last executing test programs: 24.950450865s ago: executing program 2 (id=1796): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3b}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040090}, 0x0) 24.945677556s ago: executing program 2 (id=1797): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b2a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 24.832759149s ago: executing program 2 (id=1799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000003040)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0xdd65, @local, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)='7', 0x1}], 0x1}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x130a, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000200)='7', 0x1}], 0x1}}], 0x2, 0xd8) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1}, &(0x7f0000000400)=0x8) 24.686451294s ago: executing program 2 (id=1801): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00) 24.398479463s ago: executing program 2 (id=1803): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) ptrace$setsig(0x4203, r0, 0x200, &(0x7f0000000300)={0x14, 0x7ff, 0x3}) 23.255162548s ago: executing program 2 (id=1812): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 23.163477491s ago: executing program 32 (id=1812): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000005000000080000000f"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 3.153249084s ago: executing program 3 (id=2024): r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000200)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@background_gc_off}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='./file2\x00', 0x224061, &(0x7f0000000280)=ANY=[@ANYRESDEC, @ANYRES16=r0, @ANYRES8=r0, @ANYRESDEC, @ANYRES16=r0, @ANYRESDEC, @ANYRES32=r0, @ANYRES16=r0], 0x1, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) fdatasync(r1) 3.149170264s ago: executing program 4 (id=2025): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x9, @loopback, 0x8}, 0x1c) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@nl=@unspec, 0x1b, 0x0}, 0x5b4}], 0x1, 0x488c4) 2.93450527s ago: executing program 4 (id=2027): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)="1b6ce15311f59bf59dc195a0014d63fd4ef89a9052a8b3b52343247fa56b0ab0a3daf776139a3cf0d1d2c53ef252877f02b4f71d9997cf50df6199c8", 0x3c}, {&(0x7f0000000200)="ed1ea743", 0x4}], 0x2}}], 0x1, 0x4008880) 2.874746752s ago: executing program 4 (id=2028): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r1 = socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x1004810, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2.610439021s ago: executing program 5 (id=2030): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="ffffff8d0100"}) 2.479854425s ago: executing program 5 (id=2031): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000080)={0x1, 0x4}) 2.306439359s ago: executing program 5 (id=2034): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r1}, 0xc) 2.245865762s ago: executing program 5 (id=2036): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000800)={0x1, 0x0, [{0x7, 0x1, 0x3, 0x8, 0x8, 0x6, 0x40}]}) 2.028669148s ago: executing program 5 (id=2039): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000000)=@dstopts={0x5c}, 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) 1.923782081s ago: executing program 3 (id=2040): syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x8080, &(0x7f0000000040)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRES8], 0x3, 0x232, &(0x7f0000000640)="$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") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1.923624881s ago: executing program 4 (id=2041): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000005380)=[{{&(0x7f0000000180)=@can={0x1d, r1, 0xf5}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000580)="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", 0x6fa}], 0x1}}], 0x1, 0x0) 1.818414705s ago: executing program 1 (id=2042): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5004}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) 1.804082905s ago: executing program 4 (id=2043): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000004c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x3, 0xdd4, 0x6, 0x0, 0x3, 0x395, 0x80000089, 0x4, 0x0, 0xfffffff6, 0xfffeeadb, 0x0, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]}) 1.764536006s ago: executing program 0 (id=2044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000180), 0x1, 0x42e, &(0x7f0000000940)="$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") ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000003c0)={0xfefffffffffffffc, 0x4000, 0xbfff}) 1.558509762s ago: executing program 4 (id=2045): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 1.32964262s ago: executing program 0 (id=2046): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r2, 0xc028ae92, &(0x7f0000000000)={0x5}) 1.082039817s ago: executing program 5 (id=2047): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000000000)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount(0x0, &(0x7f00000009c0)='.\x00', 0x0, 0x22be836, 0x0) 1.030193869s ago: executing program 0 (id=2048): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff0060031200000088fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.029582439s ago: executing program 3 (id=2049): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000005, 0x0) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) 911.987402ms ago: executing program 1 (id=2050): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip_vti0\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xb7, 0x80}}}}}}, 0x0) 834.371075ms ago: executing program 3 (id=2051): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a80)={0x8, 0x0, [{0xc000, 0xff, &(0x7f0000000400)=""/255}, {0x0, 0xb8, &(0x7f0000001500)=""/184}, {0x0, 0xc4, &(0x7f00000016c0)=""/196}, {0x2, 0x95, &(0x7f00000017c0)=""/149}, {0x8000000, 0x8, &(0x7f0000001880)=""/8}, {0x0, 0xfffffffffffffef7, &(0x7f0000001940)=""/87}, {0x30000, 0x46, &(0x7f0000000340)=""/83}, {0x2, 0x88, &(0x7f00000019c0)=""/136}]}) close(r0) 754.286027ms ago: executing program 1 (id=2052): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x81500, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x6e0, 0xec000000, 0xcd}]}) 718.463308ms ago: executing program 0 (id=2053): syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000800)='./file0\x00', 0x220480b, &(0x7f0000000c00)=ANY=[@ANYBLOB='map=off,nocompress\x00iocharset=maccenteuro,showassoc,session=0x0000000000000062,block=0x0000000000000400Amap=acorn,iocharset=iso8859-2,dmode=0x0000000000380000,showassoc,mode=0x0000000000000002,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6273636f6e746578743d73746166665f752ceb068606fad4ddd8dda957b0512672b317c155b6af8ab8d17043694756c54620229449c6dae0ca8c592c9274f7626b6281173265e8027f08000000000000001dc334cf2b7fd9acbec468a9c9314c0c0cee614f4418f9c6"], 0xfa, 0x6a0, &(0x7f00000047c0)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0x20, 0x3) getdents(r0, 0x0, 0x58) 563.665723ms ago: executing program 1 (id=2054): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x53, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x7}}, {0x12, 0x2, [0x8, 0x80, 0x6, 0x3, 0x401, 0xfd, 0x7]}}]}]}, 0x8c}}, 0x0) 563.065203ms ago: executing program 0 (id=2064): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000bf0200001400"], 0x0, 0x1000, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000080), &(0x7f0000000180)=""/40}, 0x20) 562.272143ms ago: executing program 3 (id=2065): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0014"], 0x34}}, 0xc000) 305.060881ms ago: executing program 1 (id=2055): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)="c0235c0a11", 0x5}], 0x1) 304.808641ms ago: executing program 3 (id=2056): preadv(0xffffffffffffffff, 0x0, 0x0, 0x9f, 0x106) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x3200041, &(0x7f00000004c0)=ANY=[@ANYBLOB="6561733d6e6f2c6561733d6e6f2c636173653d617369732c636865636b3d6e6f6e652c00bee5b9b80cb49c807c85709393a247066e0dbd1d4cc9b14919f9175b3d1ecfca63ba2dfbad53f056c689b3dd30d15dd68dc24fc6ff3f7447a2faf38d23e21b786f25f51f852073754deab2983e8ef71f0f41831db21390b85628876f9cd55cde11c878333a57d8a68ed062dbc69f88ec16a78580", @ANYRESOCT], 0x1, 0x9e23, &(0x7f0000013e80)="$eJwkmHMM54ezAK/u1bbtdmrbtm3bU/f7sVHbtq+n2rbdXm1c+fLL22T/3WxmZ5PN3jPAewd43wDvH+ADAxw2wAcHOHyAIwY4coCjBjh6gA8N8OEBPjLARwf42AAfH+ATA3xygE8N8OkBPjPAZwf43ACfH+ALA3xxgC8N8OUBvjLAVwf42gBfH+AbA3xzgG8N8O0BvjPAdwf43gDfH+AHA/xwgB8N8OMBfjLATwf42QA/H+AXAxwzwC8H+NUAvx7gNwP8doDfDfD7Af4wwB8H+NMAfx7gLwP8dYC/DfD3Af4xwLED/HOAfw3w7wH+M8B/B/jfAIcEOE6A4wY4XoDjBzhBgBMGOFGAEwc4NMBJApw0wMkCnDzAKQKcMsCpApw6wGkCnDbA6QKcPsAZApwxwJkCnDnAWQKcNcDZApw9wDkCnDPAuQKcO8B5Apw3wPkCnD/ABQJcMMCFAlw4wEUCXDTAxQJcPMAlAlwywKUCJMClA1wmwGUDXC7A5QNcIcAVA1wpwJUDXCXAVQNcLcDVA1wjwDUDXCvAtQNcJ8B1A1wvwPUD3CDADQPcKMCNA9wkwE0D3CzAzQPcIsAtA9wqwK0D3CbAbQPcLsDtA9whwB0D3CnAnQPcJcBdA9wtwN0D3CPAPQPcK8C9A9wnwH0D3C/A/QM8IMADAzwowIMDPCTAQwM8LMDDAzwiwCMDPCrAowM8JsBjAzwuwOMDPCHAEwM8KcCTAzTAUwI8NcDTAjw9wDMCPDPAswI8O8BBgEGAYYBRgHGASYBpgFmAeYBFgGWAVYB1gE2AbYBdgH2A5wR4boDnBXh+gBcEeGGAFwV4cYCXBHhpgJcFeHmAVwR4ZYBXBXh1gNcEeG2A1wV4fYA3BHhjgDcFeHOAtwR4a4C3BXh7gHcEeGeAdwV4d4D3BHhvgPcFeH+ADwQ4LMAHAxwe4IgARwY4KsDRAT4U4MMBPhLgowE+FuDjAT4R4JMBPhXg0wE+E+CzAT4X4PMBvhDgiwG+FODLAb4S4KsBvhbg6wG+EeCbAb4V4NsBvhPguwG+F+D7AX4Q4IcBfhTgxwF+EuCnAX4W4OcBfhHgmAC/DPCrAL8O8JsAvw3wuwC/D/CHAH8M8KcAfw7wlwB/DfC3AH8P8I8Axwb4Z4B/Bfh3gP8E+G+A/wU4JMRxQhw3xPFCHD/ECUKcMMSJQpw4xKEhThLipCFOFuLkIU4R4pQhThXi1CFOE+K0IU4X4vQhzhDijCHOFOLMIc4S4qwhzhbi7CHOEeKcIc4V4twhzhPivCHOF+L8IS4Q4oIhLhTiwiEuEuKiIS4W4uIhLhHikiEuFSIhLh3iMiEuG+JyIS4f4gohrhjiSiGuHOIqIa4a4mohrh7iGiGuGeJaIa4d4johrhvieiGuH+IGIW4Y4kYhbhziJiFuGuJmIW4e4hYhbhniViFuHeI2IW4b4nYhbh/iDiHuGOJOIe4c4i4h7hribiHuHuIeIe4Z4l4h7h3iPiHuG+J+Ie4f4gEhHhjiQSEeHOIhIR4a4mEhHh7iESEeGeJRIR4d4jEhHhvicSEeH+IJIZ4Y4kkhnhyiIZ4S4qkhnhbi6SGeEeKZIZ4V4tkhDkIMQgxDjEKMQ0xCTEPMQsxDLEIsQ6xCrENsQmxD7ELsQzwnxHNDPC/E80O8IMQLQ7woxItDvCTES0O8LMTLQ7wixCtDvCrEq0O8JsRrQ7wuxOtDvCHEG0O8KcSbQ7wlxFtDvC3E20O8I8Q7Q7wrxLtDvCfEe0O8L8T7Q3wgxGEhPhji8BBHhDgyxFEhjg7xoRAfDvGREB8N8bEQHw/xiRCfDPGpEJ8O8ZkQnw3xuRCfD/GFEF8M8aUQXw7xlRBfDfG1EF8P8Y0Q3wzxrRDfDvGdEN8N8b0Q3w/xgxA/DPGjED8O8ZMQPw3xsxA/D/GLEMeE+GWIX4X4dYjfhPhtiN+F+H2IP4T4Y4g/hfhziL+E+GuIv4X4e4h/hDg2xD9D/CvEv0P8J8R/Q/wvxCERjhPhuBGOF+H4EU4Q4YQRThThxBEOjXCSCCeNcLIIJ49wiginjHCqCKeOcJoIp41wuginj3CGCGeMcKYIZ45wlghnjXC2CGePcI4I54xwrgjnjnCeCOeNcL4I549wgQgXjHChCBeOcJEIF41wsQgXj3CJCJeMcKkIiXDpCJeJcNkIl4tw+QhXiHDFCFeKcOUIV4lw1QhXi3D1CNeIcM0I14pw7QjXiXDdCNeLcP0IN4hwwwg3inDjCDeJcNMIN4tw8wi3iHDLCLeKcOsIt4lw2wi3i3D7CHeIcMcId4pw5wh3iXDXCHeLcPcI94hwzwj3inDvCPeJcN8I94tw/wgPiPDACA+K8OAID4nw0AgPi/DwCI+I8MgIj4rw6AiPifDYCI+L8PgIT4jwxAhPivDkCI3wlAhPjfC0CE+P8IwIz4zwrAjPjnAQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR/hORGeG+F5EZ4f4QURXhjhRRFeHOElEV4a4WURXh7hFRFeGeFVEV4d4TURXhvhdRFeH+ENEd4Y4U0R3hzhLRHeGuFtEd4e4R0R3hnhXRHeHeE9Ed4b4X0R3h/hAxEOi/DBCIdHOCLCkRGOinB0hA9F+HCEj0T4aISPRfh4hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSfRPhphJ9F+HmEX0Q4JsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCsRH+GeFfEf4d4T8R/hvhfxEOiXGcGMeNcbwYx49xghgnjHGiGCeOcWiMk8Q4aYyTxTh5jFPEOGWMU8U4dYzTxDhtjNPFOH2MM8Q4Y4wzxThzjLPEOGuMs8U4e4xzxDhnjHPFOHeM88Q4b4zzxTh/jAvEuGCMC8W4cIyLxLhojIvFuHiMS8S4ZIxLxUiMS8e4TIzLxrhcjMvHuEKMK8a4Uowrx7hKjKvGuFqMq8e4RoxrxrhWjGvHuE6M68a4Xozrx7hBjBvGuFGMG8e4SYybxrhZjJvHuEWMW8a4VYxbx7hNjNvGuF2M28e4w/hDhvyP704x7hzjLjHuGuNuMe4e4x4x7hnjXjHuHeM+Me4b434x7h/jATEeGONBMR4c4yExHhrjYTEeHuMRMR4Z41ExHh3jMTEeG+NxMR4f4wkxnhjjSTGeHKMxnhLjqTGeFuPpMZ4R45kxnhXj2TEOYgxiDGOMYoxjTGJMY8xizGMsYixjrGKsY2xibGPsYuxjPCfGc2M8L8bzY7wgxgtjvCjGi2O8JMZLY7wsxstjvCLGK2O8KsarY7wmxmtjvC7G62O8IcYbY7wpxptjvCXGW2O8LcbbY7wjxjtjvCvGu2O8J8Z7Y7wvxvtjfCDGYTE+GOPwGEfEODLGUTGOjvGhGB+O8ZEYH43xsRgfj/GJGJ+M8akYn47xmRifjfG5GJ+P8YUYX4zxpRhfjvGVGF+N8bUYX4/xjRjfjPGtGN+O8Z0Y343xvRjfj/GDGD+M8aMYP47xkxg/jfGzGD+P8YsYx8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/EODbGP2P8K8a/Y/wnxn9j/C/GIQmOk+C4CY6X4PgJTpDghAlOlODECQ5NcJIEJ01wsgQnT3CKBKdMcKoEp05wmgSnTXC6BKdPcIYEZ0xwpgRnTnCWBGdNcLYEZ09wjgTnTHCuBOdOcJ4E501wvgTnT3CBBBdMcKEEF05wkQQXTXCxBBdPcIkEl0xwqQRJcOkEl0lw2QSXS3D5BFdIcMUEV0pw5QRXSXDVBFdLcPUE10hwzQTXSnDtBNdJcN0E10tw/QQ3SHDDBDdKcOMEN0lw0wQ3S3DzBLdIcMsEt0pw6wS3SXDbBLdLcPsEd0hwxwR3SnDnBHdJcNcEd0tw9wT3SHDPBPdKcO8E90lw3wT3S3D/BA9I8MAED0rw4AQPSfDQBA9L8PAEj0jwyASPSvDoBI9J8NgEj0vw+ARPSPDEBE9K8OQETfCUBE9N8LQET0/wjATPTPCsBM9OcJBgkGCYYJRgnGCSYJpglmCeYJFgmWCVYJ1gk2CbYJdgn+A5CZ6b4HkJnp/gBQlemOBFCV6c4CUJXprgZQlenuAVCV6Z4FUJXp3gNQlem+B1CV6f4A0J3pjgTQnenOAtCd6a4G0J3p7gHQnemeBdCd6d4D0J3pvgfQnen+ADCQ5L8MEEhyc4IsGRCY5KcHSCDyX4cIKPJPhogo8l+HiCTyT4ZIJPJfh0gs8k+GyCzyX4fIIvJPhigi8l+HKCryT4aoKvJfh6gm8k+GaCbyX4doLvJPhugu8l+H6CHyT4YYIfJfhxgp8k+GmCnyX4eYJfJDgmwS8T/CrBrxP8JsFvE/wuwe8T/CHBHxP8KcGfE/wlwV8T/C3B3xP8I8GxCf6Z4F8J/p3gPwn+m+B/CQ5JcZwUx01xvBTHT3GCFCdMcaIUJ05xaIqTpDhpipOlOHmKU6Q4ZYpTpTh1itOkOG2K06U4fYozpDhjijOlOHOKs6Q4a4qzpTh7inOkOGeKc6U4d4rzpDhvivOlOH+KC6S4YIoLpbhwioukuGiKi6W4eIpLpLhkikulSIpLp7hMisumuFyKy6e4QoorprhSiiunuEqKq6a4Woqrp7hGimumuFaKa6e4TorrprheiuunuEGKG6Y4ZAhunOImKW6a4mYpbp7iFilumeJWKW6d4jYpbpvidilun+IOKe6Y4k4p7pziLinumuJuKe6e4h4p7pniXinuneI+Ke6b4n4p7p/iASkemOJBKR6c4iEpHpriYSkenuIRKR6Z4lEpHp3iMSkem+JxKR6f4gkpnpjiSSmenKIpnpLiqSmeluLpKZ6R4pkpnpXi2SkOUgxSDFOMUoxTTFJMU8xSzFMsUixTrFKsU2xSbFPsUuxTPCfFc1M8L8XzU7wgxQtTvCjFi1O8JMVLU7wsxctTvCLFK1O8KsWrU7wmxWtTvC7F61O8IcUbU7wpxZtTvCXFW1O8LcXbU7wjxTtTvCvFu1O8J8V7U7wvxftTfCDFYSk+mOLwFEekODLFUSmOTvGhFB9O8ZEUH03xsRQfT/GJFJ9M8akUn07xmZTk2RSfS/H5FF9I8cUUX0rx5RRfSfHVFF9L8fUU30jxzRTfSvHtFN9J8d0U30vx/RQ/SPHDFD9K8eMUP0nx0xQ/S/HzFL9IcUyKX6b4VYpfp/hNit+m+F2K36f4Q4o/pvhTij+n+EuKv6b4W4q/p/hHimNT/DPFv1L8O8V/Uvw3xf/+53aG42Q4bobjZTh+hhNkOGGGE2U4cYZDM5wkw0kznCzDyTOcIsMpM5wqw6kznCbDaTOcLsPpM5whwxkznCnDmTOcJcNZM5wtw9kznCPDOTOcK8O5M5wnw3kznC/D+TNcIMMFM1wow4UzXCTDRTNcLMPFM1wiwyUzXCpDMlw6w2UyXDbD5TJcPsMVMlwxw5UyXDnDVTJcNcPVMlw9wzUyXDPDtTJcO8N1Mlw3w/UyXD/DDTLcMMONMtw4w00y3DTDzTLcPMMtMtwyw60y3DrDbTLcNsPtMtw+wx0y3DHDnTLcOcNdMtw1w90y3D3DPTLcM8O9Mtw7w30y3DfD/TLcP8MDMjwww4MyPDjDQzI8NMPDMjw8wyMyPDLDozI8OsNjMjw2w+MyPD7DEzI8McOTMjw5QzM8JcNTMzwtw9MzPCPDMzM8K8OzMxxkGGQYZhhlGGeYZJhmmGWYZ1hkWGZYZVhn2GTYZthl2Gd4TobnZnhehudneEGGF2Z4UYYXZ3hJhpdmeFmGl2d4RYZXZnhVhldneE2G12Z4XYbXZ3hDhjdmeFOGN2d4S4a3ZnhbhrdneEeGd2Z4V4Z3Z3hPhvdmeF+G92f4QIbDMnwww+EZjshwZIajMhyd4UMZPpzhIxk+muFjGT6e4RMZPpnhUxk+neEzGT6b4XMZPp/hCxm+mOFLGb6c4SsZvprhaxm+nuEbGb6Z4VsZvp3hOxm+m+F7Gb6f4QcZfpjhRxl+nOEnGX6a4WcZfp7hFxmOyfDLDL/K8OsMv8nw2wy/y/D7DH/I8McMf8rw5wx/yfDXDH/L8PcM/8hwbIZ/ZvhXhn9n+E+G/2b4X4ZDchwnx3FzHC/H8XOcIMcJc5wox4lzHJrjJDlOmuNkOU6e4xQ5TpnjVDlOneM0OU6b43Q5Tp/jDDnOmONMOc6c4yw5zprjbDnOnuMcOc6Z41w5zp3jPDnOm+N8Oc6f4wI5LpjjQjkunOMiOS6a42I5Lp7jEjkumeNSOZLj0jkuk+OyOS6X4/I5rpDjijmulOPKOa6S46o5rpbj6jmukeOaOa6V49oTDxnyPxbr5rhejuvnuEGOG+a4UY4b57hJjpvmuFmOm+e4RY5b5rhVjlvnuE2O2+a4XY7b57hDjjvmuFOOO+e4S4675rhbjrvnuEeOe+a4V45757hPjvvmuF+O++d4QI4H5nhQjgfneEiOh+Z4WI6H53hEjkfmeFSOR+d4TI7H5nhcjsfneEKOJ+Z4Uo4n52iOp+R4ao6n5Xh6jmfkeGaOZ+V4do6DHIMcwxyjHOMckxzTHLMc8xyLHMscqxzrHJsc2xy7HPscz8nx3BzPy/H8HC/I8cIcL8rx4hwvyfHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78rx7v/Na8w5Y+/N8b7/uTxkyJD/5bD8f3fckCHDcxyR48gcR+U4+n/uDxky5OEcH8nx0Rwfy/HxHJ/I8ckcn8rx6RyfyfHZHJ/L8fkcX8jxxRxfyvHlHF/J8dUcX8vx9RzfyPHNHN/K8e0c38nx3Rzfy/H9HD/I8cMcP8rx4xw/yfHTHD/L8fMcv8hxTI5f5vhVjl/n+E2O3+b4XY7f5/hDjj/m+FOOP+f4S46/5vhbjr/n+EeOY3P8M8e/cvw7x39y/DfH//7HpMBxChy3wPEKHL/ACQqcsMCJCpy4wKEFTlLgpAVOVuDkBU5R4JQFTlXg1AVOU+C0BU5X4PQFzlDgjAXOVODMBc5S4KwFzlbg7AXOUeCcBc5V4NwFzlPgvAXOV+D8BS5Q4IIFLlTgwgUuUuCiBS5W4OIFLlHgkgUuVSAFLl3gMgUuW+BGMzVjly9whQJXLHClAlcucJUCVy1wtQJXL3CNAtcscK0C1y5wnQLXLXC9AtcvcIMCN/xfvQI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKcCdy5wlwJ3LXC3AncvcI8C9yxwrwL3LnCfAvctcL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v8IQCTyzwpAJPLtACTynw1AJPK/D0As8o8MwCzyrw7AIHBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFnlPguQWeV+D5BV5Q4IUFXlTgxf9zasj/x2UFXl7gFQVeWeBVBV5d4DUFXlvgdQVeX+ANBd5Y4E0F3lzgLQXeWuBtBd5e4B0F3lngXQXeXeA9Bd5b4H0F3l/gAwUOK/DBAocXOKLAkQWOKnB0gQ8V+HCBjxT4aIGPFfh4gU8U+GSBTxX4dIHPFPhsgc8V+HyBLxT4YoEvFfhyga8U+GqBrxX4eoFvFPhmgW8V+HaB7xT4boHvFfh+gR8U+GGBHxX4cYGfFPhpgZ8V+HmBXxQ4psAvC/yqwK8L/KbAbwv8rsDvC/yhwB8L/KnAnwv8pcBfC/ytwN8L/KPAsQX+WeBfBf5d4D8F/lvgfwUOKXGcEsctcbwSxy9xghInLHGiEicucWiJk5Q4aYmTlTh5iVOUOGWJU5U4dYnTlDhtidOVOH2JM5Q4Y4kzlThzibOUOGuJs5U4e4lzlDhniXOVOHeJ85Q4b4nzlTh/iQuUuGCJC5W4cImLlLhoiYuVuHiJS5S4ZIlLlUiJS5e4TInLlrhcicuXuEKJK5a4Uokrl7hKiauWuFqJq5e4RolrlrhWiWuXuE6J65a4Xonrl7hBiRuWuFGJG5e4SYmblrhZiZuXuEWJW5a4VYlbl7hNiduWuF2J25e4Q4k7lrhTiTuXuEuJu5a4W4m7l7hHiXuWuFeJe5e4T4n7lrhfifuXeECJB5Z4UIkHl3hIiYeWeFiJh5d4RIlHlnhUiUeXeEyJx5Z4XInHl3hCiSeWeFKJJ5doiaeUeGqJp5V4eolnlHhmiWeVeHaJgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Es8p8dwSzyvx/BIvKPHCEi8q8eISLynx0hIvK/HyEq8o8coSryrx6hKvKfHaEq8r8foSbyjxxhJvKvHmEm8p8dYSbyvx9hLvKPHOEu8q8e4S7ynx3hLvK/H+Eh8ocViJD5Y4vMQRJY4scVSJo0t8qMSHS3ykxEdLfKzEx0t8osQnS3yqxKdLfKbEZ0t8rsTnS3yhxBdLfKnEl0t8pcRXS3ytxNdLfKPEN0t8q8S3S3ynxHdLfK/E90v8oMQPS/yoxI9L/KTET0v8rMTPS/yixDElflniVyV+XeI3JX5b4nclfl/iDyX+WOJPJf5c4i8l/lribyX+XuIfJY4t8c8S/yrx7xL/KfHfEv8rcUiF41Q4boXjVTh+hRNUOGGFE1U4cYVDK5ykwkkrnKzCySucosIpK5yqwqkrnKbCaSucrsLpK5yhwhkrnKnCmSucpcJZK5ytwtkrnKPCOSucq8K5K5ynwnkrnK/C+StcoMIFK1yowoUrXKTCRStcrMLFK1yiwiUrXKpCKly6wmUqXLbC5SpcvsIVKlyxwpUqXLnCVSpctcLVKly9wjUqXLPCtSpcu8J1Kly3wvUqXL/CDSrcsMKNKty4wk0q3LTCzSrcvMItKtyywq0q3LrCbSrctsLtKty+wh0q3LHCnSrcucJdKty1wt0q3L3CPSrcs8K9Kty7wn0q3LfC/Srcv8IDKjywwoMqPLjCQyo8tMLDKjy8wiMqPLLCoyo8usJjKjy2wuMqPL7CEyo8scKTKjy5Qis8pcJTKzytwtMrPKPCMys8q8KzKxxUGFQYVhhVGFeYVJhWmFWYV1hUWFZYVVhX2FTYVthV2Fd4ToXnVnhehedXeEGFF1Z4UYUXV3hJhZdWeFmFl1d4RYVXVnhVhVdXeE2F11Z4XYXXV3hDhTdWeFOFN1d4S4W3VnhbhbdXeEeFd1Z4V4V3V3hPhfdWeF+F91f4QIXDKnywwuEVjqhwZIWjKhxd4UMVPlzhIxU+WuFjFT5e4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEb1f//jt+q8O0K36nw3Qrfq/D9Cj+o8MMKP6rw4wo/qfDTCj+r8PMKv6hwTIVfVvhVhV9X+E2F31b4XYXfV/hDhT9W+FOFP1f4S4W/Vvhbhb9X+EeFYyv8s8K/Kvy7wn8q/LfC//7XX43j1DhujePVOH6NE9Q4YY0T1ThxjUNrnKTGSWucrMbJa5yixilrnKrGqWucpsZpa5yuxulrnKHGGWucqcaZa5ylxllrnK3G2Wuco8Y5a5yrxrlrnKfGeWucr8b5a1ygxgVrXKjGhWtcpMZFa1ysxsVrXKLGJWtcqkZqXLrGZWpctsblaly+xhVqXLHGlWpcucZValy1xtVqXL3GNWpcs8a1aly7xnVqXLfG9Wpcv8YNatywxo1q3LjGTWrctMbNaty8xi1q3LLGrWrcusZtaty2xu1q3L7GHWrcscadaty5xl1q3LXG3WrcvcY9atyzxr1q3LvGfWrct8b9aty/xgNqPLDGg2o8uMZDajy0xsNqPLzGI2o8ssajajy6xmNqPLbG42o8vsYTajyxxpNqPLlGazylxlNrPK3G02s8o8YzazyrxrNrHNQY1BjWGNUY15jUmNaY1ZjXWNRY1ljVWNfY1NjW2NXY13hOjefWeF6N59d4QY0X1nhRjRfXeEmNl9Z4WY2X13hFjVfWeFWNV9d4TY3X1nhdjdfXeEONN9Z4U40313hLjbfWeFuNt9d4R4131nhXjXfXeE+N99Z4X4331/hAjcNqfLDG4TWOqHFkjaNqHF3jQzU+XOMjNT5a42M1Pl7jEzU+WeNTNT5d4zM1PlvjczU+X+MLNb5Y40s1vlzjKzW+WuNrNb5e4xs1vlnjWzW+XeM7Nb5b43s1vl/jBzV+WONHNX5c4yc1flrjZzV+XuMXNY6p8csav6rx6xq/qfHbGr+r8fsaf6jxxxp/qvHnGn+p8dcaf6vx9xr/qHFsjX/W+FeNf9f4T43/1vhfjUMaHKfBcRscr8HxG5ygwQkbnKjBiRsc2uAkDU7a4GQNTt7gFA1O2eBUDU7d4DQNTtvgdA1O3+AMDc7Y4EwNztzgLA3O2uBsDc7e4BwNztngXA3O3eA8Dc7b4HwNzt/gAg0u2OBCDS7c4CINLtrgYg0u3uASDS7Z4FIN0uDSDS7T4LINLtfg8g2u0OCKDa7U4MoNrtLgqg2u1uDqDa7R4JoNrtXg2g2u0+C6Da7X4PoNbtDghg1u1ODGDW7S4KYNbtbg5g1u0eCWDW7V4NYNbtPgtg1u1+D2De7Q4I4N7tTgzg3u0uCuDe7W4O4N7tHgng3u1eDeDe7T4L4N7tfg/g0e0OCBDR7U4MENHtLgoQ0e1uDhDR7R4JENHtXg0Q0e0+CxDR7X4PENntDgiQ2e1ODJDdrgKQ2e2uBpDZ7e4BkNntngWQ2e3eCgwaDBsMGowbjBpMG0wazBvMGiwbLBqsG6wabBtsGuwb7Bcxo8t8HzGjy/wQsavLDBixq8uMFLGry0wcsavLzBKxq8ssGrGry6wWsavLbB6xq8vsEbGryxwZsavLnBWxq8tcHbGry9wTsavLPBuxq8u8F7Gry3wfsavL/BBxoc1uCDDQ5vcESDIxsc1eDoBh9q8OEGH2nw0QYfa/DxBp9o8MkGn2rw6QafafDZBp9r8PkGX2jwxQZfavDlBl9p8NUGX2vw9QbfaPDNBt9q8O0G32nw3Qbfa/D9Bj9o8MMGP2rw4wY/afDTBj9r8PMGv2hwTINfNvhVg183+E2D3zb4XYPfN/hDgz82+FODPzf4S4O/Nvhbg783+EeDYxv8s8G/Gvy7wX8a/LfB/xoc0uI4LY7b4ngtjt/iBC1O2OJELU7c4tAWJ2lx0hYna3HyFqdoccoWp2px6hanaXHaFqdrcfoWZ2hxxhZnanHmFmdpcdYWZ2tx9hbnaHHOFudqce4W52lx3hbna3H+FhdoccEWF2px4RYXaXHRFhdrcfEWl2hxyRaXapEWl25xmRaXbXG5FpdvcYUWV2xxpRZXbnGVFldtcbUWV29xjRbXbHGtFtducZ0W121xvRbXb3GDFjdscaMWN25xkxY3bXGzFjdvcYsWt2xxqxa3bnGbFrdtcbsWt29xhxZ3bHGnFnducZcWd21xtxZ3b3GPFvdsca8W925xnxb3bXG/Fvdv8YAWD2zxoBYPbvGQFg9t8bAWD2/xiBaPbPGoFo9u8ZgWj23xuBaPb/GEFk9s8aQWT27RFk9p8dQWT2vx9BbPaPHMFs9q8ewWBy0GLYYtRi3GLSYtpi1mLeYtFi2WLVYt1i02LbYtdi32LZ7T4rktntfi+S1e0OKFLV7U4sUtXtLipS1e1uLlLV7R4pUtXtXi1S1e0+K1LV7X4vUt3tDijS3e1OLNLd7S4q0t3tbi7S3e0eKdLd7V4t0t3tPivS3e1+L9LT7Q4rAWH2xxeIsjWhzZ4qgWR7f4UIsPt/hIi4+2+FiLj7f4RItPtvhUi0+3+EyLz7b4XMvQ/+3NCy2+2OJLLb7c4istvtriay2+3uIbLb7Z4lstvt3iOy2+2+J7Lb7f4gctftjiRy1+3OInLX7a4mctft7iFy2OafHLFr9q8esWv2nx2xa/a/H7Fn9o8ccWf2rx5xZ/afHXFn9r8fcW/2hxbIt/tvhXi3+3+E+L/7b4X4tDOhynw3E7HK/D8TucoMMJO5yow4k7HNrhJB1O2uFkHU7e4RQdTtnhVB1O3eE0HU7b4XQdTt/hDB3O2OFMHc7c4SwdztrhbB3O3uEcHc7Z4Vwdzt3hPB3O2+F8Hc7f4QIdLtjhQh0u3OEiHS7a4WIdLt7hEh0u2eFSHdLh0h0u0+GyHS7X4fIdrtDhih1DhwwZ4sodrtLhqh2u1uHqHa7R4ZodrtXh2h2u0+G6Ha7X4fodbtDhhh1u1OHGHW7S4aYdbtbh5h1u0eGWHW7V4dYdbtPhth1u1+H2He7Q4Y4d7tThzh3u0uGuHe7W4e4d7tHhnh3u1eHeHe7T4b4d7tfh/h0e0OGBHR7U4cEdHtLhoR0e1uHhHR7R4ZEdHtXh0R0e0+GxHR7X4fEdntDhiR2e1OHJHdrhKR2e2uFpHZ7e4RkdntnhWR2e3eGgw6DDsMOow7jDpMO0w6zDvMOiw7LDqsO6w6bDtsOuw77Dczo8t8PzOjy/wws6vLDDizq8uMNLOry0w8s6vLzDKzq8ssOrOry6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzq8tcPbOry9wzs6vLPDuzq8u8N7Ory3w/s6vL/DBzoc1uGDHQ7vcESHIzsc1eHoDh/q8OEOH+nw0Q4f6/DxDp/o8MkOn+rw6Q6f6fDZDp/r8PkOX+jwxQ5f6vDlDl/p8NUOX+vw9Q7f6PDNDt/q8O0O3+nw3Q7f6/D9Dj/o8MMOP+rw4w4/6fDTDj/r8PMOv+hwTIdfdvhVh193+E2H33b4XYffd/hDhz92+FOHP3f4S4e/dvhbh793+EeHYzv8s8O/Ovy7w386/LfD/zoc0uM4PY7b43g9jt/jBD1O2ONEPU7c49AeJ+lx0h4n63HyHqfoccoep+px6h6n6XHaHqfrcfoeZ+hxxh5n6nHmHmfpcdYeZ+tx9h7n6HHOHufqce4e5+lx3h7n63H+HhfoccEeF+px4R4X6XHRHhfrcfEel+hxyR6X6pEel+5xmR6X7XG5HpfvcYUeV+xxpR5X7nGVHlftcbUeV+9xjR7X7HGtHtfucZ0e1+1xvR7X73GDHjfscaMeN+5xkx437XGzHjfvcYset+xxqx637nGbHrftcbset+9xhx537HGnHnfucZced+1xtx5373GPHvfsca8e9+5xnx737XG/Hvfv8YAeD+zxoB4P7vGQHg/t8bAeD+/xiB6P7PGoHo/u8Zgej+3xuB6P7/GEHk/s8aQeT+7RHk/p8dQeT+vx9B7P6PHMHs/q8eweBz0GPYY9Rj3GPSY9pj1mPeY9Fj2WPVY91j02PbY9dj32PZ7T47k9ntfj+T1e0OOFPV7U48U9XtLjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPd7S46093tbj7T3e0eOdPd7V49093tPjvT3e1+P9PT7Q47AeH+xxeI8jehzZ46geR/f40P+xbI9NeB6MAoTTpkxt2+7Wtm3btrdGaj+3jdq2ktS2bdtNcubMvH9hZ79eAxwxwJEDHDXAxwf4xACfHOBTA3x6gM8M8NkBPjfA5wf4wgBfHOBLA3x5gK8M8NUBvjbA1wf4xgDfHOBbA3x7gO8M8N0BvjfA9wf4wQA/HOBHA/x4gJ8M8NMBfjbAzwf4xQC/HOBXA/x6gN8M8NsBfjfA7wf4wwB/HOBPA/x5gL8M8NcB/jbA3wf4xwD/HOBfA/x7gP8M8N8B/jfA0QMcM8CxAxwS4DgBjhvg0ADHC3D8ACcIcMIAJwpw4gCHBThJgJMGOFmAkwc4RYBTBjhVgFMHOE2A0wY4XYDTBzhDgDMGOFOAMwc4S4CzBjhbgLMHOEeAcwY4V4BzBzhPgPMGOF+A8we4QIALBrhQgAsHuEiAiwa4WICLB7hEgEsGSIBLBbh0gMsEuGyAywW4fIArBLhigCsFuHKAqwS4aoCrBbh6gGsEuGaAawW4doDrBLhugOsFuH6AGwS4YYAbBbhxgJsEuGmAmwW4eYBbBLhlgFsFuHWA2wS4bYDbBbh9gDsEuGOAOwW4c4C7BLhrgLsFuHuAewS4Z4B7Bbh3gPsEuG+A+wW4f4AHBHhggAcFeHCAhwR4aICHBXh4gEcEeGSARwV4dIDHBHhsgMcFeHyAJwR4YoAnBWiAJwd4SoCnBnhagKcHeEaAZwZ4VoBnB3hOgMMDPDfA8wI8P8ALArwwwIsCvDjASwK8NMDLArw8wCsCvDLAQYBBgGGAUYBxgEmAaYBZgHmARYBlgFWAdYBNgG2AXYB9gFcFeHWA1wR4bYDXBXh9gDcEeGOANwV4c4C3BHhrgLcFeHuAdwR4Z4B3BXh3gPcEeG+A9wV4f4APBPhggA8F+HCAjwT4aICPBTgiwJEBjgrw8QCfCPDJAJ8K8OkAnwnw2QCfC/D5AF8I8MUAXwrw5QBfCfDVAF8L8PUA3wjwzQDfCvDtAN8J8N0A3wvw/QA/CPDDAD8K8OMAPwnw0wA/C/DzAL8I8MsAvwrw6wC/CfDbAL8L8PsAfwjwxwB/CvDnAH8J8NcAfwvw9wD/CPDPAP8K8O8A/wnw3wD/C3B0gGMCHBvgkBDHCXHcEIeGOF6I44c4QYgThjhRiBOHOCzESUKcNMTJQpw8xClCnDLEqUKcOsRpQpw2xOlCnD7EGUKcMcSZQpw5xFlCnDXE2UKcPcQ5QpwzxLlCnDvEeUKcN8T5Qpw/xAVCXDDEhUJcOMRFQlw0xMVCXDzEJUJcMkRCXCrEpUNcJsRlQ1wuxOVDXCHEFUNcKcSVQ1wlxFVDXC3E1UNcI8Q1Q1wrxLVDXCfEdUNcL8T1Q9wgxA1D3CjEjUPcJMRNQ9wsxM1D3CLELUPcKsStQ9wmxG1D3C7E7UPcIcQdQ9wpxJ1D3CXEXUPcLcTdQ9wjxD1D3CvEvUPcJ8R9Q9wvxP1DPCDEA0M8KMSDQzwkxENDPCzEw0M8IsQjQzwqxKNDPCbEY0M8LsTjQzwhxBNDPClEQzw5xFNCPDXE00I8PcQzQjwzxLNCPDvEc0IcHuK5IZ4X4vkhXhDihSFeFOLFIV4S4qUhXhbi5SFeEeKVIQ5CDEIMQ4xCjENMQkxDzELMQyxCLEOsQqxDbEJsQ+xC7EO8KsSrQ7wmxGtDvC7E60O8IcQbQ7wpxJtDvCXEW0O8LcTbQ7wjxDtDvCvEu0O8J8R7Q7wvxPtDfCDEB0N8KMSHQ3wkxEdDfCzEESGODHFUiI+H+ESIT4b4VIhPh/hMiM+G+FyIz4f4QogvhvhSiC+H+EqIr4b4Woivh/hGiG+G+FaIb4f4TojvhvheiO+H+EGIH4b4UYgfh/hJiJ+G+FmIn4f4RYhfhvhViF+H+E2I34b4XYjfh/hDiD+G+FOIP4f4S4i/hvhbiL+H+EeIf4b4V4h/h/hPiP+G+F+Io0McE+LYEIdEOE6E40Y4NMLxIhw/wgkinDDCiSKcOMJhEU4S4aQRThbh5BFOEeGUEU4V4dQRThPhtBFOF+H0Ec4Q4YwRzhThzBHOEuGsEc4W4ewRzhHhnBHOFeHcEc4T4bwRzhfh/BEuEOGCES4U4cIRLhLhohEuFuHiES4R4ZIREuFSES4d4TIRLhvhchEuH+EKEa4Y4UoRrhzhKhGuGuFqEa4e4RoRrhnhWhGuHeE6Ea4b4XoRrh/hBhFuGOFGEW4c4SYRbhrhZhFuHuEWEW4Z4VYRbh3hNhFuG+F2EW4f4Q4R7hjhThHuHOEuEe4a4W4R7h7hHhHuGeFeEe4d4T4R7hvhfhHuH+EBER4Y4UERHhzhIREeGuFhER4e4RERHhnhUREeHeExER4b4XERHh/hCRGeGOFJERrhyRGeEuGpEZ4W4ekRnhHhmRGeFeHZEZ4T4fAIz43wvAjPj/CCCC+M8KIIL47wkggvjfCyCC+P8IoIr4xwEGEQYRhhFGEcYRJhGmEWYR5hEWEZYRVhHWETYRthF2Ef4VURXh3hNRFeG+F1EV4f4Q0R3hjhTRHeHOEtEd4a4W0R3h7hHRHeGeFdEd4d4T0R3hvhfRHeH+EDET4Y4UMRPhzhIxE+GuFjEY6IcGSEoyJ8PMInInwywqcifDrCZyJ8NsLnInw+whcifDHClyJ8OcJXInw1wtcifD3CNyJ8M8K3Inw7wncifDfC9yJ8P8IPIvwwwo8i/DjCTyL8NMLPIvw8wi8i/DLCryL8OsJvIvw2wu8i/D7CHyL8McKfIvw5wl8i/DXC3yL8PcI/Ivwzwr8i/DvCfyL8N8L/Ihwd4ZgIx0Y4JMZxYhw3xqExjhfj+DFOEOOEMU4U48QxDotxkhgnjXGyGCePcYoYp4xxqhinjnGaGKeNcboYp49xhhhnjHGmGGeOcZYYZ41xthhnj3GOGOeMca4Y545xnhjnjXG+GOePcYEYF4xxoRgXjnGRGBeNcbEYF49xiRiXjJEYl4px6RiXiXHZGJeLcfkYV4hxxRhXinHlGFeJcdUYV4tx9RjXiHHNGNeKce0Y14lx3RjXi3H9GDeIccMYN4px4xg3iXHTGDeLcfMYt4hxyxi3inHrGLeJcdsYt4tx+xh3iHHHGHeKcecYd4lx1xh3i3H3GPeIcc8Y94px7xj3iXHfGPeLcf8YD4jxwBgPivHgGA+J8dAYD4vx8BiPiPHIGI+K8egYj4nx2BiPi/H4GE+I8cQYT4rRGE+O8ZQYT43xtBhPj/GMGM+M8awYz47xnBiHx3hujOfFeH6MF8R4YYwXxXhxjJfEeGmMl8V4eYxXxHhljIMYgxjDGKMY4xiTGNMYsxjzGIsYyxirGOsYmxjbGLsY+xivivHqGK+J8doYr4vx+hhviPHGGG+K8eYYb4nx1hhvi/H2GO+I8c4Y74rx7hjvifHeGO+L8f4YH4jxwRgfivHhGB+J8dEYH4txRIwjYxwV4+MxPhHjkzE+FePTMT4T47MxPhfj8zG+EOOLMb4U48sxvhLjqzG+FuPrMb4R45sxvhXj2zG+E+O7Mb4X4/sxfhDjhzF+FOPHMX4S46cxfhbj5zF+EeOXMX4V49cxfhPjtzF+F+P3Mf4Q448x/hTjzzH+EuOvMf4W4+8x/hHjnzH+FePfMf4T478x/hfj6BjHxDg2xiEJjpPguAkOTXC8BMdPcIIEJ0xwogQnTnBYgpMkOGmCkyU4eYJTJDhlglMlOHWC0yQ4bYLTJTh9gjMkOGOCMyU4c4KzJDhrgrMlOHuCcyQ4Z4JzJTh3gvMkOG+C8yU4f4ILJLhgggsluHCCiyS4aIKLJbh4gkskuGSCJLhUgksnuEyCyya4XILLJ7hCgismuFKCKye4SoKrJrhagqsnuEaCaya4VoJrJ7hOgusmuF6C6ye4QYIbJrhRghsnuEmCmya4WYKbJ7hFglsmuFWCWye4TYLbJrhdgtsnuEOCOya4U4I7J7hLgrsmuFuCuye4R4J7JrhXgnsnuE+C+ya4X4L7J3hAggcmeFCCByd4SIKHJnhYgocneESCRyZ4VIJHJ3hMgscmeFyCxyd4QoInJnhSgiZ4coKnJHhqgqcleHqCZyR4ZoJnJXh2guckODzBcxM8L8HzE7wgwQsTvCjBixO8JMFLE7wswcsTvCLBKxMcJBgkGCYYJRgnmCSYJpglmCdYJFgmWCVYJ9gk2CbYJdgneFWCVyd4TYLXJnhdgtcneEOCNyZ4U4I3J3hLgrcmeFuCtyd4R4J3JnhXgncneE+C9yZ4X4L3J/hAgg8m+FCCDyf4SIKPJvhYgiMSHJngqAQfT/CJBJ9M8KkEn07wmQSfTfC5BJ9P8IUEX0zwpQRfTvCVBF9N8LUEX0/wjQTfTPCtBN9O8J0E303wvQTfT/CDBD9M8KMEP07wkwQ/TfCzBD9P8IsEv0zwqwS/TvCbBL9N8LsEv0/whwR/TPCnBH9O8JcEf03wtwR/T/CPBP9M8K8E/07wnwT/TfC/BEcnOCbBsQkOSXGcFMdNcWiK46U4fooTpDhhihOlOHGKw1KcJMVJU5wsxclTnCLFKVOcKsWpU5wmxWlTnC7F6VOcIcUZU5wpxZlTnCXFWVOcLcXZU5wjxTlTnCvFuVOcJ8V5U5wvxflTXCDFBVNcKMWFU1wkxUVTXCzFxVNcIsUlUyTFpVJcOsVlUlw2xeVSXD7FFVJcMcWVUlw5xVVSXDXF1VJcPcU1UlwzxbVSXDvFdVJcN8X1Ulw/xQ1S3DDFjVLcOMVNUtw0xc1S3DzFLVLcMsWtUtw6xW1S3DbF7VLcPsUdUtwxxZ1S3DnFXVLcNcXdUtw9xT1S3DPFvVLcO8V9Utw3xf1S3D/FA1I8MMWDUjw4xUNSPDTFw1I8PMUjUjwyxaNSPDrFY1I8NsXjUjw+xRNSPDHFk1I0xZNTPCXFU1M8LcXTUzwjxTNTPCvFs1M8J8XhKZ6b4nkpnp/iBSlemOJFKV6c4iUpXpriZSlenuIVKV6Z4iDFIMUwxSjFOMUkxTTFLMU8xSLFMsUqxTrFJsU2xS7FPsWrUrw6xWtSvDbF61K8PsUbUrwxxZtSvDnFW1K8NcXbUrw9xTtSvDPFu1K8O8V7Urw3xftSvD/FB1J8MMWHUnw4xUdSfDTFx1IckeLIFEel+HiKT6T4ZIpPpfh0is+k+GyKz6X4fIovpPhiii+l+HKKrwz9H2pK8fUU30jxzRTfSvHtFN9J8d0U30vx/RQ/SPHDFD9K8eMUP0nx0xQ/S/HzFL9I8csUv0rx6xS/SfHbFL9L8fsUf0jxxxR/SvHnFH9J8dcUf0vx9xT/SPHPFP9K8e8U/0nx3xT/S3F0imNSHJvikAzHyXDcDIdmOF6G42c4QYYTZjhRhhNnOCzDSTKcNMPJMpw8wykynDLDqTKcOsNpMpw2w+kynD7DGTKcMcOZMpw5w1kynDXD2TKcPcM5Mpwzw7kynDvDeTKcN8P5Mpw/wwUyXDDDhTJ8N8NFMlw0w8UyXDzDJTJcMkMyXCrDpTNcJsNlM1wuw+UzXCHDFTNcKcOVM1wlw1UzXC3D1TNcI8M1M1wrw7UzXCfDdTNcL8P1M9wgww0z3CjDjTPcJMNNM9wsw80z3CLDLTPcKsOtM9wmw20z3C7D7TPcIcMdM9wpw50z3CXDXTPcLcPdM9wjwz0z3CvDvTPcJ8N9M9wvw/0zPCDDAzM8KMODMzwkw0MzPCzDwzM8IsMjMzwqw6MzPCbDYzM8LsPjMzwhwxMzPClDMzw5w1MyPDXD0zI8PcMzMjwzw7MyPDvDczIcnuG5GZ6X4fkZXpDhhRlelOHFGV6S4aUZXpbh5RlekeGVGQ4yDDIMM4wyjDNMMkwzzDLMMywyLDOsMqwzbDJsM+wy7DO8KsOrM7wmw2szvC7D6zO8IcMbM7wpw5szvCXDWzO8LcPbM7wjwzszvCvDuzO8J8N7M7wvw/szfCDDBzN8KMOHM3wkw0czfCzDERmOzHBUho9n+ESGT2b4VIZPZ/hMhs9m+FyGz2f4QoYvZvhShi9n+EqGr2b4WoavZ/hGhm9m+FaGb2f4zv8efi/D9zP8IMMPM/wow48z/CTDTzP8LMPPM/wiwy8z/CrDrzP8JsNvM/wuw+8z/CHDHzP8KcOfM/wlw18z/C3D3zP8I8M/M/wrw78z/CfDfzP8L8PRGY7JcGyGQ3IcJ8dxcxya43g5jp/jBDlOmONEOU6c47AcJ8lx0hwny3HyHKfIccocp8px6hynyXHaHKfLcfocZ8hxxhxnynHmHGfJcdYcZ8tx9hznyHHOHOfKce4c58lx3hzny3H+HBfIccEcF8px4RwXyXHRHBfLcfEcl8hxyRzJcakcl85xmRyXzXG5HJfPcYUcV8xxpRxXznGVHFfNcbUcV89xjRzXzHGtHNfOcZ0c181xvRzXz3GDHDfMcaMcN85xkxw3zXGzHDfPcYsct8xxqxy3znGbHLfNcbsct89xhxx3zHGnHHfOcZccd81xtxx3z3GPHPfMca8c985xnxz3zXG/HPfP8YAcD8zxoBwPzvGQHA/N8bAcD8/xiByPzPGoHI/O8Zgcj83xuByPz/GEHE/M8aQczfHkHE/J8dQcT8vx9BzPyPHMHM/K8ewcz8lxeI7n5nhejufneEGOF+Z4UY4X53hJjpfmeFmOl+d4RY5X5jjIMcgxzDHKMc4xyTHNMcsxz7HIscyxyrHOscmxzbHLsc/xqhyvzvGaHK/N8bocr8/xhhxvzPGmHG/O8ZYcb83xthxvz/GOHO/M8a4c787xnhzvzfG+HO/P8YEcH8zxoRwfzvGRHB/N8bEcR+Q4MsdROT6e4xM5PpnjUzk+neMzOT6b43M5Pp/jCzm+mONLOb6c4ys5vprjazm+nuMbOb6Z41s5vp3jOzm+m+N7Ob6f4wc5fpjjRzl+nOMnOX6a42c5fp7jFzl+meNXOX6d4zc5fpvjdzl+n+MPOf6Y4085/pzjLzn+muNvOf6e4x85/pnjXzn+neM/Of6b4385js5xTI5jcxxS4DgFjlvg0ALHK3D8AicocMICJypw4gKHFThJgZMWOFmBkxc4RYFTFjhVgVMXOE2B0xY4XYHTFzhDgTMWOFOBMxc4S4GzFjhbgbMXOEeBcxY4V4FzFzhPgfMWOF+B8xe4QIELFrhQgQsXuEiBixa4WIGLF7hEgUsWSIFLFbh0gcsUuGyByxW4fIErFLhigSsVuHKBqxS4aoGrFbh6gWsUuGaBaxW4doHrFLhugesVuH6BGxS4YYEbFbhxgZsUuGmBmxW4eYFbFLhlgVsVuHWB2xS4bYHbFbh9gTsUuGOBOxW4c4G7FLhrgbsVuHuBexS4Z4F7Fbh3gfsUuG+B+xW4f4EHFHhggQcVeHCBhxR4aIGHFXh4gUcUeGSBRxV4dIHHFHhsgccVeHyBJxR4YoEnFWiBJxd4SoGnFnhagacXeEaBZxZ4VoFnF3hOgcMLPLfA8wo8v8ALCrywwIsKvLjASwq8tMDLCry8wCsKvLLAQYFBgWGBUYFxgUmBaYFZgXmBRYFlgVWBdYFNgW2BXYF9gVcVeHWB1xR4bYHXFXh9gTcUeGOBNxV4c4G3FHhrgbcVeHuBdxR4Z4F3FXh3gfcUeG+B9xV4f4EPFPhggQ8V+HCBjxT4aIGPFTiiwJEFjirw8QKfKPDJAp8q8OkCnynw2QKfK/D5Al8o8MUCXyrw5QJfKfDVAl8r8PUC3yjwzQLfKvDtAt8p8N0C3yvw/QI/KPDDAj8q8OMCPynw0wI/K/DzAr8o8MsCvyrw6wK/KfDbAr8r8PsCfyjwxwJ/KvDnAn8p8NcCf/v/PsPwjwL/LPCvAv8u8J8C/y3wvwJHFzimwLEFDilxnBLHLXFoieOVOH6JE5Q4YYkTlThxicNKnKTESUucrMTJS5yixClLnKrEqUucpsRpS5yuxOlLnKHEGUucqcSZS5ylxFlLnK3E2Uuco8Q5S5yrxLlLnKfEeUucr8T5S1ygxAVLXKjEhUtcpMRFS1ysxMVLXKLEJUukxKVKXLrEZUpctsTlSly+xBVKXLHElUpcucRVSly1xNVKXL3ENUpcs8S1Sly7xHVKXLfE9Upcv8QNStywxI1K3LjETUrctMTNSty8xC1K3LLErUrcusRtSty2xO1K3L7EHUrcscSdSty5xF1K3LXE3UrcvcQ9StyzxL1K3LvEfUrct8T9Sty/xANKPLDEg0o8uMRDSjy0xMNKPLzEI0o8ssSjSjy6xGNKPLbE40o8vsQTSjyxxJNKtMSTSzylxFNLPK3E00s8o8QzSzyrxLNLPKfE4SWeW+J5JZ5f4gUlXljiRSVeXOIlJV5a4mUlXl7iFSVeWeKgxKDEsMSoxLjEpMS0xKzEvMSixLLEqsS6xKbEtsSuxL7Eq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKHFHiyBJHlfh4iU+U+GSJT5X4dInPlPhsic+V+HyJL5T4Yokvlfhyia+U+GqJr5X4eolvlPhmiW+V+HaJ75T4bonvlfh+iR+U+GGJH5X4cYmflPhpiZ+V+HmJX5T4ZYlflfh1id+U+G2J35X4fYk/lPhjiT+V+HOJv5T4a4m/lfh7iX+U+GeJf5X4d4n/lPhvif+VOLrEMSWOLXFIheNUOG6FQyscr8LxK5ygwgkrnKjCiSscVuEkFU5a4WQVTl7hFBVOWeFUFU5d4TQVTlvhdBVOX+EMFc5Y4UwVzlzhLBXOWuFsFc5e4RwVzlnhXBXOXeE8Fc5b4XwVzl/hAhUuWOFCFS5c4SIVLlrhYhUuXuESFS5ZIRUuVeHSFS5T4bIVLlfh8hWuUOGKFa5U4coVrlLhqhWuVuHqFa5R4ZoVrlXh2hWuU+G6Fa5X4foVblDhhhVuVOHGFW5S4aYVblbh5hVuUeGWFW5V4dYVblPhthVuV+H2Fe5Q4Y4V7lThzhXuUuGuFe5W4e4V7lHhnhXuVeHeFe5T4b4V7lfh/hUeUOGBFR5U4cEVHlLhoRUeVuHhFR5R4ZEVHlXh0RUeU+GxFR5X4fEVnlDhiRWeVKEVnlzhKRWeWuFpFZ5e4RkVnlnhWRWeXeE5FQ6v8NwKz6vw/AovqPDCCi+q8OIKL6nw0govq/DyCq+o8MoKBxUGFYYVRhXGFSYVphVmFeYVFhWWFVYV1hU2FbYVdhX2FV5V4dUVXlPhtRVeV+H1Fd5Q4Y0V3lThzRXeUuGtFd5W4e0V3lHhnRXeVeHdFd5T4b0V3lfh/RU+UOGDFT5U4cMVPlLhoxU+VuGICkdWOKrCxyt8osInK3yqwqcrfKbCZyt8rsLnK3yhwhcrfKnClyt8pcJXK3ytwtcrfKPCNyt8q8K3K3ynwncrfK/C9yv8oMIPK/yowo8r/KTCTyv8rMLPK/yiwi8r/KrCryv8psJvK/yuwu8r/KHCHyv8qcKfK/ylwl8r/K3C3yv8o8I/K/yrwr8r/KfCfyv8r8LRFY6pcGyFQ2ocp8Zxaxxa43g1jl/jBDVOWONENU5c47AaJ6lx0honq3HyGqeoccoap6px6hqnqXHaGqercfoaZ6hxxhpnqnHmGmepcdYaZ6tx9hrnqHHOGueqce4a56lx3hrnq3H+GheoccEaF6px4RoXqXHRGhercfEal6hxyRqpcakal65xmRqXrXG5GpevcYUaV6xxpRpXrnGVGletcbUaV69xjRrXrHGtGteucZ0a161xvRrXr3GDGjescaMaN65xkxo3rXGzGjevcYsat6xxqxq3rnGbGretcbsat69xhxp3rHGnGneucZcad61xtxp3r3GPGvesca8a965xnxr3rXG/Gvev8YAaD6zxoBoPrvGQGg+t8bAaD6/xiBqPrPGoGo+u8Zgaj63xuBqPr/GEGk+s8aQarfHkGk+p8dQaT6vx9BrPqPHMGs+q8ewaz6lxeI3n1nhejefXeEGNF9Z4UY0X13hJjZfWeFmNl9d4RY1X1jioMagxrDGqMa4xqTGtMasxr7GosayxqrGusamxrbGrsa/xqhqvrvGaGq+t8boar6/xhhpvrPGmGm+u8ZYab63xthpvr/GOGu+s8a4a767xnhrvrfG+Gu+v8YEaH6zxoRofrvGRGh+t8bEaR9Q4ssZRNT5e4xM1PlnjUzU+XeMzNT5b43M1Pl/jCzW+WONLNb5c4ys1vlrjazW+XuMbNb5Z41s1vl3jOzW+W+N7Nb5f4wc1fljjRzV+XOMnNX5a42c1fl7jFzV+WeNXNX5d4zc1flvjdzV+X+MPNf5Y4081/lzjLzX+WuNvNf5e4x81/lnjXzX+XeM/Nf5b4381jq5xTI1jaxzS4DgNjtvg0AbHa3D8BidocMIGJ2pw4gaHNThJg5M2OFmDkzc4RYNTNjhVg1M3OE2D0zY4XYPTNzhDgzM2OFODMzc4S4OzNjhbg7M3OEeDczY4V4NzNzhPg/M2OF+D8ze4QIMLNrhQgws3uEiDiza4WIOLN7hEg0s2SINLNbh0g8s0uGyDyzW4fIMrNLhigys1uHKDqzS4aoOrNbh6g2s0uGaDazW4doPrNLhug+s1uH6DGzS4YYMbNbhxg5s0uGmDmzW4eYNbNLhlg1s1uHWD2zS4bYPbNbh9gzs0uGODOzW4c4O7NLhrg7s1uHuDezS4Z4N7Nbh3g/s0uG+D+zW4f4MHNHhggwc1eHCDhzR4aIOHNXh4g0c0eGSDRzV4dIPHNHhsg8c1eHyDJzR4YoMnNWiDJzd4SoOnNnhag6c3eEaDZzZ4VoNnN3hOg8MbPLfB8xo8v8ELGrywwYsavLjBSxq8tMHLGry8wSsavLLBQYNBg2GDUYNxg0mDaYNZg3mDRYNlg1WDdYNNg22DXYN9g1c1eHWD1zR4bYPXNXh9gzc0eGODNzV4c4O3NHhrg7c1eHuDdzR4Z4N3NXh3g/c0eG+D9zV4f4MPNPhggw81+HCDjzT4aIOPNTiiwZENjmrw8QafaPDJBp9q8OkGn2nw2Qafa/D5Bl9o8MUGX2rw5QZfafDVBl9r8PUG32jwzQbfavDtBt9p8N0G32vw/QY/aPDDBj9q8OMGP2nw0wY/a/DzBr9o8MsGv2rw6wa/afDbBr9r8PsGf2jwxwZ/avDnBn9p8NcGf2vw9wb/aPDPBv9q8O8G/2nw3wb/a3B0g2MaHNvgkBbHaXHcFoe2OF6L47c4QYsTtjhRixO3OKzFSVqctMXJWpy8xSlanLLFqVqcusVpWpy2xelanL7FGVqcscWZWpy5xVlanLXF2VqcvcU5WpyzxblanLvFeVqct8X5Wpy/xQVaXLDFhVpcuMVFWly0xcVaXLzFJVpcskVaXKrFpVtcpsVlW1yuxeVbXKHFFVtcqcWVW1ylxVVbXK3F1Vtco8U1W1yrxbVbXKfFdVtcr8X1W9ygxQ1b3KjFjVvcpMVNW9ysxc1b3KLFLVvcqsWtW9ymxW1b3K7F7VvcocUdW9ypxZ1b3KXFXVvcrcXdW9yjxT1b3KvFvVvcp8V9W9yvxf1bPKDFA1s8qMWDWzykxUNbPKzFw1s8osUjWzyqxaNbPKbFY1s8rsXjWzyhxRNbPKlFWzy5xVNaPLXF01o8vcUzWjyzxbNaPLvFc1oc3uK5LZ7X4vktXtDihS1e1OLFLV7S4qUtXtbi5S1e0eKVLQ5aDFoMW4xajFtMWkxbzFrMWyxaLFusWqxbbFpsW+xa7Fu8qsWrW7ymxWtbvK7F61u8ocUbW7ypxZtbvKXFW1u8rcXbW7yjxTtbvKvFu1u8p8V7W7yvxftbfKDFB1t8qMWHW3ykxUdbfKzFES2ObHFUi4+3+ESLT7b4VItPt/hMi8+2+FyLz7f4QosvtvhSiy+3+EqLr7b4Wouvt/hGi2+2+FaLb7f4Tovvtvhei++3+EGLH7b4UYsft/hJi5+2+FmLn7f4RYtftvhVi1+3+E2L37b4XYvft/hDiz+2+FOLP7f4S4u/tvhbi7+3+EeLf7b4V4t/t/hPi/+2+F+Lo1sc0+LYFod0OE6H43Y4tMPxOhy/wwk6nLDDiTqcuMNhHU7S4aQdTtbh5B1O0eGUHU7V4dQdTtPhtB1O1+H0Hc7Q4YwdztThzB3O0uGsHc7W4ewdztHhnB3O1eHcHc7T4bwdztfh/B0u0OGCHS7U4cIdLtLhoh0u1uHiHS7R4ZId0uFSHS7d4TIdLtvhch0u3+EKHa7Y4UodrtzhKh2u2uFqHa7e4RodrtnhWh2u3eE6Ha7b4Xodrt/hBh1u2OFGHW7c4SYdbtrhZh1u3uEWHW7Z4VYdbt3hNh1u2+F2HW7f4Q4d7tjhTh3u3OEuHe7a4W4d7t7hHh3u2eFeHe7d4T4d7tvhfh3u3+EBHR7Y4UEdHtzhIR0e2uFhHR7e4REdHtnhUR0e3eExHR7b4XEdHt/hCR2e2OFJHdrhyR2e0uGpHZ7W4ekdntHhmR2e1eHZHZ7T4fAOz+3wvA7P7/CCDi/s8KIOL+7wkg4v7fCyDi/v8IoOr+xw0GHQYdhh1GHcYdJh2mHWYd5h0WHZYdVh3WHTYdth12Hf4VUdXt3hNR1e2+F1HV7f4Q0d3tjhTR3e3OEtHd7a4W0d3t7hHR3e2eFdHd7d4T0d3tvhfR3e3+EDHT7Y4UMdPtzhIx0+2uFjHY7ocGSHozp8vMMnOnyyw6c6fLrDZzp8tsPnOny+wxc6fLHDlzp8ucNXOny1w9c6fL3DNzp8s8O3Ony7w3c6fLfD9zp8v8MPOvyww486/LjDTzr8tMPPOvy8wy86/LLDrzr8usNvOvy2w+86/L7DHzr8scOfOvy5w186/LXD3zr8vcM/hg/xzw7/6vDvDv/p8N8O/+twdIdjOhzb4ZAex+lx3B6H9jhej+P3OEGPE/Y4UY8T9zisx0l6nLTHyXqcvMcpepyyx6l6nLrHaXqctsfpepy+xxl6nLHHmXqcucdZepy1x9l6nL3HOXqcs8e5epy7x3l6nLfH+Xqcv8cFelywx4V6XLjHRXpctMfFely8xyV6XLJHelyqx6V7XKbHZXtcrsfle1yhxxV7XKnHlXtcpcdVe1ytx9V7XKPHNXtcq8e1e1ynx3V7XK/H9XvcoMcNe9yox4173KTHTXvcrMfNe9yixy173KrHrXvcpsdte9yux+173KHHHXvcqcede9ylx1173K3H3Xvco8c9e9yrx7173KfHfXvcr8f9ezygxwN7PKjHg3s8pMdDezysx8N7PKLHI3s8qsejezymx2N7PK7H43s8occTezypR3s8ucdTejy1x9N6PL3HM3o8s8ezejy7x3N6HN7juT2e1+P5PV7Q44U9XtTjxT1e0uOlPV7W4+U9XtHjlT0Oegx6DHuMeox7THpMe8x6zHsseix7rHqse2x6bHvseux7vKrHq3u8psdre7yux+t7vKHHG3u8qcebe7ylx1t7vK3H23u8o8c7e7yrx7t7vKfHe3u8r8f7e3ygxwd7fKjHh3t8pMdHe3ysxxE9juxxVI//x9I5NmF6MMxy42Rj23Y6tm3btt2xNraN+7IRG+vYtm3j1FPvmX8wUzVVM596+ABHDHDkAEcNcPQAxwxw7ACfHuAzA3x2gM8N8PkBvjDAFwf40gBfHuArA3x1gK8N8PUBvjHANwf41gDfHuA7A3x3gO8N8P0BfjDADwf40QA/HuAnA/x0gJ8N8PMBfjHALwf41QC/HuA3A/x2gN8N8PsB/jDAHwf40wB/HuAvA/x1gL8N8PcB/jHAPwf41wD/HuA/A/x3gP8NcEiA4wQ4boDjBTh+gBMEOGGAEwU4cYCTBDg0wEkDnCzAyQOcIsApA5wqwKkDnCbAaQOcLsDpA5whwBkDnCnAmQOcJcBZA5wtwNkDnCPAOQOcK8C5A5wnwHkDnC/A+QNcIMAFA1wowIUDXCTARQNcLMDFA1wiwCUDXCpAAlw6wGUCXDbA5QJcPsAVAlwxwJUCXDnAVQJcNcDVAlw9wDUCXDPAtQJcO8B1Alw3wPUCXD/ADQLcMMCNAtw4wE0C3DTAzQLcPMAtAtwywK0C3DrAbQLcNsDtAtw+wB0C3DHAnQLcOcBdAtw1wN0C3D3APQLcM8C9Atw7wH0C3DfA/QLcP8ADAjwwwIMCPDjAQwI8NMDDAjw8wCMCPDLAowI8OsBjAjw2wOMCPD7AEwI8McCTAjw5QAM8JcBTAzwtwNMDPCPAMwM8K8CzAzwnwHMDPC/AYQGeH+AFAV4Y4EUBXhzgJQFeGuBlAV4e4BUBXhngVQFeHeA1AV4b4HUBXh/gDQHeGOBNAd4c4C0B3hrgbQHeHuAdAd4Z4F0BDgIMAgwDjAKMA0wCTAPMAswDLAIsA6wCrANsAmwD7ALsA7w7wHsCvDfA+wK8P8AHAnwwwIcCfDjARwJ8NMDHAnw8wCcCfDLApwIcHuCIAEcGOCrA0QGOCXBsgE8H+EyAzwb4XIDPB/hCgC8G+FKALwf4SoCvBvhagK8H+EaAbwb4VoBvB/hOgO8G+F6A7wf4QYAfBvhRgB8H+EmAnwb4WYCfB/hFgF8G+FWAXwf4TYDfBvhdgN8H+EOAPwb4U4A/B/hLgL8G+FuAvwf4R4B/BvhXgH8H+E+A/wb4XzCeQ0IcJ8RxQxwvxPFDnCDECUOcKMSJQ5wkxKEhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4e4hIhLhniUiES4tIhLhPisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEOKJIZ4U4skhGuIpIZ4a4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSEOC/H8EC8I8cIQLwrx4hAvCfHSEC8L8fIQrwjxyhCvCvHqEK8J8doQrwvx+hBvCPHGEG8K8eYQbwnx1hBvC/H2EO8I8c4Q7wpxEGIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2If4t0h3hPivSHeF+L9IT4Q4oMhPhTiwyE+EuKjIT4W4uMhPhHikyE+FeLwEEeEODLEUSGODnFMiGNDfDrEZ0J8NsTnQnw+xBdCfDHEl0J8OcRXQnw1xNdCfD3EN0J8M8S3Qnw7xHdCfDfE90J8P8QPQvwwxI9C/DjET0L8NMTPQvw8xC9C/DLEr0L8OsRvQvw2xO9C/D7EH0L8McSfQvw5xF9C/DXE30L8PcQ/QvwzxL9C/DvEf0L8N8T/QhwS4TgRjhvheBGOH+EEEU4Y4UQRThzhJBEOjXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiXiHDJCJeKkAiXjnCZCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I145wnQjXjXC9CNePcIMIN4xwowg3jnCTCDeNcLMIN49wiwi3jHCrCLeOcJsIt41wuwi3j3CHCHeMcKcId45wlwh3jXC3CHePcI8I94xwrwj3jnCfCPeNcL8I94/wgAgPjPCgCA+O8JAID43wsAgPj/CICI+M8KgIj47wmAiPjfC4CI+P8IQIT4zwpAhPjtAIT4nw1AhPi/D0CM+I8MwIz4rw7AjPifDcCM+LcFiE50d4QYQXRnhRhBdHeEmEl0Z4WYSXR3hFhFdGeFWEV0d4TYTXRnhdhNdHeEOEN0Z4U4Q3R3hLhLdGeFuEt0d4R4R3RnhXhIMIgwjDCKMI4wiTCNMIswjzCIsIywirCOsImwjbCLsI+wjvjvCeCO+N8L4I74/wgQgfjPChCB+O8JEIH43wsQgfj/CJCJ+M8KkIh0c4IsKREY6KcHSEYyIcG+HTET4T4bMRPhfh8xG+EOGLEb4U4csRvhLhqxG+FuHrEb4R4ZsRvhXh2xG+E+G7Eb4X4fsRfhDhhxF+FOHHEX4S4acRfhbh5xF+EeGXEX4V4dcRfhPhtxF+F+H3Ef4Q4Y8R/hThzxH+EuGvEf4W4e8R/hHhnxH+FeHfEf4T4b8R/hfhkBjHiXHcGMeLcfwYJ4hxwhgninHiGCeJcWiMk8Y4WYyTxzhFjFPGOFWMU8c4TYzTxjhdjNPHOEOMM8Y4U4wzxzhLjLPGOFuMs8c4R4xzxjhXjHPHOE+M88Y4X4zzx7hAjAvGuFCMC8e4SIyLxrhYjIvHuESMS8a4VIzEuHSMy8S4bIzLxbh8jCvEuGKMK8W4coyrxLhqjKvFuHqMa8S4Zoxrxbh2jOvEuG6M68W4fowbxLhhjBvFuHGMm8S4aYybjTtkyP9y2yLGLWPcKsatY9wmxm1j3C7G7WPcIcYdY9wpxp1j3CXGXWPcLcbdY9wjxj1j3CvGvWPcJ8Z9Y9wvxv1jPCDGA2M8KMaDYzwkxkNjPCzGw2M8IsYjYzwqxqNjPCbGY2M8LsbjYzwhxhNjPCnGk2M0xlNiPDXG02I8PcYzYjwzxrNiPDvGc2I8N8bzYhwW4/kxXhDjhTFeFOPFMV4S46UxXhbj5TFeEeOVMV4V49UxXhPjtTFeF+P1Md4Q440x3hTjzTHeEuOtMd4W4+0x3hHjnTHeFeMgxiDGMMYoxjjGJMY0xizGPMYixjLGKsY6xibGNsYuxj7Gu2O8J8Z7Y7wvxvtjfCDGB2N8KMaHY3wkxkdjfCzGx2N8IsYnY3wqxuExjohxZIyjYhwd45gYx8b4dIzPxPhsjM/F+HyML8T4YowvxfhyjK/E+GqMr8X4eoxvxPhmjG/F+HaM78T4bozvxfh+jB/E+GGMH8X4cYyfxPhpjJ/F+HmMX8T4ZYxfxfh1jN/E+G2M38X4fYw/xPhjjD/F+HOMv8T4a4y/xfh7jH/E+GeMf8X4d4z/xPhvjP/FOCTBcRIcN8HxEhw/wQkSnDDBiRKcOMFJEhya4KQJTpbg5AlOkeCUCU6V4NQJTpPgtAlOl+D0Cc6Q4IwJzpTgzAnOkuCsCc6W4OwJzpHgnAnOleDcCc6T4LwJzpfg/AkukOCCCS6U4MIJLpLgogkuluDiCS6R4JIJLpUgCS6d4DIJLpvgcgkun+AKCa6Y4EoJrpzgKgmumuBqCa6e4BoJrpngWgmuneA6Ca6b4HoJrp/gBglumOBGCW6c4CYJbprgZglunuAWCW6Z4FYJbp3gNglum+B2CW6f4A4J7pjgTgnunOAuCe6a4G4J7p7gHgnumeBeCe6d4D4J7pvgfgnun+ABCR6Y4EEJHpzgIQkemuBhCR6e4BEJHpngUQkeneAxCR6b4HEJHp/gCQmemOBJCZ6coAmekuCpw4Z6WoKnJ3hGgmcmeFaCZyd4ToLnJnhegsMSPD/BCxK8MMGLErw4wUsSvDTByxK8PMErErwywasSvDrBaxK8NsHrErw+wRsSvDHBmxK8OcFbErw1wdsSvD3BOxK8M8G7EhwkGCQYJhglGCeYJJgmmCWYJ1gkWCZYJVgn2CTYJtgl2Cd4d4L3JHhvgvcleH+CDyT4YIIPJfhwgo8k+GiCjyX4eIJPJPhkgk8lODzBEQmOTHBUgqMTHJPg2ASfTvCZBJ9N8LkEn0/whQRfTPClBF9O8JUEX03wtQRfT/CNBN9M8K0E307wnQTfTfC9BN9P8IMEP0zwowQ/TvCTBD9N8LMEP0/wiwS/TPCrBL9O8JsEv03wuwS/T/CHBH9M8KcEf07wlwR/TfC3BH9P8I8E/0zwrwT/TvCfBP9N8L8Eh6Q4TorjpjheiuOnOEGKE6Y4UYoTpzhJikNTnDTFyVKcPMUpUpwyxalSnDrFaVKcNsXpUpw+xRlSnDHFmVKcOcVZUpw1xdlSnD3FOVKcM8W5Upw7xXlSnDfF+VKcP8UFUlwwxYVSXDjFRVJcNMXFUlw8xSVSXDLFpVIkxaVTXCbFZVNcLsXlU1whxRVTXCnFlVNcJcVVU1wtxdVTXCPFNVNcK8W1U1wnxXVTXC/F9VPcIMUNU9woxY1T3CTFTVPcLMXNU9wixS1T3CrFrVPcJsVtU9wuxe1T3CHFHVPcKcWdU9wlxV1T3C3F3VPcI8U9U9wrxb1T3CfFfVPcL8X9UzwgxQNTPCjFg1M8JMVDUzwsxcNTPCLFI1M8KsWjUzwmxWNTPC7F41M8IcUTUzwpxZNTNMVTUjw1xdNSPD3FM1I8M8WzUjw7xXNSPDfF81IcluL5KV6Q4oUpXpTixSlekuKlKV6W4uUpXpHilSleleLVKV6T4rUpXpfi9SnekOKNKd6U4s0p3pLirSneluLtKd6R4p0p3pXiIMUgxTDFKMU4xSTFNMUsxTzFIsUyxSrFOsUmxTbFLsU+xbtTvCfFe1O8L8X7U3wgxQdTfCjFh1N8JMVHU3wsxcdTfCLFJ1N8KsXhKY5IcWSKo1IcneKYFMem+HSKz6T4bIrPpfh8ii+k+GKKL6X4coqvpPhqiq+l+HqKb6T4Zopvpfh2iu+k+G6K76X4foofpPhhih+l+HGKn6T4aYqfpfh5il+k+GWKX6X4dYrfpPhtit+l+H2KP6T4Y4o/pfhzir+k+GuKv6X4e4p/pPhnin+l+HeK/6T4b4r/pTgkw3EyHDfD8TIcP8MJMpwww4kynDjDSTIcmuGkGU6W4eQZTpHhlBlOleHUGU6T4bQZTpfh9BnOkOGMGc6U4cwZzpLhrBnOluHsGc6R4ZwZzpXh3BnOk+G8Gc6X4fwZLpDhghkulOHCGS6S4aIZLpbh4hkukeGSGS6VIRkuneEyGS6b4XIZLp/hChmumOFKGa6c4SoZrprhahmunuEaGa6Z4VoZrp3hOhmum+F6Ga6f4QYZbpjhRhlunOEmGW6a4WYZbp7hFhlumeFWGW6d4TYZbpvhdhlun+EOGe6Y4U4Z7pzhLhnumuFuGe6e4R4Z7pnhXhnuneE+Ge6b4X7Z/w4GHpDhgRkelOHBGR6S4aEZHpbh4RkekeGRGR6V4dEZHpPhsRkel+HxGZ6Q4YkZnpThyRma4SkZnprhaRmenuEZGZ6Z4VkZnp3hORmem+F5GQ7L8PwML8jwwgwvyvDiDC/J8NIML8vw8gyvyPDKDK/K8OoMr8nw2gyvy/D6DG/I8MYMb8rw5gxvyfDWDG/L8PYM78jwzgzvynCQYZBhmGGUYZxhkmGaYZZhnmGRYZlhlWGdYZNhm2GXYZ/h3Rnek+G9Gd6X4f0ZPpDhgxk+lOHDGT6S4aMZPpbh4xk+keGTGT6V4fAMR2Q4MsNRGY7OcEyGYzN8OsNnMnw2w+cyfD7DFzJ8McOXMnw5w1cyfDXD1zJ8PcM3Mnwzw7cyfDvDdzJ8N8P3Mnw/ww8y/DDDjzL8OMNPMvw0w88y/DzDLzL8MsOvMvw6w28y/DbD7zL8PsMfMvwxw58y/DnDXzL8NcPfMvw9wz8y/DPDvzL8O8N/Mvw3w/8yHJLjODmOm+N4OY6f4wQ5TpjjRDlOnOMkOQ7NcdIcJ8tx8hynyHHKHKfKceocp8lx2hyny3H6HGfIccYcZ8px5hxnyXHWHGfLcfYc58hxzhznynHuHOfJcd4c58tx/hwXyHHBHBfKceEcF8lx0RwXy3HxHJfIcckcl8qRHJfOcZkcl81xuRyXz3GFHFfMcaUcV85xlRxXzXG1HFfPcY0c18xxrRzXznGdHNfNcb0c189xgxw3zHGjHDfOcZMcN81xsxw3z3GLHLfMcasct87/jyP/P22X4/Y57pDjjjnulOPOOe6S46457pbj7jnukeOeOe6V49457pPjvjnul+P+OR6Q44E5HpTjwTkekuOhOR6W4+E5HpHjkTkelePROR6T47E5Hpfj8TmekOOJOZ6U48k5muMpOZ6a42k5np7jGTmemeNZOZ6d4zk5npvjeTkOy/H8HC/I8cIcL8rx4hwvyfHSHC/L8fIcr8jxyhyvyvHqHK/J8docr8vx+hxvyPHGHG/K8eYcb8nx1hxvy/H2HO/I8c4c78pxkGOQY5hjlGOcY5JjmmOWY55jkWOZY5VjnWOTY5tjl2Of49053pPjvTnel+P9OT6Q44M5PpTjwzk+kuOjOT6W4+M5PpHjkzk+lePwHEfkODLHUTmOznFMjmNzfDrHZ3J8Nsfncnw+xxdyfDHHl3J8OcdXcnw1x9dyfD3HN3J8M8e3cnw7x3dyfDfH93J8P8cPcvwwx49y/DjHT3L8NMfPcvw8xy9y/DLHr3L8Osdvcvw2x+9y/D7HH3L8Mcefcvw5x19y/DXH33L8Pcc/cvwzx79y/DvHf3L8N8f/chxS4DgFjlvgeAWOX+AEBU5Y4EQFTlzgJAUOLXDSAicrcPICpyhwygKnKnDqAqcpcNoCpytw+gJnKHDGAmcqcOYCZylw1gJnK3D2AucocM4C5ypw7gLnKXDeAucrcP4CFyhwwQIXKnDhAhcpcNECFytw8QKXKHDJApcqkAKXLnCZApctcLkCly9whQJXLHClAlcucJUCVy1wtQJXL3CNAtcscK0C1y5wnQLXLXC9AtcvcIMCNyxwowI3LnCTAjctcLMCNy9wiwK3LHCrArcucJsCty1wuwK3L3CHAncscKcCdy5wlwJ3LXC3AncvcI8C9yxwrwL3LnCfAvctcL8C9y/wgAIPLPCgAg8u8JACDy3wsAIPL/CIAo8s8KgCjy7wmAKPLfC4Ao8v8IQCTyzwpAJPLtACTynw1AJPK/D0As8o8MwCzyrw7ALPKfDcAs8rcFiB5xd4QYEXFnhRgRcXeEmBlxZ4WYGXF3hFgVcWeFWBVxd4TYHXFnhdgdcXeEOBNxZ4U4E3F3hLgbcWeFuBtxd4R4F3FnhXgYMCgwLDAqMC4wKTAtMCswLzAosCy4KJhgwZYl1gU2BbYFdgX+DdBd5T4L0F3lfg/QU+UOCDBT5U4MMFPlLgowU+VuDjBT5R4JMFPlXg8AJHFDiywFEFji5wTIFjC3y6wGcKfLbA5wp8vsAXCnyxwJcKfLnAVwp8tcDXCny9wDcKfLPAtwp8u8B3Cny3wPcKfL/ADwr8sMCPCvy4wE8K/LTAzwr8vMAvCvyywK8K/LrAbwr8tsDvCvy+wB8K/LHAnwr8ucBfCvy1wN8K/L3APwr8s8C/Cvy7wH8K/LfA/wocUuI4JY5b4ngljl/iBCVOWOJEJU5c4iQlDi1x0hInK3HyEqcoccoSpypx6hKnKXHaEqcrcfoSZyhxxhJnKnHmEmcpcdYSZytx9hLnKHHOEucqce4S5ylx3hLnK3H+EhcoccESFypx4RIXKXHREhcrcfESlyhxyRKXKpESly5xmRKXLXG5EpcvcYUSVyxxpRJXLnGVElctcbUSVy9xjRLXLHGtEtcucZ0S1y1xvRLXL3GDEjcscaMSNy5xkxI3LXGzEjcvcYsStyxxqxK3LnGbErctcbsSty9xhxJ3LHGnEncucZcSdy1xtxJ3L3GPEvcsca8S9y5xnxL3LXG/Evcv8YASDyzxoBIPLvGQEg8t8bASDy/xiBKPLPGoEo8u8ZgSjy3xuBKPL/GEEk8s8aQSTy7REk8p8dQSTyvx9BLPKPHMEs8q8ewSzynx3BLPK3FYieeXeEGJF5Z4UYkXl3hJiZeWeFmJl5d4RYlXlnhViVeXeE2J15Z4XYnXl3hDiTeWeFOJN5d4S4m3lnhbibeXeEeJd5Z4V4mDEoMSwxKjEuMSkxLTErMS8xKLEssSqxLrEpsS2xK7EvsS7y7xnhLvLfG+Eu8v8YESHyzxoRIfLvGREh8t8bESHy/xiRKfLPGpEoeXOKLEkSWOKnF0iWNKHFvi0yU+U+KzJT5X4vMlvlDiiyW+VOLLJb5S4qslvlbi65P8/1FY4lslvl3iOyW+W+J7Jb5f4gclfljiRyV+XOInJX5a4mclfl7iFyV+WeJXJX5d4jclflvidyV+X+IPJf5Y4k8l/lziLyX+WuJvJf5e4h8l/lniXyX+XeI/Jf5b4n8lDqlwnArHrXC8CsevcIIKJ6xwogonrnCSCodWOGmFk1U4eYVTVDhlhVNVOHWF01Q4bYXTVTh9hTNUOGOFM1U4c4WzVDhrhbNVOHuFc1Q4Z4VzVTh3hfNUOG+F81U4f4ULVLhghQtVuHCFi1S4aIWLVbh4hUtUuGSFS1VIhUtXuEyFy1a4XIXLV7hChStWuFKFK1e4SoWrVrhahatXuEaFa1a4VoVrV7hOhetWuF6F61e4QYUbVrhRhRtXuEmFm1a4WYWbV7hFhVtWuFWFW1e4TYXbVrhdhdtXuEOFO1a4U4U7V7hLhbtWuFuFu1e4R4V7VrhXhXtXuE+F+1a4X4X7V3hAhQdWeFCFB1d4SIWHVnhYhYdXeESFR1Z4VIVHV3hMhcdWeFyFx1d4QoUnVnhShSdXaIWnVHhqhadVeHqFZ1R4ZoVnVXh2hedUeG6F51U4rMLzK7ygwgsrvKjCiyu8pMJLK7yswssrvKLCKyu8qsKrK7ymwmsrvK7C6yu8ocIbK7ypwpsrvKXCWyu8rcLbK7yjwjsrvKvCQYVBhWGFUYVxhUmFaYVZhXmFRYVlhVWFdYVNhW2FXYV9hXdXeE+F91Z4X4X3V/hAhQ9W+FCFD1f4SIWPVvhYhY9X+ESFT1b4VIXDKxxR4cgKR1U4usIxFY6t8OkKn6nw2Qqfq/D5Cl+o8MUKX6rw5QpfqfDVCl+r8PUK36jwzQrfqvDtCt+p8N0K36vw/Qo/qPDDCj+q8OMKP6nw0wo/q/DzCr+o8MsKv6rw6wq/qfDbCr+r8PsKf6jwxwp/qvDnCn+p8NcKf6vw9wr/qPDPCv+q8O8K/6nw3wr/q3BIjePUOG6N49U4fo0T1DhhjRPVOHGNk9Q4tMZJa5ysxslrnKLGKWucqsapa5ymxmlrnK7G6WucocYZa5ypxplrnKXGWWucrcbZa5yjxjlrnKvGuWucp8Z5a5yvxvlrXKDGBWtcqMaFa1ykxkVrXKzGxWtcosYla1yqRmpcusZlaly2xuVqXL7GFWpcscaValy5xlVqXLXG1WpcvcY1alyzxrVqXLvGdWpct8b1aly/xg1q3LDGjWrcuMZNaty0xs1q3LzGLWrcssataty6xm1q3LbG7WrcvsYdatyxxp1q3LnGXWrctcbdaty9xj1q3LPGvWrcu8Z9aty3xv1q3L/GA2o8sMaDajy4xkNqPLTGw2o8vMYjajyyxqNqPLrGY2o8tsbjajy+xhNqPLHGk2o8uUZrPKXGU2s8rcbTazyjxjNrPKvGs2s8p8ZzazyvxmE1nl/jBTVeWONFNV5c4yU1XlrjZTVeXuMVNV5Z41U1Xl3jNTVeW+N1NV5f4w013ljjTTXeXOMtNd5a42013l7jHTXeWeNdNQ5qDGoMa4xqjGtMakxrzGrMayxqLGusaqxrbGpsa+xq7Gu8u8Z7ary3xvtqvL/GB2p8sMaHany4xkdqfLTGx2p8vMYnanyyxqdqHF7jiBpH1jiqxtE1jqlxbI1P1/hMjc/W+FyNz9f4Qo0v1vhSjS/X+EqNr9b4Wo2v1/hGjW/W+FaNb9f4To3v1vheje/X+EGNH9b4UY0f1/hJjZ/W+FmNn9f4RY1f1vhVjV/X+E2N39b4XY3f1/hDjT/W+FONP9f4S42/1vhbjb/X+EeNf9b4V41/1/hPjf/W+F+NQxocp8FxGxyvwfEbnKDBCRucqMGJG5ykwaENTtrgZA1O3uAUDU7Z4FQNTt3gNA1O2+B0DU7f4AwNztjgTA3O3OAsDc7a4GwNzt7gHA3O2eBcDc7d4DwNztvgfA3O3+ACDS7Y4EINLtzgIg0u2uBiDS7e4BINLtngUg3S4NINLtPgsg0u1+DyDa7Q4IoNrtTgyg2u0uCqDa7W4OoNrtHgmg2u1eDaDa7T4LoNrtfg+g1u0OCGDW7U4MYNbtLgpg1u1uDmDW7R4JYNbtXg1g1u0+C2DW7X4PYN7tDgjg3u1ODODe7S4K4N7tbg7g3u0eCeDe7V4N4N7tPgvg3u1+D+DR7Q4IENHtTgwQ0e0uChDR7W4OENHtHgkQ0e1eDRDR7T4LENHtfg8Q2e0OCJDZ7U4MkN2uApDZ7a4GkNnt7gGQ2e2eBZDZ7d4DkNntvgeQ0Oa/D8Bi9o8MIGL2rw4gYvafDSBi9r8PIGr2jwygavavDqBq9p8NoGr2vw+gZvaPDGBm9q8OYGb2nw1gZva/D2Bu9o8M4G72pw0GDQYNhg1GDcYNJg2mDWYN5g0WDZYNVg3WDTYNtg12Df4N0N3tPgvQ3e1+D9DT7Q4IMNPtTgww0+0uCjDT7W4OMNPtHgkw0+1eDwBkc0OLLBUQ2ObnBMg2MbfLrBZxp8tsHnGny+wRcafLHBlxp8ucFXGny1wdcafL3BNxp8s8G3Gny7wXcafLfB9xp8v8EPGvywwY8a/LjBTxr8tMHPGvy8wS8a/LLBrxr8usFvGvy2we8a/L7BHxr8scGfGvy5wV8a/LXB3xr8vcE/Gvyzwb8a/LvBfxr8t8H/GhzS4jgtjtvieC2O3+IELU7Y4kQtTtziJC0ObXHSFidrcfIWp2hxyhananHqFqdpcdoWp2tx+hZnaHHGFmdqceYWZ2lx1hZna3H2Fudocc4W52px7hbnaXHeFudrcf4WF2hxwRYXanHhFhdpcdEWF2tx8RaXaHHJFpdqkRaXbnGZFpdtcbkWl29xhRZXbHGlFlducZUWV21xtRZXb3GNFtdsca0W125xnRbXbXG9FtdvcYMWN2xxoxY3bnGTFjdtcbMWN29xixa3bHGrFrducZsWt21xuxa3b3GHFndscacWd25xlxZ3bXG3FndvcY8W92xxrxb3bnGfFvdtcb8W92/xgBYPbPGgFg9u8ZAWD23xsBYPb/GIFo9s8agWj27xmBaPbfG4Fo9v8YQWT2zxpBZPbtEWT2nx1BZPa/H0Fs9o8cwWz2rx7BbPafHcFs9rcViL57d4QYsXtnhRixe3eEmLl7Z4WYuXt3hFi1e2eFWLV7d4TYvXtnhdi9e3eEOLN7Z4U4s3t3hLi7e2eFuLt7d4R4t3tnhXi4MWgxbDFqMW4xaTFtMWsxbzFosWyxarFusWmxbbFrsW+xbvbvGeFu9t8b4W72/xgRYfbPGhFh9u8ZEWH23xsRYfb/GJFp9s8akWh7c4osWRLY5qcXSLY1oc2/5fX55p8dkWn2vx+RZfaPHFFl9q8eUWX2nx1RZfa/H1Ft9o8c0W32rx7RbfafHdFt9r8f0WP2jxwxY/avHjFj9p8dMWP2vx8xa/aPHLFr9q8esWv2nx2xa/a/H7Fn9o8ccWf2rx5xZ/afHXFn9r8fcW/2jxzxb/avHvFv9p8d8W//ufnw7H6XDcDsfrcPwOJ+hwwg4n6nDiDifpcGiHk3Y4WYeTdzhFh1N2OFWHU3c4TYfTdjhdh9N3OEOHM3Y4U4czdzhLh7N2OFuHs3c4R4dzdjhXh3N3OE+H83Y4X4fzd7hAhwt2uFCHC3e4SIeLdrhYh4t3uESHS3a4VId0uHSHy3S4bIfLdbh8hyt0uGKHK3W4coerdLhqh6t1uHqHa3S4Zodrdbh2h+t0uG6H63W4focbdLhhhxt1uHGHm3S4aYebdbh5h1t0uGWHW3W4dYfbdLhth9t1uH2HO3S4Y4c7dbhzh7t0uGuHu3W4e4d7dLhnh3t1uHeH+3S4b4f7dbh/hwd0eGCHB3V4cIeHdHhoh4d1eHiHR3R4ZIdHdXh0h8d0eGyHx3V4fIcndHhihyd1eHKHdnhKh6d2eFqHp3d4RodndnhWh2d3eE6H53Z4XofDOjy/wws6vLDDizq8uMNLOry0w8s6vLzDKzq8ssOrOry6w2s6vLbD6zq8vsMbOryxw5s6vLnDWzq8tcPbOry9wzs6vLPDuzocdBh0GHYYdRh3mHSYdph1mHdYdFh2WHVYd9h02HbYddh3eHeH93R4b4f3dXh/hw90+GCHD3X4cIePdPhoh491+HiHT3T4ZIdPdTi8wxEdjuxwVIejOxzT4dgOn+7wmQ6f7fC5Dp/v8IUOX+zwpQ5f7vCVDl/t8LUOX+/wjQ7f7PCtDt/u8J0O3+3wvQ7f7/CDDj/s8KMOP+7wkw4/7fCzDj/v8IsOv+zwqw6/7vCbDr/t8LsOv+/whw5/7PCnDn/u8JcOf+3wtw5/7/CPDv/s8K8O/+7wnw7/7fC/Dof0OE6P4/Y4Xo/j9zhBjxP2OFGPE/c4SY9De5y0x8l6nLzHKXqcssepepy6x2l6nLbH6XqcvscZepyxx5l6nLnHWXqctcfZepy9xzl6nLPHuXqcu8d5epy3x/l6nL/HBXpcsMeFely4x0V6XLTHxXpcvMclelyyx6V6pMele1ymx2V7XK7H5XtcoccVe1ypx5V7XKXHVXtcrcfVe1yjxzV7XKvHtXtcp8d1e1yvx/V73KDHDXvcqMeNe9ykx0173KzHzXvcoscte9yqx6173KbHbXvcrsfte9yhxx173KnHnXvcpcdde9ytx9173KPHPXvcq8e9e9ynx3173K/H/Xs8oMcDezyox4N7PKTHQ3s8rMfDezyixyN7PKrHo3s8psdjezyux+N7PKHHE3s8qceTe7THU3o8tcfTejy9xzN6PLPHs3o8u8dzejy3x/N6HNbj+T1e0OOFPV7U48U9XtLjpT1e1uPlPV7R45U9XtXj1T1e0+O1PV7X4/U93tDjjT3e1OPNPd7S46093tbj7T3e0eOdPd7V46DHoMewx6jHuMekx7THrMe8x6LHsseqx7rHpse2x67Hvse7e7ynx3t7vK/H+3t8oMcHe3yox4d7fKTHR3t8rMfHe3yixyd7fKrH4T2O6HFkj6N6HN3jmB7H9vj/aDinP74PQMkmTdM2tW27PbVt27btU9u2bef3tVHbRmobaZs2+7m7d+cvmJeZpzPz/ABfGOCLA3xpgC8P8JUBvjrA1wb4+gDfGOCbA3xrgG8P8J0BvjvA9wb4/gA/GOCHA/xogB8PcNQAPxngpwP8bICfD/CLAX45wK8G+PUAvxngtwP8boDfD/CHAf44wJ8G+PMAfxngrwP8bYC/D/CPAf45wNED/GuAfw/wnwGOGeC/A/xvgGMHOCTAoQGOE+CwAMcNcHiA4wU4foATBDgiwAkDnCjAiQOcJMBJA5wswMkDnCLAKQOcKsCpA5wmwGkDnC7A6QOcIcAZA5wpwJkDnCXAWQOcLcDZA5wjwDkDnCvAuQOcJ8B5A5wvwPkDXCDABQNcKMCFA1wkwEUDXCzAxQMkwCUCXDLApQJcOsBlAlw2wOUCXD7AFQJcMcCVAlw5wFUCXDXA1QJcPcA1AlwzwLUCXDvAdQJcN8D1Alw/wA0C3DDAjQLcOMBNAtw0wM0C3DzALQLcMsCtAtw6wG0C3DbA7QLcPsAdAtwxwJ0C3DnAXQLcNcDdAtw9wD0C3DPAvQLcO8B9Atw3wP0C3D/AAwI8MMCDAjw4wEMCPDTAwwI8PMAjAjwywKMCPDrAYwI8NsDjAjw+wBMCNMATAzwpwJMDPCXAUwM8LcDTAzwjwDMDPCvAswM8J8BzAzwvwPMDvCDACwO8KMCLA7wkwEsDvCzAywO8IsArA7wqwKsDvCbAawO8LsDrA7whwBsDvCnAmwO8JcBbA7wtwNsDvCPAOwO8K8C7A7wnwHsDvC/A+wN8IMAHA3wowIcDfCTARwN8LMDHAxwZ4CDAIMAwwCjAOMAkwDTALMA8wCLAMsAqwDrAJsA2wC7APsAnAnwywKcCfDrAZwJ8NsDnAnw+wBcCfDHAlwJ8OcBXAnw1wNcCfD3ANwJ8M8C3Anw7wHcCfDfA9wJ8P8APAvwwwI8C/DjAUQF+EuCnAX4W4OcBfhHglwF+FeDXAX4T4LcBfhfg9wH+EOCPAf4U4M8B/hLgrwH+FuDvAf4R4J8Bjg7wrwD/DvCfAMcE+G+A/wU4NsAhIQ4NcZwQh4U4bojDQxwvxPFDnCDEESFOGOJEIU4c4iQhThriZCFOHuIUIU4Z4lQhTh3iNCFOG+J0IU4f4gwhzhjiTCHOHOIsIc4a4mwhzh7iHCHOGeJcIc4d4jwhzhvifCHOH+ICIS4Y4kIhLhziIiEuGuJiIS4eIiEuEeKSIS4V4tIhLhPisiEuF+LyIa4Q4oohrhTiyiGuEuKqIa4W4uohrhHimiGuFeLaIa4T4rohrhfi+iFuEOKGIW4U4sYhbhLipiFuFuLmIW4R4pYhbhXi1iFuE+K2IW4X4vYh7hDijiHuFOLOIe4S4q4h7hbi7iHuEeKeIe4V4t4h7hPiviHuF+L+IR4Q4oEhHhTiwSEeEuKhIR4W4uEhHhHikSEeFeLRIR4T4rEhHhfi8SGeEKIhnhjiSSGeHOIpIZ4a4mkhnh7iGSGeGeJZIZ4d4jkhnhvieSGeH+IFIV4Y4kUhXhziJSFeGuJlIV4e4hUhXhniVSFeHeI1IV4b4nUhXh/iDSHeGOJNId4c4i0h3hribSHeHuIdId4Z4l0h3h3iPSHeG+J9Id4f4gMhPhjiQyE+HOIjIT4a4mMhPh7iyBAHIQYhhiFGIcYhJiGmIWYh5iEWIZYhViHWITYhtiF2IfYhPhHikyE+FeLTIT4T4rMhPhfi8yG+EOKLIb4U4sshvhLiqyG+FuLrIb4R4pshvhXi2yG+E+K7Ib4X4vshfhDihyF+FOLHIY4K8ZMQPw3xsxA/D/GLEL8M8asQvw7xmxC/DfG7EL8P8YcQfwzxpxB/DvGXEH8N8bcQfw/xjxD/DHF0iH+F+HeI/4Q4JsR/Q/wvxLEhDolwaITjRDgswnEjHB7heBGOH+EEEY6IcMIIJ4pw4ggniXDSCCeLcPIIp4hwygininDqCKeJcNoIp4tw+ghniHDGCGeKcOYIZ4lw1ghni3D2COeIcM4I54pw7gjniXDeCOeLcP4IF4hwwQgXinDhCBeJcNEIF4tw8QiJcIkIl4xwqQiXjnCZCJeNcLkIl49whQhXjHClCFeOcJUIV41wtQhXj3CNCNeMcK0I1x7+v8xGhOtFuH6EG0S4YYQbRbhxhJtEuGmEm0W4eYRbRLhlhFtFuHWE20S4bYTbRbh9hDtEuGOEO0W4c4S7RLhrhLtFuHuEe0S4Z4R7Rbh3hPtEuG+E+0W4f4QHRHhghAdFeHCEh0R4aISHRXh4hEdEeGSER0V4dITHRHhshMdFeHyEJ0RohCdGeFKEJ0d4SoSnRnhahKdHeEaEZ0Z4VoRnR3hOhOdGeF6E50d4QYQXRnhRhBdHeEmEl0Z4WYSXR3hFhFdGeFWEV0d4TYTXRnhdhNdHeEOEN0Z4U4Q3R3hLhLdGeFuEt0d4R4R3RnhXhHdHeE+E90Z4X4T3R/hAhA9G+FCED0f4SISPRvhYhI9HODLCQYRBhGGEUYRxhEmEaYRZhHmERYRlhFWEdYRNhG2EXYR9hE9E+GSET0X4dITPRPhshM9F+HyEL0T4YoQvRfhyhK9E+GqEr0X4eoRvRPhmhG9F+HaE70T4boTvRfh+hB9E+GGEH0X4cYSjIvwkwk8j/CzCzyP8IsIvI/wqwq8j/CbCbyP8LsLvI/whwh8j/CnCnyP8JcJfI/wtwt8j/CPCPyMcHeFfEf4d4T8Rjonw3wj/i3BshENiHBrjODEOi3HcGIfHOF7M6LH/T46IccIYJ4px4hgniXHSGCeLcfIYp4hxyhininHqGKeJcdoYp4tx+hhniHHGGGeKceYYZ4lx1hhni3H2GOeIcc4Y54px7hjniXHeGOeLcf4YF4hxwRgXinHhGBeJcdEYF4tx8RiJcYkYl4xxqRiXjnGZGJeNcbkYl49xhRhXjHGlGFeOcZUYV41xtRhXj3GNGNeMca0Y145xnRjXjXG9GNePcYMYN4xxoxg3jnGTGDeNcbMYN49xixi3jHGrGLeOcZsYt41xuxi3j3GHGHeMcacYd45xlxh3jXG3GHePcY8Y94xxrxj3jnGfGPeNcb8Y94/xgBgPjPGgGA+O8ZAYD43xsBgPj/GIGI+M8agYj47xmBiPjfG4GI+Ph/3fPZExnhjjSTGeHOMpMZ4a8z9N5+kxnhHjmTGeFePZMZ4T47kxnhfj+TFeEOOFMV4U48UxXhLjpTFeFuPlMV4R45UxXhXj1TFeE+O1MV4X4/Ux3hDjjTHeFOPNMd4S460x3hbj7THeEeOdMd4V490x3hPjvTHeF+P9MT4Q44MxPhTjwzE+EuOjMT4W4+MxjoxxEGMQYxhjFGMcYxJjGmMWYx5jEWMZYxVjHWMTYxtjF2Mf4xMxPhnjUzE+HeMzMT4b43MxPh/jCzG+GONLMb4c4ysxvhrjazG+HuMbMb4Z41sxvh3jOzG+G+N7Mb4f4wcxfhjjRzF+HOOoGD+J8dMYP4vx8xi/iPHLGL+K8esYv4nx2xi/i/H7GH+I8ccYf4rx5xh/ifHXGH+L8fcY/4jxzxhHx/hXjH/H+E+MY2L8N8b/Yhwb45AEhyY4ToLDEhw3weEJjpfg+AlOkOCIBCdMcKIEJ05wkgQnTXCyBCdPcIoEp0xwqgSnTnCaBKdNcLoEp09whgRnTHCmBGdOcJYEZ01wtgRnT3COBOdMcK4E505wngTnTXC+BOdPcIEEF0xwoQQXTnCRBBdNcLEEF0+QBJdIcMkEl0pw6QSXSXDZBJdLcPkEV0hwxQRXSnDlBFdJcNUEV0tw9QTXSHDNBNdKcO0E10lw3QTXS3D9BDdIcMMEN0pw4wQ3SXDTBDdLcPMEt0hwywS3SnDrBLdJcNsEt0tw+wR3SHDHBHdKcOcEd0lw1wR3S3D3BPdIcM8E90pw7wT3SXDfBPdLcP8ED0jwwAQPSvDgBA9J8NAED0vw8ASPSPDIBI9K8OgEj0nw2ASPS/D4BE9I0ARPTPCkBE9O8JQET03wtARPT/CMBM9M8KwEz07wnATPTfC8BM9P8IIEL0zwogQvTvCSBC9N8LIEL0/wigSvTPCqBK9O8JoEr03wugSvT/CGBG9M8KYEb07wlgRvTfC2BG9P8I4E70zwrgTvTvCeBO9N8L4E70/wgQQfTPChBB9O8JEEH03wsQQfT3BkgoMEgwTDBKME4wSTBNMEswTzBIsEywSrBOsEmwTbBLsE+wSfSPDJBJ9K8OkEn0nw2QSfS/D5BF9I8MUEX0rw5QRfSfDVBF9L8PUE30jwzQTfSvDtBN9J8N0E30vw/QQ/SPDDBD9K8OMERyX4SYKfJvhZgp8n+EWCXyb4VYJfJ/hNgt8m+F2C3yf4Q4I/JvhTgj8n+EuCvyb4W4K/J/hHgn8mODrBvxL8O8F/EhyT4L8J/pfg2ASHpDg0xXFSHJbiuCkOT3G8FMdPcYIUR6Q4YYoTpThxipOkOGmKk6U4eYpTpDhlilOlOHWK06Q4bYrTpTh9ijOkOGOKM6U4c4qzpDhrirOlOHuKc6Q4Z4pzpTh3ivOkOG+K86U4f4oLpLhgiguluHCKi6S4aIqLpbh4iqS4RIpLprhUikunuEyKy6a4XIrLp7hCiiumuFKKK6e4SoqrprhaiqunuEaKa6a4Voprp7hOiuumuF6K66e4QYobprhRihunuEmKm6a4WYqbp7hFilumuFWKW6e4TYrbprhditunuEOKO6a4U4o7p7hLirumuFuKu6e4R4p7prhXinunuE+K+6a4X4r7p3hAigemeFCKB6d4SIqHpnhYioeneESKR6Z4VIpHp3hMisemeFyKx6d4QoqmeGKKJ6V4coqnpHhqiqeleHqKZ6R4ZopnpXh2iuekeG6K56V4fooXpHhhiheleHGKl6R4aYqXpXh5ilekeGWKV6V4dYrXpHhtiteleH2KN6R4Y4o3pXhzirekeGuKt6V4e4p3pHhnineleHeK96R4b4r3pXh/ig+k+GCKD6X4cIqPpPhoio+l+HiKI1McpBikGKYYpRinmKSYppilmKdYpFimWKVYp9ik2KbYpdin+ESKT6b4VIpPp/hMis+m+FyKz6f4QoovpvhSii+n+EqKr6b4Woqvp/hGim+m+FaKb6f4Torvpvheiu+n+EGKH6b4UYofpzgqxU9S/DTFz1L8PMUvUvwyxa9S/DrFb1L8NsXvUvw+xR9S/DHFn1L8OcVfUvw1xd9S/D3FP1L8M8XRKf6V4t8p/pPimBT/TfG/FMemOCTDoRmOk+GwDMfNcHiG42U4foYTZDgiwwkznCjDiTOcJMNJM5wsw8kznCLDKTOcKsOpM5wmw2kznC7D6TOcIcMZM5wpw5kznCXDWTOcLcPZM5wjwzkznCvDuTOcJ8N5M5wvw/kzXCDDBTNcKMOFM1wkw0UzXCzDxTMkwyUyXDLDpTJcOsNlMlw2w+UyXD7DFTJcMcOVMlw5w1UyXDXD1TJcPcM1Mlwzw7UyXDvDdTJcN8P1Mlw/ww0y3DDDjTLcOMNNMtw0w80y3DzDLTLcMsOtMtw6w20y3DbD7TLcPsMdMtwxw50y3DnDXTLcNcPdMtw9wz0y3DPDvTLcO8N9Mtw3w/0y3D/DAzI8MMODMjw4w0MyPDTDwzI8PMMjMjwyw6MyPDrDYzI8NsPjMjw+wxMyNMMTMzwpw5MzPCXDUzM8LcPTMzwjwzMzPCvDszM8J8NzMzwvw/MzvCDDCzO8KMOLM7wkw0szvCzDyzO8IsMrM7wqw6szvCbDazO8LsPrM7whwxszvCnDmzO8JcNbM7wtw9szvCPDOzO8K8O7M7wnw3szvC/D+zN8IMMHM3wow4czfCTDRzN8LMPHMxyZ4SDDIMMwwyjDOMMkwzTDLMM8wyLDMsMqY0idYZNhm2GXYZ/hExk+meFTGT6d4TMZPpvhcxk+n+ELGb6Y4UsZvpzhKxm+muFrGb6e4RsZvpnhWxm+neE7Gb6b4XsZvp/hBxl+mOFHGX6c4agMP8nw0ww/y/DzDL/I8MsMv8rw6wy/yfDbDL/L8PsMf8jwxwx/yvDnDH/J8NcMf8vw9wz/yPDPDEdn+FeGf2f4T4ZjMvw3w/8yHJvhkByH5jhOjsNyHDfH4TmOl+P4OU6Q44gcJ8xxohwnznGSHCfNcbIcJ89xihynzHGqHKfOcZocp81xuhynz3GGHGfMcaYcZ85xlhxnzXG2HGfPcY4c58xxrhznznGeHOfNcb4c589xgRwXzHGhHBfOcZEcF81xsRwXz5Ecl8hxyRyXynHpHJfJcdkcl8tx+RxXyHHFHFfKceUcV8lx1RxXy3H1HNfIcc0c18px7RzXyXHdHNfLcf0cN8hxwxw3ynHjHDfJcdMcN8tx8xy3yHHLHLfKcesct8lx2xy3y3H7HHfIccccd8px5xx3yXHXHHfLcfcc98hxzxz3ynHvHPfJcd8c98tx/xwPyPHAHA/K8eAcD8nx0BwPy/HwHI/I8cgcj8rx6ByPyfHYHI/L8fgcT8jRHE/M8aQcT87xlBxPzfG0HE/P8Ywcz8zxrBzPzvGcHM/N8bwcz8/xghwvzPGiHC/O8ZIcL83xshwvz/GKHK/M8aocr87xmhyvzfG6HK/P8YYcb8zxphxvzvGWHG/N8bYcb8/xjhzvzPGuHO/O8Z4c783xvhzvz/GBHB/M8aEcH87xkRwfzfGxHB/PcWSOgxyDHMMcoxzjHJMc0xyzHPMcixzLHKsc6xybHNscuxz7EUOG/E8mnszxqRyfzvGZHJ/N8bkcn8/xhRxfzPGlHF/O8ZUcX83xtRxfz/GNHN/M8a0c387xnRzfzfG9HN/P8YMcP8zxoxw/znFUjp/k+GmOn+X4eY5f5Phljl/l+HWO3+T4bY7f5fh9jj/k+GOOP+X4c46/5Phrjr/l+HuOf+T4Z46jc/wrx79z/CfHMTn+m+N/OY7NcUiBQwscp8BhBY5b4PACxytw/AInKHBEgRMWOFGBExc4SYGTFjhZgZMXOEWBUxY4VYFTFzhNgdMWOF2B0xc4Q4EzFjhTgTMXOEuBsxY4W4GzFzhHgXMWOFeBcxc4T4HzFjhfgfMXuECBCxa4UIELF7hIgYsWuFiBixdIgUsUuGSBSxW4dIHLFLhsgcsVuHyBKxS4YoErFbhygasUuGqBqxW4eoFrFLhmgWsVuHaB6xS4boHrFbh+gRsUuGGBGxW4cYGbFLhpgZsVuHmBWxS4ZYFbFbh1gdsUuG2B2xW4fYE7FLhjgTsVuHOBuxS4a4G7Fbh7gXsUuGeBexW4d4H7FLhvgfsVuH+BBxR4YIEHFXhwgYcUeGiBhxV4eIFHFHhkgUcVeHSBxxR4bIHHFXh8gScUaIEnFnhSgScXeEqBpxZ4WoGnF3hGgWcWeFaBZxd4ToHnFnhegecXeEGBFxZ4UYEXF3hJgZcWeFmBlxd4RYFXFnhVgVcXeE2B1xZ4XYHXF3hDgTcWeFOBNxd4S4G3FnhbgbcXeEeBdxZ4V4F3F3hPgfcWeF+B9xf4QIEPFvhQgQ8X+EiBjxb4WIGPFziywEGBQYFhgVGBcYFJgWmBWYF5gUWBZYFVgXWBTYFtgV2BfYFPFPhkgU8V+HSBzxT4bIHPFfh8gS8U+GKBLxX4coGvFPhqga8V+HqBbxT4ZoFvFfh2ge8U+G6B7xX4foEfFPhhgR8V+HGBowr8pMBPC/yswM8L/KLALwv8qsCvC/ymwG8L/K7A7wv8ocAfC/ypwJ8L/KXAXwv8rcDfC/yjwD8LHF3gXwX+XeA/BY4p8N8C/ytwbIFDShxa4jglDitx3BKHlzheieOXOEGJI0qcsMSJSpy4xElKnLTEyUqcvMQpSpyyxKlKnLrEaUqctsTpSpy+xBlKnLHEmUqcucRZSpy1xNlKnL3EOUqcs8S5Spy7xHlKnLfE+Uqcv8QFSlywxIVKXLjERUpctMTFSly8REpcosQlS1yqxKVLXKbEZUtcrsTlS1yhxBVLXKnElUtcpcRVS1ytxNVLXKPENUtcq8S1S1ynxHVLXK/E9UvcoMQNS9yoxI1L3KTETUvcrMTNS9yixC1L3KrErUvcpsRtS9yuxO1L3KHEHUvcqcSdS9ylxF1L3K3E3Uvco8Q9S9yrxL1L3KfEfUvcr8T9SzygxANLPKjEg0s8pMRDSzysxMNLPKLEI0s8qsSjSzymxGNLPK7E40s8oURLPLHEk0o8ucRTSjy1xNNKPL3EM0o8s8SzSjy7xHNKPLfE80o8v8QLSrywxItKvLjES0q8tMTLSry8xCtKvLLEq0q8usRrSry2xOtKvL7EG0q8scSbSry5xFtKvLXE20q8vcQ7SryzxLtKvLvEe0q8t8T7Sry/xAdKfLDEh0p8uMRHSny0xMdKfLzEkSUOSgxKDEuMSoxLTEpMS8xKzEssSixLrEqsS2xKbEvsSuxLfKLEJ0t8qsSnS3ymxGdLfK7E50t8ocQXS3ypxJdLfKXEV0t8rcTXS3yjxDdLfKvEt0t8p8R3S3yvxPdL/KDED0v8qMSPSxxV4iclflriZyV+XuIXJX5Z4lclfl3iNyV+W+J3JX5f4g8l/ljiTyX+XOIvJf5a4m8l/l7iHyX+WeLoEv8q8e8S/ylxTIn/lvhfiWNLHFLh0ArHqXBYheNWOLzC8Socv8IJKhxR4YQVTlThxBVOUuGkFU5W4eQVTlHhlBVOVeHUFU5T4bQVTlfh9BXOUOGMFc5U4cwVzlLhrBXOVuHsFc5R4ZwVzlXh3BXOU+G8Fc5X4fwVLlDhghUuVOHCFS5S4aIVLlbh4hVS4RIVLlnhUhUuXeEyFS5b4XIVLl/hChWuWOFKFa5c4SoVrlrhahWuXuEaFa5Z4VoVrl3hOhWuW+F6Fa5f4QYVbljhRhVuXOEmFW5a4WYVbl7hFhVuWeFWFW5d4TYVblvhdhVuX+EOFe5Y4U4V7lzhLhXuWuFuFe5e4R4V7lnhXhXuXeE+Fe5b4X4V7l/hARUeWOFBFR5c4SEVHlrhYRUeXuERFR5ZMWrkkCEeXeExFR5b4XEVHl/hCRVa4YkVnlThyRWeUuGpFZ5W4ekVnlHhmRWeVeHZFZ5T4bkVnlfh+RVeUOGFFV5U4cUVXlLhpRVeVuHlFV5R4ZUVXlXh1RVeU+G1FV5X4fUV3lDhjRXeVOHNFd5S4a0V3lbh7RXeUeGdFd5V4d0V3lPhvRXeV+H9FT5Q4YMVPlThwxU+UuGjFT5W4eMVjqxwUGFQYVhhVGFcYVJhWmFWYV5hUWFZYVVhXWFTYVthV2Ff4RMVPlnhUxU+XeEzFT5b4XMVPl/hCxW+WOFLFb5c4SsVvlrhaxW+XuEbFb5Z4VsVvl3hOxW+W+F7Fb5f4QcVfljhRxV+XOGoCj+p8NMKP6vw8wq/qPDLCr+q8OsKv6nw2wq/q/D7Cn+o8McKf6rw5wp/qfDXCn+r8PcK/6jwzwpHV/hXhX9X+E+FYyr8t8L/Khxb4ZAah9Y4To3Dahy3xuE1jlfj+DVOUOOIGiescaIaJ65xkhonrXGyGievcYoap6xxqhqnrnGaGqetcboap69xhhpnrHGmGmeucZYaZ61xthpnr3GOGuesca4a565xnhrnrXG+GuevcYEaF6xxoRoXrnGRGhetcbEaF6+RGpeocckal6px6RqXqXHZGpercfkaV6hxxRpXqnHlGlepcdUaV6tx9RrXqHHNGteqce0a16lx3RrXq3H9GjeoccMaN6px4xo3qXHTGjer8YT/5YW2rHGrGreucZsat61xuxq3r3GHGnescacad65xlxp3rXG3GnevcY8a96xxrxr3rnGfGvetcb8a96/xgBoPrPGgGg+u8ZAaD63xsBoPr/GIGo+s8agaj67xmBqPrfG4Go//H481WuOJNZ5U48k1nlLjqTWeVuPpNZ5R45k1nlXj2TWeU+O5NZ5X4/k1XlDjhTVeVOPFNV5S46U1Xlbj5TVeUeOVNV5V49U1XlPjtTVeV+P1Nd5Q44013lTjzTXeUuOtNd5W4+013lHjnTXeVePdNd5T47013lfj/TU+UOODNT5U48M1PlLjozU+VuPjNY6scVBjUGNYY1RjXGNSY1pjVmNeY1FjWWNVY11jU2NbY1djX+MTNT5Z41M1Pl3jMzU+W+NzNT5f4ws1vljjSzW+XOMrNb5a42s1vl7jGzW+WeNbNb5d4zs1vlvjezW+X+MHNX5Y40c1flzjqBo/qfHTGj+r8fMav6jxyxq/qvHrGr+p8dsav6vx+xp/qPHHGn+q8ecaf6nx1xp/q/H3Gv+o8c8aR9f4V41/1/hPjWNq/LfG/2ocW+OQBoc2OE6Dwxoct8HhDY7X4PgNTtDgiAYnbHCiBiducJIGJ21wsgYnb3CKBqdscKoGp25wmganbXC6BqdvcIYGZ2xwpgZnbnCWBmdtcLYGZ29wjgbnbHCuBuducJ4G521wvgbnb3CBBhdscKEGF25wkQYXbXCxBhdvkAaXaHDJBpdqcOkGl2lw2QaXa3D5BldocMUGV2pw5QZXaXDVBldrcPUG12hwzQbXanDtBtdpcN0G12tw/QY3aHDDBjdqcOMGN2lw0wY3a3DzBrdocMsGt2pw6wa3aXDbBrdrcPsGd2hwxwZ3anDnBndpcNcGd2tw9wb3aHDPBvdqcO8G92lw3wb3a3D/Bg9o8MAGD2rw4AYPafDQBg9r8PAGj2jwyAaPavDoBo9p8NgGj2vw+AZPaNAGT2zwpAZPbvCUBk9t8LQGT2/wjAbPbPCsBs9u8JwGz23wvAbPb/CCBi9s8KIGL27wkgYvbfCyBi9v8IoGr2zwqgavbvCaBq9t8LoGr2/whgZvbPCmBm9u8JYGb23wtgZvb/COBu9s8K4G727wngbvbfC+Bu9v8IEGH2zwoQYfbvCRBh9t8LEGH29wZIODBoMGwwajBuMGkwbTBrMG8waLBssGqwbrBpsG2wa7BvsGn2jwyQafavDpBp9p8NkGn2vw+QZfaPDFBl9q8OUGX2nw1QZfa/D1Bt9o8M0G32rw7QbfafDdBt9r8P0GP2jwwwY/avDjBkc1+EmDnzb4WYOfN/hFg182+FWDXzf4TYPfNvhdg983+EODPzb4U4M/N/hLg782+FuDvzf4R4N/Nji6wb8a/LvBfxoc0+C/Df7X4NgGh7Q4tMVxWhzW4rgtDm9xvBbHb3GCFke0OGGLE7U4cYuTtDhpi5O1OHmLU7Q4ZYtTtTh1i9O0OG2L07U4fYsztDhjizO1OHOLs7Q4a4uztTh7i3O0OGeLc7U4d4vztDhvi/O1OH+LC7S4YIsLtbhwi4u0uGiLi7W4eIu0uESLS44Z6lItLt3iMi0u2+JyLS7f4gotrtjiSi2u3OIqLa7a4motrt7iGi2u2eJaLa7d4jotrtviei2u3+IGLW7Y4kYtbtziJi1u2uJmLW7e4hYtbtniVi1u3eI2LW7b4nYtbt/iDi3u2OJOLe7c4i4t7tribi3u3uIeLe7Z4l4t7t3iPi3u2+J+Le7f4gEtHtjiQS0e3OIhLR7a4mEtHt7iES0e2eJRLR7d4jEtHtvicS0e3+IJLdriiS2e1OLJLZ7S4qktntbi6S2e0eKZLZ7V4tktntPiuS2e1+L5LV7Q4oUtXtTixS1e0uKlLV7W4uUtXtHilS1e1eLVLV7T4rUtXtfi9S3e0OKNLd7U4s0t3tLirS3e1uLtLd7R4p0t3tXi3S3e0+K9Ld7X4v0tPtDigy0+1OLDLT7S4qMtPtbi4y2ObHHQYtBi2GLUYtxi0mLaYtZi3mLRYtli1WLdYtNi22LXYt/iEy0+2eJTLT7d4jMtPtvicy0+3+ILLb7Y4kstvtziKy2+2uJrLb7e4hstvtniWy2+3eI7Lb7b4nstvt/iBy1+2OJHLX7c4qgWP2nx0xY/a/HzFr9o8csWv2rx6xa/afHbFr9r8fsWf2jxxxZ/avHnFn9p8dcWf2vx9xb/aPHPFke3+FeLf7f4T4tjWvy3xf9aHNvikA6HdjhOh8M6HLfD4R2O1+H4HU7Q4YgOJ+xwog4n7nCSDiftcLIOJ+9wig6n7HCqDqfucJoOp+1wug6n73CGDmfscKYOZ+5wlg5n7XC2DmfvcI4O5+xwrg7n7nCeDuftcL4O5+9wgQ4X7HChDhfucJEOF+1wsQ4X75AOl+hwyQ6X6nDpDpfpcNkOl+tw+Q5X6HDFDlfqcOUOV+lw1Q5X63D1DtfocM0O1+pw7Q7X6XDdDtfrcP0ON+hwww436nDjDjfpcNMON+tw8+7/nzziVh1u3eE2HW7b4XYdbt/hDh3u2OFOHe7c4S4d7trhbh3u3uEeHe7Z4V4d7t3hPh3u2+F+He7f4QEdHtjhQR0e3OEhHR7a4WEdHt7hER0e2eFRHR7d4TEdHtvhcR0e3+EJHdrhiR2e1OHJHZ7S4akdntbh6R2e0eGZHZ7V4dkdntPhuR2e1+H5HV7Q4YUdXtThxR1e0uGlHV7W4eUdXtHhlR1e1eHVHV7T4bUdXtfh9R3e0OGNHd7U4c0d3tLhrR3e1uHtHd7R4Z0d3tXh3R3e0+G9Hd7X4f0dPtDhgx0+1OHDHT7S4aMdPtbh4x2O7HDQYdBh2GHUYdxh0mHaYdZh3mHRYdlh1WHdYdNh22HXYd/hEx0+2eFTHT7d4TMdPtvhcx0+3+ELHb7Y4UsdvtzhKx2+2uFrHb7e4RsdvtnhWx2+3eE7Hb7b4Xsdvt/hBx1+2OFHHX7c4agOP+nw0w4/6/DzDr/o8MsOv+rw6w6/6fDbDr/r8PsOf+jwxw5/6vDnDn/p8NcOf+vw9w7/6PDPDkd3+FeHf3f4T4djOvy3w/86HNvhkB6H9jhOj8N6HLfH4T2O1+P4PU7Q44geJ+xxoh4n7nGSHiftcbIeJ+9xih6n7HGqHqfucZoep+1xuh6n73GGHmfscaYeZ+5xlh5n7XG2HmfvcY4e5+xxrh7n7nGeHuftcb4e5+9xgR4X7HGhHhfucZEeF+1xsR4X75Eel+hxyR6X6nHpHpfpcdkel+tx+R5X6HHFHlfqceUeV+lx1R5X63H1Htfocc0e1+px7R7X6XHdHtfrcf0eN+hxwx436nHjHjfpcdMeN+tx8x636HHLHrfqceset+lx2x6363H7Hnfoccced+px5x536XHXHnfrcfce9+hxzx736nHvHvfpcd8e9+tx/x4P6PHAHg/q8eAeD+nx0B4P6/HwHo/o8cgej+rx6B6P6fHYHo/r8fgeT+jRHk/s8aQeT+7xlB5P7fG0Hk/v8Ywez+zxrB7P7vGcHs/t8bwez+/xgh4v7PGiHi/u8ZIeL+3xsh4v7/GKHq/s8aoer+7xmh6v7fG6Hq/v8YYeb+zxph5v7vGWHm/t8bYeb+/xjh7v7PGuHu/u8Z4e7+3xvh7v7/GBHh/s8aEeH+7xkR4f7fGxHh/vcWSPgx7/TwAAAP//YJ7DzQ==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1000f8, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x14021, 0x0) 200.905104ms ago: executing program 1 (id=2057): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) 0s ago: executing program 0 (id=2058): r0 = gettid() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00') pread64(r1, &(0x7f000001b440)=""/102385, 0x18ff1, 0x8) kernel console output (not intermixed with test programs): =continue. Quota mode: writeback. [ 152.913883][ T7393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1141'. [ 153.098880][ T7399] input: syz1 as /devices/virtual/input/input26 [ 153.141672][ T7367] loop4: detected capacity change from 0 to 32768 [ 153.216978][ T6064] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 153.281482][ T7367] XFS (loop4): Mounting V5 Filesystem [ 153.449738][ T7367] XFS (loop4): Ending clean mount [ 153.485761][ T6064] usb 2-1: Using ep0 maxpacket: 16 [ 153.541643][ T7367] XFS (loop4): User initiated shutdown received. [ 153.547334][ T7424] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1151'. [ 153.551638][ T7367] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 153.615673][ T7367] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 153.635743][ T6064] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 153.643983][ T6064] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.695659][ T6064] usb 2-1: config 0 has no interface number 0 [ 153.717789][ T4199] XFS (loop4): Unmounting Filesystem [ 153.738023][ T7433] loop2: detected capacity change from 0 to 256 [ 153.750703][ T7433] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 153.793765][ T7433] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 153.843950][ T7433] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 153.895784][ T6064] usb 2-1: New USB device found, idVendor=046c, idProduct=14e8, bcdDevice= b.28 [ 153.916224][ T6064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.924689][ T7436] loop3: detected capacity change from 0 to 136 [ 153.937545][ T6064] usb 2-1: Product: syz [ 153.941773][ T6064] usb 2-1: Manufacturer: syz [ 153.946553][ T6064] usb 2-1: SerialNumber: syz [ 153.952295][ T6064] usb 2-1: config 0 descriptor?? [ 154.225242][ T4266] usb 2-1: USB disconnect, device number 12 [ 154.315155][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1162'. [ 154.445793][ T4241] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 154.572299][ T7460] loop4: detected capacity change from 0 to 736 [ 154.591587][ T7462] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 154.606270][ T7462] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 154.621095][ T7462] overlayfs: fs on './file0' does not support file handles, falling back to xino=off. [ 154.631328][ T7462] overlayfs: conflicting lowerdir path [ 154.745689][ T4241] usb 3-1: Using ep0 maxpacket: 16 [ 154.790042][ T7470] loop1: detected capacity change from 0 to 512 [ 154.831963][ T7470] EXT4-fs (loop1): 1 truncate cleaned up [ 154.838670][ T7470] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 154.875856][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.909074][ T4241] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.916486][ T7470] autofs4:pid:7470:autofs_fill_super: pipe file descriptor does not contain proper ops [ 154.919777][ T4241] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.942410][ T4241] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.951952][ T4241] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.964198][ T4241] usb 3-1: config 0 descriptor?? [ 155.196231][ T7492] device macvtap1 entered promiscuous mode [ 155.202175][ T7492] device vlan0 entered promiscuous mode [ 155.223603][ T7492] device vlan0 left promiscuous mode [ 155.305847][ T4266] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 155.393594][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1188'. [ 155.453226][ T4241] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max [ 155.467234][ T4241] microsoft 0003:045E:07DA.0014: unsupported Resolution Multiplier 0 [ 155.495323][ T4241] microsoft 0003:045E:07DA.0014: implement() called with n (152) > 32! (kworker/1:7) [ 155.666041][ T4241] microsoft 0003:045E:07DA.0014: unsupported Resolution Multiplier 0 [ 155.674568][ T4241] microsoft 0003:045E:07DA.0014: No inputs registered, leaving [ 155.691782][ T4241] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 155.704614][ T4241] microsoft 0003:045E:07DA.0014: no inputs found [ 155.723981][ T4241] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 155.750055][ T4266] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 155.760991][ T7515] ntfs: (device loop3): parse_options(): NLS character set iso88 not found. Using previous one cp874. [ 155.775180][ T4266] usb 1-1: config 0 has no interface number 0 [ 155.788776][ T7515] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 155.855834][ T4585] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 155.864353][ T7515] ntfs: volume version 3.1. [ 155.882995][ T4241] usb 3-1: USB disconnect, device number 9 [ 155.935488][ T7523] fido_id[7523]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 155.935883][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.950352][ T4266] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 155.967091][ T4266] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.981434][ T4266] usb 1-1: Product: syz [ 156.007750][ T4266] usb 1-1: Manufacturer: syz [ 156.008530][ T7526] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 156.028937][ T4266] usb 1-1: SerialNumber: syz [ 156.037325][ T7515] ntfs: (device loop3): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28). [ 156.050194][ T4266] usb 1-1: config 0 descriptor?? [ 156.052645][ T7526] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x44, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 156.068236][ T7515] ntfs: (device loop3): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28. [ 156.215900][ T4585] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 156.229523][ T4585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.249377][ T4585] usb 5-1: config 0 descriptor?? [ 156.269795][ T7534] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1201'. [ 156.286985][ T4585] cp210x 5-1:0.0: cp210x converter detected [ 156.445773][ T4595] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 156.608499][ T7554] set_capacity_and_notify: 1 callbacks suppressed [ 156.608514][ T7554] loop3: detected capacity change from 0 to 512 [ 156.651480][ T7554] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1211: inode has both inline data and extents flags [ 156.669751][ T7554] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1211: couldn't read orphan inode 15 (err -117) [ 156.692590][ T7554] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 156.723114][ T4585] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 156.779440][ T4585] usb 5-1: cp210x converter now attached to ttyUSB0 [ 156.825870][ T4595] usb 2-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 156.864166][ T4595] usb 2-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 156.884287][ T4595] usb 2-1: config 0 interface 0 has no altsetting 0 [ 156.911568][ T4595] usb 2-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 156.923702][ T4595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.936944][ T4595] usb 2-1: config 0 descriptor?? [ 156.957250][ T7530] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 156.976997][ T4266] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 157.003455][ T4266] asix 1-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 157.018004][ T4266] asix: probe of 1-1:0.251 failed with error -71 [ 157.053064][ T4266] usb 1-1: USB disconnect, device number 18 [ 157.086670][ T4241] usb 5-1: USB disconnect, device number 12 [ 157.112202][ T4241] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 157.137772][ T4241] cp210x 5-1:0.0: device disconnected [ 157.418210][ T4595] logitech 0003:046D:C50C.0015: unknown main item tag 0x7 [ 157.427942][ T4595] logitech 0003:046D:C50C.0015: hidraw0: USB HID v0.0c Device [HID 046d:c50c] on usb-dummy_hcd.1-1/input0 [ 157.634762][ T4585] usb 2-1: USB disconnect, device number 13 [ 157.666148][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 157.680570][ T7585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1224'. [ 157.815931][ T4266] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 158.055718][ T4266] usb 4-1: Using ep0 maxpacket: 8 [ 158.190718][ T4266] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.213621][ T4266] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.235729][ T4266] usb 4-1: config 0 interface 0 has no altsetting 0 [ 158.246010][ T4266] usb 4-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 158.263518][ T7613] loop4: detected capacity change from 0 to 512 [ 158.270621][ T4266] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.282718][ T4266] usb 4-1: config 0 descriptor?? [ 158.382213][ T7613] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.437010][ T7613] EXT4-fs (loop4): 1 truncate cleaned up [ 158.442707][ T7613] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 158.485728][ T4585] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 158.771791][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.780953][ T7625] loop2: detected capacity change from 0 to 2048 [ 158.787625][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.787654][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.787674][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.817066][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.824879][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.837370][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.844471][ T4266] wacom 0003:056A:005D.0016: unknown main item tag 0x0 [ 158.876569][ T4178] loop2: p3 < > p4 < > [ 158.881193][ T4178] loop2: partition table partially beyond EOD, truncated [ 158.885788][ T4585] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 158.895260][ T4266] wacom 0003:056A:005D.0016: hidraw0: USB HID v0.03 Device [HID 056a:005d] on usb-dummy_hcd.3-1/input0 [ 158.906811][ T4585] usb 2-1: config 0 has no interface number 0 [ 158.911736][ T7628] program syz.4.1243 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.928777][ T4178] loop2: p3 start 4284289 is beyond EOD, truncated [ 158.972853][ T4597] usb 4-1: USB disconnect, device number 11 [ 158.998628][ T7625] loop2: p3 < > p4 < > [ 159.007282][ T7625] loop2: partition table partially beyond EOD, truncated [ 159.033601][ T7625] loop2: p3 start 4284289 is beyond EOD, truncated [ 159.075905][ T4585] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 159.094305][ T7629] fido_id[7629]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 159.099980][ T4585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.127986][ T4585] usb 2-1: Product: syz [ 159.132623][ T4585] usb 2-1: Manufacturer: syz [ 159.138148][ T4585] usb 2-1: SerialNumber: syz [ 159.146990][ T4585] usb 2-1: config 0 descriptor?? [ 159.155326][ T7632] device batadv0 entered promiscuous mode [ 159.170041][ T7632] device bond0 entered promiscuous mode [ 159.183690][ T7632] device bond_slave_0 entered promiscuous mode [ 159.196936][ T7632] device bond_slave_1 entered promiscuous mode [ 159.217151][ T7632] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 159.226522][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 159.227767][ T7632] Cannot create hsr debugfs directory [ 159.251108][ T7632] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 159.262741][ T7632] device batadv0 left promiscuous mode [ 159.274426][ T7632] device bond0 left promiscuous mode [ 159.285918][ T7632] device bond_slave_0 left promiscuous mode [ 159.294309][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 159.295021][ T7632] device bond_slave_1 left promiscuous mode [ 159.903919][ T7639] loop2: detected capacity change from 0 to 32768 [ 159.968135][ T7639] XFS (loop2): Mounting V5 Filesystem [ 160.065755][ T4585] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 160.084311][ T7639] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 160.108099][ T4585] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 160.139620][ T7639] XFS (loop2): Starting recovery (logdev: internal) [ 160.162814][ T4585] asix: probe of 2-1:0.251 failed with error -71 [ 160.175688][ T4241] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 160.207717][ T4585] usb 2-1: USB disconnect, device number 14 [ 160.232452][ T7639] XFS (loop2): Ending recovery (logdev: internal) [ 160.401678][ T4188] XFS (loop2): Unmounting Filesystem [ 160.605747][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.636147][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.655784][ T4241] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.714015][ T7700] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1273'. [ 160.725624][ T4241] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.735403][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.796775][ T4241] usb 1-1: config 0 descriptor?? [ 160.930875][ T7713] loop1: detected capacity change from 0 to 1024 [ 160.969871][ T7720] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 161.005561][ T7720] netlink: 'syz.3.1280': attribute type 2 has an invalid length. [ 161.015166][ T7720] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 161.033691][ T7720] netlink: 'syz.3.1280': attribute type 2 has an invalid length. [ 161.288411][ T4241] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 161.356298][ T4241] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 161.460655][ T7737] loop3: detected capacity change from 0 to 8192 [ 161.492905][ T4241] usb 1-1: USB disconnect, device number 19 [ 161.506355][ T7741] fido_id[7741]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 161.522227][ T7737] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 161.565478][ T7737] REISERFS (device loop3): using ordered data mode [ 161.573298][ T7737] reiserfs: using flush barriers [ 161.578557][ T4585] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 161.590269][ T7737] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 161.609117][ T7737] REISERFS (device loop3): checking transaction log (loop3) [ 161.704152][ T7737] REISERFS (device loop3): Using tea hash to sort names [ 161.711928][ T7737] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 161.825826][ T4585] usb 5-1: Using ep0 maxpacket: 8 [ 161.831922][ T7747] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1302'. [ 161.877761][ T7749] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1293'. [ 161.950835][ T4585] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 161.971458][ T4585] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 255, using maximum allowed: 30 [ 161.992236][ T4585] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 162.017571][ T4585] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.095795][ T4585] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 162.123432][ T4585] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 255, using maximum allowed: 30 [ 162.158137][ T4585] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 162.193185][ T4585] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.291035][ T4585] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 162.331874][ T4585] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 255, using maximum allowed: 30 [ 162.364613][ T4585] usb 5-1: config 168 interface 0 altsetting 188 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 162.410375][ T4585] usb 5-1: config 168 interface 0 has no altsetting 0 [ 162.546404][ T7751] loop3: detected capacity change from 0 to 32768 [ 162.580938][ T4585] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 162.645261][ T4585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.663010][ T7784] loop1: detected capacity change from 0 to 512 [ 162.668867][ T4585] usb 5-1: Product: syz [ 162.674945][ T4585] usb 5-1: Manufacturer: syz [ 162.688512][ T4585] usb 5-1: SerialNumber: syz [ 162.709619][ T7751] XFS (loop3): Mounting V5 Filesystem [ 162.782316][ T7784] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 3: comm syz.1.1301: lblock 0 mapped to illegal pblock 3 (length 1) [ 162.811113][ T7751] XFS (loop3): Ending clean mount [ 162.831979][ T7751] XFS (loop3): Quotacheck needed: Please wait. [ 162.844139][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1311'. [ 162.872690][ T7784] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1301: error -117 reading directory block [ 162.887880][ T7784] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 162.896588][ T7784] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nolazytime,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000000ffc,grpid,,,errors=continue. Quota mode: writeback. [ 162.977124][ T4585] adutux 5-1:168.0: interrupt endpoints not found [ 163.012371][ T4585] usb 5-1: USB disconnect, device number 13 [ 163.073398][ T7751] XFS (loop3): Quotacheck: Done. [ 163.150122][ T4190] XFS (loop3): Unmounting Filesystem [ 163.215696][ T4593] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 163.378260][ T7807] loop1: detected capacity change from 0 to 1024 [ 163.463839][ T7807] EXT4-fs (loop1): Ignoring removed bh option [ 163.505331][ T7807] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 163.585827][ T4593] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 163.594961][ T4593] usb 3-1: config 0 interface 0 has no altsetting 0 [ 163.629844][ T4266] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 163.662472][ T4266] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 163.696532][ T7816] device netdevsim0 entered promiscuous mode [ 163.750777][ T7816] device netdevsim0 left promiscuous mode [ 163.767941][ T4593] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 163.788593][ T4593] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 163.807731][ T4593] usb 3-1: Product: syz [ 163.828185][ T4593] usb 3-1: Manufacturer: syz [ 163.846014][ T4593] usb 3-1: SerialNumber: syz [ 163.893377][ T4593] usb 3-1: config 0 descriptor?? [ 163.957472][ T4593] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 163.965442][ T4593] pctv452e: pctv452e_power_ctrl: 1 [ 163.965442][ T4593] [ 164.146725][ T7833] loop4: detected capacity change from 0 to 4096 [ 164.185723][ T4593] dvb-usb: bulk message failed: -22 (5/0) [ 164.219188][ T4593] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 164.247722][ T4593] dvb-usb: Technotrend TT Connect S2-3600 error while loading driver (-19) [ 164.315697][ T6155] Bluetooth: hci4: command 0x0407 tx timeout [ 164.389522][ T4593] usb 3-1: USB disconnect, device number 10 [ 164.483142][ T7831] loop3: detected capacity change from 0 to 32768 [ 164.492215][ T4585] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 164.518602][ T4585] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.654935][ T7831] XFS (loop3): Mounting V5 Filesystem [ 164.811065][ T7831] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 164.909811][ T7831] XFS (loop3): Starting recovery (logdev: internal) [ 164.928226][ T7831] XFS (loop3): Ending recovery (logdev: internal) [ 165.000472][ T7865] netlink: 7 bytes leftover after parsing attributes in process `syz.2.1332'. [ 165.028823][ T4190] XFS (loop3): Unmounting Filesystem [ 165.130150][ T4266] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 165.194687][ T7867] IPv6: addrconf: prefix option has invalid lifetime [ 165.298456][ T7872] loop2: detected capacity change from 0 to 128 [ 165.405870][ T4266] usb 5-1: Using ep0 maxpacket: 8 [ 165.559721][ T4266] usb 5-1: config 129 has an invalid interface number: 188 but max is 0 [ 165.576144][ T4266] usb 5-1: config 129 has no interface number 0 [ 165.592672][ T4266] usb 5-1: config 129 interface 188 altsetting 64 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 165.641094][ T4266] usb 5-1: config 129 interface 188 has no altsetting 0 [ 165.706114][ T7895] netlink: 'syz.1.1345': attribute type 1 has an invalid length. [ 165.837149][ T4266] usb 5-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=28.a9 [ 165.861950][ T4266] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.913745][ T4266] usb 5-1: Product: syz [ 165.925225][ T4266] usb 5-1: Manufacturer: syz [ 165.950188][ T4266] usb 5-1: SerialNumber: syz [ 166.072767][ T7916] loop3: detected capacity change from 0 to 512 [ 166.158385][ T7916] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 3: comm syz.3.1342: lblock 0 mapped to illegal pblock 3 (length 1) [ 166.195059][ T7916] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.1342: error -117 reading directory block [ 166.259715][ T4266] usb 5-1: USB disconnect, device number 14 [ 166.278134][ T7909] loop1: detected capacity change from 0 to 32768 [ 166.284999][ T7916] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 166.293381][ T7916] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,nolazytime,auto_da_alloc=0x0000000000000004,jqfmt=vfsold,nolazytime,grpjquota=.nouid32,resuid=0x0000000000000000,barrier=0x0000000000000ffc,grpid,,,errors=continue. Quota mode: writeback. [ 166.354023][ T7926] loop2: detected capacity change from 0 to 1024 [ 166.376351][ T7909] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1362 (7909) [ 166.396281][ T7926] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 166.403500][ T7926] EXT4-fs (loop2): inline encryption not supported [ 166.423627][ T7909] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 166.449941][ T7909] BTRFS info (device loop1): setting nodatasum [ 166.475179][ T7909] BTRFS info (device loop1): force zlib compression, level 3 [ 166.487269][ T7926] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 166.545364][ T7909] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 166.578675][ T7909] BTRFS info (device loop1): use lzo compression, level 0 [ 166.586389][ T7909] BTRFS info (device loop1): turning on flush-on-commit [ 166.593493][ T7909] BTRFS info (device loop1): enabling auto defrag [ 166.600603][ T7909] BTRFS info (device loop1): max_inline at 4096 [ 166.607942][ T7909] BTRFS info (device loop1): using free space tree [ 166.636163][ T7909] BTRFS info (device loop1): has skinny extents [ 166.676626][ T7926] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 166.793510][ T7947] loop3: detected capacity change from 0 to 1024 [ 166.866848][ T7947] EXT4-fs (loop3): inline encryption not supported [ 166.873537][ T7947] EXT4-fs (loop3): Ignoring removed bh option [ 167.040993][ T7947] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,barrier,nodelalloc,inlinecrypt,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: none. [ 167.124763][ T7909] BTRFS info (device loop1): enabling ssd optimizations [ 167.255772][ T4266] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 167.685944][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.710615][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.730903][ T4266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.754266][ T4266] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.779763][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.802236][ T4266] usb 3-1: config 0 descriptor?? [ 168.089704][ T8007] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.1381'. [ 168.203023][ T8014] (syz.0.1384,8014,1):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 168.289225][ T8020] program syz.1.1385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.300504][ T4266] plantronics 0003:047F:FFFF.001A: unbalanced delimiter at end of report description [ 168.324309][ T4266] plantronics 0003:047F:FFFF.001A: parse failed [ 168.341063][ T4266] plantronics: probe of 0003:047F:FFFF.001A failed with error -22 [ 168.422718][ T8030] set_capacity_and_notify: 1 callbacks suppressed [ 168.422731][ T8030] loop1: detected capacity change from 0 to 512 [ 168.515080][ T4266] usb 3-1: USB disconnect, device number 11 [ 168.533776][ T8030] EXT4-fs error (device loop1): ext4_orphan_get:1406: inode #15: comm syz.1.1402: inode has both inline data and extents flags [ 168.705402][ T8030] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.1402: couldn't read orphan inode 15 (err -117) [ 168.741378][ T8030] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.865848][ T8031] loop4: detected capacity change from 0 to 32768 [ 168.901163][ T8046] loop3: detected capacity change from 0 to 1024 [ 168.951465][ T8046] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 168.981744][ T8046] EXT4-fs (loop3): inline encryption not supported [ 169.050057][ T8058] (syz.1.1400,8058,0):dlmfs_mkdir:413 ERROR: invalid domain name for directory. [ 169.074047][ T8046] EXT4-fs (loop3): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 169.119301][ T8031] XFS (loop4): Mounting V5 Filesystem [ 169.224980][ T8068] loop1: detected capacity change from 0 to 256 [ 169.258106][ T8031] XFS (loop4): Ending clean mount [ 169.303716][ T8031] XFS (loop4): Quotacheck needed: Please wait. [ 169.323635][ T8068] FAT-fs (loop1): Directory bread(block 64) failed [ 169.343748][ T8068] FAT-fs (loop1): Directory bread(block 65) failed [ 169.395319][ T8068] FAT-fs (loop1): Directory bread(block 66) failed [ 169.422008][ T8074] loop2: detected capacity change from 0 to 1024 [ 169.426736][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.435654][ T8068] FAT-fs (loop1): Directory bread(block 67) failed [ 169.436253][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.442339][ T8068] FAT-fs (loop1): Directory bread(block 68) failed [ 169.442374][ T8068] FAT-fs (loop1): Directory bread(block 69) failed [ 169.442437][ T8068] FAT-fs (loop1): Directory bread(block 70) failed [ 169.442462][ T8068] FAT-fs (loop1): Directory bread(block 71) failed [ 169.442532][ T8068] FAT-fs (loop1): Directory bread(block 72) failed [ 169.450714][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.491102][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.493022][ T8068] FAT-fs (loop1): Directory bread(block 73) failed [ 169.498988][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.513141][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.521308][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.529147][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.537690][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.544434][ T8074] EXT4-fs (loop2): inline encryption not supported [ 169.553701][ T8074] EXT4-fs (loop2): Ignoring removed bh option [ 169.556997][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.567514][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.575009][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.583001][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.585848][ T8074] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,barrier,nodelalloc,inlinecrypt,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: none. [ 169.594151][ T4593] hid-generic 0000:0004:261D.001B: unknown main item tag 0x0 [ 169.626489][ T8031] XFS (loop4): Quotacheck: Done. [ 169.638274][ T4593] hid-generic 0000:0004:261D.001B: hidraw0: HID v0.03 Device [syz1] on syz0 [ 169.799088][ T4199] XFS (loop4): Unmounting Filesystem [ 169.920618][ T8080] fido_id[8080]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 169.991248][ T8086] loop1: detected capacity change from 0 to 1024 [ 170.164201][ T8094] netlink: 'syz.3.1416': attribute type 1 has an invalid length. [ 170.192919][ T8094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1416'. [ 170.565788][ T4595] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 170.581795][ T8115] loop3: detected capacity change from 0 to 512 [ 170.674163][ T8115] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.1425: inode has both inline data and extents flags [ 170.711730][ T8115] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.1425: couldn't read orphan inode 15 (err -117) [ 170.780643][ T8115] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.805736][ T4595] usb 1-1: Using ep0 maxpacket: 8 [ 170.876287][ T8107] loop1: detected capacity change from 0 to 32768 [ 170.930334][ T4595] usb 1-1: config 129 has an invalid interface number: 188 but max is 0 [ 170.939322][ T4595] usb 1-1: config 129 has no interface number 0 [ 170.950059][ T4595] usb 1-1: config 129 interface 188 altsetting 64 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 170.961690][ T4595] usb 1-1: config 129 interface 188 has no altsetting 0 [ 171.125919][ T4595] usb 1-1: New USB device found, idVendor=061c, idProduct=c084, bcdDevice=28.a9 [ 171.135055][ T4595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.175327][ T4595] usb 1-1: Product: syz [ 171.190796][ T4595] usb 1-1: Manufacturer: syz [ 171.199962][ T4595] usb 1-1: SerialNumber: syz [ 171.205821][ T6156] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 171.225021][ T8136] loop3: detected capacity change from 0 to 1024 [ 171.264990][ T8138] loop1: detected capacity change from 0 to 1024 [ 171.345087][ T8138] EXT4-fs (loop1): inline encryption not supported [ 171.359936][ T8138] EXT4-fs (loop1): Ignoring removed bh option [ 171.412959][ T8138] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,barrier,nodelalloc,inlinecrypt,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: none. [ 171.504664][ T4595] usb 1-1: USB disconnect, device number 20 [ 171.617126][ T6156] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 171.628657][ T6156] usb 5-1: config 220 descriptor has 1 excess byte, ignoring [ 171.660175][ T6156] usb 5-1: config 220 has no interface number 2 [ 171.673919][ T6156] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 171.700491][ T6156] usb 5-1: config 220 interface 0 has no altsetting 0 [ 171.727893][ T6156] usb 5-1: config 220 interface 76 has no altsetting 0 [ 171.734805][ T6156] usb 5-1: config 220 interface 1 has no altsetting 0 [ 171.945762][ T6156] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 171.954973][ T6156] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.963485][ T6156] usb 5-1: Product: syz [ 171.968039][ T6156] usb 5-1: Manufacturer: syz [ 171.972658][ T6156] usb 5-1: SerialNumber: syz [ 172.055751][ T5529] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 172.305919][ T5529] usb 4-1: Using ep0 maxpacket: 16 [ 172.376003][ T6156] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 172.382404][ T6156] usb 5-1: No valid video chain found. [ 172.400009][ T6156] usb 5-1: selecting invalid altsetting 0 [ 172.425952][ T5529] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.451071][ T5529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.468793][ T5529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 172.507614][ T6156] usb 5-1: selecting invalid altsetting 0 [ 172.518395][ T5529] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 172.525648][ T6156] usbtest: probe of 5-1:220.1 failed with error -22 [ 172.531720][ T5529] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.550654][ T6156] usb 5-1: USB disconnect, device number 15 [ 172.625862][ T5529] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 172.642944][ T5529] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 172.668338][ T5529] usb 4-1: Manufacturer: syz [ 172.694948][ T5529] usb 4-1: config 0 descriptor?? [ 173.016835][ T5529] rc_core: IR keymap rc-hauppauge not found [ 173.022767][ T5529] Registered IR keymap rc-empty [ 173.028018][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.066245][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.096343][ T5529] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 173.113265][ T5529] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input31 [ 173.132479][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.165772][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.196146][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.225811][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.256082][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.287634][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.315712][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.347787][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.375696][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.406082][ T5529] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 173.437745][ T5529] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 173.447072][ T5529] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 173.714011][ T8206] set_capacity_and_notify: 2 callbacks suppressed [ 173.714026][ T8206] loop1: detected capacity change from 0 to 512 [ 173.733815][ T8208] loop4: detected capacity change from 0 to 128 [ 173.741725][ T21] usb 4-1: USB disconnect, device number 12 [ 173.807485][ T8208] FAT-fs (loop4): Directory bread(block 162) failed [ 173.825836][ T8208] FAT-fs (loop4): Directory bread(block 163) failed [ 173.827067][ T8206] EXT4-fs (loop1): orphan cleanup on readonly fs [ 173.832680][ T8208] FAT-fs (loop4): Directory bread(block 164) failed [ 173.865703][ T8208] FAT-fs (loop4): Directory bread(block 165) failed [ 173.890500][ T8208] FAT-fs (loop4): Directory bread(block 166) failed [ 173.918440][ T8206] EXT4-fs (loop1): 1 orphan inode deleted [ 173.924216][ T8206] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.941549][ T8208] FAT-fs (loop4): Directory bread(block 167) failed [ 173.959244][ T8208] FAT-fs (loop4): Directory bread(block 168) failed [ 174.006892][ T8208] FAT-fs (loop4): Directory bread(block 169) failed [ 174.023811][ T8208] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.056791][ T8202] loop2: detected capacity change from 0 to 32768 [ 174.097677][ T8202] XFS (loop2): Mounting V5 Filesystem [ 174.148249][ T8208] FAT-fs (loop4): Directory bread(block 162) failed [ 174.161980][ T8208] FAT-fs (loop4): Directory bread(block 163) failed [ 174.172144][ T8208] attempt to access beyond end of device [ 174.172144][ T8208] loop4: rw=3, want=232, limit=128 [ 174.183328][ T8208] attempt to access beyond end of device [ 174.183328][ T8208] loop4: rw=2051, want=234, limit=128 [ 174.228112][ T8202] XFS (loop2): Ending clean mount [ 174.361445][ T8202] XFS (loop2): Quotacheck needed: Please wait. [ 174.496231][ T8202] XFS (loop2): Quotacheck: Done. [ 174.592042][ T4188] XFS (loop2): Unmounting Filesystem [ 174.635887][ T5529] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 174.815633][ T6156] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 174.988109][ T8242] loop4: detected capacity change from 0 to 256 [ 175.003926][ T8242] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 175.025768][ T5529] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 175.034215][ T5529] usb 4-1: config 220 descriptor has 1 excess byte, ignoring [ 175.062765][ T5529] usb 4-1: config 220 has no interface number 2 [ 175.091654][ T5529] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 175.107044][ T6156] usb 2-1: Using ep0 maxpacket: 16 [ 175.118357][ T8242] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 175.140864][ T5529] usb 4-1: config 220 interface 0 has no altsetting 0 [ 175.175080][ T5529] usb 4-1: config 220 interface 76 has no altsetting 0 [ 175.191046][ T5529] usb 4-1: config 220 interface 1 has no altsetting 0 [ 175.245977][ T6156] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.267716][ T6156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 175.289699][ T6156] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 175.307898][ T6156] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 175.318250][ T6156] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 175.375774][ T5529] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 175.395394][ T5529] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.411423][ T6156] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 175.430142][ T6156] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 175.440639][ T5529] usb 4-1: Product: syz [ 175.461133][ T6156] usb 2-1: Manufacturer: syz [ 175.466691][ T5529] usb 4-1: Manufacturer: syz [ 175.471314][ T5529] usb 4-1: SerialNumber: syz [ 175.480084][ T8263] input: syz1 as /devices/virtual/input/input32 [ 175.482190][ T6156] usb 2-1: config 0 descriptor?? [ 175.727755][ T8267] loop2: detected capacity change from 0 to 32768 [ 175.836743][ T8267] XFS (loop2): Mounting V5 Filesystem [ 175.843544][ T8268] netlink: 'syz.0.1489': attribute type 21 has an invalid length. [ 175.855955][ T5529] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 175.862524][ T5529] usb 4-1: No valid video chain found. [ 175.868546][ T5529] usb 4-1: selecting invalid altsetting 0 [ 175.876576][ T8268] netlink: 'syz.0.1489': attribute type 7 has an invalid length. [ 175.888876][ T6156] rc_core: IR keymap rc-hauppauge not found [ 175.902356][ T6156] Registered IR keymap rc-empty [ 175.907707][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.935719][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 175.956710][ T5529] usb 4-1: selecting invalid altsetting 0 [ 175.963861][ T5529] usbtest: probe of 4-1:220.1 failed with error -22 [ 175.966954][ T8267] XFS (loop2): Ending clean mount [ 175.973404][ T5529] usb 4-1: USB disconnect, device number 13 [ 175.983186][ T6156] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 175.991904][ T8267] XFS (loop2): Quotacheck needed: Please wait. [ 175.999871][ T6156] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 176.026196][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.062936][ T8267] XFS (loop2): Quotacheck: Done. [ 176.065896][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.111128][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.138050][ T4188] XFS (loop2): Unmounting Filesystem [ 176.161713][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.212052][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.256819][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.295814][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.346400][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.376545][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.419380][ T6156] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 176.499178][ T6156] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 176.509999][ T8286] loop4: detected capacity change from 0 to 1024 [ 176.530077][ T6156] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 176.581110][ T6156] usb 2-1: USB disconnect, device number 15 [ 176.604868][ T8286] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 176.713837][ T8286] EXT4-fs (loop4): shut down requested (0) [ 177.004507][ T8314] loop3: detected capacity change from 0 to 1024 [ 177.014126][ T8316] loop2: detected capacity change from 0 to 256 [ 177.082422][ T8316] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.124113][ T8316] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 177.200141][ T8314] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.344701][ T8320] loop4: detected capacity change from 0 to 4096 [ 177.363615][ T8314] EXT4-fs (loop3): shut down requested (0) [ 177.369823][ T8328] input: syz1 as /devices/virtual/input/input34 [ 177.388333][ T8330] tap0: tun_chr_ioctl cmd 2147767506 [ 177.546806][ T8320] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 178.123146][ T8332] loop2: detected capacity change from 0 to 32768 [ 178.269834][ T8332] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 178.391356][ T26] audit: type=1800 audit(2000000013.059:74): pid=8332 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1510" name="file2" dev="loop2" ino=17058 res=0 errno=0 [ 178.445622][ T4236] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 178.505110][ T4188] ocfs2: Unmounting device (7,2) on (node local) [ 178.735619][ T4236] usb 5-1: Using ep0 maxpacket: 16 [ 178.866127][ T8369] loop3: detected capacity change from 0 to 4096 [ 178.875943][ T4236] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.906731][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.935135][ T4236] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 178.987270][ T4236] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 179.011740][ T4236] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.035468][ T8381] loop1: detected capacity change from 0 to 128 [ 179.146048][ T4236] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.179267][ T4236] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.212741][ T4236] usb 5-1: Manufacturer: syz [ 179.239811][ T4236] usb 5-1: config 0 descriptor?? [ 179.615577][ T4236] rc_core: IR keymap rc-hauppauge not found [ 179.623449][ T4236] Registered IR keymap rc-empty [ 179.634057][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.685698][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.726341][ T4236] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 179.750529][ T4236] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input36 [ 179.795736][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.845759][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.875662][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.935747][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 179.965641][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.015700][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.065804][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.108277][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.161089][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.215717][ T4236] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 180.230490][ T26] audit: type=1326 audit(2000000014.899:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 180.285379][ T26] audit: type=1326 audit(2000000014.929:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 180.323511][ T8410] loop1: detected capacity change from 0 to 256 [ 180.324526][ T4236] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 180.364256][ T4236] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 180.391285][ T4236] usb 5-1: USB disconnect, device number 16 [ 180.398830][ T26] audit: type=1326 audit(2000000014.949:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 180.427413][ T8410] exfat: Deprecated parameter 'utf8' [ 180.432820][ T8410] exfat: Deprecated parameter 'utf8' [ 180.462052][ T8410] exfat: Deprecated parameter 'utf8' [ 180.500375][ T26] audit: type=1326 audit(2000000014.949:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 180.534867][ T8410] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x117c3960, utbl_chksum : 0xe619d30d) [ 180.610868][ T26] audit: type=1326 audit(2000000014.959:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46094a4bc2 code=0x7ffc0000 [ 180.795580][ T26] audit: type=1326 audit(2000000014.959:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f460946568e code=0x7ffc0000 [ 180.852681][ T8435] loop4: detected capacity change from 0 to 1024 [ 180.893015][ T26] audit: type=1326 audit(2000000014.959:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f46094a4c87 code=0x7ffc0000 [ 180.999361][ T8443] loop2: detected capacity change from 0 to 256 [ 181.021883][ T26] audit: type=1326 audit(2000000014.959:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f460946568e code=0x7ffc0000 [ 181.074250][ T8443] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 181.078752][ T6156] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 181.105778][ T6156] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 181.123553][ T26] audit: type=1326 audit(2000000014.989:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8408 comm="syz.1.1545" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f46094a4aeb code=0x7ffc0000 [ 181.185771][ T4585] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 181.265607][ T4593] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 181.324062][ T803] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.341888][ T8450] fido_id[8450]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 181.506547][ T4593] usb 2-1: Using ep0 maxpacket: 32 [ 181.626137][ T4593] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 181.636486][ T4593] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 181.647556][ T4593] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 181.666000][ T4593] usb 2-1: config 1 has no interface number 0 [ 181.672449][ T4593] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 181.705817][ T4585] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 181.720869][ T4593] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 181.735603][ T4585] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.743777][ T4585] usb 4-1: Product: syz [ 181.756181][ T4593] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 181.765399][ T4585] usb 4-1: Manufacturer: syz [ 181.770438][ T4585] usb 4-1: SerialNumber: syz [ 181.775118][ T4593] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.785335][ T4585] usb 4-1: config 0 descriptor?? [ 181.828200][ T4585] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 181.838232][ T4593] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 181.998676][ T8469] loop4: detected capacity change from 0 to 32768 [ 182.050811][ T8469] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1572 (8469) [ 182.082657][ T8469] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 182.105803][ T8469] BTRFS info (device loop4): turning on sync discard [ 182.129319][ T8469] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 182.168828][ T8469] BTRFS info (device loop4): use zstd compression, level 3 [ 182.188906][ T8469] BTRFS info (device loop4): turning on async discard [ 182.209613][ T8469] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 182.221187][ T8469] BTRFS info (device loop4): trying to use backup root at mount time [ 182.232306][ T8469] BTRFS info (device loop4): enabling auto defrag [ 182.239929][ T8469] BTRFS info (device loop4): using free space tree [ 182.250309][ T8469] BTRFS info (device loop4): has skinny extents [ 182.294543][ T144] BTRFS warning (device loop4): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 182.307815][ T8469] BTRFS warning (device loop4): failed to read root (objectid=2): -5 [ 182.319922][ T4281] BTRFS warning (device loop4): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 182.335327][ T8469] BTRFS warning (device loop4): couldn't read tree root [ 182.345159][ T8469] BTRFS error (device loop4): parent transid verify failed on 5255168 wanted 5 found 7 [ 182.356680][ T8469] BTRFS warning (device loop4): couldn't read tree root [ 182.396416][ T4593] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 182.423511][ T8469] BTRFS info (device loop4): clearing free space tree [ 182.441345][ T8469] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.480545][ T8469] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.522476][ T8469] BTRFS info (device loop4): creating free space tree [ 182.530929][ T8503] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 182.532646][ T8469] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 182.547115][ T8469] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 182.561476][ T8503] syzkaller1: linktype set to 785 [ 182.653604][ T6156] usb 2-1: USB disconnect, device number 16 [ 182.666932][ T6156] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 182.702050][ T4595] usb 4-1: USB disconnect, device number 14 [ 182.756908][ T4585] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 183.135785][ T4585] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.154718][ T4585] usb 3-1: config 0 has no interface number 0 [ 183.161332][ T4585] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 183.176236][ T4585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.216282][ T4585] usb 3-1: config 0 descriptor?? [ 183.292259][ T4585] usb 3-1: selecting invalid altsetting 1 [ 183.305405][ T8520] loop3: detected capacity change from 0 to 1024 [ 183.309764][ T4585] dvb_ttusb_budget: ttusb_init_controller: error [ 183.325671][ T4585] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 183.423973][ T4585] DVB: Unable to find symbol cx22700_attach() [ 183.471125][ T4585] DVB: Unable to find symbol tda10046_attach() [ 183.482940][ T4585] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 183.512883][ T4585] usb 3-1: USB disconnect, device number 12 [ 183.703121][ T8537] program syz.1.1603 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 183.740794][ T8533] loop3: detected capacity change from 0 to 4096 [ 184.011969][ T8540] loop1: detected capacity change from 0 to 64 [ 184.672243][ T8533] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 184.704147][ T4195] hfs: node 4:3 still has 1 user(s)! [ 184.915680][ T4236] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 185.031971][ T4585] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 185.073236][ T4585] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.516564][ T4236] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 185.531267][ T4236] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.548219][ T4236] usb 5-1: Product: syz [ 185.555646][ T4236] usb 5-1: Manufacturer: syz [ 185.565771][ T4236] usb 5-1: SerialNumber: syz [ 185.583541][ T4236] usb 5-1: config 0 descriptor?? [ 185.650865][ T4236] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 186.061501][ T8590] loop1: detected capacity change from 0 to 256 [ 186.118242][ T8593] loop3: detected capacity change from 0 to 1024 [ 186.155704][ T4595] Bluetooth: hci0: command 0x0406 tx timeout [ 186.162962][ T4595] Bluetooth: hci2: command 0x0406 tx timeout [ 186.165694][ T4266] Bluetooth: hci1: command 0x0406 tx timeout [ 186.180168][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 186.231088][ T8593] EXT4-fs (loop3): Ignoring removed orlov option [ 186.235721][ T4585] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 186.248156][ T8590] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 186.271697][ T8593] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 186.278938][ T8590] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 186.318846][ T8590] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 186.394611][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 186.394624][ T26] audit: type=1800 audit(2000000021.059:107): pid=8590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1628" name="file1" dev="loop1" ino=1048667 res=0 errno=0 [ 186.438710][ T8593] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,bsddf,nombcache,norecovery,i_version,orlov,resgid=0x0000000000000000,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 186.504090][ T4266] usb 5-1: USB disconnect, device number 17 [ 186.505770][ T4585] usb 1-1: Using ep0 maxpacket: 32 [ 186.635796][ T4585] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 186.658570][ T8604] openvswitch: netlink: Actions may not be safe on all matching packets [ 186.661519][ T4585] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 186.694664][ T4585] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 186.729570][ T4585] usb 1-1: config 1 has no interface number 0 [ 186.756799][ T4585] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.803772][ T4585] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 186.843150][ T4585] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 186.853515][ T4585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.915144][ T8619] loop1: detected capacity change from 0 to 128 [ 186.924745][ T4585] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 187.106925][ T8619] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 187.170838][ T8619] hpfs: filesystem error: improperly stopped [ 187.215760][ T8619] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 187.223585][ T8619] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 187.252468][ T8619] hpfs: You really don't want any checks? You are crazy... [ 187.269620][ T8619] hpfs: hpfs_map_sector(): read error [ 187.304417][ T8619] hpfs: code page support is disabled [ 187.316092][ T8619] hpfs: hpfs_map_4sectors(): unaligned read [ 187.329865][ T8619] hpfs: hpfs_map_4sectors(): unaligned read [ 187.352262][ T8619] hpfs: filesystem error: unable to find root dir [ 187.501097][ T4585] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 187.592985][ T8624] loop2: detected capacity change from 0 to 32768 [ 187.739230][ T4585] usb 1-1: USB disconnect, device number 21 [ 187.756601][ T4585] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 187.806109][ T8624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1642 (8624) [ 187.873931][ T8624] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 187.894238][ T8637] loop4: detected capacity change from 0 to 32768 [ 187.914375][ T8624] BTRFS info (device loop2): turning on sync discard [ 187.935668][ T8624] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 187.970849][ T8624] BTRFS info (device loop2): use zstd compression, level 3 [ 187.977527][ T8637] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 187.982316][ T8624] BTRFS info (device loop2): turning on async discard [ 187.994682][ T8624] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 188.007058][ T8624] BTRFS info (device loop2): trying to use backup root at mount time [ 188.015165][ T8624] BTRFS info (device loop2): enabling auto defrag [ 188.025842][ T8624] BTRFS info (device loop2): using free space tree [ 188.032392][ T8624] BTRFS info (device loop2): has skinny extents [ 188.073396][ T26] audit: type=1326 audit(2000000022.739:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 188.118149][ T8644] loop1: detected capacity change from 0 to 512 [ 188.124657][ T26] audit: type=1326 audit(2000000022.769:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 188.140560][ T8637] (syz.4.1636,8637,1):ocfs2_double_lock:1188 ERROR: status = -2 [ 188.159164][ T26] audit: type=1326 audit(2000000022.769:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 188.191358][ T26] audit: type=1326 audit(2000000022.769:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 188.286943][ T8644] EXT4-fs (loop1): 1 truncate cleaned up [ 188.292651][ T8644] EXT4-fs (loop1): mounted filesystem without journal. Opts: prjquota,grpquota,debug_want_extra_isize=0x000000000000005c,sysvgroups,lazytime,errors=continue,grpjquota=,,errors=continue. Quota mode: writeback. [ 188.359063][ T26] audit: type=1326 audit(2000000022.769:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f46094a4e59 code=0x7ffc0000 [ 188.384304][ T4199] ocfs2: Unmounting device (7,4) on (node local) [ 188.423727][ T26] audit: type=1326 audit(2000000022.769:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f46094a4bc2 code=0x7ffc0000 [ 188.462043][ T7417] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 188.496957][ T8624] BTRFS warning (device loop2): failed to read root (objectid=2): -5 [ 188.526511][ T7417] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 188.542877][ T8624] BTRFS warning (device loop2): couldn't read tree root [ 188.551133][ T8624] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7 [ 188.561225][ T8624] BTRFS warning (device loop2): couldn't read tree root [ 188.579208][ T8624] BTRFS info (device loop2): clearing free space tree [ 188.585684][ T26] audit: type=1326 audit(2000000022.779:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f460946568e code=0x7ffc0000 [ 188.591304][ T8624] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.651080][ T8624] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.704511][ T8624] BTRFS info (device loop2): creating free space tree [ 188.711811][ T4266] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 188.715738][ T26] audit: type=1326 audit(2000000022.789:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f46094a4c87 code=0x7ffc0000 [ 188.733675][ T8624] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 188.782798][ T8624] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 188.844907][ T26] audit: type=1326 audit(2000000022.789:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8641 comm="syz.1.1638" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f460946568e code=0x7ffc0000 [ 188.973835][ T8679] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 188.997214][ T4266] usb 1-1: Using ep0 maxpacket: 8 [ 189.021812][ T8679] syzkaller1: linktype set to 785 [ 189.054365][ T8684] loop4: detected capacity change from 0 to 128 [ 189.112131][ T8684] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only [ 189.133773][ T4266] usb 1-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 189.160632][ T4266] usb 1-1: config 0 interface 0 has no altsetting 0 [ 189.202070][ T4266] usb 1-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 189.211949][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.220252][ T8684] hpfs: filesystem error: improperly stopped [ 189.220274][ T8684] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 189.220290][ T8684] hpfs: Proceeding, but your filesystem could be corrupted if you delete files or directories [ 189.220299][ T8684] hpfs: You really don't want any checks? You are crazy... [ 189.220532][ T8684] hpfs: hpfs_map_sector(): read error [ 189.242532][ T4266] usb 1-1: config 0 descriptor?? [ 189.270304][ T8684] hpfs: code page support is disabled [ 189.296261][ T8684] hpfs: hpfs_map_4sectors(): unaligned read [ 189.302254][ T8684] hpfs: hpfs_map_4sectors(): unaligned read [ 189.350192][ T8684] hpfs: filesystem error: unable to find root dir [ 189.800262][ T4266] wacom 0003:056A:00E3.001E: unknown main item tag 0x7 [ 189.816584][ T4266] wacom 0003:056A:00E3.001E: unknown main item tag 0x0 [ 189.823525][ T4266] wacom 0003:056A:00E3.001E: unknown main item tag 0x1 [ 189.845658][ T6155] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 189.853332][ T4266] wacom 0003:056A:00E3.001E: unknown main item tag 0xd [ 189.868447][ T4266] wacom 0003:056A:00E3.001E: hidraw0: USB HID v0.77 Device [HID 056a:00e3] on usb-dummy_hcd.0-1/input0 [ 189.875699][ T4595] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 190.021076][ T2302] usb 1-1: USB disconnect, device number 22 [ 190.105890][ T6155] usb 4-1: Using ep0 maxpacket: 16 [ 190.125659][ T4595] usb 3-1: Using ep0 maxpacket: 32 [ 190.245732][ T4595] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 190.259417][ T4595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.282156][ T4595] usb 3-1: config 0 descriptor?? [ 190.445753][ T6155] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 190.454823][ T6155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.475914][ T6155] usb 4-1: Product: syz [ 190.480123][ T6155] usb 4-1: Manufacturer: syz [ 190.484728][ T6155] usb 4-1: SerialNumber: syz [ 190.511155][ T6155] r8152-cfgselector 4-1: config 0 descriptor?? [ 190.546126][ T4595] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 190.573353][ T4595] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.611118][ T4595] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 190.618951][ T4595] usb 3-1: media controller created [ 190.632382][ T4595] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.765756][ T4595] az6027: usb out operation failed. (-71) [ 190.775894][ T6155] r8152-cfgselector 4-1: Unknown version 0x0000 [ 190.785771][ T4595] az6027: usb out operation failed. (-71) [ 190.791520][ T4595] stb0899_attach: Driver disabled by Kconfig [ 190.803016][ T4595] az6027: no front-end attached [ 190.803016][ T4595] [ 190.825744][ T4595] az6027: usb out operation failed. (-71) [ 190.831760][ T4595] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 190.847494][ T4595] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input40 [ 190.860258][ T4595] dvb-usb: schedule remote query interval to 400 msecs. [ 190.867367][ T4595] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 190.889741][ T4595] usb 3-1: USB disconnect, device number 13 [ 190.910623][ T4595] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 191.036025][ T6155] r8152-cfgselector 4-1: Unknown version 0x0000 [ 191.046770][ T6155] r8152-cfgselector 4-1: USB disconnect, device number 15 [ 191.345867][ T8707] device batadv0 entered promiscuous mode [ 191.354123][ T8707] device macvlan1 entered promiscuous mode [ 191.368422][ T8707] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 191.378797][ T8707] Cannot create hsr debugfs directory [ 191.388903][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 191.575636][ T2302] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 191.578406][ T8718] loop3: detected capacity change from 0 to 512 [ 191.667362][ T4595] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 191.687838][ T8718] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 191.709604][ T8718] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 191.722735][ T8726] loop4: detected capacity change from 0 to 64 [ 191.775633][ T4585] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 191.825936][ T2302] usb 3-1: Using ep0 maxpacket: 32 [ 191.912799][ T4595] usb 2-1: Using ep0 maxpacket: 32 [ 191.945868][ T2302] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 191.961970][ T2302] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 191.972856][ T2302] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 191.992659][ T2302] usb 3-1: config 1 has no interface number 0 [ 191.999708][ T2302] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.010073][ T8728] loop3: detected capacity change from 0 to 1024 [ 192.017179][ T2302] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 192.033429][ T2302] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 192.049255][ T4595] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 192.062384][ T4585] usb 1-1: Using ep0 maxpacket: 32 [ 192.073681][ T2302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.082605][ T4595] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has invalid wMaxPacketSize 0 [ 192.094739][ T4595] usb 2-1: config 0 interface 0 has no altsetting 0 [ 192.102753][ T4595] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 192.105384][ T8728] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.128143][ T2302] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 192.135043][ T8728] ext4 filesystem being mounted at /384/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.155653][ T4595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.200058][ T4595] usb 2-1: config 0 descriptor?? [ 192.211192][ T4585] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 192.228990][ T4199] hfs: node 4:3 still has 1 user(s)! [ 192.250026][ T4585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.268582][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 192.268597][ T26] audit: type=1800 audit(2000000026.939:141): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1668" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 192.295621][ T8724] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 192.303797][ T8728] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1668: bg 0: block 112: padding at end of block bitmap is not set [ 192.343878][ T4585] usb 1-1: config 0 descriptor?? [ 192.605943][ T4585] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 192.624608][ T4585] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 192.655974][ T4585] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 192.663161][ T4585] usb 1-1: media controller created [ 192.687325][ T2302] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 192.697316][ T4595] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 192.722412][ T4585] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 192.732950][ T4595] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 192.746908][ T4595] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 192.764596][ T4595] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 192.773400][ T4595] corsair-psu 0003:1B1C:1C09.001F: unknown main item tag 0x0 [ 192.787475][ T4595] corsair-psu 0003:1B1C:1C09.001F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 192.827819][ T4585] az6027: usb out operation failed. (-71) [ 192.847879][ T4585] az6027: usb out operation failed. (-71) [ 192.853650][ T4585] stb0899_attach: Driver disabled by Kconfig [ 192.865729][ T4595] corsair-psu 0003:1B1C:1C09.001F: unable to initialize device (-90) [ 192.896960][ T4595] corsair-psu: probe of 0003:1B1C:1C09.001F failed with error -90 [ 192.906526][ T4585] az6027: no front-end attached [ 192.906526][ T4585] [ 192.925726][ T4585] az6027: usb out operation failed. (-71) [ 192.933229][ T6155] usb 3-1: USB disconnect, device number 14 [ 192.939452][ T4585] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 192.948448][ T6155] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 192.963960][ T4585] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input41 [ 192.979570][ T4585] dvb-usb: schedule remote query interval to 400 msecs. [ 192.992610][ T4585] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 193.030516][ T4585] usb 1-1: USB disconnect, device number 23 [ 193.060839][ T4585] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 193.109491][ T8689] usb 2-1: USB disconnect, device number 17 [ 193.566501][ T8750] device batadv0 entered promiscuous mode [ 193.573097][ T8750] device macvlan1 entered promiscuous mode [ 193.580404][ T8750] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 193.591813][ T8750] Cannot create hsr debugfs directory [ 193.598593][ T8752] loop4: detected capacity change from 0 to 1024 [ 193.604000][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 193.654088][ T8752] EXT4-fs (loop4): Ignoring removed orlov option [ 193.699672][ T8752] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.777844][ T8760] loop3: detected capacity change from 0 to 256 [ 193.785774][ T4585] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 193.798641][ T8752] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,bsddf,nombcache,norecovery,i_version,orlov,resgid=0x0000000000000000,noauto_da_alloc,grpjquota=,,errors=continue. Quota mode: none. [ 193.820736][ T8764] loop1: detected capacity change from 0 to 256 [ 193.864106][ T8760] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 193.916071][ T8760] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 193.976852][ T8760] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 194.041686][ T4585] usb 3-1: Using ep0 maxpacket: 8 [ 194.088952][ T26] audit: type=1800 audit(2000000028.759:142): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1689" name="file1" dev="loop3" ino=1048669 res=0 errno=0 [ 194.175898][ T4585] usb 3-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.214502][ T4585] usb 3-1: config 0 interface 0 has no altsetting 0 [ 194.235357][ T4585] usb 3-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 194.273756][ T4585] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.298000][ T8776] openvswitch: netlink: Actions may not be safe on all matching packets [ 194.326758][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.333108][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.351331][ T4585] usb 3-1: config 0 descriptor?? [ 194.580544][ T8791] program syz.0.1691 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.674383][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1704'. [ 194.684129][ T26] audit: type=1326 audit(2000000029.349:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dab5f4e59 code=0x7ffc0000 [ 194.703833][ T8794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 194.715695][ T26] audit: type=1326 audit(2000000029.359:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dab5f4e59 code=0x7ffc0000 [ 194.728714][ T8794] netlink: 'syz.3.1704': attribute type 18 has an invalid length. [ 194.750350][ T8794] netlink: 'syz.3.1704': attribute type 15 has an invalid length. [ 194.766837][ T8798] netlink: 124 bytes leftover after parsing attributes in process `syz.1.1694'. [ 194.779197][ T26] audit: type=1326 audit(2000000029.359:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4dab5f4e59 code=0x7ffc0000 [ 194.839174][ T4585] wacom 0003:056A:00E3.0020: unknown main item tag 0x7 [ 194.852025][ T4585] wacom 0003:056A:00E3.0020: unknown main item tag 0x0 [ 194.859945][ T26] audit: type=1326 audit(2000000029.359:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4dab5f4e59 code=0x7ffc0000 [ 194.890383][ T4585] wacom 0003:056A:00E3.0020: unknown main item tag 0x1 [ 194.903455][ T4585] wacom 0003:056A:00E3.0020: unknown main item tag 0xd [ 194.913214][ T4585] wacom 0003:056A:00E3.0020: hidraw0: USB HID v0.77 Device [HID 056a:00e3] on usb-dummy_hcd.2-1/input0 [ 194.924767][ T26] audit: type=1326 audit(2000000029.359:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4dab5f4bc2 code=0x7ffc0000 [ 194.962691][ T26] audit: type=1326 audit(2000000029.359:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4dab5b568e code=0x7ffc0000 [ 194.997465][ T26] audit: type=1326 audit(2000000029.359:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4dab5f4c87 code=0x7ffc0000 [ 195.064591][ T4585] usb 3-1: USB disconnect, device number 15 [ 195.079943][ T26] audit: type=1326 audit(2000000029.359:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8799 comm="syz.0.1695" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4dab5b568e code=0x7ffc0000 [ 195.110566][ T8809] fido_id[8809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 196.011965][ T8858] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1721'. [ 196.342216][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1734'. [ 196.510653][ T8892] loop4: detected capacity change from 0 to 512 [ 196.543066][ T8689] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 196.570327][ T8892] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 196.659700][ T8892] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,grpjquota=,nodiscard,dioread_nolock,. Quota mode: writeback. [ 196.675612][ T4595] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 196.689565][ T8892] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.925807][ T4595] usb 2-1: Using ep0 maxpacket: 8 [ 196.966197][ T8689] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.976289][ T8689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.991171][ T8689] usb 4-1: config 0 descriptor?? [ 197.040201][ T8689] cp210x 4-1:0.0: cp210x converter detected [ 197.045893][ T4595] usb 2-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 197.059808][ T4595] usb 2-1: config 0 interface 0 has no altsetting 0 [ 197.066851][ T4595] usb 2-1: New USB device found, idVendor=056a, idProduct=00e3, bcdDevice= 0.00 [ 197.076990][ T4595] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.088357][ T4595] usb 2-1: config 0 descriptor?? [ 197.569578][ T4595] wacom 0003:056A:00E3.0021: unknown main item tag 0x7 [ 197.585621][ T4595] wacom 0003:056A:00E3.0021: unknown main item tag 0x0 [ 197.592600][ T4595] wacom 0003:056A:00E3.0021: unknown main item tag 0x1 [ 197.615641][ T4595] wacom 0003:056A:00E3.0021: unknown main item tag 0xd [ 197.626591][ T4595] wacom 0003:056A:00E3.0021: hidraw0: USB HID v0.77 Device [HID 056a:00e3] on usb-dummy_hcd.1-1/input0 [ 197.687239][ T8689] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 197.708315][ T8689] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 197.761923][ T8689] usb 4-1: cp210x converter now attached to ttyUSB0 [ 197.814828][ T8689] usb 4-1: USB disconnect, device number 16 [ 197.843046][ T4193] usb 2-1: USB disconnect, device number 18 [ 197.863723][ T8689] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.885194][ T8912] device macvtap1 entered promiscuous mode [ 197.909930][ T8689] cp210x 4-1:0.0: device disconnected [ 197.911150][ T8909] fido_id[8909]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00E3.0021/report_descriptor': No such device [ 197.926057][ T8912] device vlan0 entered promiscuous mode [ 197.961318][ T8914] loop2: detected capacity change from 0 to 2048 [ 197.969518][ T8912] device vlan0 left promiscuous mode [ 198.048451][ T8914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.674163][ T8942] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1757'. [ 198.777031][ T8941] loop3: detected capacity change from 0 to 4096 [ 198.884211][ T8928] loop2: detected capacity change from 0 to 32768 [ 198.911411][ T8951] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.964599][ T8952] loop4: detected capacity change from 0 to 2048 [ 199.064526][ T8955] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 199.096539][ T8952] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.158340][ T8962] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 199.334020][ T8968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1768'. [ 199.535426][ T8970] loop1: detected capacity change from 0 to 8192 [ 199.602144][ T8970] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 199.845459][ T8970] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 199.855333][ T8970] FAT-fs (loop1): Filesystem has been set read-only [ 199.867736][ T8970] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 199.876825][ T8970] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 199.940716][ T4195] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 200.315778][ T5529] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 200.545552][ T9023] mmap: syz.2.1792 (9023) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 200.552456][ T9004] loop1: detected capacity change from 0 to 40427 [ 200.570707][ T5529] usb 1-1: Using ep0 maxpacket: 16 [ 200.598718][ T9004] F2FS-fs (loop1): invalid crc value [ 200.639633][ T9004] F2FS-fs (loop1): Found nat_bits in checkpoint [ 200.696094][ T5529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.729470][ T5529] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.765386][ T9004] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 200.775351][ T5529] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.811757][ T5529] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.828280][ T9004] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 200.847551][ T5529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.882209][ T5529] usb 1-1: config 0 descriptor?? [ 200.924432][ T9004] attempt to access beyond end of device [ 200.924432][ T9004] loop1: rw=2049, want=45104, limit=40427 [ 200.989697][ T9045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 201.217914][ T9052] loop2: detected capacity change from 0 to 512 [ 201.290924][ T9052] EXT4-fs (loop2): Test dummy encryption mode enabled [ 201.325706][ T9052] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 201.357860][ T9052] EXT4-fs error (device loop2): ext4_orphan_get:1432: comm syz.2.1801: bad orphan inode 131083 [ 201.373921][ T9052] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,journal_ioprio=0x0000000000000002,norecovery,,errors=continue. Quota mode: none. [ 201.393060][ T5529] microsoft 0003:045E:07DA.0022: ignoring exceeding usage max [ 201.403436][ T5529] microsoft 0003:045E:07DA.0022: unsupported Resolution Multiplier 0 [ 201.414013][ T5529] microsoft 0003:045E:07DA.0022: implement() called with n (152) > 32! (kworker/0:20) [ 201.447076][ T9052] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 201.540529][ T9058] loop4: detected capacity change from 0 to 2048 [ 201.595731][ T5529] microsoft 0003:045E:07DA.0022: unsupported Resolution Multiplier 0 [ 201.608151][ T5529] microsoft 0003:045E:07DA.0022: No inputs registered, leaving [ 201.627731][ T5529] microsoft 0003:045E:07DA.0022: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 201.639743][ T5529] microsoft 0003:045E:07DA.0022: no inputs found [ 201.655923][ T5454] loop4: p3 < > p4 < > [ 201.666026][ T5454] loop4: partition table partially beyond EOD, truncated [ 201.683515][ T5454] loop4: p3 start 4284289 is beyond EOD, truncated [ 201.691658][ T5529] microsoft 0003:045E:07DA.0022: could not initialize ff, continuing anyway [ 201.772018][ T9058] loop4: p3 < > p4 < > [ 201.779489][ T9058] loop4: partition table partially beyond EOD, truncated [ 201.796206][ T9058] loop4: p3 start 4284289 is beyond EOD, truncated [ 201.849008][ T4233] usb 1-1: USB disconnect, device number 24 [ 201.890678][ T9054] loop3: detected capacity change from 0 to 32768 [ 201.903272][ T8689] kernel write not supported for file [eventfd] (pid: 8689 comm: kworker/1:21) [ 201.969220][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 201.985900][ T9054] XFS (loop3): Mounting V5 Filesystem [ 202.158767][ T4178] udevd[4178]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 202.209214][ T9054] XFS (loop3): Ending clean mount [ 202.259478][ T9080] loop1: detected capacity change from 0 to 256 [ 202.322299][ T4190] XFS (loop3): Unmounting Filesystem [ 202.467037][ T9080] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x22932667, utbl_chksum : 0xe619d30d) [ 202.909477][ T9078] loop4: detected capacity change from 0 to 32768 [ 202.921613][ T9090] device batadv0 entered promiscuous mode [ 202.970321][ T9078] XFS (loop4): Mounting V5 Filesystem [ 202.980959][ T9090] device bond0 entered promiscuous mode [ 203.008415][ T9090] device bond_slave_0 entered promiscuous mode [ 203.036833][ T9090] device bond_slave_1 entered promiscuous mode [ 203.044005][ T9090] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 203.052342][ T9090] Cannot create hsr debugfs directory [ 203.058651][ T9090] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 203.066759][ T9090] device batadv0 left promiscuous mode [ 203.085815][ T9090] device bond0 left promiscuous mode [ 203.099482][ T9090] device bond_slave_0 left promiscuous mode [ 203.107746][ T9090] device bond_slave_1 left promiscuous mode [ 203.118550][ T9078] XFS (loop4): Ending clean mount [ 203.153623][ T9107] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 203.210022][ T9107] netlink: 'syz.0.1818': attribute type 2 has an invalid length. [ 203.567824][ T9105] chnl_net:caif_netlink_parms(): no params data found [ 203.640864][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.648572][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.657076][ T9105] device bridge_slave_0 entered promiscuous mode [ 203.665860][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.673010][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.681705][ T9105] device bridge_slave_1 entered promiscuous mode [ 203.682363][ T4199] XFS (loop4): Unmounting Filesystem [ 203.705821][ T9105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.720198][ T9105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.754456][ T9105] team0: Port device team_slave_0 added [ 203.763277][ T9105] team0: Port device team_slave_1 added [ 203.786025][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.793011][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.818946][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.845586][ T9105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.910311][ T9105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.932938][ T9105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.017314][ T9143] vivid-002: disconnect [ 204.023408][ T9105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.118816][ T9142] vivid-002: reconnect [ 204.199009][ T9105] device hsr_slave_0 entered promiscuous mode [ 204.240822][ T9105] device hsr_slave_1 entered promiscuous mode [ 204.248144][ T9105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.258099][ T9105] Cannot create hsr debugfs directory [ 204.463978][ T9159] loop4: detected capacity change from 0 to 512 [ 204.500369][ T7417] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.518878][ T9159] EXT4-fs (loop4): Ignoring removed oldalloc option [ 204.563110][ T9159] EXT4-fs (loop4): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 204.699510][ T7417] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.816116][ T5529] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 204.820315][ T9176] loop4: detected capacity change from 0 to 1024 [ 204.870399][ T7417] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.911569][ T9176] EXT4-fs (loop4): Ignoring removed oldalloc option [ 205.023012][ T9176] EXT4-fs (loop4): mounted filesystem without journal. Opts: user_xattr,bsddf,usrjquota=,norecovery,usrquota,discard,oldalloc,sysvgroups,grpjquota=,,errors=continue. Quota mode: writeback. [ 205.062872][ T7417] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.073517][ T5529] usb 1-1: Using ep0 maxpacket: 8 [ 205.198462][ T5529] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.205659][ T4193] Bluetooth: hci0: command 0x0409 tx timeout [ 205.242259][ T5529] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 205.280117][ T5529] usb 1-1: config 0 interface 0 has no altsetting 0 [ 205.308025][ T5529] usb 1-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00 [ 205.321841][ T5529] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.364982][ T5529] usb 1-1: config 0 descriptor?? [ 205.866080][ T9105] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 205.868613][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 205.888613][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 205.905840][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 205.912768][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 205.926240][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 205.933163][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 205.954958][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 205.978408][ T5529] wacom 0003:056A:005D.0023: unknown main item tag 0x0 [ 206.003703][ T5529] wacom 0003:056A:005D.0023: hidraw0: USB HID v0.03 Device [HID 056a:005d] on usb-dummy_hcd.0-1/input0 [ 206.017581][ T9105] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 206.056737][ T9105] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 206.084606][ T9212] loop4: detected capacity change from 0 to 8192 [ 206.141167][ T4193] usb 1-1: USB disconnect, device number 25 [ 206.202917][ T9216] fido_id[9216]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 206.229704][ T9105] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 206.255212][ T9212] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 206.287661][ T9212] REISERFS (device loop4): using ordered data mode [ 206.294207][ T9212] reiserfs: using flush barriers [ 206.326144][ T9212] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.342893][ T9223] netlink: 7 bytes leftover after parsing attributes in process `syz.3.1862'. [ 206.362707][ T9212] REISERFS (device loop4): checking transaction log (loop4) [ 206.458858][ T9212] REISERFS (device loop4): Using tea hash to sort names [ 206.477166][ T9212] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 206.652653][ T9105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.708901][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 206.746306][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 206.784291][ T5529] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 206.795214][ T9105] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.838886][ T5529] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 206.982097][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.020241][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.039460][ T4232] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.046641][ T4232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.093831][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.159748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.194565][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.216553][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.219453][ T5529] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 207.223805][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.270204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.285672][ T1356] Bluetooth: hci0: command 0x041b tx timeout [ 207.307262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.379364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 207.416529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 207.449851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 207.469844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 207.509464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 207.532594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 207.561842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 207.635803][ T5529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.661353][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 207.675699][ T5529] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.687483][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 207.711686][ T5529] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.771177][ T9243] loop1: detected capacity change from 0 to 32768 [ 207.794274][ T5529] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.820022][ T5529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.831735][ T9243] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 scanned by syz.1.1867 (9243) [ 207.846956][ T9260] block device autoloading is deprecated and will be removed. [ 207.870940][ T5529] usb 4-1: config 0 descriptor?? [ 207.915275][ T9243] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 207.965465][ T9243] BTRFS info (device loop1): setting nodatacow, compression disabled [ 207.973964][ T9243] BTRFS info (device loop1): turning on flush-on-commit [ 208.004845][ T9243] BTRFS info (device loop1): using free space tree [ 208.045194][ T9243] BTRFS info (device loop1): has skinny extents [ 208.165101][ T9105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.174683][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 208.213305][ T803] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 208.255586][ T2302] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 208.354155][ T9243] BTRFS info (device loop1): enabling ssd optimizations [ 208.367919][ T5529] plantronics 0003:047F:FFFF.0025: No inputs registered, leaving [ 208.428666][ T7417] device batadv0 left promiscuous mode [ 208.455191][ T5529] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 208.543730][ T7417] device macvlan1 left promiscuous mode [ 208.594840][ T5529] usb 4-1: USB disconnect, device number 17 [ 208.601071][ T7417] device hsr_slave_0 left promiscuous mode [ 208.616121][ T2302] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 8 [ 208.627276][ T7417] device hsr_slave_1 left promiscuous mode [ 208.636600][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.646823][ T2302] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 208.674916][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.695480][ T2302] usb 5-1: config 0 interface 0 has no altsetting 0 [ 208.704529][ T2302] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 208.711508][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.723178][ T2302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.723864][ T9305] fido_id[9305]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 208.748133][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.787198][ T7417] device bridge_slave_1 left promiscuous mode [ 208.788502][ T2302] usb 5-1: config 0 descriptor?? [ 208.820578][ T9271] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 208.820732][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.244101][ T7417] device bridge_slave_0 left promiscuous mode [ 209.278075][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.287365][ T2302] logitech 0003:046D:C50C.0026: unknown main item tag 0x7 [ 209.330615][ T2302] logitech 0003:046D:C50C.0026: hidraw0: USB HID v0.0c Device [HID 046d:c50c] on usb-dummy_hcd.4-1/input0 [ 209.366263][ T4193] Bluetooth: hci0: command 0x040f tx timeout [ 209.424684][ T7417] device veth1_macvtap left promiscuous mode [ 209.449001][ T9316] loop1: detected capacity change from 0 to 32768 [ 209.455669][ T7417] device veth0_macvtap left promiscuous mode [ 209.464227][ T7417] device veth1_vlan left promiscuous mode [ 209.498051][ T7417] device veth0_vlan left promiscuous mode [ 209.561289][ T2302] usb 5-1: USB disconnect, device number 18 [ 209.645276][ T9316] XFS (loop1): Mounting V5 Filesystem [ 209.758328][ T9316] XFS (loop1): Ending clean mount [ 209.765460][ T9344] vivid-001: disconnect [ 209.813416][ T9343] vivid-001: reconnect [ 210.291581][ T4195] XFS (loop1): Unmounting Filesystem [ 210.347535][ T7417] team0 (unregistering): Port device team_slave_1 removed [ 210.387770][ T7417] team0 (unregistering): Port device team_slave_0 removed [ 210.479979][ T7417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.511374][ T7417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.696622][ T9358] loop3: detected capacity change from 0 to 40427 [ 210.711426][ T7417] bond0 (unregistering): Released all slaves [ 210.774869][ T9358] F2FS-fs (loop3): invalid crc value [ 210.825893][ T9366] loop1: detected capacity change from 0 to 512 [ 210.897206][ T9358] F2FS-fs (loop3): Found nat_bits in checkpoint [ 210.926211][ T9366] EXT4-fs (loop1): Ignoring removed oldalloc option [ 211.036979][ T9366] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 211.087633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 211.101491][ T9358] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 211.124598][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 211.170277][ T9358] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 211.240104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 211.287397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 211.331949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 211.351476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 211.361617][ T9389] vivid-003: disconnect [ 211.387822][ T9358] attempt to access beyond end of device [ 211.387822][ T9358] loop3: rw=2049, want=45104, limit=40427 [ 211.428768][ T9105] device veth0_vlan entered promiscuous mode [ 211.454006][ T4193] Bluetooth: hci0: command 0x0419 tx timeout [ 211.462861][ T9385] vivid-003: reconnect [ 211.479284][ T9105] device veth1_vlan entered promiscuous mode [ 211.559015][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 211.570107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 211.586180][ T4593] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 211.601150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 211.610810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 211.630554][ T9105] device veth0_macvtap entered promiscuous mode [ 211.641208][ T9399] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 211.649994][ T9105] device veth1_macvtap entered promiscuous mode [ 211.753626][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.796176][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.825948][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.860648][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.869916][ T9409] loop4: detected capacity change from 0 to 8 [ 211.891392][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.920492][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.940745][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 211.951941][ T4593] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 211.960551][ T4593] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.971998][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.974242][ T4593] usb 1-1: config 0 has no interface number 0 [ 211.988673][ T4593] usb 1-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 212.009389][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.019598][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 212.039999][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 212.049586][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 212.060019][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 212.096007][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.131062][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.145327][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.162990][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.174281][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.191078][ T4593] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 212.200403][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.215996][ T4593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.224783][ T9105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.245774][ T4593] usb 1-1: Product: syz [ 212.251025][ T4593] usb 1-1: Manufacturer: syz [ 212.260499][ T4593] usb 1-1: SerialNumber: syz [ 212.270408][ T9105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.274361][ T4593] usb 1-1: config 0 descriptor?? [ 212.287237][ T9105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.297297][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 212.308067][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 212.324138][ T9105] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.327303][ T4593] cyberjack 1-1:0.69: required endpoints missing [ 212.341749][ T9105] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.352799][ T4281] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 212.359546][ T9105] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.413477][ T9105] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.564469][ T4586] usb 1-1: USB disconnect, device number 26 [ 212.611764][ T9422] device macvtap1 entered promiscuous mode [ 212.623980][ T9422] device vlan0 entered promiscuous mode [ 212.637728][ T9422] device vlan0 left promiscuous mode [ 212.687725][ T4281] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.699077][ T4281] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.724199][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 212.768388][ T4281] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.786763][ T4281] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.794402][ T4232] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 212.922855][ T9432] loop3: detected capacity change from 0 to 256 [ 212.968283][ T9436] loop5: detected capacity change from 0 to 16 [ 213.008636][ T9436] erofs: Unknown parameter '' [ 213.025180][ T9432] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.048664][ T9432] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 213.134917][ T9432] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 213.241751][ T9443] vivid-000: disconnect [ 213.314280][ T9442] vivid-000: reconnect [ 213.526726][ T4193] Bluetooth: hci0: command 0x0407 tx timeout [ 214.091638][ T9481] loop1: detected capacity change from 0 to 256 [ 214.166441][ T9445] loop5: detected capacity change from 0 to 32768 [ 214.167222][ T9481] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 214.265329][ T9481] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 214.288682][ T9445] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop5 scanned by syz.5.1911 (9445) [ 214.367078][ T9445] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 214.394695][ T9481] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 214.409369][ T9489] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 214.435239][ T9445] BTRFS info (device loop5): setting nodatacow, compression disabled [ 214.492559][ C0] Illegal XDP return value 16128, expect packet loss! [ 214.508597][ T9445] BTRFS info (device loop5): turning on flush-on-commit [ 214.566758][ T9445] BTRFS info (device loop5): using free space tree [ 214.573337][ T9445] BTRFS info (device loop5): has skinny extents [ 214.730609][ T9463] loop3: detected capacity change from 0 to 32768 [ 214.896888][ T9463] XFS (loop3): Mounting V5 Filesystem [ 215.026367][ T9445] BTRFS info (device loop5): enabling ssd optimizations [ 215.068384][ T9463] XFS (loop3): Ending clean mount [ 215.337975][ T9542] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'. [ 215.447713][ T9542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1937'. [ 215.475981][ T9542] netlink: 'syz.4.1937': attribute type 18 has an invalid length. [ 216.021002][ T4190] XFS (loop3): Unmounting Filesystem [ 216.497199][ T9587] loop1: detected capacity change from 0 to 8 [ 216.635856][ T9582] loop0: detected capacity change from 0 to 4096 [ 216.769941][ T9582] EXT4-fs (loop0): invalid inodes per group: 458784 [ 216.769941][ T9582] [ 217.195474][ T9607] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check. [ 217.623906][ T9633] loop4: detected capacity change from 0 to 1024 [ 217.785141][ T9640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1964'. [ 217.832248][ T9640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1964'. [ 217.854457][ T9640] netlink: 'syz.0.1964': attribute type 18 has an invalid length. [ 218.228040][ T9653] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 218.245451][ T9613] comedi comedi0: reset error (fatal) [ 218.366809][ T9660] netlink: 'syz.5.1972': attribute type 1 has an invalid length. [ 218.395770][ T9660] netlink: 'syz.5.1972': attribute type 2 has an invalid length. [ 219.182972][ T9696] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 219.225923][ T9699] loop0: detected capacity change from 0 to 2048 [ 219.297437][ T9699] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.341888][ T26] kauditd_printk_skb: 14 callbacks suppressed [ 219.341903][ T26] audit: type=1800 audit(2000000054.009:165): pid=9699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1996" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 219.604311][ T9688] loop5: detected capacity change from 0 to 32768 [ 219.796184][ T9718] loop3: detected capacity change from 0 to 512 [ 219.822531][ T9688] XFS (loop5): Mounting V5 Filesystem [ 219.851397][ T9718] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 219.972008][ T9688] XFS (loop5): Ending clean mount [ 219.977824][ T9716] loop0: detected capacity change from 0 to 8192 [ 219.989271][ T9718] EXT4-fs (loop3): 1 truncate cleaned up [ 220.010665][ T9718] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.033306][ T9716] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 220.183458][ T9734] loop4: detected capacity change from 0 to 128 [ 220.285147][ T9738] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 220.339835][ T9738] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 220.519577][ T9105] XFS (loop5): Unmounting Filesystem [ 220.692354][ T9744] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 220.871586][ T9716] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 220.887163][ T9716] FAT-fs (loop0): Filesystem has been set read-only [ 220.906168][ T9716] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 220.939812][ T9716] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1044) [ 220.940286][ T9751] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.2004'. [ 220.964181][ T6070] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 221.152513][ T9755] loop1: detected capacity change from 0 to 64 [ 221.190370][ T9757] loop3: detected capacity change from 0 to 128 [ 221.292666][ T9757] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 221.352579][ T9757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.370937][ T6070] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 221.390372][ T6070] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.429868][ T6070] usb 5-1: config 0 has no interface number 0 [ 221.441274][ T9759] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2000'. [ 221.451987][ T6070] usb 5-1: config 0 interface 69 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 221.494188][ T4195] hfs: node 4:3 still has 1 user(s)! [ 221.635871][ T6070] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 221.665383][ T6070] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.692642][ T6070] usb 5-1: Product: syz [ 221.707618][ T6070] usb 5-1: Manufacturer: syz [ 221.717035][ T9768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 221.724222][ T6070] usb 5-1: SerialNumber: syz [ 221.736529][ T9768] netlink: 39 bytes leftover after parsing attributes in process `syz.3.2011'. [ 221.753739][ T6070] usb 5-1: config 0 descriptor?? [ 221.806737][ T6070] cyberjack 5-1:0.69: required endpoints missing [ 221.944022][ T9777] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 221.952563][ T9777] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 221.975055][ T9777] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 222.003694][ T9777] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 222.018816][ T9777] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 222.026658][ T9777] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 222.033888][ T9777] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 222.045001][ T9777] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 222.070789][ T4593] usb 5-1: USB disconnect, device number 19 [ 222.086744][ T9777] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 222.107776][ T9777] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 222.304053][ T9792] loop1: detected capacity change from 0 to 512 [ 222.374420][ T9792] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 222.418976][ T9792] EXT4-fs (loop1): orphan cleanup on readonly fs [ 222.433065][ T9792] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 222.444157][ T9792] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 222.512310][ T9792] EXT4-fs (loop1): 1 truncate cleaned up [ 222.543350][ T9792] EXT4-fs (loop1): mounted filesystem without journal. Opts: resgid=0x0000000000000000,usrjquota="errors=continue,noload,user_xattr,grpjquota="errors=continue,grpquota,jqfmt=vfsv1,lazytime,,errors=continue. Quota mode: writeback. [ 222.697108][ T9798] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #2: block 4: comm syz.1.2021: lblock 0 mapped to illegal pblock 4 (length 1) [ 222.714982][ T9797] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 223.276111][ T9790] comedi comedi0: reset error (fatal) [ 223.358607][ T9804] loop3: detected capacity change from 0 to 40427 [ 223.455174][ T9804] F2FS-fs (loop3): Found nat_bits in checkpoint [ 223.652473][ T9804] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 223.665281][ T9804] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 223.798423][ T9804] attempt to access beyond end of device [ 223.798423][ T9804] loop3: rw=2049, want=45104, limit=40427 [ 223.955717][ T9839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'. [ 223.964724][ T9839] netlink: 39 bytes leftover after parsing attributes in process `syz.0.2038'. [ 224.022936][ T9842] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 224.129301][ T9847] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 224.146524][ T9847] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 224.172688][ T9847] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 224.191157][ T9847] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 224.207653][ T9847] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 224.217653][ T9847] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 224.250451][ T9847] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 224.259752][ T9847] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 224.272853][ T9847] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 224.280784][ T9847] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 224.292013][ T9853] loop0: detected capacity change from 0 to 512 [ 224.391310][ T9853] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 224.440222][ T9853] EXT4-fs (loop0): 1 truncate cleaned up [ 224.451367][ T9853] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.635816][ T4593] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 224.731103][ T9862] loop3: detected capacity change from 0 to 128 [ 224.876412][ T4593] usb 5-1: Using ep0 maxpacket: 32 [ 224.912363][ T9868] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 224.919820][ T9868] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 225.006720][ T4593] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 225.049188][ T4593] usb 5-1: config 0 interface 0 has no altsetting 0 [ 225.079930][ T4593] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 225.107997][ T4593] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.150787][ T4593] usb 5-1: config 0 descriptor?? [ 225.238506][ T9880] loop0: detected capacity change from 0 to 164 [ 225.427102][ T9887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2054'. [ 225.505930][ T9887] netlink: 39 bytes leftover after parsing attributes in process `syz.1.2054'. [ 225.609552][ T9892] loop3: detected capacity change from 0 to 128 [ 225.649785][ T4593] corsair-psu 0003:1B1C:1C09.0027: unknown main item tag 0x0 [ 225.671374][ T4593] corsair-psu 0003:1B1C:1C09.0027: unknown main item tag 0x0 [ 225.701342][ T4593] corsair-psu 0003:1B1C:1C09.0027: unknown main item tag 0x0 [ 225.722121][ T9892] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 225.731712][ T4593] corsair-psu 0003:1B1C:1C09.0027: unknown main item tag 0x0 [ 225.772875][ T9866] loop5: detected capacity change from 0 to 32768 [ 225.779981][ T4593] corsair-psu 0003:1B1C:1C09.0027: unknown main item tag 0x0 [ 225.784753][ T9892] hpfs: filesystem error: improperly stopped [ 225.804197][ T4593] corsair-psu 0003:1B1C:1C09.0027: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 225.846251][ T9892] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 225.854580][ T9892] hpfs: You really don't want any checks? You are crazy... [ 225.890934][ T9892] hpfs: hpfs_map_sector(): read error [ 225.905633][ T9892] hpfs: code page support is disabled [ 225.946385][ T9892] hpfs: hpfs_map_4sectors(): unaligned read [ 225.949923][ T9899] ERROR: (device loop5): dtSearch: stack overrun! [ 225.949923][ T9899] [ 225.972391][ T9892] hpfs: hpfs_map_4sectors(): unaligned read [ 225.991657][ T9899] ERROR: (device loop5): remounting filesystem as read-only [ 226.005062][ T9892] hpfs: filesystem error: unable to find root dir [ 226.014764][ T9899] btstack dump: [ 226.044139][ T9899] bn = 0, index = 0 [ 226.069878][ T9899] bn = 72c, index = 96 [ 226.090968][ T9899] bn = 0, index = 0 [ 226.104305][ T9899] bn = 72c, index = 96 [ 226.121178][ T9899] bn = 0, index = 0 [ 226.134864][ T9899] bn = 72c, index = 96 [ 226.161800][ T9899] bn = 0, index = 0 [ 226.172745][ T9899] bn = 0, index = 0 [ 226.183513][ T9899] general protection fault, probably for non-canonical address 0xdffffc0000000037: 0000 [#1] PREEMPT SMP KASAN [ 226.195364][ T9899] KASAN: null-ptr-deref in range [0x00000000000001b8-0x00000000000001bf] [ 226.203791][ T9899] CPU: 0 PID: 9899 Comm: syz.5.2047 Not tainted syzkaller #0 [ 226.211175][ T9899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 226.221245][ T9899] RIP: 0010:write_one_page+0x2a5/0x670 [ 226.226713][ T9899] Code: 04 00 00 00 e8 bc 27 1d 00 f0 41 ff 06 48 8b 44 24 18 48 8d 98 b8 01 00 00 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 74 08 48 89 df e8 ec 25 1d 00 48 8b 1b 48 89 d8 48 [ 226.246312][ T9899] RSP: 0018:ffffc900030cf840 EFLAGS: 00010202 [ 226.252378][ T9899] RAX: 0000000000000037 RBX: 00000000000001b8 RCX: ffffffff81a0ecb4 [ 226.260341][ T9899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea000084d674 [ 226.268322][ T9899] RBP: ffffc900030cf958 R08: ffffea000084d677 R09: 1ffffd4000109ace [ 226.276285][ T9899] R10: dffffc0000000000 R11: fffff94000109acf R12: 1ffffd4000109ac9 [ 226.284249][ T9899] R13: ffffea000084d640 R14: dffffc0000000000 R15: 1ffff92000619f0c [ 226.292214][ T9899] FS: 00007f5b0690f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 226.301143][ T9899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.307717][ T9899] CR2: 000000110c37201b CR3: 000000007dcdd000 CR4: 00000000003506f0 [ 226.315686][ T9899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.323669][ T9899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.331640][ T9899] Call Trace: [ 226.334908][ T9899] [ 226.337854][ T9899] ? do_writepages+0x700/0x700 [ 226.342637][ T9899] ? page_mapping+0x30e/0x440 [ 226.347303][ T9899] ? set_page_dirty+0x485/0x590 [ 226.352145][ T9899] release_metapage+0x5e4/0xda0 [ 226.356993][ T9899] dtSearch+0x1a7b/0x1f60 [ 226.361312][ T9899] ? remove_wait_queue+0x120/0x120 [ 226.366421][ T9899] jfs_symlink+0x85a/0xfd0 [ 226.370837][ T9899] ? jfs_unlink+0x9f0/0x9f0 [ 226.375341][ T9899] ? from_kgid+0x14f/0x6a0 [ 226.379743][ T9899] ? make_kgid+0x650/0x650 [ 226.384144][ T9899] ? apparmor_path_symlink+0x1ac/0x230 [ 226.389592][ T9899] ? lookup_one_qstr_excl+0x11c/0x240 [ 226.394957][ T9899] ? generic_permission+0x225/0x510 [ 226.400146][ T9899] ? inode_permission+0xef/0x480 [ 226.405099][ T9899] ? bpf_lsm_inode_symlink+0x5/0x10 [ 226.410287][ T9899] ? security_inode_symlink+0xb2/0x100 [ 226.415738][ T9899] vfs_symlink+0x245/0x3d0 [ 226.420147][ T9899] do_symlinkat+0x1ab/0x6b0 [ 226.424638][ T9899] ? strncpy_from_user+0x1f4/0x350 [ 226.429739][ T9899] ? vfs_symlink+0x3d0/0x3d0 [ 226.434323][ T9899] __x64_sys_symlinkat+0x95/0xa0 [ 226.439251][ T9899] do_syscall_64+0x4c/0xa0 [ 226.443656][ T9899] ? clear_bhb_loop+0x30/0x80 [ 226.448322][ T9899] ? clear_bhb_loop+0x30/0x80 [ 226.452988][ T9899] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 226.458872][ T9899] RIP: 0033:0x7f5b086d6e59 [ 226.463280][ T9899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.482886][ T9899] RSP: 002b:00007f5b0690f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 226.491293][ T9899] RAX: ffffffffffffffda RBX: 00007f5b08950090 RCX: 00007f5b086d6e59 [ 226.499256][ T9899] RDX: 00002000000005c0 RSI: ffffffffffffff9c RDI: 0000200000000700 [ 226.507217][ T9899] RBP: 00007f5b0876ce6f R08: 0000000000000000 R09: 0000000000000000 [ 226.515179][ T9899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.523218][ T9899] R13: 00007f5b08950128 R14: 00007f5b08950090 R15: 00007ffece1c5fe8 [ 226.531189][ T9899] [ 226.534205][ T9899] Modules linked in: [ 226.539988][ T4593] corsair-psu 0003:1B1C:1C09.0027: unable to initialize device (-110) [ 226.543127][ T9899] ---[ end trace 9c12a2a20685a662 ]--- [ 226.556227][ T9899] RIP: 0010:write_one_page+0x2a5/0x670 [ 226.562798][ T9899] Code: 04 00 00 00 e8 bc 27 1d 00 f0 41 ff 06 48 8b 44 24 18 48 8d 98 b8 01 00 00 48 89 d8 48 c1 e8 03 49 be 00 00 00 00 00 fc ff df <42> 80 3c 30 00 74 08 48 89 df e8 ec 25 1d 00 48 8b 1b 48 89 d8 48 [ 226.567678][ T4593] corsair-psu: probe of 0003:1B1C:1C09.0027 failed with error -110 [ 226.594310][ T4593] usb 5-1: USB disconnect, device number 20 [ 226.602867][ T9899] RSP: 0018:ffffc900030cf840 EFLAGS: 00010202 [ 226.629618][ T9899] RAX: 0000000000000037 RBX: 00000000000001b8 RCX: ffffffff81a0ecb4 [ 226.648485][ T9899] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffea000084d674 [ 226.656963][ T9899] RBP: ffffc900030cf958 R08: ffffea000084d677 R09: 1ffffd4000109ace [ 226.670017][ T9899] R10: dffffc0000000000 R11: fffff94000109acf R12: 1ffffd4000109ac9 [ 226.678431][ T9899] R13: ffffea000084d640 R14: dffffc0000000000 R15: 1ffff92000619f0c [ 226.682127][ T9902] fido_id[9902]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 226.687045][ T9899] FS: 00007f5b0690f6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 226.710615][ T9899] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 226.717566][ T9899] CR2: 00007f5ffcf286c8 CR3: 000000007dcdd000 CR4: 00000000003506f0 [ 226.725678][ T9899] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 226.733832][ T9899] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 226.742118][ T9899] Kernel panic - not syncing: Fatal exception [ 226.748507][ T9899] Kernel Offset: disabled [ 226.752858][ T9899] Rebooting in 86400 seconds..