last executing test programs: 4.357180047s ago: executing program 4 (id=360): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000280), 0x80800) syz_open_procfs$namespace(0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000100)=@fd={0x6, 0x2, 0x4, 0x10000, 0x7, {0x0, 0x2710}, {0x1, 0x2, 0x9f, 0x9, 0x7, 0x10, "958131d4"}, 0x8, 0x4, {}, 0x8001}) socket$inet_sctp(0x2, 0x1, 0x84) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) 3.335984692s ago: executing program 2 (id=367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa4000000860a0b0400"], 0xcc}}, 0x0) 3.335864337s ago: executing program 3 (id=368): pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.124249903s ago: executing program 2 (id=371): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) dup(r0) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r2, 0x0) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 3.013755353s ago: executing program 4 (id=373): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)={0x7e, 0x0, 0x5, 0x7, 0xffffffdf}) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) writev(0xffffffffffffffff, 0x0, 0x0) 2.976393573s ago: executing program 2 (id=374): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f03e, 0x4}) 2.946412099s ago: executing program 2 (id=375): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x4, 0x7, 0x1, 0xfffffff8}, {0x6, 0x9, 0x75}]}) 2.234889283s ago: executing program 1 (id=377): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000240)={0x1f, 0xffdb, 0x4}, 0x6) 2.232477727s ago: executing program 2 (id=378): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 2.219740303s ago: executing program 0 (id=379): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24004000}, 0x844) 2.219461297s ago: executing program 3 (id=380): r0 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x200880, &(0x7f0000000100), 0xf, 0x9a13, &(0x7f0000014b40)="$eJzs3QncpXPhuP9nxhj7WkqLjF2bfddiKRLZZStL9qyhSAsSIYWsUULJlsgWikQSsu/7LoWixb78X2NmmMY189Xv9/3Hb67rer2eec65z33u+Zz7fT73PMf9OGetZVZbamBg6oERjfr+asc+/b6Td3p6qb1OveGEp5Y9fvmTRy4eOuLbkGEjv8808vvMAwMDg0ZuZ9CIZYOHnHnW4IGJBwYGj77dySeZbNDkAwMbj7y6xMjvC4/4NsW1o9Z7aYx4oMOHMWjfEV8j/tKBgYFJhl94YmDuNUffzshxzfOaByptrSWXXeZVq1fchu+/ISMvj/41dMTXFFcMDExx+QA/Pwa9sY/o5b9/6oMvWXudN3gc/0+01pLLLjeG//C5OMHIZQsPn+NjzkFjYz7Phy1856hj0CA8cP4/0lpLLrPCq9d2G/M4P7Dei0ft8NLLx83Bkw4MDJ5sYGDw5AMDg6cYGBg85cDA4KneaJf6v+sNetpVVVXVG9iSS82/1PDXe2P8PDDxqJ9r6fX/ui+sdOfAwMCEI9YZvNCo14JVVVVVVVVV9eZsyaXmXxpe/089rtf/Z5z37Jy9/q+qqqqqqqr6f6flllxq/uGv48d4/T/9uF7/7/bgk1uN/N3/hUfc68U39kFUVVVVVVVV1Thb9VMvv/6fbIzX/8PG9fr/4cX3eWjkeqP+u8ELo21y0Gi/T/DcaMsnGG39Z0dbPmS05aOvP3RgYPCQkcuff3Xx4EmH3/ba9QdPPXzcI5c/M9ryeV79/5uHzDra8nlHWz77aMvnGznW4cvnGG35gqOtP+fr2bdVVVVVVVVVVVVVVVVVVVX/rV6c7rwLXn3P9/cMjPb+7a+8j/vI3wsYdNqF11zzhg30zdGg1/4+xG5v9Jj+bxvuPPFJwwYGtlnjjR5KvQG90Z/XUG9s+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uBcfw/P/r7z//wzHbzzq/5lf+Nj9Z5xy9PtuMdrlif+ro37DGl/P/w9sMWhgYKTv1MNdV1xy1dXnHBgYmHLG/Y9dYOCV2xYZftvi004w8g0SRrwNwmxDeMO7jfxU9N1GrjpyG6e9vP3lXjpmgkFjDGK0pjn7uOM2X+upBcb8PvvYH8fgURemu2znpUe9l8XgMVYa2/N01PZHPZYxnUeOfc7hY597x623m3uHL+/ywS223nCzTTbbZJtFF154kQUXXmjR+ebedIutNplnxJ9j22fDXv5zltezz6Yfc589tuTo+2zMxza2fTZs3Pvs5S1OdND6W47aZ2MO7X/aZ7OMe58N22LkXzRk2IQDG7y8bwYNDAyZdcKBnYdfmXeigYEhs41cd/rh635o2sEDAwe8+kCHX5rolefgoN2Gr7PWMqst9erH7r/24/fpfUtGvKfIy49w5C4ZMtPI7zOP+GumHnj1qTh4yJlnDR7+2P9tN08+yWSDJh8Y2Hjk1SVGfl905K1XjVpvLJ+zPsZAX36blX1HfL3iMcnwC6esPNXNo29nLAT/G/0f/fv/Gq9FBr2yowaN/Bq5zgivJZdd7tW/6+XdsMSo94QZ/m/LcJP/i4+x/x97zXiHTfzym9yObbzjeF/cEY8fnl+zP3LxsP+t98XlY8cKL/857PUcOwbGfeyY4NWLry7d5MoZxjx2LD/2If7bvBi1jyYaY6WxHTvmPHzJXV8+No372LHCFiM/aOjVY8fggYEhs4w6dgw/kMw+4cABw6/MN/zKHBMOnDD8yvwvX5lk4MLhV+baaNutNh708tv2jNzuPMO3u8S0g15+8NfMveTJExz80kuzjhzLPGMcWEc+P4aN/u/jktOO2G2j7kvbvWfHEbfNPnK78/4H2x11X9ruItuPuG2Okdudb4ztTjCO7Y6676j5MHzVl+fDnIP+7Rc/Yf4uM8b8HTTqsD7aXUZ9DR3xNcUVoz4bCubLf3Tcofk79TjGO47PtcLn2/Ble6x45Xn/W59rReOdeNzjHdvncI91vFtOsvNK/wvjHTTaeP/tebbdYiOeK3OOfJ4t+B88f0fdd8zj2IQv3zqCYc7Xcxxb4jXHsd0nGDzG4EdrbD8DbQzrj7g8/StbW/TECaYate8nHGO7/9PPQHOO+zg29RZj3G+ZowcG0T5/+NHjNp/of9jnEw78+8/qo/b5qPuOa5/P8dp9Pug1+3yRce/z1/tz55yzjLh9gnHs88F777DiqH0+9D/c53P8p/t8iYEJaJ8fcMSI/Tau4+nY9vmo+/77Ph8y8PGBgYFZR+7z2V/P83ye/53n+aSw/ojLD76y6LIZzt9vtGPMoP9kn8/+n+7zYa88z2d9+baZBw8MHTqw84Y77rj9vCP+HHV1vhF/8rHo8QdG7Odx/Vs6NqNR9x3XvJj19RgN+98xeueQ164/6kXHqOtrXHjKNP+nx6JZ/zOjQcsM8LHonEtH7Ldx/Vw0tn0+6r707+Cw0e4/5uu6cbwfJT6m4csOO/yQO0ZtcuTdej/K19+/PW1H/Te+LcY8yNf4Wv/9313+7vJ3l7+7/MWN5fz/K+////DUqz0y8kXyhAcuttlGb/R43+DG6/P/I33/7fz/RpstduDwl4Ijbxvn+dkR67wpz88uPOLbFNeOWm/M84M80LGfn53joLlWHfjvnJ/9P2rUXH0dr+M7/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFjeX8/6jfUR525AsP7DbyROiEhx6y0Qtv9Hjf4Mbr8/8jff/t/P8LGx1y6OCBV24b5/n/Ees4zv+vdOTBZw28ic//j5qrnf+v/6H83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cWM7/LzHq9wAWWn/TfUf9PsA28350zzd6vG9w4+v5/z7/31vHf3f5u8vfXf7uBr3pfnmx/ps1/93l7y5/d/m7y99d/u7yd5e/u/zFjTz/PzDGxzqu3PMCg/P//283Fv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/+n8MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9M/pjF/7P5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/XP6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/5/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v+F/DGL//b5Yxb/HfLHLP475o9Z/L+YP2bx/1L+mMV/p/wxi//O+WMW/y/nj1n8d8kfs/h/JX9shP8kA+O7/1fzxyzz/2v5Yxb/r+ePWfx3zR+z+O+WP2bx3z1/zOL/jfwxi/8e+WMW/2/mj1n898wfs/jvlT9m8f9W/pjFf+/8MYv/PvljFv9988cs/t/OH7P475c/ZvH/Tv6Yxf+7+WMW//3zxyz+B+SPWfwPzB+z+H8vf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+H8/f8zif0T+mMX/yPwxi/8P8scs/j/MH7P4H5U/ZvH/Uf6Yxf/o/DGL/zH5Yxb/Y/PHLP4/zh+z+P8kf8zif1z+mMX/p/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/7P8MYv/KfljFv+f549Z/E/NH7P4n5Y/ZvH/Rf6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4/zJ/zOJ/Tv6Yxf/c/DGL/3n5Yxb/X+WPWfx/nT9m8T8/f8zif0H+r2kSkf9v8scs/hfmj1n8f5s/ZvG/KH/M4n9x/pjF/3f5Yxb/S/LHLP6/zx+z+F+aP2bx/0P+mMX/svwxi//l+WMW/yvyxyz+f8wfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/6f8MYv/w/ljFv8/549Z/P+SP2bxfyR/zOL/aP6Yxf+x/DGL/1/zxyz+f8sfs/g/nj9m8X8if8zi//f8MYv/P7T+k4zzVov/P7X+487i/6/8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyT+gwbyxyz+g/LHLP6D88cs/hPkj1n8h+SPWfwnzB+z+A/NH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/9b8scs/m/NH7P4T5c/ZvF/W/6Yxf/to/sPeQPG9SbN4j998x+z+L8jf8zi/878MYv/u/LHLP7vzh+z+M+QP2bxf4/af/4rx3aLxX9Gtf/Ys/gPyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4vzd/zOL/vvwxi//788cs/h/IH7P4fzB/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv9F88cs/ovlj1n8F88fs/h/KH/M4v/h/LHx1n+Sf1s66CP5Y+Ot/xjz/6P5Yxb/JfLHLP5L5o9Z/JfKH7P4L50/ZvH/WP6Yxf/j+WMW/2Xyxyz+y+aPWfw/kT9m8V8uf8zi/8n8MYv/8vljFv8V8scs/p/KH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n818gfs/h/On/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8P5M/ZvH/bP6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/D+XP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/zfLHLP6b549Z/LfIH7P4fz5/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4fyF/zOK/ff6YxX+H/DGL/475Yxb/L+aPWfy/lD9m8d8pf8ziv3P+mMX/y/ljFv9d8scs/l/JH7P4fzV/zOL/tfwxi//X88cs/rvmj1n8d8sfs/jvnj9m8f9G/pjFf4/8MYv/N/PHLP575o9Z/PfKH7P4fyt/zOK/d/6YxX+f/DGL/775Yxb/b+ePWfz3yx+z+H8nf8zi/938MYv//vljFv8D8scs/gfmj1n8v5c/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8v58/ZvE/In/M4n9k/pjF/wf5Yxb/H+aPWfyPyh+z+P8of8zif3T+mMX/mPwxi/+x+WMW/x/nj1n8f5I/ZvE/Ln/M4v/T/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvH/Wf6Yxf+U/DGL/8/zxyz+p+aPWfxPyx+z+P8if8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfx/mT9m8T8nf8zif27+mMX/vPwxi/+v8scs/r/OH7P4n58/ZvG/IH/M4v+b/DGL/4X5Yxb/3+aPWfwvyh+z+F+cP2bx/13+mMX/kvwxi//v88cs/pfmj1n8/5A/ZvG/LH/M4n95/pjF/4r8MYv/H/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/ztG+k/8Ro3rTZrF/87mP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v+n/DGL/8P5Yxb/P+ePWfz/kj9m8X8k/1caMtpli/+j+WMW/8fyxyz+f80fs/j/LX/M4v94/pjF/4n8MYv/3/PHLP7/yB+z+P8zf8zi/6/8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyT+L1/M/7W96j/hwMDA+Os/yO4/mBdb5v9gu/9YsvhPMLq//mDwahb/IZFjFv8J88cs/kPzxyz+E+WPWfwnzh+z+E+SP2bxnzR/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4v+W/DGL/1vzxyz+0+WPWfzflj9m8X97/pjFf/r8MYv/O/LHLP7vzB+z+L8rf8zi/+78MYv/DPljFv/35I9Z/GfMH7P4D8sfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+L83f8zi/778MYv/+/PHLP4fyB+z+H8wf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/yL5Yxb/RfPHLP6L5Y9Z/BfPH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/x/LHLP4fzx+z+C+TP2bxXzZ/zOL/ifwxi/9y+WMW/09a/Cf6z1a3+C8/Fv+7/lvjepNm8V/BMv//wyz+n8ofs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H86f8ziv2b+mMV/rfwxi//a+Y/ozH+/avFfJ3/M4r9u/pjF/zP5Yxb/z+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf9z+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/+fzxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/xfyxyz+2+ePWfx3yB+z+O+YP2bx/2L+mMX/S/ljFv+d8scs/jvnj1n8v5w/ZvHfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4r9r/pjFf7f8MYv/7vljFv9v5I9Z/PfIH7P4fzN/zOK/Z/6YxX+v/DGL/7fyxyz+e+ePWfz3yR+z+O+bP2bx/3b+mMV/v/wxi/938scs/t/NH7P4758/ZvE/IH/M4n9g/pjF/3v5Yxb/g/LHLP4H549Z/A+x+Q99fatZ/A+1+b/OLP6H5Y9Z/A/PH7P4fz9/zOJ/RP6Yxf/I/DGL/w/yxyz+P8wfs/gflT9m8f9R/pjF/+j8MYv/MfljFv9j88cs/j/OH7P4/yR/zOJ/XP6Yxf+n+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOL/s/wxi/8p+WMW/5/nj1n8T80fs/iflj9m8f9F/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/j/Mn/M4n9O/pjF/9z8MYv/efljFv9f5Y9Z/H+dP2bxPz9/zOJ/Qf6Yxf83+WMW/wvzxyz+v80fs/hflD9m8b84f8zi/7v8MYv/JfljFv/f549Z/C/NH7P4/yF/zOJ/Wf6Yxf/y/DGL/xX5Yxb/P+aPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bx/1P+mMX/4fwxi/+f88cs/n/JH7P4P5I/ZvF/NH/M4v9Y/pjF/6/5Yxb/v+WPWfwfzx+z+D+RP2bx/3v+mMX/H/ljFv9/5o9Z/P+VP/Zv/pO90aP5X2gs/k/mj1nm/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P/eq/0u7viEDe3Nm8X+++Y9Z/F/IH7P4v5g/ZvF/KX9M4j/BQP6YxX9Q/pjFf3D+mMV/gvwxi/+Q/DGL/4T5Yxb/ofljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxf0v+mMX/rfljFv/p8scs/m/LH7P4vz1/zOI/ff6Yxf8d+WMW/3fmj1n835U/ZvF/d/6YxX+G/DGL/3vyxyz+M+aPWfyH5Y9Z/GfKH7P4z5w/ZvGfJX9s0LFPTzwwMDDe+8+aP2aZ/7Plj1n8Z88fs/jPkT9m8Z8zf8zi/978MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP4fyx+z+H88f8ziv0z+mMV/2fwxi/8n8scs/svlj1n8P5k/ZvFfPn/M4r9C/pjF/1P5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv9P549Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/Z/LHLP6fzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/+fyxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/z+ePWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/L+SPWfy3zx+z+O+QP2bx3zF/zOL/xfwxi/+X8scs/jvlj1n8d84fs/h/OX/M4r9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9f8MYv/bvljFv/d88cs/t/IH7P475E/ZvH/Zv6YxX/P/LEx/Ie80eP5v24s/nvlj1nm/7fyxyz+e+ePWfz3yR+z+O+bP2bx/3b+mMV/v/wxi/938scs/t/NH7P4758/ZvE/IH/M4n9g/pjF/3v5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF//v5Yxb/I/LHLP5H5o9Z/H+QP2bx/2H+mMX/qPwxi/+P8scs/kfnj1n8j8kfs/gfmz9m8f9x/pjF/yf5Yxb/4/LHLP4/zR+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/n+WPWfxPyR+z+P88f8zif2r+mMX/tPwxi/8v8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/l/ljFv9z8scs/ufmj1n8z8sfs/j/Kn/M4v/r/DGL//n5Yxb/C/LHLP6/yR+z+F+YP2bx/23+mMX/ovwxi//F+WMW/9/lj1n8L8kfs/j/Pn/M4n9p/pjF/w/5Yxb/y/LHLP6X549Z/K/IH7P4/zF/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/5/yxyz+D+ePWfz/nD9m8f9L/pjF/5H8MYv/o/ljFv/H8scs/n/NH7P4/y1/zOL/eP6Yxf+J/DGL/9/zxyz+/8gfs/j/M3/M4v+v/LHx3n/IyxcneDJ/bLz3H9EET+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9J/F/+r4D5vzaL/6D8MYv/4Pwxi/8E+WMW/yH5Yxb/CfPHLP5D88cs/hPlj1n8J84fs/hPkj9m8Z80f8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOL/lvwxi/9b88cs/tPlj1n835Y/ZvF/e/6YxX/6/DGL/zvyxyz+78wfs/i/K3/M4v/u/DGL/wz5Yxb/9+SPWfxnzB+z+A/LH7P4z5Q/ZvGfOX/M4j9L/pjFf9b8MYv/bPljFv/Z88cs/nO84j/kjRnXmzSL/5zNf8zi/978MYv/+/LHLP7vzx+z+H8gf8zi/8H8h9JCi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/0L5Yxb/hfPHLP6L5I9Z/BfNH7P4L5Y/ZvFfPH/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4r9E/pjFf8n8MYv/UvljFv+l88cs/h/LH7P4fzx/zOK/TP6YxX/Z/DGL/yfyxyz+y+WPWfw/mT9m8V8+f8ziv0L+mMX/U/ljFv8V88cs/ivlj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/0/nj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/9n8scs/p/NH7P4r5c/ZvFfP3/M4r9B/qM3z6gLFv8N88cs/p/LH7P4b5Q/ZvHfOH/M4r9J/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8P58/ZvHfMn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8v5A/ZvHfPn/M4r9D/pjFf8f8MYv/F/PHLP5fyh+z+O+UP2bx3zl/zOL/5fwxi/8u+WMW/6/kj1n8v5o/Nt75Dx1A/6/lj413/mOZ/1/PH7P475o/ZvHfLX/M4r97/pjF/xv5Yxb/PfLHLP7fzB+z+O+ZP2bx3yt/zOL/rfwxi//e+WMW/33yxyz+++aPWfy/nT9m8d8vf8zi/538MYv/d/PHLP77549Z/A/IH7P4H5g/ZvH/Xv6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvH/fv6Yxf+I/DGL/5H5Yxb/H+SPWfx/mD9m8T8qf8zi/6P8MYv/0fljFv9j8scs/sfmj1n8f5w/ZvH/Sf6Yxf+4/DGL/0/zxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf9n+WMW/1Pyxyz+P88fs/ifmj9m8T8tf8zi/4v8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8f9l/pjF/5z8MYv/ufmPbLd/u2bxPy9/zOL/q/wxi/+v88cs/ufnj1n8L8gfs/j/Jn/M4n9h/pjF/7f5Yxb/i/LHLP4X549Z/H+XP2bxvyR/zOL/+/wxi/+l+WMW/z/kj1n8L8sfs/hfnj9m8b8if8zi/8f8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/n/KH7P4P5w/ZvH/c/6Yxf8v+WMW/0fyxyz+j+aPWfwfyx+z+P81f8zi/7f8MYv/4/ljFv8n8scs/n/PH7P4/yN/zOL/z/wxi/+/8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+T+E84kD9m8R+UP2bxH5w/ZvGfIH/M4j8kf8ziP2H+mMV/aP6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/1PljFv9p8scs/tPmj1n835I/ZvF/a/6YxX+6Uf4Tv0HjepNm8X9b8x+z+L89f8ziP33+mMX/HfljFv935o9Z/N+VP2bxf3f+mMV/hvwxi/978scs/jPmj1n8h+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMX/Y/ljFv+P549Z/JfJH7P4L5s/ZvH/RP6YxX+5/DGL/yfzxyz+y+ePWfxXyB+z+H8qf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOL/6fwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bx/0z+mMX/s/ljFv/18scs/uvnj1n8N8gfs/hvmD9m8f9c/pjFf6P8MYv/xvljFv9NhP6TvI51LP6bCv1fTxb/zfLHLP6b549Z/LfIH7P4fz5/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4fyF/zOK/ff6YxX+H/DGL/475Yxb/L+aPWfy/lD9m8d8pf8ziv3P+mMX/y/ljFv9d8scs/l/JH7P4fzV/zOL/tfwxi//X88cs/rvmj1n8d8sfs/jvnj9m8f9G/pjFf4/8MYv/N/PHLP575o9Z/PfKH7P4fyt/zOK/d/6YxX+f/DGL/775Yxb/b+ePWfz3yx+z+H8nf8zi/938MYv//vljFv8D8scs/gfmj1n8v5c/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8v58/ZvE/In/M4n9k/pjF/wf5Yxb/H+aPWfyPyh+z+P8of8zif3T+mMX/mPwxi/+x+WMW/x/nj1n8f5I/ZvE/Ln/M4v/T/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvH/Wf6Yxf+U/DGL/8/zxyz+p+aPWfxPyx+z+P8if8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfx/mT9m8T8nf8zif27+mMX/vPwxi/+v8scs/r/OH7P4n58/ZvG/IH/M4v+b/DGL/4X5Yxb/3+aPWfwvyh+z+F+cP2bx/13+mMX/kvwxi//v88cs/pfmj1n8/5A/ZvG/LH/M4n95/pjF/4r8MYv/H/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4/yl/zOL/cP6Yxf/P+WMW/7/kj1n8H8kfs/g/mj9m8X8sf8zi/9eX/XsGjJnF/2/Nf8zi/3j+mMX/ifwxi//f88cs/v/IH7P4/zN/zOL/r/wxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHJP5DB/LHLP6D8scs/oPzxyz+E+SPWfyH5I9Z/CfMH7P4D80fs/hPlD9m8Z84f8ziP0n+mMV/0vwxi/9k+WMW/8nzxyz+U+SPWfynzB+z+E+VP2bxnzp/zOI/Tf6YxX/a/DGL/1vyxyz+b80fs/hPlz9m8X9b/pjF/+35Yxb/6fPHLP7vyB+z+L8zf8zi/678MYv/u/PHLP4z5I9Z/N+TP2bxnzF/zOI/LH/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8zi/978MYv/+/LHLP7vzx+z+H8gf8zi/8H8MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOL/ofwxi/+H88cs/h/JH7P4fzR/zOK/RP6YxX/J/DGL/1L5Yxb/pfPHLP4fyx+z+H88f8ziv0z+mMV/2fwxi/8n8scs/svlj1n8P5k/ZvFfPn/M4r9C/pjF/1P5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv9P549Z/NfMH7P4r5U/ZvFfO3/M4r9O/pjFf938MYv/Z/LHLP6fzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/+fyxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/z+ePWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/L+SPWfy3zx+z+O+QP2bx3zF/zOL/xfwxi/+X8scs/jvlj1n8d84fs/h/OX/M4r9L/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjFf9f8MYv/bmP4vzTVf3tgb84s/rs3/zGL/zfyxyz+e+SPWfy/mT9m8d8zf8ziv1f+mMX/W/ljFv+988cs/vvkj1n8980fs/h/O3/M4r9f/pjF/zv5Yxb/7+aPWfz3zx+z+B+QP2bxPzB/zOL/vfwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOL//fwxi/8R+WMW/yPH4m9/Tlj8f5A1ZvH/Yf6Yxf+o/DGJ/5CB/DGJ/9Cj88cs/sfkj1n8j80fs/j/OH/M4v+T/DGL/3H5Yxb/n+aPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/8/yxyz+p+SPWfx/nj9m8T81f8zif1r+mMX/F/ljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zi/8v8MYv/OfljFv9z88cs/uflj1n8f5U/ZvH/df6Yxf/8/LHx0n/eVV6+OLr/Bflj46X/yIuj+/8mf8zif2H+mMX/t/ljFv+L8scs/hfnj1n8f5c/ZvG/JH/M4v/7/DGL/6X5Yxb/P+SPWfwvyx+z+F+eP2bxvyJ/zOL/x/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+f8ofs/g/nD9m8f9z/pjF/y/5Yxb/R/LHLP6P5o9Z/B8b/lgneqMG9ebN4v/X5j9m8f9b/pjF//H8MYv/E/ljFv+/549Z/P+RP2bx/2f+mMX/X/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPSfxf/s2v/F+bxX9Q/pjFf3D+mMV/gvwxi/+Q/DGL/4T5Yxb/ofljFv+J8scs/hPnj1n8J8kfs/hPmj9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxf0v+mMX/rfljFv/p8scs/m/L/+WGjnHd4v/2/DGL//T5Yxb/d+SPWfzfmT9m8X9X/pjF/935Yxb/GfLHLP7vyR+z+M+YP2bxH5Y/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8X9v/pjF/335Yxb/9+ePWfw/kD9m8f9g/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/j+WPWfw/nj9m8V8mf8ziv2z+mMX/E/ljFv/l8scs/p/MH7P4L58/ZvFfIX/M4v+p/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/p/PHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/zP5Yxb/z+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf9z+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/+fzxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/xfyxyz+2+ePWfx3yB+z+O+YP2bx/2L+mMX/S/ljFv+d8scs/jvnj1n8v5w/ZvHfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4r9r/pjFf7f8MYv/7vljFv9v5I9Z/PfIH7P4fzN/zOK/Z/6YxX+v/DGL/7fyxyz+e+ePWfz3yR+z+O+bP2bx/3b+mMV/v/wxi/938scs/t/NH7P4758/ZvE/IH/M4n9g/pjF/3v5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF//v5Yxb/I/LHLP5H5o9Z/H+QP2bx/2H+2Mv+QwcGBsZz/6Pyxyzz/0f5Yxb/o/PHLP7H5I9Z/I/NH7P4/zh/zOL/k/wxi/9x+WMW/5/mj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi//P8scs/qfkj1n8f54/ZvE/NX/M4n9a/pjF/xf5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4v/L/DGL/zn5Yxb/c/PHLP7njdP/mZdeeun//6G9GbP4/6r5j1n8f50/ZvE/P3/M4n9B/pjF/zf5Yxb/C/PHLP6/zR+z+F+UP2bxvzh/zOL/u/wxi/8l+WMW/997/AcN+U9Wlvhf6vH/j7L4/yF/zOJ/Wf6Yxf/y/DGL/xX5Yxb/P+aPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bx/1P+mMX/4fwxi/+f88cs/n/JH7P4P5I/ZvF/NH/M4v9Y/tj46T9CfnT/v+aPjZ/+Ixrd/2/5Yxb/x/PHLP5P5I9Z/P+eP2bx/0f+mMX/n/ljFv9/5Y9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/9Dr9h/7/Na43aRL/iQea/5jFf1D+mMV/cP6YxX+C/DGL/5D8MYv/hPljFv+h+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP5T549Z/KfJH7P4T5s/ZvF/S/6Yxf+t+WMW/+nyxyz+b8sfs/i/PX/M4j99/pjF/x35Yxb/d+aPWfzflT9m8X93/pjFf4b8MYv/e/LHLP4z5o9Z/Iflj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfzfmz9m8X9f/pjF//35Yxb/D+SPWfw/mD9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bxXyh/zOK/cP6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/JdYZ3D+kMV/yeY/ZvFfKn/M4r90/pjF/2P5Yxb/j+ePWfyXyR+z+C+bP2bx/0T+mMV/ufwxi/8n88cs/svnj1n8V8gfs/h/Kn/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8zi/+n8MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9M/pjF/7P5Yxb/9fLHLP7r549Z/DfIH7P4b5g/ZvH/XP6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4b54/ZvHfIn/M4v/5/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v+F/DGL//b5Yxb/HfLHLP475o9Z/L+YP2bx/1L+mMV/p/wxi//O+WMW/y/nj1n8dxmL/86D/1sDe3Nm8f9K8x+z+H81f8zi/7X8MYv/1/PHLP675o9Z/HfLH7P4754/ZvH/Rv6YxX+P/DGL/zfzxyz+e+aPWfz3yh+z+H8rf8ziv3f+mMV/n/wxi/+++WMW/2/nj1n898sfs/h/J//Rm3DUBYv/d/PHLP77549Z/A/IH7P4H5g/ZvH/Xv6Yxf+g/DGL/8H5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/Ntx/qumf2Hl89/9+/phl/h+RP2bxPzJ/zOL/g/wxi/8P88cs/kflj1n8f5Q/ZvE/On/M4n9M/pjF/9j8MYv/j/PHLP4/yR+z+B+XP2bx/2n+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+P8sf8zif0r+mMX/5/ljFv9T88cs/qflj1n8f5E/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/r/MH7P4n5M/ZvE/N3/M4n9e/pjF/1f5Yxb/X+ePWfzPzx+z+F+QP2bx/03+mMX/wvwxi/9v88cs/hflj1n8L84fs/j/Ln/M4n9J/pjF//f5Yxb/S/PHLP5/yB+z+F+WP2bxvzx/zOJ/Rf6Yxf+P+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfz/lD9m8X84f8zi/+f8MYv/X/LHLP6P5I9Z/B/NH7P4P5Y/ZvH/a/6Yxf9v+WMW/8fzxyz+T+SPWfz/nj9m8f9H/pjF/5/5Yxb/f+WPjX/+mz496uLo/k/mj41//jz/n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+T+E8ykD9m8R+UP2bxH5w/ZvGfIH/M4j8kf8ziP2H+mMV/aP6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4T54/ZvGfIn/M4j9l/pjFf6r8MYv/1PljFv9p8scs/tPmj1n835I/ZvF/a/6YxX+6/DGL/9vyxyz+b88fs/hPnz9m8X9H/pjF/535Yxb/d+WPWfzfnT9m8Z8hf8zi/578MYv/jPljFv9h+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/D+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8P5Y9Z/D+cP2bx/0j+mMX/o/ljFv8l8scs/kvmj1n8l8ofs/gvnT9m8f9Y/pjF/+P5Yxb/ZfLHLP7L5o9Z/D+RP2bxXy5/zOL/yfwxi//y+WMW/xXyxyz+n8ofs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+H86f8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfw/kz9m8f9s/pjFf738MYv/+vljFv8N8scs/hvmj1n8P5c/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/pvnj1n8t8gfs/h/Pn/M4r9l/pjFf6v8MYv/1vljFv9t8scs/tvmj1n8t8sfs/h/IX/M4r99/pjFf4f8MYv/jvljFv8v5o9Z/L+UP2bx3yl/zOK/c/6Yxf/L+WMW/13yxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+u+aPWfx3yx+z+O+eP2bx/0b+mMV/j/wxi/8388cs/nvmj1n898ofs/h/K3/M4r93/pjFf5/8MYv/vvljFv9v549Z/PfLH7P4fyd/zOL/3fwxi//++WMW/wPQ/9mX/nsDe3Nm8T+w+Y9Z/L+XP2bxP+g1/oP/u+N6k2bxP7j5j1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/+/ljFv8j8scs/kfmj1n8f5A/ZvH/Yf6Yxf+o/DGL/4/yxyz+R+ePWfyPyR+z+B+bP2bx/3H+mMX/J/ljFv/j8scs/j/NH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv+f5Y9Z/E/JH7P4/zx/zOJ/av6Yxf+0/DGL/y/yxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+X+WMW/3Pyxyz+5+aPWfzPyx+z+P8qf8zi/+v8MYv/+fljFv8L8scs/r/JH7P4X5g/ZvH/bf6Yxf+i/DGL/8X5Yxb/3+WPWfwvyR+z+P8+f8zif2n+mMX/D/ljFv/L8scs/pfnj1n8r8gfs/j/MX/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfG+/8J2b/6/PHxjv/scz/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+P8pf8zi/3D+mMX/z/ljFv+/5I9Z/B/JH7P4P5o/ZvF/LH/M4v/X/DGL/9/yxyz+j+ePWfyfyB+z+P89f8zi/4/8MYv/P/PHLP7/yh+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX9M4j/pQP6YxX9Q/th47T/xK0snHZw/Nl77v7p00gnyxyz+Q/LHLP4T5o9Z/Ifmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf8t+WMW/7fmj1n8p8sfs/i/LX/M4v/2/DGL//T5Yxb/d+SPWfzfmT9m8X9X/pjF/935Yxb/GfLHLP7vyR+z+M+YP2bxH5Y/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8X9v/pjF/32v+k/yhozrTZrF//3Nf8zi/4H8MYv/B/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+H8sf8zi//H8MYv/MvljFv9l88cs/p/IH7P4L5c/ZvH/ZP6YxX/5/DGL/wr5Yxb/T+WPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/D+dP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP6fyR+z+H82f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+n8sfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfw/nz9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy/kD9m8d8+f8ziv4PKf5nXvabFf0eV/+vP4v/F/DGL/5fyxyz+O+WPWfx3zh+z+H85f8ziv0v+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMV/15H+PQf+PYv/btljFv/d88cs/t/IH7P475E/ZvH/Zv6YxX/P/DGL/175Yxb/b+WPWfz3zh+z+O+TP2bx3zd/zOL/7fwxi/9++WMW/+/kj1n8v5s/ZvHfP3/M4n9A/pjF/8D8MYv/9/LHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/9/PHLP5H5I9Z/I/MH7P4/yB/zOL/w/wxi/9R+WMW/x/lj1n8j84fs/gfkz9m8T82f8zi/+P8MYv/T/LHLP7H5Y9Z/H+aP2bxPz7/IbTQ4n9C/pjF/8T8MYv/SfljFv+T88cs/j/LH7P4n5I/ZvH/ef6Yxf/U/DGL/2n5Yxb/X+SPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/y/zxyz+5+SPWfzPfa1/Hwcq8j8vbMzi/6v8MYv/r/PHLP7n549Z/C/IH7P4/yZ/zOJ/Yf6Yxf+3+WMW/4vyxyz+F+ePWfx/lz9m8b8kf8zi//v8MYv/pfljFv8/5I9Z/C/LH7P4X54/ZvG/In/M4v/H/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyx8Z7/4levjjp3flj473/iCa9J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/j/KX/M4v9w/pjF/8/5Yxb/v+SPWfwfyR+z+D+aP2bxfyx/zOL/1/wxi//f8scs/o/nj1n8n8gfs/j/PX/M4v+P/DGL/z/zxyz+/8ofs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/TOI/2UD+mMV/UP6YxX9w/pjFf4L8MYv/kPwxi/+E+WMW/6H5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/lPnj1n8p8kfs/hPmz9m8X9L/pjF/635Yxb/6fLHLP5vyx+z+L89f8ziP33+mMX/HfljFv935o9Z/N+VP2bxf3f+mMV/hvwxi/978scs/jPmj1n8h+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/D+YP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8l8gfs/gvmT9m8V8qf8ziv3T+mMX/Y/ljFv+P549Z/JfJH7P4L5s/ZvH/RP6YxX+5/DGL/yfzxyz+y+ePWfxXyB+z+H8qf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bxXyN/zOL/6fwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bx/0z+mMX/s/ljFv/18scs/uvnj1n8N8gfs/hvmD9m8f9c/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/hvnj9m8d8if8zi//n8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/4X8MYv/9vljFv8d8scs/jvmj1n8v5g/ZvH/Uv6YxX+n/DGL/875Yxb/L+ePWfx3yR+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+O+aP2bx3y1/zOK/e/6Yxf8b+WMW/z3yxyz+38wfs/jvmT9m8d8rf8zi/638MYv/3vljFv998scs/vvmj1n8v50/ZvHfL3/M4v+d/DGL/3fzxyz+++ePWfwPyB+z+B+YP2bx/17+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bx/37+mMX/iPwxi/+R+WMW/x/kj1n8f5g/ZvE/Kn/M4v+j/DGL/9H5Yxb/Y/LHLP7H5o9Z/H+cP2bx/0n+mMX/uPwxi/9P88cs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/Z/ljFv9T8scs/j/PH7P4n5o/ZvE/LX/M4v+L/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvH/Zf6Yxf+c/DGL/7n5Yxb/8/LHLP6/yh+z+P86f8zif37+mMX/gvwxi/9v8scs/hfmj1n8f5s/ZvG/KH/M4n9x/pjF/3f5Yxb/S/LHLP6/zx+z+F+aP2bx/0P+mMX/svwxi//l+WMW/yvyxyz+f8wfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/6f8MYv/w/ljFv8/549Z/P+SP2bxfyR/zOL/aP6Yxf+x/DGL/1/zxyz+f8sfs/g/nj9m8X8if8zi//f8MYv/P/LHLP7/zB+z+P8rf8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGJ/+QD+WMW/0H5Yxb/wfljFv8J8scs/kPyxyz+E6r9h471Fov/ULX/2LP4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/9b8scs/m/NH7P4T5c/ZvF/W/6Yxf/t+WMW/+nzxyz+78gfs/i/M3/M4v+u/DGL/7vzxyz+M+SPWfzfkz9m8Z8xf8ziPyx/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP6z5Y9Z/GfPH7P4z5E/ZvGfM3/M4v/e/DGL//vyxyz+788fs/h/IH/M4v/B/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8zi/6H8MYv/h/PHLP4fyR+z+H80f8ziv0T+mMV/yfwxi/9S+WMW/6Xzxyz+H8sfs/h/PH/M4r9M/pjFf9n8MYv/J/LHLP7L5Y9Z/D+ZP2bxXz5/zOK/Qv6Yxf9T+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/T+ePWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/2fyxyz+n80fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi//n8scs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/8/nj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/y/kj1n8t88fs/jvkD9m8d8xf8zi/8X8MYv/l/LHLP475Y9Z/HfOH7P4fzl/zOK/S/6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6YxX/X/DGL/275Yxb/3fPHLP7fyB+z+O+RP2bx/2b+mMV/z/wxi/9e+WMW/2/lj1n8984fs/jvkz9m8d83f8zi/+38MYv/fvljFv/v5I9Z/L+bP2bx3z9/zOJ/QP6Yxf/A/MdoxN6x+H8vf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+H8/f8zif0T+mMX/yPwxgf9uw/1/kD8m8B/e5D/MH7P4H5U/ZvH/Uf6Yxf/o/DGL/zH5Yxb/Y/PHLP4/zh+z+P8kf8zif1z+mMX/p/ljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zi/7P8MYv/KfljFv+f549Z/E/NH7P4n5Y/ZvH/Rf6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4/zJ/zOJ/Tv6Yxf/c/DGL/3n5Yxb/X+WPWfx/nT9m8T8/f8zif0H+mMX/N/ljFv8L88cs/r/NH7P4X5Q/ZvG/OH/M4v+7/DGL/yX5Yxb/3+ePWfwvzR+z+P8hf8zif1n+mMX/8vwxi/8V+WMW/z/mj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8f9T/pjF/+H8MYv/n/PHLP5/yR+z+D+SP2bxfzR/zOL/WP6Yxf+v+WMW/7/lj1n8H88fs/g/kT9m8f97/pjF/x/5Yxb/f+aPWfz/lT823P8igf+T+WOW+f9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8x/9F66qURefxfyh+T+E8xkD9m8R+UP2bxHyz2HzqO2yz+E4j9x5XFf0j+mMV/wvwxi//Q/DGL/0T5Y+Oh/ys/7o7uP3H+2Hjoj/N/kkH5Uxb/SZv/mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6Yxf8t+WMW/7fmj1n8p8sfs/i/LX/M4v/2/DGL//T5Yxb/d+SPWfzfmT9m8X9X/pjF/935Yxb/GfLHLP7vyR+z+M+YP2bxH5Y/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8X9v/pjF/335Yxb/9+ePWfw/kD9m8f9g/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/jPnz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+i+aPWfwXyx+z+C+eP2bx/1D+mMX/w/ljFv+P5I9Z/D+aP2bxXyJ/zOK/ZP6YxX+p/DGL/9L5Yxb/j+WPWfw/nj9m8V8mf8ziv2z+mMX/E/ljFv/l8scs/p/MH7P4L58/ZvFfIX/M4v+p/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjFf438MYv/p/PHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjF/zP5Yxb/z+aPWfzXyx+z+K+fP2bx3yB/zOK/Yf6Yxf9z+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/+fzxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/xfyxyz+2+ePWfx3yB+z+O+YP2bx/2L+mMX/S/ljFv+d8scs/jvnj1n8v5w/ZvHfJX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4r9r/pjFf7f8MYv/7vlj46H/xKMuju7/jfyx8dAf5/8e+WMW/2/mj1n898wfs/jvlT9m8f9W/pjFf+/8MYv/PvljFv9988cs/t/OH7P475c/ZvH/Tv6Yxf+7+WMW//3zxyz+B+SPWfwPzB+z+H8vf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+H8/f8zif0T+mMX/yPwxi/8P8scs/j/MH7P4H5U/ZvH/Uf6Yxf/o/LHx0X/QwMBuA2P4H5M/Nj760/w/Nn/M4v/j/DGL/0/yxyz+x+WPWfx/mj9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+P8sfs/ifkj9m8f95/pjF/9T8MYv/afljFv9f5I9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/L/PHLP7n5I9Z/M/NH7P4n5c/ZvH/Vf6Yxf/X+WMW//Pzxyz+F+SPWfx/kz9m8b8wf8zi/9v8MYv/RfljFv+L88cs/r/LH7P4X5I/ZvH/ff6Yxf/S/DGL/x/yxyz+l+WPWfwvzx+z+F+RP2bx/2P+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/z/lj1n8H84fs/j/OX/M4v+X/DGL/yP5Yxb/R/PHLP6P5Y9Z/P+aP2bx/1v+mMX/8fwxi/8T+WMW/7/nj1n8/5E/ZvH/Z/6Yxf9f+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9J/KccyB+z+A/KH7P4D84fs/hPkD9m8R+SP2bxnzB/zOI/NH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMV/6vwxi/80+WMW/2nzxyz+b8kfs/i/NX/M4j9d/pjF/235Yxb/t+ePWfynzx+z+L8jf8zi/878MYv/u/LHLP7vzh+z+M+QP2bxf0/+mMV/xvwxi/+w/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4z5Y/ZvGfPX/M4j9H/pjFf878MYv/e/PHLP7vyx+z+L8/f8zi/4H8MYv/B/PHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/gvlj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/8S+WMW/yXzxyz+S+WPWfyXzh+z+H8sf8zi//H8MYv/MvljFv9l88cs/p/IH7P4L5c/ZvH/ZP6YxX/5/DGL/wr5Yxb/T+WPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP5r5I9Z/D+dP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP6fyR+z+H82f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+n8sfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/83zxyz+W+SPWfw/nz9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy/kD9m8d8+f8ziv0P+mMV/x/wxi/8X88cs/l/KH7P475Q/ZvHfOX9M4X/uWW/ceN7kKfwHBqbcpfmPWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfx3zR+z+O+WP2bx3z1/zOL/jfwxi/8e+WMW/2/mj1n898wfs/jvlT9m8f9W/pjFf+/8MYv/PvljFv9988cs/t+2+g/abdw3S/z3s/r/D1n8v5M/ZvH/bv6YxX///DGL/wH5Yxb/A/PHLP7fyx+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP7fzx+z+B+RP2bxPzJ/zOL/g/wxi/8P88cs/kflj1n8f5Q/ZvE/On/M4n9M/pjF/9j8MYv/j/PHLP4/yR+z+B+XP2bx/2n+mMX/+Pwxi/8J+WNj+J8+vvqfmD9mmf8n5Y9Z/E/OH7P4/yx/zOJ/Sv6Yxf/n+WMW/1Pzxyz+p+WPWfx/kT9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+v8wfs/ifkz9m8T83f8zif17+mMX/V/ljFv9f549Z/M/PH7P4X5A/ZvH/Tf6Yxf/C/DGL/2/zxyz+F+WPWfwvzh+z+P8uf8zif0n+mMX/9/ljFv9L88cs/n/IH7P4X5Y/ZvG/PH/M4n9F/pjF/4/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP7/Hzt3H+91Xd9//HPgzYWooD9/tdAwAlE0FQQVybxAS0XgaBeWkqCkeDFBmVKgKyW7sLZylqtcW2lepM7U0llzTUc553TZrKy22ZybGZliXiWWF+x25ByC08tz83z87OPG637/A873e3p9Qx7Zk+/xdvyZ/qEs/VfoH8rS/+f6h7L0f1D/UJb+v9A/lKX/Q/qHsvR/WP9Qlv4r9Q9l6f+I/qEs/X+pfyhL/0f1D2Xp/5j+oSz9H9c/lKX/E/qHsvR/Uv9Qlv6/0j+Upf9T+oey9F+lfyhL/6f1D2Xp/2v9Q1n6/0b/UJb+z+gfytL/Wf1DWfo/p38oS//n9Q9l6b9a/1CS/iMq/UNZ+nfoH8rSf4D+oSz9B+ofytK/6B/K0n+Q/qEs/QfrH8rSf4j+oSz9h+of2lD7d/Tqv5H+oQ21f9Wr/zD9Q1n6b6x/KEv/TfQPZem/qf6hLP2H6x/K0n+E/qEs/TfTP5Sl/+b6h7L0/3/6h7L030L/UJb+/1//UJb+r9I/lKX/q/UPZen/e/qHsvR/jf6hLP1H6h/K0n9L/UNZ+m+lfyhL/9fqH8rSf5T+oSz9t9Y/lKX/6/QPZek/Wv9Qlv6v1z+Upf8Y/UNZ+o/VP5Sl/zb6h7L0H6d/KEv/bfUPZem/nf6hLP3H6x/K0n97/UNZ+u+gfyhL/zfoH8rSf0f9Q1n676R/KEv/nfUPZek/Qf9Qlv4T9Q9l6b+L/qEs/SfpH8rSf7L+oSz9d9U/lKX/bvqHsvTfXf9Qlv5T9A9l6b+H/qEs/afqH8rS/436h7L031P/UJb+b9I/lKX/XvqHsvTfW/9Qlv776B/K0n9f/UNZ+k/TP5Sl/376h7L031//UJb+b9Y/lKX/W/QPZel/gP6hLP0PXLd/h/8l9MjS/yB//4ey9J+ufyhL/4P1D2XpP0P/UJb+M/UPZek/S/9Qlv6d+oey9D9E/1CW/ofqH8rS/636h7L0f5v+oSz9365/KEv/d+gfytL/MP1DWfq/U/9Qlv7v0j+Upf/h+oey9D9C/1CW/rP1D2Xp/279Q1n6H6l/KEv/OfqHsvSfq38oS/+j9A9l6X+0/qEs/efpH8rS/z36h7L0P0b/UJb+x+ofytJ/vv6hLP2P0z+Upf/x+oey9D9B/1CW/ifqH8rS//f1D2Xpf5L+oSz9F+gfytJ/of6hLP1P1j+Upf8p+oey9F+kfyhL/z/QP5Sl/6n6h7L0P03/UJb+i/UPZen/Xv1DWfq/T/9Qlv5L9A9l6b9U/1CW/qfrH8rS/wz9Q1n6/6H+oSz9369/KEv/D+gfytL/TP1DWfqfpX8oS/9l+oey9P+g/qEs/c/WP5Sl/4f0D2Xp/2H9Q1n6f0T/UJb+H9U/lKX/OfqHsvT/mP6hLP0/rn8oS/8/0j+Upf8f6x/K0v8T+oey9P+k/qEs/c/VP5Sl/5/oH8rS/zz9Q1n6f0r/UJb+n9Y/lKX/+fqHsvT/U/1DWfp/Rv9Qlv6f1T+Upf/n9A9l6X+B/qEs/f9M/1CW/p/XP5Sl/5/rH8rS/y/0D2Xp/wX9Q1n6f1H/UJb+F+ofytL/Iv1DWfp/Sf9Qlv4X6x/K0v8S/UNZ+l+qfyhL/8v0D2Xp/2X9Q1n6X65/KEv/K/QPZel/pf6hLP3/Uv9Qlv5X6R/K0v8r+oey9L9a/1CW/tfoH8rS/1r9Qxt4/4HdH474qv6hDbx/jxFf0z+Upf91+oey9L9e/1CW/n+lfyhL/xv0D2Xp/3X9Q1n6f0P/UJb+f91H/9LGr+t/qSz9b/T3fyhL/7/RP5Sl/zf1D2Xp/7f6h7L0v0n/UJb+N+sfytL/7/QPZem/XP9Qlv7f0j+Upf+39Q9l6X+L/qEs/f9e/1CW/rfqH8rS/x/0D2Xpf5v+oSz9/1H/UJb+t+sfytL/Dv1DWfr/k/6hLP2/o38oS/879Q9l6f9d/UNZ+v+z/qEs/e/SP5Sl//f0D2Xp/339Q1n6/0D/UJb+d+sfytL/h/qHsvT/kf6hLP1/rH8oS/9/0T+Upf+/6h/K0v/f9A9l6X+P/qEs/X+ifyhL/3/XP5Sl/736h7L0/w/9Q1n636d/KEv//9Q/lKX/f+kfytL/fv1DWfr/VP9Qlv4P6B/K0v9n+oey9F+hfyhL/5/rH8rS/0H9Q1n6/0L/UJb+D+kfytL/Yf1DWfqv1D+Upf8j+oey9P+l/qEs/R/VP5Sl/2P6h7L0f1z/UJb+T+gfytL/Sf1DWfr/Sv9Qlv5P6R/K0n+V/qEs/Z/WP5Sl/6/1D2Xp/xv9Q1n6P6N/KEv/Z/UPZen/nP6hLP2f1z+Upf9q/UNJ+m9W6R/K0r9D/1CW/gP0D2XpP1D/UJb+Rf9Qlv6D9A9l6T9Y/1CW/kP0D2XpP1T/UJb+G+kfytJ/mP6hLP031j+Upf8m+oey9N9U/1CW/sP1D2XpP0L/0AbXHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoqumd01YO7FjvqYHrPhh15/wXft511eEnXHbZ1zfv+bn70zOClxyw7oPVq1evHvBk9Z3uh0Oqqur6b9us+/HQ3sddr3/WtAvGr3lURl/89A5XLXl6v49ee/cVqw68fMZVg154dlB19HEnLpg/cUBVlbGDqqVdD3bpqKqy7aDqvK4Hk7oebDeouqLrweQXHmxULe96sPMxpyw4tuuJ8bV/zwDg/7rpncuqgestdrXenwbW3f+zpl2/rOfnPl6y59VK1b3/N163xft6fa7Hi+x/z+uX1/fe/37/BQIAv6N/+3/L6J6f+3jJ33n/P+vkz94dfe7F97/n9csY+w8AzQu+/r/eRvf+un+vr/9Hfw5Ye3/SUecP6dr/y1cdtrj7qfJSvv7/29cvY3vv/4D1vv7fUVVlm56v/w+pqjLuZf52AEAK0zs/uLKv9/9973/ZstdNx7r7v/nVyw/r2v97h1376u6nBvVz/7fp6/3/Ab1+rQDASzO980ure73/78f+V9sGL7l2//dfevuruvb/e/f+dPQ6n+vP/o/rvf8TFi9cNOG008/Y6cSF846ff/z8k6dOmbLHblN2nzppwgtfEVjz48v8TQGADdzLe/9fDet101FVD6y9/8RNo27v2v9Jnz/ohO6nhvZz/7ft8/3/aO//AWA9YwZUgwdXS+ctXnzqLmt+7Hk4ac2Pa/5jwf7345//j+35Jrqe7xnsqKrXrL3vPO1jA7r2/5KxW97U/dTgfu7/dn3u/77rf68iAPDSvMz3/8f2ullv/0cMvHJq1/4fPG77c7qf6u8//x/f5/5f5P0/ANQxvbP6H30T3bX/Z2/y3IX1rsv2vv8PAJrXxv4/MupDY+pdlx3sPwA0r439n7/PpjfUuy5vsP8A0Lw29v+26efPqXdddrT/ANC8NvZ/5kmj7qh3XXay/wDQvDb2f/QZxyypd112tv8A0Lw29v+qw1feV++6TLD/ANC8Nvb/yKH3Plbvuky0/wDQvDb2/8c7HHpcveuyi/0HgOa1sf/f3HPne+pdl0n2HwCa9yL7P2JIQ6/ftf8TR140s951mWz/AaB5bbz///Qpe19a77rsav8BoHlt7P/IWV+dXO+67Gb/AaB5bez/e4/87rn1rsvu9h8AmtfG/j9/5r4j612XKfYfAJrXxv4vv23r2fWuyx72HwCa18b+z3jgvDvrXZep9h8AmtfG/m/35COL6l2XN9p/AGheG/v/lR8dvaLeddnT/gNA89rY/+EXPT+i3nV5k/0HgOa1sf8fOXvRBfWuy172HwCa18b+P3j+8HH1rsve9h8AmtfG/r/na8uuq3dd9rH/ANC8Nvb/+/dPnlHvuuxr/wGgeW3s/xHfuukn9a7LNPsPAM1rY/93u+uWefWuy372HwCa18b+3/z4rKfqXZf97T8ANK+N/X/th3+wdb3r8mb7DwDNa2P/P/flOR+vd13eYv8BoHlt7P8z3xi7a73rcoD9B4DmtbH/iz5z9SX1rsuB9h8AmtfG/nfu+MR99a7LQfYfAJrXxv7fOvwDS+pdl+n2HwCa18b+X/m6gXfUuy4H238AaF4b+z9mr0/OqXddZth/AGheG/u/bMYWN9S7LjPtPwA0r4393/jEL4ypd11m2X8AaF4b+3/80vsvrHddOu0/ADSvjf1/ePbCofWuyyH2HwCa18b+bzVs7sh61+VQ+w8AzWtj/88bf9e59a7LW+0/ADSvjf1/duo1k+tdl7fZfwBoXhv7v2Sr0ZfWuy5vt/8A0Lw29v+HC2+eWe+6vMP+A0Dz2tj/uYdMvKfedTnM/gNA89rY/0lzO4+rd13eaf8BoHlt7P+N71/+WL3r8i77DwDNa2P/z7n1i9fVuy6H238AaF4b+7/Jis3G1bsuR9h/AGheG/t/9FMnX1Dvusy2/wDQvDb2/6G77xtR77q82/4DQPPa2P/pF5+5ot51OdL+A0Dz2tj/by97dFG96zLH/gNA89rY/2s+de6d9a7LXPsPAM1rY//HXV/NrnddjrL/ANC8004/46R5CxbMP9UHPvCBD9Z+8Er/PxMAANC03/6h/5X+lQAAAAAAAAAAAAAAAAAAAEBebfzrxF7pv0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/2YEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAECQv/UKAxQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwFAAD//4QZ01k=") bind$alg(r0, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 2.132127561s ago: executing program 2 (id=381): ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0xc0984124, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000004000000000000071120200000000009500000000000000846e5ec3c9fb9fb7f37399bdd0bf3b4c355ced6d8f831974c284497366262c92a3c71424d969cd6a928b3b3ad50d7d4937a37adfd00ff0ef8abab66c41020dff8f4a10e8d252d4c38c217158fb0d4eabe173b858d9ad8268288aedce8507dbd7d7b84bfc7fb251928e061f1ec0f7bfb6ffad0b134cf1bc79cce07d94819bc55bdb2d56c1bd44c15918e69516d45090641f8afe80f19c1444c21fd5eb9a69800e07ec6dfa96db4fcb7e07d76c423f93b5dfb4e44c1bbbf93ba546897ec1e8a8d62dda5dd08f2c8d53c083a68e6a6b88"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, r4, 0x1, 0x0, 0xfffffffd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x4) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f], [0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0xd, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r6 = io_uring_setup(0x104c, &(0x7f0000001440)) write$input_event(r0, &(0x7f0000000540)={{}, 0x1, 0x0, 0x4}, 0x18) close(r6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x400041, 0x0) ioctl$SNDCTL_SEQ_THRESHOLD(r7, 0x4004510d, &(0x7f0000000140)=0x8001) 2.132016181s ago: executing program 0 (id=382): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2}}) 2.13189365s ago: executing program 1 (id=383): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)={0x34, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="18"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x34}}, 0x0) 2.085051105s ago: executing program 0 (id=384): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffff}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$nl_route(0x10, 0x3, 0x0) dup(r0) socket(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x118) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.049778952s ago: executing program 4 (id=385): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x20002) write$sndseq(r0, 0x0, 0x0) r1 = dup(r0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000002a00)="0b1c6840a936a0e377c392a7a3b38e1d", 0x10) r4 = accept$alg(r3, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000880)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x20, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2, 0x1, "36dad83aea8d"}]}}}}}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0xc, 0x7fff, 0x40, 0x0, 0x1, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x1, 0xe, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x8, [@enum64={0x10, 0x6, 0x0, 0x13, 0x1, 0xd, [{0x8, 0xbc, 0x4}, {0x3, 0x2, 0x6}, {0x2, 0x8, 0x5}, {0x7, 0x8000}, {0x5, 0x1, 0xf47}, {0x9, 0xb}]}, @float={0x1, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x737461ff9d2f27c, 0x2e, 0x61, 0x61, 0x30]}}, &(0x7f0000000380)=""/11, 0x80, 0xb, 0x0, 0xab, 0x0, @void, @value}, 0x28) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400}, [@map_fd={0x18, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x9}, @ldst={0x1, 0x2, 0x3, 0x1, 0x4, 0x50}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x6, 0x0, 0x5, 0xffffffffffffffff, 0x10}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @map_val={0x18, 0x1, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x75d9b504}, @alu={0x7, 0x1, 0x19, 0x6, 0x3, 0xffffffffffffffe0, 0xffffffffffffffff}]}, &(0x7f0000000080)='GPL\x00', 0xfff, 0x2, &(0x7f00000002c0)=""/2, 0x40f00, 0x11, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000400)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0x9, 0xc1, 0x7fffffff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)=[{0x1, 0x3, 0x1}], 0x10, 0x3, @void, @value}, 0x94) sendmmsg$alg(r4, &(0x7f000000b3c0)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="35d7bf24b01e7dad8eda553b9811", 0xe}, {&(0x7f0000000140)="16de61008f82e48354f212e7", 0xc}, {&(0x7f0000000180)="1e606d89f95359c8039a1ad9ba778cf1998594c07fce224a6beaf005a4bdffeac7259f9bf670acbc5d7cb3b4c05a", 0x2e}], 0x3, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r4, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000000a80)=""/111, 0xf}, {&(0x7f00000002c0)=""/56, 0x38}], 0x2}}], 0x1, 0x0, 0x0) 1.984078203s ago: executing program 0 (id=386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000006800010043000000000000800000000000000000240002"], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x100440c0) 1.868257918s ago: executing program 0 (id=387): socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000200)={@rand_addr, @initdev}, &(0x7f0000000280)=0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x16, r2, 0x1, 0x7}, 0x14) 1.679094417s ago: executing program 3 (id=388): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x16b500, 0x0) 1.394389876s ago: executing program 3 (id=389): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x21, 0x0, 0x4) 1.288355253s ago: executing program 3 (id=390): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}}) 1.2880583s ago: executing program 4 (id=391): setrlimit(0x7, &(0x7f0000000000)={0x4, 0x6}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1.258193604s ago: executing program 1 (id=392): getpid() connect$unix(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x800) 1.233221244s ago: executing program 4 (id=393): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth0\x00', 0x4}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, r2, 0x11, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.21158207s ago: executing program 0 (id=394): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002b80)=@newae={0x64, 0x1e, 0x1, 0x70bd2b, 0x25dfdbff, {{@in=@multicast1, 0x4d3, 0x2, 0x3c}, @in6=@mcast2, 0x9, 0x3503}, [@lifetime_val={0x24, 0x9, {0x7fff, 0x7, 0x1ff, 0x10000000000}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20}, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000001780)=@deltclass={0x24, 0x29, 0x331, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0x6}, {0x6, 0xb}, {0x10, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r4, 0x4, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x48}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000940)={'sit0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x40, 0x8, 0x43a9, 0x3ff, {{0x5, 0x4, 0x1, 0x1, 0x14, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @multicast2}}}}) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000180)={0x0, 0x2, 0x7, 0x80}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) r10 = dup(r8) bind$can_j1939(r8, &(0x7f0000000080)={0x1d, r9}, 0x18) sendmsg$can_j1939(r10, &(0x7f0000001380)={&(0x7f0000000300)={0x1d, r9, 0x0, {0x0, 0xf0, 0x4}, 0xfe}, 0x18, &(0x7f0000001340)={&(0x7f0000000340)="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", 0x6fa}, 0x1, 0x0, 0x0, 0x20000000}, 0x4011) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) utimensat(0xffffffffffffff9c, &(0x7f0000002240)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) 984.265568ms ago: executing program 3 (id=395): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) 329.099327ms ago: executing program 1 (id=396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newspdinfo={0x14, 0x24, 0x1, 0x2000}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 235.278415ms ago: executing program 1 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fddbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="08009e00"], 0x24}}, 0x44004) 183.779µs ago: executing program 4 (id=398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe050000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r2, r6, 0x0, 0x0, 0x0}, 0x30) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5, 0x8}}, @var={0x4, 0x0, 0x0, 0xe, 0x4, 0x1}, @float={0x2, 0x0, 0x0, 0x10, 0x2}]}, {0x0, [0x2e, 0x30, 0x30, 0x61]}}, &(0x7f0000000000)=""/8, 0x52, 0x8, 0x1, 0x3, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x1, 0x2, 0x3c88677f, 0x400, r7, 0x7, '\x00', 0x0, r8, 0x0, 0x2, 0x1, 0x9, @void, @value, @void, @value}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r1, 0x11a, 0x3, 0x0, &(0x7f00000004c0)=0x4) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, &(0x7f0000000180)={'nat\x00', 0x0, 0x0, 0x0, [0xfffffffffffffff9, 0x1, 0xf, 0x10001, 0x56, 0x1c]}, &(0x7f00000000c0)=0x78) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) 0s ago: executing program 1 (id=399): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610007000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b0b, &(0x7f0000000040)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 33.324951][ T6412] cgroup: Unknown subsys name 'net' [ 33.551468][ T6412] cgroup: Unknown subsys name 'cpuset' [ 33.555044][ T6412] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 33.945971][ T6412] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.351650][ T6426] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.374603][ T6434] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.388374][ T6437] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.390399][ T6437] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.392479][ T6437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.394322][ T6437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.396766][ T6437] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.398583][ T6437] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.400564][ T6439] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.402724][ T6439] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.405021][ T6438] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.407448][ T6438] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.409492][ T6438] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 35.410362][ T6437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.411785][ T6438] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.414721][ T6438] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.415266][ T6437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.416787][ T6438] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 35.418175][ T6437] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 35.420422][ T6438] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.420651][ T6438] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.422549][ T6437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 35.423849][ T6438] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.426909][ T6438] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 35.432418][ T6438] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 35.434143][ T6438] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.435778][ T6438] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.437459][ T6438] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.439687][ T6437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.441515][ T6437] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.620925][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 35.719889][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.721520][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.722990][ T6430] bridge_slave_0: entered allmulticast mode [ 35.724951][ T6430] bridge_slave_0: entered promiscuous mode [ 35.739588][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.741153][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.742673][ T6430] bridge_slave_1: entered allmulticast mode [ 35.744371][ T6430] bridge_slave_1: entered promiscuous mode [ 35.746429][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 35.750413][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 35.792488][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.797734][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 35.806302][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.856413][ T6430] team0: Port device team_slave_0 added [ 35.873420][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.875139][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.876953][ T6424] bridge_slave_0: entered allmulticast mode [ 35.878763][ T6424] bridge_slave_0: entered promiscuous mode [ 35.885564][ T6430] team0: Port device team_slave_1 added [ 35.899314][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.900878][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.902580][ T6424] bridge_slave_1: entered allmulticast mode [ 35.904300][ T6424] bridge_slave_1: entered promiscuous mode [ 35.914119][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.915671][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.917286][ T6423] bridge_slave_0: entered allmulticast mode [ 35.919839][ T6423] bridge_slave_0: entered promiscuous mode [ 35.922185][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.923767][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.925341][ T6423] bridge_slave_1: entered allmulticast mode [ 35.927165][ T6423] bridge_slave_1: entered promiscuous mode [ 35.954043][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.963935][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.965418][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.971226][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.979043][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.984091][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.985864][ T6432] bridge_slave_0: entered allmulticast mode [ 35.987726][ T6432] bridge_slave_0: entered promiscuous mode [ 35.991757][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.994989][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.999851][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.002217][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.004010][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.009068][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.015815][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.017383][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.019080][ T6432] bridge_slave_1: entered allmulticast mode [ 36.024421][ T6432] bridge_slave_1: entered promiscuous mode [ 36.038311][ T6435] chnl_net:caif_netlink_parms(): no params data found [ 36.056976][ T6423] team0: Port device team_slave_0 added [ 36.064566][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.067745][ T6424] team0: Port device team_slave_0 added [ 36.070502][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.085036][ T6423] team0: Port device team_slave_1 added [ 36.098688][ T6424] team0: Port device team_slave_1 added [ 36.109712][ T6432] team0: Port device team_slave_0 added [ 36.160978][ T6430] hsr_slave_0: entered promiscuous mode [ 36.209696][ T6430] hsr_slave_1: entered promiscuous mode [ 36.262137][ T6432] team0: Port device team_slave_1 added [ 36.263817][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.265196][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.270364][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.273514][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.274961][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.280611][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.307220][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.308650][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.317966][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.325535][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.327096][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.332692][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.346952][ T6435] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.348470][ T6435] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.350439][ T6435] bridge_slave_0: entered allmulticast mode [ 36.352093][ T6435] bridge_slave_0: entered promiscuous mode [ 36.363657][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.365211][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.370521][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.385823][ T6435] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.387361][ T6435] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.388969][ T6435] bridge_slave_1: entered allmulticast mode [ 36.391405][ T6435] bridge_slave_1: entered promiscuous mode [ 36.393374][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.394815][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.400352][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.491445][ T6423] hsr_slave_0: entered promiscuous mode [ 36.539853][ T6423] hsr_slave_1: entered promiscuous mode [ 36.579462][ T6423] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.581199][ T6423] Cannot create hsr debugfs directory [ 36.598024][ T6435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.650871][ T6424] hsr_slave_0: entered promiscuous mode [ 36.689625][ T6424] hsr_slave_1: entered promiscuous mode [ 36.729678][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.731418][ T6424] Cannot create hsr debugfs directory [ 36.739271][ T6435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.801141][ T6432] hsr_slave_0: entered promiscuous mode [ 36.839514][ T6432] hsr_slave_1: entered promiscuous mode [ 36.879370][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.881122][ T6432] Cannot create hsr debugfs directory [ 36.895702][ T6435] team0: Port device team_slave_0 added [ 36.906953][ T6435] team0: Port device team_slave_1 added [ 36.954865][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.956411][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.962231][ T6435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.967884][ T6435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.969839][ T6435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.975125][ T6435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.016093][ T6430] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.021224][ T6430] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.024296][ T6430] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.060974][ T6435] hsr_slave_0: entered promiscuous mode [ 37.099700][ T6435] hsr_slave_1: entered promiscuous mode [ 37.149368][ T6435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.150970][ T6435] Cannot create hsr debugfs directory [ 37.166328][ T6430] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.233946][ T6423] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.243162][ T6423] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.261871][ T6423] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.276056][ T6423] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.285222][ T6432] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.288922][ T6432] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.296665][ T6432] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.302151][ T6432] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.348952][ T6424] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.367997][ T6424] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.371525][ T6424] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.385390][ T6424] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.402330][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.405547][ T6435] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.415160][ T6435] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.418268][ T6435] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.432525][ T6435] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.451172][ T6434] Bluetooth: hci1: command tx timeout [ 37.459722][ T6434] Bluetooth: hci0: command tx timeout [ 37.459883][ T6437] Bluetooth: hci2: command tx timeout [ 37.460985][ T6434] Bluetooth: hci3: command tx timeout [ 37.466671][ T6423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.476775][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.495556][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.497181][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.500247][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.501681][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.507656][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.515644][ T6423] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.529600][ T6434] Bluetooth: hci4: command tx timeout [ 37.533265][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.539186][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.540869][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.550361][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.552013][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.556887][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.565210][ T6430] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.567360][ T6430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.578025][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.597695][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.599314][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.603581][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.605127][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.610715][ T649] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.612217][ T649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.614602][ T649] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.616044][ T649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.654361][ T6423] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.656540][ T6423] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.677067][ T6432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.681211][ T6432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.717049][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.763923][ T6435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.786530][ T6435] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.813078][ T636] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.814568][ T636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.825126][ T6430] veth0_vlan: entered promiscuous mode [ 37.832242][ T636] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.833746][ T636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.839961][ T6423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.844796][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.855000][ T6430] veth1_vlan: entered promiscuous mode [ 37.877891][ T6430] veth0_macvtap: entered promiscuous mode [ 37.910299][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.914717][ T6424] veth0_vlan: entered promiscuous mode [ 37.925745][ T6430] veth1_macvtap: entered promiscuous mode [ 37.935763][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.939108][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.952621][ T6424] veth1_vlan: entered promiscuous mode [ 37.959171][ T6432] veth0_vlan: entered promiscuous mode [ 37.973753][ T6423] veth0_vlan: entered promiscuous mode [ 37.977207][ T6430] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.979112][ T6430] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.986326][ T6430] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.988355][ T6430] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.994239][ T6432] veth1_vlan: entered promiscuous mode [ 38.008340][ T6423] veth1_vlan: entered promiscuous mode [ 38.036768][ T6424] veth0_macvtap: entered promiscuous mode [ 38.043410][ T6424] veth1_macvtap: entered promiscuous mode [ 38.051378][ T6435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.054720][ T6423] veth0_macvtap: entered promiscuous mode [ 38.064136][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.066628][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.070349][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.074510][ T6423] veth1_macvtap: entered promiscuous mode [ 38.081566][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.083811][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.085892][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.088168][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.092424][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.106123][ T6432] veth0_macvtap: entered promiscuous mode [ 38.126342][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.128438][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.132083][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.135992][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.138131][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.141066][ T6423] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.143269][ T6423] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.146028][ T6423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.148133][ T6432] veth1_macvtap: entered promiscuous mode [ 38.154690][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.156795][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.158764][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.161646][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.163601][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.165538][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.168317][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.188085][ T602] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.191486][ T602] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.202351][ T6423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.204289][ T6423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.206127][ T6423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.208234][ T6423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.220818][ T6424] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.222766][ T6424] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.224673][ T6424] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.226462][ T6424] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.238337][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.241699][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.243790][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.245958][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.248007][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.252032][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.255561][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.262150][ T602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.263808][ T602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.266576][ T6432] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.268480][ T6432] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.271344][ T6432] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.273241][ T6432] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.342494][ T6430] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.354343][ T6435] veth0_vlan: entered promiscuous mode [ 38.368931][ T6435] veth1_vlan: entered promiscuous mode [ 38.379335][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.380987][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.427566][ T44] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.431034][ T44] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.467132][ T30] audit: type=1326 audit(38.450:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6509 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.473959][ T6435] veth0_macvtap: entered promiscuous mode [ 38.480682][ T30] audit: type=1326 audit(38.450:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6509 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.484816][ T30] audit: type=1326 audit(38.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6509 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=6 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.489134][ T30] audit: type=1326 audit(38.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6509 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.494974][ T30] audit: type=1326 audit(38.450:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6509 comm="syz.1.6" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.503465][ T6435] veth1_macvtap: entered promiscuous mode [ 38.510448][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.512385][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.535235][ T649] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.536827][ T649] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.557313][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.561349][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.563481][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.565624][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.567845][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.572144][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.574209][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.576312][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.584123][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.586681][ T602] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.588491][ T602] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.625576][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.627784][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.629907][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.632080][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.633917][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.635949][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.638021][ T6435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.640444][ T6435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.643484][ T6435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.658873][ T649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.662313][ T6435] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.664237][ T6435] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.666050][ T6435] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.667743][ T6435] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.669269][ T649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.672103][ T30] audit: type=1326 audit(38.660:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.678515][ T30] audit: type=1326 audit(38.660:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.683800][ T30] audit: type=1326 audit(38.670:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.687785][ T30] audit: type=1326 audit(38.670:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.693100][ T30] audit: type=1326 audit(38.670:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6514 comm="syz.1.8" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 38.697061][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 38.787644][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.790339][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.792360][ T636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.800817][ T636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.803251][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 38.882296][ T6526] syz.2.3 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.909752][ T6528] loop3: detected capacity change from 0 to 512 [ 38.915095][ T6528] ======================================================= [ 38.915095][ T6528] WARNING: The mand mount option has been deprecated and [ 38.915095][ T6528] and is ignored by this kernel. Remove the mand [ 38.915095][ T6528] option from the mount to silence this warning. [ 38.915095][ T6528] ======================================================= [ 38.947602][ T6528] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.965140][ T6528] EXT4-fs (loop3): orphan cleanup on readonly fs [ 38.974135][ T6528] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 248: padding at end of block bitmap is not set [ 38.983237][ T6528] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.4: Failed to acquire dquot type 1 [ 38.994946][ T6528] EXT4-fs (loop3): 1 truncate cleaned up [ 39.001093][ T6528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.007605][ T6537] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.084283][ T6424] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.212936][ T6543] syz.3.14: attempt to access beyond end of device [ 39.212936][ T6543] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 39.216449][ T6543] FAT-fs (loop7): unable to read boot sector [ 39.531513][ T6434] Bluetooth: hci3: command tx timeout [ 39.533042][ T6434] Bluetooth: hci1: command tx timeout [ 39.534933][ T6434] Bluetooth: hci2: command tx timeout [ 39.537164][ T6434] Bluetooth: hci0: command tx timeout [ 39.611011][ T53] Bluetooth: hci4: command tx timeout [ 40.045178][ T6565] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.198674][ T6582] netlink: 3 bytes leftover after parsing attributes in process `syz.3.29'. [ 40.204859][ T6582] 0ªX¹¦À: renamed from caif0 [ 40.270098][ T6582] 0ªX¹¦À: entered allmulticast mode [ 40.271319][ T6582] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 40.272146][ T6587] evm: overlay not supported [ 40.376276][ T6593] loop2: detected capacity change from 0 to 512 [ 40.403735][ T6593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.464468][ T6603] loop1: detected capacity change from 0 to 2048 [ 40.700247][ T6432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.794207][ T6623] Injecting memory failure for pfn 0x11e000 at process virtual address 0x20000000 [ 40.839080][ T6623] Memory failure: 0x11e000: Sending SIGBUS to syz.4.48:6623 due to hardware memory corruption [ 40.848357][ T6623] Memory failure: 0x11e000: recovery action for dirty LRU page: Recovered [ 40.906436][ T6632] loop0: detected capacity change from 0 to 512 [ 40.946113][ T6635] loop4: detected capacity change from 0 to 512 [ 40.966342][ T6635] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.970568][ T6635] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 40.996538][ T6632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.118698][ T6423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.618260][ T6676] loop0: detected capacity change from 0 to 2048 [ 41.699294][ T6434] Bluetooth: hci0: command tx timeout [ 41.700487][ T6434] Bluetooth: hci2: command tx timeout [ 41.701630][ T6434] Bluetooth: hci1: command tx timeout [ 41.702823][ T6434] Bluetooth: hci3: command tx timeout [ 41.703844][ T6434] Bluetooth: hci4: command tx timeout [ 42.094691][ T6676] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.260478][ T6423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.420835][ T6709] overlayfs: statfs failed on './file0' [ 42.499915][ T6714] loop1: detected capacity change from 0 to 512 [ 42.501667][ T6714] EXT4-fs: Ignoring removed oldalloc option [ 42.502910][ T6714] ext2: Unknown parameter 'nouser_xattr' [ 42.653115][ T6728] loop2: detected capacity change from 0 to 512 [ 42.672326][ T6728] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.685952][ T6728] EXT4-fs error (device loop2): ext4_search_dir:1505: inode #2: block 3: comm syz.2.93: bad entry in directory: inode out of bounds - offset=44, inode=262156, rec_len=16, size=2048 fake=0 [ 42.878497][ T6747] loop1: detected capacity change from 0 to 2048 [ 42.897763][ T6432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.973558][ T6743] loop3: detected capacity change from 0 to 32768 [ 43.023171][ T6756] syz.2.100: attempt to access beyond end of device [ 43.023171][ T6756] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 43.025825][ T6756] FAT-fs (loop5): unable to read boot sector [ 43.067026][ T6743] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 43.100895][ T6743] XFS (loop3): Starting recovery (logdev: internal) [ 43.115949][ T6743] XFS (loop3): Ending recovery (logdev: internal) [ 43.212651][ T6424] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 43.488868][ T30] kauditd_printk_skb: 276 callbacks suppressed [ 43.488884][ T30] audit: type=1326 audit(299.461:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 43.495658][ T30] audit: type=1326 audit(299.471:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 43.501297][ T30] audit: type=1326 audit(299.481:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=53 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 43.517038][ T30] audit: type=1326 audit(299.491:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 43.537752][ T30] audit: type=1326 audit(299.491:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6779 comm="syz.3.111" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 43.757255][ T6793] syzkaller0: entered promiscuous mode [ 43.758509][ T6793] syzkaller0: entered allmulticast mode [ 43.773846][ T53] Bluetooth: hci4: command tx timeout [ 43.775070][ T53] Bluetooth: hci3: command tx timeout [ 43.776357][ T53] Bluetooth: hci1: command tx timeout [ 43.777599][ T53] Bluetooth: hci2: command tx timeout [ 43.778766][ T53] Bluetooth: hci0: command tx timeout [ 43.828272][ T30] audit: type=1326 audit(299.791:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e94d828 code=0x7ffc0000 [ 43.830684][ T6800] loop1: detected capacity change from 0 to 1024 [ 43.837228][ T6800] EXT4-fs: Ignoring removed nobh option [ 43.844002][ T6800] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.844970][ T30] audit: type=1326 audit(299.801:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7e94d828 code=0x7ffc0000 [ 43.859320][ T30] audit: type=1326 audit(299.801:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e94d828 code=0x7ffc0000 [ 43.863656][ T30] audit: type=1326 audit(299.801:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff7e94d828 code=0x7ffc0000 [ 43.868156][ T30] audit: type=1326 audit(299.801:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6792 comm="syz.2.118" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e94d828 code=0x7ffc0000 [ 43.875716][ T6800] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #11: comm syz.1.120: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 43.894635][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.120: couldn't read orphan inode 11 (err -117) [ 43.900269][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.934596][ T6430] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.340637][ T6826] mmap: syz.3.130 (6826) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.425115][ T6830] loop3: detected capacity change from 0 to 512 [ 44.431034][ T6830] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 44.432877][ T6830] UDF-fs: Scanning with blocksize 512 failed [ 44.434895][ T6830] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 44.436981][ T6830] UDF-fs: Scanning with blocksize 1024 failed [ 44.443970][ T6830] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 44.447251][ T6830] UDF-fs: Scanning with blocksize 2048 failed [ 44.450172][ T6830] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 44.456884][ T6830] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 44.894944][ T6843] loop0: detected capacity change from 0 to 32768 [ 44.928538][ T6843] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 44.935089][ T6857] loop4: detected capacity change from 0 to 164 [ 44.942013][ T6857] Unable to read rock-ridge attributes [ 44.947113][ T6857] Unable to read rock-ridge attributes [ 44.959953][ T6843] XFS (loop0): Ending clean mount [ 44.974825][ T6843] XFS (loop0): Quotacheck needed: Please wait. [ 45.033360][ T6843] XFS (loop0): Quotacheck: Done. [ 45.056993][ T6843] XFS (loop0): Metadata CRC error detected at xfs_refcountbt_read_verify+0x50/0xf0, xfs_refcountbt block 0x28 [ 45.061328][ T6843] XFS (loop0): Unmount and run xfs_repair [ 45.062708][ T6843] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 45.064224][ T6843] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 45.066398][ T6843] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 45.068271][ T6843] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 45.070381][ T6843] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 45.072290][ T6843] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 45.076502][ T6843] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 45.080548][ T6843] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 45.082556][ T6843] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 45.084724][ T6843] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x28 len 8 error 74 [ 45.093565][ T6843] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x590/0xafc (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 45.098691][ T6867] loop4: detected capacity change from 0 to 128 [ 45.100042][ T6843] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 46.233117][ T6882] loop4: detected capacity change from 0 to 512 [ 46.252036][ T6882] EXT4-fs warning (device loop4): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 46.256400][ T6882] EXT4-fs (loop4): mount failed [ 46.470472][ T6887] loop4: detected capacity change from 0 to 32768 [ 46.495736][ T6887] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 46.546166][ T6887] XFS (loop4): Ending clean mount [ 46.552988][ T6887] XFS (loop4): Quotacheck needed: Please wait. [ 46.570869][ T6887] XFS (loop4): Quotacheck: Done. [ 46.597533][ T6435] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 46.962512][ T6902] loop4: detected capacity change from 0 to 32768 [ 46.997151][ T6902] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 47.036205][ T6902] XFS (loop4): Ending clean mount [ 47.038680][ T6902] XFS (loop4): Quotacheck needed: Please wait. [ 47.058027][ T6902] XFS (loop4): Quotacheck: Done. [ 47.068692][ T8] XFS (loop4): Metadata CRC error detected at xfs_refcountbt_read_verify+0x50/0xf0, xfs_refcountbt block 0x28 [ 47.074944][ T8] XFS (loop4): Unmount and run xfs_repair [ 47.076157][ T8] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 47.077638][ T8] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff R............... [ 47.079683][ T8] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 .......(........ [ 47.081512][ T8] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 47.083341][ T8] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00 .......]........ [ 47.085391][ T8] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.087276][ T8] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.089088][ T8] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.094398][ T8] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 47.096371][ T6902] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x28 len 8 error 74 [ 47.102130][ T6902] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x590/0xafc (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 47.105236][ T6902] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 54.787978][ T6423] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 54.913746][ T6435] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 54.929159][ T6919] loop3: detected capacity change from 0 to 1024 [ 54.947228][ T6919] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 54.968405][ T6920] loop2: detected capacity change from 0 to 2048 [ 55.021589][ T6920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.025424][ T6919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.029106][ T6930] loop0: detected capacity change from 0 to 512 [ 55.031054][ T6930] journal_path: Lookup failure for './bus' [ 55.032289][ T6930] EXT4-fs: error: could not find journal device path [ 55.045763][ T6919] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2793: inode #15: comm syz.3.157: corrupted in-inode xattr: bad magic number in in-inode xattr [ 55.055310][ T6919] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 55.086404][ T6920] EXT4-fs error (device loop2): ext4_free_inode:353: comm syz.2.159: bit already cleared for inode 15 [ 55.091669][ T6424] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.315316][ T6432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.536647][ T6944] loop0: detected capacity change from 0 to 764 [ 55.568981][ T6942] loop3: detected capacity change from 0 to 32768 [ 55.570806][ T6942] XFS: attr2 mount option is deprecated. [ 55.572015][ T6942] XFS: ikeep mount option is deprecated. [ 55.573121][ T6942] XFS: noikeep mount option is deprecated. [ 55.671254][ T6922] loop1: detected capacity change from 0 to 65536 [ 55.729972][ T6946] loop4: detected capacity change from 0 to 32768 [ 55.731791][ T6946] XFS: attr2 mount option is deprecated. [ 55.732992][ T6946] XFS: ikeep mount option is deprecated. [ 55.734167][ T6946] XFS: noikeep mount option is deprecated. [ 55.784405][ T6922] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 55.802031][ T6942] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 55.825979][ T6942] XFS (loop3): Ending clean mount [ 55.828494][ T6942] XFS (loop3): Quotacheck needed: Please wait. [ 55.839978][ T6946] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 55.848572][ T6978] loop0: detected capacity change from 0 to 128 [ 55.860968][ T6978] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 55.868568][ T6922] XFS (loop1): Ending clean mount [ 55.900611][ T6942] XFS (loop3): Quotacheck: Done. [ 55.907030][ T6978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 55.995960][ T6946] XFS (loop4): Ending clean mount [ 55.998311][ T6946] XFS (loop4): Quotacheck needed: Please wait. [ 56.028486][ T6973] loop2: detected capacity change from 0 to 32768 [ 56.041955][ T6430] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 56.055251][ T6946] XFS (loop4): Quotacheck: Done. [ 56.060597][ T6424] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 56.106979][ T6973] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 56.212193][ T30] kauditd_printk_skb: 331 callbacks suppressed [ 56.212209][ T30] audit: type=1326 audit(312.181:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.217485][ T30] audit: type=1326 audit(312.181:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.229275][ T30] audit: type=1326 audit(312.191:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.233464][ T30] audit: type=1326 audit(312.191:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.237545][ T30] audit: type=1326 audit(312.191:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.258203][ T30] audit: type=1326 audit(312.221:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.262694][ T30] audit: type=1326 audit(312.221:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.266740][ T30] audit: type=1326 audit(312.221:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.272837][ T30] audit: type=1326 audit(312.251:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.277191][ T30] audit: type=1326 audit(312.251:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6995 comm="syz.1.173" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffa514d828 code=0x7ffc0000 [ 56.282947][ T6996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 56.295779][ T6435] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 56.365063][ T7006] loop0: detected capacity change from 0 to 512 [ 56.423557][ T7006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.542443][ T6423] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.547784][ T6973] XFS (loop2): Ending clean mount [ 56.679325][ T6432] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 56.775149][ T7028] netlink: 25 bytes leftover after parsing attributes in process `syz.3.190'. [ 56.789554][ T7028] gretap0: entered promiscuous mode [ 56.992345][ T7017] loop1: detected capacity change from 0 to 32768 [ 57.035456][ T7017] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 57.075747][ T7052] loop2: detected capacity change from 0 to 1024 [ 57.099457][ T7052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.103569][ T7020] loop4: detected capacity change from 0 to 32768 [ 57.136025][ T7020] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.136251][ T7017] XFS (loop1): Ending clean mount [ 57.146188][ T7017] XFS (loop1): Quotacheck needed: Please wait. [ 57.176882][ T7017] XFS (loop1): Quotacheck: Done. [ 57.221477][ T7020] XFS (loop4): Ending clean mount [ 57.229033][ T7020] XFS (loop4): Quotacheck needed: Please wait. [ 57.239377][ T6430] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 57.315793][ T7020] XFS (loop4): Quotacheck: Done. [ 57.317059][ T6432] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.418020][ T6435] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 57.471977][ T7078] loop3: detected capacity change from 0 to 128 [ 57.495248][ T7078] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.637806][ T6424] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.655465][ T7095] netlink: 56 bytes leftover after parsing attributes in process `syz.1.211'. [ 58.478873][ T7111] Zero length message leads to an empty skb [ 58.482166][ T53] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 58.773806][ T7127] netlink: 16 bytes leftover after parsing attributes in process `syz.3.224'. [ 58.870694][ T7133] netlink: 332 bytes leftover after parsing attributes in process `syz.1.227'. [ 58.872868][ T7133] netlink: 'syz.1.227': attribute type 9 has an invalid length. [ 58.874398][ T7133] netlink: 108 bytes leftover after parsing attributes in process `syz.1.227'. [ 58.876389][ T7133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.227'. [ 60.504210][ T7168] netlink: 'syz.1.239': attribute type 1 has an invalid length. [ 62.609152][ T7211] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.252'. [ 62.612412][ T7207] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.252'. [ 62.674448][ T7215] netlink: 696 bytes leftover after parsing attributes in process `syz.3.256'. [ 62.750597][ T7220] warning: `syz.4.258' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.780825][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.782872][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.963939][ T7231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 62.965953][ T7231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.323487][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.275'. [ 64.327534][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.275'. [ 64.396284][ T7270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.398160][ T7270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.400144][ T6427] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 64.430907][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 64.494304][ T2348] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.587778][ T6427] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 64.590025][ T6427] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 64.591912][ T6427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.599022][ T6427] usb 1-1: config 0 descriptor?? [ 64.608815][ T6427] pwc: Askey VC010 type 2 USB webcam detected. [ 65.919400][ T5992] Bluetooth: hci4: command 0x0405 tx timeout [ 66.014813][ T6427] pwc: recv_control_msg error -32 req 02 val 2b00 [ 66.228746][ T7301] bridge0: port 3(erspan0) entered blocking state [ 66.230850][ T7301] bridge0: port 3(erspan0) entered disabled state [ 66.235052][ T7301] erspan0: entered allmulticast mode [ 66.249038][ T7301] erspan0: entered promiscuous mode [ 66.254710][ T7301] bridge0: port 3(erspan0) entered blocking state [ 66.256152][ T7301] bridge0: port 3(erspan0) entered forwarding state [ 66.636881][ T6427] pwc: recv_control_msg error -32 req 02 val 2700 [ 66.640116][ T6427] pwc: recv_control_msg error -32 req 02 val 2c00 [ 67.624427][ T6427] pwc: recv_control_msg error -32 req 04 val 1000 [ 67.640364][ T6427] pwc: recv_control_msg error -32 req 04 val 1300 [ 67.642133][ T6427] pwc: recv_control_msg error -32 req 04 val 1400 [ 67.646146][ T6427] pwc: recv_control_msg error -32 req 02 val 2000 [ 67.805751][ T6427] pwc: recv_control_msg error -32 req 02 val 2100 [ 67.811560][ T6427] pwc: recv_control_msg error -32 req 04 val 1500 [ 67.811985][ T6427] pwc: recv_control_msg error -32 req 02 val 2500 [ 67.812912][ T6427] pwc: recv_control_msg error -32 req 02 val 2400 [ 67.814061][ T6427] pwc: recv_control_msg error -32 req 02 val 2600 [ 67.815144][ T6427] pwc: recv_control_msg error -32 req 02 val 2900 [ 67.815518][ T6427] pwc: recv_control_msg error -32 req 02 val 2800 [ 68.749123][ T5992] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 68.751669][ T5992] Bluetooth: hci3: Injecting HCI hardware error event [ 68.754803][ T5992] Bluetooth: hci3: hardware error 0x00 [ 68.788190][ T6427] pwc: recv_control_msg error -71 req 04 val 1200 [ 68.793635][ T6427] pwc: Registered as video11. [ 68.795715][ T6427] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input4 [ 68.962806][ T6475] IPVS: starting estimator thread 0... [ 69.009447][ T6427] usb 1-1: USB disconnect, device number 2 [ 69.050090][ T7330] IPVS: using max 26 ests per chain, 62400 per kthread [ 70.301370][ T6434] Bluetooth: hci4: command 0x0405 tx timeout [ 70.314171][ T1766] cfg80211: failed to load regulatory.db [ 70.518496][ T7358] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.308'. [ 71.075337][ T5992] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 71.586569][ T7376] netlink: 696 bytes leftover after parsing attributes in process `syz.1.315'. [ 71.703852][ T7378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.779396][ T6427] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 71.938929][ T6427] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.943029][ T6427] usb 1-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 71.946301][ T6427] usb 1-1: config 0 interface 0 has no altsetting 0 [ 72.123442][ T6427] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 72.162328][ T6427] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.278236][ T6427] usb 1-1: config 0 descriptor?? [ 73.658559][ T6427] nti 0003:0757:0A00.0001: unknown main item tag 0x0 [ 73.660367][ T6427] nti 0003:0757:0A00.0001: ignoring exceeding usage max [ 73.662451][ T6427] nti 0003:0757:0A00.0001: usage index exceeded [ 73.663675][ T6427] nti 0003:0757:0A00.0001: item 0 0 2 0 parsing failed [ 73.665356][ T6427] nti 0003:0757:0A00.0001: probe with driver nti failed with error -22 [ 74.471591][ T1766] usb 1-1: USB disconnect, device number 3 [ 74.878530][ T7417] binder: BINDER_SET_CONTEXT_MGR already set [ 74.880227][ T7417] binder: 7412:7417 ioctl 4018620d 20000040 returned -16 [ 74.883367][ T7417] binder: 7412:7417 got transaction to invalid handle, 1 [ 74.885127][ T7417] binder: 7417:7412 cannot find target node [ 74.886463][ T7417] binder: 7412:7417 transaction call to 0:0 failed 5/29201/-22, size 72-0 line 3145 [ 74.901448][ T7417] binder: 7412:7417 ioctl c01064c2 0 returned -22 [ 74.903735][ T7417] binder: 7412:7417 ioctl c01064c1 200002c0 returned -22 [ 75.507552][ T1766] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.558949][ T7423] binder: 7422:7423 tried to acquire reference to desc 0, got 1 instead [ 75.572168][ T1766] binder: undelivered transaction 11, process died. [ 75.573754][ T1766] binder: undelivered transaction 10, process died. [ 75.575198][ T1766] binder: undelivered TRANSACTION_COMPLETE [ 75.576397][ T1766] binder: undelivered TRANSACTION_COMPLETE [ 75.641837][ T7429] rtc-efi rtc-efi.0: write status is 3 [ 75.648170][ T7431] random: crng reseeded on system resumption [ 76.163903][ T7440] random: crng reseeded on system resumption [ 76.517660][ T7458] netlink: 'syz.1.344': attribute type 29 has an invalid length. [ 76.526781][ T7458] netlink: 'syz.1.344': attribute type 29 has an invalid length. [ 77.504891][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.004221][ T7480] loop1: detected capacity change from 0 to 32768 [ 78.234145][ T7505] use of bytesused == 0 is deprecated and will be removed in the future, [ 78.256814][ T7505] use the actual size instead. [ 78.488873][ T7480] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 78.902973][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.914227][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.918672][ T7480] XFS (loop1): Ending clean mount [ 78.981549][ T6430] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 79.264470][ T7544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.268860][ T7544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.335358][ T7549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.337506][ T7549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.338261][ T30] kauditd_printk_skb: 82 callbacks suppressed [ 79.338274][ T30] audit: type=1326 audit(336.307:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7545 comm="syz.2.375" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff7e94d828 code=0x0 [ 80.138399][ T7568] input: syz0 as /devices/virtual/input/input5 [ 80.210502][ T25] kernel write not supported for file /uhid (pid: 25 comm: kworker/1:0) [ 80.274912][ T7580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.278225][ T7580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.428643][ T7553] loop3: detected capacity change from 0 to 32768 [ 80.444900][ T7553] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 80.488798][ T7553] XFS (loop3): Ending clean mount [ 80.515299][ T6424] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 80.653742][ T7594] mkiss: ax0: crc mode is auto. [ 80.715155][ T7595] mkiss: ax0: crc mode is auto. [ 80.820846][ T30] audit: type=1326 audit(337.807:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.825696][ T30] audit: type=1326 audit(337.807:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.832514][ T30] audit: type=1326 audit(337.817:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=155 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.837678][ T30] audit: type=1326 audit(337.817:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.848524][ T30] audit: type=1326 audit(337.817:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.858534][ T30] audit: type=1326 audit(337.817:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=434 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.869349][ T30] audit: type=1326 audit(337.817:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.888459][ T30] audit: type=1326 audit(337.817:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 80.898558][ T30] audit: type=1326 audit(337.827:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7596 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=424 compat=0 ip=0xffff9814d828 code=0x7ffc0000 [ 82.705634][ C1] vxcan0: j1939_tp_rxtimer: 0x00000000a8835669: rx timeout, send abort [ 82.708542][ C1] vxcan0: j1939_xtp_rx_abort_one: 0x00000000a8835669: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 82.711848][ C1] ------------[ cut here ]------------ [ 82.713022][ C1] refcount_t: underflow; use-after-free. [ 82.714711][ C1] WARNING: CPU: 1 PID: 7638 at lib/refcount.c:28 refcount_warn_saturate+0x1c8/0x20c [ 82.716810][ C1] Modules linked in: [ 82.717654][ C1] CPU: 1 UID: 0 PID: 7638 Comm: syz.4.398 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0 [ 82.719689][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 82.722020][ C1] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 82.723793][ C1] pc : refcount_warn_saturate+0x1c8/0x20c [ 82.724997][ C1] lr : refcount_warn_saturate+0x1c8/0x20c [ 82.726331][ C1] sp : ffff8000800176d0 [ 82.727289][ C1] x29: ffff8000800176d0 x28: 0000000000000001 x27: 00000000ffffffff [ 82.729072][ C1] x26: 1fffe0001a560998 x25: dfff800000000000 x24: 0000000000000000 [ 82.730794][ C1] x23: ffff0000c713c224 x22: ffff80008a63b670 x21: 0000000000000003 [ 82.732445][ C1] x20: ffff0000c713c224 x19: ffff800092b74000 x18: 0000000000000008 [ 82.734318][ C1] x17: 0000000000000000 x16: ffff80008b47f65c x15: ffff700011f29534 [ 82.736016][ C1] x14: 1ffff00011f29534 x13: 0000000000000004 x12: ffffffffffffffff [ 82.737755][ C1] x11: 0000000000000103 x10: 0000000000ff0100 x9 : d7906c921eb1c700 [ 82.739451][ C1] x8 : d7906c921eb1c700 x7 : 0000000000000001 x6 : 0000000000000001 [ 82.741064][ C1] x5 : ffff800080016df8 x4 : ffff80008f9bd220 x3 : ffff8000803921b4 [ 82.742858][ C1] x2 : 0000000000000000 x1 : 0000000100000101 x0 : 0000000000000000 [ 82.744564][ C1] Call trace: [ 82.745243][ C1] refcount_warn_saturate+0x1c8/0x20c (P) [ 82.746485][ C1] refcount_warn_saturate+0x1c8/0x20c (L) [ 82.747821][ C1] sk_skb_reason_drop+0x210/0x43c [ 82.748982][ C1] j1939_session_put+0x1c8/0x460 [ 82.750150][ C1] j1939_xtp_rx_abort_one+0xd4/0x358 [ 82.751271][ C1] j1939_tp_recv+0x814/0xe14 [ 82.752210][ C1] j1939_can_recv+0x5bc/0x934 [ 82.753254][ C1] can_rcv_filter+0x308/0x714 [ 82.754317][ C1] can_receive+0x328/0x488 [ 82.755217][ C1] can_rcv+0x128/0x240 [ 82.756056][ C1] __netif_receive_skb+0x18c/0x3c8 [ 82.757127][ C1] process_backlog+0x640/0x123c [ 82.758144][ C1] __napi_poll+0xb4/0x3fc [ 82.759086][ C1] net_rx_action+0x6a8/0xf4c [ 82.759979][ C1] handle_softirqs+0x2e0/0xbf8 [ 82.761067][ C1] __do_softirq+0x14/0x20 [ 82.761937][ C1] ____do_softirq+0x14/0x20 [ 82.762881][ C1] call_on_irq_stack+0x24/0x4c [ 82.763934][ C1] do_softirq_own_stack+0x20/0x2c [ 82.764921][ C1] __irq_exit_rcu+0x1d8/0x544 [ 82.765929][ C1] irq_exit_rcu+0x14/0x84 [ 82.766800][ C1] el1_interrupt+0x38/0x68 [ 82.767785][ C1] el1h_64_irq_handler+0x18/0x24 [ 82.768782][ C1] el1h_64_irq+0x6c/0x70 [ 82.769678][ C1] _raw_spin_unlock_irqrestore+0x44/0x98 (P) [ 82.770999][ C1] _raw_spin_unlock_irqrestore+0x38/0x98 (L) [ 82.772173][ C1] __skb_try_recv_datagram+0x198/0x584 [ 82.773223][ C1] __unix_dgram_recvmsg+0x2f8/0xea4 [ 82.774266][ C1] unix_dgram_recvmsg+0xd0/0xe8 [ 82.775240][ C1] sock_recvmsg_nosec+0x90/0xec [ 82.776247][ C1] ____sys_recvmsg+0x58c/0x6e4 [ 82.777274][ C1] do_recvmmsg+0x3dc/0xb34 [ 82.778142][ C1] __arm64_sys_recvmmsg+0x180/0x23c [ 82.779192][ C1] invoke_syscall+0x98/0x2b8 [ 82.780142][ C1] el0_svc_common+0x130/0x23c [ 82.781107][ C1] do_el0_svc+0x48/0x58 [ 82.781943][ C1] el0_svc+0x54/0x168 [ 82.782705][ C1] el0t_64_sync_handler+0x84/0x108 [ 82.783798][ C1] el0t_64_sync+0x198/0x19c [ 82.784761][ C1] irq event stamp: 96157 [ 82.785640][ C1] hardirqs last enabled at (96156): [] __console_unlock+0x70/0xc4 [ 82.787549][ C1] hardirqs last disabled at (96157): [] el1_dbg+0x24/0x80 [ 82.789314][ C1] softirqs last enabled at (91164): [] handle_softirqs+0xa38/0xbf8 [ 82.791198][ C1] softirqs last disabled at (96049): [] __do_softirq+0x14/0x20 [ 82.793068][ C1] ---[ end trace 0000000000000000 ]--- [ 82.794192][ C1] vkms_vblank_simulate: vblank timer overrun [ 83.136419][ T7647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 83.149517][ T7647] misc raw-gadget: fail, usb_gadget_register_driver returned -16