T6233] ? __x64_sys_getdents64+0x80/0x80 [ 165.648080][ T6233] ? filldir+0x700/0x700 [ 165.652360][ T6233] ? lockdep_hardirqs_on+0x94/0x140 [ 165.657587][ T6233] do_syscall_64+0x4c/0xa0 [ 165.662022][ T6233] ? clear_bhb_loop+0x60/0xb0 [ 165.666735][ T6233] ? clear_bhb_loop+0x60/0xb0 [ 165.671447][ T6233] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 165.677365][ T6233] RIP: 0033:0x7fd85d59ce59 [ 165.681833][ T6233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 165.701457][ T6233] RSP: 002b:00007fd85e3da028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 165.709910][ T6233] RAX: ffffffffffffffda RBX: 00007fd85d815fa0 RCX: 00007fd85d59ce59 [ 165.717903][ T6233] RDX: 0000000000001000 RSI: 0000200000001940 RDI: 0000000000000004 [ 165.725945][ T6233] RBP: 00007fd85d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 165.733948][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.741958][ T6233] R13: 00007fd85d816038 R14: 00007fd85d815fa0 R15: 00007ffc262febc8 [ 165.749969][ T6233] [ 165.930778][ T6288] sctp: [Deprecated]: syz.0.686 (pid 6288) Use of int in maxseg socket option. [ 165.930778][ T6288] Use struct sctp_assoc_value instead [ 166.092911][ T6233] syz.1.669: attempt to access beyond end of device [ 166.092911][ T6233] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 166.159103][ T6285] syz.1.669: attempt to access beyond end of device [ 166.159103][ T6285] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 166.370615][ T6299] netlink: 'syz.3.688': attribute type 3 has an invalid length. [ 166.387445][ T6299] netlink: 'syz.3.688': attribute type 8 has an invalid length. [ 166.406015][ T6299] netlink: 'syz.3.688': attribute type 4 has an invalid length. [ 166.426150][ T6299] netlink: 'syz.3.688': attribute type 7 has an invalid length. [ 166.443433][ T6299] netlink: 199012 bytes leftover after parsing attributes in process `syz.3.688'. [ 166.583015][ T6233] syz.1.669: attempt to access beyond end of device [ 166.583015][ T6233] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 166.730101][ T4279] syz-executor: attempt to access beyond end of device [ 166.730101][ T4279] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.882786][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 166.907792][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 166.948640][ T6312] loop3: detected capacity change from 0 to 256 [ 166.990090][ T6312] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 167.014460][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.047936][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.096317][ T6053] device veth0_vlan entered promiscuous mode [ 167.120268][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.150202][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.165172][ T6286] loop2: detected capacity change from 0 to 40427 [ 167.189081][ T6053] device veth1_vlan entered promiscuous mode [ 167.232741][ T6286] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 167.265452][ T6286] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 167.311623][ T6286] F2FS-fs (loop2): invalid crc value [ 167.323260][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.353114][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.372057][ T6286] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.384891][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.427983][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.469415][ T6053] device veth0_macvtap entered promiscuous mode [ 167.508112][ T6053] device veth1_macvtap entered promiscuous mode [ 167.574740][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.606313][ T6286] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 167.617226][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.633276][ T6286] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.643326][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.697920][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.737920][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.771170][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.836269][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.873683][ T6331] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 167.905829][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.943923][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.983782][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.006578][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.034976][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.072784][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.110531][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.146968][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.181677][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.206427][ T4281] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 168.206448][ T4281] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 168.222975][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.243566][ T4281] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 168.243586][ T4281] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 168.252155][ T4281] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 168.260152][ T4281] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 168.267989][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.287458][ T4281] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 168.287723][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.306092][ T6053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.320186][ T6053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.353128][ T6053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.404333][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.426636][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.470385][ T6053] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.502859][ T6053] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.543358][ T6053] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.579871][ T6345] loop1: detected capacity change from 0 to 1024 [ 168.604181][ T6053] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.844071][ T5899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.890662][ T5899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.924799][ T5903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.977726][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.985667][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.053467][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.113954][ T5899] hfsplus: b-tree write err: -5, ino 3 [ 169.324819][ T22] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 169.377280][ T6357] loop5: detected capacity change from 0 to 1024 [ 169.384876][ T6357] ext3: Bad value for 'resgid' [ 169.468588][ T22] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.757139][ T951] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.961311][ T6360] fido_id[6360]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.968787][ T951] usb 4-1: Using ep0 maxpacket: 16 [ 169.999111][ T951] usb 4-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.032990][ T951] usb 4-1: config 1 interface 0 has no altsetting 0 [ 170.077829][ T951] usb 4-1: string descriptor 0 read error: -22 [ 170.124135][ T951] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.40 [ 170.153468][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.346250][ T6351] loop0: detected capacity change from 0 to 40427 [ 170.381002][ T6351] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 170.391993][ T6351] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 170.413769][ T6351] F2FS-fs (loop0): invalid crc value [ 170.441778][ T6351] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 170.620429][ T951] dragonrise 0003:0079:0011.0006: unknown global tag 0xc [ 170.656899][ T951] dragonrise 0003:0079:0011.0006: item 0 2 1 12 parsing failed [ 170.675302][ T951] dragonrise 0003:0079:0011.0006: parse failed [ 170.683289][ T6351] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 170.697397][ T6351] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 170.715311][ T951] dragonrise: probe of 0003:0079:0011.0006 failed with error -22 [ 170.822116][ T14] usb 4-1: USB disconnect, device number 10 [ 171.197888][ T6391] syz.0.702: attempt to access beyond end of device [ 171.197888][ T6391] loop0: rw=0, sector=49152, nr_sectors = 8 limit=40427 [ 171.255542][ T6401] loop2: detected capacity change from 0 to 1024 [ 171.451039][ T6405] loop5: detected capacity change from 0 to 256 [ 171.461302][ T6394] syz.0.702: attempt to access beyond end of device [ 171.461302][ T6394] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 171.532479][ T6405] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 171.622247][ T6409] loop3: detected capacity change from 0 to 16 [ 171.649261][ T5878] hfsplus: b-tree write err: -5, ino 3 [ 171.662596][ T6409] erofs: Unknown parameter 'user_xxattk' [ 171.733032][ T6409] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 172.887144][ T5527] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.926442][ T6448] tls_set_device_offload: netdev not found [ 173.043046][ T6454] overlayfs: refusing to follow metacopy origin for (/file1) [ 173.107013][ T5527] usb 4-1: Using ep0 maxpacket: 8 [ 173.123998][ T5527] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.153966][ T5527] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.173580][ T5527] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 242, changing to 11 [ 173.203682][ T5527] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 173.223373][ T5527] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 173.243433][ T5527] usb 4-1: Product: syz [ 173.248043][ T5527] usb 4-1: Manufacturer: syz [ 173.284733][ T5527] usb 4-1: SerialNumber: syz [ 173.312645][ T6461] loop1: detected capacity change from 0 to 2048 [ 173.339860][ T6461] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.514632][ T5527] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 173.557574][ T5527] usb 4-1: USB disconnect, device number 11 [ 173.569484][ T4315] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.762050][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 173.771599][ T4315] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 173.796559][ T4315] usb 1-1: config 0 has no interface number 0 [ 173.815494][ T4315] usb 1-1: config 0 interface 184 has no altsetting 0 [ 173.849771][ T4315] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 173.880587][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.901479][ T4315] usb 1-1: Product: syz [ 173.910748][ T4315] usb 1-1: Manufacturer: syz [ 173.920941][ T4315] usb 1-1: SerialNumber: syz [ 173.942810][ T4315] usb 1-1: config 0 descriptor?? [ 173.955510][ T4315] smsc75xx v1.0.0 [ 174.019615][ T14] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 174.043890][ T14] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 174.082518][ T6471] loop2: detected capacity change from 0 to 1024 [ 174.122561][ T6471] ext3: Bad value for 'resgid' [ 174.418657][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 174.418672][ T27] audit: type=1800 audit(1779417959.757:38): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.734" name="file1" dev="loop1" ino=1346 res=0 errno=0 [ 174.554141][ T6477] fido_id[6477]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.970169][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 175.171398][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 175.196697][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 175.245219][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 175.276227][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 175.303816][ T4315] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 175.359373][ T4315] usb 1-1: USB disconnect, device number 8 [ 175.979045][ T6522] loop3: detected capacity change from 0 to 8192 [ 176.041351][ T6522] loop3: p1 p3 p4 [ 176.051488][ T6522] loop3: partition table partially beyond EOD, truncated [ 176.082816][ T6522] loop3: p1 start 393217 is beyond EOD, truncated [ 176.122944][ T6522] loop3: p3 size 395700 extends beyond EOD, truncated [ 176.167908][ T6522] loop3: p4 start 117571584 is beyond EOD, truncated [ 176.658094][ T6542] loop1: detected capacity change from 0 to 1024 [ 176.676458][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 176.718350][ T6542] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only. [ 176.782804][ T6542] hfsplus: filesystem is marked journaled, leaving read-only. [ 176.791133][ T5528] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 177.002613][ T5528] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.027221][ T5528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.053471][ T5528] usb 4-1: Product: syz [ 177.067049][ T5528] usb 4-1: Manufacturer: syz [ 177.081804][ T5528] usb 4-1: SerialNumber: syz [ 177.102099][ T5528] usb 4-1: config 0 descriptor?? [ 177.489343][ T6535] loop0: detected capacity change from 0 to 32768 [ 177.656959][ T4321] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.869528][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.916267][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.956761][ T6535] XFS (loop0): Mounting V5 Filesystem [ 177.976937][ T4321] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 178.029014][ T4321] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 178.108558][ T4321] usb 2-1: SerialNumber: syz [ 178.133247][ T6557] loop5: detected capacity change from 0 to 131072 [ 178.150787][ T6535] XFS (loop0): Ending clean mount [ 178.155601][ T5528] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.164343][ T6557] F2FS-fs (loop5): invalid crc value [ 178.214737][ T6557] F2FS-fs (loop5): Found nat_bits in checkpoint [ 178.270934][ T6557] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 178.296988][ T6557] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 178.390273][ T4321] usb 2-1: 0:2 : does not exist [ 178.401496][ T4321] usb 2-1: unit 3 not found! [ 178.406290][ T4321] usb 2-1: unit 8 not found! [ 178.450197][ T4321] usb 2-1: USB disconnect, device number 4 [ 178.548386][ T4273] XFS (loop0): Unmounting Filesystem [ 178.753673][ T4434] udevd[4434]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.801686][ T5528] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 178.834590][ T5528] usb 4-1: USB disconnect, device number 12 [ 179.350141][ T6603] loop0: detected capacity change from 0 to 2048 [ 179.385274][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056217800: rx timeout, send abort [ 179.422045][ T6603] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.847074][ T5527] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 179.887002][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056217000: rx timeout, send abort [ 179.895524][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056217800: abort rx timeout. Force session deactivation [ 180.039616][ T5527] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 180.055029][ T5527] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 180.075708][ T5527] usb 3-1: config 150 has no interface number 0 [ 180.093116][ T5527] usb 3-1: config 150 interface 204 has no altsetting 0 [ 180.111200][ T5527] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 180.129303][ T5527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.152664][ T5527] usb 3-1: Product: syz [ 180.181507][ T5527] usb 3-1: Manufacturer: syz [ 180.201025][ T5527] usb 3-1: SerialNumber: syz [ 180.249133][ T6623] loop5: detected capacity change from 0 to 136 [ 180.395396][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056217000: abort rx timeout. Force session deactivation [ 180.445346][ T5527] xr_serial 3-1:150.204: skipping garbage [ 180.454057][ T5527] xr_serial 3-1:150.204: xr_serial converter detected [ 180.535756][ T6627] input: syz0 as /devices/virtual/input/input12 [ 180.580724][ T6627] input: failed to attach handler leds to device input12, error: -6 [ 181.254937][ T5527] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 181.485421][ T5527] usb 3-1: USB disconnect, device number 9 [ 181.512551][ T5527] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 181.584178][ T5527] xr_serial 3-1:150.204: device disconnected [ 181.611977][ T6657] loop5: detected capacity change from 0 to 4096 [ 181.723848][ T6657] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 182.394959][ T6681] loop5: detected capacity change from 0 to 8192 [ 182.433659][ T6681] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 182.447640][ T6681] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 182.457344][ T6681] REISERFS (device loop5): using ordered data mode [ 182.463968][ T6681] reiserfs: using flush barriers [ 182.471124][ T6681] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 182.491207][ T6681] REISERFS (device loop5): checking transaction log (loop5) [ 182.507475][ T6681] REISERFS (device loop5): Using r5 hash to sort names [ 182.514505][ T6681] REISERFS (device loop5): using 3.5.x disk format [ 182.521497][ T6681] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 183.268272][ T6698] loop5: detected capacity change from 0 to 4096 [ 183.275586][ C1] Unknown status report in ack skb [ 183.338649][ T6698] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 183.408337][ T5528] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 183.644232][ T5528] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.686268][ T5528] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 183.739082][ T5528] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 183.773870][ T5528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 183.793301][ T5528] usb 4-1: SerialNumber: syz [ 183.949994][ T6714] loop0: detected capacity change from 0 to 4096 [ 184.038171][ T5528] usb 4-1: 0:2 : does not exist [ 184.047317][ T5528] usb 4-1: unit 48 not found! [ 184.066728][ T6714] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 184.097563][ T5528] usb 4-1: USB disconnect, device number 13 [ 184.142711][ T6714] EXT4-fs (loop0): unmounting filesystem. [ 184.313785][ T4437] udevd[4437]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.767751][ T6710] loop2: detected capacity change from 0 to 40427 [ 184.782709][ T6710] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 184.834612][ T6710] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 184.871091][ T6710] F2FS-fs (loop2): invalid crc_offset: 33558524 [ 184.936007][ T6710] F2FS-fs (loop2): Found nat_bits in checkpoint [ 185.139413][ T6710] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 185.164272][ T6710] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 185.333563][ T6759] loop3: detected capacity change from 0 to 8 [ 185.804911][ T6766] loop1: detected capacity change from 0 to 1024 [ 185.868850][ T6766] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 186.197407][ T27] audit: type=1326 audit(1779417971.437:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.5.835" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5439ce59 code=0x7ffc0000 [ 186.250770][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 186.368542][ T27] audit: type=1326 audit(1779417971.457:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.5.835" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e5439ce59 code=0x7ffc0000 [ 186.400515][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 186.502010][ T27] audit: type=1326 audit(1779417971.457:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.5.835" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5439ce59 code=0x7ffc0000 [ 186.711208][ T27] audit: type=1326 audit(1779417971.457:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.5.835" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f2e5439ce59 code=0x7ffc0000 [ 186.881704][ T27] audit: type=1326 audit(1779417971.457:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6775 comm="syz.5.835" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e5439ce59 code=0x7ffc0000 [ 186.993250][ C0] Unknown status report in ack skb [ 187.112753][ T6778] loop0: detected capacity change from 0 to 131072 [ 187.186566][ T6778] F2FS-fs (loop0): invalid crc value [ 187.214139][ T6778] F2FS-fs (loop0): Found nat_bits in checkpoint [ 187.253201][ T6778] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2 [ 187.275774][ T6778] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 187.333192][ T6799] loop2: detected capacity change from 0 to 1024 [ 188.775357][ T6835] netlink: 'syz.0.855': attribute type 3 has an invalid length. [ 188.933470][ T6842] netlink: 'syz.5.858': attribute type 2 has an invalid length. [ 188.990068][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.858'. [ 189.131702][ T6847] loop0: detected capacity change from 0 to 256 [ 189.178724][ T6847] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.209828][ T6847] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 189.276291][ T6847] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 189.905703][ T6861] loop5: detected capacity change from 0 to 2048 [ 190.033739][ T6861] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 190.069603][ T6870] loop3: detected capacity change from 0 to 128 [ 190.117564][ T6870] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 190.236100][ T27] audit: type=1800 audit(1779417975.577:44): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.867" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 190.298375][ T27] audit: type=1800 audit(1779417975.647:45): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.867" name="file1" dev="loop3" ino=94 res=0 errno=0 [ 190.336800][ T6850] loop2: detected capacity change from 0 to 32768 [ 190.484022][ T6850] JBD2: Ignoring recovery information on journal [ 190.602381][ T6053] EXT4-fs (loop5): unmounting filesystem. [ 190.685533][ T6850] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 190.698711][ T6875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 190.797080][ T6875] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 190.955358][ T6890] loop0: detected capacity change from 0 to 256 [ 191.017227][ T6890] xt_hashlimit: size too large, truncated to 1048576 [ 191.312614][ T4281] ocfs2: Unmounting device (7,2) on (node local) [ 191.476977][ T5527] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 191.642594][ T6904] loop3: detected capacity change from 0 to 512 [ 191.699702][ T5527] usb 6-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 191.716973][ T5527] usb 6-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 191.735395][ T5527] usb 6-1: Product: syz [ 191.746401][ T5527] usb 6-1: config 0 descriptor?? [ 191.754658][ T6904] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 191.768445][ T5527] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 191.784201][ T5527] usb 6-1: Detected FT232H [ 191.799470][ T6904] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.866792][ T27] audit: type=1800 audit(1779417977.207:46): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.876" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 191.904303][ T6910] loop2: detected capacity change from 0 to 512 [ 191.974080][ T5527] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 191.982332][ T6910] EXT4-fs: Ignoring removed oldalloc option [ 192.000430][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 192.018165][ T6910] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 192.079113][ T6910] EXT4-fs (loop2): 1 truncate cleaned up [ 192.137983][ T6910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.396421][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 192.433078][ T5527] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 192.632559][ T951] usb 6-1: USB disconnect, device number 2 [ 192.683648][ T951] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 192.707397][ T951] ftdi_sio 6-1:0.0: device disconnected [ 193.505223][ T6958] loop2: detected capacity change from 0 to 256 [ 193.567920][ T6958] exfat: Deprecated parameter 'utf8' [ 193.654130][ T6958] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 194.060156][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.066628][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.421732][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 196.439287][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 196.449874][ T7044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 196.460396][ T7044] device bridge_slave_0 left promiscuous mode [ 196.466647][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.551046][ T7044] device bridge_slave_1 left promiscuous mode [ 196.590507][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.598282][ T7054] loop3: detected capacity change from 0 to 256 [ 196.656370][ T7054] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 196.669360][ T7044] bond0: (slave bond_slave_0): Releasing backup interface [ 196.682148][ T7044] device bond_slave_0 left promiscuous mode [ 196.705118][ T27] audit: type=1326 audit(1779417982.047:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7055 comm="syz.2.919" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c1259ce59 code=0x0 [ 196.712302][ T7058] loop5: detected capacity change from 0 to 128 [ 196.771648][ T7044] bond0: (slave bond_slave_1): Releasing backup interface [ 196.814059][ T7044] device bond_slave_1 left promiscuous mode [ 196.853950][ T7058] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 196.905730][ T7058] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 196.950002][ T7058] EXT4-fs (loop5): shut down requested (2) [ 197.018114][ T7044] team0: Port device team_slave_0 removed [ 197.060998][ T6053] EXT4-fs (loop5): unmounting filesystem. [ 197.137798][ T7044] team0: Port device team_slave_1 removed [ 197.144490][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.176898][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.202281][ T7044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.215873][ T7044] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.254833][ T7044] batman_adv: batadv0: Interface deactivated: vxlan0 [ 197.265060][ T7044] batman_adv: batadv0: Removing interface: vxlan0 [ 198.106003][ T7093] loop2: detected capacity change from 0 to 256 [ 198.164273][ T7093] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 198.586561][ T5903] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.739947][ T5903] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.856221][ T5903] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.922501][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 198.937156][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 198.946455][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 198.957000][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 198.997257][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 199.004546][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 199.112278][ T5903] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.700593][ T7136] loop0: detected capacity change from 0 to 4096 [ 199.729407][ T7115] chnl_net:caif_netlink_parms(): no params data found [ 199.764522][ T7136] EXT4-fs (loop0): Test dummy encryption mode enabled [ 199.811464][ T7136] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 199.841019][ T7136] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.019202][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 200.581156][ T7164] team0: Port device syz_tun added [ 200.614211][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.628809][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.645677][ T7115] device bridge_slave_0 entered promiscuous mode [ 200.748853][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.758618][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.797120][ T951] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 200.797579][ T7115] device bridge_slave_1 entered promiscuous mode [ 200.882550][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.894935][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.989215][ T951] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.003959][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.022920][ T951] usb 6-1: config 0 interface 0 has no altsetting 0 [ 201.031992][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.050648][ T951] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 201.071156][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.083609][ T951] usb 6-1: Product: syz [ 201.090172][ T951] usb 6-1: Manufacturer: syz [ 201.096078][ T951] usb 6-1: SerialNumber: syz [ 201.099291][ T4283] Bluetooth: hci4: command 0x0409 tx timeout [ 201.126064][ T7184] loop2: detected capacity change from 0 to 4096 [ 201.154672][ T7184] EXT4-fs (loop2): Test dummy encryption mode enabled [ 201.163290][ T951] usb 6-1: config 0 descriptor?? [ 201.188818][ T951] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 201.202474][ T7184] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=8843c01c, mo2=0003] [ 201.227570][ T951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.240570][ T7184] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 201.250191][ T951] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 201.272368][ T951] usb 6-1: media controller created [ 201.300362][ T951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.433840][ T7115] team0: Port device team_slave_0 added [ 201.447117][ T951] DVB: Unable to find symbol tda10046_attach() [ 201.453351][ T951] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 201.465789][ T951] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 201.496255][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 201.540902][ T7182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.553837][ T7182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.954'. [ 201.639692][ T7115] team0: Port device team_slave_1 added [ 201.916154][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.949725][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.048069][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.088712][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.116979][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.209710][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.488514][ T7115] device hsr_slave_0 entered promiscuous mode [ 202.514884][ T7115] device hsr_slave_1 entered promiscuous mode [ 202.525046][ T951] dvb_usb_m920x: probe of 6-1:0.0 failed with error -71 [ 202.533020][ T7115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.544684][ T951] usb 6-1: USB disconnect, device number 3 [ 202.550745][ T7115] Cannot create hsr debugfs directory [ 202.591863][ T5903] device hsr_slave_0 left promiscuous mode [ 202.611717][ T5903] device hsr_slave_1 left promiscuous mode [ 202.621615][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.652202][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.708105][ T5903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.725840][ T5903] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.743143][ T5903] device bridge_slave_1 left promiscuous mode [ 202.757062][ T5903] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.775581][ T5903] device bridge_slave_0 left promiscuous mode [ 202.792238][ T5903] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.887514][ T5903] device veth1_macvtap left promiscuous mode [ 202.914731][ T5903] device veth0_macvtap left promiscuous mode [ 202.956995][ T5903] device veth1_vlan left promiscuous mode [ 202.962886][ T5903] device veth0_vlan left promiscuous mode [ 203.067288][ T7230] netlink: 'syz.0.967': attribute type 6 has an invalid length. [ 203.187213][ T4283] Bluetooth: hci4: command 0x041b tx timeout [ 205.167909][ T7268] loop2: detected capacity change from 0 to 128 [ 205.175900][ T7268] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 205.198478][ T7268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 205.247251][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 205.514019][ T5903] team0 (unregistering): Port device team_slave_1 removed [ 205.619746][ T7277] loop2: detected capacity change from 0 to 1024 [ 205.632965][ T5903] team0 (unregistering): Port device team_slave_0 removed [ 205.679604][ T7277] hfsplus: found bad thread record in catalog [ 205.686423][ T7277] hfsplus: found bad thread record in catalog [ 205.771308][ T5903] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.781963][ T7282] vivid-000: disconnect [ 205.791003][ T7277] hfsplus: xattr search failed [ 205.847894][ T7280] vivid-000: reconnect [ 205.872616][ T5926] hfsplus: b-tree write err: -5, ino 3 [ 206.236700][ T5528] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.367169][ T48] Bluetooth: hci0: command 0x0406 tx timeout [ 206.373794][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 206.373827][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 206.434642][ T5528] usb 3-1: Using ep0 maxpacket: 16 [ 206.444454][ T5528] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 206.454857][ T5903] bond0 (unregistering): Released all slaves [ 206.460983][ T5528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.470600][ T951] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 206.486753][ T5528] usb 3-1: Product: syz [ 206.491503][ T5528] usb 3-1: Manufacturer: syz [ 206.496128][ T5528] usb 3-1: SerialNumber: syz [ 206.513026][ T5528] usb 3-1: config 0 descriptor?? [ 206.534763][ T5528] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 206.677122][ T951] usb 6-1: Using ep0 maxpacket: 32 [ 206.689778][ T951] usb 6-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 206.716534][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.740480][ T951] usb 6-1: Product: syz [ 206.744705][ T951] usb 6-1: Manufacturer: syz [ 206.765879][ T951] usb 6-1: SerialNumber: syz [ 207.012901][ T7115] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 207.059167][ T7115] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 207.096671][ T7115] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 207.150376][ T7115] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 207.327148][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 207.411859][ T951] usb 6-1: 1:1: cannot get freq (v2/v3): err -32 [ 207.447158][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.532733][ T7115] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.570465][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 207.592297][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 207.628940][ T951] usb 6-1: 1:1: cannot set freq 44100 (v2/v3): err -2093229896 [ 207.649068][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.665873][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.688112][ T5899] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.695314][ T5899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.704356][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.734458][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.748089][ T5528] ssu100: probe of 3-1:0.0 failed with error -71 [ 207.773599][ T5899] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.780773][ T5899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.787504][ T5528] usb 3-1: USB disconnect, device number 10 [ 207.829999][ T951] usb 6-1: 2:1: cannot get freq (v2/v3): err -71 [ 207.844831][ T951] usb 6-1: 2:1: cannot set freq 44100 (v2/v3): err -71 [ 207.875480][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.891729][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.923380][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.971708][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.993808][ T951] usb 6-1: USB disconnect, device number 4 [ 208.025819][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.092110][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.138049][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.160696][ T4357] udevd[4357]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.195158][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.242191][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.265297][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.286502][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.323551][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.365468][ T7115] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.634797][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 208.654772][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 208.686028][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 208.734731][ T7330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1002'. [ 209.017203][ T7342] loop2: detected capacity change from 0 to 512 [ 209.067907][ T7342] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 209.137437][ T7342] EXT4-fs (loop2): invalid journal inode [ 209.163659][ T7342] EXT4-fs (loop2): can't get journal size [ 209.296916][ T951] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 209.342469][ T7342] EXT4-fs (loop2): 1 truncate cleaned up [ 209.370448][ T7342] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 209.494676][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.497372][ T951] usb 6-1: Using ep0 maxpacket: 32 [ 209.525996][ T951] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 209.528406][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.565559][ T951] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 209.591938][ T951] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 209.616177][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.651873][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.682072][ T951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 209.701737][ T951] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 209.765802][ T951] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 209.796155][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.835198][ T951] usb 6-1: config 0 descriptor?? [ 209.954268][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 210.071513][ T951] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 210.141159][ T7373] loop2: detected capacity change from 0 to 128 [ 210.356722][ C1] usblp0: nonzero read bulk status received: -71 [ 210.365187][ T951] usb 6-1: USB disconnect, device number 5 [ 210.560582][ T7345] usblp0: removed [ 210.619848][ T7386] loop2: detected capacity change from 0 to 512 [ 210.709197][ T7386] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 210.727587][ T7386] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.811469][ T27] audit: type=1800 audit(1779417996.157:48): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1016" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 210.973527][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 211.177472][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.186336][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.255622][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.292110][ T7404] loop5: detected capacity change from 0 to 128 [ 211.301293][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.342561][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.360361][ T7404] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 211.377718][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.412193][ T7115] device veth0_vlan entered promiscuous mode [ 211.440920][ T7404] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 211.491390][ T7115] device veth1_vlan entered promiscuous mode [ 211.514874][ T7404] ext2 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.525998][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.557691][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.573871][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.655549][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.682017][ T7115] device veth0_macvtap entered promiscuous mode [ 211.738663][ T7115] device veth1_macvtap entered promiscuous mode [ 211.783786][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.824899][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.855392][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.874780][ T7414] loop2: detected capacity change from 0 to 4096 [ 211.896890][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.906754][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.920835][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.934649][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 211.946081][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 211.989498][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.012077][ T6053] EXT4-fs (loop5): unmounting filesystem. [ 212.033517][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.067142][ T4315] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 212.082044][ T5899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.098949][ T7414] ntfs3: loop2: ino=5, "/" directory corrupted [ 212.112184][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.137398][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.186940][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.226992][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.256883][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.292663][ T4315] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.297012][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.322452][ T4315] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.329345][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.345900][ T4281] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 212.354805][ T4281] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 212.371840][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.386928][ T4315] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 212.397266][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.429653][ T4315] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.40 [ 212.458416][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.481691][ T7433] loop2: detected capacity change from 0 to 1024 [ 212.496751][ T4315] usb 1-1: Product: syz [ 212.503964][ T4315] usb 1-1: Manufacturer: syz [ 212.535122][ T4315] usb 1-1: SerialNumber: syz [ 212.586241][ T951] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 212.594736][ T7430] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 212.679118][ T7430] bond1: (slave lo): Enslaving as an active interface with an up link [ 212.738736][ T7430] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 212.797057][ T951] usb 6-1: Using ep0 maxpacket: 8 [ 212.807339][ T7115] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.815471][ T951] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 212.818697][ T7115] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.853117][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 212.886998][ T951] usb 6-1: Product: syz [ 212.891279][ T951] usb 6-1: Manufacturer: syz [ 212.895939][ T951] usb 6-1: SerialNumber: syz [ 212.907302][ T7115] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.929778][ T951] usb 6-1: config 0 descriptor?? [ 212.950951][ T951] gspca_main: sq905-2.14.0 probing 2770:9120 [ 212.956946][ T7115] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.004519][ T4315] usb 1-1: USB disconnect, device number 9 [ 213.173781][ T5926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.199311][ T5926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.239982][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 213.288220][ T5899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.306712][ T5899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.322628][ T5926] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 213.766677][ T7456] loop6: detected capacity change from 0 to 512 [ 213.804093][ T7456] EXT4-fs: Ignoring removed orlov option [ 213.870020][ T7456] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 213.919791][ T27] audit: type=1800 audit(1779417999.267:49): pid=7456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1033" name="file3" dev="loop6" ino=16 res=0 errno=0 [ 213.947835][ T951] gspca_sq905: bulk read fail (-22) len 0/4 [ 213.955522][ T951] sq905: probe of 6-1:0.0 failed with error -5 [ 214.073854][ T7115] EXT4-fs (loop6): unmounting filesystem. [ 214.171112][ T5527] usb 6-1: USB disconnect, device number 6 [ 214.232971][ T7464] loop6: detected capacity change from 0 to 128 [ 214.258637][ T7464] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 214.286141][ T7464] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.423534][ T7115] EXT4-fs (loop6): unmounting filesystem. [ 214.809881][ T7484] loop5: detected capacity change from 0 to 16 [ 214.854912][ T7486] loop0: detected capacity change from 0 to 1024 [ 214.871633][ T7484] erofs: (device loop5): mounted with root inode @ nid 36. [ 216.568559][ T7539] loop0: detected capacity change from 0 to 128 [ 217.432743][ T7566] netlink: 'syz.5.1069': attribute type 3 has an invalid length. [ 218.376983][ T4315] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 218.515707][ T7573] loop6: detected capacity change from 0 to 40427 [ 218.586513][ T4315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10 [ 218.620090][ T7573] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 218.649559][ T4315] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 218.661943][ T7573] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 218.673807][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.685995][ T7573] F2FS-fs (loop6): invalid crc value [ 218.710007][ T4315] usb 6-1: config 0 descriptor?? [ 218.754555][ T7573] F2FS-fs (loop6): Found nat_bits in checkpoint [ 218.960473][ T7573] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 218.991638][ T7573] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 219.144767][ T4315] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 219.172647][ T4315] cm6533_jd 0003:0D8C:0022.0008: unknown main item tag 0x0 [ 219.204928][ T4315] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0008/input/input13 [ 219.226158][ T5899] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 219.263527][ T5899] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 219.285641][ T4315] cm6533_jd 0003:0D8C:0022.0008: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 219.457034][ T3598] usb 6-1: USB disconnect, device number 7 [ 219.759907][ T7619] fido_id[7619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 221.677053][ T5528] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 221.899517][ T5528] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 221.927032][ T5528] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 221.946886][ T5528] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 221.995188][ T5528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.025635][ T5528] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 222.066946][ T5528] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 222.100526][ T5528] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 222.151367][ T5528] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.205771][ T5528] usb 6-1: config 0 descriptor?? [ 222.224459][ T7653] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 222.344906][ T7555] Set syz1 is full, maxelem 65536 reached [ 222.470738][ T5528] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 222.646172][ T7682] netlink: 'syz.0.1100': attribute type 3 has an invalid length. [ 222.683918][ C1] usblp0: nonzero read bulk status received: -71 [ 222.708769][ T5527] usb 6-1: USB disconnect, device number 8 [ 222.818013][ T7685] loop6: detected capacity change from 0 to 512 [ 222.863786][ T7685] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.904477][ T7685] EXT4-fs: Ignoring removed mblk_io_submit option [ 222.915829][ T7652] usblp0: removed [ 222.956134][ T7685] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 222.964222][ T7687] loop0: detected capacity change from 0 to 512 [ 223.064885][ T7685] EXT4-fs (loop6): 1 truncate cleaned up [ 223.071112][ T7687] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.088137][ T7685] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 223.107173][ T7687] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.198570][ T27] audit: type=1800 audit(1779418008.547:50): pid=7687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1105" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 223.279827][ T7672] loop2: detected capacity change from 0 to 32768 [ 223.283473][ T7687] EXT4-fs (loop0): shut down requested (2) [ 223.329741][ T7115] EXT4-fs (loop6): unmounting filesystem. [ 223.475573][ T7672] XFS (loop2): Mounting V5 Filesystem [ 223.613587][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 223.691884][ T7672] XFS (loop2): Ending clean mount [ 223.998442][ T4281] XFS (loop2): Unmounting Filesystem [ 224.605609][ T7739] loop5: detected capacity change from 0 to 256 [ 224.641438][ T7742] netlink: 'syz.6.1117': attribute type 3 has an invalid length. [ 224.663559][ T7739] xt_hashlimit: size too large, truncated to 1048576 [ 225.326375][ T7760] loop2: detected capacity change from 0 to 1024 [ 225.385249][ T7760] EXT4-fs: Ignoring removed bh option [ 225.462975][ T7760] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 225.494453][ T7760] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.566671][ T7760] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 3) [ 225.591796][ T7760] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 225.646707][ T7760] EXT4-fs (loop2): This should not happen!! Data will be lost [ 225.646707][ T7760] [ 225.700512][ T7772] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.832199][ T7759] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.918669][ T7759] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 225.933123][ T7774] loop6: detected capacity change from 0 to 512 [ 226.002419][ T7774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 226.039815][ T7774] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 226.060871][ T7774] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.090879][ T7774] EXT4-fs error (device loop6): __ext4_new_inode:1291: comm syz.6.1126: failed to insert inode 16: doubly allocated? [ 226.154308][ T7115] EXT4-fs (loop6): unmounting filesystem. [ 226.161218][ T7772] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.182649][ T7759] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.198901][ T7772] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.213814][ T7759] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.341184][ T7772] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.381322][ T7759] EXT4-fs error (device loop2): ext4_map_blocks:637: inode #15: block 3: comm syz.2.1123: lblock 3 mapped to illegal pblock 3 (length 1) [ 226.521961][ T7782] loop0: detected capacity change from 0 to 16 [ 226.628081][ T7782] erofs: (device loop0): mounted with root inode @ nid 36. [ 226.669744][ T7785] netlink: 'syz.6.1129': attribute type 1 has an invalid length. [ 226.785888][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 227.213803][ T951] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 227.421644][ T951] usb 1-1: Using ep0 maxpacket: 32 [ 227.433644][ T951] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.462254][ T951] usb 1-1: config 0 has no interface number 0 [ 227.500351][ T951] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.534977][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.563744][ T951] usb 1-1: Product: syz [ 227.573863][ T951] usb 1-1: Manufacturer: syz [ 227.583979][ T951] usb 1-1: SerialNumber: syz [ 227.604245][ T951] usb 1-1: config 0 descriptor?? [ 227.616332][ T951] smsc95xx v2.0.0 [ 228.023393][ T951] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 228.045013][ T951] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.571895][ T7826] loop8: detected capacity change from 0 to 7 [ 228.592109][ T4437] loop8: [POWERTEC] p1 p2 p3 [ 228.597983][ T4437] loop8: p1 start 205 is beyond EOD, truncated [ 228.604204][ T4437] loop8: p2 start 1995875236 is beyond EOD, truncated [ 228.627500][ T4437] loop8: p3 size 9 extends beyond EOD, truncated [ 228.663318][ T7826] loop8: [POWERTEC] p1 p2 p3 [ 228.677253][ T7826] loop8: p1 start 205 is beyond EOD, truncated [ 228.684766][ T951] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 228.706375][ T7826] loop8: p2 start 1995875236 is beyond EOD, truncated [ 228.715809][ T951] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 228.730857][ T7826] loop8: p3 size 9 extends beyond EOD, truncated [ 228.742606][ T951] usb 1-1: USB disconnect, device number 10 [ 228.841259][ T7318] udevd[7318]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 228.933705][ T7318] udevd[7318]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 229.227270][ T7835] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1149'. [ 229.276590][ T7835] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.592031][ T7851] loop6: detected capacity change from 0 to 2048 [ 229.651448][ T7851] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 229.669670][ T7851] UDF-fs: Scanning with blocksize 512 failed [ 229.782524][ T7851] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.300205][ T7910] loop2: detected capacity change from 0 to 128 [ 231.316555][ T7910] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 231.350064][ T7910] hpfs: filesystem error: improperly stopped [ 231.356242][ T7910] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 231.371118][ T7910] hpfs: You really don't want any checks? You are crazy... [ 231.381009][ T7910] hpfs: Code page index out of array [ 231.386551][ T7910] hpfs: code page support is disabled [ 231.399548][ T7910] hpfs: hpfs_map_4sectors(): unaligned read [ 231.424061][ T7910] hpfs: hpfs_map_4sectors(): unaligned read [ 231.426405][ T7913] loop5: detected capacity change from 0 to 128 [ 231.445640][ T7910] hpfs: filesystem error: unable to find root dir [ 231.777736][ T7918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1178'. [ 231.982612][ T951] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 232.112867][ T7929] netlink: 'syz.5.1181': attribute type 1 has an invalid length. [ 232.184673][ T7929] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.201579][ T951] usb 3-1: Using ep0 maxpacket: 16 [ 232.211395][ T951] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.242805][ T951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 232.249607][ T951] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 232.266862][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.279168][ T951] usb 3-1: config 0 descriptor?? [ 232.314609][ T7936] bond1: (slave geneve2): making interface the new active one [ 232.380327][ T7936] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 232.405236][ T5891] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 232.536037][ T7936] syz.5.1181 (7936) used greatest stack depth: 18552 bytes left [ 232.600370][ T7946] loop0: detected capacity change from 0 to 8 [ 232.659059][ T7946] SQUASHFS error: lzo decompression failed, data probably corrupt [ 232.687166][ T7946] SQUASHFS error: Failed to read block 0x91: -5 [ 232.708261][ T951] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 232.739654][ T7946] SQUASHFS error: Unable to read metadata cache entry [8f] [ 232.784107][ T7946] SQUASHFS error: Unable to read inode 0x11f [ 233.116893][ T5522] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 233.163196][ T5528] usb 3-1: USB disconnect, device number 11 [ 233.284007][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1192'. [ 233.308967][ T5522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.326165][ T5522] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.347525][ T5522] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 233.356732][ T5522] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 233.372233][ T5522] usb 6-1: Manufacturer: syz [ 233.389433][ T5522] usb 6-1: config 0 descriptor?? [ 234.411119][ T5522] uclogic 0003:256C:006D.000A: v1 frame probing failed: -71 [ 234.419727][ T4315] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 234.434062][ T5522] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 234.462673][ T5522] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 234.483167][ T5522] usb 6-1: USB disconnect, device number 9 [ 234.616962][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 234.626776][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.663512][ T4315] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.692119][ T4315] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 234.716324][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.742343][ T4315] usb 3-1: config 0 descriptor?? [ 234.774775][ T4315] hub 3-1:0.0: USB hub found [ 234.965041][ T4315] hub 3-1:0.0: 1 port detected [ 235.217302][ T8012] ------------[ cut here ]------------ [ 235.222863][ T8012] WARNING: CPU: 0 PID: 8012 at kernel/workqueue.c:1441 __queue_work+0xe2d/0xfb0 [ 235.231956][ T8012] Modules linked in: [ 235.235893][ T8012] CPU: 0 PID: 8012 Comm: syz.0.1212 Not tainted syzkaller #0 [ 235.243326][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.253449][ T8012] RIP: 0010:__queue_work+0xe2d/0xfb0 [ 235.258784][ T8012] Code: e9 9d fc ff ff 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 0f 8c c7 fc ff ff 48 8b 3c 24 e8 dd 23 7f 00 e9 b9 fc ff ff e8 a3 17 2e 00 <0f> 0b 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8d 17 2e 00 [ 235.262483][ T8011] sctp: [Deprecated]: syz.6.1214 (pid 8011) Use of struct sctp_assoc_value in delayed_ack socket option. [ 235.262483][ T8011] Use struct sctp_sack_info instead [ 235.278462][ T8012] RSP: 0018:ffffc9000d6ffae8 EFLAGS: 00010083 [ 235.278489][ T8012] RAX: ffffffff81546f0d RBX: 0000000000010000 RCX: 0000000000080000 [ 235.278504][ T8012] RDX: ffffc9000df9a000 RSI: 0000000000000085 RDI: 0000000000000086 [ 235.278520][ T8012] RBP: 0000000000000000 R08: ffff8880781b10c7 R09: 1ffff1100f036218 [ 235.278535][ T8012] R10: dffffc0000000000 R11: ffffed100f036219 R12: ffff88805e758000 [ 235.278552][ T8012] R13: ffff88805e7581c0 R14: 0000000000000008 R15: ffff888055a5a301 [ 235.278567][ T8012] FS: 00007fc84a23a6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 235.278585][ T8012] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 235.278600][ T8012] CR2: 00007fc84a239ff8 CR3: 000000007db4f000 CR4: 00000000003526f0 [ 235.278619][ T8012] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 235.278632][ T8012] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 235.278647][ T8012] Call Trace: [ 235.278654][ T8012] [ 235.278664][ T8012] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 235.278705][ T8012] ? lockdep_hardirqs_off+0x70/0x100 [ 235.278732][ T8012] queue_work_on+0x124/0x1f0 [ 235.278756][ T8012] ? wq_worker_last_func+0x40/0x40 [ 235.278775][ T8012] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.278802][ T8012] ? _raw_spin_unlock+0x40/0x40 [ 235.278829][ T8012] ? skb_queue_tail+0x2c/0xf0 [ 235.278868][ T8012] hci_recv_frame+0x528/0x640 [ 235.278899][ T8012] ? skb_pull+0xbd/0x1d0 [ 235.278920][ T8012] vhci_write+0x345/0x460 [ 235.438053][ T8012] vfs_write+0x4b1/0xa30 [ 235.442344][ T8012] ? file_end_write+0x250/0x250 [ 235.447242][ T8012] ? __fget_files+0x43d/0x4b0 [ 235.451954][ T8012] ? __fdget_pos+0x1d4/0x360 [ 235.456575][ T8012] ? ksys_write+0x71/0x250 [ 235.461035][ T8012] ksys_write+0x14c/0x250 [ 235.465403][ T8012] ? __ia32_sys_read+0x80/0x80 [ 235.470205][ T8012] ? lockdep_hardirqs_on+0x94/0x140 [ 235.475435][ T8012] do_syscall_64+0x4c/0xa0 [ 235.479894][ T8012] ? clear_bhb_loop+0x60/0xb0 [ 235.484603][ T8012] ? clear_bhb_loop+0x60/0xb0 [ 235.489308][ T8012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.495404][ T8012] RIP: 0033:0x7fc84935d68e [ 235.499855][ T8012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.519501][ T8012] RSP: 002b:00007fc84a239fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.527951][ T8012] RAX: ffffffffffffffda RBX: 00007fc84a23a6c0 RCX: 00007fc84935d68e [ 235.535946][ T8012] RDX: 0000000000000022 RSI: 0000200000000040 RDI: 00000000000000ca [ 235.543945][ T8012] RBP: 00007fc849432d6f R08: 0000000000000000 R09: 0000000000000000 [ 235.551940][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.559932][ T8012] R13: 00007fc849616128 R14: 00007fc849616090 R15: 00007fffd7605708 [ 235.567949][ T8012] [ 235.570989][ T8012] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 235.578280][ T8012] CPU: 0 PID: 8012 Comm: syz.0.1212 Not tainted syzkaller #0 [ 235.585666][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 235.595738][ T8012] Call Trace: [ 235.599040][ T8012] [ 235.601990][ T8012] dump_stack_lvl+0x188/0x24e [ 235.606704][ T8012] ? memcpy+0x3c/0x60 [ 235.610702][ T8012] ? show_regs_print_info+0x12/0x12 [ 235.615923][ T8012] ? load_image+0x400/0x400 [ 235.620487][ T8012] panic+0x2e5/0x730 [ 235.624419][ T8012] ? bpf_jit_dump+0xd0/0xd0 [ 235.628966][ T8012] __warn+0x2f8/0x4f0 [ 235.632979][ T8012] ? __queue_work+0xe2d/0xfb0 [ 235.637676][ T8012] ? __queue_work+0xe2d/0xfb0 [ 235.642381][ T8012] report_bug+0x2ba/0x4f0 [ 235.646748][ T8012] ? __queue_work+0xe2d/0xfb0 [ 235.651446][ T8012] handle_bug+0x3a/0x70 [ 235.655629][ T8012] exc_invalid_op+0x16/0x40 [ 235.660165][ T8012] asm_exc_invalid_op+0x16/0x20 [ 235.665046][ T8012] RIP: 0010:__queue_work+0xe2d/0xfb0 [ 235.670360][ T8012] Code: e9 9d fc ff ff 48 8b 0c 24 80 e1 07 80 c1 03 38 c1 0f 8c c7 fc ff ff 48 8b 3c 24 e8 dd 23 7f 00 e9 b9 fc ff ff e8 a3 17 2e 00 <0f> 0b 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 8d 17 2e 00 [ 235.690112][ T8012] RSP: 0018:ffffc9000d6ffae8 EFLAGS: 00010083 [ 235.696212][ T8012] RAX: ffffffff81546f0d RBX: 0000000000010000 RCX: 0000000000080000 [ 235.704208][ T8012] RDX: ffffc9000df9a000 RSI: 0000000000000085 RDI: 0000000000000086 [ 235.712199][ T8012] RBP: 0000000000000000 R08: ffff8880781b10c7 R09: 1ffff1100f036218 [ 235.720183][ T8012] R10: dffffc0000000000 R11: ffffed100f036219 R12: ffff88805e758000 [ 235.728190][ T8012] R13: ffff88805e7581c0 R14: 0000000000000008 R15: ffff888055a5a301 [ 235.736190][ T8012] ? __queue_work+0xe2d/0xfb0 [ 235.740898][ T8012] ? __queue_work+0xe2d/0xfb0 [ 235.745594][ T8012] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 235.751606][ T8012] ? lockdep_hardirqs_off+0x70/0x100 [ 235.756915][ T8012] queue_work_on+0x124/0x1f0 [ 235.761519][ T8012] ? wq_worker_last_func+0x40/0x40 [ 235.766667][ T8012] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 235.772583][ T8012] ? _raw_spin_unlock+0x40/0x40 [ 235.777455][ T8012] ? skb_queue_tail+0x2c/0xf0 [ 235.782152][ T8012] hci_recv_frame+0x528/0x640 [ 235.786858][ T8012] ? skb_pull+0xbd/0x1d0 [ 235.791118][ T8012] vhci_write+0x345/0x460 [ 235.795474][ T8012] vfs_write+0x4b1/0xa30 [ 235.799747][ T8012] ? file_end_write+0x250/0x250 [ 235.804624][ T8012] ? __fget_files+0x43d/0x4b0 [ 235.809361][ T8012] ? __fdget_pos+0x1d4/0x360 [ 235.813986][ T8012] ? ksys_write+0x71/0x250 [ 235.818517][ T8012] ksys_write+0x14c/0x250 [ 235.822876][ T8012] ? __ia32_sys_read+0x80/0x80 [ 235.827668][ T8012] ? lockdep_hardirqs_on+0x94/0x140 [ 235.832885][ T8012] do_syscall_64+0x4c/0xa0 [ 235.837329][ T8012] ? clear_bhb_loop+0x60/0xb0 [ 235.842034][ T8012] ? clear_bhb_loop+0x60/0xb0 [ 235.846830][ T8012] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 235.852754][ T8012] RIP: 0033:0x7fc84935d68e [ 235.857195][ T8012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 235.876820][ T8012] RSP: 002b:00007fc84a239fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.885276][ T8012] RAX: ffffffffffffffda RBX: 00007fc84a23a6c0 RCX: 00007fc84935d68e [ 235.893279][ T8012] RDX: 0000000000000022 RSI: 0000200000000040 RDI: 00000000000000ca [ 235.901283][ T8012] RBP: 00007fc849432d6f R08: 0000000000000000 R09: 0000000000000000 [ 235.909270][ T8012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.917259][ T8012] R13: 00007fc849616128 R14: 00007fc849616090 R15: 00007fffd7605708 [ 235.925260][ T8012] [ 235.928965][ T8012] Kernel Offset: disabled [ 235.933327][ T8012] Rebooting in 86400 seconds..