last executing test programs: 4.403988293s ago: executing program 3 (id=358): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff}) close(0x3) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, &(0x7f0000000080), 0xfe41) recvmmsg$unix(r0, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000000, 0x0) 4.24719126s ago: executing program 3 (id=360): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, r1, 0x303, 0x4, 0x25dfdbfa, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x10080) 3.818426682s ago: executing program 1 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x3, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001400)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000025000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2, r1}, 0xc) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) 3.545726005s ago: executing program 1 (id=364): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fe800000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 3.343897505s ago: executing program 0 (id=366): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.262426209s ago: executing program 1 (id=367): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x50, r2, 0x100, 0x70bd26, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x64bc}, {0x8, 0x15, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 3.04646222s ago: executing program 1 (id=368): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000740)=0xffffffffffffffff) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000640)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, 0x0, 0x40000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) 3.013721621s ago: executing program 0 (id=369): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0xd0f, 0x3, 0xfffffffd, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 2.993408982s ago: executing program 3 (id=370): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8005, &(0x7f0000000000)={[{@errors_remount}]}, 0x80, 0x64a, &(0x7f00000001c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) 2.85039817s ago: executing program 1 (id=371): syz_mount_image$xfs(&(0x7f0000000540), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000001340)={[{@noalign}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}]}, 0x7, 0x9606, &(0x7f000001c300)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI") r0 = creat(&(0x7f00000004c0)='./file1\x00', 0x32) write$binfmt_register(r0, &(0x7f0000000000)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'uqnoenforce', 0x3a, 'xfs\x00', 0x3a, './file1'}, 0x36) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x1000) chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) close(r0) 2.678345198s ago: executing program 0 (id=372): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) bind(r1, 0x0, 0x0) 2.394865002s ago: executing program 3 (id=373): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.045482179s ago: executing program 3 (id=374): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000580)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x4f2, 0x1421, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xd0, 0x9, "", [{{0x9, 0x4, 0x0, 0x2, 0x6, 0x3, 0x1, 0x3, 0xfc, {0x9, 0x21, 0xff7f, 0x45, 0x1, {0x22, 0xfb1}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0x8, 0x64}}}}}]}}]}}, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) 1.646040049s ago: executing program 0 (id=375): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") creat(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.199126241s ago: executing program 2 (id=377): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000040)="8b", 0x1}, {&(0x7f0000000340)="c7", 0x1}], 0x2, 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) splice(r0, 0x0, r3, 0x0, 0x7, 0x8) 1.128059204s ago: executing program 0 (id=378): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) io_setup(0x3fc, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, 0x0, 0x3be2b02884f95c63}]) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 1.111594205s ago: executing program 1 (id=379): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1f4) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x10044, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 965.102663ms ago: executing program 2 (id=380): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200)="a3", 0x1) 717.926555ms ago: executing program 2 (id=381): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 407.57018ms ago: executing program 2 (id=382): r0 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x3f72, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x200005, 0x4) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x45}, 0x7ffffffe}, {{&(0x7f0000000080)=@pppoe, 0x80, &(0x7f0000000340)=[{&(0x7f0000000580), 0x7}, {&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f0000002000)=""/4096, 0x1000}, {&(0x7f0000000240)=""/89, 0xfffffffffffffebf}, {&(0x7f00000002c0)=""/83, 0x53}], 0x5}, 0x1}, {{&(0x7f00000003c0)=@caif=@dgm, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)=""/10, 0xa}, {&(0x7f0000003000)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/29, 0x28}], 0x2, &(0x7f0000000480)=""/13, 0xd}, 0x7}], 0x3, 0x40002000, 0x0) 344.731973ms ago: executing program 2 (id=383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f00000001c0)="0f090f017df8360f202066b9b400004066b87a00000066ba000000000f30ce0f535429baa10066edf30f09660fc774d20f01c8", 0x33}], 0x1, 0xe, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 154.097073ms ago: executing program 2 (id=384): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x0, &(0x7f0000001940)=[{&(0x7f0000000440)=""/38}, {&(0x7f0000000540)=""/102}, {&(0x7f0000000500)=""/39}, {&(0x7f0000000700)=""/4096}, {&(0x7f00000000c0)=""/20}, {&(0x7f0000001740)=""/254}, {&(0x7f0000001840)=""/159}, {&(0x7f0000001900)=""/22}], 0x0, &(0x7f00000019c0)=""/212}, 0x2}], 0x4000210, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 49.860807ms ago: executing program 3 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x103011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 0s ago: executing program 0 (id=386): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000180)='<.', 0x2, 0x4000805, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.144' (ED25519) to the list of known hosts. [ 77.487680][ T5755] cgroup: Unknown subsys name 'net' [ 77.626063][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.283883][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.993509][ T5775] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.012395][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.019454][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.026170][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.030590][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.040742][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.048510][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.056904][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.065381][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.070120][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.075169][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.087950][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.088856][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.098319][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.103684][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.118286][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.120517][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.133068][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.138058][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.143561][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.149552][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.159211][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.169210][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.176554][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.673627][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 81.749669][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 81.798892][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 81.901150][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 81.935388][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.944146][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.951898][ T5768] bridge_slave_0: entered allmulticast mode [ 81.959439][ T5768] bridge_slave_0: entered promiscuous mode [ 81.975885][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.983227][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.991101][ T5768] bridge_slave_1: entered allmulticast mode [ 81.998888][ T5768] bridge_slave_1: entered promiscuous mode [ 82.012989][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.020412][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.028481][ T5770] bridge_slave_0: entered allmulticast mode [ 82.036045][ T5770] bridge_slave_0: entered promiscuous mode [ 82.053480][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.061003][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.068374][ T5770] bridge_slave_1: entered allmulticast mode [ 82.075614][ T5770] bridge_slave_1: entered promiscuous mode [ 82.165042][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.193119][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.205390][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.245514][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.252854][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.260183][ T5767] bridge_slave_0: entered allmulticast mode [ 82.268110][ T5767] bridge_slave_0: entered promiscuous mode [ 82.280804][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.328859][ T5770] team0: Port device team_slave_0 added [ 82.348272][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.355535][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.363325][ T5767] bridge_slave_1: entered allmulticast mode [ 82.370624][ T5767] bridge_slave_1: entered promiscuous mode [ 82.391340][ T5768] team0: Port device team_slave_0 added [ 82.402131][ T5768] team0: Port device team_slave_1 added [ 82.409876][ T5770] team0: Port device team_slave_1 added [ 82.427431][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.434612][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.445068][ T5769] bridge_slave_0: entered allmulticast mode [ 82.452403][ T5769] bridge_slave_0: entered promiscuous mode [ 82.484143][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.503051][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.513567][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.521326][ T5769] bridge_slave_1: entered allmulticast mode [ 82.529239][ T5769] bridge_slave_1: entered promiscuous mode [ 82.552896][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.563305][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.570850][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.597216][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.629028][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.636221][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.662644][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.685238][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.692422][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.718611][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.749138][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.756191][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.783279][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.820143][ T5767] team0: Port device team_slave_0 added [ 82.855973][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.880480][ T5767] team0: Port device team_slave_1 added [ 82.915001][ T5768] hsr_slave_0: entered promiscuous mode [ 82.921625][ T5768] hsr_slave_1: entered promiscuous mode [ 82.931152][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.953941][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.961210][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.990338][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.003768][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.013733][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.039999][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.067564][ T5770] hsr_slave_0: entered promiscuous mode [ 83.074050][ T5770] hsr_slave_1: entered promiscuous mode [ 83.080703][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.088672][ T5770] Cannot create hsr debugfs directory [ 83.133445][ T5769] team0: Port device team_slave_0 added [ 83.175468][ T5769] team0: Port device team_slave_1 added [ 83.181485][ T5082] Bluetooth: hci3: command tx timeout [ 83.256899][ T5082] Bluetooth: hci1: command tx timeout [ 83.257158][ T5783] Bluetooth: hci2: command tx timeout [ 83.262722][ T5082] Bluetooth: hci0: command tx timeout [ 83.281265][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.288718][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.317269][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.330219][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.337399][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.363591][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.385909][ T5767] hsr_slave_0: entered promiscuous mode [ 83.392860][ T5767] hsr_slave_1: entered promiscuous mode [ 83.399800][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.407442][ T5767] Cannot create hsr debugfs directory [ 83.563108][ T5769] hsr_slave_0: entered promiscuous mode [ 83.569687][ T5769] hsr_slave_1: entered promiscuous mode [ 83.575915][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.584400][ T5769] Cannot create hsr debugfs directory [ 83.889998][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.902719][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.925947][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.956755][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.015381][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.030057][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.060129][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.082894][ T5767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.093735][ T5767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.111934][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.128484][ T5767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.148010][ T5767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.251042][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.275461][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.298516][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.310482][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.426271][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.502589][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.523618][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.547463][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.569347][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.576788][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.619005][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.626216][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.644208][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.679373][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.686638][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.711399][ T1318] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.718670][ T1318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.736060][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.745373][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.819467][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.826683][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.855302][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.873308][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.880584][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.921666][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.928917][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.972552][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.979815][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.260572][ T5082] Bluetooth: hci3: command tx timeout [ 85.337039][ T51] Bluetooth: hci2: command tx timeout [ 85.337248][ T5783] Bluetooth: hci1: command tx timeout [ 85.342816][ T5082] Bluetooth: hci0: command tx timeout [ 85.395597][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.535693][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.554955][ T5768] veth0_vlan: entered promiscuous mode [ 85.602084][ T5768] veth1_vlan: entered promiscuous mode [ 85.669630][ T5770] veth0_vlan: entered promiscuous mode [ 85.692794][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.719205][ T5770] veth1_vlan: entered promiscuous mode [ 85.770606][ T5768] veth0_macvtap: entered promiscuous mode [ 85.782378][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.807197][ T5768] veth1_macvtap: entered promiscuous mode [ 85.842767][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.870968][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.906087][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.915657][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.924600][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.933835][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.963160][ T5770] veth0_macvtap: entered promiscuous mode [ 85.975109][ T5769] veth0_vlan: entered promiscuous mode [ 85.997934][ T5770] veth1_macvtap: entered promiscuous mode [ 86.054751][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.067560][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.081186][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.089975][ T5769] veth1_vlan: entered promiscuous mode [ 86.120063][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.132921][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.145941][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.163240][ T5767] veth0_vlan: entered promiscuous mode [ 86.215057][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.224795][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.239442][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.249417][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.261751][ T5767] veth1_vlan: entered promiscuous mode [ 86.353831][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.368491][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.401041][ T5769] veth0_macvtap: entered promiscuous mode [ 86.475813][ T5769] veth1_macvtap: entered promiscuous mode [ 86.492386][ T1318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.512061][ T1318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.521413][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.529798][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.545369][ T5767] veth0_macvtap: entered promiscuous mode [ 86.565693][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.577152][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.587682][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.598496][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.610551][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.639510][ T5767] veth1_macvtap: entered promiscuous mode [ 86.651544][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.663766][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.673797][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.685552][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.700551][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.752124][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.764668][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.775523][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.796713][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.806940][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.818879][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.831989][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.840865][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.850852][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.858432][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.873952][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.883237][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.894831][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.918665][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.954691][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.973757][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.985956][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.000712][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.015297][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.035548][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.095297][ T5767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.126382][ T5767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.135180][ T5767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.166439][ T5767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.337258][ T5783] Bluetooth: hci3: command tx timeout [ 87.370802][ T5838] syz.2.3[5838]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.404487][ T5838] loop2: detected capacity change from 0 to 2048 [ 87.417067][ T5783] Bluetooth: hci0: command tx timeout [ 87.422520][ T5082] Bluetooth: hci2: command tx timeout [ 87.422565][ T5082] Bluetooth: hci1: command tx timeout [ 87.608914][ T5838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.710351][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.736179][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.893460][ T1324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.921644][ T1324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.978281][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.010303][ T1318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.038723][ T1318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.093812][ T5848] loop5: detected capacity change from 0 to 7 [ 88.155486][ T5848] Dev loop5: unable to read RDB block 7 [ 88.171213][ T993] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.177562][ T5848] loop5: unable to read partition table [ 88.194122][ T5848] loop5: partition table beyond EOD, truncated [ 88.212065][ T5848] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.227056][ T993] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.295638][ T5851] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.612374][ T8] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 88.667108][ T8] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.945255][ T5836] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.136695][ T5829] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.146425][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 89.184872][ T5874] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 89.194872][ T5874] netlink: 'syz.1.13': attribute type 29 has an invalid length. [ 89.328478][ T5876] Illegal XDP return value 1165010458 on prog (id 4) dev syz_tun, expect packet loss! [ 89.343725][ T5829] usb 3-1: config 0 has no interfaces? [ 89.353810][ T5829] usb 3-1: New USB device found, idVendor=23c5, idProduct=8699, bcdDevice=f8.85 [ 89.378822][ T5856] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 89.382034][ T5829] usb 3-1: New USB device strings: Mfr=200, Product=24, SerialNumber=3 [ 89.392715][ T5856] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 89.406394][ T5829] usb 3-1: Product: syz [ 89.410770][ T5829] usb 3-1: Manufacturer: syz [ 89.417607][ T51] Bluetooth: hci3: command tx timeout [ 89.428927][ T5829] usb 3-1: SerialNumber: syz [ 89.459336][ T5829] usb 3-1: config 0 descriptor?? [ 89.497842][ T51] Bluetooth: hci0: command tx timeout [ 89.503405][ T51] Bluetooth: hci2: command tx timeout [ 89.509016][ T5082] Bluetooth: hci1: command tx timeout [ 89.548109][ T5878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 89.725172][ T5836] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.754447][ T5836] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 89.769799][ T5882] loop1: detected capacity change from 0 to 2048 [ 89.775616][ T5836] usb 4-1: can't read configurations, error -71 [ 89.809694][ T5882] EXT4-fs: Ignoring removed mblk_io_submit option [ 89.818227][ T5882] EXT4-fs: Ignoring removed i_version option [ 89.868621][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 89.895168][ T5779] usb 3-1: USB disconnect, device number 2 [ 89.933221][ T5882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.014622][ T28] audit: type=1800 audit(1776395106.482:2): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.17" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 90.109115][ T5891] EXT4-fs (loop1): shut down requested (1) [ 90.181898][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.267959][ T5836] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.466478][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 90.473477][ T5836] usb 4-1: config 1 interface 0 has no altsetting 0 [ 90.487634][ T5836] usb 4-1: string descriptor 0 read error: -22 [ 90.493999][ T5836] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 90.503940][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.035180][ T5836] apple 0003:05AC:024C.0002: invalid report_size -1149171161 [ 91.056026][ T5836] apple 0003:05AC:024C.0002: item 0 4 1 7 parsing failed [ 91.074427][ T5836] apple 0003:05AC:024C.0002: parse failed [ 91.089413][ T5836] apple: probe of 0003:05AC:024C.0002 failed with error -22 [ 91.372388][ T5836] usb 4-1: USB disconnect, device number 3 [ 91.732353][ T5926] loop0: detected capacity change from 0 to 4096 [ 92.023927][ T5926] ntfs3: loop0: ino=21, "file1" mmap(write) compressed not supported [ 92.223179][ T5925] loop2: detected capacity change from 0 to 32768 [ 92.278581][ T3062] cfg80211: failed to load regulatory.db [ 92.294932][ T5925] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.35 (5925) [ 92.364883][ T5925] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 92.391487][ T5925] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 92.403487][ T5931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.415695][ T5925] BTRFS info (device loop2): using free space tree [ 92.437608][ T5931] Zero length message leads to an empty skb [ 92.524650][ T5935] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 92.564617][ T5927] loop1: detected capacity change from 0 to 32768 [ 92.611372][ T5925] BTRFS info (device loop2): enabling ssd optimizations [ 92.646542][ T5925] BTRFS info (device loop2): auto enabling async discard [ 93.707658][ T5962] loop0: detected capacity change from 0 to 128 [ 93.737445][ T5962] ======================================================= [ 93.737445][ T5962] WARNING: The mand mount option has been deprecated and [ 93.737445][ T5962] and is ignored by this kernel. Remove the mand [ 93.737445][ T5962] option from the mount to silence this warning. [ 93.737445][ T5962] ======================================================= [ 93.844850][ T5770] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 93.916667][ T5962] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 93.967086][ T5962] hpfs: filesystem error: improperly stopped [ 93.973198][ T5962] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 93.994333][ T5962] hpfs: You really don't want any checks? You are crazy... [ 94.045936][ T5962] hpfs: Code page index out of array [ 94.052776][ T5962] hpfs: code page support is disabled [ 94.082372][ T5962] hpfs: hpfs_map_4sectors(): unaligned read [ 94.100290][ T5962] hpfs: hpfs_map_4sectors(): unaligned read [ 94.115177][ T5962] hpfs: filesystem error: unable to find root dir [ 94.750559][ T5967] loop1: detected capacity change from 0 to 32768 [ 94.762619][ T5967] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.42 (5967) [ 94.795965][ T5967] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.843203][ T5967] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 94.867134][ T5967] BTRFS info (device loop1): turning off barriers [ 94.886790][ T23] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.920317][ T5967] BTRFS info (device loop1): setting nodatasum [ 94.948835][ T5967] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 94.981687][ T5967] BTRFS info (device loop1): use zstd compression, level 3 [ 94.989297][ T5967] BTRFS info (device loop1): using free space tree [ 95.057878][ T5981] loop0: detected capacity change from 0 to 2048 [ 95.106502][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 95.136780][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.156392][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.166917][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 95.173646][ T23] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 95.184217][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.196270][ T23] usb 3-1: config 0 descriptor?? [ 95.217961][ T5981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.321068][ T5981] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 95.367028][ T5981] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 95.417133][ T5981] EXT4-fs (loop0): This should not happen!! Data will be lost [ 95.417133][ T5981] [ 95.485957][ T5981] EXT4-fs (loop0): Total free blocks count 0 [ 95.506765][ T5981] EXT4-fs (loop0): Free/Dirty block details [ 95.518402][ T5981] EXT4-fs (loop0): free_blocks=66060288 [ 95.541039][ T5981] EXT4-fs (loop0): dirty_blocks=48 [ 95.566926][ T5981] EXT4-fs (loop0): Block reservation details [ 95.573028][ T5981] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 95.641762][ T23] hid (null): unknown global tag 0xe [ 95.660877][ T23] hid (null): unknown global tag 0xc [ 95.737430][ T993] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 95.771578][ T5769] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.923908][ T23] usb 3-1: USB disconnect, device number 3 [ 96.049557][ T6014] loop0: detected capacity change from 0 to 256 [ 96.102592][ T6014] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.156416][ T6014] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 96.192914][ T6014] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 97.196792][ T6029] loop1: detected capacity change from 0 to 32768 [ 97.259674][ T6029] loop1: p1 p3 < > [ 97.533242][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.542155][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.642552][ T6048] syz.1.70 (6048) used greatest stack depth: 20808 bytes left [ 97.650462][ T5836] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.803572][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 97.820358][ T5771] udevd[5771]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 97.876246][ T5836] usb 4-1: Using ep0 maxpacket: 8 [ 97.891564][ T5836] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 97.937456][ T5836] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 97.949134][ T5836] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.964933][ T5836] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.988446][ T5836] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.002331][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.246783][ T5836] usb 4-1: usb_control_msg returned -32 [ 98.253102][ T5836] usbtmc 4-1:16.0: can't read capabilities [ 98.306567][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.477894][ T6065] loop1: detected capacity change from 0 to 2048 [ 98.503908][ T6065] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.512633][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.555350][ T8] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.578461][ T8] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 98.589309][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 98.635043][ T8] usb 1-1: SerialNumber: syz [ 98.661080][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 98.913636][ T8] usb 1-1: 0:2 : does not exist [ 98.979820][ T8] usb 1-1: USB disconnect, device number 2 [ 99.053288][ T5774] udevd[5774]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.638933][ T6082] loop0: detected capacity change from 0 to 764 [ 100.162397][ T28] audit: type=1326 audit(1776395116.622:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.215135][ T28] audit: type=1326 audit(1776395116.622:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.243649][ T6097] loop2: detected capacity change from 0 to 256 [ 100.266496][ T28] audit: type=1326 audit(1776395116.622:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.307927][ T6082] Symlink component flag not implemented [ 100.313865][ T6082] Symlink component flag not implemented [ 100.326047][ T28] audit: type=1326 audit(1776395116.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.353418][ T6095] ISOFS: unable to read i-node block [ 100.364198][ T6082] Symlink component flag not implemented (128) [ 100.393184][ T6082] Symlink component flag not implemented (105) [ 100.426097][ T28] audit: type=1326 audit(1776395116.622:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.483852][ T28] audit: type=1326 audit(1776395116.632:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.509255][ T8] usb 4-1: USB disconnect, device number 4 [ 100.589327][ T28] audit: type=1326 audit(1776395116.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.621365][ T28] audit: type=1326 audit(1776395116.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.710666][ T28] audit: type=1326 audit(1776395116.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.760046][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 100.805767][ T28] audit: type=1326 audit(1776395116.632:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6093 comm="syz.1.87" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 100.993401][ T6109] loop1: detected capacity change from 0 to 512 [ 101.024539][ T6109] FAT-fs (loop1): Directory bread(block 199916) failed [ 101.042957][ T6109] FAT-fs (loop1): Directory bread(block 199917) failed [ 101.061489][ T6109] FAT-fs (loop1): Directory bread(block 199918) failed [ 101.077566][ T6109] FAT-fs (loop1): Directory bread(block 199919) failed [ 101.117666][ T6109] FAT-fs (loop1): Directory bread(block 199920) failed [ 101.124743][ T6109] FAT-fs (loop1): Directory bread(block 199921) failed [ 101.163879][ T6109] FAT-fs (loop1): Directory bread(block 199922) failed [ 101.189215][ T6109] FAT-fs (loop1): Directory bread(block 199923) failed [ 101.223632][ T6109] FAT-fs (loop1): Directory bread(block 199916) failed [ 101.242346][ T6109] FAT-fs (loop1): Directory bread(block 199917) failed [ 101.451286][ T6115] netlink: 'syz.3.97': attribute type 10 has an invalid length. [ 101.512652][ T6115] team0: Device vxcan1 is of different type [ 101.639191][ T6120] loop2: detected capacity change from 0 to 256 [ 101.648665][ T6120] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 101.666608][ T6120] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 101.707830][ T6120] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d) [ 101.776778][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.975739][ T6126] loop2: detected capacity change from 0 to 4096 [ 101.982703][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 101.988768][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.010233][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.048736][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.086666][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.115699][ T23] usb 1-1: config 0 descriptor?? [ 102.129974][ T23] hub 1-1:0.0: USB hub found [ 102.281466][ T6126] EXT4-fs (loop2): Test dummy encryption mode enabled [ 102.306001][ T12] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 102.338291][ T6126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.359709][ T23] hub 1-1:0.0: 1 port detected [ 102.446988][ T6122] loop1: detected capacity change from 0 to 32768 [ 102.462640][ T6122] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.99 (6122) [ 102.508900][ T6122] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.550741][ T6122] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 102.603695][ T6122] BTRFS info (device loop1): enabling auto defrag [ 102.647171][ T6122] BTRFS info (device loop1): use no compression [ 102.653550][ T6122] BTRFS info (device loop1): force clearing of disk cache [ 102.677610][ T6122] BTRFS info (device loop1): max_inline at 4096 [ 102.686616][ T6122] BTRFS info (device loop1): disabling free space tree [ 102.854114][ T6122] BTRFS info (device loop1): enabling ssd optimizations [ 102.893550][ T6122] BTRFS info (device loop1): auto enabling async discard [ 102.920212][ T6126] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.102: corrupted inode contents [ 102.949052][ T6122] BTRFS info (device loop1): rebuilding free space tree [ 103.028810][ T6126] EXT4-fs error (device loop2): ext4_dirty_inode:6143: inode #15: comm syz.2.102: mark_inode_dirty error [ 103.046449][ T5779] hub 1-1:0.0: activate --> -90 [ 103.062424][ T6122] BTRFS info (device loop1): disabling free space tree [ 103.069780][ T6122] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.081968][ T6126] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.102: corrupted inode contents [ 103.094628][ T6122] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.122819][ T6126] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.102: mark_inode_dirty error [ 103.144780][ T6126] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.102: corrupted inode contents [ 103.163160][ T6126] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.102: mark_inode_dirty error [ 103.177626][ T6126] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.102: corrupted inode contents [ 103.196538][ T6126] EXT4-fs error (device loop2): ext4_truncate:4301: inode #15: comm syz.2.102: mark_inode_dirty error [ 103.246517][ T6126] EXT4-fs error (device loop2) in ext4_setattr:5682: Corrupt filesystem [ 103.336513][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 103.463478][ T6126] EXT4-fs error (device loop2): ext4_do_update_inode:5255: inode #15: comm syz.2.102: corrupted inode contents [ 103.463854][ T3062] usb 1-1: USB disconnect, device number 3 [ 103.537382][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 103.567903][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 103.582271][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.596390][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.608501][ T9] usb 4-1: Product: syz [ 103.612751][ T9] usb 4-1: Manufacturer: syz [ 103.621975][ T9] usb 4-1: SerialNumber: syz [ 103.628834][ T5769] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.652083][ T9] usb 4-1: config 0 descriptor?? [ 103.895775][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 104.420697][ T6171] loop2: detected capacity change from 0 to 512 [ 104.475361][ T6171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.496922][ T6171] ext4 filesystem being mounted at /32/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.546445][ T3062] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.588567][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.722252][ T9] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 104.739805][ T9] usb 4-1: USB disconnect, device number 5 [ 104.756494][ T3062] usb 1-1: Using ep0 maxpacket: 8 [ 104.778777][ T3062] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.807301][ T3062] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.839498][ T3062] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.872896][ T3062] usb 1-1: config 0 descriptor?? [ 104.994599][ T6178] loop2: detected capacity change from 0 to 256 [ 105.032001][ T6178] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 105.043222][ T6178] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 105.060273][ T6178] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 105.113439][ T3062] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.353643][ C1] iowarrior 1-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 105.362922][ T3062] usb 1-1: USB disconnect, device number 4 [ 105.526521][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 105.636548][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 105.720155][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.732060][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.744111][ T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 105.753412][ T9] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 105.761927][ T9] usb 3-1: Manufacturer: syz [ 105.769291][ T9] usb 3-1: config 0 descriptor?? [ 105.826485][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 105.837237][ T8] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 105.845572][ T8] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.855471][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.865464][ T8] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.875705][ T8] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.913039][ T8] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 105.922335][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.009407][ T6186] syz.1.117 uses obsolete (PF_INET,SOCK_PACKET) [ 106.163832][ T8] usb 4-1: usb_control_msg returned -32 [ 106.170359][ T8] usbtmc 4-1:16.0: can't read capabilities [ 106.273103][ T6190] loop1: detected capacity change from 0 to 256 [ 106.639176][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input5 [ 106.734866][ T3465] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.744152][ T3465] Bluetooth: hci4: Frame reassembly failed (-84) [ 106.763622][ T9] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input6 [ 106.816193][ T9] input: syz Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input7 [ 106.869339][ T9] input: syz Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0004/input/input8 [ 106.913906][ T9] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.2-1/input0 [ 106.946155][ T9] usb 3-1: USB disconnect, device number 4 [ 107.170359][ T8] usb 4-1: USB disconnect, device number 6 [ 107.228119][ T6206] fido_id[6206]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 107.630786][ T6218] input: syz0 as /devices/virtual/input/input9 [ 107.993997][ T6228] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 108.019002][ T6228] iommufd_mock iommufd_mock2: Adding to iommu group 1 [ 108.200049][ T6235] loop0: detected capacity change from 0 to 128 [ 108.268553][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 108.268569][ T28] audit: type=1800 audit(1776395124.742:19): pid=6235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.135" name="bus" dev="loop0" ino=1048603 res=0 errno=0 [ 108.500348][ T6241] loop2: detected capacity change from 0 to 256 [ 108.579349][ T6241] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 108.607486][ T6243] loop0: detected capacity change from 0 to 512 [ 108.686732][ T6243] EXT4-fs (loop0): 1 truncate cleaned up [ 108.693916][ T6243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.776540][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.785458][ T51] Bluetooth: hci0: command 0x080f tx timeout [ 108.791886][ T6199] Bluetooth: hci0: Opcode 0x080f failed: -110 [ 108.968431][ T6243] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 109.093904][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.168307][ T6237] loop3: detected capacity change from 0 to 40427 [ 109.230380][ T6237] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 109.258011][ T6237] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.282348][ T6237] F2FS-fs (loop3): invalid crc value [ 109.333941][ T6237] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.412118][ T6265] loop2: detected capacity change from 0 to 512 [ 109.571637][ T6265] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.610787][ T6265] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 109.640987][ T6265] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 109.654005][ T6237] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 109.674453][ T6265] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 109.693455][ T6268] netlink: 27 bytes leftover after parsing attributes in process `syz.0.146'. [ 109.693771][ T6237] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 109.742289][ T6265] System zones: 0-2, 18-18, 34-35 [ 109.754077][ T6265] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.834919][ T28] audit: type=1800 audit(1776395126.282:20): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 109.904365][ T28] audit: type=1804 audit(1776395126.302:21): pid=6265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.145" name="/newroot/44/file2/file1" dev="loop2" ino=15 res=1 errno=0 [ 110.053380][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.267783][ T993] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 110.304422][ T993] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 110.794619][ T6294] nbd2: detected capacity change from 0 to 63 [ 110.818857][ T6297] block nbd2: NBD_DISCONNECT [ 110.855340][ T6297] block nbd2: Disconnected due to user request. [ 110.869178][ T6297] block nbd2: shutting down sockets [ 110.875612][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 110.887063][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 110.895056][ T55] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 110.906203][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 110.914692][ T55] Buffer I/O error on dev nbd2, logical block 2, async page read [ 110.923762][ T55] Buffer I/O error on dev nbd2, logical block 3, async page read [ 110.933918][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 110.943607][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 110.951592][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 110.966367][ T55] Buffer I/O error on dev nbd2, logical block 2, async page read [ 110.974190][ T55] Buffer I/O error on dev nbd2, logical block 3, async page read [ 110.982323][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 110.991478][ T55] Buffer I/O error on dev nbd2, logical block 0, async page read [ 110.999366][ T55] Buffer I/O error on dev nbd2, logical block 1, async page read [ 111.007469][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 111.017052][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 111.027221][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 111.037019][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 111.046469][ T55] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 111.055675][ T5772] ldm_validate_partition_table(): Disk read failed. [ 111.076725][ T96] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 111.105073][ T5772] Dev nbd2: unable to read RDB block 0 [ 111.113494][ T5772] nbd2: unable to read partition table [ 111.129757][ T5772] ldm_validate_partition_table(): Disk read failed. [ 111.138569][ T5772] Dev nbd2: unable to read RDB block 0 [ 111.146684][ T5772] nbd2: unable to read partition table [ 112.066512][ T27] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.114259][ T6308] loop0: detected capacity change from 0 to 32768 [ 112.237371][ T6308] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.256468][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 112.266145][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 112.283207][ T27] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 112.293465][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.313472][ T27] usb 4-1: Product: syz [ 112.324652][ T27] usb 4-1: Manufacturer: syz [ 112.343771][ T27] usb 4-1: SerialNumber: syz [ 112.401172][ T6308] XFS (loop0): Ending clean mount [ 112.453258][ T6308] XFS (loop0): Quotacheck needed: Please wait. [ 112.629665][ T6308] XFS (loop0): Quotacheck: Done. [ 112.779003][ T28] audit: type=1800 audit(1776395129.252:22): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.162" name="file1" dev="loop0" ino=6150 res=0 errno=0 [ 112.853590][ T6331] netlink: 'syz.2.168': attribute type 1 has an invalid length. [ 112.916266][ T6308] XFS (loop0): User initiated shutdown received. [ 112.923831][ T6308] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 112.940105][ T6308] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 113.014637][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.613267][ T27] snd-usb-audio: probe of 4-1:1.0 failed with error -71 [ 113.660573][ T27] usb 4-1: USB disconnect, device number 7 [ 113.671060][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.678838][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.886536][ T28] audit: type=1326 audit(1776395130.352:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 113.950289][ T28] audit: type=1326 audit(1776395130.352:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.063242][ T28] audit: type=1326 audit(1776395130.352:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.103814][ T28] audit: type=1326 audit(1776395130.382:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.134875][ T6360] loop1: detected capacity change from 0 to 512 [ 114.153393][ T28] audit: type=1326 audit(1776395130.382:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.186561][ T6360] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.200226][ T6361] loop0: detected capacity change from 0 to 512 [ 114.215321][ T6361] EXT4-fs: Ignoring removed bh option [ 114.226854][ T28] audit: type=1326 audit(1776395130.382:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.296082][ T6361] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 114.331663][ T6360] EXT4-fs (loop1): 1 truncate cleaned up [ 114.349065][ T28] audit: type=1326 audit(1776395130.382:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.372525][ T6360] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.382090][ T28] audit: type=1326 audit(1776395130.382:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.386943][ T6361] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 114.409302][ T28] audit: type=1326 audit(1776395130.382:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.454049][ T28] audit: type=1326 audit(1776395130.392:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4affd9c819 code=0x7ffc0000 [ 114.502731][ T6361] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 114.552932][ T6361] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 114.563417][ T6361] System zones: 0-2, 18-18, 34-35 [ 114.579516][ T6361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.583249][ T6367] loop3: detected capacity change from 0 to 512 [ 114.756172][ T6369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.184'. [ 114.760378][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.813498][ T6369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.184'. [ 115.048422][ T6375] binder: 6374:6375 ioctl c0306201 2000000003c0 returned -14 [ 115.064762][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.177899][ T8] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 115.283386][ T6381] input: syz0 as /devices/virtual/input/input10 [ 115.337768][ T6379] syzkaller1: entered promiscuous mode [ 115.343355][ T6379] syzkaller1: entered allmulticast mode [ 115.389676][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.419686][ T8] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 115.456512][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.480280][ T8] usb 2-1: Product: syz [ 115.484555][ T8] usb 2-1: Manufacturer: syz [ 115.526433][ T8] usb 2-1: SerialNumber: syz [ 115.556028][ T8] usb 2-1: config 0 descriptor?? [ 115.613611][ T8] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 115.901488][ T6396] loop3: detected capacity change from 0 to 128 [ 115.934108][ T6396] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 115.980721][ T6396] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 116.062759][ T6396] ext2 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.442304][ T8] input: gspca_pac7302 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 116.482320][ T5767] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 116.644673][ T6405] loop3: detected capacity change from 0 to 64 [ 116.685829][ T8] usb 2-1: USB disconnect, device number 2 [ 117.326743][ T6410] nbd3: detected capacity change from 0 to 63 [ 117.369455][ T6413] block nbd3: NBD_DISCONNECT [ 117.394338][ T6413] block nbd3: Disconnected due to user request. [ 117.404401][ T6413] block nbd3: shutting down sockets [ 117.417489][ C0] blk_print_req_error: 79 callbacks suppressed [ 117.417506][ C0] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 117.432945][ C0] buffer_io_error: 138 callbacks suppressed [ 117.432960][ C0] Buffer I/O error on dev nbd3, logical block 0, async page read [ 117.446815][ C0] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 3 prio class 2 [ 117.455917][ C0] Buffer I/O error on dev nbd3, logical block 1, async page read [ 117.463836][ C0] Buffer I/O error on dev nbd3, logical block 2, async page read [ 117.471665][ C0] Buffer I/O error on dev nbd3, logical block 3, async page read [ 117.506393][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.515656][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 117.523584][ T3062] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 117.524804][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 117.542850][ T55] Buffer I/O error on dev nbd3, logical block 2, async page read [ 117.551291][ T55] Buffer I/O error on dev nbd3, logical block 3, async page read [ 117.559759][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.569181][ T55] Buffer I/O error on dev nbd3, logical block 0, async page read [ 117.578184][ T55] Buffer I/O error on dev nbd3, logical block 1, async page read [ 117.586829][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.596649][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.606193][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.616550][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.625961][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.635949][ T5772] ldm_validate_partition_table(): Disk read failed. [ 117.643443][ T55] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 117.653552][ T5772] Dev nbd3: unable to read RDB block 0 [ 117.660508][ T5772] nbd3: unable to read partition table [ 117.676515][ T5772] ldm_validate_partition_table(): Disk read failed. [ 117.685723][ T5772] Dev nbd3: unable to read RDB block 0 [ 117.695448][ T5772] nbd3: unable to read partition table [ 117.764329][ T3062] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 117.791615][ T3062] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.852523][ T3062] usb 3-1: config 0 descriptor?? [ 117.982297][ T6422] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 118.009694][ T6422] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 118.062157][ T6422] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 118.072371][ T6422] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 118.086458][ T6422] overlayfs: d_ino too big (34, ino=9223372036854776015, xinobits=3) [ 118.102869][ T6422] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 118.112735][ T6422] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 118.148980][ T6422] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 118.165135][ T6422] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 118.175767][ T6422] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 118.192445][ T6422] overlayfs: d_ino too big (dev, ino=9223372036854775811, xinobits=3) [ 118.716441][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 118.907810][ T27] usb 2-1: Using ep0 maxpacket: 8 [ 118.928043][ T27] usb 2-1: config 1 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 67, changing to 10 [ 118.946344][ T27] usb 2-1: config 1 interface 0 has no altsetting 0 [ 118.957898][ T27] usb 2-1: string descriptor 0 read error: -22 [ 118.964500][ T27] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 118.980610][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.143422][ T6431] loop3: detected capacity change from 0 to 32768 [ 119.158648][ T3062] usb 3-1: Cannot set autoneg [ 119.164269][ T3062] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 119.201670][ T6431] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 119.222720][ T6431] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.240893][ T3062] usb 3-1: USB disconnect, device number 5 [ 119.441079][ T6433] loop0: detected capacity change from 0 to 32768 [ 119.472293][ T6433] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.208 (6433) [ 119.492114][ T27] acrux 0003:1A34:0802.0005: invalid report_size -1149171161 [ 119.494761][ T6431] XFS (loop3): Ending clean mount [ 119.524284][ T27] acrux 0003:1A34:0802.0005: item 0 4 1 7 parsing failed [ 119.524672][ T6433] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 119.547061][ T6433] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 119.565177][ T27] acrux 0003:1A34:0802.0005: parse failed [ 119.575406][ T6433] BTRFS info (device loop0): setting nodatasum [ 119.584643][ T27] acrux: probe of 0003:1A34:0802.0005 failed with error -22 [ 119.595802][ T6433] BTRFS info (device loop0): force zlib compression, level 3 [ 119.626809][ T6433] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 119.657756][ T6433] BTRFS info (device loop0): use lzo compression, level 0 [ 119.665020][ T6433] BTRFS info (device loop0): turning on flush-on-commit [ 119.688979][ T6433] BTRFS info (device loop0): enabling auto defrag [ 119.705847][ T6433] BTRFS info (device loop0): max_inline at 4096 [ 119.723138][ T6433] BTRFS info (device loop0): using free space tree [ 119.797433][ T1194] usb 2-1: USB disconnect, device number 3 [ 119.896566][ T6433] BTRFS info (device loop0): enabling ssd optimizations [ 120.069489][ T5767] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.147535][ T5768] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.455713][ T6466] loop2: detected capacity change from 0 to 4096 [ 120.565100][ T6466] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 120.615278][ T5772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop0 scanned by udevd (5772) [ 120.766567][ T6466] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 120.817133][ T6466] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 121.816720][ T1194] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.026770][ T1194] usb 3-1: config 1 has an invalid interface number: 188 but max is 0 [ 122.037863][ T1194] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.066259][ T1194] usb 3-1: config 1 has no interface number 0 [ 122.093099][ T1194] usb 3-1: config 1 interface 188 has no altsetting 0 [ 122.118368][ T1194] usb 3-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 122.134647][ T1194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.169482][ T1194] usb 3-1: Product: syz [ 122.173769][ T1194] usb 3-1: Manufacturer: syz [ 122.191383][ T1194] usb 3-1: SerialNumber: syz [ 122.277610][ T6508] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 122.437532][ T6511] IPv6: sit1: Disabled Multicast RS [ 122.567829][ T23] usb 3-1: USB disconnect, device number 6 [ 122.724927][ T6521] loop1: detected capacity change from 0 to 512 [ 122.774545][ T6521] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.806597][ T6521] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.865084][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 122.865099][ T28] audit: type=1800 audit(1776395139.332:47): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.233" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 122.948312][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.223519][ T6530] syzkaller1: entered promiscuous mode [ 123.229305][ T6530] syzkaller1: entered allmulticast mode [ 123.356924][ T6533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 123.365875][ T6533] netlink: 'syz.0.237': attribute type 9 has an invalid length. [ 123.393197][ T6533] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.402689][ T6533] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.411645][ T6533] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 123.421642][ T6533] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.065943][ T6537] loop0: detected capacity change from 0 to 32768 [ 124.142711][ T6550] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.161759][ T6550] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 124.307250][ T6537] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.503351][ T6558] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.580488][ T6561] loop2: detected capacity change from 0 to 512 [ 124.605055][ T6561] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 124.672123][ T6561] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.248: bg 0: block 104: invalid block bitmap [ 124.726382][ T6561] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6655: Corrupt filesystem [ 124.751138][ T6561] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.248: invalid indirect mapped block 1 (level 1) [ 124.784621][ T6561] EXT4-fs (loop2): 1 truncate cleaned up [ 124.808560][ T6561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.874109][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 125.135258][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.484967][ T6556] loop1: detected capacity change from 0 to 40427 [ 125.535424][ T6556] F2FS-fs (loop1): invalid crc value [ 125.583951][ T6556] F2FS-fs (loop1): Found nat_bits in checkpoint [ 125.778088][ T6556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 125.826563][ T6592] netlink: 'syz.0.258': attribute type 3 has an invalid length. [ 125.969022][ T6556] syz.1.247: attempt to access beyond end of device [ 125.969022][ T6556] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 126.063485][ T5769] syz-executor: attempt to access beyond end of device [ 126.063485][ T5769] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 126.091739][ T5769] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 126.457000][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.653227][ T6608] binder: 6607:6608 ioctl c0306201 2000000001c0 returned -14 [ 126.666577][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 126.684636][ T8] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 126.716780][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 126.746908][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.776971][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 126.805391][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 126.835882][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.866029][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.901590][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.143828][ T8] usb 1-1: usb_control_msg returned -32 [ 127.159798][ T8] usbtmc 1-1:16.0: can't read capabilities [ 127.542793][ T6636] usbtmc 1-1:16.0: stb usb_control_msg returned -32 [ 127.561396][ T9] usb 1-1: USB disconnect, device number 5 [ 127.845634][ T6646] process 'syz.2.278' launched './file1' with NULL argv: empty string added [ 128.008385][ T68] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x43 [ 128.206759][ T6655] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 128.889578][ T1194] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 129.086439][ T1194] usb 4-1: Using ep0 maxpacket: 8 [ 129.097905][ T1194] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.106760][ T1194] usb 4-1: config 179 has no interface number 0 [ 129.113173][ T1194] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.136434][ T1194] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.149035][ T1194] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.160859][ T1194] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 129.172896][ T1194] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.229394][ T1194] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 129.264821][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.308842][ T6668] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.493377][ T6682] loop2: detected capacity change from 0 to 128 [ 129.571485][ T6682] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 129.719384][ T28] audit: type=1800 audit(1776395146.182:48): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.290" name="bus" dev="loop2" ino=115 res=0 errno=0 [ 129.905871][ T1194] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input12 [ 129.997688][ T6685] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 130.238690][ T3062] usb 4-1: USB disconnect, device number 8 [ 130.238698][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 130.255370][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 130.265012][ T3062] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 130.451727][ T28] audit: type=1800 audit(1776395146.922:49): pid=6682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.290" name="file1" dev="loop2" ino=94 res=0 errno=0 [ 130.522522][ T6682] syz.2.290 (6682) used greatest stack depth: 20368 bytes left [ 130.947191][ T3062] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.961123][ T6703] loop3: detected capacity change from 0 to 256 [ 130.982706][ T6703] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 131.137992][ T3062] usb 1-1: Using ep0 maxpacket: 8 [ 131.161665][ T3062] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 131.190217][ T3062] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.208635][ T3062] usb 1-1: Product: syz [ 131.216932][ T3062] usb 1-1: Manufacturer: syz [ 131.229567][ T3062] usb 1-1: SerialNumber: syz [ 131.243897][ T3062] usb 1-1: config 0 descriptor?? [ 131.355953][ T6701] loop2: detected capacity change from 0 to 32768 [ 131.366464][ T6701] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 131.487862][ T3062] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 131.505410][ T6011] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 132.336955][ T3062] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 132.367105][ T3062] usb 1-1: USB disconnect, device number 6 [ 132.551450][ T6720] loop3: detected capacity change from 0 to 1024 [ 132.614189][ T6720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.707569][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.180749][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.190731][ T6736] team_slave_0: entered promiscuous mode [ 133.193961][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.197056][ T6736] team_slave_1: entered promiscuous mode [ 133.263612][ T6736] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 133.297534][ T6736] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 134.257217][ T1194] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 134.479021][ T1194] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.499324][ T1194] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.518014][ T1194] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 134.529452][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 134.566477][ T1194] usb 2-1: SerialNumber: syz [ 134.825599][ T1194] usb 2-1: 0:2 : does not exist [ 134.891149][ T1194] usb 2-1: USB disconnect, device number 4 [ 135.018431][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 136.116524][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 136.289884][ T6816] loop0: detected capacity change from 0 to 164 [ 136.352917][ T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 136.364062][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.391919][ T5772] blk_print_req_error: 91 callbacks suppressed [ 136.391938][ T5772] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.397008][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.446945][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 136.482508][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 136.497793][ T9] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 136.505992][ T9] usb 4-1: Manufacturer: syz [ 136.551880][ T9] usb 4-1: config 0 descriptor?? [ 136.608565][ T6811] loop1: detected capacity change from 0 to 32768 [ 136.641295][ T6811] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 136.905909][ T5772] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 137.016148][ T9] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 137.033040][ T9] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 137.077054][ T9] appleir 0003:05AC:8243.0006: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 137.456677][ T5836] usb 4-1: USB disconnect, device number 9 [ 137.914930][ T6838] capability: warning: `syz.1.348' uses 32-bit capabilities (legacy support in use) [ 138.287343][ T6841] netlink: 165 bytes leftover after parsing attributes in process `syz.3.350'. [ 138.448686][ T6839] loop2: detected capacity change from 0 to 32768 [ 138.495739][ T6839] JBD2: Ignoring recovery information on journal [ 138.591307][ T6839] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 138.781475][ T6851] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 138.899150][ T6839] syz.2.349 (6839) used greatest stack depth: 18768 bytes left [ 139.011894][ T5770] ocfs2: Unmounting device (7,2) on (node local) [ 140.108240][ T6884] netlink: 'syz.1.367': attribute type 2 has an invalid length. [ 140.116130][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.367'. [ 140.236523][ T5779] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.370326][ T6890] loop3: detected capacity change from 0 to 1024 [ 140.429653][ T6890] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.431033][ T5779] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.493431][ T6890] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 140.506504][ T5779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.535650][ T6890] EXT4-fs (loop3): orphan cleanup on readonly fs [ 140.560026][ T5779] usb 3-1: config 0 descriptor?? [ 140.576212][ T6890] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.370: Freeing blocks not in datazone - block = 0, count = 4096 [ 140.617780][ T6890] EXT4-fs (loop3): Remounting filesystem read-only [ 140.624893][ T6890] EXT4-fs (loop3): 1 orphan inode deleted [ 140.637230][ T6890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.638014][ T5779] cp210x 3-1:0.0: cp210x converter detected [ 140.890875][ T5767] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.976683][ T5779] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 141.029199][ T5779] usb 3-1: cp210x converter now attached to ttyUSB0 [ 141.193571][ T5779] usb 3-1: USB disconnect, device number 7 [ 141.224156][ T5779] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.269340][ T5779] cp210x 3-1:0.0: device disconnected [ 141.424461][ T6894] loop1: detected capacity change from 0 to 32768 [ 141.476700][ T6894] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.603291][ T6894] XFS (loop1): Ending clean mount [ 141.610546][ T5836] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 141.655881][ T6894] XFS (loop1): Quotacheck needed: Please wait. [ 141.715864][ T6913] loop0: detected capacity change from 0 to 512 [ 141.753758][ T6913] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.775560][ T6894] XFS (loop1): Quotacheck: Done. [ 141.785996][ T6913] EXT4-fs (loop0): 1 truncate cleaned up [ 141.833807][ T6913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.868032][ T5836] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 141.925872][ T5836] usb 4-1: config 1 interface 0 has no altsetting 0 [ 141.955585][ T5836] usb 4-1: string descriptor 0 read error: -22 [ 141.972673][ T5836] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.40 [ 141.991161][ T5836] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.106628][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.172406][ T5769] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.460385][ T5836] chicony 0003:04F2:1421.0007: collection stack underflow [ 142.472050][ T5836] chicony 0003:04F2:1421.0007: item 0 0 0 12 parsing failed [ 142.498566][ T5836] chicony 0003:04F2:1421.0007: Chicony hid parse failed: -22 [ 142.509602][ T5836] chicony: probe of 0003:04F2:1421.0007 failed with error -22 [ 142.676475][ T5836] usb 4-1: USB disconnect, device number 10 [ 142.732773][ T6928] kvm: kvm [6927]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 142.743620][ T6928] kvm: kvm [6927]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 143.287920][ T11] ------------[ cut here ]------------ [ 143.294120][ T11] WARNING: CPU: 1 PID: 11 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.305207][ T11] Modules linked in: [ 143.308342][ T993] ------------[ cut here ]------------ [ 143.309248][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 143.315265][ T993] WARNING: CPU: 0 PID: 993 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.322620][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.333643][ T993] Modules linked in: [ 143.344086][ T11] Workqueue: phy4 ieee80211_csa_finalize_work [ 143.348416][ T993] CPU: 0 PID: 993 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 143.354068][ T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.361737][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.369228][ T11] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 143.379113][ T993] Workqueue: phy6 ieee80211_csa_finalize_work [ 143.379156][ T993] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.399831][ C1] ------------[ cut here ]------------ [ 143.399875][ C1] WARNING: CPU: 1 PID: 11 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 143.405978][ T993] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 143.406000][ T993] RSP: 0018:ffffc9000434f9c0 EFLAGS: 00010293 [ 143.406022][ T993] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff888022710000 [ 143.413749][ C1] Modules linked in: [ 143.413770][ C1] CPU: 1 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 143.413793][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.413805][ C1] Workqueue: phy4 ieee80211_csa_finalize_work [ 143.413837][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 143.413866][ C1] Code: 24 4c 89 e7 e8 8e 80 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 79 be 82 f7 0f 0b e9 f6 f7 ff ff e8 6d be 82 f7 <0f> 0b e9 48 fb ff ff e8 61 be 82 f7 48 c7 c7 00 85 64 8e 4c 89 e6 [ 143.413883][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 143.413901][ C1] RAX: ffffffff8a046393 RBX: ffffffff8a045196 RCX: ffff88801ba43c00 [ 143.413918][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.413932][ C1] RBP: 0000000000000000 R08: ffff88801ba43c00 R09: 0000000000000003 [ 143.413947][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805c4623c0 [ 143.413962][ C1] R13: dffffc0000000000 R14: ffff88805c4628b0 R15: ffff88802b8bb024 [ 143.413979][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 143.429346][ T993] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 143.429371][ T993] RBP: dffffc0000000000 R08: ffff88805c5855af R09: 1ffff1100b8b0ab5 [ 143.429388][ T993] R10: dffffc0000000000 R11: ffffed100b8b0ab6 R12: 0000000000000001 [ 143.429404][ T993] R13: ffff88805c5865d9 R14: ffff88807b9b2c70 R15: ffff88807b9b2ce8 [ 143.449070][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.449093][ C1] CR2: 00002000000ca030 CR3: 0000000024cc0000 CR4: 00000000003506e0 [ 143.449123][ C1] Call Trace: [ 143.449151][ C1] [ 143.449164][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 143.449205][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 143.449237][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 143.449275][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 143.449308][ C1] __iterate_interfaces+0x243/0x500 [ 143.449342][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 143.449370][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 143.449405][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 143.449432][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 143.455528][ T993] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 143.463676][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 143.467637][ T993] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.475134][ C1] __hrtimer_run_queues+0x520/0xc40 [ 143.487122][ T993] CR2: 00007fb560fe8c38 CR3: 0000000024cc0000 CR4: 00000000003506f0 [ 143.491532][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 143.498196][ T993] Call Trace: [ 143.517508][ C1] ? hw_scan_work+0xf60/0xf60 [ 143.517555][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 143.517580][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 143.517635][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 143.523699][ T993] [ 143.531762][ C1] handle_softirqs+0x280/0x820 [ 143.539823][ T993] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 143.547894][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 143.555889][ T993] ieee80211_csa_finalize+0x5a6/0xf20 [ 143.563926][ C1] ? do_softirq+0x1a0/0x1a0 [ 143.572924][ T993] ? mutex_lock_nested+0x20/0x20 [ 143.580968][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 143.581007][ C1] __irq_exit_rcu+0xd3/0x190 [ 143.581032][ C1] ? irq_exit_rcu+0x20/0x20 [ 143.581062][ C1] irq_exit_rcu+0x9/0x20 [ 143.581082][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 143.581108][ C1] [ 143.581117][ C1] [ 143.581127][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.581156][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 143.581186][ C1] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 143.581205][ C1] RSP: 0018:ffffc900001072a0 EFLAGS: 00000293 [ 143.581229][ C1] RAX: ffffffff816b9b86 RBX: ffffc9000010743f RCX: ffff88801ba43c00 [ 143.581246][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.581259][ C1] RBP: ffffc90000107410 R08: ffffffff911c55c7 R09: 1ffffffff2238ab8 [ 143.581277][ C1] R10: dffffc0000000000 R11: fffffbfff2238ab9 R12: ffffffff8d8b94c0 [ 143.581294][ C1] R13: 1ffffffff19f9704 R14: ffffffff8d8b9518 R15: dffffc0000000000 [ 143.581320][ C1] ? console_flush_all+0x8a6/0xd20 [ 143.581355][ C1] ? __rwlock_init+0x150/0x150 [ 143.591280][ T993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 143.597439][ C1] ? console_flush_all+0x10a/0xd20 [ 143.597487][ C1] ? is_console_locked+0x20/0x20 [ 143.597510][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 143.597548][ C1] console_unlock+0xad/0x350 [ 143.597579][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 143.605596][ T993] ? ieee80211_csa_finalize_work+0x140/0x140 [ 143.612264][ C1] ? vprintk_emit+0x467/0x610 [ 143.620349][ T993] ? read_lock_is_recursive+0x20/0x20 [ 143.623725][ C1] ? vprintk_emit+0x30b/0x610 [ 143.626838][ T993] ieee80211_csa_finalize_work+0xf6/0x140 [ 143.632197][ C1] ? vprintk_emit+0x30b/0x610 [ 143.632247][ C1] vprintk_emit+0x497/0x610 [ 143.632274][ C1] ? vprintk_emit+0x30b/0x610 [ 143.632311][ C1] ? printk_sprint+0x460/0x460 [ 143.637872][ T993] ? process_scheduled_works+0x96f/0x15d0 [ 143.644601][ C1] ? vprintk_emit+0x30b/0x610 [ 143.650217][ T993] process_scheduled_works+0xa5d/0x15d0 [ 143.655446][ C1] ? vprintk_emit+0x53d/0x610 [ 143.662246][ T993] ? worker_attach_to_pool+0x380/0x380 [ 143.669032][ C1] _printk+0xde/0x130 [ 143.675292][ T993] ? assign_work+0x3d2/0x5d0 [ 143.682375][ C1] ? copy_from_kernel_nofault+0x1d2/0x310 [ 143.693073][ T993] worker_thread+0xa55/0xfc0 [ 143.696653][ C1] ? load_image+0x420/0x420 [ 143.696687][ C1] ? _printk+0xde/0x130 [ 143.696715][ C1] ? set_worker_desc+0x1f0/0x1f0 [ 143.696738][ C1] ? copy_from_kernel_nofault_allowed+0xbd/0x130 [ 143.696770][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 143.703378][ T993] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 143.708659][ C1] ? copy_from_kernel_nofault+0x1eb/0x310 [ 143.708699][ C1] ? ieee80211_vif_use_reserved_switch+0x10be/0x28f0 [ 143.716750][ T993] ? _raw_spin_unlock+0x40/0x40 [ 143.722767][ C1] show_opcodes+0x146/0x170 [ 143.726110][ T993] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 143.730886][ C1] show_iret_regs+0x1d/0x50 [ 143.736058][ T993] kthread+0x2fa/0x390 [ 143.742223][ C1] __show_regs+0x34/0x600 [ 143.742256][ C1] ? dump_stack_print_info+0xf5/0x150 [ 143.742291][ C1] show_regs+0x44/0x90 [ 143.742319][ C1] __warn+0x160/0x470 [ 143.747517][ T993] ? pr_cont_work+0x560/0x560 [ 143.750462][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.755254][ T993] ? kthread_blkcg+0xd0/0xd0 [ 143.761808][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.766642][ T993] ret_from_fork+0x48/0x80 [ 143.772042][ C1] report_bug+0x2be/0x4f0 [ 143.776772][ T993] ? kthread_blkcg+0xd0/0xd0 [ 143.781569][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.786820][ T993] ret_from_fork_asm+0x11/0x20 [ 143.791433][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.791465][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 143.791491][ C1] handle_bug+0xcf/0x120 [ 143.791516][ C1] exc_invalid_op+0x1a/0x50 [ 143.791536][ C1] asm_exc_invalid_op+0x1a/0x20 [ 143.791564][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.791594][ C1] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 143.791613][ C1] RSP: 0018:ffffc900001079c0 EFLAGS: 00010293 [ 143.791637][ C1] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff88801ba43c00 [ 143.791654][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 143.791667][ C1] RBP: dffffc0000000000 R08: ffff88805c4615af R09: 1ffff1100b88c2b5 [ 143.791685][ C1] R10: dffffc0000000000 R11: ffffed100b88c2b6 R12: 0000000000000001 [ 143.791701][ C1] R13: ffff88805c4625d9 R14: ffff88807ce8ac70 R15: ffff88807ce8ace8 [ 143.791727][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 143.791777][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 143.791812][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 143.791849][ C1] ? mutex_lock_nested+0x20/0x20 [ 143.791875][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 143.791902][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 143.791933][ C1] ? read_lock_is_recursive+0x20/0x20 [ 143.791969][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 143.792000][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 143.797016][ T993] [ 143.800859][ C1] process_scheduled_works+0xa5d/0x15d0 [ 143.806702][ T993] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 143.806752][ T993] CPU: 0 PID: 993 Comm: kworker/u4:5 Not tainted syzkaller #0 [ 143.806810][ T993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.806844][ T993] Workqueue: phy6 ieee80211_csa_finalize_work [ 143.806940][ T993] Call Trace: [ 143.806963][ T993] [ 143.806986][ T993] dump_stack_lvl+0x18c/0x250 [ 143.807099][ T993] ? show_regs_print_info+0x20/0x20 [ 143.807188][ T993] ? load_image+0x420/0x420 [ 143.807303][ T993] panic+0x2dc/0x730 [ 143.807392][ T993] ? bpf_jit_dump+0xd0/0xd0 [ 143.807494][ T993] ? ret_from_fork_asm+0x11/0x20 [ 143.807586][ T993] __warn+0x2e0/0x470 [ 143.807654][ T993] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.807727][ T993] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.807795][ T993] report_bug+0x2be/0x4f0 [ 143.807911][ T993] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.807981][ T993] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.808083][ T993] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 143.808167][ T993] handle_bug+0xcf/0x120 [ 143.808248][ T993] exc_invalid_op+0x1a/0x50 [ 143.808351][ T993] asm_exc_invalid_op+0x1a/0x20 [ 143.808418][ T993] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 143.808496][ T993] Code: 48 89 df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c [ 143.808539][ T993] RSP: 0018:ffffc9000434f9c0 EFLAGS: 00010293 [ 143.808586][ T993] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff888022710000 [ 143.808632][ T993] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 143.808666][ T993] RBP: dffffc0000000000 R08: ffff88805c5855af R09: 1ffff1100b8b0ab5 [ 143.808702][ T993] R10: dffffc0000000000 R11: ffffed100b8b0ab6 R12: 0000000000000001 [ 143.808737][ T993] R13: ffff88805c5865d9 R14: ffff88807b9b2c70 R15: ffff88807b9b2ce8 [ 143.808805][ T993] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 143.808932][ T993] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 143.809014][ T993] ieee80211_csa_finalize+0x5a6/0xf20 [ 143.809099][ T993] ? mutex_lock_nested+0x20/0x20 [ 143.809157][ T993] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 143.809223][ T993] ? ieee80211_csa_finalize_work+0x140/0x140 [ 143.809295][ T993] ? read_lock_is_recursive+0x20/0x20 [ 143.809391][ T993] ieee80211_csa_finalize_work+0xf6/0x140 [ 143.809468][ T993] ? process_scheduled_works+0x96f/0x15d0 [ 143.809539][ T993] process_scheduled_works+0xa5d/0x15d0 [ 143.809638][ T993] ? worker_attach_to_pool+0x380/0x380 [ 143.809637][ C1] ? worker_attach_to_pool+0x380/0x380 [ 143.809678][ C1] ? assign_work+0x3d2/0x5d0 [ 143.809805][ C1] worker_thread+0xa55/0xfc0 [ 143.809968][ C1] kthread+0x2fa/0x390 [ 143.810015][ C1] ? pr_cont_work+0x560/0x560 [ 143.810074][ C1] ? kthread_blkcg+0xd0/0xd0 [ 143.810138][ C1] ret_from_fork+0x48/0x80 [ 143.810205][ C1] ? kthread_blkcg+0xd0/0xd0 [ 143.810262][ C1] ret_from_fork_asm+0x11/0x20 [ 143.810374][ C1] [ 143.810397][ C1] irq event stamp: 2517124 [ 143.810419][ C1] hardirqs last enabled at (2517126): [] vprintk_store+0xa33/0xda0 [ 143.810500][ C1] hardirqs last disabled at (2517127): [] vprintk_store+0x190/0xda0 [ 143.810578][ C1] softirqs last enabled at (2516250): [] __irq_exit_rcu+0xd3/0x190 [ 143.810643][ C1] softirqs last disabled at (2516255): [] __irq_exit_rcu+0xd3/0x190 [ 143.810707][ C1] ---[ end trace 0000000000000000 ]--- [ 143.816902][ T11] RSP: 0018:ffffc900001079c0 EFLAGS: 00010293 [ 143.817043][ T11] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff88801ba43c00 [ 143.817086][ T11] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 143.817111][ T11] RBP: dffffc0000000000 R08: ffff88805c4615af R09: 1ffff1100b88c2b5 [ 143.817152][ T11] R10: dffffc0000000000 R11: ffffed100b88c2b6 R12: 0000000000000001 [ 143.817185][ T11] R13: ffff88805c4625d9 R14: ffff88807ce8ac70 R15: ffff88807ce8ace8 [ 143.817317][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 143.817387][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.817421][ T11] CR2: 00002000000ca030 CR3: 0000000024cc0000 CR4: 00000000003506e0 [ 143.817462][ T11] Call Trace: [ 143.817485][ T11] [ 143.817559][ T11] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 143.817667][ T11] ieee80211_csa_finalize+0x5a6/0xf20 [ 143.817740][ T11] ? mutex_lock_nested+0x20/0x20 [ 143.817798][ T11] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 143.817874][ T11] ? ieee80211_csa_finalize_work+0x140/0x140 [ 143.818014][ T11] ? read_lock_is_recursive+0x20/0x20 [ 143.818102][ T11] ieee80211_csa_finalize_work+0xf6/0x140 [ 143.818187][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 143.818474][ T11] process_scheduled_works+0xa5d/0x15d0 [ 143.818642][ T11] ? worker_attach_to_pool+0x380/0x380 [ 143.818684][ T11] ? assign_work+0x3d2/0x5d0 [ 143.818799][ T11] worker_thread+0xa55/0xfc0 [ 143.818985][ T11] kthread+0x2fa/0x390 [ 143.819040][ T11] ? pr_cont_work+0x560/0x560 [ 143.819120][ T11] ? kthread_blkcg+0xd0/0xd0 [ 143.819175][ T11] ret_from_fork+0x48/0x80 [ 143.819243][ T11] ? kthread_blkcg+0xd0/0xd0 [ 143.819307][ T11] ret_from_fork_asm+0x11/0x20 [ 143.819429][ T11] [ 143.819442][ T11] irq event stamp: 2517345 [ 143.819465][ T11] hardirqs last enabled at (2517347): [] vprintk_store+0xa33/0xda0 [ 143.819543][ T11] hardirqs last disabled at (2517348): [] vprintk_store+0x190/0xda0 [ 143.819624][ T11] softirqs last enabled at (2517282): [] __irq_exit_rcu+0xd3/0x190 [ 143.819692][ T11] softirqs last disabled at (2516255): [] __irq_exit_rcu+0xd3/0x190 [ 143.819751][ T11] ---[ end trace 0000000000000000 ]--- [ 143.965150][ T11] ------------[ cut here ]------------ [ 143.965198][ T11] WARNING: CPU: 1 PID: 11 at net/mac80211/chan.c:1423 ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 143.965319][ T11] Modules linked in: [ 143.965363][ T11] CPU: 1 PID: 11 Comm: kworker/u4:0 Tainted: G W syzkaller #0 [ 143.965420][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.965456][ T11] Workqueue: phy4 ieee80211_csa_finalize_work [ 143.965536][ T11] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 143.965605][ T11] Code: df e8 1a 4a d6 f7 e9 dc fc ff ff e8 90 12 7e f7 eb 24 e8 89 12 7e f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 78 12 7e f7 0f 0b <0f> 0b e9 cf f5 ff ff e8 6a 12 7e f7 48 8b 7c 24 08 4c 8b 7c 24 30 [ 143.965654][ T11] RSP: 0018:ffffc900001079c0 EFLAGS: 00010293 [ 143.965700][ T11] RAX: ffffffff8a090b8e RBX: 0000000000000001 RCX: ffff88801ba43c00 [ 143.965737][ T11] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 143.965770][ T11] RBP: dffffc0000000000 R08: ffff88805c4615af R09: 1ffff1100b88c2b5 [ 143.965806][ T11] R10: dffffc0000000000 R11: ffffed100b88c2b6 R12: 0000000000000001 [ 143.965854][ T11] R13: ffff88805c4625d9 R14: ffff88807ce8ac70 R15: ffff88807ce8ace8 [ 143.965892][ T11] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 143.965937][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.965971][ T11] CR2: 00007fb561b4da08 CR3: 0000000060e1b000 CR4: 00000000003506e0 [ 143.966017][ T11] Call Trace: [ 143.966041][ T11] [ 143.966120][ T11] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 143.966242][ T11] ieee80211_csa_finalize+0x5a6/0xf20 [ 143.966673][ T11] ? mutex_lock_nested+0x20/0x20 [ 143.966745][ T11] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 143.966817][ T11] ? ieee80211_csa_finalize_work+0x140/0x140 [ 143.966892][ T11] ? read_lock_is_recursive+0x20/0x20 [ 143.966984][ T11] ieee80211_csa_finalize_work+0xf6/0x140 [ 143.967055][ T11] ? process_scheduled_works+0x96f/0x15d0 [ 143.967134][ T11] process_scheduled_works+0xa5d/0x15d0 [ 143.967285][ T11] ? worker_attach_to_pool+0x380/0x380 [ 143.967368][ T11] ? assign_work+0x3d2/0x5d0 [ 143.967457][ T11] worker_thread+0xa55/0xfc0 [ 143.967718][ T11] kthread+0x2fa/0x390 [ 143.967774][ T11] ? pr_cont_work+0x560/0x560 [ 143.967882][ T11] ? kthread_blkcg+0xd0/0xd0 [ 143.967941][ T11] ret_from_fork+0x48/0x80 [ 143.968002][ T11] ? kthread_blkcg+0xd0/0xd0 [ 143.968060][ T11] ret_from_fork_asm+0x11/0x20 [ 143.968149][ T11] [ 143.968179][ T11] irq event stamp: 2517455 [ 143.968201][ T11] hardirqs last enabled at (2517457): [] vprintk_store+0xa33/0xda0 [ 143.968274][ T11] hardirqs last disabled at (2517458): [] vprintk_store+0x190/0xda0 [ 143.968363][ T11] softirqs last enabled at (2517418): [] __irq_exit_rcu+0xd3/0x190 [ 143.968431][ T11] softirqs last disabled at (2517409): [] __irq_exit_rcu+0xd3/0x190 [ 143.968512][ T11] ---[ end trace 0000000000000000 ]--- [ 143.971674][ T11] wlan0: failed to finalize CSA, disconnecting [ 145.192318][ T993] ? assign_work+0x3d2/0x5d0 [ 145.196977][ T993] worker_thread+0xa55/0xfc0 [ 145.201632][ T993] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 145.207574][ T993] ? _raw_spin_unlock+0x40/0x40 [ 145.212473][ T993] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 145.218434][ T993] kthread+0x2fa/0x390 [ 145.222551][ T993] ? pr_cont_work+0x560/0x560 [ 145.227337][ T993] ? kthread_blkcg+0xd0/0xd0 [ 145.231990][ T993] ret_from_fork+0x48/0x80 [ 145.236453][ T993] ? kthread_blkcg+0xd0/0xd0 [ 145.241089][ T993] ret_from_fork_asm+0x11/0x20 [ 145.245922][ T993] [ 145.249218][ T993] Kernel Offset: disabled [ 145.253677][ T993] Rebooting in 86400 seconds..