last executing test programs: 1m19.462600058s ago: executing program 0 (id=3429): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000580)={&(0x7f0000000300)={0xfc, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x800}, @ETHTOOL_A_BITSET_VALUE={0x41, 0x4, "562b7db67e9d989ad1d9c45e1c2ff50a7159df3b2f232a8a8c07915c4e27fb99cea7e9caee5e4f2dceb02b924698762dfabd4b0af229a0912691291ded"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x18, 0x4, "746cd0922cd04e1d9569d3404eb410e514de6060"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x6, 0x2, 0x9}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 1m19.241604845s ago: executing program 0 (id=3432): syz_mount_image$f2fs(&(0x7f0000001080), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000001300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000100)={0x1, 0xbe, 0x1, 0x9}) 1m18.105342972s ago: executing program 0 (id=3448): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000100)) 1m17.166754002s ago: executing program 0 (id=3464): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$eJzs3M1vG0UbAPBn13H65k0hoZSvlo9AQVQIkqYt0AMHQCBxKBISHOBoJaEqTQtqgkSrSKQcygkhJO6II/8CJ7ggxAmJK9xRpQr1QsvJaL27iZ3YTtPYcYt/P8ntM/vhmce7Y8/u2AlgaE1l/yQReyPi94iYyIutG0zl/12/tjJ349rKXBL1+tt/JY3t/r62MlduWu433lyIJA62qXfpwsUztcXFhfNFeWb57EczSxcuPnf6bO3UwqmFc0dPnDh+bPbFF44+35M8xyMtojfe++rNk1+05L8hjx6Z6rbyqXq9x9UN1l1N8cgA28H2VIrjVW30/4moNB29iXj9s7XCpwNqINA39Xq9Pt559Wod+A9LorWsy8OwKD/oy+vfdtfBL/dt9DF4V1/JL4CyvK8Xj3zNyNodg+qG69temoqId1f/+SZ7RH/uQwAAtPghG/88m412Vuayscf6+CON+5u2u7uYG5qMiHsiYl9E3BvnYn9E3BfR2PaBiHhwm/U3TZI0hpmbxz/plVtO7iZk47+Xirmt1vFfOfqLyUqjdCEvRDV5//TiwpHiNTkc1T1ZebZLHT++9tuXndY1j/+yR1Z/ORYs2nFlZE/rPvO15dqtZ9zq6qWIAyPt8k/WZgKSiHgoIg60e4J06zpOP/Pdw53WbZ1/Fz2YaKp/G/F0fvxXY0P+paT7/OTM/2Jx4chMeVZs9suvl9/qVP+O8u+B7Pj/v+35v5b/ZNI8X7u0/Tou//F5x2uaqWoRbOP8X60t10aTdxrxaLHsk9ry8vnZiNHkZN7o5uVH1/cty+X2Wf6HD7Xv//ti/ZU4GBHZSfxIRDwaEY8Vx+7xiHgiIg51yf/nV5/8YOOysTL/2+D4z2/r+K8Ho9G6JG2zTRZUzvz0fUulk+thkf+N7u9/xxvR4WLJzbz/bW5F+2Cnrx8AAADcCdKI2BtJOr0Wp+n0dP4d/v351Hfm43Pz+W8EJqOalne6Jpruh84Wl/V5+VJE5F8tKNcfi7Rx3/jrylijPD334eL8QDMHxjv0/8yflUG3Dug7P9iC4aX/w/Dq2v+ru9cOYPdt6v9d+/yevrYF2F1tPv/HBtEOYPe1G//7ez8wHDb0f9N+METc/4fhpf/D8NL/YSgtjcXWP5LvGpTPdIu7bxVMROy0hYMJonpbNKNvQaR9r2K0v6dW34LkDmzzpmBw70kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99G8AAAD//1KFzjw=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m16.393526176s ago: executing program 0 (id=3479): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) ioctl$sock_SIOCOUTQNSD(r0, 0x8905, &(0x7f00000000c0)) 1m16.325467438s ago: executing program 1 (id=3481): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) 1m16.232168892s ago: executing program 1 (id=3483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x20}}, 0x80) 1m16.114561496s ago: executing program 1 (id=3485): r0 = socket(0x10, 0x3, 0x4) setuid(0xee01) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x4, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0x1}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xfc, 0x2200, 0x80000a, 0x0, 0x8001, 0x7e}}, {0x4}}, {{0x1c, 0x1, {0x6, 0x4, 0x18, 0xd, 0x0, 0x8, 0x6}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x400c012}, 0x0) 1m15.884681552s ago: executing program 1 (id=3490): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000000), 0x1, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m15.131317196s ago: executing program 1 (id=3499): r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200000, 0x16e) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) 1m13.910299446s ago: executing program 0 (id=3508): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) 1m13.694928872s ago: executing program 32 (id=3508): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000400)) 1m12.719473504s ago: executing program 1 (id=3515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1m12.404650263s ago: executing program 33 (id=3515): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 38.282907111s ago: executing program 5 (id=3863): syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000100)=ANY=[], 0xff, 0x234, &(0x7f0000000900)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0xa) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x0) 36.351656562s ago: executing program 5 (id=3888): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)={0x1c, r0, 0x5, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 36.041892712s ago: executing program 5 (id=3891): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 35.102949192s ago: executing program 5 (id=3902): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x1010051, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@delalloc}, {@grpquota}, {@nouid32}, {@nouid32}, {@data_writeback}]}, 0x2, 0x55d, &(0x7f0000000e80)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, 0x0) 34.336928547s ago: executing program 5 (id=3905): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='noadinicb,partition=00000000000000000005,noadinicb,mode=00000000000000000003324,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c766f6c756d653d303030303030303030303030302c0000000000000000501cb5d7c12e5184d12ef849f01234cc0632d887ab83b9a499f253a549724d60457bb58a75adb74f3af03ad3ce885b137f28e47a314f31f232c3a9f530c68d8ba34bf01945e243cbc23403afab131b58d3a2aa64136e0a7c462f6b7050c665746acc89d02bf21ece3866519a7826f4e18fda118954b3c6e9738bfb06d6c52c8d07"], 0x1, 0x489, &(0x7f0000000ec0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) 30.999769853s ago: executing program 5 (id=3942): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40}) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0xee01, 0x1000) 30.843594807s ago: executing program 34 (id=3942): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x9, 0xffffffff, 0x40}) fchownat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x0, 0xee01, 0x1000) 5.198905924s ago: executing program 6 (id=4201): syz_mount_image$adfs(&(0x7f0000009e00), &(0x7f0000000180)='./file1\x00', 0x4002, &(0x7f0000000040)={[{@gid}, {@ftsuffix={'ftsuffix', 0x3d, 0x2}}, {}, {@gid}, {@ownmask}, {@ftsuffix={'ftsuffix', 0x3d, 0x7fff}}, {@othmask}, {@ftsuffix={'ftsuffix', 0x3d, 0xfffffffffffffff8}}], [{@uid_lt}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x66, 0x31, 0x34, 0x37, 0x37, 0x32, 0x32], 0x2d, [0x31, 0x34, 0x37, 0x32], 0x2d, [0x37, 0x35, 0x66, 0x39], 0x2d, [0x63, 0x63, 0x36, 0x36], 0x2d, [0x61, 0x30, 0x38, 0x37, 0x31, 0x62, 0x62, 0x66]}}}]}, 0x1, 0x9df2, &(0x7f0000009e40)="$eJwk0mMXngeDAOHUtm1zatu2bdtT97lttKltK0lt27ZtR3ves/ML5sM1bIDDBzhigPcM8N4B3jfA+wf4wAAfHOBDA3x4gI8M8NEBPjbAxwf4xACfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8B/jfAkQMcNcDRAxwzwLEDHBLgOAGOG+B4AY4f4AQBThjgRAFOHOAkAU4a4GQBTh7gFAFOGeBUAU4d4DQBThvgdAFOH+AMAc4Y4EwBzhzgLAHOGuBsAc4e4BwBzhngXAHOHeA8Ac4b4HwBzh/gAgEuGOBCAS4c4CIBLhrgYgEuHuASAS4Z4FIBLh0gAS4T4LIBLhfg8gGuEOCKAa4U4MoBrhLgqgGuFuDqAa4R4JoBrhXg2gGuE+C6Aa4X4PoBbhDghgFuFODGAW4S4KYBbhbg5gFuEeCWAW4V4NYBbhPgtgFuF+D2Ae4Q4I4B7hTgzgHuEuCuAe4W4O4B7hHgngHuFeDeAe4T4L4B7hfg/gEeEOCBAR4U4MEBHhLgoQEeFuDhAR4R4JEBHhXg0QEeE+CxAR4X4PEBnhDgiQGeFODJAZ4SoAGeGuBpAZ4e4BkBnhngWQGeHeA5AQ4CDAIMA4wCjANMAkwDzALMAywCLAOsAqwDbAJsA+wC7AM8N8DzAhwa4PkBXhDghQFeFODFAV4S4KUBXhbg5QFeEeCVAV4V4NUBXhPgtQFeF+D1Ad4Q4I0B3hTgzQHeEuCtAd4W4O0B3hHgnQHeFeDdAQ4LcHiAIwK8J8B7A7wvwPsDfCDABwN8KMCHA3wkwEcDfCzAxwN8IsAnA3wqwKcDfCbAZwN8LsDnA3whwBcDfCnAlwN8JcBXA3wtwNcDfCPANwN8K8C3A3wnwHcDfC/A9wP8IMAPA/wowI8D/CTATwP8LMDPA/wiwC8D/CrArwP8JsBvA/wuwO8D/CHAHwP8KcCfA/wlwF8D/C3A3wP8I8A/A/wrwL8D/CfAfwP8L8CRAY4KcHSAYwIcG+CQEMcJcdwQxwtx/BAnCHHCECcKceIQJwlx0hAnC3HyEKcIccoQpwpx6hCnCXHaEKcLcfoQZwhxxhBnCnHmEGcJcdYQZwtx9hDnCHHOEOcKce4Q5wlx3hDnC3H+EBcIccEQFwpx4RAXCXHREBcLcfEQlwhxyRCXCnHpEAlxmRCXDXG5EJcPcYUQVwxxpRBXDnGVEFcNcbUQVw9xjRDXDHGtENcOcZ0Q1w1xvRDXD3GDEDcMcaMQNw5xkxA3DXGzEDcPcYsQtwxxqxC3DnGbELcNcbsQtw9xhxB3DHGnEHcOcZcQdw1xtxB3D3GPEPcMca8Q9w5xnxD3DXG/EPcP8YAQDwzxoBAPDvGQEA8N8bAQDw/xiBCPDPGoEI8O8ZgQjw3xuBCPD/GEEE8M8aQQTw7xlBAN8dQQTwvx9BDPCPHMEM8K8ewQzwlxEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4rkhnhfi0BDPD/GCEC8M8aIQLw7xkhAvDfGyEC8P8YoQrwzxqhCvDvGaEK8N8boQrw/xhhBvDPGmEG8O8ZYQbw3xthBvD/GOEO8M8a4Q7w5xWIjDQxwR4j0h3hvifSHeH+IDIT4Y4kMhPhziIyE+GuJjIT4e4hMhPhniUyE+HeIzIT4b4nMhPh/iCyG+GOJLIb4c4ishvhriayG+HuIbIb4Z4lshvh3iOyG+G+J7Ib4f4gchfhjiRyF+HOInIX4a4mchfh7iFyF+GeJXIX4d4jchfhvidyF+H+IPIf4Y4k8h/hziLyH+GuJvIf4e4h8h/hniXyH+HeI/If4b4n8hjgxxVIijQxwT4tgQh0Q4ToTjRjhehONHOEGEE0Y4UYQTRzhJhJNGOFmEk0c4RYRTRjhVhFNHOE2E00Y4XYTTRzhDhDNGOFOEM0c4S4SzRjhbhLNHOEeEc0Y4V4RzRzhPhPNGOF+E80e4QIQLRrhQhAtHuEiEi0a4WISLR7hEhEtGuFSES0dIhMtEuGyEy0W4fIQrRLhihCtFuHKEq0S4aoSrRbh6hGtEuGaEa0W4doTrRLhuhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0R4YoQnRXhyhKdEaISnRnhahKdHeEaEZ0Z4VoRnR3hOhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wjPjfC8CIdGeH6EF0R4YYQXRXhxhJdEeGmEl0V4eYRXRHhlhFdFeHWE10R4bYTXRXh9hDdEeGOEN0V4c4S3RHhrhLdFeHuEd0R4Z4R3RXh3hMMiHB7hiAjvifDeCO+L8P4IH4jwwQgfivDhCB+J8NEIH4vw8QifiPDJCJ+K8OkIn4nw2Qifi/D5CF+I8MUIX4rw5QhfifDVCF+L8PUI34jwzQjfivDtCN+J8N0I34vw/Qg/iPDDCD+K8OMIP4nw0wg/i/DzCL+I8MsIv4rw6wi/ifDbCL+L8PsIf4jwxwh/ivDnCH+J8NcIf4vw9wj/iPDPCP+K8O8I/4nw3wj/i3BkhKMiHB3hmAjHRjgkxnFiHDfG8WIcP8YJYpwwxolinDjGSWKcNMbJYpw8xilinDLGqWKcOsZpYpw2xulinD7GGWKcMcaZYpw5xllinDXG2WKcPcY5YpwzxrlinDvGeWKcN8b5Ypw/xgViXDDGhWJcOMZFYlw0xsViXDzGJWJcMsalYlw6RmJcJsZlY1wuxuVjXCHGFWNcKcaVY1wlxlVjXC3G1WNcI8Y1Y1wrxrVjXCfGdWNcL8b1Y9wgxg1j3CjGjWPcJMZNY9wsxs1j3CLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M8JUZjPDXG02I8PcYzYjwzxrNiPDvGc2IcxBjEGMYYxRjHmMSYxpjFmMdYxFjGWMVYx9jE2MbYxdjHeG6M58U4NMbzY7wgxgtjvCjGi2O8JMZLY7wsxstjvCLGK2O8KsarY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2McFuPwGEfEeE+M98Z4X4z3x/hAjA/G+FCMD8f4SIyPxvhYjI/H+ESMT8b4VIxPx/hMjM/G+FyMz8f4QowvxvhSjC/H+EqMr8b4Woyvx/hGjG/G+FaMb8f4TozvxvhejO/H+EGMH8b4UYwfx/hJjJ/G+FmMn8f4RYxfxvhVjF/H+E2M38b4XYzfx/hDjD/G+FOMP8f4S4y/xvhbjL/H+EeMf8b4V4x/x/hPjP/G+F+MI2McFePoGMfEODbGIQmOk+C4CY6X4PgJTpDghAlOlODECU6S4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpXg0gmS4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCZZD8IgEj0zwqASPTvCYBI9N8LgEj0/whARPTPCkBE9O8JQETfDUBE9L8PQEz0jwzATPSvDsBM9JcJBgkGCYYJRgnGCSYJpglmCeYPG/hwSrBOsEmwTbBLsE+wTPTfC8BIcmeH6CFyR4YYIXJXhxgpckeGmClyV4eYJXJHhlglcleHWC1yR4bYLXJXh9gjckeGOCNyV4c4K3JHhrgrcleHuCdyR4Z4J3JXh3gsMSHJ7giATvSfDeBO9L8P4EH0jwwQQfSvDhBB9J8NEEH0vw8QSfSPDJBJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMEP0nw0wQ/S/DzBL9I8MsEv0rw6wS/SfDbBL9L8PsEf0jwxwR/SvDnBH9J8NcEf0vw9wT/SPDPBP9K8O8E/0nw3wT/S3BkgqMSHJ3gmATHJjgkxXFSHDfF8VIcP8UJUpwwxYlSnDjFSVKcNMXJUpw8xSlSnDLFqVKcOsVpUpw2xelSnD7FGVKcMcWZUpw5xVlSnDXF2VKcPcU5UpwzxblSnDvFeVKcN8X5Upw/xQVSXDDFhVJcOMVFUlw0xcVSXDzFJVJcMsWlUlw6RVJcJsVlU1wuxeVTXCHFFVNcKcWVU1wlxVVTXC3F1VNcI8U1U1wrxbVTXCfFdVNcL8X1U9wgxQ1T3CjFjVPcJMVNU9wsxc1T3CLFLVPcKsWtU9wmxW1T3C7F7VPcIcUdU9wpxZ1T3CXFXVPcLcXdU9wjxT1T3CvFvVPcJ8V9U9wvxf1TPCDFA1M8KMWDUzwkxUNTPCzFw1M8IsUjUzwqxaNTPCbFY1M8LsXjUzwhxRNTPCnFk1M8JUVTPDXF01I8PcUzUjwzxbNSPDvFc1IcpBikGKYYpRinmKSYppilmKdYpFimWKVYp9ik2KbYpdineG6K56U4NMXzU7wgxQtTvCjFi1O8JMVLU7wsxctTvCLFK1O8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTvCvFu1McluLwFEekeE+K96Z4X4r3p/hAig+m+FCKD6f4SIqPpvhYio+n+ESKT6b4VIpPp/hMis+m+FyKz6f4QoovpvhSii+n+EqKr6b4Woqvp/hGim+m+FaKb6f4Torvpvheiu+n+EGKH6b4UYofp/hJip+m+FmKn6f4RYpfpvhVil+n+E2K36b4XYrfp/hDij+m+FOKP6f4S4q/pvhbir+n+EeKf6b4V4p/p/hPiv+m+F+KI1McleLoFMekODbFIRmOk+G4GY6X4fgZTpDhhBlOlOHEGU6S4aQZTpbh5BlOkeGUGU6V4dQZTpPhtBlOl+H0Gc6Q4YwZzpThzBnOkuGsGc6W4ewZzpHhnBnOleHcGc6T4bwZzpfh/BkukOGCGS6U4cIZLpLhohkuluHiGS6R4ZIZLpXh0hmS4TIZLpvhchkun+EKGa6Y4UoZrpzhKhmumuFqGa6e4RoZrpnhWhmuneE6Ga6b4XoZrp/hBhlumOFGGW6c4SYZbprhZhlunuEWGW6Z4VYZbp3hNhlum+F2GW6f4Q4Z7pjhThnunOEuGe6a4W4Z7p7hHhnumeFeGe6d4T4Z7pvhfhnun+EBGR6Y4UEZHpzhIRkemuFhGR6e4REZHpnhURkeneExGR6b4XEZHp/hCRmemOFJGZ6c4SkZmuGpGZ6W4ekZnpHhmRmeleHZGZ6T4SDDIMMwwyjDOMMkwzTDLMM8wyLDMsMqwzrDJsM2wy7DPsNzMzwvw6EZnp/hBRlemOFFGV6c4SUZXprhZRlenuEVGV6Z4VUZXp3hNRlem+F1GV6f4Q0Z3pjhTRnenOEtGd6a4W0Z3p7hHRnemeFdGd6d4bAMh2c4IsN7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMMnMnwyw6cyfDrDZzJ8NsPnMnw+wxcyfDHDlzJ8OcNXMnw1w9cyfD3DNzJ8M8O3Mnw7w3cyfDfD9zJ8P8MPMvwww48y/DjDTzL8NMPPMvw8wy8y/DLDrzL8OsNvMvw2w+8y/D7DHzL8McOfMvw5w18y/DXD3zL8PcM/Mvwzw78y/DvDfzL8N8P/MhyZ4agMR2c4JsOxGQ7JcZwcx81xvBzHz3GCHCfMcaIcJ85xkhwnzXGyHCfPcYocp8xxqhynznGaHKfNcbocp89xhhxnzHGmHGfOcZYcZ81xthxnz3GOHOfMca4c585xnhznzXG+HOfPcYEcF8xxoRwXznGRHBfNcbEcF89xiRyXzHGpHJfOkRyXyXHZHJfLcfkcV8hxxRxXynHlHFfJcdUcV8tx9RzXyHHNHNfKce0c18lx3RzXy3H9HDfIccMcN8px4xw3yXHTHDfLcfMct8hxyxy3ynHrHLfJcdsct8tx+xx3yHHHHHfKceccd8lx1xx3y3H3HPfIcc8c98px7xz3yXHfHPfLcf8cD8jxwBwPyvHgHA/J8dAcD8vx8ByPyPHIHI/K8egcj8nx2ByPy/H4HE/I8cQcT8rx5BxPydEcT83xtBxPz/GMHM/M8awcz87xnBwHOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2OfY5npvjeTkOzfH8HC/I8cIcL8rx4hwvyfHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78rx7hyH5Tg8xxE53pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5PpHjkzk+lePTOT6T47M5Ppfj8zm+kOOLOb6U48s5vpLjqzm+luPrOb6R45s5vpXj2zm+k+O7Ob6X4/s5fpDjhzl+lOPHOX6S46c5fpbj5zl+keOXOX6V49c5fpPjtzl+l+P3Of6Q4485/pTjzzn+kuOvOf6W4+85/pHjnzn+lePfOf6T4785/pfjyBxH5Tg6xzE5js1xSIHjFDhugeMVOH6BExQ4YYETFThxgZMUOGmBkxU4eYFTFDhlgVMVOHWB0xQ4bYHTFTh9gTMUOGOBMxU4c4GzFDhrgbMVOHuBcxQ4Z4FzFTh3gfMUOG+B8xU4f4ELFLhggQsVuHCBixS4aIGLFbh4gUsUuGSBSxW4dIEUuEyByxa4XIHLF7hCgSsWuFKBKxe4SoGrFrhagasXuEaBaxa4VoFrF7hOgesWuF6B6xe4QYEbFrhRgRsXuEmBmxa4WYGbF7hFgVsWuFWBWxe4TYHbFrhdgdsXuEOBOxa4U4E7F7hLgbsWuFuBuxe4R4F7FrhXgXsXuE+B+xa4X4H7F3hAgQcWeFCBBxd4SIGHFnhYgYcXeESBRxZ4VIFHF3hMgccWeFyBxxd4QoEnFnhSgScXeEqBFnhqgacVeHqBZxR4ZoFnFXh2gecUOCgwKDAsMCowLjApMC0wKzAvsCiwLLAqsC6wKbAtsCuwL/DcAs8rcGiB5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FnhXgXcXOKzA4QWOKPCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwL/LfC/AkcWOKrA0QWOKXBsgUNKHKfEcUscr8TxS5ygxAlLnKjEiUucpMRJS5ysxMlLnKLEKUucqsSpS5ymxGlLnK7E6UucocQZS5ypxJlLnKXEWUucrcTZS5yjxDlLnKvEuUucp8R5S5yvxPlLXKDEBUtcqMSFS1ykxEVLXKzExUtcosQlS1yqxKVLpMRlSly2xOVKXL7EFUpcscSVSly5xFVKXLXE1UpcvcQ1SlyzxLVKXLvEdUpct8T1Sly/xA1K3LDEjUrcuMRNSty0xM1K3LzELUrcssStSty6xG1K3LbE7UrcvsQdStyxxJ1K3LnEXUrctcTdSty9xD1K3LPEvUrcu8R9Sty3xP1K3L/EA0o8sMSDSjy4xENKPLTEw0o8vMQjSjyyxKNKPLrEY0o8tsTjSjy+xBNKPLHEk0o8ucRTSrTEU0s8rcTTSzyjxDNLPKvEs0s8p8RBiUGJYYlRiXGJSYlpiVmJeYlFiWWJVYl1iU2JbYldiX2J55Z4XolDSzy/xAtKvLDEi0q8uMRLSry0xMtKvLzEK0q8ssSrSry6xGtKvLbE60q8vsQbSryxxJtKvLnEW0q8tcTbSry9xDtKvLPEu0q8u8RhJQ4vcUSJ95R4b4n3lXh/iQ/8z/mQIUMeKvHhEh8p8dESHyvx8RKfKPHJEp8q8emhQ/6/Ep8r8fkSXyjxxRJfKvHlEl8p8dUSXyvx9RLfKPHNEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xJ/K/H3Ev8o8c8S/yrx7xL/KfHfEv8rcWSJo0ocXeKYEseWOKTCcSoct8LxKhy/wgkqnLDCiSqcuMJJKpy0wskqnLzCKSqcssKpKpy6wmkqnLbC6SqcvsIZKpyxwpkqnLnCWSqctcLZKpy9wjkqnLPCuSqcu8J5Kpy3wvkqnL/CBSpcsMKFKly4wkUqXLTCxSpcvMIlKlyywqUqXLpCKlymwmUrXK7C5StcocIVK1ypwpUrXKXCVStcrcLVK1yjwjUrXKvCtStcp8J1K1yvwvUr3KDCDSvcqMKNK9ykwk0r3KzCzSvcosItK9yqwq0r3KbCbSvcrsLtK9yhwh0r3KnCnSvcpcJdK9ytwt0r3KPCPSvcq8K9K9ynwn0r3K/C/Ss8oMIDKzyowoMrPKTCQys8rMLDKzyiwiMrPKrCoys8psJjKzyuwuMrPKHCEys8qcKTKzylQis8tcLTKjy9wjMqPLPCsyo8u8JzKhxUGFQYVhhVGFeYVJhWmFWYV1hUWFZYVVhX2FTYVthV2Fd4boXnVTi0wvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7KxxW4fAKR1R4T4X3VnhfhfdX+ECFD1b4UIUPV/hIhY9W+FiFj1f4RIVPVvhUhU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9W+FuFv1f4R4V/VvhXhX9X+E+F/1b4X4UjKxxV4egKx1Q4tsIhNY5T47g1jlfj+DVOUOOENU5U48Q1TlLjpDVOVuPkNU5R45Q1TlXj1DVOU+O0NU5X4/Q1zlDjjDXOVOPMNc5S46w1zlbj7DXOUeOcNc5V49w1zlPjvDXOV+P8NS5Q44I1LlTjwjUuUuOiNS5W4+I1LlHjkjUuVePSNVLjMjUuW+NyNS5f4wo1rljjSjWuXOMqNa5a42o1rl7jGjWuWeNaNa5d4zo1rlvjejWuX+MGNW5Y40Y1blzjJjVuWuNmNW5e4xY1blnjVjVuXeM2NW5b43Y1bl/jDjXuWONONe5c4y417lrjbjXuXuMeNe5Z41417l3jPjXuW+N+Ne5f4wE1HljjQTUeXOMhNR5a42E1Hl7jETUeWeNRNR5d4zE1HlvjcTUeX+MJNZ5Y40k1nlzjKTVa46k1nlbj6TWeUeOZNZ5V49k1nlPjoMagxrDGqMa4xqTGtMasxrzGosayxqrGusamxrbGrsa+xnNrPK/GoTWeX+MFNV5Y40U1XlzjJTVeWuNlNV5e4xU1XlnjVTVeXeM1NV5b43U1Xl/jDTXeWONNNd5c4y013lrjbTXeXuMdNd5Z41013l3jsBqH1ziixntqvLfG+2q8v8YHanywxodqfLjGR2p8tMbHany8xidqfLLGp2p8usZnany2xudqfL7GF2p8scaXany5xldqfLXG12p8vcY3anyzxrdqfLvGd2p8t8b3any/xg9q/LDGj2r8uMZPavy0xs9q/LzGL2r8ssavavy6xm9q/LbG72r8vsYfavyxxp9q/LnGX2r8tcbfavy9xj9q/LPGv2r8u8Z/avy3xv9qHFnjqBpH1zimxrE1DmlwnAbHbXC8BsdvcIIGJ2xwogYnbnCSBidtcLIGJ29wiganbHCqBqducJoGp21wuganb3CGBmdscKYGZ25wlgZnbXC2BmdvcI4G52xwrgbnbnCeBudtcL4G529wgQYXbHChBhducJEGF21wsQYXb3CJBpdscKkGl26QBpdpcNkGl2tw+QZXaHDFBldqcOUGV2lw1QZXa3D1BtdocM0G12pw7QbXaXDdBtdrcP0GN2hwwwY3anDjBjdpcNMGN2tw8wa3aHDLBrdqcOsGt2lw2wa3a3D7BndocMcGd2pw5wZ3aXDXBndrcPcG92hwzwb3anDvBvdpcN8G92tw/wYPaPDABg9q8OAGD2nw0AYPa/DwBo9o8MgGj2rw6AaPafDYBo9r8PgGT2jwxAZPavDkBk9p0AZPbfC0Bk9v8IwGz2zwrAbPbvCcBgcNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g2e2+B5DQ5t8PwGL2jwwgYvavDiBi9p8NIGL2vw8gavaPDKBq9q8OoGr2nw2gava/D6Bm9o8MYGb2rw5gZvafDWBm9r8PYG72jwzgbvavDuBoc1OLzBEQ3e0+C9Dd7X4P0NPtDggw0+1ODDDT7S4KMNPtbg4w0+0eCTDT7V4NMNPtPgsw0+1+DzDb7Q4IsNvtTgyw2+0uCrDb7W4OsNvtHgmw2+1eDbDb7T4LsNvtfg+w1+0OCHDX7U4McNftLgpw1+1uDnDX7R4JcNftXg1w1+0+C3DX7X4PcN/tDgjw3+1ODPDf7S4K8N/tbg7w3+0eCfDf7V4N8N/tPgvw3+1+DIBkc1OLrBMQ2ObXBIi+O0OG6L47U4fosTtDhhixO1OHGLk7Q4aYuTtTh5i1O0OGWLU7U4dYvTtDhti9O1OH2LM7Q4Y4sztThzi7O0OGuLs7U4e4tztDhni3O1OHeL87Q4b4vztTh/iwu0uGCLC7W4cIuLtLhoi4u1uHiLS7S4ZItLtbh0i7S4TIvLtrhci8u3uEKLK7a4Uosrt7hKi6u2uFqLq7e4RotrtrhWi2u3uE6L67a4Xovrt7hBixu2uFGLG7e4SYubtrhZi5u3uEWLW7a4VYtbt7hNi9u2uF2L27e4Q4s7trhTizu3uEuLu7a4W4u7t7hHi3u2uFeLe7e4T4v7trhfi/u3eECLB7Z4UIsHt3hIi4e2eFiLh7d4RItHtnhUi0e3eEyLx7Z4XIvHt3hCiye2eFKLJ7d4Sou2eGqLp7V4eotntHhmi2e1eHaL57Q4aDFoMWwxajFuMWkxbTFrMW+xaLFssWqxbrFpsW2xa7Fv8dwWz2txaIvnt3hBixe2eFGLF7d4SYuXtnhZi5e3eEWLV7Z4VYtXt3hNi9e2eF2L17d4Q4s3tnhTize3eEuLt7Z4W4u3t3hHi3e2eFeLd7c4rMXhLY5o8Z4W723xvhbvb/GBFh9s8aEWH27xkRYfbfGxFh9v8YkWn2zxqRafbvGZFp9t8bkWn2/xhRZfbPGlFl9u8ZUWX23xtRZfb/GNFt9s8a0W327xnRbfbfG9Ft9v8YMWP2zxoxY/bvGTFj9t8bMWP2/xixa/bPGrFr9u8ZsWv23xuxa/b/GHFn9s8acWf27xlxZ/bfG3Fn9v8Y8W/2zxrxb/bvGfFv9t8b8WR7Y4qsXRLY5pcWyLQzocp8NxOxyvw/E7nKDDCTucqMOJO5ykw0k7nKzDyTucosMpO5yqw6k7nKbDaTucrsPpO5yhwxk7nKnDmTucpcNZO5ytw9k7nKPDOTucq8O5O5ynw3k7nK/D+TtcoMMFO1yow4U7XKTDRTtcrMPFO1yiwyU7XKrDpTukw2U6XLbD5TpcvsMVOlyxw5U6XLnDVTpctcPVOly9wzU6XLPDtTpcu8N1Oly3w/U6XL/DDTrcsMONOty4w0063LTDzTrcvMMtOtyyw6063LrDbTrctsPtOty+wx063LHDnTrcucNdOty1w9063L3DPTrcs8O9Oty7w3063LfD/Trcv8MDOjyww4M6PLjDQzo8tMPDOjy8wyM6PLLDozo8usNjOjy2w+M6PL7DEzo8scOTOjy5w1M6tMNTOzytw9M7PKPDMzs8q8OzOzynw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12HfYfndnheh0M7PL/DCzq8sMOLOry4w0s6vLTDyzq8vMMrOryyw6s6vLrDazq8tsPrOry+wxs6vLHDmzq8ucNbOry1w9s6vL3DOzq8s8O7Ory7w2EdDu9wRIf3dHhvh/d1eH+HD3T4YIcPdfhwh490+GiHj3X4eIdPdPhkh091+HSHz3T4bIfPdfh8hy90+GKHL3X4coevdPhqh691+HqHb3T4Zodvdfh2h+90+G6H73X4focfdPhhhx91+HGHn3T4aYefdfh5h190+GWHX3X4dYffdPhth991+H2HP3T4Y4c/dfhzh790+GuHv3X4e4d/dPhnh391+HeH/3T4b4f/dTiyw1Edju5wTIdjOxzS4zg9jtvjeD2O3+MEPU7Y40Q9TtzjJD1O2uNkPU7e4xQ9TtnjVD1O3eM0PU7b43Q9Tt/jDD3O2ONMPc7c4yw9ztrjbD3O3uMcPc7Z41w9zt3jPD3O2+N8Pc7f4wI9LtjjQj0u3OMiPS7a42I9Lt7jEj0u2eNSPS7dIz0u0+OyPS7X4/I9rtDjij2u1OPKPa7S46o9rtbj6j2u0eOaPa7V49o9rtPjuj2u1+P6PW7Q44Y9btTjxj1u0uOmPW7W4+Y9btHjlj1u1ePWPW7T47Y9btfj9j3u0OOOPe7U48497tLjrj3u1uPuPe7R45497tXj3j3u0+O+Pe7X4/49HtDjgT0e1OPBPR7S46E9Htbj4T0e0eORPR7V49E9HtPjsT0e1+PxPZ7Q44k9ntTjyT2e0qM9ntrjaT2e3uMZPZ7Z41k9nt3jOT0Oegx6DHuMeox7THpMe8x6zHsseix7rHqse2x6bHvseux7PLfH83oc2uP5PV7Q44U9XtTjxT1e0uOlPV7W4+U9XtHjlT1e1ePVPV7T47U9Xtfj9T3e0OONPd7U48093tLjrT3e1uPtPd7R45093tXj3T0O63F4jyN6/o8AeACgswAAIJyXbdu6bNu2bfuyzffbyLZt27aNeevzgQE+OMCHBvjwAB8Z4KMDfGyAjw/wiQE+OcCnBvj0AJ8Z4LMDfG6Azw/whQG+OMCXBvjyAF8Z4KsDfG2Arw/wjQG+OcC3Bvj2AN8Z4LsDfG+A7w/wgwF+OMCPBvjxAD8Z4KcD/GyAnw/wiwF+OcCvBvj1AL8Z4LcD/G6A3w/whwH+OMCfBvjzAH8Z4K8D/G2Avw/wjwH+OcC/Bvj3AP8Z4L8D/G+AQwc4bIDDBzhigCMHOGqAowc4ZoBjBzhOgOMGOF6A4wc4QYATBjhRgEMCnDjASQKcNMDJApw8wCkCnDLAqQKcOsBpApw2wOkCnD7AGQKcMcCZApw5wFkCnDXA2QKcPcA5ApwzwLkCnDvAeQKcN8D5Apw/wAUCXDDAhQJcOMBFAlw0wMUCXDzAJQJcMsClAlw6QAJcJsBlA1wuwOUDXCHAFQNcKcCVA1wlwFUDXC3A1QNcI8A1A1wrwLUDXCfAdQNcL8D1A9wgwA0D3CjAjQPcJMBNA9wswM0D3CLALQPcKsCtA9wmwG0D3C7A7QPcIcAdA9wpwJ0D3CXAXQPcLcDdA9wjwD0D3CvAvQPcJ8B9A9wvwP0DPCDAAwM8KMCDAzwkwEMDPCzAwwM8IsAjAzwqwKMDPCbAYwM8LsDjAzwhwBMDPCnAkwM8JUADPDXA0wI8PcAzAjwzwLMCPDvAcwI8N8DzAjw/wAsCvDDAiwK8OMBLArw0wMsCvDzAKwK8MsCrArw6wGsCHAQYBBgGGAUYB5gEmAaYBZgHWARYBlgFWAfYBNgG2AXYB3htgNcFeH2ANwR4Y4A3BXhzgLcEeGuAtwV4e4B3BHhngHcFeHeA9wR4b4D3BXh/gA8E+GCADwX4cICPBPhogI8F+HiATwT4ZIBPBfh0gM8E+GyAzwX4fIAvBPhigC8F+HKArwT4aoCvBfh6gG8E+GaAbwX4doDvBPhugO8F+H6AHwT4YYAfBfhxgJ8E+GmAnwX4eYBfBPhlgF8F+HWA3wT4bYDfBfh9gD8E+GOAPwX4c4C/BPhrgL8F+HuAfwT4Z4B/Bfh3gP8E+G+A/wU4NMBhAQ4PcESAIwMcFeDoAMcEODbAcUIcN8TxQhw/xAlCnDDEiUIcEuLEIU4S4qQhThbi5CFOEeKUIU4V4tQhThPitCFOF+L0Ic4Q4owhzhTizCHOEuKsIc4W4uwhzhHinCHOFeLcIc4T4rwhzhfi/CEuEOKCIS4U4sIhLhLioiEuFuLiIS4R4pIhLhXi0iES4jIhLhviciEuH+IKIa4Y4kohrhziKiGuGuJqIa4e4hohrhniWiGuHeI6Ia4b4nohrh/iBiFuGOJGIW4c4iYhbhriZiFuHuIWIW4Z4lYhbh3iNiFuG+J2IW4f4g4h7hjiTiHuHOIuIe4a4m4h7h7iHiHuGeJeIe4d4j4h7hvifiHuH+IBIR4Y4kEhHhziISEeGuJhIR4e4hEhHhniUSEeHeIxIR4b4nEhHh/iCSGeGOJJIZ4c4ikhGuKpIZ4W4ukhnhHimSGeFeLZIZ4T4rkhnhfi+SFeEOKFIV4U4sUhXhLipSFeFuLlIV4R4pUhXhXi1SFeE+IgxCDEMMQoxDjEJMQ0xCzEPMQixDLEKsQ6xCbENsQuxD7Ea0O8LsTrQ7whxBtDvCnEm0O8JcRbQ7wtxNtDvCPEO0O8K8S7Q7wnxHtDvC/E+0N8IMQHQ3woxIdDfCTER0N8LMTHQ3wixCdDfCrEp0N8JsRnQ3wuxOdDfCHEF0N8KcSXQ3wlxFdDfC3E10N8I8Q3Q3wrxLdDfCfEd0N8L8T3Q/wgxA9D/CjEj0P8JMRPQ/wsxM9D/CLEL0P8KsSvQ/wmxG9D/C7E70P8IcQfQ/wpxJ9D/CXEX0P8LcTfQ/wjxD9D/CvEv0P8J8R/Q/wvxKEhDgtxeIgjQhwZ4qgQR4c4JsSxIY4T4bgRjhfh+BFOEOGEEU4U4ZAIJ45wkggnjXCyCCePcIoIp4xwqginjnCaCKeNcLoIp49whghnjHCmCGeOcJYIZ41wtghnj3COCOeMcK4I545wngjnjXC+COePcIEIF4xwoQgXjnCRCBeNcLEIF49wiQiXjHCpCJeOkAiXiXDZCJeLcPkIV4hwxQhXinDlCFeJcNUIV4tw9QjXiHDNCNeKcO0I14lw3QjXi3D9CDeIcMMIN4pw4wg3iXDTCDeLcPMIt4hwywi3inDrCLeJcNsIt4tw+wh3iHDHCHeKcOcId4lw1wh3i3D3CPeIcM8I94pw7wj3iXDfCPeLcP8ID4jwwAgPivDgCA+J8NAID4vw8AiPiPDICI+K8OgIj4nw2AiPi/D4CE+I8MQIT4rw5AhPidAIT43wtAhPj/CMCM+M8KwIz47wnAjPjfC8CM+P8IIIL4zwoggvjvCSCC+N8LIIL4/wigivjPCqCK+O8JoIBxEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2EV4b4XURXh/hDRHeGOFNEd4c4S0R3hrhbRHeHuEdEd4Z4V0R3h3hPRHeG+F9Ed4f4QMRPhjhQxE+HOEjET4a4WMRPh7hExE+GeFTET4d4TMRPhvhcxE+H+ELEb4Y4UsRvhzhKxG+GuFrEb4e4RsRvhnhWxG+HeE7Eb4b4XsRvh/hBxF+GOFHEX4c4ScRfhrhZxF+HuEXEX4Z4VcRfh3hNxF+G+F3EX4f4Q8R/hjhTxH+HOEvEf4a4W8R/h7hHxH+GeFfEf4d4T8R/hvhfxEOjXBYhMMjHBHhyAhHRTg6wjERjo1wnBjHjXG8GMePcYIYJ4xxohiHxDhxjJPEOGmMk8U4eYxTxDhljFPFOHWM08Q4bYzTxTh9jDPEOGOMM8U4c4yzxDhrjLPFOHuMc8Q4Z4xzxTh3jPPEOG+M88U4f4wLxLhgjAvFuHCMi8S4aIyLxbh4jEvEuGSMS8W4dIzEuEyMy8a4XIzLx7hCjCvGuFKMK8e4SoyrxrhajKvHuEaMa8a4Voxrx7hOjOvGuF6M68e4QYwbxrhRjBvHuEmMm8a4WYybx7hFjFvGuFWMW8e4TYzbxrhdjNvHuEOMO8a4U4w7x7hLjLvGuFuMu8e4R4x7xrhXjHvHuE+M+8a4X4z7x3hAjAfGeFCMB8d4SIyHxnhYjIfHeESMR8Z4VIxHx3hMjMfGeFyMx8d4QownxnhSjCfHeEqMxnhqjKfFeHqMZ8R4ZoxnxXh2jOfEeG6M58V4fowXxHhhjBfFeHGMl8R4aYyXxXh5jFfEeGWMV8V4dYzXxDiIMYgxjDGKMY4xiTGNMYsxj7GIsYyxirGOsYmxjbGLsY/x2hivi/H6GG+I8cYYb4rx5hhvifHWGG+L8fYY74jxzhjvivHuGO+J8d4Y74vx/hgfiPHBGB+K8eEYH4nx0Rgfi/HxGJ+I8ckYn4rx6RififHZGJ+L8fkYX4jxxRhfivHlGF+J8dUYX4vx9RjfiPHNGN+K8e0Y34nx3Rjfi/H9GD+I8cMYP4rx4xg/ifHTGD+L8fMYv4jxyxi/ivHrGL+J8dsYv4vx+xh/iPHHGH+K8ecYf4nx1xh/i/H3GP+I8c8Y/4rx7xj/ifHfGP+LcWiMw2IcHuOIGEfGOCrG0TGOiXFsjOMkOG6C4yU4foITJDhhghMlOCTBiROcJMFJE5wswckTnCLBKROcKsGpE5wmwWkTnC7B6ROcIcEZE5wpwZkTnCXBWROcLcHZE5wjwTkTnCvBuROcJ8F5E5wvwfkTXCDBBRNcKMGFE1wkwUUTXCzBxRNcIsElE1wqwaUTJMFlElw2weUSXD7BFRJcMcGVElw5wVUSXDXB1RJcPcE1ElwzwbUSXDvBdRJcN8H1Elw/wQ0S3DDBjRLcOMFNEtw0wc0S3DzBLRLcMsGtEtw6wW0S3DbB7RLcPsEdEtwxwZ0S3DnBXRLcNcHdEtw9wT0S3DPBvRLcO8F9Etw3wf0S3D/BAxI8MMGDEjw4wUMSPDTBwxI8PMEjEjwywaMSPDrBYxI8NsHjEjw+wRMSPDHBkxI8OcFTEjTBUxM8LcHTEzwjwTMTPCvBsxM8J8FzEzwvwfMTvCDBCxO8KMGLE7wkwUsTvCzByxO8IsErE7wqwasTvCbBQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ9gtcmeF2C1yd4Q4I3JnhTgjcneEuCtyZ4W4K3J3hHgncmeFeCdyd4T4L3Jnhfgvcn+ECCDyb4UIIPJ/hIgo8m+FiCjyf4RIJPJvhUgk8n+EyCzyb4XILPJ/hCgi8m+FKCLyf4SoKvJvhagq8n+EaCbyb4VoJvJ/hOgu8m+F6C7yf4QYIfJvhRgh8n+EmCnyb4WYKfJ/hFgl8m+FWCXyf4TYLfJvhdgt8n+EOCPyb4U4I/J/hLgr8m+FuCvyf4R4J/JvhXgn8n+E+C/yb4X4JDExyW4PAERyQ4MsFRCY5OcEyCYxMcJ8VxUxwvxfFTnCDFCVOcKMUhKU6c4iQpTpriZClOnuIUKU6Z4lQpTp3iNClOm+J0KU6f4gwpzpjiTCnOnOIsKc6a4mwpzp7iHCnOmeJcKc6d4jwpzpvifCnOn+ICKS6Y4kIpLpziIikumuJiKS6e4hIpLpniUikunSIpLpPisikul+LyKa6Q4ooprpTiyimukuKqKa6W4uoprpHimimuleLaKa6T4roprpfi+ilukOKGKW6U4sYpbpLipiluluLmKW6R4pYpbpXi1iluk+K2KW6X4vYp7pDijinulOLOKe6S4q4p7pbi7inukeKeKe6V4t4p7pPivinul+L+KR6Q4oEpHpTiwSkekuKhKR6W4uEpHpHikSkeleLRKR6T4rEpHpfi8SmekOKJKZ6U4skpnpKiKZ6a4mkpnp7iGSmemeJZKZ6d4jkpnpvieSmen+IFKV6Y4kUpXpziJSlemuJlKV6e4hUpXpniVSleneI1KQ5SDFIMU4xSjFNMUkxTzFLMUyxSLFOsUqxTbFJsU+xS7FO8NsXrUrw+xRtSvDHFm1K8OcVbUrw1xdtSvD3FO1K8M8W7Urw7xXtSvDfF+1K8P8UHUnwwxYdSfDjFR1J8NMXHUnw8xSdSfDLFp1J8OsVnUnw2xedSfD7FF1J8McWXUnw5xVdSfDXF11J8PcU3UnwzxbdSfDvFd1J8N8X3Unw/xQ9S/DDFj1L8OMVPUvw0xc9S/DzFL1L8MsWvUvw6xW9S/DbF71L8PsUfUvwxxZ9S/DnFX1L8NcXfUvw9xT9S/DPFv1L8O8V/Uvw3xf9SHJrisBSHpzgixZEpjkpxdIpjUhyb4jgZjpvheBmOn+EEGU6Y4UQZDslw4gwnyXDSDCfLcPIMp8hwygynynDqDKfJcNoMp8tw+gxnyHDGDGfKcOYMZ8lw1gxny3D2DOfIcM4M58pw7gznyXDeDOfLcP4MF8hwwQwXynDhDBfJcNEMF8tw8QyXyHDJDJfKcOkMyXCZDJfNcLkMl89whQxXzHClDFfOcJUMV81wtQxXz3CNDNfMcK0M185wnQzXzXC9DNfPcIMMN8xwoww3znCTDDfNcLMMN89wiwy3zHCrDLfOcJsMt81wuwy3z3CHDHfMcKcMd85wlwx3zXC3DHfPcI8M98xwrwz3znCfDPfNcL8M98/wgAwPzPCgDA/O8JAMD83wsAwPz/CIDI/M8KgMj87wmAyPzfC4DI/P8IQMT8zwpAxPzvCUDM3w1AxPy/D0DM/I8MwMz8rw7AzPyfDcDM/L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/K8OoMr8lwkGGQYZhhlGGcYZJhmmGWYZ5hkWGZYZVhnWGTYZthl2Gf4bUZXpfh9RnekOGNGd6U4c0Z3pLhrRneluHtGd6R4Z0Z3pXh3Rnek+G9Gd6X4f0ZPpDhgxk+lOHDGT6S4aMZPpbh4xk+keGTGT6V4dMZPpPhsxk+l+HzGb6Q4YsZvpThyxm+kuGrGb6W4esZvpHhmxm+leHbGb6T4bsZvpfh+xl+kOGHGX6U4ccZfpLhpxl+luHnGX6R4ZcZfpXh1xl+k+G3GX6X4fcZ/pDhjxn+lOHPGf6S4a8Z/pbh7xn+keGfGf6V4d8Z/pPhvxn+l+HQDIdlODzDERmOzHBUhqMzHJPh2AzHyXHcHMfLcfwcJ8hxwhwnynFIjhPnOEmOk+Y4WY6T5zhFjlPmOFWOU+c4TY7T5jhdjtPnOEOOM+Y4U44z5zhLjrPmOFuOs+c4R45z5jhXjnPnOE+O8+Y4X47z57hAjgvmuFCOC+e4SI6L5rhYjovnuESOS+a4VI5L50iOy+S4bI7L5bh8jivkuGKOK+W4co6r5LhqjqvluHqOa+S4Zo5r5bh2juvkuG6O6+W4fo4b5LhhjhvluHGOm+S4aY6b5bh5jlvkuGWOW+W4dY7b5LhtjtvluH2OO+S4Y4475bhzjrvkuGuOu+W4e4575LhnjnvluHeO++S4b4775bh/jgfkeGCOB+V4cI6H5HhojofleHiOR+R4ZI5H5Xh0jsfkeGyOx+V4fI4n5HhijifleHKOp+RojqfmeFqOp+d4Ro5n5nhWjmfneE6O5+Z4Xo7n53hBjhfmeFGOF+d4SY6X5nhZjpfneEWOV+Z4VY5X53hNjoMcgxzDHKMc4xyTHNMcsxzzHIscyxyrHOscmxzbHLsc+xyvzfG6HK/P8YYcb8zxphxvzvGWHG/N8bYcb8/xjhzvzPGuHO/O8Z4c783xvhzvz/GBHB/M8aEcH87xkRwfzfGxHB/P8Ykcn8zxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/zvGTHD/N8bMcP8/xixy/zPGrHL/O8Zscv83xuxy/z/GHHH/M8accf87xlxx/zfG3HH/P8Y8c/8zxrxz/zvGfHP/N8b8ch+Y4LMfhOY7IcWSOo3IcneOYHMfmOE6B4xY4XoHjFzhBgRMWOFGBQwqcuMBJCpy0wMkKnLzAKQqcssCpCpy6wGkKnLbA6QqcvsAZCpyxwJkKnLnAWQqctcDZCpy9wDkKnLPAuQqcu8B5Cpy3wPkKnL/ABQpcsMCFCly4wEUKXLTAxQpcvMAlClyywKUKXLpAClymwGULXK7A5QtcocAVC1ypwJULXKXAVQtcrcDVC1yjwDULXKvAtQtcp8B1C1yvwPUL3KDADQvcqMCNC9ykwE0L3KzAzQvcosAtC9yqwK0L3KbAbQvcrsDtC9yhwB0L3KnAnQvcpcBdC9ytwN0L3KPAPQvcq8C9C9ynwH0L3K/A/Qs8oMADCzyowIMLPKTAQws8rMDDCzyiwCMLPKrAows8psBjCzyuwOMLPKHAEws8qcCTCzylQAs8tcDTCjy9wDMKPLPAswo8u8BzCjy3wPMKPL/ACwq8sMCLCry4wEsKvLTAywq8vMArCryywKsKvLrAawocFBgUGBYYFRgXmBSYFpgVmBdYFFgWWBVYF9gU2BbYFdgXeG2B1xV4fYE3FHhjgTcVeHOBtxR4a4G3FXh7gXcUeGeBdxV4d4H3FHhvgfcVeH+BDxT4YIEPFfhwgY8U+GiBjxX4eIFPFPhkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBnxT4aYGfFfh5gV8U+GWBXxX4dYHfFPhtgd8V+H2BPxT4Y4E/Ffhzgb8U+GuBvxX4e4F/FPhngX8V+HeB/xT4b4H/FTi0wGEFDi9wRIEjCxxV4OgCxxQ4tsBxShy3xPFKHL/ECUqcsMSJShxS4sQlTlLipCVOVuLkJU5R4pQlTlXi1CVOU+K0JU5X4vQlzlDijCXOVOLMJc5S4qwlzlbi7CXOUeKcJc5V4twlzlPivCXOV+L8JS5Q4oIlLlTiwiUuUuKiJS5W4uIlLlHikiUuVeLSJVLiMiUuW+JyJS5f4golrljiSiWuXOIqJa5a4molrl7iGiWuWeJaJa5d4jolrlvieiWuX+IGJW5Y4kYlblziJiVuWuJmJW5e4hYlblniViVuXeI2JW5b4nYlbl/iDiXuWOJOJe5c4i4l7lribiXuXuIeJe5Z4l4l7l3iPiXuW+J+Je5f4gElHljiQSUeXOIhJR5a4mElHl7iESUeWeJRJR5d4jElHlvicSUeX+IJJZ5Y4kklnlziKSVa4qklnlbi6SWeUeKZJZ5V4tklnlPiuSWeV+L5JV5Q4oUlXlTixSVeUuKlJV5W4uUlXlHilSVeVeLVJV5T4qDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsRrS7yuxOtLvKHEG0u8qcSbS7ylxFtLvK3E20u8o8Q7S7yrxLtLvKfEe0u8r8T7S3ygxAdLfKjEh0t8pMRHS3ysxMdLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPS/ykxE9L/KzEz0v8osQvS/yqxK9L/KbEb0v8rsTvS/yhxB9L/KnEn0v8pcRfS/ytxN9L/KPEP0v8q8S/S/ynxH9L/K/EoSUOK3F4iSNKHFniqBJHlzimxLEljlPhuBWOV+H4FU5Q4YQVTlThkAonrnCSCietcLIKJ69wigqnrHCqCqeucJoKp61wugqnr3CGCmescKYKZ65wlgpnrXC2CmevcI4K56xwrgrnrnCeCuetcL4K569wgQoXrHChCheucJEKF61wsQoXr3CJCpescKkKl66QCpepcNkKl6tw+QpXqHDFCleqcOUKV6lw1QpXq3D1CteocM0K16pw7QrXqXDdCtercP0KN6hwwwo3qnDjCjepcNMKN6tw8wq3qHDLCreqcOsKt6lw2wq3q3D7CneocMcKd6pw5wp3qXDXCnercPcK96hwzwr3qnDvCvepcN8K96tw/woPqPDACg+q8OAKD6nw0AoPq/DwCo+o8MgKj6rw6AqPqfDYCo+r8PgKT6jwxApPqvDkCk+p0ApPrfC0Ck+v8IwKz6zwrArPrvCcCs+t8LwKz6/wggovrPCiCi+u8JIKL63wsgovr/CKCq+s8KoKr67wmgoHFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2FfYVXlvhdRVeX+ENFd5Y4U0V3lzhLRXeWuFtFd5e4R0V3lnhXRXeXeE9Fd5b4X0V3l/hAxU+WOFDFT5c4SMVPlrhYxU+XuETFT5Z4VMVPl3hMxU+W+FzFT5f4QsVvljhSxW+XOErFb5a4WsVvl7hGxW+WeFbFb5d4TsVvlvhexW+X+EHFX5Y4UcVflzhJxV+WuFnFX5e4RcVflnhVxV+XeE3FX5b4XcVfl/hDxX+WOFPFf5c4S8V/lrhbxX+XuEfFf5Z4V8V/l3hPxX+W+F/FQ6tcFiFwyscUeHICkdVOLrCMRWOrXCcGsetcbwax69xghonrHGiGofUOHGNk9Q4aY2T1Th5jVPUOGWNU9U4dY3T1DhtjdPVOH2NM9Q4Y40z1ThzjbPUOGuNs9U4e41z1DhnjXPVOHeN89Q4b43z1Th/jQvUuGCNC9W4cI2L1LhojYvVuHiNS9S4ZI1L1bh0jdS4TI3L1rhcjcvXuEKNK9a4Uo0r17hKjavWuFqNq9e4Ro1r1rhWjWvXuE6N69a4Xo3r17hBjRvWuFGNG9e4SY2b1rhZjZvXuEWNW9a4VY1b17hNjdvWuF2N29e4Q4071rhTjTvXuEuNu9a4W42717hHjXvWuFeNe9e4T4371rhfjfvXeECNB9Z4UI0H13hIjYfWeFiNh9d4RI1H1nhUjUfXeEyNx9Z4XI3H13hCjSfWeFKNJ9d4So3WeGqNp9V4eo1n1HhmjWfVeHaN59R4bo3n1Xh+jRfUeGGNF9V4cY2X1HhpjZfVeHmNV9R4ZY1X1Xh1jdfUOKgxqDGsMaoxrjGpMa0xqzGvsaixrLGqsa6xqbGtsauxr/HaGq+r8foab6jxxhpvqvHmGm+p8dYab6vx9hrvqPHOGu+q8e4a76nx3hrvq/H+Gh+o8cEaH6rx4RofqfHRGh+r8fEan6jxyRqfqvHpGp+p8dkan6vx+RpfqPHFGl+q8eUaX6nx1Rpfq/H1Gt+o8c0a36rx7RrfqfHdGt+r8f0aP6jxwxo/qvHjGj+p8dMaP6vx8xq/qPHLGr+q8esav6nx2xq/q/H7Gn+o8ccaf6rx5xp/qfHXGn+r8fca/6jxzxr/qvHvGv+p8d8a/6txaI3Dahxe44gaR9Y4qsbRNY6pcWyN4zQ4boPjNTh+gxM0OGGDEzU4pMGJG5ykwUkbnKzByRucosEpG5yqwakbnKbBaRucrsHpG5yhwRkbnKnBmRucpcFZG5ytwdkbnKPBORucq8G5G5ynwXkbnK/B+RtcoMEFG1yowYUbXKTBRRtcrMHFG1yiwSUbXKrBpRukwWUaXLbB5RpcvsEVGlyxwZUaXLnBVRpctcHVGly9wTUaXLPBtRpcu8F1Gly3wfUaXL/BDRrcsMGNGty4wU0a3LTBzRrcvMEtGtyywa0a3LrBbRrctsHtGty+wR0a3LHBnRrcucFdGty1wd0a3L3BPRrcs8G9Gty7wX0a3LfB/Rrcv8EDGjywwYMaPLjBQxo8tMHDGjy8wSMaPLLBoxo8usFjGjy2weMaPL7BExo8scGTGjy5wVMatMFTGzytwdMbPKPBMxs8q8GzGzynwXMbPK/B8xu8oMELG7yowYsbvKTBSxu8rMHLG7yiwSsbvKrBqxu8psFBg0GDYYNRg3GDSYNpg1mDeYNFg2WDVYN1g02DbYNdg32D1zZ4XYPXN3hDgzc2eFODNzd4S4O3Nnhbg7c3eEeDdzZ4V4N3N3hPg/c2eF+D9zf4QIMPNvhQgw83+MgQfLTBxxp8vMEnGnyywacafLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/Ghza4LAGhzc4osGRDY5qcHSDYxoc2+A4LY7b4ngtjt/iBC1O2OJELQ5pceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXanHpFmlxmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27xlBZt8dQWT2vx9BbPaPHMFs9q8ewWz2nx3BbPa/H8Fi9o8cIWL2rx4hYvafHSFi9r8fIWr2jxyhavavHqFq9pcdBi0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi3+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4oMtPtTiwy0+0uKjLT7W4uMtPtHiky0+1eLTLT7T4rMtPtfi8y2+0OKLLb7U4sstvtLiqy2+1uLrLb7R4pstvtXi2y2+0+K7Lb7X4vstftDihy1+1OLHLX7S4qctftbi5y1+0eKXLX7V4tctftPity1+1+L3Lf7Q4o8t/tTizy3+0uKvLf7W4u8t/tHiny3+1eLfLf7T4r8t/tfi0BaHtTi8xREtjmxxVIujWxzT4tgWx+lw3A7H63D8DifocMIOJ+pwSIcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh0t2uFSHS3dIh8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dLhrh7t1uHuHe3S4Z4d7dbh3h/t0uG+H+3W4f4cHdHhghwd1eHCHh3R4aIeHdXh4h0d0eGSHR3V4dIfHdHhsh8d1eHyHJ3R4YocndXhyh6d0aIendnhah6d3eEaHZ3Z4Vodnd3hOh+d2eF6H53d4QYcXdnhRhxd3eEmHl3Z4WYeXd3hFh1d2eFWHV3d4TYeDDoMOww6jDuMOkw7TDrMO8w6LDssOqw7rDpsO2w67DvsOr+3wug6v7/CGDm/s8KYOb+7wlg5v7fC2Dm/v8I4O7+zwrg7v7vCeDu/t8L4O7+/wgQ4f7PChDh/u8JEOH+3wsQ4f7/CJDp/s8KkOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dod2OKzD4R2O6HBkh6M6HN3hmA7HdjhOj+P2OF6P4/c4QY8T9jhRj0N6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXpcsselely6R3pcpsdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx2173K7H7Xvcoccde9ypx5173KXHXXvcrcfde9yjxz173KvHvXvcp8d9e9yvx/17PKDHA3s8qMeDezykx0N7PKzHw3s8oscjezyqx6N7PKbHY3s8rsfjezyhxxN7PKnHk3s8pUd7PLXH03o8vcczejyzx7N6PLvHc3o8t8fzejy/xwt6vLDHi3q8uMdLery0x8t6vLzHK3q8sserery6x2t6HPQY9Bj2GPUY95j0mPaY9Zj3WPRY9lj1WPfY9Nj22PXY93htj9f1eH2PN/R4Y4839Xhzj7f0eGuPt/V4e4939Hhnj3f1eHeP9/R4b4/39Xh/z/8snFMb54XjKLdtq822bUy2bbvNtjHZto3vx0a1yrZt2/Z5zv/5vYG5nLsZRw5w1ABHD3DMAMcO8J4B3jvA+wZ4/wAfGOCDA3xogA8P8JEBPjrAxwb4+ACfGOCTA3xqgE8P8JkBPjvA5wb4/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8P8JMBfjrAzwb4+QC/GOCXA/xqgF8P8JsBfjvA7wb4/QB/GOCPA/xpgD8P8JcB/jrA3wb4+wD/GOCfA/xrgH8P8J8B/jvA/wY4JMBxAhwa4LgBDgtwvADHD3CCAIcHOGGAEwU4cYCTBDhpgJMFOHmAUwQ4ZYBTBTh1gNMEOG2A0wU4fYAzBDhjgDMFOHOAswQ4a4CzBTh7gHMEOGeAcwU4d4DzBDhvgPMFOH+ACwS4YIALBbhwgIsEuGiAiwW4eIBLBEiASwa4VIBLB7hMgMsGuFyAywe4QoArBrhSgCsHuEqAqwa4WoCrB7hGgGsGuFaAawe4ToDrBrhegOsHuEGAGwa4UYAbB7hJgJsGuFmAmwe4RYBbBrhVgFsHuE2A2wa4XYDbB7hDgDsGuFOAOwe4S4AjAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI0wBMDPCnAkwM8JcBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/A8wO8IMALA7wowIsDvCTASwO8LMDLA7wiwCsDvCrAqwO8JsBrA7wuwOsDvCHAGwO8KcCbA7wlwFsDvC3A2wO8I8BBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2AdwZ4V4B3BzgywFEBjg5wTIBjA7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHA3wiwCcDfCrApwN8JsBnA3wuwOcDfCHAFwN8KcCXA3wlwFcDfC3A1wN8I8A3A3wrwLcDfCfAdwN8L8D3A/wgwA8D/CjAjwP8JMBPA/wswM8D/CLALwP8KsCvA/wmwG8D/C7A7wP8IcAfA/wpwJ8D/CXAXwP8LcDfA/wjwD8D/CvAvwP8J8B/A/wvwCEhjhPi0BDHDXFYiOOFOH6IE4Q4PMQJQ5woxIlDnCTESUOcLMTJQ5wixClDnCrEqUOcJsRpQ5wuxOlDnCHEGUOcKcSZQ5wlxFlDnC3E2UOcI8Q5Q5wrxLlDnCfEeUOcL8T5Q1wgxAVDXCjEhcPh/xuy42IhLh7iEiES4pIhLhXi0iEuE+KyIS4X4vIhrhDiiiGuFOLKIa4S4qohrhbi6iGuEeKaIa4V4tohrhPiuiGuF+L6IW4Q4oYhbhTixiFuEuKmIW4W4uYhbhHiliFuFeLWIW4T4rYhbhfi9iHuEOKOIe4U4s4h7hLiiBB3DXG3EHcPcY8Q9wxxrxD3DnGfEPcNcb8Q9w/xgBAPDPGgEA8O8ZAQDw3xsBAPD/GIEI8M8agQjw7xmBCPDfG4EI8P8YQQDfHEEE8K8eQQTwnx1BBPC/H0EM8I8cwQzwrx7BDPCfHcEM8L8fwQLwjxwhAvCvHiEC8J8dIQLwvx8hCvCPHKEK8K8eoQrwnx2hCvC/H6EG8I8cYQbwrx5hBvCfHWEG8L8fYQ7whxEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4p0h3hXi3SGODHFUiKNDHBPi2BDvCfHeEO8L8f4QHwjxwRAfCvHhEB8J8dEQHwvx8RCfCPHJEJ8K8ekQnwnx2RCfC/H5EF8I8cUQXwrx5RBfCfHVEF8L8fUQ3wjxzRDfCvHtEN8J8d0Q3wvx/RA/CPHDED8K8eMQPwnx0xA/C/HzEL8I8csQvwrx6xC/CfHbEL8L8fsQfwjxxxB/CvHnEH8J8dcQfwvx9xD/CPHPEP8K8e8Q/wnx3xD/C3FIhONEODTCcSMcFuF4EY4f4QQRDo9wwggninDiCCeJcNIIJ4tw8giniHDKCKeKcOoIp4lw2gini3D6CGeIcMYIZ4pw5ghniXDWCGeLcPYI54hwzgjninDuCOeJcN4I54tw/ggXiHDBCBeKcOEIF4lw0QgXi3DxCJeIkAiXjHCpCJeOcJkIl41wuQiXj3CFCFeMcKUIV45wlQhXjXC1CFePcI0I14xwrQjXjnCdCNeNcL0I149wgwg3jHCjCDeOcJMIN41ws2jY/7loiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwhHRLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0RohCdGeFKEJ0d4SoSnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6E50d4QYQXRnhRhBdHeEmEl0Z4WYSXR3hFhFdGeFWEV0d4TYTXRnhdhNdHeEOEN0Z4U4Q3R3hLhLdGeFuEt0d4R4SDCIMIwwijCOMIkwjTCLMI8wiLCMsIqwjrCJsI2wi7CPsI74zwrgjvjnBkhKMiHB3hmAjHRnhPhPdGeF+E90f4QIQPRvhQhA9H+EiEj0b4WISPR/hEhE9G+FSET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0b4W4S/R/hHhH9G+FeEf0f4T4T/RvhfhENiHCfGoTGOG+OwGMeLcfwYJ4hxeIwTxjhRjBPHOEmMk8Y4WYyTxzhFjFPGOFWMUw8dMuT/86aNcboYp49xhhhnjHGmGGeOcZYYZ41xthhnj3GOGOeMca4Y545xnhjnjXG+GOePcYEYF4xxoRgXjnGRGBeNcbEYF49xiRiJcckYl4px6RiXiXHZGJeLcfkYV4hxxRhXinHlGFeJcdUYV4tx9RjXiHHNGNeKce0Y14lx3RjXi3H9GDeIccMYN4px4xg3iXHTGDeLcfMYt4hxyxi3inHrGLeJcdsYt4tx+xh3iHHHGHeKcecYd4lxRIy7xrhbjLvHuEeMe8a4V4x7x7hPjPvGuF+M+8d4QIwHxnhQjAfHeEiMh8Z4WIyHx3hEjEfGeFSMR8d4TIzHxnhcjMfHeEKMxnhijCfFeHKMp8R4aoynxXh6jGfEeGaMZ8V4doznxHhujOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljFfFeHWM18R4bYzXxXh9jDfEeGOMN8V4c4y3xHhrjLfFeHuMd8Q4iDGIMYwxijGOMYkxjTGLMY+xiLGMsYqxjrGJsY2xi7GP8c4Y74rx7hhHxjgqxtExjolxbIz3xHhvjPfFeH+MD8T4YIwPxfhwjI/E+GiMj8X4eIxPxPhkjE/F+HSMz8T4bIzPxfh8jC/E+GKML8X4coyvxPhqjK/F+HqMb8T4Zoxvxfh2jO/E+G6M78X4fowfxPhhjB/F+HGMn8T4aYyfxfh5jF/E+GWMX8X4dYzfxPhtjN/F+H2MP8T4Y4w/xfhzjL/E+GuMv8X4e4x/xPhnjH/F+HeM/8T4b4z/xTgkwXESHJrguAkOS3C8BMdPcIIEhyc4YYITJThxgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJTh9gjMkOGOCMyU4c4KzJDhrgrMlOHuCcyQ4Z4JzJTh3gvMkOG+C8yU4f4ILJLhgggsluHCCiyS4aIKLJbh4gkskSIJLJrhUgksnuEyCyya4XILLJ7hCgismuFKCKye4SoKrJrhagqsnuEaCaya4VoJrJ7hOgusmuF6C6ye4QYIbJrhRghsnuEmCmya4WYKbJ7hFglsmuFWCWye4TYLbJrhdgtsnuEOCOya4U4I7J7hLgiMS3DXB3RLcPcE9Etwzwb0S3DvBfRLcN8H9Etw/wQMSPDDBgxI8OMFDEjw0wcMSPDzBIxI8MsGjEjw6wWMSPDbB4xI8PsETEjTBExM8KcGTEzwlwVMTPC3B0xM8I8EzEzwrwbMTPCfBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxO8KsGrE7wmwWsTvC7B6xO8IcEbE7wpwZsTvCXBWxO8LcHbE7wjwUGCQYJhglGCcYJJgmmCWYJ5gkWCZYJVgnWCTYJtgl2CfYJ3JnhXgncnODLBUQmOTnBMgmMTvCfBexO8L8H7E3wgwQcTfCjBhxN8JMFHE3wswccTfCLBJxN8KsGnE3wmwWcTfC7B5xN8IcEXE3wpwZcTfCXBVxN8LcHXE3wjwTcTfCvBtxN8J8F3E3wvwfcT/CDBDxP8KMGPE/wkwU8T/CzBzxP8IsEvE/wqwa8T/CbBbxP8LsHvE/whwR8T/CnBnxP8JcFfE/wtwd8T/CPBPxP8K8G/E/wnwX8T/C/BISmOk+LQFMdNcViK46U4fooTpDg8xQlTnCjFiVOcJMVJU5wsxclTnCLFKVOcKsWpU5wmxWlTnC7F6VOcIcUZU5wpxZlTnCXFWVOcLcXZU5wjxTlTnCvFuVOcJ8V5U5wvxflTXCDFBVNcKMWFU1wkxUVTXCzFxVNcIkVSXDLFpVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xVVSXDXF1VJcPcU1UlwzxbVSXDvFdVJcN8X1Ulw/xQ1S3DDFjVLcOMVNUtw0xc1S3DzFLVLcMsWtUtw6xW1S3DbF7VLcPsUdUtwxxZ1S3DnFXVIckeKuKe6W4u4p7pHininuleLeKe6T4r4p7pfi/ikekOKBKR6U4sEpHpLioSkeluLhKR6R4pEpHpXi0Skek+KxKR6X4vEpnpCiKZ6Y4kkpnpziKSmemuJpKZ6e4hkpnpniWSmeneI5KZ6b4nkpnp/iBSlemOJFKV6c4iUpXpriZSlenuIVKV6Z4lUpXp3iNSlem+J1KV6f4g0p3pjiTSnenOItKd6a4m0p3p7iHSkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTvDPFu1K8O8WRKY5KcXSKY1Icm+I9Kd6b4n0p3p/iAyk+mOJDKT6c4iMpPpriYyk+nuITKT6Z4lMpPp3iMyk+m+JzKT6f4gspvpjiSym+nOIrKb6a4mspvp7iGym+meJbKb6d4jspvpvieym+n+IHKX6Y4kcpfpziJyl+muJnKX6e4hcpfpniVyl+neI3KX6b4ncpfp/iDyn+mOJPKf6c4i8p/pribyn+nuIfKf6Z4l8p/p3iPyn+m+J/KQ7JcJwMh2Y4bobDMhwvw/EznCDD4RlOmOFEGU6c4SQZTprhZBlOnuEUGU6Z4VQZTp3hNBlOm+F0GU6f4QwZzpjhTBnOnOEsGc6a4WwZzp7hHBnOmeFcGc6d4TwZzpvhfBnOn+ECGS6Y4UIZLpzhIhkumuFiGS6e4RIZkuGSGS6V4dIZLpPhshkul+HyGa6Q4YoZrpThyhmukuGqGa6W4eoZrpHhmhmuleHaGa6T4boZrpfh+hlukOGGGW6U4cYZbpLhphluluHmGW6R4ZYZbpXh1hluk+G2GW6X4fYZ7pDhjhnulOHOGe6S4YgMd81wtwx3z3CPDPfMcK8M985wnwz3zXC/DPfP8IAMD8zwoAwPzvCQDA/N8LAMD8/wiAyPzPCoDI/O8JgMj83wuAyPz/CEDM3wxAxPyvDkDE/J8NQMT8vw9AzPyPDMDM/K8OwMz8nw3AzPy/D8DC/I8MIML8rw4gwvyfDSDC/L8PIMr8jwygyvyvDqDK/J8NoMr8vw+gxvyPDGDG/K8OYMb8nw1gxvy/D2DO/IcJBhkGGYYZRhnGGSYZphlmGeYZFhmWGVYZ1hk2GbYZdhn+GdGd6V4d0ZjsxwVIajMxyT4dgM78nw3gzvy/D+DB/I8MEMH8rw4QwfyfDRDB/L8PEMn8jwyQyfyvDpDJ/J8NkMn8vw+QxfyPDFDF/K8OUMX8nw1Qxfy/D1DN/I8M0M38rw7QzfyfDdDN/L8P0MP8jwwww/yvDjDD/J8NMMP8vw8wy/yPDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8jwzwz/yvDvDP/J8N8M/8twSI7j5Dg0x3FzHJbjeDmOn+MEOQ7PccIcJ8px4hwnyXHSHCfLcfIcp8hxyhynynHqHKfJcdocp8tx+hxnyHHGHGfKceYcZ8lx1hxny3H2HOfIcc4c58px7hznyXHeHOfLcf4cF8hxwRwXynHhHBfJcdEcF8tx8RyXyJEcl8xxqRyXznGZHJfNcbkcl89xhRxXzHGlHFfOcZUcV81xtRxXz3GNHNfMca0c185xnRzXzXG9HNfPcYMcN8xxoxw3znGTHDfNcbMcN89xixy3zHGrHLfOcZsct81xuxy3z3GHHHfMcaccd85xlxxH5LhrjrvluHuOe+S4Z4575bh3jvvkuG+O++W4f44H5HhgjgfleHCOh+R4aI6H5Xh4jkfkeGSOR+V4dI7H5HhsjsfleHyOJ+RojifmeFKOJ+d4So6n5nhajqfneEaOZ+Z4Vo5n53hOjufmeF6O5+d4QY4X5nhRjhfneEmOl+Z4WY6X53hFjlfmeFWOV+d4TY7X5nhdjtfneEOON+Z4U44353hLjrfmeFuOt+d4R46DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPsc78zxrhzvznFkjqNyHJ3jmBzH5nhPjvfmeF+O9+f4QI4P5vhQjg/n+EiOj+b4WI6P5/hEjk/m+FSOT+f4TI7P5vhcjs/n+EKOL+b4Uo4v5/hKjq/m+FqOr+f4Ro5v5vhWjm/n+E6O7+b4Xo7v5/hBjh/m+FGOH+f4SY6f5vhZjp/n+EWOX+b4VY5f5/hNjt/m+F2O3+f4Q44/5vhTjj/n+EuOv+b4W46/5/hHjn/m+FeOf+f4T47/5vhfjkMKHKfAoQWOW+CwAscrcPwCJyhweIETFjhRgRMXOEmBkxY4WYGTFzhFgVMWOFWBUxc4TYHTFjhdgdMXOEOBMxY4U4EzFzhLgbMWOFuBsxc4R4FzFjhXgXMXOE+B8xY4X4HzF7hAgQsWuFCBCxe4SIGLFrhYgYsXuESBFLhkgUsVuHSByxS4bIHLFbh8gSsUuGKBKxW4coGrFLhqgasVuHqBaxS4ZoFrFbh2gesUuG6B6xW4foEbFLhhgRsVuHGBmxS4aYGbFbh5gVsUuGWBWxW4dYHbFLhtgdsVuH2BOxS4Y4E7FbhzgbsUOKLAXQvcrcDdC9yjwD0L3KvAvQvcp8B9C9yvwP0LPKDAAws8qMCDCzykwEMLPKzAwws8osAjCzyqwKMLPKbAYws8rsDjCzyhQAs8scCTCjy5wFMKPLXA0wo8vcAzCjyzwLMKPLvAcwo8t8DzCjy/wAsKvLDAiwq8uMBLCry0wMsKvLzAKwq8shg25KoCry7wmgKvLfC6Aq8v8IYCbyzwpgJvLvCWAm8t8LYCby/wjgIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYF3lngXQXeXeDIAkcVOLrAMQWOLfCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCny7wmQKfLfC5Ap8v8IUCXyzwpQJfLvCVAl8t8LUCXy/wjQLfLPCtAt8u8J0C3y3wvQLfL/CDAj8s8KMCPy7wkwI/LfCzAj8v8IsCvyzwqwK/LvCbAr8t8LsCvy/whwJ/LPCnAn8u8JcCfy3wtwJ/L/CPAv8s8K8C/y7wnwL/LfC/AoeUOE6JQ0sct8RhJY5X4vglTlDi8BInLHGiEicucZISJy1xshInL3GKEqcscaoSpy5xmhKnLXG6EqcvcYYSZyxxphJnLnGWEmctcbYSZy9xjhLnLHGuEucucZ4S5y1xvhLnL3GBEhcscaESFy5xkRIXLXGxEhcvcYkSKXHJEpcqcekSlylx2RKXK3H5ElcoccUSVypx5RJXKXHVElcrcfUS1yhxzRLXKnHtEtcpcd0S1ytx/RI3KHHDEjcqceMSNylx0xI3K3HzErcoccsStypx6xK3KXHbErcrcfsSdyhxxxJ3KnHnEncpcUSJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiZZ4YoknlXhyiaeUeGqJp5V4eolnlHhmiWeVeHaJ55R4bonnlXh+iReUeGGJF5V4cYmXlHhpiZeVeHmJV5R4ZYlXlXh1ideUeG2J15V4fYk3lHhjiTeVeHOJt5R4a4m3lXh7iXeUOCgxKDEsMSoxLjEpMS0xKzEvsSixLLEqsS6xKbEtsSuxL/HOEu8q8e4SR5Y4qsTRJY4pcWyJ95R4b4n3lXh/iQ+U+GCJD5X4cImPlPhoiY+V+HiJT5T4ZIlPlfh0ic+U+GyJz5X4fIkvlPhiiS+V+HKJr5T4aomvlfh6iW+U+GaJb5X4donvlPhuie+V+H6JH5T4YYkflfhxiZ+U+GmJn5X4eYlflPhliV+V+HWJ35T4bYnflfh9iT+U+GOJP5X4c4m/lPhrib+V+HuJf5T4Z4l/lfh3if+U+G+J/5U4pMJxKhxa4bgVDqtwvArHr3CCCodXOGGFE1U4cYWTVDhphZNVOHmFU1Q4ZYVTVTh1hdNUOG2F01U4fYUzVDhjhTNVOHOFs1Q4a4WzVTh7hXNUOGeFc1U4d4XzVDhvhfNVOH+FC1S4YIULVbhwhYtUuGiFi1W4eIVLVEiFS1a4VIVLV7hMhctWuFyFy1e4QoUrVrhShStXuEqFq1a4WoWrV7hGhWtWuFaFa1e4ToXrVrhehetXuEGFG1a4UYUbV7hJhZtWuFmFm1e4RYVbVrhVhVtXuE2F21a4XYXbV7hDhTtWuFOFO1e4S4UjKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyq0whMrPKnCkys8pcJTKzytwtMrPKPCMys8q8KzKzynwnMrPK/C8yu8oMILK7yowosrvKTCSyu8rMLLK7yiwisrvKrCqyu8psJrK7yuwusrvKHCGyu8qcKbK7ylwlsrvK3C2yu8o8JBhUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2Fd1Z4V4V3VziywlEVjq5wTIVjK7ynwnsrvK/C+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCpyt8psJnK3yuwucrfKHCFyt8qcKXK3ylwlcrfK3C1yt8o8I3K3yrwrcrfKfCdyt8r8L3K/ygwg8r/KjCjyv8pMJPK/ysws8r/KLCLyv8qsKvK/ymwm8r/K7C7yv8ocIfK/ypwp8r/KXCXyv8rcLfK/yjwj8r/KvCvyv8p8J/K/yvwiE1jlPj0BrHrXFYjePVOH6NE9Q4vMYJa5yoxolrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKJGalyyxqVqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1qHFHjrjXuVuPuNe5R45417lXj3jXuU+O+Ne5X4/41HlDjgTUeVOPBNR5S46E1Hlbj4TUeUeORNR5V49E1HlPjsTUeV+PxNZ5QozWeWONJNZ5c4yk1nlrjaTWeXuMZNZ5Z41k1nl3jOTWeW+N5NZ5f4wU1XljjRTVeXOMlNV5a42U1Xl7jFTVeWeNVNV5d4zU1XlvjdTVeX+MNNd5Y40013lzjLTXeWuNtNd5e4x01DmoMagxrjGqMa0xqTGvMasxrLGosa6xqrGtsamxr7Grsa7yzxrtqvLvGkTWOqnF0jWNqHFvjPTXeW+N9Nd5f4wM1PljjQzU+XOMjNT5a42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjWzW+XeM7Nb5b43s1vl/jBzV+WONHNX5c4yc1flrjZzV+XuMXNX5Z41c1fl3jNzV+W+N3NX5f4w81/ljjTzX+XOMvNf5a4281/l7jHzX+WeNfNf5d4z81/lvjfzUOaXCcBoc2OG6Dwxocr8HxG5ygweENTtjgRA1O3OAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDdLgkg0u1eDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCIBndtcLcGd29wjwb3bHCvBvducJ8G921wvwb3b/CABg9s8KAGD27wkAYPbfCwBg9v8IgGj2zwqAaPbvCYBo9t8LgGj2/whAZt8MQGT2rw5AZPafDUBk9r8PQGz2jwzAbPavDsBs9p8NwGz2vw/AYvaPDCBi9q8OIGL2nw0gYva/DyBq9o8MoGr2rw6gavafDaBq9r8PoGb2jwxgZvavDmBm9p8NYGb2vw9gbvaHDQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN/gnQ3e1eDdDY5scFSDoxsc0+DYBu9p8N4G72vw/gYfaPDBBh9q8OEGH2nw0QYfa/DxBp9o8MkGn2rw6QafafDZBp9r8PkGX2jwxQZfavDlBl9p8NUGX2vw9QbfaPDNBt9q8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2jwywa/avDrBr9p8NsGv2vw+wZ/aPDHBn9q8OcGf2nw1wZ/a/D3Bv9o8M8G/2rw7wb/afDfBv9rcEiL47Q4tMVxWxzW4ngtjt/iBC0Ob3HCFidqceIWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2iRFpdscakWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWR7S4a4u7tbh7i3u0uGeLe7W4d4v7tLhvi/u1uH+LB7R4YIsHtXhwi4e0eGiLh7V4eItHtHhki0e1eHSLx7R4bIvHtXh8iye0aIsntnhSiye3eEqLp7Z4Wount3hGi2e2eFaLZ7d4Tovntnhei+e3eEGLF7Z4UYsXt3hJi5e2eFmLl7d4RYtXtnhVi1e3eE2L17Z4XYvXt3hDize2eFOLN7d4S4u3tnhbi7e3eEeLgxaDFsMWoxbjFpMW0xazFvMWixbLFqsW6xabFtsWuxb7Fu9s8a4W725xZIujWhzd4pgWx7Z4T4v3tnhfi/e3+ECLD7b4UIsPt/hIi4+2+FiLj7f4RItPtvhUi0+3+EyLz7b4XIvPt/hCiy+2+FKLL7f4Souvtvhai6+3+EaLb7b4Votvt/hOi++2+F6L77f4QYsftvhRix+3+EmLn7b4WYuft/hFi1+2+FWLX7f4TYvftvhdi9+3+EOLP7b4U4s/t/hLi7+2+FuLv7f4R4t/tvhXi3+3+E+L/7b4X4tDOhynw6EdjtvhsA7H63D8DifocHiHE3Y4UYcTdzhJh5N2OFmHk3c4RYdTdjhVh1N3OE2H03Y4XYfTdzhDhzN2OFOHM3c4S4ezdjhbh7N3OEeHc3Y4V4dzdzhPh/N2OF+H83e4QIcLdrhQhwt3uEiHi3a4WIeLd7hEh3S4ZIdLdbh0h8t0uGyHy3W4fIcrdLhihyt1uHKHq3S4aoerdbh6h2t0uGaHa3W4dofrdLhuh+t1uH6HG3S4YYcbdbhxh5t0uGmHm3W4eYdbdLhlh1t1uHWH23S4bYfbdbh9hzt0uGOHO3W4c4e7dDiiw1073K3D3Tvco8M9O9yrw7073KfDfTvcr8P9OzygwwM7PKjDgzs8pMNDOzysw8M7PKLDIzs8qsOjOzymw2M7PK7D4zs8oUM7PLHDkzo8ucNTOjy1w9M6PL3DMzo8s8OzOjy7w3M6PLfD8zo8v8MLOryww4s6vLjDSzq8tMPLOry8wys6vLLDqzq8usNrOry2w+s6vL7DGzq8scObOry5w1s6vLXD2zq8vcM7Ohx0GHQYdhh1GHeYdJh2mHWYd1h0WHZYdVh32HTYdth12Hd4Z4d3dXh3hyM7HNXh6A7HdDi2w3s6vLfD+zq8v8MHOnyww4c6fLjDRzp8tMPHOny8wyc6fLLDpzp8usNnOny2w+c6fL7DFzp8scOXOny5w1c6fLXD1zp8vcM3Onyzw7c6fLvDdzp8t8P3Ony/ww86/LDDjzr8uMNPOvy0w886/LzDLzr8ssOvOvy6w286/LbD7zr8vsMfOvyxw586/LnDXzr8tcPfOvy9wz86/LPDvzr8u8N/Ovy3w/86HNLjOD0O7XHcHof1OF6P4/c4QY/De5ywx4l6nLjHSXqctMfJepy8xyl6nLLHqXqcusdpepy2x+l6nL7HGXqcsceZepy5x1l6nLXH2Xqcvcc5epyzx7l6nLvHeXqct8f5epy/xwV6XLDHhXpcuMdFely0x8V6XLzHJXqkxyV7XKrHpXtcpsdle1yux+V7XKHHFXtcqceVe1ylx1V7XK3H1Xtco8c1e1yrx7V7XKfHdXtcr8f1e9ygxw173KjHjXvcpMdNe9ysx8173KLHLXvcqsete9ymx217RvwvVnSHHnfscaced+5xlx5H9Lhrj7v1uHuPe/S4Z4979bh3j/v0uG+P+/W4f48H9Hhgjwf1eHCPh/R4aI+H9Xh4j0f0eGSPR/V4dI/H9Hhsj8f1eHyPJ/Rojyf2eFKPJ/d4So+n9nhaj6f3eEaPZ/Z4Vo9n93hOj+f2eF6P5/d4QY8X9nhRjxf3eEmPl/Z4WY+X93hFj1f2eFWPV/d4TY/X9nhdj9f3eEOPN/Z4U48393hLj7f2eFuPt/d4R4+DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7+zxrh7v7nFkj6N6HN3jmB7H9v+Pp3tMw/NgFCCcIqlt25zatm3b9tS2bdt9Hxu1bdup2/Bc35+zgpkd3FgMsBxgNcB6gM0A2wF2A+wH+PQAnxngswN8boDPD/CFAb44wJcG+PIAXxngqwN8bYCvD/CNAb45wLcG+PYA3xnguwN8b4DvD/CDAX44wI8G+PEAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwMcPsDfBvj7AP8Y4J8D/GuAfw/wnwH+O8D/BjhigCMHOGqAowc4ZoBjBzgkwHECHDfA8QIcP8ChAQ4LcIIAJwxwogAnDnCSACcNcLIAJw9wigCnDHCqAKcOcJoApw1wugCnD3CGAGcMcKYAZw5wlgBnDXC2AGcPcI4A5wxwrgDnDnCeAOcNcL4A5w9wgQAXDHChABcOcJEAFw1wsQAXD3CJAJcMkACXCnDpAJcJcNkAlwtw+QBXCHDFAFcKcOUAVwlw1QBXC3D1ANcIcM0A1wpw7QDXCXDdANcLcP0ANwhwwwA3CnDjADcJcNMANwtw8wC3CHDLALcKcOsAtwlw2wC3C3D7AHcIcMcAdwpw5wB3CXDXAHcLcPcA9whwzwD3CnDvAPcJcN8A9wtw/wAPCPDAAA8K8OAADwnw0AAPC/DwAI8I8MgAjwrw6ACPCfDYAI8L8PgATwjwxABPCtAATw7wlABPDfC0AE8P8IwAzwzwrADPDvCcAM8N8LwAzw/wggAvDPCiAC8O8JIALw3wsgAvD/CKAK8M8KoArw7wmgCvDfC6AK8P8IYAbwzwpgBvDvCWAG8N8LYAbw/wjgDvDPCuAO8O8J4A7w3wvgDvD/CBAB8M8KEAHw7wkQAfDfCxAB8P8IkAnwzwqQAHAQYBhgFGAcYBJgGmAWYB5gEWAZYBVgHWATYBtgF2AfYBPh3gMwE+G+BzAT4f4AsBvhjgSwG+HOArAb4a4GsBvh7gGwG+GeBbAb4d4DsBvhvgewG+H+AHAX4Y4EcBfhzgJwF+GuBnAX4e4BcBfhngVwF+HeA3AX4b4HcBfh/gDwH+GOBPAf4c4C8B/hrg8AB/C/D3AP8I8M8A/wrw7wD/CfDfAP8LcESAIwMcFeDoAMcEODbAISGOE+K4IY4X4vghDg1xWIgThDhhiBOFOHGIk4Q4aYiThTh5iFOEOGWIU4U4dYjThDhtiNOFOH2IM4Q4Y4gzhThziLOEOGuIs4U4e4hzhDhniHOFOHeI84Q4b4jzhTh/iAuEuGCIC4W4cIiLhLhoiIuFuHiIS4S4ZIiEuFSIS4e4TIjLhrhciMuHuEKIK4a4Uogrh7hKiKuGuFqIq4e4RohrhrhWiGuHuE6I64a4Xojrh7hBiBuGuFGIG4e4SYibhrhZiJuHuEWIW4a4VYhbh7hNiNuGuF2I24e4Q4g7hrhTiDuHuEuIu4a4W4i7h7hHiHuGuFeIe4e4T4j7hrhfiPuHeECIB4Z4UIgHh3hIiIeGeFiIh4d4RIhHhnhUiEeHeEyIx4Z4XIjHh3hCiCeGeFKIhnhyiKeEeGqIp4V4eohnhHhmiGeFeHaI54R4bojnhXh+iBeEeGGIF4V4cYiXhHhpiJeFeHmIV4R4ZYhXhXh1iNeEeG2I14V4fYg3hHhjiDeFeHOIt4R4a4i3hXh7iHeEeGeId4V4d4j3hHhviPeFeH+ID4T4YIgPhfhwiI+E+GiIj4X4eIhPhPhkiE+FOAgxCDEMMQoxDjEJMQ0xCzEPsQixDLEKsQ6xCbENsQuxD/HpEJ8J8dkQnwvx+RBfCPHFEF8K8eUQXwnx1RBfC/H1EN8I8c0Q3wrx7RDfCfHdEN8L8f0QPwjxwxA/CvHjED8J8dMQPwvx8xC/CPHLEL8K8esQvwnx2xC/C/H7EH8I8ccQfwrx5xB/CfHXEIeH+FuIv4f4R4h/hvhXiH+H+E+I/4b4X4gjQhwZ4qgQR4c4JsSxIQ6JcJwIx41wvAjHj3BohMMinCDCCSOcKMKJI5wkwkkjnCzCySOcIsIpI5wqwqkjnCbCaSOcLsLpI5whwhkjnCnCmSOcJcJZI5wtwtkjnCPCOSOcK8K5I5wnwnkjnC/C+SNcIMIFI1wowoUjXCTCRSNcLMLFI1wiwiUjJMKlIlw6wmUiXDbC5SJcPsIVIlwxwpUiXDnCVSJcNcLVIlw9wjUiXDPCtSJcO8J1Ilw3wvUiXD/CDSLcMMKNItw4wk0i3DTCzSLcPMItItwywq0i3DrCbSLcNsLtItw+wh0i3DHCnSLcOcJdItw1wt0i3D3CPSLcM8K9Itw7wn0i3DfC/SLcP8IDIjwwwoMiPDjCQyI8NMLDIjw8wiMiPDLCoyI8OsJjIjw2wuMiPD7CEyI8McKTIjTCkyM8JcJTIzwtwtMjPCPCMyM8K8KzIzwnwnMjPC/C8yO8IMILI7wowosjvCTCSyO8LMLLI7wiwisjvCrCqyO8JsJrI7wuwusjvCHCGyO8KcKbI7wlwlsjvC3C2yO8I8I7I7wrwrsjvCfCeyO8L8L7I3wgwgcjfCjChyN8JMJHI3wswscjfCLCJyN8KsJBhEGEYYRRhHGESYRphFmEeYRFhGWEVYR1hE2EbYRdhH2ET0f4TITPRvhchM9H+EKEL0b4UoQvR/hKhK9G+FqEr0f4RoRvRvhWhG9H+E6E70b4XoTvR/hBhB9G+FGEH0f4SYSfRvhZhJ9H+EWEX0b4VYRfR/hNhN9G+F2E30f4Q4Q/RvhThD9H+EuEv0Y4PMLfIvw9wj8i/DPCvyL8O8J/Ivw3wv8iHBHhyAhHRTg6wjERjo1wSIzjxDhujOPFOH6MQ2McFuMEMU4Y40QxThzjJDFOGuNkMU4e4xQxThnjVDFOHeM0MU4b43QxTh/jDDHOGONMMc4c4ywxzhrjbDHOHuMcMc4Z41wxzh3jPDHOG+N8Mc4f4wIxLhjjQjEuHOMiMS4a42IxLh7jEjEuGSMxLhXj0jEuE+OyMS4X4/IxrhDjijGuFOPKMa4S46oxrhbj6jGuEeOaMa4V49oxrhPjujGuF+P6MW4Q44YxbhTjxjFuEuOmMW4W4+YxbhHjljFuFePWMW4T47Yxbhfj9jHuEOOOMe4U484x7hLjrjHuFuPuMe4R454x7hXj3jHuE+O+Me4X4/4xHhDjgTEeFOPBMR4S46ExHhbj4TEeEeORMR4V49ExHhPjsTEeF+PxMZ4Q44kxnhSjMZ4c4ykxnhrjaTGeHuMZMZ4Z41kxnh3jOTGeG+N5MZ4f4wUxXhjjRTFeHOMlMV4a42UxXh7jFTFeGeNVMV4d4zUxXhvjdTFeH+MNMd4Y400x3hzjLTHeGuNtMd4e4x0x3hnjXTHeHeM9Md4b430x3h/jAzE+GONDMT4c4yMxPhrjYzE+HuMTMT4Z41MxDmIMYgxjjGKMY0xiTGPMYsxjLGIsY6xirGNsYmxj7GLsY3w6xmdifDbG52J8PsYXYnwxxpdifDnGV2J8NcbXYnw9xjdifDPGt2J8O8Z3Ynw3xvdifD/GD2L8MMaPYvw4xk9i/DTGz2L8PMYvYvwyxq9i/DrGb2L8NsbvYvw+xh9i/DHGn2L8OcZfYvw1xuEx/hbj7zH+EeOfMf4V498x/hPjvzH+F+OIGEfGOCrG0TGOiXFsjEMSHCfBcRMcL8HxExya4LAEJ0hwwgQnSnDiBCdJcNIEJ0tw8gSnSHDKBKdKcOoEp0lw2gSnS3D6BGdIcMYEZ0pw5gRnSXDWBGdLcPYE50hwzgTnSnDuBOdJcN4E50tw/gQXSHDBBBdKcOEEF0lw0QQXS3DxBJdIcMkESXCpBJdOcJkEl01wuQSXT3CFBFdMcKUEV05wlQRXTXC1BFdPcI0E10xwrQTXTnCdBNdNcL0E109wgwQ3THCjBDdOcJMEN01wswQ3T3CLBLdMcKsEt05wmwS3TXC7BLdPcIcEd0xwpwR3TnCXBHdNcLcEd09wjwT3THCvBPdOcJ8E901wvwT3T/CABA9M8KAED07wkAQPTfCwBA9P8IgEj0zwqASPTvCYBI9N8LgEj0/whARPTPCkBE3w5ARPSfDUBE9L8PQEz0jwzATPSvDsBM9J8NwEz0vw/AQvSPDCBC9K8OIEL0nw0gQvS/DyBK9I8MoEr0rw6gSvSfDaBK9L8PoEb0jwxgRvSvDmBG9J8NYEb0vw9gTvSPDOBO9K8O4E70nw3gTvS/D+BB9I8MEEH0rw4QQfSfDRBB9L8PEEn0jwyQSfSnCQYJBgmGCUYJxgkmCaYJZgnmCRYJlglWCdYJNgm2CXYJ/g0wk+k+CzCT6X4PMJvpDgiwm+lODLCb6S4KsJvpbg6wm+keCbCb6V4NsJvpPguwm+l+D7CX6Q4IcJfpTgxwl+kuCnCX6W4OcJfpHglwl+leDXCX6T4LcJfpfg9wn+kOCPCf6U4M8J/pLgrwkOT/C3BH9P8I8E/0zwrwT/TvCfBP9N8L8ERyQ4MsFRCY5OcEyCYxMckuI4KY6b4ngpjp/i0BSHpThBihOmOFGKE6c4SYqTpjhZipOnOEWKU6Y4VYpTpzhNitOmOF2K06c4Q4ozpjhTijOnOEuKs6Y4W4qzpzhHinOmOFeKc6c4T4rzpjhfivOnuECKC6a4UIoLp7hIioumuFiKi6e4RIpLpkiKS6W4dIrLpLhsisuluHyKK6S4YoorpbhyiqukuGqKq6W4eoprpLhmimuluHaK66S4borrpbh+ihukuGGKG6W4cYqbpLhpipuluHmKW6S4ZYpbpbh1itukuG2K26W4fYo7pLhjijuluHOKu6S4a4q7pbh7inukuGeKe6W4d4r7pLhvivuluH+KB6R4YIoHpXhwioekeGiKh6V4eIpHpHhkikeleHSKx6R4bIrHpXh8iiekeGKKJ6VoiieneEqKp6Z4Woqnp3hGimemeFaKZ6d4TornpnheiueneEGKF6Z4UYoXp3hJipemeFmKl6d4RYpXpnhVileneE2K16Z4XYrXp3hDijemeFOKN6d4S4q3pnhbireneEeKd6Z4V4p3p3hPivemeF+K96f4QIoPpvhQig+n+EiKj6b4WIqPp/hEik+m+FSKgxSDFMMUoxTjFJMU0xSzFPMUixTLFKsU6xSbFNsUuxT7FJ9O8ZkUn03xuRSfT/GFFF9M8aUUX07xlRRfTfG1FF9P8Y0U30zxrRTfTvGdFN9N8b0U30/xgxQ/TPGjFD9O8ZMUP03xsxQ/T/GLFL9M8asUv07xmxS/TfG7FL9P8YcUf0zxpxR/TvGXFH9NcXiKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgixZEpjkpxdIpjUhyb4pAMx8lw3AzHy3D8DIdmOCzDCTKcMMOJMpw4w0kynDTDyTKcPMMpMpwyw6kynDrDaTKcNsPpMpw+wxkynDHDmTKcOcNZMpw1w9kynD3DOTKcM8O5Mpw7w3kynDfD+TKcP8MFMlwww4UyXDjDRf73NmTIkMUyXDzDJTJcMkMyXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw7UzXCfDdTNcL8P1M9wgww0z3CjDjTPcJMNNM9wsw80z3CLDLTPcKsOtM9wmw20z3C7D7TPcIcMdM9wpw50z3CXDXTPcLcPdM9wjwz0z3CvDvTPcJ8N9M9wvw/0zPCDDAzM8KMODMzwkw0MzPCzDwzM8IsMjMzwqw6MzPCbDYzM8LsPjMzwhwxMzPClDMzw5w1MyPDXD0zI8PcMzMjwzw7MyPDvDczI8N8PzMjw/wwsyvDDDizK8OMNLMrw0w8syvDzDKzK8MsOrMrw6w2syvDbD6zK8PsMbMrwxw5syvDnDWzK8NcPbMrw9wzsyvDPDuzK8O8N7Mrw3w/syvD/DBzJ8MMOHMnw4w0cyfDTDxzJ8PMMnMnwyw6cyHGQYZBhmGGUYZ5hkmGaYZZhnWGRYZlhlWGfYZNhm2GXYZ/h0hs9k+GyGz2X4fIYvZPhihi9l+HKGr2T4aoavZfh6hm9k+GaGb2X4dobvZPhuhu9l+H6GH2T4YYYfZfhxhp9k+GmGn2X4eYZfZPhlhl9l+HWG32T4bYbfZfh9hj9k+GOGP2X4c4a/ZPhrhsMz/C3D3zP8I8M/M/wrw78z/CfDfzP8L8MRGY7McFSGozMck+HYDIfkOE6O4+Y4Xo7j5zg0x2E5TpDjhDlOlOPEOU6S46Q5Tpbj5DlOkeOUOU6V49Q5TpPjtDlOl+P0Oc6Q44w5zpTjzDnOkuOsOc6W4+w5zpHjnDnOlePcOc6T47w5zpfj/DkukOOCOS6U48I5LpLjojkuluPiOS6R45I5kuNSOS6d4zI5Lpvjcjkun+MKOa6Y40o5rpzjKjmumuNqOa6e4xo5rpnjWjmuneM6Oa6b43o5rp/jBjlumONGOW6c4yY5bprjZjlunuMWOW6Z41Y5bp3jNjlum+N2OW6f4w457pjjTjnunOMuOe6a42457p7jHjnumeNeOe6d4z457pvjfjnun+MBOR6Y40E5HpzjITkemuNhOR6e4xE5HpnjUTkeneMxOR6b43E5Hp/jCTmemONJOZrjyTmekuOpOZ6W4+k5npHjmTmelePZOZ6T47k5npfj+TlekOOFOV6U48U5XpLjpTleluPlOV6R45U5XpXj1Tlek+O1OV6X4/U53pDjjTnelOPNOd6S46053pbj7TnekeOdOd6V49053pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5PpHjkzk+leMgxyDHMMcoxzjHJMc0xyzHPMcixzLHKsc6xybHNscuxz7Hp3N8Jsdnc3wux+dzfCHHF3N8KceXc3wlx1dzfC3H13N8I8c3c3wrx7dzfCfHd3N8L8f3c/wgxw9z/CjHj3P8JMdPc/wsx89z/CLHL3P8Ksevc/wmx29z/C7H73P8Iccfc/wpx59z/CXHX3McnuNvOf6e4x85/pnjXzn+neM/Of6b4385jshxZI6jchyd45gcx+Y4pMBxChy3wPEKHL/AoQUOK3CCAicscKICJy5wkgInLXCyAicvcIoCpyxwqgKnLnCaAqctcLoCpy9whgJnLHCmAmcucJYCZy1wtgJnL3COAucscK4C5y5wngLnLXC+AucvcIECFyxwoQIXLnCRAhctcLECFy9wiQKXLJAClypw6QKXKXDZApcrcPkCVyhwxQJXKnDlAlcpcNUCVytw9QLXKHDNAtcqcO0C1ylw3QLXK3D9AjcocMMCNypw4wI3KXDTAjcrcPMCtyhwywK3KnDrArcpcNsCtytw+wJ3KHDHAncqcOcCdylw1wJ3K3D3AvcocM8C9ypw7wL3KXDfAvcrcP8CDyjwwAIPKvDgAg8p8NACDyvw8AKPKPDIAo8q8OgCjynw2AKPK/D4Ak8o8MQCTyrQAk8u8JQCTy3wtAJPL/CMAs8s8KwCzy7wnALPLfC8As8v8IICLyzwogIvLvCSAi8t8LICLy/wigKvLPCqAq8u8JoCry3wugKvL/CGAm8s8KYCby7wlgJvLfC2Am8v8I4C7yzwrgLvLvCeAu8t8L4C7y/wgQIfLPChAh8u8JECHy3wsQIfL/CJAp8s8KkCBwUGBYYFRgXGBSYFpgVmBeYFFgWWBVYF1gU2BbYFdgX2BT5d4DMFPlvgcwU+X+ALBb5Y4EsFvlzgKwW+WuBrBb5e4BsFvlngWwW+XeA7Bb5b4HsFvl/gBwV+WOBHBX5c4CcFflrgZwV+XuAXBX5Z4FcFfl3gNwV+W+B3BX5f4A8F/ljgTwX+XOAvBf5a4PACfyvw9wL/KPDPAv8q8O8C/ynw3wL/K3BEgSMLHFXg6ALHFDi2wCEljlPiuCWOV+L4JQ4tcViJE5Q4YYkTlThxiZOUOGmJk5U4eYlTlDhliVOVOHWJ05Q4bYnTlTh9iTOUOGOJM5U4c4mzlDhribOVOHuJc5Q4Z4lzlTh3ifOUOG+J85U4f4kLlLhgiQuVuHCJi5S4aImLlbh4iUuUuGSJlLhUiUuXuEyJy5a4XInLl7hCiSuWuFKJK5e4SomrlrhaiauXuEaJa5a4Volrl7hOieuWuF6J65e4QYkblrhRiRuXuEmJm5a4WYmbl7hFiVuWuFWJW5e4TYnblrhdiduXuEOJO5a4U4k7l7hLibuWuFuJu5e4R4l7lrhXiXuXuE+J+5a4X4n7l3hAiQeWeFCJB5d4SImHlnhYiYeXeESJR5Z4VIlHl3hMiceWeFyJx5d4QoknlnhSiZZ4comnlHhqiaeVeHqJZ5R4ZolnlXh2ieeUeG6J55V4fokXlHhhiReVeHGJl5R4aYmXlXh5iVeUeGWJV5V4dYnXlHhtideVeH2JN5R4Y4k3lXhzibeUeGuJt5V4e4l3lHhniXeVeHeJ95R4b4n3lXh/iQ+U+GCJD5X4cImPlPhoiY+V+HiJT5T4ZIlPlTgoMSgxLDEqMS4xKTEtMSsxL7EosSyxKrEusSmxLbErsS/x6RKfKfHZEp8r8fkSXyjxxRJfKvHlEl8p8dUSXyvx9RLfKPHNEt8q8e0S3ynx3RLfK/H9Ej8o8cMSPyrx4xI/KfHTEj8r8fMSvyjxyxK/KvHrEr8p8dsSvyvx+xJ/KPHHEn8q8ecSfynx1xKHl/hbib+X+EeJf5b4V4l/l/hPif+W+F+JI0ocWeKoEkeXOKbEsSUOqXCcCsetcLwKx69waIXDKpygwgkrnKjCiSucpMJJK5yswskrnKLCKSucqsKpK5ymwmkrnK7C6SucocIZK5ypwpkrnKXCWSucrcLZK5yjwjkrnKvCuSucp8J5K5yvwvkrXKDCBStcqMKFK1ykwkUrXKzCxStcosIlK6TCpSpcusJlKly2wuUqXL7CFSpcscKVKly5wlUqXLXC1SpcvcI1KlyzwrUqXLvCdSpct8L1Kly/wg0q3LDCjSrcuMJNKty0ws0q3LzCLSrcssKtKty6wm0q3LbC7SrcvsIdKtyxwp0q3LnCXSrctcLdKty9wj0q3LPCvSrcu8J9Kty3wv0q3L/CAyo8sMKDKjy4wkMqPLTCwyo8vMIjKjyywqMqPLrCYyo8tsLjKjy+whMqPLHCkyq0wpMrPKXCUys8rcLTKzyjwjMrPKvCsys8p8JzKzyvwvMrvKDCCyu8qMKLK7ykwksrvKzCyyu8osIrK7yqwqsrvKbCayu8rsLrK7yhwhsrvKnCmyu8pcJbK7ytwtsrvKPCOyu8q8K7K7ynwnsrvK/C+yt8oMIHK3yowocrfKTCRyt8rMLHK3yiwicrfKrCQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hU9X+EyFz1b4XIXPV/hChS9W+FKFL1f4SoWvVvhaha9X+EaFb1b4VoVvV/hOhe9W+F6F71f4QYUfVvhRhR9X+EmFn1b4WYWfV/hFhV9W+FWFX1f4TYXfVvhdhd9X+EOFP1b4U4U/V/hLhb9WOLzC3yr8vcI/Kvyzwr8q/LvCfyr8t8L/KhxR4cgKR1U4usIxFY6tcEiN49Q4bo3j1Th+jUNrHFbjBDVOWONENU5c4yQ1TlrjZDVOXuMUNU5Z41Q1Tl3jNDVOW+N0NU5f4ww1zljjTDXOXOMsNc5a42w1zl7jHEOHDPlff64a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF69xiRqXrJEal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjercfMat6hxyxq3qnHrGrepcdsat6tx+xp3qHHHGneqcecad6lx1xp3q3H3Gveocc8a96px7xr3qXHfGvercf8aD6jxwBoPqvHgGg+p8dAaD6vx8BqPqPHIGo+q8egaj6nx2BqPq/H4Gk+o8cQaT6rRGk+u8ZQaT63xtBpPr/GMGs+s8awaz67xnBrPrfG8Gs+v8YIaL6zxohovrvGSGi+t8bIaL6/xihqvrPGqGq+u8Zoar63xuhqvr/GGGm+s8aYab67xlhpvrfG2Gm+v8Y4a76zxrhrvrvGeGu+t8b4a76/xgXr4/7tPD9f4SI2P1vhYjY/X+ESNT9b4VI2DGoMawxqjGuMakxrTGrMa8xqLGssaqxrrGpsa2xq7Gvsan67xmRqfrfG5Gp+v8YUaX6zxpRpfrvGVGl+t8bUaX6/xjRrfrPGtGt+u8Z0a363xvRrfr/GDGj+s8aMaP67xkxo/rfGzGj+v8Ysav6zxqxq/rvGbGr+t8bsav6/xhxp/rPGnGn+u8Zcaf61xeI2/1fh7jX/U+GeNf9X4d43/1Phvjf/VOKLGkTWOqnF0jWNqHFvjkAbHaXDcBsdrcPwGhzY4rMEJGpywwYkanLjBSRqctMHJGpy8wSkanLLBqRqcusFpGpy2wekanL7BGRqcscGZGpy5wVkanLXB2RqcvcE5GpyzwbkanLvBeRqct8H5Gpy/wQUaXLDBhRpcuMFFGly0wcUaXLzBJRpcskEaXKrBpRtcpsFlG1yuweUbXKHBFRtcqcGVG1ylwVUbXK3B1Rtco8E1G1yrwbUbXKfBdRtcr8H1G9ygwQ0b3KjBjRvcpMFNG9yswc0b3KLBLRvcqsGtG9ymwW0b3K7B7RvcocEdG9ypwZ0b3KXBXRvcrcHdG9yjwT0b3KvBvRuG7dPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7UoA2e3OApDZ7a4GkNnt7gGQ2e2eBZDZ7d4DkNntvgeQ2e3+AFDV7Y4EUNXtzgJQ1e2uBlDV7e4BUNXtngVQ1e3eA1DV7b4HUNXt/gDQ3e2OBNDd7c4C0N3trgbQ3e3uAdDd7Z4F0N3t3gPQ3e2+B9Dd7f4AMNPtjgQw0+3OAjDT7a4GMNPt7gEw0+2eBTDQ4aDBoMG4wajBtMGkwbzBrMGywaLBusGqwbbBpsG+wa7Bt8usFnGny2wecafL7BFxp8scGXGny5wVcafLXB1xp8vcE3GnyzwbcafLvBdxp8t8H3Gny/wQ8a/LDBjxr8uMFPGvy0wc8a/LzBLxr8ssGvGvy6wW8a/LbB7xr8vsEfGvyxwZ8a/LnBXxr8tcHhDf7W4O8N/tHgnw3+1eDfDf7T4L8N/tfgiAZHNjiqwdENjmlwbINDWhynxXFbHK/F8Vsc2uKwFidoccIWJ2px4hYnaXHSFidrcfIWp2hxyhananHqFqdpcdoWp2tx+hZnaHHGFmdqceYWZ2lx1hZna3H2Fudocc4W52px7hbnaXHeFudrcf4WF2hxwRYXanHhFhdpcdEWF2tx8RaXaHHJFmlxqRaXbnGZFpdtcbkWl29xhRZXbHGlFlducZUWV21xtRZXb3GNFtdsca0W125xnRbXbXG9FtdvcYMWN2xxoxY3bnGTFjdtcbMWN29xixa3bHGrFrducZsWt21xuxa3b3GHFndscacWd25xlxZ3bXG3FndvcY8W92xxrxb3bnGfFvdtcb8W92/xgBYPbPGgFg9u8ZAWD23xsBYPb/GIFo9s8agWj27xmBaPbfG4Fo9v8YQWT2zxpBZt8eQWT2nx1BZPa/H0Fs9o8cwWz2rx7BbPafHcFs9r8fwWL2jxwhYvavHiFi9p8dIWL2vx8havaPHKFq9q8eoWr2nx2hava/H6Fm9o8cYWb2rx5hZvafHWFm9r8fYW72jxzhbvavHuFu9p8d4W72vx/hYfaPHBFh9q8eEWH2nx0RYfa/HxFp9o8ckWn2px0GLQYthi1GLcYtJi2mLWYt5i0WLZYtVi3WLTYtti12Lf4tMtPtPisy0+1+LzLb7Q4ostvtTiyy2+0uKrLb7W4ustvtHimy2+1eLbLb7T4rstvtfi+y1+0OKHLX7U4sctftLipy1+1uLnLX7R4pctftXi1y1+0+K3LX7X4vct/tDijy3+1OLPLf7S4q8tDm/xtxZ/b/GPFv9s8a8W/27xnxb/bfG/Fke0OLLFUS2ObnFMi2NbHNLhOB2O2+F4HY7f4dAOh3U4QYcTdjhRhxN3OEmHk3Y4WYeTdzhFh1N2OFWHU3c4TYfTdjhdh9N3OEOHM3Y4U4czdzhLh7N2OFuHs3c4R4dzdjhXh3N3OE+H83Y4X4fzd7hAhwt2uFCHC3e4SIeLdrhYh4t3uESHS3ZIh0t1uHSHy3S4bIfLdbh8hyt0uGKHK3W4coerdLhqh6t1uHqHa3S4Zodrdbh2h+t0uG6H63W4focbdLhhhxt1uHGHm3S4aYebdbh5h1t0uGWHW3W4dYfbdLhth9t1uH2HO3S4Y4c7dbhzh7t0uGuHu3W4e4d7dLhnh3t1uHeH+3S4b4f7dbh/hwd0eGCHB3V4cIeHdHhoh4d1eHiHR3R4ZIdHdXh0h8d0eGyHx3V4fIcndHhihyd1aIcnd3hKh6d2eFqHp3d4RodndnhWh2d3eE6H53Z4Xofnd3hBhxd2eFGHF3d4SYeXdnhZh5d3eEWHV3Z4VYdXd3hNh9d2eF2H13d4Q4c3dnhThzd3eEuHt3Z4W4e3d3hHh3d2eFeHd3d4T4f3dnhfh/d3+ECHD3b4UIcPd/hIh492+FiHj3f4RIdPdvhUh4MOgw7DDqMO4w6TDtMOsw7zDosOyw6rDusOmw7bDrsO+w6f7vCZDp/t8LkOn+/whQ5f7PClDl/u8JUOX+3wtQ5f7/CNDt/s8K0O3+7wnQ7f7fC9Dt/v8IMOP+zwow4/7vCTDj/t8LMOP+/wiw6/7PCrDr/u8JsOv+3wuw6/7/CHDn/s8KcOf+7wlw5/7XB4h791+HuHf3T4Z4d/dfh3h/90+G+H/3U4osORHY7qcHSHYzoc2+GQHsfpcdwex+tx/B6H9jisxwl6nLDHiXqcuMdJepy0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcfZepy9xzl6nLPHuXqcu8d5epy3x/l6nL/HBXpcsMeFely4x0V6XLTHxXpcvMclelyyR3pcqsele1ymx2V7XK7H5XtcoccVe1ypx5V7XKXHVXtcrcfVe1yjxzV7XKvHtXtcp8d1e1yvx/V73KDHDXvcqMeNe9ykx0173KzHzXvcoscte9yqx6173KbHbXvcrsfte9yhxx173KnHnXvcpcdde9ytx9173KPHPXvcq8e9e9ynx3173K/H/Xs8oMcDezyox4N7PKTHQ3s8rMfDezyixyN7PKrHo3s8psdjezyux+N7PKHHE3s8qUd7PLnHU3o8tcfTejy9xzN6PLPHs3o8u8dzejy3x/N6PL/HC3q8sMeLery4x0t6vLTHy3q8vMcreryyx6t6vLrHa3q8tsfrery+xxt6vLHHm3q8ucdbery1x9t6vL3HO3q8s8e7ery7x3t6vLfH+3q8v8cHenywx4d6fLjHR3p8tMfHeny8xyd6fLLHp3oc9Ph/AQAA//9JTd0g") r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="180100002b00010000000000ffdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x890}, 0x0) 4.751734819s ago: executing program 6 (id=4206): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101701) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000055395c20009050000000000000007058433", @ANYRESDEC=0x0], 0x0) 3.720523972s ago: executing program 2 (id=4216): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x8000, 0x0, @mcast1, 0x46}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="800037a88f13ce00", 0x8, 0x20008084, &(0x7f0000000180)={0xa, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x989}, 0x1c) 3.595136546s ago: executing program 2 (id=4218): setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_clone3(&(0x7f0000000540)={0x2080, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0x0], 0x1}, 0x58) 3.170851579s ago: executing program 2 (id=4220): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 2.942838307s ago: executing program 2 (id=4223): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8080, &(0x7f0000000080)={0xa, 0x4e23, 0x3, @local, 0x2}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4) 2.765397062s ago: executing program 2 (id=4226): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nojournal_checksum}]}, 0x1, 0x5bc, &(0x7f0000001440)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x4b) getdents(r0, 0x0, 0x0) 2.758235013s ago: executing program 6 (id=4227): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2.571914818s ago: executing program 6 (id=4230): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001964d408861a92e03f530102030109022400010200100309041f0202e917f300090502020002020000090582020002"], 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000e02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.359040025s ago: executing program 3 (id=4234): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb1, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) 2.136132092s ago: executing program 4 (id=4236): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r1}, @IFLA_GTP_ROLE={0x8, 0x4, 0x2}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 2.135999992s ago: executing program 3 (id=4237): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0) setresuid(0xee01, 0xee01, 0x0) fchown(r0, 0x0, 0x0) 2.042709295s ago: executing program 3 (id=4238): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000001300)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x14, r0, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400}, 0x80) 1.994974837s ago: executing program 3 (id=4240): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) 1.90136721s ago: executing program 4 (id=4242): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x40002040, 0x0) 1.793030073s ago: executing program 7 (id=4243): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x11, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 1.735170935s ago: executing program 7 (id=4244): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003"], 0x0, 0x53}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)) 1.689326707s ago: executing program 4 (id=4245): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0xa00) ioctl$I2C_PEC(r0, 0x708, 0x200) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0xe, 0x2, &(0x7f0000000000)={0x9, "56b6b38afc5357059377a81a3d57b6a6fb7aca652559efc8e2c3844bcd3b199f9b"}}) 1.659079788s ago: executing program 7 (id=4246): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0x3) 1.58418902s ago: executing program 4 (id=4247): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x80, 0x0}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000002ec0)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0x0, @remote, 0x1002}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x86a9}, 0x24000800) 1.550732471s ago: executing program 7 (id=4248): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000000c0)={&(0x7f0000000080), 0x23}) 1.488795703s ago: executing program 4 (id=4249): ioctl$VIDIOC_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @raw_data=[0x8001, 0x6, 0x9, 0x2, 0xfffffffd, 0x708a, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4, 0x5cc, 0x0, 0x41000, 0x553b2758, 0xa, 0x80000001, 0x1, 0x80, 0x4, 0x7, 0xffffff81, 0x2, 0x1, 0xcb, 0x5, 0x393a00, 0x401, 0xffff0000, 0x1ff]}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan1\x00'}) 1.421093765s ago: executing program 4 (id=4250): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x48) 1.390079556s ago: executing program 7 (id=4251): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000024c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000001000)=ANY=[], 0xfd, 0x631c, &(0x7f00000027c0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x85a4c8, 0x0, 0xff, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) 1.059374097s ago: executing program 3 (id=4252): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xb}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000200)=0x1, 0x4) 786.813655ms ago: executing program 3 (id=4253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) 545.793013ms ago: executing program 2 (id=4254): r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e1f, @multicast1}}, 0x24) sendto(r0, 0x0, 0x0, 0x4008044, 0x0, 0x0) 144.977386ms ago: executing program 6 (id=4255): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x8) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="100000000000000084"], 0x10, 0x20040815}, 0x24000052) 22.6286ms ago: executing program 6 (id=4256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x64}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0xffffff53, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}}, 0x0) 0s ago: executing program 7 (id=4257): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x28, 0x68, 0x1, 0xfcff, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x4}, [@NHA_ID={0x8, 0x6}, @NHA_OIF={0x8, 0x5, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4002}, 0x4000000) kernel console output (not intermixed with test programs): (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 215.992602][T10864] XFS (loop2): Mounting V5 Filesystem [ 216.004421][T10896] loop3: detected capacity change from 0 to 8192 [ 216.138896][T10908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3059'. [ 216.175627][T10909] netlink: 'syz.4.3059': attribute type 21 has an invalid length. [ 216.201864][T10909] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3059'. [ 216.373795][T10864] XFS (loop2): Ending clean mount [ 216.471384][T10913] loop3: detected capacity change from 0 to 8192 [ 216.494313][ T4194] XFS (loop2): Unmounting Filesystem [ 216.561242][T10913] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 216.573976][T10913] REISERFS (device loop3): using ordered data mode [ 216.583375][T10913] reiserfs: using flush barriers [ 216.590837][T10913] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 216.610884][T10913] REISERFS (device loop3): checking transaction log (loop3) [ 216.839049][T10913] REISERFS (device loop3): Using r5 hash to sort names [ 216.848415][T10913] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 217.220103][T10886] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 217.236008][T10886] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 217.258275][T10886] EXT4-fs (loop0): 1 truncate cleaned up [ 217.275886][T10886] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 217.462475][T10886] EXT4-fs (loop0): old and new quota format mixing [ 217.677534][T10932] loop3: detected capacity change from 0 to 64 [ 218.670041][T10925] loop2: detected capacity change from 0 to 32768 [ 218.763457][T10934] loop0: detected capacity change from 0 to 32768 [ 218.885837][T10925] JBD2: Ignoring recovery information on journal [ 218.907845][T10925] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 218.928810][T10925] JBD2: bad block at offset 32 [ 219.056080][T10925] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 219.067814][T10958] netlink: 'syz.3.3081': attribute type 27 has an invalid length. [ 219.262277][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 219.443838][T10948] loop1: detected capacity change from 0 to 32768 [ 219.675021][T10948] JBD2: Ignoring recovery information on journal [ 219.696754][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 219.821449][T10973] loop0: detected capacity change from 0 to 8192 [ 219.894699][T10948] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 219.906765][T10973] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 219.991817][T10973] REISERFS (device loop0): using ordered data mode [ 220.052007][T10972] loop2: detected capacity change from 0 to 8192 [ 220.067262][T10973] reiserfs: using flush barriers [ 220.127260][T10973] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 220.234200][T10973] REISERFS (device loop0): checking transaction log (loop0) [ 220.256821][T10973] REISERFS (device loop0): Using r5 hash to sort names [ 220.314846][T10948] OCFS2: ERROR (device loop1): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #17056 has bad parent pointer (312, expected 74) [ 220.344340][T10973] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 220.467091][T10948] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 220.505875][T10948] OCFS2: File system is now read-only. [ 220.526070][T10948] (syz.1.3077,10948,0):ocfs2_search_one_group:1684 ERROR: status = -30 [ 220.545943][T10973] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 220.558045][T10948] (syz.1.3077,10948,0):ocfs2_claim_suballoc_bits:1920 ERROR: status = -30 [ 220.583802][T10948] (syz.1.3077,10948,0):ocfs2_claim_suballoc_bits:1993 ERROR: status = -30 [ 220.609127][T10948] (syz.1.3077,10948,0):ocfs2_claim_new_inode:2226 ERROR: status = -30 [ 220.633728][T10948] (syz.1.3077,10948,0):ocfs2_claim_new_inode:2241 ERROR: status = -30 [ 220.672797][T10948] (syz.1.3077,10948,0):ocfs2_mknod_locked:639 ERROR: status = -30 [ 220.731594][T10948] (syz.1.3077,10948,0):ocfs2_mknod:385 ERROR: status = -30 [ 220.758773][T10948] (syz.1.3077,10948,0):ocfs2_mknod:502 ERROR: status = -30 [ 220.770807][T10962] loop3: detected capacity change from 0 to 32768 [ 220.864122][T10962] XFS (loop3): Mounting V5 Filesystem [ 220.903225][ T4199] ocfs2: Unmounting device (7,1) on (node local) [ 221.110785][T10962] XFS (loop3): Ending clean mount [ 221.261719][ T4188] XFS (loop3): Unmounting Filesystem [ 221.378816][T10994] loop2: detected capacity change from 0 to 4096 [ 221.416091][ T1110] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 221.530454][T10998] loop1: detected capacity change from 0 to 1024 [ 221.840613][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 221.926138][ T1110] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.946676][ T1110] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 221.978057][ T1110] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 221.992360][ T1110] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 222.031450][ T1110] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 222.044124][ T1110] usb 5-1: config 1 interface 1 has no altsetting 0 [ 222.114777][T11014] loop3: detected capacity change from 0 to 64 [ 222.171212][T11014] attempt to access beyond end of device [ 222.171212][T11014] loop3: rw=0, want=268435470, limit=64 [ 222.191584][T11014] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 222.203199][T11014] attempt to access beyond end of device [ 222.203199][T11014] loop3: rw=0, want=268435470, limit=64 [ 222.220879][T11014] Buffer I/O error on dev loop3, logical block 134217734, async page read [ 222.306028][ T1110] usb 5-1: string descriptor 0 read error: -22 [ 222.312328][ T1110] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 222.333203][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.506420][T10994] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 222.664122][ T4267] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 222.711954][ T9075] hfsplus: b-tree write err: -5, ino 25 [ 222.723582][ T9075] hfsplus: b-tree write err: -5, ino 4 [ 222.733803][ T9075] hfsplus: b-tree write err: -5, ino 2 [ 222.903439][T11030] loop1: detected capacity change from 0 to 128 [ 223.012772][T11030] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 223.013586][T11026] loop3: p1 < > p4 [ 223.013586][T11026] p4: [ 223.048946][T11030] hpfs: filesystem error: improperly stopped [ 223.055238][T11030] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 223.076135][ T1110] usb 5-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 223.091886][T11026] loop3: p4 size 722688 extends beyond EOD, truncated [ 223.107362][T11030] hpfs: You really don't want any checks? You are crazy... [ 223.107710][ T4267] usb 1-1: unable to get BOS descriptor or descriptor too short [ 223.114716][T11030] hpfs: hpfs_map_4sectors(): unaligned read [ 223.146268][ T1110] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 223.185044][T11030] hpfs: hpfs_map_4sectors(): unaligned read [ 223.212855][T11030] hpfs: filesystem error: unable to find root dir [ 223.228776][ T1110] usb 5-1: USB disconnect, device number 14 [ 223.236050][ T4267] usb 1-1: config 4 has an invalid interface number: 240 but max is 0 [ 223.244263][ T4267] usb 1-1: config 4 has no interface number 0 [ 223.291334][ T4267] usb 1-1: config 4 interface 240 altsetting 1 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 223.343078][ T4267] usb 1-1: config 4 interface 240 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 8 [ 223.380855][ T4267] usb 1-1: config 4 interface 240 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 10 [ 223.426316][ T4267] usb 1-1: config 4 interface 240 has no altsetting 0 [ 223.508584][ T6538] udevd[6538]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 223.677343][ T4267] usb 1-1: string descriptor 0 read error: -22 [ 223.716343][ T4267] usb 1-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=e3.6c [ 223.739271][T11050] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 223.748985][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.818817][ T4267] gspca_main: benq-2.14.0 probing 04a5:3035 [ 224.064658][ T4235] usb 1-1: USB disconnect, device number 23 [ 224.265227][T11041] set_capacity_and_notify: 1 callbacks suppressed [ 224.265243][T11041] loop2: detected capacity change from 0 to 32768 [ 224.341195][T11041] jfs: Unrecognized mount option "uid=0x0000000000GPL" or missing value [ 224.683446][T11065] loop0: detected capacity change from 0 to 2048 [ 224.736422][ T6536] loop0: p1 < > p4 [ 224.736422][ T6536] p4: [ 224.746658][ T6536] loop0: p4 size 722688 extends beyond EOD, truncated [ 224.772222][T11065] loop0: p1 < > p4 [ 224.772222][T11065] p4: [ 224.783178][T11065] loop0: p4 size 722688 extends beyond EOD, truncated [ 225.078542][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 225.080891][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 225.239602][ T6536] udevd[6536]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 225.254860][ T6538] udevd[6538]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 225.585996][ T8548] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 225.860973][T11102] device netdevsim0 entered promiscuous mode [ 225.876268][T11102] IPv6: ADDRCONF(NETDEV_CHANGE): netdevsim0: link becomes ready [ 225.906120][T11102] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 225.952809][T11101] loop0: detected capacity change from 0 to 4096 [ 225.955515][ T8548] usb 4-1: Using ep0 maxpacket: 16 [ 226.026581][T11101] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 226.169576][ T8548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.196027][ T8548] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.233673][ T8548] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 226.268536][ T8548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.301393][ T1110] kernel write not supported for file /stat (pid: 1110 comm: kworker/1:2) [ 226.326850][ T8548] usb 4-1: config 0 descriptor?? [ 226.450348][T11115] openvswitch: netlink: Port 1048718283 exceeds max allowable 65535 [ 226.684017][T11101] ntfs: volume version 3.1. [ 226.836686][ T8548] wacom 0003:056A:0084.0004: unbalanced delimiter at end of report description [ 226.868494][ T8548] wacom 0003:056A:0084.0004: parse failed [ 226.874294][ T8548] wacom: probe of 0003:056A:0084.0004 failed with error -22 [ 226.996996][ T9079] ntfs: (device loop0): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry. [ 227.159132][ T8548] usb 4-1: USB disconnect, device number 12 [ 227.296434][T11130] openvswitch: netlink: Actions may not be safe on all matching packets [ 227.312981][T11129] loop0: detected capacity change from 0 to 1024 [ 227.343838][T11118] loop2: detected capacity change from 0 to 32768 [ 227.408967][T11118] XFS: ikeep mount option is deprecated. [ 227.487892][T11122] loop1: detected capacity change from 0 to 32768 [ 227.601454][T11118] XFS (loop2): Mounting V5 Filesystem [ 227.779523][T11118] XFS (loop2): Ending clean mount [ 227.869092][ T4194] XFS (loop2): Unmounting Filesystem [ 227.889278][T11152] loop3: detected capacity change from 0 to 4096 [ 228.017346][T11160] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 228.136069][ T4267] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 228.576340][ T4267] usb 1-1: unable to get BOS descriptor or descriptor too short [ 228.672547][ T4267] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.692465][ T4267] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 228.712299][ T4267] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 228.751422][ T4267] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 228.785213][ T4267] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 228.821547][ T4267] usb 1-1: config 1 interface 1 has no altsetting 0 [ 229.066203][ T4267] usb 1-1: string descriptor 0 read error: -22 [ 229.072591][ T4267] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 229.101941][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.166561][T11122] ialloc: diAlloc returned -5! [ 229.205913][T11122] ialloc: diAlloc returned -5! [ 229.839537][T11195] loop3: detected capacity change from 0 to 32768 [ 229.851754][ T4267] usb 1-1: cannot get ctl value: req = 0x84, wValue = 0x201, wIndex = 0x200, type = 4 [ 229.916120][ T4267] usb 1-1: cannot get ctl value: req = 0x81, wValue = 0x201, wIndex = 0x200, type = 4 [ 229.982940][ T4267] usb 1-1: USB disconnect, device number 24 [ 230.539955][T11212] loop0: detected capacity change from 0 to 256 [ 231.148992][T11229] loop0: detected capacity change from 0 to 256 [ 231.344876][T11210] loop1: detected capacity change from 0 to 32768 [ 231.382751][ T8549] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 231.647682][T11210] XFS (loop1): Mounting V5 Filesystem [ 231.785734][T11210] XFS (loop1): Ending clean mount [ 231.874949][T11210] XFS (loop1): Quotacheck needed: Please wait. [ 231.909168][ T8549] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 231.917752][ T8549] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 231.960770][T11210] XFS (loop1): Quotacheck: Done. [ 231.961640][ T8549] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.007844][ T8548] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 232.029080][ T8549] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 232.046830][ T8549] usb 5-1: config 1 has no interface number 0 [ 232.053066][ T8549] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 232.089607][ T8549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.118960][ T4199] XFS (loop1): Unmounting Filesystem [ 232.154247][ T4235] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 232.173169][ T8549] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 232.184518][ T4235] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 232.263564][T11261] fido_id[11261]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 232.373329][ T8548] usb 3-1: Using ep0 maxpacket: 16 [ 232.416506][ T8549] snd_usb_pod 5-1:1.1: endpoint not available, using fallback values [ 232.424853][ T8549] snd_usb_pod 5-1:1.1: invalid control EP [ 232.430664][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.441563][ T8549] snd_usb_pod 5-1:1.1: cannot start listening: -22 [ 232.448442][ T8549] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 232.475110][ T8549] snd_usb_pod: probe of 5-1:1.1 failed with error -22 [ 232.568755][ T8548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.585104][ T8548] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.609231][ T8548] usb 3-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 232.638104][ T8548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.667677][ T4267] usb 5-1: USB disconnect, device number 15 [ 232.699673][ T8548] usb 3-1: config 0 descriptor?? [ 233.245363][ T8548] wacom 0003:056A:0084.0006: unbalanced delimiter at end of report description [ 233.263948][ T8548] wacom 0003:056A:0084.0006: parse failed [ 233.277530][T11288] netlink: 'syz.0.3222': attribute type 3 has an invalid length. [ 233.285403][ T8548] wacom: probe of 0003:056A:0084.0006 failed with error -22 [ 233.300391][T11288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3222'. [ 233.494617][ T8538] usb 3-1: USB disconnect, device number 22 [ 233.722258][T11299] device macsec0 entered promiscuous mode [ 234.144163][T11314] loop1: detected capacity change from 0 to 4096 [ 234.757417][ T8548] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 234.765441][T11347] loop2: detected capacity change from 0 to 512 [ 234.879986][T11347] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 234.896194][T11347] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.940953][T11347] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:106: comm syz.2.3251: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20 [ 235.002769][T11347] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 235.052361][ T8548] usb 5-1: Using ep0 maxpacket: 32 [ 235.212562][ T8548] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.239073][ T8548] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.366399][T11314] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 235.456135][ T8548] usb 5-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 235.465239][ T8548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.480670][ T8548] usb 5-1: Product: syz [ 235.484893][ T8548] usb 5-1: Manufacturer: syz [ 235.507559][ T8548] usb 5-1: SerialNumber: syz [ 235.555025][T11314] ntfs3: Volume is dirty and "force" flag is not set! [ 236.144778][T11373] loop1: detected capacity change from 0 to 1764 [ 236.364505][ T8548] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 236.457306][ T8548] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 236.486766][ T8548] usb 5-1: USB disconnect, device number 16 [ 236.626129][ T4234] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 236.682357][ T8538] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 236.762245][T11369] loop3: detected capacity change from 0 to 32768 [ 237.016105][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.030496][ T8538] usb 1-1: Using ep0 maxpacket: 8 [ 237.036239][ T4234] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.055216][ T4234] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 237.072376][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.082736][ T4234] usb 2-1: config 0 descriptor?? [ 237.117586][ T1110] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 237.173942][ T8538] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 237.366048][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 237.404646][ T8538] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 237.413832][ T8538] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 237.437131][ T8538] usb 1-1: Product: syz [ 237.441329][ T8538] usb 1-1: Manufacturer: syz [ 237.457677][ T8538] usb 1-1: SerialNumber: syz [ 237.634237][ T4234] usb 2-1: string descriptor 0 read error: -71 [ 237.646279][ T1110] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 237.665929][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.685299][ T4234] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 237.742119][ T1110] usb 5-1: Product: syz [ 237.744704][ T8538] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 237.751586][ T4234] usb 2-1: USB disconnect, device number 15 [ 237.754628][ T8538] usb 1-1: Handspring Visor / Palm OS: port 0, is for unknown use [ 237.775941][ T1110] usb 5-1: Manufacturer: syz [ 237.780582][ T1110] usb 5-1: SerialNumber: syz [ 237.787346][ T8538] usb 1-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 237.795205][ T8538] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 237.833503][ T1110] usb 5-1: config 0 descriptor?? [ 237.860834][T11369] XFS (loop3): Mounting V5 Filesystem [ 237.954012][ T8538] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 237.972757][ T8538] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 237.975084][T11369] XFS (loop3): Ending clean mount [ 238.001382][ T8538] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 238.039668][ T8538] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 238.063519][ T8549] kernel write not supported for file /input/event0 (pid: 8549 comm: kworker/0:16) [ 238.101421][ T8538] usb 1-1: USB disconnect, device number 25 [ 238.115018][ T4188] XFS (loop3): Unmounting Filesystem [ 238.156599][ T8538] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 238.240039][ T8538] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 238.278213][ T8538] visor 1-1:1.0: device disconnected [ 238.566118][ T1110] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 238.707849][T11412] loop2: detected capacity change from 0 to 16 [ 238.804707][T11412] erofs: (device loop2): mounted with root inode @ nid 36. [ 238.859400][T11408] loop1: detected capacity change from 0 to 8192 [ 238.873090][T11417] loop3: detected capacity change from 0 to 512 [ 238.896010][T11412] attempt to access beyond end of device [ 238.896010][T11412] loop2: rw=524288, want=1049304, limit=16 [ 238.949143][T11412] attempt to access beyond end of device [ 238.949143][T11412] loop2: rw=524288, want=40, limit=16 [ 238.967739][T11412] attempt to access beyond end of device [ 238.967739][T11412] loop2: rw=524288, want=48, limit=16 [ 238.970628][T11408] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 238.980621][T11412] attempt to access beyond end of device [ 238.980621][T11412] loop2: rw=524288, want=408, limit=16 [ 239.032367][T11408] REISERFS (device loop1): using ordered data mode [ 239.039835][T11408] reiserfs: using flush barriers [ 239.075140][T11408] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 239.101982][T11408] REISERFS (device loop1): checking transaction log (loop1) [ 239.170699][T11408] REISERFS (device loop1): Using r5 hash to sort names [ 239.206659][T11408] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 239.271997][T11408] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 239.327901][T11408] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 239.349255][T11408] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 239.365018][T11428] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3285'. [ 239.377469][T11408] REISERFS warning (device loop1): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block [ 239.605751][T11436] netlink: 134736 bytes leftover after parsing attributes in process `syz.2.3290'. [ 239.766178][T11439] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 239.850634][T11447] loop1: detected capacity change from 0 to 64 [ 240.877355][T11417] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,max_batch_time=0x0000000000006b82,noquota,quota,lazytime,,errors=continue. Quota mode: writeback. [ 240.965770][T11417] ext4 filesystem being mounted at /716/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 241.059144][ T1110] peak_usb: probe of 5-1:0.0 failed with error -71 [ 241.096074][ T1110] usb 5-1: USB disconnect, device number 17 [ 241.119285][T11469] netlink: 134736 bytes leftover after parsing attributes in process `syz.4.3301'. [ 241.356646][T11472] loop0: detected capacity change from 0 to 4096 [ 241.375706][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.439053][T11472] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 241.464587][T11458] loop1: detected capacity change from 0 to 32768 [ 241.588277][T11458] XFS (loop1): Mounting V5 Filesystem [ 241.983910][T11458] XFS (loop1): Ending clean mount [ 242.138422][ T4199] XFS (loop1): Unmounting Filesystem [ 242.273730][T11503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3317'. [ 242.774935][T11513] loop2: detected capacity change from 0 to 4096 [ 242.867096][T11516] loop1: detected capacity change from 0 to 4096 [ 242.965513][T11519] loop3: detected capacity change from 0 to 4096 [ 243.027046][T11519] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 243.636841][T11521] loop3: detected capacity change from 0 to 32768 [ 243.710364][T11521] XFS (loop3): Mounting V5 Filesystem [ 243.802059][T11521] XFS (loop3): Ending clean mount [ 243.864386][ T4188] XFS (loop3): Unmounting Filesystem [ 244.028738][T11534] loop0: detected capacity change from 0 to 32768 [ 244.158464][T11513] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 244.183536][T11534] XFS (loop0): Mounting V5 Filesystem [ 244.193204][T11513] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 244.245962][T11513] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt mapping pairs array in non-resident attribute. [ 244.307085][T11513] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5). [ 244.368943][T11534] XFS (loop0): Ending clean mount [ 244.427822][T11513] ntfs: (device loop2): check_mft_mirror(): Failed to read $MFTMirr. [ 244.458100][T11513] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 244.513484][T11513] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 244.541859][T11513] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 244.576097][T11513] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 244.603005][ T4192] XFS (loop0): Unmounting Filesystem [ 244.647052][T11513] ntfs: volume version 3.1. [ 244.674393][T11513] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 244.860727][T11516] ntfs3: Cannot use different iocharset when remounting! [ 245.163805][T11571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3342'. [ 245.181418][T11571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3342'. [ 245.347337][T11580] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.3346'. [ 245.402403][ T8549] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 245.743691][ T8549] usb 4-1: Using ep0 maxpacket: 32 [ 245.936705][ T8549] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.947844][ T8549] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 246.117581][T11608] loop2: detected capacity change from 0 to 256 [ 246.201461][T11608] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 246.234781][ T8549] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 246.243995][ T8549] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.288899][ T8549] usb 4-1: Product: syz [ 246.293152][ T8549] usb 4-1: Manufacturer: syz [ 246.308741][ T8549] usb 4-1: SerialNumber: syz [ 246.314619][T11608] exFAT-fs (loop2): error, invalid size(size(0) > aligned(9223372036854777344) [ 246.314619][T11608] [ 246.371412][T11608] exFAT-fs (loop2): Filesystem has been set read-only [ 246.636062][T11617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3340'. [ 246.955219][T11633] loop0: detected capacity change from 0 to 256 [ 247.075523][T11633] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012c80, chksum : 0x8ff561f5, utbl_chksum : 0xe619d30d) [ 247.090145][T11637] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.3372'. [ 247.187346][ T8549] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 247.229714][T11639] loop1: detected capacity change from 0 to 256 [ 247.241889][ T8549] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 247.270322][ T8549] usb 4-1: USB disconnect, device number 13 [ 247.397973][ T8548] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 248.062052][T11653] loop2: detected capacity change from 0 to 1024 [ 248.075432][ T8548] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 248.088306][ T8548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.106717][ T8548] usb 5-1: Product: syz [ 248.110921][ T8548] usb 5-1: Manufacturer: syz [ 248.115551][ T8548] usb 5-1: SerialNumber: syz [ 248.142108][ T8548] usb 5-1: config 0 descriptor?? [ 248.197749][ T8548] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 248.233942][ T8548] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 248.282629][ T8548] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 248.291934][ T8548] usb 5-1: media controller created [ 248.332347][ T8548] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 248.407462][ T8548] DVB: Unable to find symbol mt352_attach() [ 248.449758][ T8548] DVB: Unable to find symbol nxt6000_attach() [ 248.463026][ T8548] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 248.545399][ T8548] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11 [ 248.546497][ T4233] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 248.613890][ T8548] dvb-usb: schedule remote query interval to 1000 msecs. [ 248.621107][ T8548] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 248.650646][ T8548] dvb-usb: bulk message failed: -22 (7/0) [ 248.665316][ T8548] dvb-usb: bulk message failed: -22 (7/0) [ 248.680127][T11667] netlink: 'syz.0.3386': attribute type 6 has an invalid length. [ 248.724851][ T8548] usb 5-1: USB disconnect, device number 18 [ 248.777107][T11639] FAT-fs (loop1): Directory bread(block 64) failed [ 248.783699][T11639] FAT-fs (loop1): Directory bread(block 65) failed [ 248.807907][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 248.816644][T11639] FAT-fs (loop1): Directory bread(block 66) failed [ 248.823272][T11639] FAT-fs (loop1): Directory bread(block 67) failed [ 248.833955][T11639] FAT-fs (loop1): Directory bread(block 68) failed [ 248.846010][T11639] FAT-fs (loop1): Directory bread(block 69) failed [ 248.856554][ T8548] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 248.863597][T11639] FAT-fs (loop1): Directory bread(block 70) failed [ 248.880117][T11639] FAT-fs (loop1): Directory bread(block 71) failed [ 248.889642][T11639] FAT-fs (loop1): Directory bread(block 72) failed [ 248.910299][T11639] FAT-fs (loop1): Directory bread(block 73) failed [ 248.938593][ T4233] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 249.080581][T11675] loop0: detected capacity change from 0 to 1024 [ 249.082413][T11677] netlink: 520 bytes leftover after parsing attributes in process `syz.4.3391'. [ 249.106067][ T4233] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 249.127522][ T4233] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 249.141115][T11677] netlink: 264 bytes leftover after parsing attributes in process `syz.4.3391'. [ 249.152947][ T4233] usb 4-1: Product: syz [ 249.170867][ T4233] usb 4-1: Manufacturer: syz [ 249.184386][ T4233] usb 4-1: SerialNumber: syz [ 249.319183][T11685] ieee802154 phy0 wpan0: encryption failed: -22 [ 249.461500][ T4233] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 249.474409][ T4233] usb 4-1: Handspring Visor / Palm OS: Number of ports: 1 [ 249.582310][T11653] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 249.685982][ T4233] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 249.711815][ T4233] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 249.730428][ T4233] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 249.750965][ T4233] usb 4-1: USB disconnect, device number 14 [ 249.791682][ T4233] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 249.817630][ T4233] visor 4-1:1.0: device disconnected [ 249.864626][T11707] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3405'. [ 250.194509][T11723] loop1: detected capacity change from 0 to 256 [ 250.229701][T11675] hfsplus: bad catalog entry type [ 250.332729][ T1282] hfsplus: b-tree write err: -5, ino 25 [ 250.339992][ T1282] hfsplus: b-tree write err: -5, ino 4 [ 250.345562][ T1282] hfsplus: b-tree write err: -5, ino 2 [ 250.531031][T11735] loop3: detected capacity change from 0 to 2048 [ 250.604439][T11735] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.678563][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 250.678579][ T26] audit: type=1800 audit(1778966534.413:11): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3420" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 250.848243][T11751] loop2: detected capacity change from 0 to 1024 [ 250.889659][T11753] netlink: 'syz.0.3429': attribute type 2 has an invalid length. [ 250.960379][T11751] hfsplus: bad catalog entry type [ 251.026955][ T4244] hfsplus: b-tree write err: -5, ino 25 [ 251.032843][ T4244] hfsplus: b-tree write err: -5, ino 4 [ 251.065918][ T4244] hfsplus: b-tree write err: -5, ino 2 [ 251.258874][T11769] netlink: 364 bytes leftover after parsing attributes in process `syz.4.3436'. [ 251.275414][T11770] loop3: detected capacity change from 0 to 128 [ 251.301067][T11769] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 251.377203][T11770] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 251.395636][T11772] loop1: detected capacity change from 0 to 2048 [ 251.416181][T11770] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.526260][ T9075] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 251.733011][T11780] netlink: 'syz.4.3443': attribute type 2 has an invalid length. [ 251.804269][T11761] loop0: detected capacity change from 0 to 40427 [ 251.819180][T11782] netlink: 'syz.4.3444': attribute type 1 has an invalid length. [ 251.858694][T11761] F2FS-fs (loop0): invalid crc value [ 251.910888][T11761] F2FS-fs (loop0): Found nat_bits in checkpoint [ 252.043172][T11761] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 252.086314][ T26] audit: type=1800 audit(1778966535.823:12): pid=11761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3432" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 252.179288][ T4192] attempt to access beyond end of device [ 252.179288][ T4192] loop0: rw=2049, want=45104, limit=40427 [ 252.457442][T11802] netlink: 308 bytes leftover after parsing attributes in process `syz.2.3452'. [ 252.473750][T11772] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.566450][ T26] audit: type=1800 audit(1778966536.303:13): pid=11772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3438" name="file1" dev="loop1" ino=1367 res=0 errno=0 [ 253.148344][T11830] ubi31: attaching mtd0 [ 253.153119][T11830] ubi31 error: ubi_attach_mtd_dev: bad VID header (42) or data offsets (106) [ 253.188268][T11832] loop0: detected capacity change from 0 to 512 [ 253.223947][T11834] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3465'. [ 253.290483][T11836] binder: 11835:11836 ioctl c0306201 2000000001c0 returned -22 [ 253.315913][T11832] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 253.446853][T11832] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.3464: bad orphan inode 131083 [ 253.501781][T11832] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 253.712053][T11857] overlayfs: upper fs needs to support d_type. [ 253.805460][T11865] ubi31: attaching mtd0 [ 253.820904][T11865] ubi31 error: ubi_attach_mtd_dev: bad VID header (42) or data offsets (106) [ 253.841961][ T4192] EXT4-fs error (device loop0): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /589/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 253.939345][T11868] binder: 11867:11868 ioctl c0306201 2000000001c0 returned -22 [ 254.420369][T11886] loop1: detected capacity change from 0 to 512 [ 254.443693][ T8546] Bluetooth: hci4: command 0x0405 tx timeout [ 254.545043][T11886] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.713665][T11886] EXT4-fs error (device loop1): ext4_orphan_get:1432: comm syz.1.3490: bad orphan inode 131083 [ 254.742572][T10878] udevd[10878]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.809289][T11886] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 254.922696][T11886] overlayfs: upper fs needs to support d_type. [ 254.935899][ T4233] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 255.074919][T11903] loop3: detected capacity change from 0 to 512 [ 255.165693][ T4199] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /716/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 255.306080][ T4233] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 255.331804][T11903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 255.357376][ T4233] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.391276][ T4233] usb 5-1: config 0 interface 0 has no altsetting 0 [ 255.419080][ T4233] usb 5-1: New USB device found, idVendor=056a, idProduct=0144, bcdDevice= 0.00 [ 255.439249][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.461165][ T4233] usb 5-1: config 0 descriptor?? [ 255.572670][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.579032][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.586045][T11903] EXT4-fs (loop3): 1 truncate cleaned up [ 255.591805][T11903] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobarrier,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,user_xattr,. Quota mode: none. [ 255.951571][ T4233] wacom 0003:056A:0144.0007: Unknown device_type for 'HID 056a:0144'. Ignoring. [ 256.190183][ T1110] usb 5-1: USB disconnect, device number 19 [ 256.375561][T11922] loop3: detected capacity change from 0 to 256 [ 256.494507][T11924] loop2: detected capacity change from 0 to 128 [ 256.587143][T11924] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.635894][T11924] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.736440][ T9075] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 256.865013][T11931] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3512'. [ 256.931041][T11934] loop2: detected capacity change from 0 to 164 [ 256.990666][T11934] Unable to read rock-ridge attributes [ 257.023074][T11934] Unable to read rock-ridge attributes [ 257.179714][T11926] chnl_net:caif_netlink_parms(): no params data found [ 257.293568][T11926] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.314673][T11926] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.332411][T11926] device bridge_slave_0 entered promiscuous mode [ 257.343621][T11926] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.357886][T11926] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.372257][T11926] device bridge_slave_1 entered promiscuous mode [ 257.410991][T11926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.423227][T11926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.459414][T11926] team0: Port device team_slave_0 added [ 257.468080][T11926] team0: Port device team_slave_1 added [ 257.565575][T11926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.584364][T11922] FAT-fs (loop3): Directory bread(block 1285) failed [ 257.610243][T11922] FAT-fs (loop3): Directory bread(block 1286) failed [ 257.628348][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.652449][T11922] FAT-fs (loop3): Directory bread(block 1287) failed [ 257.672725][T11922] FAT-fs (loop3): Directory bread(block 1288) failed [ 257.728315][T11922] FAT-fs (loop3): Directory bread(block 1285) failed [ 257.735118][T11922] FAT-fs (loop3): Directory bread(block 1286) failed [ 257.746127][T11926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.776728][T11922] FAT-fs (loop3): Directory bread(block 1287) failed [ 257.783142][T11926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.800756][T11926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.824172][T11922] FAT-fs (loop3): Directory bread(block 1288) failed [ 257.834341][T11922] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 257.868583][T11940] FAT-fs (loop3): Directory bread(block 1285) failed [ 257.875431][T11926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.992577][T11926] device hsr_slave_0 entered promiscuous mode [ 258.010944][T11926] device hsr_slave_1 entered promiscuous mode [ 258.036191][T11926] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.055481][T11926] Cannot create hsr debugfs directory [ 258.160941][T11946] loop3: detected capacity change from 0 to 4096 [ 258.835999][T11926] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.885539][T11926] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.903593][T11926] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.938710][T11926] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.991691][ T8549] Bluetooth: hci2: command 0x0409 tx timeout [ 259.110093][T11947] chnl_net:caif_netlink_parms(): no params data found [ 259.548872][T11926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.635415][T11926] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.675010][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.690000][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.732105][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.807303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.818197][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.825411][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.904606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.938967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.950561][T11990] loop3: detected capacity change from 0 to 256 [ 259.965276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 259.997460][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.004571][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.030728][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.049094][T11947] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.066204][T11947] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.077469][T11990] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 260.134045][T11947] device bridge_slave_0 entered promiscuous mode [ 260.189526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.223457][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.256023][T11990] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 260.261325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.284718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.319438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.336099][ T4234] Bluetooth: hci4: command 0x0409 tx timeout [ 260.349415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.376902][T11947] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.408079][T11947] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.447483][T11947] device bridge_slave_1 entered promiscuous mode [ 260.545686][T11947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.607577][T11947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.692821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.714708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.779781][T11947] team0: Port device team_slave_0 added [ 260.808897][T11947] team0: Port device team_slave_1 added [ 260.831934][T12005] loop2: detected capacity change from 0 to 64 [ 260.900527][T11947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.921016][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.955653][T11947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.971884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.980707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 261.001170][T11926] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 261.016405][T11947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.023375][T11947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.064131][ T8546] Bluetooth: hci2: command 0x041b tx timeout [ 261.072320][T11947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.145112][T11947] device hsr_slave_0 entered promiscuous mode [ 261.163880][T11947] device hsr_slave_1 entered promiscuous mode [ 261.174558][T11947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.186001][T11947] Cannot create hsr debugfs directory [ 261.397638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 261.405159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 261.435711][T11926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.445043][T11947] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 261.474705][T11947] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 261.500552][T11947] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 261.518477][T11947] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 261.703122][T11947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.740739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.749450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 261.769867][T11947] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.800778][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 261.811974][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 261.821406][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.828558][ T9077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.842234][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 261.855682][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 261.874760][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.882010][ T9077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.903890][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 261.915689][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 261.925300][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 261.936959][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 261.951365][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 261.977149][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 261.985251][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 261.997092][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.007892][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.017847][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 262.042614][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 262.052134][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 262.064940][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 262.076199][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 262.089225][T11947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 262.124866][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 262.144374][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 262.156119][T11926] device veth0_vlan entered promiscuous mode [ 262.174407][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 262.193177][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 262.209566][T11926] device veth1_vlan entered promiscuous mode [ 262.254420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 262.281481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 262.298259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 262.314590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 262.330315][T11926] device veth0_macvtap entered promiscuous mode [ 262.352573][T11926] device veth1_macvtap entered promiscuous mode [ 262.385283][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 262.397602][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 262.418883][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.430319][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.440438][ T8549] Bluetooth: hci4: command 0x041b tx timeout [ 262.451251][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.472294][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.510729][T11926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.546362][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 262.556239][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 262.580749][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.604284][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.627078][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.647342][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.676711][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.718568][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.731110][T11926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.762425][T11926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.788473][T11926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.820359][T11947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.827867][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 262.844958][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 262.876684][T11926] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.906004][T11926] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.941732][T11926] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.971284][T11926] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.152515][ T8549] Bluetooth: hci2: command 0x040f tx timeout [ 263.188090][T12047] loop3: detected capacity change from 0 to 256 [ 263.287752][ T1282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.295709][ T1282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.332321][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 263.415259][ T1282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.449854][ T1282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.500540][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 263.606619][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.655889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.751965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.766643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.818963][T11947] device veth0_vlan entered promiscuous mode [ 263.826524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.858521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.890663][T11947] device veth1_vlan entered promiscuous mode [ 264.010807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.027090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.066560][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.086522][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.128667][T11947] device veth0_macvtap entered promiscuous mode [ 264.229743][T11947] device veth1_macvtap entered promiscuous mode [ 264.272530][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.315820][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.360134][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.401036][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.442040][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.464176][T12076] loop3: detected capacity change from 0 to 2048 [ 264.515035][ T8538] Bluetooth: hci4: command 0x040f tx timeout [ 264.574383][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.636889][T11947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.658102][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.676997][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.743855][T12076] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 264.765938][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.853366][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.882383][T12076] EXT4-fs error (device loop3): ext4_find_extent:893: inode #2: comm syz.3.3567: inode has invalid extent depth: 7 [ 264.916524][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 264.946518][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.956645][T11947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.005832][T11947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.064562][T11947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.087021][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.095315][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.152884][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.238632][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.255227][T12068] loop5: detected capacity change from 0 to 32768 [ 265.261969][ T1108] Bluetooth: hci2: command 0x0419 tx timeout [ 265.280901][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.306936][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.342491][T11947] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.375230][T11947] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.384971][T11947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.411566][T11947] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.654076][ T9079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.668522][ T9079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.697084][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 265.725502][ T9079] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.734096][ T9079] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.764674][ T9079] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.079854][T12104] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3580'. [ 266.099800][T12105] loop6: detected capacity change from 0 to 512 [ 266.125972][T12104] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 266.222742][T12105] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 266.330269][T12105] EXT4-fs (loop6): 1 truncate cleaned up [ 266.336012][T12105] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,noinit_itable,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 266.432437][T12093] loop2: detected capacity change from 0 to 32768 [ 266.606567][ T8549] Bluetooth: hci4: command 0x0419 tx timeout [ 267.007171][T12068] XFS (loop5): Mounting V5 Filesystem [ 267.133684][T12068] XFS (loop5): log mount failed [ 267.863542][T12147] loop3: detected capacity change from 0 to 32768 [ 267.906049][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.924385][T12147] (syz.3.3595,12147,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.986142][T12147] (syz.3.3595,12147,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 267.996506][T12093] XFS (loop2): Mounting V5 Filesystem [ 268.100216][T12147] JBD2: Ignoring recovery information on journal [ 268.161574][T12093] XFS (loop2): Ending clean mount [ 268.262660][T12147] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 268.296172][ T21] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 268.314749][ T21] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 268.325055][ T4194] XFS (loop2): Unmounting Filesystem [ 268.353443][ T21] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 268.381555][ T21] usb 7-1: config 220 has no interface number 2 [ 268.426006][ T21] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 268.480048][ T21] usb 7-1: config 220 interface 0 has no altsetting 0 [ 268.510276][ T21] usb 7-1: config 220 interface 76 has no altsetting 0 [ 268.530628][ T21] usb 7-1: config 220 interface 1 has no altsetting 0 [ 268.706226][ T21] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 268.731774][ T4188] ocfs2: Unmounting device (7,3) on (node local) [ 268.746033][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.766104][ T21] usb 7-1: Product: syz [ 268.770402][ T21] usb 7-1: Manufacturer: syz [ 268.791978][ T21] usb 7-1: SerialNumber: syz [ 269.156456][ T21] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 269.173278][ T21] usb 7-1: No valid video chain found. [ 269.187934][ T21] usb 7-1: selecting invalid altsetting 0 [ 269.287207][ T21] usb 7-1: selecting invalid altsetting 0 [ 269.296789][ T21] usbtest: probe of 7-1:220.1 failed with error -22 [ 269.324008][ T21] usb 7-1: USB disconnect, device number 2 [ 269.406488][T12169] loop3: detected capacity change from 0 to 512 [ 269.491761][T12175] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3605'. [ 269.510382][T12175] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 269.887572][T12193] loop6: detected capacity change from 0 to 64 [ 270.328896][ T4234] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 270.596332][ T4234] usb 6-1: Using ep0 maxpacket: 16 [ 270.716118][ T4234] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.739380][ T4234] usb 6-1: New USB device found, idVendor=8380, idProduct=1850, bcdDevice= 0.00 [ 270.749193][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.759384][ T4234] usb 6-1: config 0 descriptor?? [ 271.036322][T12169] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.3604: bad orphan inode 11862016 [ 271.085718][T12169] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 271.106116][T12169] ext4 filesystem being mounted at /776/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.253232][ T4234] betop 0003:8380:1850.0008: unknown global tag 0xe [ 271.267641][ T4234] betop 0003:8380:1850.0008: item 0 4 1 14 parsing failed [ 271.281554][ T4234] betop 0003:8380:1850.0008: parse failed [ 271.303191][ T4234] betop: probe of 0003:8380:1850.0008 failed with error -22 [ 271.470945][ T4234] usb 6-1: USB disconnect, device number 2 [ 271.736659][T12265] loop2: detected capacity change from 0 to 512 [ 271.915067][T12265] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 272.055478][T12265] ext4 filesystem being mounted at /682/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.272341][T12265] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.3646: Directory hole found for htree leaf block 0 [ 272.292325][T12286] loop5: detected capacity change from 0 to 64 [ 272.778771][T12306] genirq: Flags mismatch irq 4. 00000000 (das16m1) vs. 00000000 (ttyS0) [ 273.135593][T12318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3672'. [ 273.360928][T12324] loop3: detected capacity change from 0 to 512 [ 273.512427][T12324] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 273.603905][T12324] ext4 filesystem being mounted at /786/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.755284][T12324] EXT4-fs error (device loop3): ext4_get_first_dir_block:3597: inode #12: comm syz.3.3674: Directory hole found for htree leaf block 0 [ 274.074141][T12316] loop2: detected capacity change from 0 to 32768 [ 274.241387][T12316] JBD2: Ignoring recovery information on journal [ 274.381249][T12316] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 274.425995][ T1108] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 274.518693][T12356] loop6: detected capacity change from 0 to 1764 [ 274.530509][T12316] (syz.2.3671,12316,0):ocfs2_read_blocks:239 ERROR: status = -12 [ 274.566974][T12316] (syz.2.3671,12316,0):ocfs2_group_extend:318 ERROR: status = -12 [ 274.676930][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 274.684440][ T4194] ocfs2: Unmounting device (7,2) on (node local) [ 274.816405][ T1108] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.846094][ T1108] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.064244][ T1108] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 275.079446][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.126181][ T1108] usb 5-1: Product: syz [ 275.130498][ T1108] usb 5-1: Manufacturer: syz [ 275.135131][ T1108] usb 5-1: SerialNumber: syz [ 275.244027][T12365] tipc: Started in network mode [ 275.276319][T12365] tipc: Node identity 9, cluster identity 3 [ 275.282270][T12365] tipc: Node number set to 9 [ 275.300393][T12362] loop5: detected capacity change from 0 to 4096 [ 275.446256][T12370] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 275.516495][ T1108] usb 5-1: 0:2 : does not exist [ 275.548822][T12373] netlink: 'syz.2.3697': attribute type 4 has an invalid length. [ 275.578671][ T1108] usb 5-1: USB disconnect, device number 20 [ 275.664228][T12375] loop3: detected capacity change from 0 to 4096 [ 275.821697][T12379] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 275.833369][T12381] loop5: detected capacity change from 0 to 1024 [ 275.859407][T12379] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 276.344726][T12397] loop6: detected capacity change from 0 to 1764 [ 276.396080][ T1108] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 276.413686][ T4234] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 276.426811][T12397] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 276.665912][ T1108] usb 3-1: Using ep0 maxpacket: 8 [ 276.697253][T12375] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 276.724514][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 276.820783][ T1108] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 276.844720][ T1108] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 276.863111][ T4234] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 276.883638][ T4234] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 276.922043][ T4234] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 276.942558][T12375] ntfs: volume version 3.1. [ 276.985830][ T4234] usb 5-1: config 1 has no interface number 0 [ 276.991982][ T4234] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 277.007658][T12407] loop6: detected capacity change from 0 to 2368 [ 277.060770][ T4234] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 277.067062][ T1108] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 277.089145][T12375] ntfs: (device loop3): ntfs_read_locked_inode(): $INDEX_ROOT attribute is corrupt. [ 277.103626][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.109357][ T4234] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 277.122608][ T1108] usb 3-1: Product: syz [ 277.132741][ T1108] usb 3-1: Manufacturer: syz [ 277.140844][ T1108] usb 3-1: SerialNumber: syz [ 277.150509][T12410] loop5: detected capacity change from 0 to 512 [ 277.156015][T12375] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 277.171946][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.174722][ T1108] usb 3-1: config 0 descriptor?? [ 277.230935][ T4234] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 277.273967][ T4188] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 277.303779][T12410] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.3715: inode #1: comm syz.5.3715: iget: illegal inode # [ 277.323678][T12410] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3715: error while reading EA inode 1 err=-117 [ 277.344671][T12410] EXT4-fs error (device loop5): ext4_xattr_inode_iget:401: comm syz.5.3715: inode #1: comm syz.5.3715: iget: illegal inode # [ 277.367584][T12410] EXT4-fs error (device loop5): ext4_xattr_inode_iget:406: comm syz.5.3715: error while reading EA inode 1 err=-117 [ 277.384087][T12410] EXT4-fs (loop5): 1 orphan inode deleted [ 277.390561][T12410] EXT4-fs (loop5): mounted filesystem without journal. Opts: minixdf,stripe=0x0000000000020000,grpquota,noinit_itable,max_batch_time=0x0000000000000006,minixdf,usrjquota=,debug_want_extra_isize=0x000000000000005c,errors=continue,dioread_lock,noblock_validity,noquota,,errors=continue. Quota mode: none. [ 277.434050][T12389] udc-core: couldn't find an available UDC or it's busy [ 277.450470][ T4234] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 277.452155][T12389] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 277.733195][ T8549] usb 3-1: USB disconnect, device number 23 [ 277.771166][T12416] loop5: detected capacity change from 0 to 8192 [ 277.821500][T12416] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 277.832662][T12416] REISERFS (device loop5): using ordered data mode [ 277.849468][ T1108] usb 5-1: USB disconnect, device number 21 [ 277.864415][ T1108] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 277.872573][T12416] reiserfs: using flush barriers [ 277.897672][T12416] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.932274][T12416] REISERFS (device loop5): checking transaction log (loop5) [ 277.949701][ T9083] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.973631][T12416] REISERFS (device loop5): Using r5 hash to sort names [ 277.983550][T12416] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 278.454068][T12407] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3714'. [ 278.534291][T12423] loop5: detected capacity change from 0 to 8192 [ 278.618416][T12429] loop3: detected capacity change from 0 to 512 [ 278.670360][T12423] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 278.701039][T12423] REISERFS (device loop5): using ordered data mode [ 278.708664][T12423] reiserfs: using flush barriers [ 278.767611][T12423] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 278.841252][T12423] REISERFS (device loop5): checking transaction log (loop5) [ 279.100351][T12423] REISERFS (device loop5): Using tea hash to sort names [ 279.124554][T12423] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 279.497750][ T9083] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.578046][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3742'. [ 279.610104][T12472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3742'. [ 279.681157][T12474] loop2: detected capacity change from 0 to 4096 [ 279.767391][T12474] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 279.878257][T12474] ntfs: volume version 3.1. [ 279.947440][T12474] ntfs: (device loop2): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set ascii. You might want to try to use the mount option nls=utf8. [ 279.979913][T12474] ntfs: (device loop2): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 280.145909][T12429] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 280.250581][T12429] EXT4-fs (loop3): 1 truncate cleaned up [ 280.260011][T12429] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,nolazytime,auto_da_alloc,noquota,,errors=continue. Quota mode: none. [ 280.403258][ T26] audit: type=1800 audit(1778966564.133:14): pid=12429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3716" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 281.000657][ T9083] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.104271][T12486] loop5: detected capacity change from 0 to 32768 [ 281.161455][T12515] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3760'. [ 281.382990][T12521] loop6: detected capacity change from 0 to 2048 [ 281.457628][T12521] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 281.490580][T12521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 281.932461][T12531] netlink: 'syz.3.3768': attribute type 3 has an invalid length. [ 282.082288][T12535] loop3: detected capacity change from 0 to 4096 [ 282.097341][T12478] Zero length message leads to an empty skb [ 282.162384][T12536] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 282.419059][T12486] XFS (loop5): Mounting V5 Filesystem [ 282.692765][T12556] loop3: detected capacity change from 0 to 1024 [ 282.882573][T12486] XFS (loop5): Ending clean mount [ 282.943538][T11926] XFS (loop5): Unmounting Filesystem [ 283.560007][ T9083] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.673118][ T8549] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 283.936043][ T8549] usb 6-1: Using ep0 maxpacket: 16 [ 284.086386][ T8549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.141122][T12556] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 284.156292][ T8549] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.261099][ T8549] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 284.325304][ T8549] usb 6-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 284.396049][ T8549] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.454615][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.475338][ T8549] usb 6-1: config 0 descriptor?? [ 284.948015][ T8549] kye 0003:0458:0087.0009: unknown main item tag 0xe [ 284.954784][ T8549] kye 0003:0458:0087.0009: unknown main item tag 0x0 [ 285.012279][ T8549] kye 0003:0458:0087.0009: unknown main item tag 0x5 [ 285.060552][ T8549] kye 0003:0458:0087.0009: unknown main item tag 0xe [ 285.112662][ T8549] kye 0003:0458:0087.0009: unknown global tag 0xe [ 285.172397][ T8549] kye 0003:0458:0087.0009: item 0 1 1 14 parsing failed [ 285.209597][ T8549] kye 0003:0458:0087.0009: parse failed [ 285.257907][ T8549] kye: probe of 0003:0458:0087.0009 failed with error -22 [ 285.343113][ T8549] usb 6-1: USB disconnect, device number 3 [ 285.464342][ T4234] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 285.834732][T12578] loop2: detected capacity change from 0 to 32768 [ 285.886551][T12599] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3793'. [ 285.915861][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 285.994916][ T9083] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.184647][ T4234] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 286.193763][ T4234] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 286.272104][ T4234] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 286.317350][ T4234] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 286.403111][T12611] loop6: detected capacity change from 0 to 512 [ 286.411764][ T4234] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 286.476721][ T4234] usb 4-1: config 1 interface 0 has no altsetting 0 [ 286.483398][ T4234] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 286.493789][T12614] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3800'. [ 286.575831][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.590741][T12611] EXT4-fs (loop6): Test dummy encryption mode enabled [ 286.602031][T12611] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 286.602031][T12611] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 286.602031][T12611] [ 286.695957][T12611] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 286.745684][ T4234] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 286.880266][T12611] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.3799: bad orphan inode 131083 [ 286.898159][T12611] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,jqfmt=vfsv0,nouser_xattr,,errors=continue. Quota mode: none. [ 287.269415][T12640] loop2: detected capacity change from 0 to 256 [ 287.337903][T12640] exfat: Deprecated parameter 'utf8' [ 287.377819][T12640] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xffade8b4, utbl_chksum : 0xe619d30d) [ 287.557503][T12642] loop6: detected capacity change from 0 to 4096 [ 287.577349][T12648] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 287.795862][T12655] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.797604][T12642] NILFS error (device loop6): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 287.934826][T12642] Remounting filesystem read-only [ 288.233525][T12622] loop5: detected capacity change from 0 to 32768 [ 288.305615][T12622] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.3802 (12622) [ 288.347472][T12622] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 288.381356][T12622] BTRFS info (device loop5): using free space tree [ 288.435166][T12622] BTRFS info (device loop5): has skinny extents [ 288.888578][ T9083] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.016087][T12622] BTRFS info (device loop5): enabling ssd optimizations [ 289.049507][ T7728] kernel write not supported for file /media6 (pid: 7728 comm: kworker/1:11) [ 289.085160][T12622] BTRFS info (device loop5): setting incompat feature flag for DEFAULT_SUBVOL (0x2) [ 289.297131][T12714] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz1' [ 290.414842][T12689] loop6: detected capacity change from 0 to 32768 [ 290.658694][T12770] loop3: detected capacity change from 0 to 256 [ 290.842477][T12689] XFS (loop6): Mounting V5 Filesystem [ 290.956018][ T4234] ums-sddr09: probe of 4-1:1.0 failed with error -22 [ 290.993019][ T4234] usb 4-1: USB disconnect, device number 15 [ 291.133550][T12689] XFS (loop6): Ending clean mount [ 291.158523][T12790] loop2: detected capacity change from 0 to 512 [ 291.360293][T11947] XFS (loop6): Unmounting Filesystem [ 291.623688][T12819] loop3: detected capacity change from 0 to 128 [ 291.657681][T12818] netlink: 134700 bytes leftover after parsing attributes in process `syz.5.3858'. [ 291.706219][T12818] openvswitch: netlink: Message has 5 unknown bytes. [ 292.040517][T12834] loop5: detected capacity change from 0 to 64 [ 292.640936][ T9083] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.824219][T12790] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 292.894238][T12790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e12c, mo2=0002] [ 292.910282][T12790] System zones: 1-12 [ 292.921776][T12790] EXT4-fs (loop2): orphan cleanup on readonly fs [ 292.998852][T12790] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.3848: bg 0: block 361: padding at end of block bitmap is not set [ 293.097898][T12790] EXT4-fs (loop2): Remounting filesystem read-only [ 293.125223][T12790] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 293.147409][T12881] loop6: detected capacity change from 0 to 1024 [ 293.164909][T12790] EXT4-fs (loop2): Remounting filesystem read-only [ 293.185997][T12790] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3848: invalid indirect mapped block 12 (level 1) [ 293.233747][T12790] EXT4-fs (loop2): Remounting filesystem read-only [ 293.233841][T12790] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3848: invalid indirect mapped block 2 (level 2) [ 293.234164][T12790] EXT4-fs (loop2): Remounting filesystem read-only [ 293.234421][T12790] EXT4-fs (loop2): 1 truncate cleaned up [ 293.234441][T12790] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,max_batch_time=0x0000000000000007,inode_readahead_blks=0x0000000000080000,errors=remount-ro,jqfmt=vfsv0. Quota mode: none. [ 293.272630][T12881] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.279015][T12881] EXT4-fs error (device loop6): ext4_lookup:1858: inode #12: comm syz.6.3878: iget: bad extended attribute block 38654705664 [ 293.342772][T12819] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.342872][T12819] ext4 filesystem being mounted at /819/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 293.718175][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.718199][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.718212][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.718227][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.718239][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.718255][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.718272][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.718287][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.718300][T12904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.718315][T12904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.646831][T12938] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 294.658545][T12938] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=on. [ 294.700577][ T9083] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.990719][T12951] loop2: detected capacity change from 0 to 512 [ 295.099979][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3901'. [ 295.196180][T12912] loop6: detected capacity change from 0 to 32768 [ 295.217330][T12960] loop5: detected capacity change from 0 to 512 [ 295.268776][T12963] loop3: detected capacity change from 0 to 2048 [ 295.316840][T12912] XFS (loop6): Mounting V5 Filesystem [ 295.342189][T12960] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 295.356249][T12963] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 295.387486][T12960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 295.402712][T12960] System zones: 0-1, 15-15, 18-18, 34-34 [ 295.418126][T12960] EXT4-fs (loop5): orphan cleanup on readonly fs [ 295.424625][T12960] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 295.463424][T12960] EXT4-fs warning (device loop5): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 295.486069][T12960] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 295.517400][T12960] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #16: comm syz.5.3902: iget: bad extended attribute block 1 [ 295.530321][T12977] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 295.551316][T12912] XFS (loop6): Ending clean mount [ 295.574122][T12960] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.3902: couldn't read orphan inode 16 (err -117) [ 295.596041][ T8548] XFS (loop6): Metadata CRC error detected at xfs_inobt_read_verify+0x3a/0xd0, xfs_finobt block 0x10 [ 295.623409][T12960] EXT4-fs (loop5): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000008000,delalloc,grpquota,nouid32,nouid32,data=writeback,,errors=continue. Quota mode: writeback. [ 295.661814][ T8548] XFS (loop6): Unmount and run xfs_repair [ 295.685960][ T8548] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 295.713926][ T8548] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 295.740799][ T8548] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 295.756606][T12960] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 295.764573][T12960] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e854e018, mo2=0003] [ 295.791748][ T8548] 00000020: d7 dc 42 4e 79 90 42 cb 9f 91 9c b7 20 0a 10 1d ..BNy.B..... ... [ 295.806421][ T8548] 00000030: 00 00 00 00 0f 8d d2 a2 00 00 18 00 00 00 40 37 ..............@7 [ 295.824686][ T8548] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 295.835249][ T8548] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 295.860725][ T8548] 00000060: 00 00 00 00 00 f0 00 00 00 00 00 00 00 00 00 00 ................ [ 295.881540][ T8548] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 295.900250][T12912] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x10 len 4 error 74 [ 295.919332][T12912] XFS (loop6): Failed to initialize disk quotas. [ 296.041579][T11947] XFS (loop6): Unmounting Filesystem [ 296.819837][T12951] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 296.925184][T12951] ext4 filesystem being mounted at /726/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.028365][T12951] EXT4-fs error (device loop2): ext4_remount:6062: comm syz.2.3899: Abort forced by user [ 297.051359][T12951] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 297.721887][T13031] loop2: detected capacity change from 0 to 4096 [ 297.930476][T13037] loop6: detected capacity change from 0 to 4096 [ 298.081862][T13037] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 298.151554][T13037] ntfs3: loop6: Failed to load $Extend. [ 298.234291][T13045] loop2: detected capacity change from 0 to 1764 [ 299.029683][T13054] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3937'. [ 299.294285][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 300.409645][T13075] chnl_net:caif_netlink_parms(): no params data found [ 300.422897][T13099] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3955'. [ 300.602340][T13109] loop2: detected capacity change from 0 to 512 [ 300.683096][T13075] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.733048][T13075] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.759565][T13075] device bridge_slave_0 entered promiscuous mode [ 300.787833][T13075] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.811644][T13075] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.831432][T13075] device bridge_slave_1 entered promiscuous mode [ 300.924622][T13075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.952183][T13124] loop6: detected capacity change from 0 to 512 [ 300.964857][T13075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.037454][T13124] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002] [ 301.052983][T13124] System zones: 1-12 [ 301.074334][T13075] team0: Port device team_slave_0 added [ 301.085335][T13124] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.3967: Directory hole found for htree index block 0 [ 301.115668][T13075] team0: Port device team_slave_1 added [ 301.124279][T13124] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -117 [ 301.145206][T13124] EXT4-fs error (device loop6): dx_probe:823: inode #2: comm syz.6.3967: Directory hole found for htree index block 0 [ 301.190233][T13124] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 301.203015][T13075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.216639][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.250224][T13124] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,usrjquota=,bsdgroups,usrjquota="user_xattr,grpquota,,,errors=continue. Quota mode: writeback. [ 301.286750][T13075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.326702][T13124] EXT4-fs (loop6): Ignoring removed orlov option [ 301.332773][T13075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.346539][T13075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.360269][T13124] EXT4-fs (loop6): Remounting file system with no journal so ignoring journalled data option [ 301.407574][T13075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.436766][T13124] EXT4-fs (loop6): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,nouid32,usrjquota=,orlov,norecovery,barrier,data=journal,. Quota mode: writeback. [ 301.518078][T13126] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 361: padding at end of block bitmap is not set [ 301.572123][T13075] device hsr_slave_0 entered promiscuous mode [ 301.585588][T13075] device hsr_slave_1 entered promiscuous mode [ 301.611219][T13075] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.655013][T13075] Cannot create hsr debugfs directory [ 301.828066][T13138] loop6: detected capacity change from 0 to 256 [ 301.862289][ T4234] Bluetooth: hci2: command 0x0409 tx timeout [ 301.886435][T13138] exfat: Deprecated parameter 'utf8' [ 302.061744][T13138] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 302.083170][T13075] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.133302][T13075] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.165592][T13075] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.187710][T13075] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.302122][T13145] loop6: detected capacity change from 0 to 1024 [ 302.326707][T13131] loop3: detected capacity change from 0 to 40427 [ 302.372057][T13131] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 302.384185][T13131] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 302.412035][T13075] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.419092][T13145] hfsplus: request for non-existent node 3 in B*Tree [ 302.436602][T13145] hfsplus: request for non-existent node 3 in B*Tree [ 302.445595][T13131] F2FS-fs (loop3): invalid crc value [ 302.483269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 302.507755][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 302.529146][T13131] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 302.568880][T13109] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.3961: missing EA_INODE flag [ 302.657368][T13109] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.3961: error while reading EA inode 12 err=-117 [ 302.742974][T13109] EXT4-fs (loop2): 1 orphan inode deleted [ 302.748926][T13109] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 302.908958][T13131] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 302.932878][T13131] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 303.077869][T13075] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.088049][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 303.088662][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 303.089069][ T9075] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.089139][ T9075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.089618][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 303.090167][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 303.090545][ T9075] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.090589][ T9075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.091254][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 303.184531][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 303.220936][ T4188] attempt to access beyond end of device [ 303.220936][ T4188] loop3: rw=2049, want=45104, limit=40427 [ 303.221161][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 303.270958][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 303.272953][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 303.273698][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.300938][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.301846][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.312312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.312909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.328200][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.328907][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.333617][ T8549] kernel write not supported for file /uhid (pid: 8549 comm: kworker/0:16) [ 303.350290][T13075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.848696][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.848871][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.902737][T13075] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.942593][ T21] Bluetooth: hci2: command 0x041b tx timeout [ 305.061909][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.092397][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.251850][T13075] device veth0_vlan entered promiscuous mode [ 305.319244][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.347843][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.446813][T13075] device veth1_vlan entered promiscuous mode [ 305.455651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.464083][ T8538] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 305.525112][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.579394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.683865][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 305.702108][T13236] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4000'. [ 305.707973][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 305.725889][ T8538] usb 5-1: Using ep0 maxpacket: 32 [ 305.839460][ T1282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 305.868252][ T8538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.910509][ T8538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.923297][T13075] device veth0_macvtap entered promiscuous mode [ 305.952398][T13075] device veth1_macvtap entered promiscuous mode [ 305.978023][ T8538] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 306.000169][T13241] bond0: ARP monitoring cannot be used with MII monitoring [ 306.027193][ T8538] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.048866][ T21] Bluetooth: hci2: command 0x040f tx timeout [ 306.065980][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.084957][ T9077] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.100968][ T8538] usb 5-1: config 0 descriptor?? [ 306.118912][T13195] loop6: detected capacity change from 0 to 32768 [ 306.154717][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.178199][ T8538] hub 5-1:0.0: USB hub found [ 306.204692][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.225256][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.245799][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.286832][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.325210][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.366151][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.446063][ T8538] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 306.454041][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.483567][T13075] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.497089][T13195] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.3989 (13195) [ 306.567820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 306.577956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 306.612525][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.625935][T13195] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 306.645254][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.663147][T13195] BTRFS info (device loop6): setting nodatasum [ 306.679969][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.700801][T13195] BTRFS info (device loop6): enabling auto defrag [ 306.721129][T13195] BTRFS info (device loop6): disabling tree log [ 306.728099][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.745977][ T8538] usbhid 5-1:0.0: can't add hid device: -71 [ 306.752180][ T8538] usbhid: probe of 5-1:0.0 failed with error -71 [ 306.772385][T13195] BTRFS info (device loop6): using free space tree [ 306.792078][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.811191][T13246] loop3: detected capacity change from 0 to 4096 [ 306.823459][T13195] BTRFS info (device loop6): has skinny extents [ 306.830886][ T8538] usb 5-1: USB disconnect, device number 22 [ 306.855842][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.893795][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.916030][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.930013][T13075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.941170][T13075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.953486][T13075] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.966330][T13075] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.975297][T13075] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.988311][T13075] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.997717][T13075] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.015511][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.034880][ T9075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.265358][T13244] loop2: detected capacity change from 0 to 32768 [ 307.340770][T13195] BTRFS error (device loop6): open_ctree failed: -22 [ 307.359599][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.367642][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.832234][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 307.903518][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.931811][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.993803][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.102787][ T7728] Bluetooth: hci2: command 0x0419 tx timeout [ 308.314550][T13294] loop7: detected capacity change from 0 to 1024 [ 308.369482][T13298] loop6: detected capacity change from 0 to 64 [ 308.440906][T13294] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 308.507157][T13294] EXT4-fs error (device loop7): ext4_get_journal_inode:5187: inode #32: comm syz.7.4012: iget: special inode unallocated [ 308.540868][T13294] EXT4-fs (loop7): no journal found [ 308.555907][T13294] EXT4-fs (loop7): can't get journal size [ 308.621191][T13294] EXT4-fs (loop7): filesystem is read-only [ 308.628331][T13294] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,noload,noblock_validity,bsdgroups,abort,data=writeback,init_itable=0x000000000000001f,usrquota,,errors=continue. Quota mode: writeback. [ 308.679623][T13311] loop6: detected capacity change from 0 to 512 [ 308.686229][T13280] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 308.784400][T13311] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.4015: invalid block [ 308.855194][T13311] EXT4-fs (loop6): Remounting filesystem read-only [ 308.862233][T13311] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4015: invalid indirect mapped block 4294967295 (level 1) [ 308.878344][T13323] netlink: 'syz.2.4018': attribute type 10 has an invalid length. [ 308.892830][T13323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4018'. [ 308.903241][T13323] device ipvlan1 entered promiscuous mode [ 308.911485][T13323] bridge0: port 3(ipvlan1) entered blocking state [ 308.918717][T13323] bridge0: port 3(ipvlan1) entered disabled state [ 308.926749][T13323] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 308.929295][T13311] EXT4-fs (loop6): Remounting filesystem read-only [ 308.963225][T13322] netlink: 'syz.7.4017': attribute type 62 has an invalid length. [ 309.015833][T13311] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.4015: invalid indirect mapped block 4294967295 (level 1) [ 309.081778][T13311] EXT4-fs (loop6): Remounting filesystem read-only [ 309.086940][T13280] usb 5-1: config 0 has an invalid interface number: 37 but max is 1 [ 309.090683][T13311] EXT4-fs (loop6): 2 truncates cleaned up [ 309.110415][T13280] usb 5-1: config 0 has an invalid interface number: 255 but max is 1 [ 309.128575][T13328] loop7: detected capacity change from 0 to 512 [ 309.140735][T13280] usb 5-1: config 0 has no interface number 0 [ 309.145939][T13311] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpjquota=,errors=remount-ro,discard,auto_da_alloc=0x000000007fffffff,barrier=0x0000000000000000,. Quota mode: writeback. [ 309.164939][T13280] usb 5-1: config 0 has no interface number 1 [ 309.181944][T13280] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 309.226189][T13280] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 309.311019][T13311] EXT4-fs error (device loop6): empty_inline_dir:1873: inode #12: block 7: comm syz.6.4015: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 309.345354][T13280] usb 5-1: config 0 interface 255 has no altsetting 0 [ 309.353710][T13333] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.411342][T13311] EXT4-fs (loop6): Remounting filesystem read-only [ 309.419458][T13311] EXT4-fs warning (device loop6): empty_inline_dir:1880: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 309.596399][T13280] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 309.615036][T13280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.634010][T13280] usb 5-1: Product: syz [ 309.664534][T13280] usb 5-1: Manufacturer: syz [ 309.681090][T13280] usb 5-1: SerialNumber: syz [ 309.724450][T13280] usb 5-1: config 0 descriptor?? [ 309.751172][T13343] usb usb8: usbfs: process 13343 (syz.6.4024) did not claim interface 0 before use [ 309.810367][T13280] usb 5-1: selecting invalid altsetting 0 [ 309.851003][T13280] usb 5-1: Could not set interface, error -22 [ 309.916120][ T4918] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 310.041168][T13280] usb 5-1: USB disconnect, device number 23 [ 310.227233][ T8549] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 310.306345][ T4918] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.342754][ T4918] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.365528][ T4918] usb 3-1: config 2 interface 0 has no altsetting 0 [ 310.395502][ T4918] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 310.423772][ T4918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.616301][ T8549] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 310.635702][ T8549] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.681932][ T8549] usb 7-1: config 0 descriptor?? [ 310.757989][ T8549] cp210x 7-1:0.0: cp210x converter detected [ 310.917933][ T4918] elo 0003:04E7:0009.000A: item fetching failed at offset 2/5 [ 310.987819][ T4918] elo 0003:04E7:0009.000A: parse failed [ 310.993487][ T4918] elo: probe of 0003:04E7:0009.000A failed with error -22 [ 311.107207][T13328] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.140323][T13404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4042'. [ 311.154281][ T13] usb 3-1: USB disconnect, device number 24 [ 311.224688][T13328] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.322309][T13328] EXT4-fs warning (device loop7): ext4_group_add:1676: Can't resize non-sparse filesystem further [ 311.416226][ T8549] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 311.435571][ T8549] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 311.478024][ T8549] usb 7-1: cp210x converter now attached to ttyUSB0 [ 311.510892][ T8549] usb 7-1: USB disconnect, device number 3 [ 311.558652][ T8549] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 311.586311][ T8549] cp210x 7-1:0.0: device disconnected [ 311.745002][T13423] loop7: detected capacity change from 0 to 1024 [ 312.071410][T13434] loop2: detected capacity change from 0 to 128 [ 312.192749][T13434] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 312.271826][T13434] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 313.224827][T13468] loop2: detected capacity change from 0 to 256 [ 313.426644][T13451] loop3: detected capacity change from 0 to 32768 [ 313.535198][T13451] XFS (loop3): Mounting V5 Filesystem [ 313.761461][T13493] loop6: detected capacity change from 0 to 256 [ 313.778962][T13451] XFS (loop3): Ending clean mount [ 313.978718][ T4188] XFS (loop3): Unmounting Filesystem [ 314.464721][T13512] binder: 13511:13512 ioctl 4018620d 0 returned -22 [ 314.485691][T13512] binder: 13511:13512 ioctl c0306201 200000000180 returned -11 [ 314.991892][T13533] loop3: detected capacity change from 0 to 64 [ 315.119928][T13538] netlink: 'syz.2.4075': attribute type 1 has an invalid length. [ 315.306660][T13493] exfat: Deprecated parameter 'namecase' [ 315.312408][T13493] exfat: Deprecated parameter 'utf8' [ 315.363330][T13493] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 315.470903][T13493] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5f1fc80d, utbl_chksum : 0xe619d30d) [ 315.762780][T13555] loop2: detected capacity change from 0 to 4096 [ 315.839977][T13555] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 316.628711][ T26] audit: type=1800 audit(1778966600.363:15): pid=13533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4074" name="file1" dev="loop3" ino=21 res=0 errno=0 [ 316.685180][T13533] hfs: request for non-existent node -16318464 in B*Tree [ 316.704219][T13533] hfs: request for non-existent node -16318464 in B*Tree [ 316.801403][ T9075] hfs: request for non-existent node -16318464 in B*Tree [ 316.821350][ T9075] hfs: request for non-existent node -16318464 in B*Tree [ 316.990839][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.997293][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.091337][T13654] loop6: detected capacity change from 0 to 256 [ 318.187286][T13654] exfat: Deprecated parameter 'utf8' [ 318.199041][T13654] exfat: Deprecated parameter 'utf8' [ 318.214843][T13654] exfat: Deprecated parameter 'namecase' [ 318.317899][T13654] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 319.895055][T13710] loop7: detected capacity change from 0 to 4096 [ 319.938876][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4131'. [ 319.967549][T13717] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4188] was attempted by " [ 319.994827][T13718] netlink: 'syz.6.4131': attribute type 14 has an invalid length. [ 320.172725][T13719] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.258818][T13710] NILFS error (device loop7): nilfs_check_page: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11 [ 320.326826][T13710] NILFS error (device loop7): nilfs_readdir: bad page in #2 [ 320.367888][T13718] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4131'. [ 320.553851][T13725] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4135'. [ 320.600787][ T7728] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 320.937527][ T7728] usb 4-1: Using ep0 maxpacket: 8 [ 321.041829][T13737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4141'. [ 321.115056][ T7728] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 321.126545][ T7728] usb 4-1: config 0 has no interface number 0 [ 321.133260][ T7728] usb 4-1: too many endpoints for config 0 interface 30 altsetting 222: 254, using maximum allowed: 30 [ 321.205838][ T7728] usb 4-1: config 0 interface 30 altsetting 222 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.262119][ T7728] usb 4-1: config 0 interface 30 altsetting 222 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.280310][T13743] loop7: detected capacity change from 0 to 4096 [ 321.305692][ T7728] usb 4-1: config 0 interface 30 altsetting 222 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 321.325823][ T7728] usb 4-1: config 0 interface 30 has no altsetting 0 [ 321.332573][ T7728] usb 4-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 321.358697][T13740] loop6: detected capacity change from 0 to 4096 [ 321.390017][ T7728] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.420174][ T7728] usb 4-1: config 0 descriptor?? [ 321.543291][T13753] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 321.761312][T13763] loop2: detected capacity change from 0 to 512 [ 321.931529][ T7728] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 321.949506][ T7728] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 321.963550][T13763] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 321.974048][ T7728] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 322.015206][ T7728] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 322.025183][ T7728] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 322.038671][T13763] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.4152: iget: bad i_size value: 360287970189639680 [ 322.062443][ T7728] uclogic 0003:256C:006E.000B: unknown main item tag 0x0 [ 322.077033][ T7728] uclogic 0003:256C:006E.000B: No inputs registered, leaving [ 322.104163][ T7728] uclogic 0003:256C:006E.000B: hidraw0: USB HID v0.00 Device [HID 256c:006e] on usb-dummy_hcd.3-1/input30 [ 322.116095][T13763] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.4152: couldn't read orphan inode 15 (err -117) [ 322.169223][T13763] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,,errors=continue. Quota mode: none. [ 322.198623][ T4196] usb 4-1: USB disconnect, device number 16 [ 322.305140][T13763] EXT4-fs error (device loop2): ext4_readdir:263: inode #12: block 13: comm syz.2.4152: path /771/file0/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=12, rec_len=0, size=4096 fake=1 [ 322.533196][T13780] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 322.826393][ T4196] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 322.845851][T13740] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 322.954864][T13740] ntfs3: loop6: Failed to load $Extend. [ 323.127343][ T4196] usb 5-1: Using ep0 maxpacket: 16 [ 323.256314][ T4196] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.281099][ T4196] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.487459][ T4196] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.506878][ T4196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.545847][ T4196] usb 5-1: Product: syz [ 323.565847][ T4196] usb 5-1: Manufacturer: syz [ 323.573774][ T4196] usb 5-1: SerialNumber: syz [ 323.946130][ T4196] usb 5-1: 0:2 : does not exist [ 324.031176][ T4196] usb 5-1: USB disconnect, device number 24 [ 324.673241][T13854] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4193'. [ 324.706025][T13856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4194'. [ 324.955059][T13833] loop2: detected capacity change from 0 to 40427 [ 324.974827][T13870] loop3: detected capacity change from 0 to 512 [ 324.986166][T13869] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4198'. [ 325.123207][T13833] F2FS-fs (loop2): build fault injection attr: rate: 14, type: 0x1ffff [ 325.136347][T13875] loop6: detected capacity change from 0 to 128 [ 325.162397][T13833] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0xe4 [ 325.209376][T13875] ADFS-fs (loop6): unrecognised mount option "u" or missing value [ 325.233146][T13833] F2FS-fs (loop2): invalid crc value [ 325.323588][T13833] F2FS-fs (loop2): Found nat_bits in checkpoint [ 325.397715][T13875] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4201'. [ 325.491636][T13833] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x43c/0xaa0 [ 325.568421][T13833] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 325.685462][T13833] F2FS-fs (loop2) : inject no more block in inc_valid_node_count of f2fs_new_node_page+0x185/0x8f0 [ 325.741203][T13906] F2FS-fs (loop2) : inject page alloc in f2fs_grab_cache_page of f2fs_get_new_data_page+0xc1/0x680 [ 325.852500][ T4196] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 326.111138][ T1108] hid-generic 0004:0004:FFFF0001.000C: unknown main item tag 0x0 [ 326.119658][ T1108] hid-generic 0004:0004:FFFF0001.000C: unknown main item tag 0x0 [ 326.128075][ T1108] hid-generic 0004:0004:FFFF0001.000C: unknown main item tag 0x0 [ 326.140933][ T1108] hid-generic 0004:0004:FFFF0001.000C: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 326.256264][ T4196] usb 7-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 326.283432][ T4196] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 326.306790][ T4196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 48, changing to 9 [ 326.325841][ T4196] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 8240, setting to 1024 [ 326.346621][ T4196] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 326.552203][ T4196] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 326.567224][ T4196] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.575703][ T4196] usb 7-1: Product: syz [ 326.607677][ T4196] usb 7-1: Manufacturer: syz [ 326.612428][ T4196] usb 7-1: SerialNumber: syz [ 326.629861][ T4196] usb 7-1: config 0 descriptor?? [ 326.667471][ T4196] garmin_gps 7-1:0.0: Garmin GPS usb/tty converter detected [ 326.676969][ T4196] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 326.696296][ T4196] garmin_gps: probe of ttyUSB0 failed with error -8 [ 326.750589][T13870] EXT4-fs (loop3): Ignoring removed nobh option [ 326.758371][T13870] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 326.783272][T13923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 326.817945][T13870] EXT4-fs (loop3): orphan cleanup on readonly fs [ 326.855876][T13870] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13 [ 326.924027][T13870] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.4200: attempt to clear invalid blocks 2 len 1 [ 326.959920][T13870] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 326.967097][T12752] usb 7-1: USB disconnect, device number 4 [ 326.990748][T13870] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4200: invalid indirect mapped block 1819239214 (level 0) [ 327.027264][T12752] garmin_gps 7-1:0.0: device disconnected [ 327.074640][T13870] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.4200: invalid indirect mapped block 1819239214 (level 1) [ 327.167924][T13870] EXT4-fs (loop3): 1 truncate cleaned up [ 327.197296][T13870] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodioread_nolock,nobh,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 327.308521][T13870] EXT4-fs (loop3): Quota file not on filesystem root. Journaled quota will not work [ 327.535150][T13943] loop2: detected capacity change from 0 to 512 [ 327.980199][ T4918] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 327.987929][T13962] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4233'. [ 328.286159][ T4918] usb 7-1: Using ep0 maxpacket: 8 [ 328.432238][ T4918] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 328.450413][ T4918] usb 7-1: config 2 has no interface number 0 [ 328.468623][ T4918] usb 7-1: config 2 interface 31 has no altsetting 0 [ 328.656334][ T4918] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 328.680473][ T4918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.717129][ T4918] usb 7-1: Product: syz [ 328.732896][ T4918] usb 7-1: Manufacturer: syz [ 328.759696][ T4918] usb 7-1: SerialNumber: syz [ 328.926782][T13997] sp0: Synchronizing with TNC [ 329.411685][T13943] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 329.558834][T13943] EXT4-fs error (device loop2): ext4_readdir:223: inode #12: comm syz.2.4226: path /792/file0/file0: directory fails checksum at offset 0 [ 329.687606][ T4918] ch9200: probe of 7-1:2.31 failed with error -22 [ 329.725238][ T4918] usb 7-1: USB disconnect, device number 5 [ 330.103099][T14001] loop7: detected capacity change from 0 to 32768 [ 330.270455][ C1] ================================================================== [ 330.279158][ C1] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 330.286762][ C1] Read of size 2 at addr ffff88804eab4940 by task kworker/1:22/12752 [ 330.294862][ C1] [ 330.297230][ C1] CPU: 1 PID: 12752 Comm: kworker/1:22 Not tainted syzkaller #0 [ 330.304897][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 330.315060][ C1] Workqueue: events_long defense_work_handler [ 330.321189][ C1] Call Trace: [ 330.324499][ C1] [ 330.327372][ C1] dump_stack_lvl+0x188/0x250 [ 330.332095][ C1] ? show_regs_print_info+0x20/0x20 [ 330.337334][ C1] ? _printk+0xda/0x130 [ 330.341527][ C1] ? __nft_trace_packet+0x135/0x150 [ 330.346767][ C1] ? load_image+0x400/0x400 [ 330.351306][ C1] ? nft_synproxy_do_eval+0x304/0x570 [ 330.356723][ C1] print_address_description+0x60/0x2d0 [ 330.362328][ C1] ? __nft_trace_packet+0x135/0x150 [ 330.367665][ C1] kasan_report+0xdf/0x130 [ 330.372123][ C1] ? __nft_trace_packet+0x135/0x150 [ 330.377363][ C1] __nft_trace_packet+0x135/0x150 [ 330.382428][ C1] nft_do_chain+0x12a5/0x14f0 [ 330.387235][ C1] ? ip_vs_conn_out_get+0xa06/0xa60 [ 330.392487][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 330.398445][ C1] ? tcp_conn_schedule+0x498/0x850 [ 330.403672][ C1] ? ip_vs_in+0xbe1/0x1d20 [ 330.408135][ C1] ? nf_nat_inet_fn+0x8a3/0xad0 [ 330.413038][ C1] nft_do_chain_inet+0x25c/0x340 [ 330.418011][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 330.422906][ C1] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 330.428321][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 330.433315][ C1] nf_hook_slow+0xb9/0x200 [ 330.437771][ C1] ? NF_HOOK+0x390/0x390 [ 330.442047][ C1] NF_HOOK+0x1f2/0x390 [ 330.446151][ C1] ? NF_HOOK+0x390/0x390 [ 330.450429][ C1] ? ip_local_deliver+0x1a0/0x1a0 [ 330.455487][ C1] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 330.460827][ C1] ? NF_HOOK+0x390/0x390 [ 330.465113][ C1] ? ip_local_deliver+0x11e/0x1a0 [ 330.470180][ C1] ? ip_rcv_core+0xb60/0xb60 [ 330.474798][ C1] NF_HOOK+0x303/0x390 [ 330.478897][ C1] ? ip_rcv_core+0xb60/0xb60 [ 330.483549][ C1] ? ip_local_deliver+0x1a0/0x1a0 [ 330.488614][ C1] ? ip_rcv_core+0xb60/0xb60 [ 330.493239][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 330.498924][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 330.504594][ C1] __netif_receive_skb+0xcc/0x290 [ 330.509753][ C1] process_backlog+0x370/0x790 [ 330.514566][ C1] ? rps_trigger_softirq+0x210/0x210 [ 330.519894][ C1] __napi_poll+0xc0/0x430 [ 330.524349][ C1] ? net_rx_action+0x307/0xa10 [ 330.529236][ C1] net_rx_action+0x4d4/0xa10 [ 330.533868][ C1] ? net_tx_action+0x880/0x880 [ 330.538753][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 330.544772][ C1] ? detach_timer+0x2b0/0x2b0 [ 330.549504][ C1] handle_softirqs+0x339/0x830 [ 330.554313][ C1] ? do_softirq+0x142/0x210 [ 330.558858][ C1] ? do_softirq+0x210/0x210 [ 330.563403][ C1] do_softirq+0x142/0x210 [ 330.567772][ C1] [ 330.570726][ C1] [ 330.573695][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 330.579096][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 330.585118][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 330.590436][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 330.595773][ C1] ? local_bh_enable+0x5/0x20 [ 330.600491][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 330.605721][ C1] ? _local_bh_enable+0xa0/0xa0 [ 330.610602][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 330.615833][ C1] update_defense_level+0x896/0xd60 [ 330.621067][ C1] ? proc_do_sync_threshold+0x420/0x420 [ 330.626663][ C1] ? read_lock_is_recursive+0x10/0x10 [ 330.632078][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 330.638002][ C1] ? _raw_spin_unlock+0x40/0x40 [ 330.642892][ C1] defense_work_handler+0x29/0xd0 [ 330.647964][ C1] process_one_work+0x85f/0x1010 [ 330.652958][ C1] ? worker_detach_from_pool+0x240/0x240 [ 330.658622][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 330.663941][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 330.669013][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 330.674678][ C1] ? wq_worker_running+0x97/0x170 [ 330.679731][ C1] worker_thread+0xaa6/0x1290 [ 330.684447][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 330.689687][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 330.695620][ C1] kthread+0x436/0x520 [ 330.699719][ C1] ? rcu_lock_release+0x20/0x20 [ 330.704587][ C1] ? kthread_blkcg+0xd0/0xd0 [ 330.709204][ C1] ret_from_fork+0x1f/0x30 [ 330.713663][ C1] [ 330.716703][ C1] [ 330.719045][ C1] Allocated by task 12752: [ 330.723480][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 330.728371][ C1] slab_post_alloc_hook+0x4c/0x380 [ 330.733518][ C1] kmem_cache_alloc_node+0x12d/0x2d0 [ 330.738830][ C1] __alloc_skb+0xf4/0x750 [ 330.743198][ C1] synproxy_send_client_synack+0x16f/0xde0 [ 330.749049][ C1] nft_synproxy_eval_v4+0x347/0x4e0 [ 330.754280][ C1] nft_synproxy_do_eval+0x304/0x570 [ 330.759505][ C1] nft_do_chain+0x48c/0x14f0 [ 330.764138][ C1] nft_do_chain_inet+0x25c/0x340 [ 330.769100][ C1] nf_hook_slow+0xb9/0x200 [ 330.773589][ C1] NF_HOOK+0x1f2/0x390 [ 330.777689][ C1] NF_HOOK+0x303/0x390 [ 330.781786][ C1] __netif_receive_skb+0xcc/0x290 [ 330.786840][ C1] process_backlog+0x370/0x790 [ 330.791630][ C1] __napi_poll+0xc0/0x430 [ 330.796009][ C1] net_rx_action+0x4d4/0xa10 [ 330.800626][ C1] handle_softirqs+0x339/0x830 [ 330.805413][ C1] do_softirq+0x142/0x210 [ 330.809762][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 330.815094][ C1] update_defense_level+0x896/0xd60 [ 330.820330][ C1] defense_work_handler+0x29/0xd0 [ 330.825391][ C1] process_one_work+0x85f/0x1010 [ 330.830384][ C1] worker_thread+0xaa6/0x1290 [ 330.835138][ C1] kthread+0x436/0x520 [ 330.839237][ C1] ret_from_fork+0x1f/0x30 [ 330.843687][ C1] [ 330.846047][ C1] Freed by task 12752: [ 330.850137][ C1] kasan_set_track+0x4b/0x70 [ 330.854764][ C1] kasan_set_free_info+0x1f/0x40 [ 330.859744][ C1] ____kasan_slab_free+0xd5/0x110 [ 330.864803][ C1] slab_free_freelist_hook+0xea/0x170 [ 330.870205][ C1] kmem_cache_free+0x8f/0x210 [ 330.874914][ C1] nft_synproxy_eval_v4+0x34f/0x4e0 [ 330.880147][ C1] nft_synproxy_do_eval+0x304/0x570 [ 330.885376][ C1] nft_do_chain+0x48c/0x14f0 [ 330.889988][ C1] nft_do_chain_inet+0x25c/0x340 [ 330.894960][ C1] nf_hook_slow+0xb9/0x200 [ 330.899407][ C1] NF_HOOK+0x1f2/0x390 [ 330.903544][ C1] NF_HOOK+0x303/0x390 [ 330.907665][ C1] __netif_receive_skb+0xcc/0x290 [ 330.912717][ C1] process_backlog+0x370/0x790 [ 330.917510][ C1] __napi_poll+0xc0/0x430 [ 330.921874][ C1] net_rx_action+0x4d4/0xa10 [ 330.926494][ C1] handle_softirqs+0x339/0x830 [ 330.931289][ C1] do_softirq+0x142/0x210 [ 330.935648][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 330.940872][ C1] update_defense_level+0x896/0xd60 [ 330.946108][ C1] defense_work_handler+0x29/0xd0 [ 330.951181][ C1] process_one_work+0x85f/0x1010 [ 330.956196][ C1] worker_thread+0xaa6/0x1290 [ 330.960970][ C1] kthread+0x436/0x520 [ 330.965069][ C1] ret_from_fork+0x1f/0x30 [ 330.969509][ C1] [ 330.971855][ C1] The buggy address belongs to the object at ffff88804eab48c0 [ 330.971855][ C1] which belongs to the cache skbuff_head_cache of size 232 [ 330.986585][ C1] The buggy address is located 128 bytes inside of [ 330.986585][ C1] 232-byte region [ffff88804eab48c0, ffff88804eab49a8) [ 331.000111][ C1] The buggy address belongs to the page: [ 331.005779][ C1] page:ffffea00013aad00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4eab4 [ 331.015969][ C1] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 331.023559][ C1] raw: 00fff00000000200 0000000000000000 dead000000000122 ffff888144bf0140 [ 331.032273][ C1] raw: 0000000000000000 00000000800c000c 00000001ffffffff 0000000000000000 [ 331.041067][ C1] page dumped because: kasan: bad access detected [ 331.047504][ C1] page_owner tracks the page as allocated [ 331.053339][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 12752, ts 330268960595, free_ts 329433603478 [ 331.071096][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 331.076745][ C1] __alloc_pages+0x1ee/0x480 [ 331.081362][ C1] new_slab+0xc0/0x4b0 [ 331.085461][ C1] ___slab_alloc+0x80a/0xdd0 [ 331.090173][ C1] kmem_cache_alloc_node+0x1c3/0x2d0 [ 331.095577][ C1] __alloc_skb+0xf4/0x750 [ 331.100041][ C1] synproxy_send_client_synack_ipv6+0x161/0xc60 [ 331.106311][ C1] nft_synproxy_eval_v6+0x347/0x4e0 [ 331.111550][ C1] nft_synproxy_do_eval+0x3c9/0x570 [ 331.116876][ C1] nft_do_chain+0x48c/0x14f0 [ 331.121512][ C1] nft_do_chain_inet+0x25c/0x340 [ 331.126490][ C1] nf_hook_slow+0xb9/0x200 [ 331.130941][ C1] NF_HOOK+0x1f2/0x390 [ 331.135055][ C1] NF_HOOK+0x303/0x390 [ 331.139155][ C1] __netif_receive_skb+0xcc/0x290 [ 331.144215][ C1] process_backlog+0x370/0x790 [ 331.149021][ C1] page last free stack trace: [ 331.153716][ C1] free_unref_page_prepare+0x637/0x6c0 [ 331.159245][ C1] free_unref_page+0x8f/0x2a0 [ 331.163960][ C1] __vunmap+0x8b9/0xa50 [ 331.168290][ C1] packet_set_ring+0x190a/0x2430 [ 331.173284][ C1] packet_release+0x7c2/0xc30 [ 331.178084][ C1] sock_close+0xd5/0x240 [ 331.182350][ C1] __fput+0x234/0x930 [ 331.186358][ C1] task_work_run+0x125/0x1a0 [ 331.190978][ C1] exit_to_user_mode_loop+0x10f/0x130 [ 331.196379][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 331.201969][ C1] syscall_exit_to_user_mode+0x16/0x40 [ 331.207474][ C1] do_syscall_64+0x58/0xa0 [ 331.211950][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 331.217871][ C1] [ 331.220202][ C1] Memory state around the buggy address: [ 331.225834][ C1] ffff88804eab4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 331.233940][ C1] ffff88804eab4880: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 331.242018][ C1] >ffff88804eab4900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 331.250087][ C1] ^ [ 331.256257][ C1] ffff88804eab4980: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 331.264351][ C1] ffff88804eab4a00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 331.272437][ C1] ================================================================== [ 331.280515][ C1] Disabling lock debugging due to kernel taint [ 331.286763][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 331.293978][ C1] CPU: 1 PID: 12752 Comm: kworker/1:22 Tainted: G B syzkaller #0 [ 331.303036][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.313127][ C1] Workqueue: events_long defense_work_handler [ 331.319239][ C1] Call Trace: [ 331.322544][ C1] [ 331.325409][ C1] dump_stack_lvl+0x188/0x250 [ 331.330116][ C1] ? show_regs_print_info+0x20/0x20 [ 331.335337][ C1] ? load_image+0x400/0x400 [ 331.339881][ C1] panic+0x2e5/0x810 [ 331.343821][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 331.348353][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 331.354276][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 331.360216][ C1] ? _raw_spin_unlock+0x40/0x40 [ 331.365110][ C1] ? print_memory_metadata+0x314/0x400 [ 331.370616][ C1] ? __nft_trace_packet+0x135/0x150 [ 331.375847][ C1] check_panic_on_warn+0x80/0xa0 [ 331.380819][ C1] ? __nft_trace_packet+0x135/0x150 [ 331.386057][ C1] end_report+0x6d/0xf0 [ 331.390246][ C1] kasan_report+0x102/0x130 [ 331.394795][ C1] ? __nft_trace_packet+0x135/0x150 [ 331.400033][ C1] __nft_trace_packet+0x135/0x150 [ 331.405171][ C1] nft_do_chain+0x12a5/0x14f0 [ 331.409876][ C1] ? ip_vs_conn_out_get+0xa06/0xa60 [ 331.415141][ C1] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 331.421068][ C1] ? tcp_conn_schedule+0x498/0x850 [ 331.426225][ C1] ? ip_vs_in+0xbe1/0x1d20 [ 331.430674][ C1] ? nf_nat_inet_fn+0x8a3/0xad0 [ 331.435563][ C1] nft_do_chain_inet+0x25c/0x340 [ 331.440550][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 331.445439][ C1] ? nf_nat_ipv4_local_in+0x209/0x5b0 [ 331.450849][ C1] ? nft_do_chain_arp+0xf0/0xf0 [ 331.455818][ C1] nf_hook_slow+0xb9/0x200 [ 331.460269][ C1] ? NF_HOOK+0x390/0x390 [ 331.464549][ C1] NF_HOOK+0x1f2/0x390 [ 331.468653][ C1] ? NF_HOOK+0x390/0x390 [ 331.473138][ C1] ? ip_local_deliver+0x1a0/0x1a0 [ 331.478192][ C1] ? ip_rcv_finish_core+0xd8b/0x1bc0 [ 331.483525][ C1] ? NF_HOOK+0x390/0x390 [ 331.487888][ C1] ? ip_local_deliver+0x11e/0x1a0 [ 331.492949][ C1] ? ip_rcv_core+0xb60/0xb60 [ 331.497591][ C1] NF_HOOK+0x303/0x390 [ 331.501684][ C1] ? ip_rcv_core+0xb60/0xb60 [ 331.506303][ C1] ? ip_local_deliver+0x1a0/0x1a0 [ 331.511445][ C1] ? ip_rcv_core+0xb60/0xb60 [ 331.516064][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 331.521731][ C1] ? ip_local_deliver_finish+0x320/0x320 [ 331.527401][ C1] __netif_receive_skb+0xcc/0x290 [ 331.532462][ C1] process_backlog+0x370/0x790 [ 331.537257][ C1] ? rps_trigger_softirq+0x210/0x210 [ 331.542570][ C1] __napi_poll+0xc0/0x430 [ 331.546951][ C1] ? net_rx_action+0x307/0xa10 [ 331.551828][ C1] net_rx_action+0x4d4/0xa10 [ 331.556470][ C1] ? net_tx_action+0x880/0x880 [ 331.561259][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 331.567271][ C1] ? detach_timer+0x2b0/0x2b0 [ 331.571979][ C1] handle_softirqs+0x339/0x830 [ 331.576769][ C1] ? do_softirq+0x142/0x210 [ 331.581299][ C1] ? do_softirq+0x210/0x210 [ 331.585841][ C1] do_softirq+0x142/0x210 [ 331.590397][ C1] [ 331.593350][ C1] [ 331.596306][ C1] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 331.601723][ C1] ? lockdep_hardirqs_on_prepare+0x770/0x770 [ 331.607736][ C1] ? __local_bh_enable_ip+0xd7/0x1c0 [ 331.613053][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 331.618383][ C1] ? local_bh_enable+0x5/0x20 [ 331.623099][ C1] __local_bh_enable_ip+0x180/0x1c0 [ 331.628327][ C1] ? _local_bh_enable+0xa0/0xa0 [ 331.633210][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 331.638445][ C1] update_defense_level+0x896/0xd60 [ 331.643680][ C1] ? proc_do_sync_threshold+0x420/0x420 [ 331.649378][ C1] ? read_lock_is_recursive+0x10/0x10 [ 331.654785][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 331.660717][ C1] ? _raw_spin_unlock+0x40/0x40 [ 331.665596][ C1] defense_work_handler+0x29/0xd0 [ 331.670739][ C1] process_one_work+0x85f/0x1010 [ 331.675903][ C1] ? worker_detach_from_pool+0x240/0x240 [ 331.681569][ C1] ? lockdep_hardirqs_off+0x70/0x100 [ 331.686894][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 331.691956][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 331.697532][ C1] ? wq_worker_running+0x97/0x170 [ 331.702592][ C1] worker_thread+0xaa6/0x1290 [ 331.707315][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 331.712540][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 331.718470][ C1] kthread+0x436/0x520 [ 331.722567][ C1] ? rcu_lock_release+0x20/0x20 [ 331.727444][ C1] ? kthread_blkcg+0xd0/0xd0 [ 331.732062][ C1] ret_from_fork+0x1f/0x30 [ 331.736509][ C1] [ 331.739992][ C1] Kernel Offset: disabled [ 331.744353][ C1] Rebooting in 86400 seconds..