last executing test programs:

13.472673567s ago: executing program 3 (id=219):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000001b40)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x20040000}, 0x8004)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x2, 0x90, [0x0, 0x20000080, 0x200000b0, 0x200000e0], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966f61, 0x1, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x13}}, 0x4008054)
r6 = socket$inet(0x2, 0xa, 0x81)
r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
close(0xffffffffffffffff)
execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0)
bind$inet(r6, 0x0, 0x0)
dup(0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sched_setscheduler(0x0, 0x7, &(0x7f0000000240)=0x1)
syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x97f1, &(0x7f0000000a40)="$eJzs3QeYJHXBaP1ZYMkZVERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEFBQBGQjJJzzjnnnHPOOcN+z7K7iusB9X7vvfh6znme3Zmurq6p/v+6qmamerqXmnfxuQYGxhwY1pQDI3fzHXMtvMnOc12+7y57nzzl2BNOMXzy8BtMNvziZIOGfxxlYGBglOHLGT5tnEdOOHGUgdHenv63xhlr7EHjDQxMP/ziHMM/zjzswySPjphvyEiNvKKD/npx0A7D/r3dBEO/xNBPlrnpgrMHBgYmfMfth95k2n+4o9KWmnO+ef9m9Ve3oVaDh3/+zn+jD/s3yf0DA5PcM8CPj3fOO+h9uEtDv+aEOz8w5nrvw9f+X9dSc843/0j+Q7fFUYdPm3noNj7yNmhs5Mf5TavOtufwIXz78TYwMHQX93fbyv+Klppz3gUH3n0/P/DQ2OOfPuTt/eY4zwwMjPPswMA4zw0MjPP8wMA4LwwMjPPi++1S//+ac64Z5hq6vY+4PJx9xGN5Qnpc7LvGC/sMDAyMMWyecd4adrwYd8oRx4Sqqqr6z27OuWaYG47/Y77X8X/rbea8peN/VVXV/97mn3OuGYYex0c6/o/7Xsf/b99ww5rDfvc/x8zDbvXW+3snqqqq6t9q3vnx+D/hex3/J9jpugM6/ldVVf3vbbGF3j7+jzvS8X/S9zr+r7nAHZcOn2/E9w1vvmORbz9/bPj0198xfdR3TH/tHdMHv2M575x/9HdMf+Ud08ccGBjnkeHT3/jb5HGeGXqbf1zOOC/97fk4k432jukvv2P66O+Y/srwdRo6fYx3TH/zHfOP+bfp4w79b8rhX/fV9xjqqqqq/5gWm2HeuQfe8Tz74ZNHPLEfnxd69NHb3Pl+rW9VVVVVVVVV/fu99eRpZ/3tb74/NvCOv13969+wDv+9wKBjzrnmmvdtRf8zGvSPvw/Z8v1ep/+/DXUe87ApBwbWXvL9XpV6H/pf87fq9X+l/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3Luc///r3/8P3PP5nYbPOuvkd9y7+N9uOdnA6sM/u/mOuRZe/X1Y9/eh/9bz/wOrDxoYGO474VDLhedcbImpBwYGFr/3jslnGvjrdbMMvW62iUd9+485Bwamfvv/wZO9y5KHv8vC22/uMOlfl3HM28uff8j+ow4aaSXe0exn33fwaku9POPIHz/77vfjr+8vsfRL+0814m9ZRhlppjHf5cYjlj/ivozsPHzdpx667tNsuNa602ywyaZfWn2tFVZdedWV155++ulmnGGmGaf/yqzTrLL6mitPO+z/dxmzYW9dMeq/MmbjjjxmT875zjEb+b5NdNLBOGb/+K4ef7eIt5d47uwPXTZizEb7F8dsxNcb9b3HbMrVh3+hyQYGDyz/9tAMGhiYbLTBAxsPvTDdGAMDkw0ePu9kQ+f92sSjDAzs/Lc7Omj4i40Om2fQlkPn+Q9735JZh4/IZiPmG/l11kde0X/2viXHj7vbHSO9b8n/rf6Pjv//4DXLoL8O1Ig3QBg+zzCv9/l9Jv5hfacc7e2D3Lut73u8Ls7b0eNrrdUeXfJ/6nVxaH3HfY/1fY/X8XvX9Z16uqf3Grao/7H1HWlft+CwK/+Vfd3Ae+/rRqXbr3zlFCPv6xZ491X8u+14xBiNMdJM77av23mBc7cYuvyB997XLbj68BcP+Nu+bpSBgclGHbGvG7rjG33wwM5DL0w/9MIYgwcOGXphhrcvjDVwztALX15xnTVXGvT2ywwMX+60Q5c7x8SDhm1ANx682hi7DRky2vB1eWmcv1/X4Y+PKd95PJ9z4uGDOfy2I5Y7dNYRy31l22HXjT58uS//G8sdcVta38nOHHbdGMOX+8pIyx38Hssdcdt/2B6mHvR3T1SF/c37+r5GtP2O+R7r+x6vw42Pt7fdp1ruof+B1+Ee9G7rO9p7r++7vW/Iu67vY5c9vt//1OuG0+Psnn2HPVbGHP44e/PfePyOuO3I+7FhLwQybLc/5r+yH5vyH/ZjW406ykiD/Y7e7fvclWD+4VvEX5e20kEvrz5i7AePtNx/9n3uO+7LINiPTTjSz3ODtthvYBCN+SNrPr/RW7u+95gPHvj7ny1GjPmI277XmI/xr4z5R997zEf+PvndxnzqTw27fvBI6//OMV90jzluHDHmo4+03H825mO897HjH8d8YGAwjfnOkw8bt/fan77bmI+47YgxH/p1Zpt4tIF5BgYGpho+5qP/K2M+2f/M43xsmH/Y5yv/ddIzMy3yxRFjPvIY/7MxH/3fHPPN7/nr43yqt6/75CgDo48+sPEKG264/nTD/h9xcfph//O+6JmVho3zex1L381oxG3fa7sY7V8xmvBfMhr0z4wmH+3djP62aY168GLP/p/ui0b7d43O4X3RKfMNG7f3+r7o3cZ8xG3pODjpO24/8s+h7/H6WXif3h6fBbYb8fPef8LrZ434efd/5etnjfid5Ooj7+TrX63f/7vL313+7vJ3l7+4dzn/P+WI8/9Dxj3wg8N/6Bx85Sy3zPF+r+/73H/1+f/hvn93/n+OW2a5cuiPVsOve8/zs8Pm+Y88PzvzsA+TPDpivpHPD468ov/s/Oy+u2945f+j87P/R43YVv+Fn4vb/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvcv5/2lHPA/gwSUW/s7wE6GDN5vuyM3e7/V9n/uvPv8/3Pfvzv9vduR0m40y8Nfr3vP8/7B5HOf/71toi2X/k8//j9hWO/9f/6T83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/cu5z/n2PE8wAOn32eT494PsD12++/1/u9vu9z/63n/3v/f2/t/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7ihp//HxjpbRIX6XGBwfn//929i/+i+WMW/8Xyxyz+i+ePWfyXyB+z+C+ZP2bx/27+mMX/e/ljFv+l8scs/kvnj1n8v58/ZvH/Qf6YxX+Z/DGL/7L5Yxb/5fLHLP4/zB+z+C+fP2bxXyF/zOL/o/wxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6Yxf/H+WMW/zXyxyz+a+aPWfzXyh+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4b5o9Z/H+SP2bx/2n+mMV/o/wxi//G+WMW/03yxyz+m+aPWfx/lj9m8f95/pjFf7P8MYv/5vljFv8t8scs/lvmj1n8t8ofs/j/In/M4r91/pjF/5f5Yxb/bfLHLP6/yh+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/6/zxyz+O+aPWfx3yh+z+P8mf8zi/9v8MYv/zvljFv9d8scs/r/LH7P475o/ZvHfLX/M4r97/pjF//f5Yxb/P+SPWfz3yB+z+P8xf8ziv2f+mMV/r/wxi//e+WMW/z/lj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfz/nD9m8f9L/pjF/5D8MYv/ofljFv/D8v/7Hhz/7Q8W/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvEfkj8m8R80kD9m8R+UP2bxHyV/zOI/av6YxX+0/DGL/+D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6Yxf8D+WMW/w/mj1n8P5Q/ZvGfLH/M4v/h/DGL/+T5Yxb/j+SPWfw/mj9m8Z8if8zi/7H8MYv/x/PHLP5T5o9Z/D+RP2bx/2T+mMX/U/ljFv+p8scs/p/OH7P4fyZ/zOL/2fwxi//U+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8v5I/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv+v5o9Z/GfLH7P4fy1/zOI/e/6Yxf/r+WMW/2/kj1n858gfs/jPmT9m8Z8rf8ziP3f+mMX/m/ljFv958scs/vPmj1n858sfs/h/K3/M4j9//pjF/9v5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvH/Tv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/bv6Yxf97+WMW/6Xyxyz+S+ePWfy/nz9m8f9B/pjFf5n8MYv/svljFv/l8scs/j/MH7P4L58/ZvFfIX/M4v+j/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/8f5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8f5I/ZvH/af6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/H+WP2bx/3n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+P8if8ziv3X+mMX/l/ljFv9t8scs/r/KH7P4b5s/ZvHfLn/M4r99/pjFf4f8MYv/r/PHLP475o9Z/HfKH7P4/yZ/zOL/2/wxi//O+WMW/13yxyz+v8sfs/jvmj9m8d8tf8ziv3v+mMX/9/ljFv8/5I9Z/PfIH7P4/zF/zOK/Z/6YxX+v/DGL/975Yxb/P+WPWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/P+cP2bx/0v+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kv93ttWITyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+Q/LHJP5vf5r/P2bxH5Q/ZvEfJX/M4j9q/pjFf7T8MYv/4Pwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/wP5Yxb/D+aPWfw/lD9m8Z8sf8zi/+H8MYv/5PljFv+P5I9Z/D+aP2bxnyJ/zOL/sfwxi//H88cs/lPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/6nyxyz+n84fs/h/Jn/M4v/Z/DGL/9T5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M/7Nf/D7sl7/oVn8v9L2j1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/q/ljFv/Z8scs/l/LH7P4z54/ZvH/ev6Yxf8b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bx/2b+mMV/nvwxi/+8+WMW//nyxyz+38ofs/jPnz9m8f92/pjFf4H8MYv/gvljFv+F8scs/gvnj1n8v5M/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8v5s/ZvH/Xv6YxX+p/DGL/9L5Yxb/7+ePWfx/kD9m8V8mf8ziv2z+mMV/ufwxi/8P88cs/svnj1n8V8gfs/j/KH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9x/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/5/kj1n8f5o/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv+f5Y9Z/H+eP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP6/yB+z+G+dP2bx/2X+mMV/m/wxi/+v8scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/+v8MYv/jvljFv+d8scs/r/JH7P4/zZ/zOK/c/6YxX+X/DGL/+/yxyz+u+aPWfx3yx+z+O+eP2bx/33+mMX/D/ljFv898scs/n/MH7P475k/ZvHfK3/M4r93/pjF/0/5Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv8/549Z/P+SP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/gPyR+T+I86kD9m8R+UP2bxHyV/zOI/av6YxX+0/DGL/+D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6Yxf8D+WMW/w/mj1n8P5Q/ZvGfLH/M4v/h/DGL/+T5Yxb/j+SPWfw/mj9m8Z8if8zi/7H8MYv/x/PHLP5T5o9Z/D+RP2bx/2T+mMX/U/ljFv+p8scs/p/OH7P4fyZ/zOL/2fwxi//U+WMW/8/lj1n8P58/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8v5I/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv+v5o9Z/GfLH7P4fy1/zOI/e/6Yxf/r+WMW/2/kj1n858gfs/jPmT9m8Z8rf8ziP3f+mMX/m/ljFv958scs/vPmj1n858sfs/h/K3/M4j9//pjF/9v5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvH/Tv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/bv6Yxf97+WMW/6Xyxyz+S+ePWfy/nz9m8f9B/pjFf5n8MYv/svljFv/l8scs/j/MH7P4L58/ZvFfIX/M4v+j/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvFfLX/M4r96/pjF/8f5Yxb/NfLHLP5r5o9Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/hvmj1n8f5I/ZvH/af6YxX+j/DGL/8b5Yxb/TUz+/8YdtfhvavL/N7L4/yx/zOL/8/wxi/9m+WMW/83zxyz+W+SPWfy3zB+z+G+VP2bx/0X+mMV/6/wxi/8v88cs/tvkj1n8f5U/ZvHfNn/M4r9d/pjFf/v8MYv/DvljFv9f549Z/HfMH7P475Q/ZvH/Tf6Yxf+3+WMW/53zxyz+u+SPWfx/lz9m8d81f8ziv1v+mMV/9/wxi//v88cs/n/IH7P475E/ZvH/Y/6YxX/P/DGL/175Yxb/vfPHLP5/yh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4/zl/zOL/l/wxi/8h+WMW/0Pzxyz+h6n8h0zwr85p8T9c5f+vZ/E/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi/+Q/DGJ/2gD+WMW/0H5Yxb/UfLHLP6j5o9Z/EfLH7P4D84fs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+QP2bx/2D+mMX/Q/ljFv/J8scs/h/OH7P4T54/ZvH/SP6Yxf+j+WMW/ynyxyz+H8sfs/h/PH/M4j9l/pjF/xP5Yxb/T+aPWfw/lT9m8Z8qf8zi/+n8MYv/Z/LHLP6fzR+z+E+dP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bx/1L+mMX/y/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/K/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f9q/pjFf7b8MYv/1/LHLP6z549Z/L+eP2bx/0b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfy/mT9m8Z8nf8ziP2/+mMV/vvwxi/+38scs/vPnj1n8v50/ZvFfIH/M4r9g/pjFf6H8MYv/wvljFv/v5I9Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/kvljFv/v5o9Z/L+XP2bxXyp/zOK/dP6Yxf/7+WMW/x/kj1n8l8kfs/gvmz9m8V8uf8zi/8P8MYv/8vljFv8V8scs/j/KH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5w/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8ziv2H+mMX/J/ljFv+f5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjF/2f5Yxb/n+ePWfw3yx+z+G+eP2bx3yJ/zOK/Zf6YxX+r/DGL/y/yxyz+W+ePWfx/mT9m8d8mf8zi/6v8MYv/tvljFv/t8scs/tvnj1n8d8gfs/j/On/M4r9j/pjFf6f8MYv/b/LHLP6/zR+z+O+cP2bx3yV/zOL/u/wxi/+u+WMW/93yxyz+u+ePWfx/nz9m8f9D/pjFf4/8MYv/H/PHLP575o9Z/PfKH7P4750/ZvH/U/6YxX+f/DGL/775Yxb//fLHLP77S/3H+CfXW/wPkPr/syz+B+aPWfwPyh+z+B+cP2bx/3P+mMX/L/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/5D8MYn/4IH8MYv/oPwxi/8o+WMW/1Hzxyz+o+WPWfwH549Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/0nzxyz+H8gfs/h/MH/M4v+h/DGL/2T5Yxb/D+ePWfwnzx+z+H8kf8zi/9H8MYv/FPljFv+P5Y9Z/D+eP2bxnzJ/zOL/ifwxi/8n88cs/p/KH7P4T5U/ZvH/dP6Yxf8z+WMW/8/mj1n8p84fs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/h/KX/M4v/l/DGL/zT5Yxb/afPHLP7T5Y9Z/KfPH7P4z5A/ZvGfMX/M4v+V/DGL/0z5Yxb/mfPHLP6z5I9Z/GfNH7P4fzV/zOI/W/6Yxf9r+WMW/9nzxyz+X88fs/h/I3/M4j9H/pjFf878MYv/XPljFv+588cs/t/MH7P4z5M/ZvGfN3/M4j9f/pjF/1v5Yxb/+fPHLP7fzh+z+C+QP2bxXzB/zOK/UP6YxX/h/DGL/3fyxyz+i+SPWfwXzR+z+C+WP2bxXzx/zOK/RP6YxX/J/DGL/3fzxyz+38sfs/gvlT9m8V86f8zi//38MYv/D/LHLP7L5I9Z/JfNH7P4L5c/ZvH/Yf6YxX/5/DGL/wr5Yxb/H+WPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/2r5Yxb/1fPHLP4/zh+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4v+T/DGL/0/zxyz+G+WPWfw3zh+z+G+SP2bx3zR/zOL/s/wxi//P88cs/pvlj1n8N88fs/hvkT9m8d8yf8ziv1X+mMX/F/ljFv+t88cs/r/MH7P4b5M/ZvH/Vf6YxX/b/DGL/3b5Yxb/7fPHLP475I9Z/H+dP2bx3zF/zOK/U/6Yxf83+WMW/9/mj1n8d84fs/jvkj9m8f9d/pjFf9f8MYv/bvljFv/d88cs/r/PH7P4/yF/zOK/R/6Yxf+P+WMW/z3zxyz+e+WPWfz3zh+z+P8pf8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOL/5/wxi/9f8scs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/IfljEv/RB/LHLP6D8scs/qPkj1n8R80fs/iPlj9m8R+cP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/IH/M4v/B/DGL/4fyxyz+k+WPWfw/nD9m8Z88f8zi/5H8MYv/R/PHLP5T5I9Z/D+WP2bx/3j+mMV/yvwxi/8n8scs/p/MH7P4fyp/zOI/Vf6Yxf/T+WMW/8/kj1n8P5s/ZvGfOn/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/1fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/1fwxi/9s+WMW/6/lj1n8Z88fs/h/PX/M4v+N/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4fzN/zOI/T/6YxX/e/DGL/3z5Yxb/b+WPWfznzx+z+H87f8ziv0D+mMV/wfwxi/9C+WMW/4Xzxyz+38kfs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/yXzxyz+380fs/h/L3/M4r9U/pjFf+n8MYv/9/PHLP4/yB+z+C+TP2bxXzZ/zOK/XP6Yxf+H+WMW/+Xzxyz+K+SPWfx/lD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P84f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6YxX/D/DGL/0/yxyz+P80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//P8scs/j/PH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/VvljFv9f5I9Z/LfOH7P4/zJ/zOK/Tf6Yxf9X+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/3X+mMV/x/wxi/9O+WMW/9/kj1n8f5s/ZvHfOX/M4r9L/pjF/3f5Yxb/XfPHLP675Y9Z/HfPH7P4/z5/zOL/h/wxi/8e+WMW/z/mj1n898wfs/jvlT9m8d87f8zi/6f8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/+f88cs/n/JH7P4H5I/ZvE/NH/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfyH5I9J/McYyB+z+A/KH7P4j5I/ZvEfNX/M4j9a/pjFf3D+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v+B/DGL/wfzxyz+H8ofs/hPlj9m8f9w/pjFf/L8MYv/R/LHLP4fzR+z+E+RP2bx/1j+mMX/4/ljFv8p88cs/p/IH7P4fzJ/zOL/qfwxi/9U+WMW/0/nj1n8P5M/ZvH/bP6YxX/q/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+X8kfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9X88cs/rPlj1n8v5Y/ZvGfPX/M4v/1/DGL/zfyxyz+c+SPWfznzB+z+M+VP2bxnzt/zOL/zfwxi/88+WMW/3nzxyz+8+WPWfy/lT9m8Z8/f8zi/+38MYv/AvljFv8F88cs/gvlj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/N3/M4v+9/DGL/1L5Yxb/pfPHLP7fzx+z+P8gf8ziv0z+mMV/2fwxi/9y+WMW/x/mj1n8l88fs/ivkD9m8f9R/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8zi/+P8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+P8kfs/j/NH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/j/LH7P4/zx/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+RP2bx3zp/zOL/y/wxi/82+WMW/1/lj1n8t80fs/hvlz9m8d8+f8ziv0P+mMX/1/ljFv8d88cs/jvlj1n8f5M/ZvH/bf6YxX/n/DGL/y75Yxb/3+WPWfx3zR+z+O+WP2bx3z1/zOL/+/wxi/8f8scs/nvkj1n8/5g/ZvHfM3/M4r9X/pjFf+/8MYv/n/LHLP775I9Z/PfNH7P475c/ZvHfP3/M4n9A/pjF/8D8MYv/QfljFv+D88cs/n/OH7P4/yV/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8R+SPybxH3Mgf8ziPyh/zOI/Sv6YxX/U/DGL/2j5Yxb/wfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxn1jsP2SLd7/O4j+J2P+9svhPmj9m8f9A/pjF/4P5Yxb/D+WPWfwnyx+z+H84f8ziP3n+mMX/I/ljFv+P5o9Z/KfIH7P4fyx/zOL/8fwxi/+U+WMW/0/kj1n8P5k/ZvH/VP6YxX+q/DGL/6fzxyz+n8kfs/h/Nn/M4j91/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+SPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf+r+WMW/9nyxyz+X8sfs/jPnj9m8f96/pjF/xv5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvH/Zv6YxX+e/DGL/7z5Yxb/+fLHLP7fyh+z+M+fP2bx/3b+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfy/kz9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfy/mz9m8f9e/pjFf6n8MYv/0vljFv/v549Z/H+QP2bxXyZ/zOK/bP6YxX+5/DGL/w/zxyz+y+ePWfxXyB+z+P8of8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bx/3H+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/n+SPWfx/mj9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/5/lj1n8f54/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/r/IH7P4b50/ZvH/Zf6YxX+b/DGL/6/yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/6/wxi/+O+WMW/53yxyz+v8kfs/j/Nn/M4r9z/pjFf5f8MYv/7/LHLP675o9Z/HfLH7P4754/ZvH/ff6Yxf8P+WMW/z3yxyz+f8wfs/jvmT9m8d8rf8ziv3f+mMX/T/ljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/z/nj1n8/5I/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+A/JH5P4jzWQP2bxH5Q/ZvEfJX/M4j9q/pjFf7T8MYv/4Pwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/wP5Yxb/D+aPWfw/lD9m8Z8sf8zi/+H8MYv/5PljFv+P5I9Z/D+aP2bxnyJ/zOL/sfwxi//H88cs/lPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/6nyxyz+n84fs/h/Jn/M4v/Z/DGL/9T5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/kj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/mj1n8Z8sfs/h/LX/M4j97/pjF/+v5Yxb/b+SPWfznyB+z+M+ZP2bxnyt/zOI/d/6Yxf+b+WMW/3nyxyz+8+aPWfznyx+z+H8rf8ziP3/+mMX/2/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f9O/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8f9u/pjF/3v5Yxb/pfLHLP5L549Z/L+fP2bx/0H+mMV/mfwxi/+y+WMW/+Xyxyz+P8wfs/gvnz9m8V8hf8zi/6P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/x/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfx/kj9m8f9p/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8f5Y/ZvH/ef6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/yJ/zOK/df6Yxf+X+WMW/23yxyz+v8ofs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+v88cs/jvmj1n8d8ofs/j/Jn/M4v/b/DGL/875Yxb/XfLHLP6/yx+z+O+aP2bx3y1/zOK/e/6Yxf/3+WMW/z/kj1n898gfs/j/MX/M4r9n/pjFf6/8MYv/3vljFv8/5Y9Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8/5w/ZvH/S/6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5Wh93XH92ul/nOz+L/a9o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/kPwxif/YA/ljFv9B+WMW/1Hyxyz+o+aPWfxHyx+z+A/OH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/kD9m8f9g/pjF/0P5Yxb/yfLHLP4fzh+z+E+eP2bx/0j+mMX/o/ljFv8p8scs/h/LH7P4fzx/zOI/Zf6Yxf8T+WMW/0/mj1n8P5U/ZvGfKn/M4v/p/DGL/2fyxyz+n80fs/hPnT9m8f9c/pjF//P5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4j9j/pjF/yv5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvH/av6YxX+2/DGL/9fyxyz+s+ePWfy/nj9m8f9G/pjFf478MYv/nPljFv+58scs/nPnj1n8v5k/ZvGfJ3/M4j9v/pjFf778MYv/t/LHLP7z549Z/L+dP2bxXyB/zOK/YP6YxX+h/DGL/8L5Yxb/7+SPWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/7+aPWfy/lz9m8V8qf8ziv3T+mMX/+/ljFv8f5I9Z/JfJH7P4L5s/ZvFfLn/M4v/D/DGL//L5Yxb/FfLHLP4/yh+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/H+cP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjF/yf5Yxb/n+aPWfw3yh+z+G8s8x/jX5zP4r+JzP9fzeK/af6Yxf9n+WMW/5/nj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi/8v8scs/lvnj1n8f5k/ZvHfJn/M4v+r/DGL/7b5Yxb/7fLHLP7b549Z/HfIH7P4/zp/zOK/Y/6YxX+n/DGL/2/yxyz+v80fs/jvnD9m8d8lf8zi/7v8MYv/rvljFv/d8scs/rvnj1n8f58/ZvH/Q/6YxX+P/DGL/x/zxyz+e+aPWfz3yh+z+O+dP2bx/1P+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf/P+WMW/7/kj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5D8sck/uMM5I9Z/Aflj1n8R8kfs/iPmj9m8R8tf8ziPzh/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL39shP+Qgf9u//Hzxyzb/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4v+B/DGL/wfzxyz+H8ofs/hPlj9m8f9w/pjFf/L8MYv/R/LHLP4fzR+z+E+RP2bx/1j+mMX/4/ljFv8p88cs/p/IH7P4fzJ/zOL/qfwxi/9U+WMW/0/nj1n8P5M/ZvH/bP6YxX/q/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+X84fs/hPkz9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+X8kfs/jPlD9m8Z85f8ziP0v+mMV/1vwxi/9X88cs/rPlj1n8v5Y/ZvGfPX/M4v/1/DGL/zfyxyz+c+SPWfznzB+z+M+VP2bxnzt/zOL/zfwxi/88+WMW/3nzxyz+8+WPWfy/lT9m8Z8/f8zi/+38MYv/AvljFv8F88cs/gvlj1n8F84fs/h/J3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/h/N3/M4v+9/DGL/1L5Yxb/pfPHLP7fzx+z+P8gf8ziv0z+mMV/2fwxi/9y+WMW/x/mj1n8l88fs/ivkD9m8f9R/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8V89f8zi/+P8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/w3zxyz+P8kfs/j/NH/M4r9R/pjFf+P8MYv/JvljFv9N88cs/j/LH7P4/zx/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+RP2bx3zp/zOL/y/wxi/82+WMW/1/lj1n8t80fs/hvlz9m8d8+f8ziv0P+mMX/1/ljFv8d88cs/jvlj1n8f5M/ZvH/bf6YxX/n/DGL/y75Yxb/3+WPWfx3zR+z+O+WP2bx3z1/zOL/+/wxi/8f8scs/nvkj/23+r8+ZMiQd/r/MX/sv9V/YKTtf8/8MYv/XvljFv+988cs/n/KH7P475M/ZvHfN3/M4r9f/pjFf//8MYv/AfljFv8D88cs/gflj1n8D84fs/j/OX/M4v+X/DGL/yH5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+2H+d/+C/ffpO/6vzx/7r/N9l+78mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/gPyR+T+I87kD9m8R+UP2bxHyV/zOI/av6YxX+0/DGL/+D8MYv/6PljFv8x8scs/mPmj1n8x8ofs/iPnT9m8R8nf8ziP27+mMV/vPwxi//4+WMW/wnyxyz+E+aPWfwnyh+z+E+cP2bxnyR/zOI/af6Yxf8D+WMW/w++q/9bQ4YM+X+zav+JWfw/1PaPWfwnyx+z+H84f8ziP3n+mMX/I/ljFv+P5o9Z/KfIH7P4fyx/zOL/8fwxi/+U+WMW/0/kj1n8P5k/ZvH/VP6YxX+q/DGL/6fzxyz+n8kfs/h/Nn/M4j91/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+SPWfxnyh+z+M+cP2bxnyV/zOI/a/6Yxf+r+WMW/9nyxyz+X8sfs/jPnj9m8f96/pjF/xv5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvH/Zv6YxX+e/DGL/7z5Yxb/+fLHLP7fyh+z+M+fP2bx/3b+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfy/kz9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+S+aPWfy/mz9m8f9e/pjFf6n8MYv/0vljFv/v549Z/H+QP2bxXyZ/zOK/bP6YxX+5/DGL/w/zxyz+y+ePWfxXyB+z+P8of8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+K+eP2bx/3H+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/n+SPWfx/mj9m8d8of8ziv3H+mMV/k/wxi/+m+WMW/5/lj1n8f54/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv+t8scs/r/IH7P4b50/ZvH/Zf6YxX+b/DGL/6/yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/6/wxi/+O+WMW/53yxyz+v8kfs/j/Nn/M4r9z/pjFf5f8MYv/7/LHLP675o9Z/HfLH7P4754/ZvH/ff6Yxf8P+WMW/z3yxyz+f8wfs/jvmT9m8d8rf8ziv3f+mMX/T/ljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/z/nj1n8/5I/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+Y/tEEjj4HF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/kPwxif94A/ljFv9B+WMW/1Hyxyz+o+aPWfxHyx+z+A/OH7P4j54/ZvEfY2Dg2Pdrlf6Ts/iP2faPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/wP5Yxb/D+aPWfw/lD9m8Z8sf8zi/+H8MYv/5PljFv+P5I9Z/D+aP2bxnyJ/zOL/sfwxi//H88cs/lPmj1n8P5E/ZvH/ZP6Yxf9T+WMW/6nyxyz+n84fs/h/Jn/M4v/Z/DGL/9T5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/kj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/mj1n8Z8sfs/h/LX/M4j97/pjF/+v5Yxb/b+SPWfznyB+z+M+ZP2bxnyt/zOI/d/6Yxf+b+WMW/3nyxyz+8+aPWfznyx+z+H8rf8ziP3/+mMX/2/ljFv8F8scs/gvmj1n8F8ofs/gvnD9m8f9O/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/gvmT9m8f9u/pjF/3v5Yxb/pfLHLP5L549Z/L+fP2bx/0H+mMV/mfwxi/+y+WMW/+Xyxyz+P8wfs/gvnz9m8V8hf8zi/6P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/x/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfx/kj9m8f9p/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8f5Y/ZvH/ef6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/yJ/zOK/df6Yxf+X+WMW/23yxyz+v8ofs/hvmz9m8d8uf8ziv33+mMV/h/wxi/+v88cs/jvmj1n8d8ofs/j/Jn/M4v/b/DGL/875Yxb/XfLHLP6/yx+z+O+aP2bx3y1/zOK/e/6Yxf/3+WMW/z/kj1n898gfs/j/MX/M4r9n/pjFf6/8MYv/3vljFv8/5Y9Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8/5w/ZvH/S/6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8ziPyR/TOI//kD+mMV/UP6YxX+U/DGL/6j5Yxb/0fLHLP6D88cs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/D+SPWfw/mD9m8f9Q/pjFf7L8MYv/h/PHLP6T549Z/D+SP2bx/2j+mMV/ivwxi//H8scs/h/PH7P4T5k/ZvH/RP6Yxf+T+WMW/0/lj1n8p8ofs/h/On/M4v+Z/DGL/2fzxyz+U+ePWfw/lz9m8f98/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9K/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v5o/ZvGfLX/M4v+1/DGL/+z5Yxb/r+ePWfy/kT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/2/mj1n858kfs/jPmz9m8Z8vf8zi/638MYv//PljFv9v549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjF/zv5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/7v5Yxb/7+WPWfyXyh+z+C+dP2bx/37+mMX/B/ljFv9l8scs/svmj1n8l8sfs/j/MH/M4r98/pjFf4X8MYv/j/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv8f549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/hvmD9m8f9J/pjF/6f5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvH/Wf6Yxf/n+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOL/i/wxi//W+WMW/1/mj1n8t8kfs/j/Kn/M4r9t/pjFf7v8MYv/9vljFv8d8scs/r/OH7P475g/ZvHfKX/M4v+b/DGL/2/zxyz+O+ePWfx3yR+z+P8uf8ziv2v+mMV/t/wxi//u+WMW/9/nj1n8/5A/ZvHfI3/M4v/H/DGL/575Yxb/vfLHLP57549Z/P+UP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvH/c/6Yxf8v+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/kPwxif8EA/ljFv9B+WMW/1Hyxyz+o+aPWfxHyx+z+A/OH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi///xz49Jg2CGFAU/ZJ00nFSY9u2bdu2bdu2bdu2bdu29X/qrWDeOVu4dYfQP2rpP6T+UUv/ofSPWvoPrX/U0n8Y/aOW/sPqH7X0H07/qKX/8PpHLf1H0D9q6T+i/lFL/5H0j1r6j6x/1NJ/FP2jlv6j6h+19B9N/6il/+j6Ry39x9A/auk/pv5RS/+x9I9a+o+tf9TSfxz9o5b+4+oftfQfT/+opf/4+kct/SfQP2rpP6H+UUv/ifSPWvpPrH/U0n8S/aOW/pPqH7X0n0z/qKX/5PpHLf2n0D9q6T+l/lFL/6n0j1r6T61/1NJ/Gv2jlv7T6h+19J9O/6il//T6Ry39Z9A/auk/o/5RS/+Z9I9a+s+sf9TSfxb9o5b+s+oftfSfTf+opf/s+kct/efQP2rpP6f+UUv/ufSPWvrPrX/U0n8e/aOW/vPqH7X0n0//qKX//PpHLf0X0D9q6b+g/lFL/4X0j1r6L6x/1NJ/Ef2jlv6L6h+19F9M/6il/+L6Ry39l9A/aum/pP5RS/+l9I9a+i+tf9TSfxn9o5b+y+oftfRfTv+opf/y+kct/VfQP2rpv6L+UUv/lfSPWvqvrH/U0n8V/aOW/qvqH7X0X03/qKX/6vpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19F9P/6il//r6Ry39N9A/aum/of5RS/+N9I9a+m+sf9TSfxP9o5b+m+oftfTfTP+opf/m+kct/bfQP2rpv6X+UUv/rfSPWvpvrX/U0n8b/aOW/tvqH7X0307/qKX/9vpHLf130D9q6b+j/lFL/530j1r676x/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aum/p/5RS/+99I9a+u+tf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rpf6D+UUv/g/SPWvofrH/U0v8Q/aOW/ofqH7X0P0z/qKX/4fpHLf2P0D9q6X+k/lFL/6P0j1r6H61/1NL/GP2jlv7H6h+19D9O/6il//H6Ry39T9A/aul/ov5RS/+T9I9a+p+sf9TS/xT9o5b+p+oftfQ/Tf+opf/p+kct/c/QP2rpf6b+UUv/s/SPWvqfrX/U0v8c/YPBAwMDHf3P1T9q+f88/aOW/ufrH7X0v0D/qKX/hfpHLf0v0j9q6X+x/lFL/0v0j1r6X6p/1NL/Mv2jlv6X6x+19L9C/6il/5X6Ry39r9I/aul/tf5RS/9r9I9a+l+rf9TS/zr9o5b+1+sftfS/Qf+opf+N+kct/W/SP2rpf7P+UUv/W/SPWvrfqn/U0v82/aOW/rfrH7X0v0P/qKX/nfpHLf3v0j9q6X+3/lFL/3v0j1r636t/1NL/Pv2jlv736x+19H9A/6il/4P6Ry39H9I/aun/sP5RS/9H9I9a+j+qf9TS/zH9o5b+j+sftfR/Qv+opf+T+kct/Z/SP2rp/7T+UUv/Z/SPWvo/q3/U0v85/aOW/s/rH7X0f0H/qKX/i/pHLf1f0j9q6f+y/lFL/1f0j1r6v6p/1NL/Nf2jlv6v6x+19H9D/6il/5v6Ry3939I/aun/tv5RS/939I9a+r+rf9TS/z39o5b+7+sftfT/QP+opf+H+v/eoIGi/h/pH7X0/1j/qKX/J/pHLf0/1T9q6f+Z/lFL/8/1j1r6f6F/1NL/S/2jlv5f6R+19P9a/6il/zf6Ry39v9U/aun/nf5RS//v9Y9a+v+gf9TS/0f9o5b+P+kftfT/Wf+opf8v+kct/X/VPyrp//8B/aOW/n/SP2rp/2f9o5b+f9E/auk/SP+opf9f9Y9a+v9N/6il/2D9o5b+f9c/aun/D/2jlv7/1D9q6f8v/aOW/v/WP2rp/x/9o5b+/9U/aun/P/2jP1x/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPvbmPzKgs/jp+u7Z7+7N/NObyGDAabbuLK1q5MBpsP9bFgqo7FgAlkCyujUph7CG6gVoMSgzFMRoKIuk3dBBJjxothAsJKohKnonEiGuIQ1EVMDRMZ0bjU3G3v0t5rm/Wq17UX+3xetPc55Xe6LfnunLI1AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIKXN2265YW1HR9smL7zwwouBF6f6dyYgtdeiP9U/EgAAAAAAAAAAAAAAYCQ5vp3oVP8cAQAAAADgdNPS+q7u6qohp6oHH8z5eVvv+6ZXr7x+z/OPryy/7//w5cNccsLgg56enp6Xmrtm9h9OKoqi9Nmm9x9PrhyXrt/Zdfn2vqNQ/PbZ5tZt25sP7vzK1x+eO3X6nNres7XFmuvaO9qWTCiKUF1bbC0dNFQVRZhYW2wvHTSWDibVFveXDpb2HkwpDpQOLrx2Q8e60okTPjWcdlpaP1tUDym2GPK7weD+O7s27Sq/H+WS5avVFP391zX/cG/Fx8pG6L98/VBV2f+Yf4LAiMbW/+0Ly+9HueQJ9/9H2+tWDfexkfsvXz9M0D+kM8zz/5BGe5/39+yfMcLz/9xhLjmw/+lfVnaV+r/ply/U95+qOZnn/9Ln6zsK1ZX9Txjy/F96jq8pP/9PKopQO85fDjittLR+rnu0+39l90P7rzmrYlM1uP+jq/ZUl/o/fNcD7+8/VXtS/Q9cP9SMcv+v+syBoT9WYGxaWnf3VNz/x9B/sWCYSw70P3/3satK/Z+x88i+QR8bS/+1lf0v3nLjJxZv3nZLffuNa9e3rW+7qbGxoWnpsqbGi5Yv7n0k6Hs7zl8VOD2M7/5fTK3YVBVF28B+0YeXvVTq/+C5//hb/6nJY+x/4qj3/+fc/2FY508oJk4stq7dsmVTQ9/b8mFj39u+/2yY/k/8+n/E/ueV/z9g+evu0hfkA/vfvPOrHyn1f++kVQ/0n5o4xv4njdZ/52ufF4gwzvv/uorNkP7bX/3OulL/f3rl+KH+U2P9+n/yqP3vcv+H8WhprfgLP/9jpf5X/+vwcH9OcBLCFH/+B+nk6H/rtF98M24dpuof0snR/9LNbZF/2Tb8n/4hnRz9/2pH1ZG4dThD/5BOjv6/1v3gxrh1mKZ/SCdH//tnP/JU3Dr8v/4hnRz9H18//aq4dajTP6STo//LvrR3ddw6TNc/pJOj/6pXpj0Rtw4z9A/p5Oi/vursT8Wtw+v0D+nk6P+6zodfjFuHmfqHdHL0//mdv478Pp3wev1DOjn6f+qPW3fErcMs/UM6Ofp/YVZ7fdw6nKl/SCdH//ff8MQjcevwBv1DOjn6f/pbHzwWtw5B/5BOjv6/8eyRNXHrMFv/kE6O/vctPPaHuHU4S/+QTo7+//3Rqz8Qtw5v1D+kk6P/sH/5d+PW4Wz9Qzo5+r/iybsa4tZhjv4hnRz9d6647c64dThH/5BOjv6bmhfOjluHc/UP6eTof8af/3533DrM1T+kk6P/j9333sp/9/skhfP0D+nk6P/mDasfjVuH8/UP6eTof+WMngvi1mGe/iGdHP0fPnrfj+LWYb7+IZ0c/d9955Ir4tbhTfqHdHL0/4Nbz+uOW4c36x/SydH/y7V33Bq3Dgv0D+nk6P/LP6tZFrcOC/UP6eTo/8cPfX9X3Dq8Rf+QTo7+X3zfY+fErcMF+od0cvS/++JZX4xbh7fqH9LJ0f+7n9m4Pm4dFukf0snR/+S9vz8atw71+od0cvQ/f9XBD8Wtw4X6h3Ry9L9h0Zrfxa3DYv1DOjn6f+bA04fi1mGJ/iGdHP3veOzTzXHr0KB/SCdH/49f1vGfuHVo1D+kk6P/fzb95ONx67BU/5BOjv7PPPTtL8StQ5P+IZ0c/V/94OSZcetwkf4hnRz9b7xm9vfi1mGZ/iGdHP1fMvehS+PW4W36h3Ry9P+ev664OW4dLtY/pJOj/7p77nkubh2W6x/SydH/vGtvvyZuHS7RP6STo//r59Q/GbcOl+of0snR/x3HWxbErcMK/UM6Ofrvuu35fXHrsFL/kE6O/rs/+XJd3Dq8Xf+QTo7+90658t64dXiH/gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDGQAAAABh/tZ5tB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJ8CAAD//3wF1A0=")
r8 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x91)
ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000001c0)=0x20000008)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r9, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r9, 0x0)

9.349897026s ago: executing program 3 (id=229):
socket$nl_generic(0x10, 0x3, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(0x0, 0x625b3224, 0x121501)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0)
clock_getres(0x6, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a010100000000020291797a4de1030b647bf1320000000c0900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

8.248817091s ago: executing program 2 (id=231):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'})

8.143421804s ago: executing program 3 (id=233):
sendto$inet(0xffffffffffffffff, &(0x7f0000000040)="73414cb2dbb5ac8165060dc592b02a8e0612810c497dd45ede474832a48f", 0x1e, 0x54, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201ab00c4b20710200e01015a7a0102030109021b0001000000000904"], 0x0)

7.821625815s ago: executing program 2 (id=235):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_ethernet(0x56, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5f815d", 0x20, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @private2, {[@dstopts={0x2f, 0x2, '\x00', [@hao={0xc9, 0x10, @local}]}]}}}}}, 0x0)
io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x8000, 0x1, 0x61})
r4 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000500)={'bond_slave_1\x00', {0x2, 0x4e21, @broadcast}})
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0)
syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]})
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
r7 = fcntl$dupfd(r6, 0x0, r6)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4)
sendmsg$IPVS_CMD_GET_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0)
setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28)
listen(r7, 0x5)
write$binfmt_elf64(r7, &(0x7f0000000740)=ANY=[], 0x4a2)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7)

5.916940034s ago: executing program 2 (id=236):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
epoll_create1(0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
getpid()
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x3000000a})
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x700, 0x0, 0x3, 0x5}})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r4 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r4, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x24)
r5 = eventfd(0x6)
r6 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, 0x0, &(0x7f00000001c0))
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
rename(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xc2, r5, &(0x7f0000000180)='\x00', 0x1, 0x36}])
sendmmsg(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

5.531423197s ago: executing program 1 (id=237):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0)

5.326624413s ago: executing program 1 (id=238):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000180)={0x7, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042"})
epoll_create1(0x0)
getpid()
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x3000000a})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a09, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2={0xff, 0x5}, 0x700, 0x0, 0x3, 0x5}})
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x7fff, 0x800000000000007d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)
r5 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e23, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x24)
r6 = eventfd(0x6)
r7 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r7, 0x11b, 0x1, 0x0, &(0x7f00000001c0))
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
rename(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x7, 0xc2, r6, &(0x7f0000000180)='\x00', 0x1, 0x36}])
sendmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '$'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)

4.581107626s ago: executing program 3 (id=239):
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102"], 0x0)
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000022fb040d80408fdb159000000010902240001080000000904b109020a"], 0x0)

3.917223227s ago: executing program 1 (id=241):
socket$nl_generic(0x10, 0x3, 0x10)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$evdev(0x0, 0x625b3224, 0x121501)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0)
clock_getres(0x6, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a010100000000020291797a4de1030b647bf1320000000c0900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

2.463052113s ago: executing program 2 (id=243):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x2}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xbf)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0)
rmdir(&(0x7f0000000040)='./cgroup/../file0\x00')
syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82)
syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="02c920120004004000fa413bc7760bab3749b511acf88a32fc1e9ffba958c7b9a43855afde22b7ad54ca8fe9ce31d3100000000000"], 0x17)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/61}, 0x20)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x448e0}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a30000000001400038008000240000000000800014000000000140000001100"], 0x68}}, 0x0)
clock_getres(0x6, &(0x7f0000000100))
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a010100000000020291797a4de1030b647bf1320000000c0900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0)

2.421632664s ago: executing program 1 (id=244):
syz_mount_image$cramfs(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x148, &(0x7f0000000240)="$eJzs0LFLOnEYx/HP/e5+EqVZZGBBJjR0JOZ5Yk0NGklCdlC4NAl2UaAYCeVoRFtD0OpgCU3iv2BZi6UQ9k+0uAWOxd0JYrS0f17Lce/n4Rm+G2ttGV6g54RpPZc9PtHzeX3fu6MlYrsf9XrE6DYAI0Nza/8hAhwaXwnongNGfnIAB0cZfTmdyxj/3QggA4iOWV2BtTtqNJfVgv0mLwCNaaupv7RQv81KQNQ5uPd1Cywa9yYH9z4BFEq+WvVlu9WM+5fu50Rcxn3zU8Jw9+hXamymYneLSOrPd4ia8/dA0/8WqFU77VZiS0to7ZCqroSUoKKEO9prKx4uXkPatJ8Cez/u2eD2SEngQgBuzFn3UXAAaJR7WnZ8tWw9HYpnohcQCqV0yv2/knJN/IMoQwAREREREREREREREREREdFffQcAAP//YC1mmA==")
stat(&(0x7f0000006ac0)='./file7\x00', 0x0)

2.163295652s ago: executing program 2 (id=245):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6)
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0)
r3 = dup(r2)
write$UHID_INPUT(r3, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xfffffffffeffffff, 0x7]})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8)
listen(r5, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r6, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000180)='lp', 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "43f79419"}]}}, 0x0}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_open_dev$hiddev(&(0x7f0000000540), 0x2000000000000000, 0x8200)

1.880745161s ago: executing program 1 (id=246):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x28002)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"0400", 0x101, 0x5, 0x4, 0x803, 0x1, "00017555d000", '\x00', "6a59fdf0", '\x00', ["8ba8e2bca7cbd6e4af000700", "ca8cacfffffffff4550400", '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', "0000000000000000001000"]})

1.785364494s ago: executing program 1 (id=247):
syz_usb_connect$uac3(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000201e044030400001020301090292000301062005080b00010101304b0904000000010130000a2401052e00060000001324030506030604ff0c00000003000800080011240804"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0})
madvise(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf)

1.503361833s ago: executing program 0 (id=249):
r0 = add_key(&(0x7f0000002240)='dns_resolver\x00', &(0x7f0000002180)={'syz', 0x3}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff)
keyctl$read(0xb, r0, &(0x7f0000002280)=""/4100, 0x1004)

1.483089753s ago: executing program 0 (id=250):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x38, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0x4}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x10c}}, 0x0)

1.417985906s ago: executing program 0 (id=251):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_int(r0, 0x1, 0x22, 0x0, &(0x7f0000000240))

1.359984308s ago: executing program 0 (id=252):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000a00)={&(0x7f0000002d80)=ANY=[@ANYBLOB="918c7587b0b1a84c80d50af762dfde6fdfc6e3750e2036a1713f2e54c806772b481ccc2ec3e16ba314a1d8f8f23002c86f388a5de9d824f74b99687d8293da6c33f68cddc0fed7c513f2dad4b1253f119c484bb7d79ce4952a50e5b0f37fc45f43f712adb52fd80aace996dd4c54c23cba4a0d8c4cd5b41e1a5b1c7d4ec8cd52f3181e7ec47c8cc620f78a13917b5df767bf510d85a8384437cebff6f85bed4e8e48d72f7c5040c08a7e6c1b25625225feec88647d530cede6c8e8aa4b5658f1d8320474548ae8500be62506b090653b83a5f07762c45af66de31249247eec291276f90ec3f633040bff9aed7d", @ANYBLOB="0204000204000000a8c85cc6fe483b27ef50ba0379d858a27800000000000002000100000004d6000000000000002047f416f899ba279f916bcb5441170229a075875731830216911b41aee92c272cede149e82345083b30ffa89a3694e00a4da3d6788dfd4d2d971e6c7a7078b39e1b2a780000000000", @ANYBLOB="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"], 0x20}, 0x1, 0x7}, 0x4000810)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000480)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140), <r1=>0x0, 0x4003c, &(0x7f0000000440), 0x0, 0x10, &(0x7f0000000140), &(0x7f0000000500), 0x8, 0x64, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@local, 0x4e22, 0x70e, 0x4e20, 0x9, 0x2, 0x30, 0x0, 0x50}, {0x0, 0x4fa1, 0x32, 0x45, 0x4a, 0x7, 0x4000000000005, 0x6}, {0x4, 0xe0a, 0x72c, 0xe16a}, 0x2, 0x6e6bb2, 0x73e4735fefb7cabf, 0x0, 0x3}, {{@in=@multicast2, 0x4d2, 0x33}, 0xa, @in6=@local, 0x3505, 0x1, 0x1, 0x8, 0xae8e, 0x3, 0x8}}, 0xe8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x1, 0x6, 0x0, 0x100, 0x2, 0x500000})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180104, r5})
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0xffff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="180017000000000029000000370000008900000000000000e6a98b4396d3332853eb463fc990373f8ab8dfd18b84d0df6de19a02ae831122fced2786dfd2e15b7a8e541693ed71764aabb03458995868f2f73b77b76f24aeae91191cc1ac1d55e779fd2e3ccb1148e2b5738e98fdebed2c"], 0x18}}], 0x1, 0x400c0c4)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="adea08c7beef905d069c564c90c2000000", 0x11)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x80000}, 0x10, r1}, 0x94)
r6 = socket$l2tp6(0xa, 0x2, 0x73)
socket$inet_tcp(0x2, 0x1, 0x0)
getpeername$l2tp6(r6, &(0x7f0000000040), 0x0)
r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r8 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mreqn(r8, 0x0, 0x20, &(0x7f0000000040)={@empty, @broadcast}, 0x0)
r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
bind$x25(r10, &(0x7f0000000200), 0x12)
bind$x25(r9, &(0x7f0000000080), 0x12)
ioctl$sock_ifreq(r7, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6})
ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000))

1.297699599s ago: executing program 3 (id=253):
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(0x0, &(0x7f00000003c0), 0x0, 0x0, 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_ublk_setup_queues(r2, 0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x39c7, 0x1, 0x2, 0x2ae, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a9c, 0x8, 0x2, 0x3df, 0x0, r0}, <r3=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6743, 0x0, 0x3, 0x330}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd69, 0x80, 0x2, 0xfd, 0x0, r2}}], 0x4, &(0x7f0000001b00)={0x2e, 0xc, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, '\x00', {0x0, 0x896, 0x0, &(0x7f0000000b00)=@buf_512="f40fe34b3b88a5faf8cc288514244d565fb8a77bd86f68b7680217898d576d324eb46842e0eff26c1c0ce93d8a4c518744deec925eda18db3c77fe6aa70162c4e8d03eb8503bc53e244ddce4108972b1ced1168bbd2b40f96e0250dab9a40a88736709701e1d73d1d344e59d8e85639b04d72cde38c4e6e5aafc49453de0eb4977fd17e249737cc2b0fb276eaf472b290988bb71f188c41ea4ddc5cc16caaccff1143f74e9e1db65e449d53b0dfe744d304c58f208809cf42be7f50ff5800166b6b758f7c941827a4feee4ef73c7ef0e2a044fbb535258f8d2eaef076bdf631c1c6680d8cfde264487ad8ab54dfc1438228543acba90fc05f3970a2e8001316fb659275b568c7e2efc8c68c275bf501e4ebf550782f4329bb320a643c8f1ac39ae179612e70963265d1fe19737b15d765efef283dd39b373357bf94dd4f43f1f4d271f55a5cffd4ebfb30165bc4f3b81c53313e2b7ea1b4b8ffef00e2c3b7b8c6c41c10f2356e7d1373d7975639cf132316356addedcecb32fa764c8b1ebc8a9dd5cf1b09c60298e1ae174cae1e54b15924bf3462b2376cd7912d5dc9c4d38dd2e5131047babdc4309819e83f53e1d98d28550e737f7f03d2bbfbd4ddaacfcb86a63c6a9d48e600958efed161b3a16cc52b91d0a5cc60abe16447b49e412712df026fa124fbb239a315d3b355d6802722a53199cf1106336f960e91fae287ae1"}}, &(0x7f0000001b80))
io_uring_enter(r3, 0x2479, 0x4f27, 0x40, 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x5, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x2, 0x2, 'syz1\x00', &(0x7f0000000740)=['-\'/+-&)\x00\xb1\xbeF\xbeP&*\xb8u\xf0\xbf\xdf\xf49jS\x90\xd2)\x0f\xfa\x94\tz\n\xcb\n\x01\xa6rX\x1c\xe1G\xb9\xb0<\xb8Ik\xf2>\xbai\x14\xb1~\x8d\xef\xa3\xe0y\xbev\xda\x00[\xb4T-\x1cX\xe7\xae\x8d\xc4VU\xea\xcfe4%?\xc2\xaa\t\x11z~ \xa5s<\xe6\xaf]]x,\xba\x18\xb1\x18\xd0\xb1P\x1c\a\x1c\xd3-\xba\xf7^\xca\xd7\xf9 (\xb0\xe3\xcb\xa8\x91\xe4hD\xc0\xc4b\xf7\xee@\xe51\x03/r\x1b\x15Q\xb7s\xffT\x99\xf7\xc3\xda\xc0\xfa\x00J\x1a\xc3\xf4^\x81U%\fW\xfdc\xebrFb\xe1\xb9\xa2B?\xdf\xdc\xca8\x04W\x1b\xa9\x0e\x13\xd6(', '.*\x00'], 0xbb})
fchdir(r5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="ffd9035e71d0284ad32a5f49f175", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r8 = openat(r5, &(0x7f0000000080)='./bus\x00', 0x0, 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x7fffffff)

1.036733588s ago: executing program 2 (id=254):
openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(&(0x7f0000000380)='./cgroup.net/devices.allow\x00', &(0x7f00000003c0), 0x0, 0x0, 0x2)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_ublk_setup_queues(r2, 0x0, 0x0, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x39c7, 0x1, 0x2, 0x2ae, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a9c, 0x8, 0x2, 0x3df, 0x0, r0}, <r3=>0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6743, 0x0, 0x3, 0x330}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd69, 0x80, 0x2, 0xfd, 0x0, r2}}], 0x4, &(0x7f0000001b00)={0x2e, 0xc, 0x0, r2, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x800}, 0x0, 0x0, '\x00', {0x0, 0x896, 0x0, &(0x7f0000000b00)=@buf_512="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"}}, &(0x7f0000001b80))
io_uring_enter(r3, 0x2479, 0x4f27, 0x40, 0x0, 0x0)
r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xfa2, 0x109000)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f00000003c0)={{0x2, 0x5, 0xd0f, 0x7, 'syz1\x00', 0x1}, 0x3, 0x100, 0x7, 0x0, 0x2, 0x2, 'syz1\x00', &(0x7f0000000740)=['-\'/+-&)\x00\xb1\xbeF\xbeP&*\xb8u\xf0\xbf\xdf\xf49jS\x90\xd2)\x0f\xfa\x94\tz\n\xcb\n\x01\xa6rX\x1c\xe1G\xb9\xb0<\xb8Ik\xf2>\xbai\x14\xb1~\x8d\xef\xa3\xe0y\xbev\xda\x00[\xb4T-\x1cX\xe7\xae\x8d\xc4VU\xea\xcfe4%?\xc2\xaa\t\x11z~ \xa5s<\xe6\xaf]]x,\xba\x18\xb1\x18\xd0\xb1P\x1c\a\x1c\xd3-\xba\xf7^\xca\xd7\xf9 (\xb0\xe3\xcb\xa8\x91\xe4hD\xc0\xc4b\xf7\xee@\xe51\x03/r\x1b\x15Q\xb7s\xffT\x99\xf7\xc3\xda\xc0\xfa\x00J\x1a\xc3\xf4^\x81U%\fW\xfdc\xebrFb\xe1\xb9\xa2B?\xdf\xdc\xca8\x04W\x1b\xa9\x0e\x13\xd6(', '.*\x00'], 0xbb})
fchdir(r5)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r7, 0x0, 0xe, 0x0, &(0x7f0000000200)="ffd9035e71d0284ad32a5f49f175", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50)
open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80)
r8 = openat(r5, &(0x7f0000000080)='./bus\x00', 0x0, 0x10)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x50)
write(r9, &(0x7f0000004200)='t', 0x1)
sendfile(r9, r8, 0x0, 0x7fffffff)

405.402478ms ago: executing program 0 (id=255):
writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000040)="60b4e2a56b7a7add", 0x8}], 0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e02100418"], 0x7)

1.143971ms ago: executing program 3 (id=256):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc)
r4 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc)
r5 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc)
socket$netlink(0x10, 0x3, 0x9)
r7 = socket$netlink(0x10, 0x3, 0xb)
bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc)
r8 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc)
r9 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc)
r10 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc)
r11 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc)
r12 = socket$nl_route(0x10, 0x3, 0x0)
bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc)
bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48)
r13 = socket$netlink(0x10, 0x3, 0x4)
writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1)

0s ago: executing program 0 (id=257):
r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000b00)=0x6)
io_setup(0x7, &(0x7f0000000280)=<r1=>0x0)
set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6)
r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0)
ioctl$TIOCSETD(r2, 0x5423, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x103902, 0x0)
r4 = dup(r3)
write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, 'syz0\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0xd, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x4000000006, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000209, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xfffffffffeffffff, 0x7]})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f00000001c0)={0x0, 0x7}, 0x8)
listen(r6, 0x4)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8)
sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000140)={0x0, 0xb, 0xa9a}, 0x8)
setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000180)='lp', 0x2)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0xb}, @local=@item_4={0x3, 0x2, 0x0, "112000"}, @main=@item_4={0x3, 0x0, 0xb, "43f79419"}]}}, 0x0}, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
syz_open_dev$hiddev(&(0x7f0000000540), 0x2000000000000000, 0x8200)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts.
[   77.368428][ T5766] cgroup: Unknown subsys name 'net'
[   77.526638][ T5766] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   79.299068][ T5766] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   81.782047][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   81.802048][ T5788] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   81.811393][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   81.815281][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   81.827994][ T5788] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   81.839629][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   81.841436][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   81.855979][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   81.856467][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   81.864415][ T5791] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   81.873006][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   81.879346][ T5791] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   81.886953][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   81.906381][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   81.913991][ T5789] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   81.922600][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   81.922731][   T52] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   81.931471][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   81.938024][   T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   81.945056][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   81.952956][   T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   81.958936][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   81.966753][   T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   81.982487][   T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   82.585500][ T5778] chnl_net:caif_netlink_parms(): no params data found
[   82.726903][ T5777] chnl_net:caif_netlink_parms(): no params data found
[   82.847428][ T5780] chnl_net:caif_netlink_parms(): no params data found
[   82.858341][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.868040][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state
[   82.875606][ T5778] bridge_slave_0: entered allmulticast mode
[   82.884691][ T5778] bridge_slave_0: entered promiscuous mode
[   82.893451][ T5779] chnl_net:caif_netlink_parms(): no params data found
[   82.933901][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.941587][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.949168][ T5778] bridge_slave_1: entered allmulticast mode
[   82.956248][ T5778] bridge_slave_1: entered promiscuous mode
[   83.048763][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.056386][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.064265][ T5777] bridge_slave_0: entered allmulticast mode
[   83.072661][ T5777] bridge_slave_0: entered promiscuous mode
[   83.081748][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.089204][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.096404][ T5777] bridge_slave_1: entered allmulticast mode
[   83.103978][ T5777] bridge_slave_1: entered promiscuous mode
[   83.166594][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.181770][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.220806][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.254298][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.266702][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.274186][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.281733][ T5780] bridge_slave_0: entered allmulticast mode
[   83.288821][ T5780] bridge_slave_0: entered promiscuous mode
[   83.296815][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.305987][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.314175][ T5780] bridge_slave_1: entered allmulticast mode
[   83.323491][ T5780] bridge_slave_1: entered promiscuous mode
[   83.343759][ T5778] team0: Port device team_slave_0 added
[   83.394717][ T5778] team0: Port device team_slave_1 added
[   83.400956][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.408378][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.416316][ T5779] bridge_slave_0: entered allmulticast mode
[   83.423300][ T5779] bridge_slave_0: entered promiscuous mode
[   83.435336][ T5777] team0: Port device team_slave_0 added
[   83.464227][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.472000][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.479910][ T5779] bridge_slave_1: entered allmulticast mode
[   83.487724][ T5779] bridge_slave_1: entered promiscuous mode
[   83.515570][ T5777] team0: Port device team_slave_1 added
[   83.524171][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.538485][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.593888][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.601096][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.629838][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.645581][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   83.658156][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   83.690181][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.697372][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.724720][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.737947][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.745388][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.773271][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.806742][ T5780] team0: Port device team_slave_0 added
[   83.817075][ T5780] team0: Port device team_slave_1 added
[   83.824544][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1
[   83.832063][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.859728][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   83.909952][ T5793] Bluetooth: hci2: command tx timeout
[   83.936907][ T5779] team0: Port device team_slave_0 added
[   83.947337][ T5779] team0: Port device team_slave_1 added
[   83.954704][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0
[   83.962188][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   83.989049][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   83.999995][ T5793] Bluetooth: hci0: command tx timeout
[   84.053999][ T5777] hsr_slave_0: entered promiscuous mode
[   84.062209][ T5777] hsr_slave_1: entered promiscuous mode
[   84.069290][   T52] Bluetooth: hci3: command tx timeout
[   84.070486][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.075933][ T5793] Bluetooth: hci1: command tx timeout
[   84.084881][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.116971][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.132477][ T5778] hsr_slave_0: entered promiscuous mode
[   84.138909][ T5778] hsr_slave_1: entered promiscuous mode
[   84.146404][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.154723][ T5778] Cannot create hsr debugfs directory
[   84.204437][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0
[   84.212211][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.241900][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   84.303519][ T5780] hsr_slave_0: entered promiscuous mode
[   84.310012][ T5780] hsr_slave_1: entered promiscuous mode
[   84.316444][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.324406][ T5780] Cannot create hsr debugfs directory
[   84.330749][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1
[   84.337729][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   84.364882][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   84.472187][ T5779] hsr_slave_0: entered promiscuous mode
[   84.479770][ T5779] hsr_slave_1: entered promiscuous mode
[   84.487297][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   84.495207][ T5779] Cannot create hsr debugfs directory
[   84.857102][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   84.898594][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   84.910060][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   84.951081][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   84.996780][ T5778] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   85.011044][ T5778] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   85.021441][ T5778] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   85.059953][ T5778] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   85.134573][ T5780] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   85.167348][ T5780] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   85.177617][ T5780] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   85.210794][ T5780] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   85.268251][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   85.280065][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   85.299791][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   85.310821][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   85.450662][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.517220][ T5777] 8021q: adding VLAN 0 to HW filter on device team0
[   85.534775][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.543619][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.605379][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.627560][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.635063][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.650750][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.663997][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0
[   85.686812][ T5779] 8021q: adding VLAN 0 to HW filter on device team0
[   85.725745][  T994] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.732989][  T994] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.750009][ T5780] 8021q: adding VLAN 0 to HW filter on device team0
[   85.764397][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.771880][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.795815][ T5778] 8021q: adding VLAN 0 to HW filter on device team0
[   85.826303][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.833620][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.873801][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.881128][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.914323][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state
[   85.921625][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state
[   85.938085][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state
[   85.945475][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.979617][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   85.991574][ T5793] Bluetooth: hci2: command tx timeout
[   86.070719][ T5793] Bluetooth: hci0: command tx timeout
[   86.150903][   T52] Bluetooth: hci3: command tx timeout
[   86.156546][ T5793] Bluetooth: hci1: command tx timeout
[   86.204312][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.522864][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.680023][ T5779] veth0_vlan: entered promiscuous mode
[   86.702062][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.722464][ T5779] veth1_vlan: entered promiscuous mode
[   86.754551][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.816507][ T5778] veth0_vlan: entered promiscuous mode
[   86.827136][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0
[   86.852769][ T5779] veth0_macvtap: entered promiscuous mode
[   86.884264][ T5779] veth1_macvtap: entered promiscuous mode
[   86.911130][ T5778] veth1_vlan: entered promiscuous mode
[   86.946133][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.976681][ T5777] veth0_vlan: entered promiscuous mode
[   86.996174][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.022762][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.034066][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.045960][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.055463][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.074671][ T5777] veth1_vlan: entered promiscuous mode
[   87.103231][ T5780] veth0_vlan: entered promiscuous mode
[   87.125957][ T5780] veth1_vlan: entered promiscuous mode
[   87.135893][ T5778] veth0_macvtap: entered promiscuous mode
[   87.162907][ T5778] veth1_macvtap: entered promiscuous mode
[   87.242559][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.254101][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.271986][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.303136][ T5777] veth0_macvtap: entered promiscuous mode
[   87.322195][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.334008][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.346512][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.386315][ T5778] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.395783][ T5778] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.407384][ T5778] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.416330][ T5778] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.430714][ T5777] veth1_macvtap: entered promiscuous mode
[   87.465044][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.476270][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.486398][ T5780] veth0_macvtap: entered promiscuous mode
[   87.555318][ T5780] veth1_macvtap: entered promiscuous mode
[   87.574864][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.592180][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.604209][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.616277][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.630586][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.647597][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.664148][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.667554][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.686475][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.697041][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.708178][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.720714][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.733865][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.742686][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.753900][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.764205][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.842053][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.857250][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.872379][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.885716][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.896422][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   87.907783][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.921537][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.947555][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   87.949149][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.976250][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   87.976766][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.986791][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.006225][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.016796][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.027463][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.040244][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1
[   88.070142][ T5793] Bluetooth: hci2: command tx timeout
[   88.132541][ T5780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   88.149515][ T5793] Bluetooth: hci0: command tx timeout
[   88.160563][ T5780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   88.169689][ T5780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   88.178433][ T5780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   88.196134][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.211159][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.230971][ T5793] Bluetooth: hci1: command tx timeout
[   88.236466][ T5793] Bluetooth: hci3: command tx timeout
[   90.361759][ T5793] Bluetooth: hci2: command tx timeout
[   90.367610][ T5793] Bluetooth: hci0: command tx timeout
[   90.373879][   T52] Bluetooth: hci3: command tx timeout
[   90.379532][ T5783] Bluetooth: hci1: command tx timeout
[   90.403910][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.427923][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.572976][ T4565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.573670][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.597331][ T4565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.631070][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.856289][ T5856] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   90.908291][ T5856] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[   91.358899][ T5859] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4'.
[   91.546444][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   91.790653][ T5863] syz.3.4[5863]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   91.842500][ T5863] loop3: detected capacity change from 0 to 512
[   91.856404][ T5863] =======================================================
[   91.856404][ T5863] WARNING: The mand mount option has been deprecated and
[   91.856404][ T5863]          and is ignored by this kernel. Remove the mand
[   91.856404][ T5863]          option from the mount to silence this warning.
[   91.856404][ T5863] =======================================================
[   92.333368][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   92.348107][   T23] cfg80211: failed to load regulatory.db
[   92.494453][   T42] IPVS: starting estimator thread 0...
[   92.600619][ T5864] IPVS: using max 16 ests per chain, 38400 per kthread
[   92.872545][ T5794] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   93.234985][ T5871] loop1: detected capacity change from 0 to 16
[   93.247020][ T5871] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   93.396031][ T5871] input: syz1 as /devices/virtual/input/input5
[   94.584779][ T5881] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1'.
[   94.603725][ T5884] loop3: detected capacity change from 0 to 128
[   95.035897][ T5887] No such timeout policy "syz1"
[   98.720136][ T5893] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8'.
[   99.125128][ T5898] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[   99.164532][ T5846] IPVS: starting estimator thread 0...
[   99.481637][ T5901] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8'.
[   99.579298][ T5902] IPVS: using max 16 ests per chain, 38400 per kthread
[   99.629254][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8'.
[   99.647065][ T5901] gretap1: entered promiscuous mode
[  100.993264][ T5903] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  101.002405][ T5903] overlayfs: overlapping lowerdir path
[  102.914520][ T5912] syz.0.15 uses obsolete (PF_INET,SOCK_PACKET)
[  103.898105][ T5912] loop0: detected capacity change from 0 to 32768
[  104.169444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!!
[  104.989045][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  105.611502][ T5912] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  105.775474][ T5912] XFS (loop0): Ending clean mount
[  106.504342][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'.
[  106.513486][ T5943] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19'.
[  107.139133][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  107.419049][   T27] audit: type=1400 audit(1781729765.106:2): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=5941 comm="syz.1.19"
[  107.499511][ T5780] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.769845][ T5159] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  108.095199][ T5948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'.
[  108.252084][ T5159] usb 2-1: unable to get BOS descriptor or descriptor too short
[  108.380587][ T5159] usb 2-1: config 202 has an invalid interface number: 2 but max is 0
[  108.464257][ T5159] usb 2-1: config 202 has no interface number 0
[  108.738677][ T5159] usb 2-1: config 202 interface 2 has no altsetting 0
[  108.769523][ T5159] usb 2-1: string descriptor 0 read error: -71
[  108.803805][ T5159] usb 2-1: New USB device found, idVendor=09fb, idProduct=602d, bcdDevice=91.fd
[  108.815558][ T5159] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.946706][ T5159] usb 2-1: can't set config #202, error -71
[  108.959860][ T5159] usb 2-1: USB disconnect, device number 2
[  109.470602][ T5954] loop3: detected capacity change from 0 to 512
[  110.205942][ T5954] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.220074][ T5954] ext4 filesystem being mounted at /4/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.630320][ T5961] 9pnet_fd: Insufficient options for proto=fd
[  110.841421][ T5778] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.520086][ T5964] loop3: detected capacity change from 0 to 164
[  113.212207][ T5977] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  114.223447][ T5964] sched: RT throttling activated
[  116.987363][ T5983] loop1: detected capacity change from 0 to 128
[  118.187821][ T5983] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  118.337319][ T5983] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  118.617392][ T6001] loop3: detected capacity change from 0 to 128
[  118.652230][ T6001] affs: Error parsing options
[  118.876421][ T6007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'.
[  118.970104][ T6007] process 'syz.1.23' launched './file1' with NULL argv: empty string added
[  119.939105][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  121.232735][ T5777] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  121.542999][ T6017] can: request_module (can-proto-0) failed.
[  121.738817][ T6017] netlink: 'syz.1.36': attribute type 1 has an invalid length.
[  121.873697][ T6017] netlink: 16 bytes leftover after parsing attributes in process `syz.1.36'.
[  121.972853][ T6029] loop0: detected capacity change from 0 to 128
[  125.395539][ T6029] EXT4-fs: error -4 creating inode table initialization thread
[  125.405154][ T6029] EXT4-fs (loop0): mount failed
[  125.868175][ T6036] libceph: secret too big 32
[  127.209526][    T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!!
[  127.584807][ T6041] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  127.805342][ T5824] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  127.911477][ T5824] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  128.122145][ T6051] loop0: detected capacity change from 0 to 128
[  128.399357][   T27] audit: type=1800 audit(1781729787.036:3): pid=6051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.43" name="bus" dev="loop0" ino=1048593 res=0 errno=0
[  130.179167][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  130.922647][ T6059] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  131.164179][ T6059] qrtr: Invalid version 46
[  132.558295][ T6065] loop1: detected capacity change from 0 to 1024
[  132.579519][ T6065] hfsplus: unable to parse mount options
[  132.881667][ T6065] loop1: detected capacity change from 0 to 1024
[  133.034526][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  133.070624][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  133.739176][ T6069] kernel profiling enabled (shift: 9)
[  134.787964][ T6077] input: syz0 as /devices/virtual/input/input6
[  136.696160][ T6076] loop1: detected capacity change from 0 to 2048
[  136.934971][ T6076]  loop1: p2 p3 < > p4 < p5 >
[  137.165755][ T6080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'.
[  140.131320][ T6081] bridge0: port 3(syz_tun) entered blocking state
[  140.138697][ T6081] bridge0: port 3(syz_tun) entered disabled state
[  140.175694][ T6081] syz_tun: entered allmulticast mode
[  140.187416][ T6081] syz_tun: entered promiscuous mode
[  140.201173][ T6081] bridge0: port 3(syz_tun) entered blocking state
[  140.207933][ T6081] bridge0: port 3(syz_tun) entered forwarding state
[  140.280534][ T6093] Zero length message leads to an empty skb
[  141.069242][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  142.213098][ T6085] bridge0: port 3(syz_tun) entered learning state
[  142.325727][ T6093] netlink: 'syz.0.53': attribute type 10 has an invalid length.
[  143.701674][ T6093] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  144.265244][ T6096] sctp: failed to load transform for md5: -2
[  145.225129][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'.
[  147.079289][ T6127] xt_TPROXY: Can be used only with -p tcp or -p udp
[  147.357888][ T6127] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nullb0": -EINTR
[  147.420693][ T6121] loop1: detected capacity change from 0 to 1024
[  147.663943][ T6121] EXT4-fs: Ignoring removed mblk_io_submit option
[  148.130096][ T6119] loop2: detected capacity change from 0 to 32768
[  148.172308][ T6121] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities
[  148.229891][ T6119] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  149.042949][ T6119] XFS (loop2): Ending clean mount
[  150.262325][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  150.685307][ T6155] binder: 6148:6155 ioctl c0306201 2000000003c0 returned -14
[  151.571514][ T6160] loop3: detected capacity change from 0 to 128
[  151.607022][ T6160] ext4: Unknown parameter 'uid<00000000000000000000'
[  153.690765][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  154.281377][ T6161] block device autoloading is deprecated and will be removed.
[  154.381715][ T6161] syz.1.67: attempt to access beyond end of device
[  154.381715][ T6161] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  154.741285][ T6180] loop2: detected capacity change from 0 to 21
[  154.748452][ T6180] jffs2: rp_size unrepresentable
[  154.914094][ T6182] loop2: detected capacity change from 0 to 8
[  154.922408][ T6182] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  156.053757][    C0] bridge0: port 3(syz_tun) entered forwarding state
[  157.044311][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'.
[  158.116380][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[  158.445931][ T6215] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  158.561659][ T6215] qrtr: Invalid version 46
[  160.394424][ T6203] sctp: failed to load transform for md5: -2
[  162.369660][ T6237] loop3: detected capacity change from 0 to 2048
[  162.384605][ T6239] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  163.155576][ T6246] binder: 6238:6246 ioctl c0306201 2000000003c0 returned -14
[  164.120655][ T6237]  loop3: p2 p3 < > p4 < p5 >
[  164.212708][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.69'.
[  164.378807][ T5865] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  165.013836][ T5865] usb 1-1: unable to get BOS descriptor or descriptor too short
[  165.061681][ T5865] usb 1-1: config 9 has an invalid interface number: 246 but max is 0
[  165.102207][ T5865] usb 1-1: config 9 has no interface number 0
[  165.119125][ T5865] usb 1-1: config 9 interface 246 altsetting 1 endpoint 0x3 has an invalid bInterval 250, changing to 7
[  165.187032][ T5865] usb 1-1: config 9 interface 246 altsetting 1 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  165.236351][ T5865] usb 1-1: config 9 interface 246 has no altsetting 0
[  165.258261][ T5865] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=bb.02
[  165.267565][ T5865] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.299222][ T5865] usb 1-1: Product: syz
[  165.310051][ T5865] usb 1-1: Manufacturer: syz
[  165.321142][ T5865] usb 1-1: SerialNumber: syz
[  166.775676][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  168.544545][ T5865] usb 1-1: Quirk or no altest; falling back to MIDI 1.0
[  169.355486][ T6284] bridge0: port 3(syz_tun) entered blocking state
[  169.364039][ T6284] bridge0: port 3(syz_tun) entered disabled state
[  169.377411][ T6284] syz_tun: entered allmulticast mode
[  169.424934][ T6284] syz_tun: entered promiscuous mode
[  169.443019][ T6284] bridge0: port 3(syz_tun) entered blocking state
[  169.450885][ T6284] bridge0: port 3(syz_tun) entered forwarding state
[  169.462999][ T6287] bridge0: port 3(syz_tun) entered learning state
[  169.541749][ T6284] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  172.116625][ T5865] usb 1-1: USB disconnect, device number 2
[  172.159419][ T6292] netlink: 156 bytes leftover after parsing attributes in process `syz.2.78'.
[  172.502432][ T6294] No such timeout policy "syz1"
[  173.920601][ T5880] udevd[5880]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:9.246/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  173.962434][ T6288] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  174.440503][ T6303] loop2: detected capacity change from 0 to 64
[  174.521478][ T6303] hfs: get root inode failed
[  174.522822][ T6299] loop3: detected capacity change from 0 to 4096
[  174.993477][ T6299] ntfs: volume version 3.1.
[  176.408066][   T52] Bluetooth: Frame is too long (len 18, expected len 8)
[  176.465520][ T6317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.90'.
[  176.579052][   T52] Bluetooth: hci3: command tx timeout
[  176.762451][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.91'.
[  176.873325][ T6323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.91'.
[  176.892081][ T6323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.91'.
[  177.911383][ T6323] syz.3.91 (6323) used greatest stack depth: 17480 bytes left
[  178.069066][ T6325] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  178.077779][ T6325] overlayfs: overlapping lowerdir path
[  178.383088][ T6330] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  178.802067][ T6332] binder: 6328:6332 ioctl c0306201 2000000003c0 returned -14
[  179.370830][   T27] audit: type=1804 audit(1781729835.977:4): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.94" name="bus" dev="ramfs" ino=8618 res=1 errno=0
[  181.410202][   T27] audit: type=1804 audit(1781729836.005:5): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.94" name="bus" dev="ramfs" ino=8618 res=1 errno=0
[  182.583611][ T6342] loop3: detected capacity change from 0 to 8
[  182.717128][ T6342] SQUASHFS error: zlib decompression failed, data probably corrupt
[  182.725229][ T6342] SQUASHFS error: Failed to read block 0x9b: -5
[  182.853276][ T6348] netlink: 64 bytes leftover after parsing attributes in process `syz.1.99'.
[  182.859356][ T6342] SQUASHFS error: Unable to read metadata cache entry [99]
[  182.955813][ T6342] SQUASHFS error: Unable to read inode 0x127
[  183.166640][   T42] IPVS: starting estimator thread 0...
[  183.194724][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.99'.
[  183.196779][ T6351] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  183.205829][ T6352] netlink: 32 bytes leftover after parsing attributes in process `syz.1.99'.
[  183.231655][ T6352] gretap1: entered promiscuous mode
[  183.294525][ T6353] IPVS: using max 35 ests per chain, 84000 per kthread
[  183.644395][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'.
[  183.671216][ T6361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.103'.
[  183.690563][ T6361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'.
[  184.541839][ T6359] input: syz0 as /devices/virtual/input/input7
[  185.801736][ T6368] loop2: detected capacity change from 0 to 128
[  185.836379][ T6370] loop3: detected capacity change from 0 to 256
[  185.845778][ T6370] exfat: Deprecated parameter 'utf8'
[  186.026000][ T6370] exFAT-fs (loop3): failed to read boot sector
[  186.058319][ T6370] exFAT-fs (loop3): failed to recognize exfat type
[  186.158366][    C1] bridge0: port 3(syz_tun) entered forwarding state
[  187.554625][   T27] audit: type=1804 audit(1781729843.637:6): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.108" name="bus" dev="ramfs" ino=9240 res=1 errno=0
[  187.708283][   T27] audit: type=1804 audit(1781729843.656:7): pid=6381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.108" name="bus" dev="ramfs" ino=9240 res=1 errno=0
[  188.143622][ T6383] loop2: detected capacity change from 0 to 764
[  189.664979][ T6391] loop3: detected capacity change from 0 to 16
[  189.678991][ T6391] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  189.791760][ T6391] input: syz1 as /devices/virtual/input/input8
[  191.350243][ T6402] loop1: detected capacity change from 0 to 64
[  191.444952][   T52] Bluetooth: Frame is too long (len 18, expected len 8)
[  191.471631][ T6402] hfs: found bad thread record in catalog
[  191.520591][ T6402] hfs: get root inode failed
[  191.569828][ T6399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'.
[  191.619570][ T5794] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.821318][ T6404] loop0: detected capacity change from 0 to 164
[  194.593465][ T6415] input: syz0 as /devices/virtual/input/input9
[  196.724628][ T6421] loop1: detected capacity change from 0 to 8
[  196.801901][ T6421] SQUASHFS error: xz decompression failed, data probably corrupt
[  196.830472][ T6421] SQUASHFS error: Failed to read block 0x108: -5
[  196.847960][ T6421] SQUASHFS error: Unable to read metadata cache entry [106]
[  196.863922][ T6421] SQUASHFS error: Unable to read inode 0x11f
[  196.948693][ T6424] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  196.969010][   T27] audit: type=1804 audit(1781729852.440:8): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.120" name="bus" dev="ramfs" ino=8778 res=1 errno=0
[  197.116311][   T27] audit: type=1804 audit(1781729852.468:9): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.120" name="bus" dev="ramfs" ino=8778 res=1 errno=0
[  197.935167][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  197.948134][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  198.155284][   T52] Bluetooth: hci2: Malformed HCI Event: 0x22
[  198.301653][ T6428] loop1: detected capacity change from 0 to 4096
[  198.395522][ T6428] ntfs: volume version 3.1.
[  198.924724][ T6434] loop2: detected capacity change from 0 to 2048
[  198.988213][ T6434]  loop2: p2 p3 < > p4 < p5 >
[  199.032941][ T6440] loop1: detected capacity change from 0 to 164
[  199.459206][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'.
[  201.498145][ T6430] loop0: detected capacity change from 0 to 32768
[  201.537356][ T6444] loop3: detected capacity change from 0 to 4096
[  201.631827][ T6444] ntfs: volume version 3.1.
[  203.211041][ T6444] ntfs: (device loop3): ntfs_check_logfile(): Error mapping $LogFile page (index 8).
[  203.220210][ T6430] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR
[  203.222810][ T6444] ntfs: (device loop3): load_system_files(): Failed to load $LogFile.  Mounting read-only.  Mount in Windows.
[  203.255163][ T6430] (syz.0.124,6430,0):ocfs2_initialize_super:2285 ERROR: status = -12
[  203.323967][ T6430] (syz.0.124,6430,0):ocfs2_fill_super:1178 ERROR: status = -12
[  203.333237][ T6444] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Failed to map directory index page, error 4.
[  203.373509][ T6444] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  203.428471][ T6444] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated.  Will not be able to remount read-write.  Run chkdsk.
[  203.514152][ T6444] ntfs: (device loop3): map_mft_record(): Failed with error code 4.
[  203.563457][ T6444] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -4.  Marking corrupt inode 0x9 as bad.  Run chkdsk.
[  203.596213][ T6444] ntfs: (device loop3): load_system_files(): Failed to load $Secure.
[  203.648511][ T6444] ntfs: (device loop3): ntfs_fill_super(): Failed to load system files.
[  203.877116][   T52] Bluetooth: Frame is too long (len 18, expected len 8)
[  203.914240][ T6459] netlink: 24 bytes leftover after parsing attributes in process `syz.0.134'.
[  204.322216][ T6463] loop3: detected capacity change from 0 to 64
[  204.405456][ T6463] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  207.228281][ T6462] loop2: detected capacity change from 0 to 32768
[  207.317028][ T6462] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  207.357476][ T6462] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  207.448647][ T6462] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  207.476979][   T43] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  207.484384][   T43] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  207.760350][   T43] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 258ms
[  207.895118][   T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  207.896314][   T43] gfs2: fsid=syz:syz.0: jid=0: Done
[  207.905815][   T52] Bluetooth: hci1: Injecting HCI hardware error event
[  207.918632][ T6462] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  207.920279][   T52] Bluetooth: hci1: hardware error 0x00
[  209.774295][ T6462] gfs2: fsid=syz:syz.0: can't create logd thread: -4
[  210.394473][ T6479] loop1: detected capacity change from 0 to 32768
[  211.630545][ T6479] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  211.639729][ T6479] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop1": -EINTR
[  211.640213][ T6479] XFS (loop1): log mount failed
[  211.760235][ T6497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'.
[  211.825979][ T5793] Bluetooth: hci2: command 0x0406 tx timeout
[  211.830451][   T52] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  212.234991][ T6503] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  212.259201][   T27] audit: type=1804 audit(1781729866.742:10): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.146" name="bus" dev="ramfs" ino=9411 res=1 errno=0
[  212.573353][   T27] audit: type=1804 audit(1781729866.770:11): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.146" name="bus" dev="ramfs" ino=9411 res=1 errno=0
[  212.603109][ T5783] Bluetooth: Frame is too long (len 18, expected len 8)
[  212.791808][ T6505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.147'.
[  216.470397][ T6510] loop0: detected capacity change from 0 to 16
[  216.482587][ T6510] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  217.404976][ T6510] input: syz1 as /devices/virtual/input/input10
[  218.257900][ T6510] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR
[  218.358871][ T6518] loop1: detected capacity change from 0 to 128
[  218.408561][ T6518] ext4: Unknown parameter 'uid<00000000000000000000'
[  219.126712][ T6524] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  221.855428][ T6537] loop0: detected capacity change from 0 to 2048
[  221.923574][ T6537]  loop0: p2 p3 < > p4 < p5 >
[  223.682671][ T6543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.156'.
[  225.235743][ T6557] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  225.257232][   T27] audit: type=1804 audit(1781729878.902:12): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.160" name="bus" dev="ramfs" ino=9476 res=1 errno=0
[  225.400968][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  225.728348][   T27] audit: type=1804 audit(1781729878.930:13): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.160" name="bus" dev="ramfs" ino=9476 res=1 errno=0
[  226.004644][ T6559] loop0: detected capacity change from 0 to 128
[  230.923847][ T6571] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org.
[  230.991597][ T6573] loop0: detected capacity change from 0 to 128
[  231.017146][ T6573] ext4: Unknown parameter 'uid<00000000000000000000'
[  231.079038][ T6568] loop3: detected capacity change from 0 to 4096
[  231.110130][ T5794] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  231.130952][ T6568] ntfs: volume version 3.1.
[  231.837382][ T6578] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  232.966430][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.571970][ T6589] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  233.597168][   T27] audit: type=1804 audit(1781729886.703:14): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.174" name="bus" dev="ramfs" ino=8992 res=1 errno=0
[  233.773356][   T27] audit: type=1804 audit(1781729886.741:15): pid=6589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.174" name="bus" dev="ramfs" ino=8992 res=1 errno=0
[  234.491630][ T6591] loop1: detected capacity change from 0 to 256
[  234.682312][ T6591] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  236.723177][ T6599] loop2: detected capacity change from 0 to 2048
[  237.067747][ T6602] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  237.103649][   T27] audit: type=1804 audit(1781729889.987:16): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.169" name="bus" dev="ramfs" ino=9537 res=1 errno=0
[  238.033431][   T27] audit: type=1804 audit(1781729890.015:17): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.169" name="bus" dev="ramfs" ino=9537 res=1 errno=0
[  240.002359][ T6599]  loop2: p2 p3 < > p4 < p5 >
[  240.117524][ T6607] loop3: detected capacity change from 0 to 64
[  240.483531][ T6607] syz.3.179: attempt to access beyond end of device
[  240.483531][ T6607] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64
[  240.510029][ T6607] Buffer I/O error on dev loop3, logical block 512, async page read
[  240.531975][ T6607] syz.3.179: attempt to access beyond end of device
[  240.531975][ T6607] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64
[  240.554727][ T6607] Buffer I/O error on dev loop3, logical block 56576, async page read
[  240.806444][ T6614] netlink: 'syz.0.188': attribute type 46 has an invalid length.
[  240.821291][ T6613] loop2: detected capacity change from 0 to 128
[  240.853547][ T6614] netlink: 'syz.0.188': attribute type 28 has an invalid length.
[  240.864905][ T6613] ext4: Unknown parameter 'uid<00000000000000000000'
[  241.564889][ T6619] snd_dummy snd_dummy.0: control 6:65278:0:syz0:-259 is already present
[  242.738114][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  242.761976][ T5792] udevd[5792]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  242.953382][ T6624] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  242.973385][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'.
[  242.984368][ T6626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.183'.
[  243.314152][   T27] audit: type=1804 audit(1781729895.795:18): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.184" name="bus" dev="ramfs" ino=9053 res=1 errno=0
[  243.330236][   T27] audit: type=1804 audit(1781729895.805:19): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.184" name="bus" dev="ramfs" ino=9053 res=1 errno=0
[  247.663353][ T5824] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  247.871246][ T5824] usb 3-1: unable to get BOS descriptor or descriptor too short
[  247.881680][ T5824] usb 3-1: not running at top speed; connect to a high speed hub
[  247.893115][ T5824] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  247.904526][ T5824] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  247.916813][ T5824] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40
[  247.926883][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.935849][ T5824] usb 3-1: Product: syz
[  247.940293][ T5824] usb 3-1: Manufacturer: syz
[  247.945944][ T5824] usb 3-1: SerialNumber: syz
[  248.188108][ T5824] usb 3-1: 3:0: failed to get current value for ch 1 (-71)
[  248.199675][ T5824] usb 3-1: 3:0: failed to get current value for ch 2 (-71)
[  248.209292][ T5824] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[  248.223179][ T5824] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3)
[  248.232892][ T5824] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3)
[  248.240976][ T5824] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3)
[  248.249740][ T5824] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3)
[  248.259113][ T5824] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3)
[  248.269815][ T5824] usb 3-1: 3:0: cannot get min/max values for control 4 (id 3)
[  248.280389][ T5824] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3)
[  248.289366][ T5824] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3)
[  248.298187][ T5824] usb 3-1: 3:0: failed to get current value for ch 1 (-71)
[  248.310195][ T5824] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[  248.322245][ T5824] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3)
[  248.331821][ T5824] usb 3-1: 3:0: cannot get min/max values for control 8 (id 3)
[  248.340207][ T5824] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[  248.353290][ T5824] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[  248.366668][ T5824] usb 3-1: 3:0: cannot get min/max values for control 11 (id 3)
[  248.375454][ T5824] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3)
[  248.385246][ T5824] usb 3-1: 3:0: cannot get min/max values for control 12 (id 3)
[  248.393984][ T5824] usb 3-1: 3:0: failed to get current value for ch 1 (-71)
[  248.402290][ T5824] usb 3-1: 3:0: failed to get current value for ch 0 (-71)
[  248.431114][ T5824] usb 3-1: 3:0: cannot get min/max values for control 3 (id 3)
[  248.440929][ T5824] usb 3-1: 3:0: cannot get min/max values for control 5 (id 3)
[  248.456897][ T5824] usb 3-1: USB disconnect, device number 2
[  248.491374][ T5794] udevd[5794]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  248.845466][ T6638] loop2: detected capacity change from 0 to 164
[  248.855417][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'.
[  250.592435][ T6649] loop0: detected capacity change from 0 to 256
[  250.779754][ T6649] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  250.951519][ T6653] loop2: detected capacity change from 0 to 2048
[  250.970697][ T6657] comedi comedi1: aio_aio12_8: I/O port conflict (0x5,32)
[  251.008845][ T6653]  loop2: p2 p3 < > p4 < p5 >
[  251.162471][  T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  251.404115][  T788] usb 2-1: Using ep0 maxpacket: 32
[  251.422495][  T788] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00
[  251.432372][  T788] usb 2-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0
[  251.453268][  T788] usb 2-1: Product: syz
[  251.991935][  T788] usb 2-1: config 0 descriptor??
[  252.291982][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[  252.406395][  T788] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  253.030662][ T5865] usb 2-1: USB disconnect, device number 3
[  253.380479][ T5846] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  253.585324][ T6683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.200'.
[  253.596896][ T5846] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  253.609718][ T5846] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  253.634520][ T5846] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40
[  253.649898][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.659251][  T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  253.660939][ T5846] usb 4-1: Product: syz
[  253.671455][ T5846] usb 4-1: Manufacturer: syz
[  253.684685][ T5846] usb 4-1: SerialNumber: syz
[  253.728977][ T6686] loop2: detected capacity change from 0 to 1024
[  253.758409][ T6686] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled
[  253.811640][ T6686] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 2: comm syz.2.201: lblock 2 mapped to illegal pblock 2 (length 1)
[  253.827982][ T6686] Quota error (device loop2): qtree_write_dquot: dquota write failed
[  253.838043][ T6686] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 48: comm syz.2.201: lblock 0 mapped to illegal pblock 48 (length 1)
[  253.861518][ T6686] Quota error (device loop2): v2_write_file_info: Can't write info structure
[  253.872353][ T6686] EXT4-fs error (device loop2): ext4_acquire_dquot:6953: comm syz.2.201: Failed to acquire dquot type 0
[  253.883875][  T788] usb 1-1: Using ep0 maxpacket: 8
[  253.891330][  T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.904912][ T6686] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  253.907773][  T788] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  253.924747][  T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.933205][  T788] usb 1-1: Product: syz
[  253.937859][  T788] usb 1-1: Manufacturer: syz
[  253.943012][  T788] usb 1-1: SerialNumber: syz
[  253.951592][ T5846] usb 4-1: unit 4 not found!
[  253.952971][  T788] usb 1-1: config 0 descriptor??
[  253.962253][ T6686] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.201: mark_inode_dirty error
[  253.982813][  T788] cdc_phonet 1-1:0.0: invalid descriptor buffer length
[  253.988343][ T5846] usb 4-1: USB disconnect, device number 3
[  253.990452][  T788] cdc_phonet: probe of 1-1:0.0 failed with error -22
[  254.006974][ T6686] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  254.088634][ T6686] EXT4-fs (loop2): 1 orphan inode deleted
[  254.095996][ T6686] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.110941][   T11] EXT4-fs error (device loop2): ext4_map_blocks:610: inode #3: block 1: comm kworker/u4:0: lblock 1 mapped to illegal pblock 1 (length 1)
[  254.207483][   T11] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  254.272353][   T11] EXT4-fs error (device loop2): ext4_release_dquot:6989: comm kworker/u4:0: Failed to release dquot type 0
[  254.373842][ T6686] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.385025][ T6686] EXT4-fs error (device loop2): __ext4_get_inode_loc:4496: comm syz.2.201: Invalid inode table block 1 in block_group 0
[  254.442325][ T6686] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5939: Corrupt filesystem
[  254.456249][ T5846] usb 1-1: USB disconnect, device number 3
[  254.497036][ T6686] EXT4-fs error (device loop2): ext4_quota_off:7237: inode #3: comm syz.2.201: mark_inode_dirty error
[  255.049896][ T6700] loop3: detected capacity change from 0 to 2048
[  255.103378][ T6700]  loop3: p2 p3 < > p4 < p5 >
[  256.158951][ T5846] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  256.493082][ T5846] usb 2-1: config index 0 descriptor too short (expected 65230, got 72)
[  256.633246][ T5846] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  256.651688][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.659764][ T5846] usb 2-1: Product: syz
[  256.665375][ T5846] usb 2-1: Manufacturer: syz
[  256.721553][ T5846] usb 2-1: SerialNumber: syz
[  256.769864][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.206'.
[  256.884000][ T5846] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  256.958730][    T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  257.811850][    C0] usb 2-1: ath9k_htc: invalid pkt_len (fe77)
[  257.860991][ T6716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.209'.
[  258.020656][ T6726] netlink: 72 bytes leftover after parsing attributes in process `syz.3.212'.
[  258.031139][ T6726] netlink: 72 bytes leftover after parsing attributes in process `syz.3.212'.
[  258.049445][ T5865] usb 2-1: USB disconnect, device number 4
[  258.088925][    T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[  258.119131][    T9] ath9k_htc: Failed to initialize the device
[  258.134657][ T5865] usb 2-1: ath9k_htc: USB layer deinitialized
[  258.231999][ T6735] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  258.428669][  T788] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  259.580931][  T788] usb 1-1: Using ep0 maxpacket: 16
[  259.611450][  T788] usb 1-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  259.631893][  T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.658990][  T788] usb 1-1: Product: syz
[  259.674094][  T788] usb 1-1: Manufacturer: syz
[  259.686203][  T788] usb 1-1: SerialNumber: syz
[  259.709069][  T788] usb 1-1: config 0 descriptor??
[  259.751023][  T788] gspca_main: spca508-2.14.0 probing 041e:4018
[  259.937983][ T6753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.222'.
[  260.209055][  T788] gspca_spca508: reg_read err -71
[  260.220655][  T788] gspca_spca508: reg_read err -71
[  260.235743][   T52] Bluetooth: hci0: command 0x0406 tx timeout
[  260.237218][  T788] gspca_spca508: reg_read err -71
[  260.248256][  T788] gspca_spca508: reg_read err -71
[  260.255080][  T788] gspca_spca508: reg write: error -71
[  260.263874][  T788] spca508: probe of 1-1:0.0 failed with error -71
[  260.285244][  T788] usb 1-1: USB disconnect, device number 4
[  260.416518][ T6755] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  261.750154][ T6745] loop3: detected capacity change from 0 to 32768
[  261.782088][ T6767] loop0: detected capacity change from 0 to 64
[  262.740546][ T6745] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop3": -EINTR
[  262.811632][ T6767] Trying to free block not in datazone
[  262.873957][ T6767] Trying to free block not in datazone
[  262.921051][ T6767] Trying to free block not in datazone
[  262.948820][ T6767] Trying to free block not in datazone
[  262.979433][ T6767] Trying to free block not in datazone
[  262.997422][ T6767] Trying to free block not in datazone
[  263.023373][ T6767] Trying to free block not in datazone
[  263.031768][ T6767] Trying to free block not in datazone
[  263.044232][ T6767] Trying to free block not in datazone
[  263.074653][ T6767] Trying to free block not in datazone
[  263.244122][ T6767] Trying to free block not in datazone
[  263.286594][ T5783] Bluetooth: Frame is too long (len 18, expected len 8)
[  263.367906][ T6767] Trying to free block not in datazone
[  263.473223][ T6781] netlink: 24 bytes leftover after parsing attributes in process `syz.3.229'.
[  263.484182][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  263.491332][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  263.499400][ T6767] minix_free_block (loop0:6): bit already cleared
[  263.739671][ T6767] Trying to free block not in datazone
[  263.772028][ T6767] Trying to free block not in datazone
[  263.819642][ T6767] Trying to free block not in datazone
[  263.825392][ T6767] minix_free_block (loop0:7): bit already cleared
[  263.832137][ T6767] Trying to free block not in datazone
[  263.838073][ T6767] Trying to free block not in datazone
[  263.843994][ T6767] Trying to free block not in datazone
[  263.850033][ T6767] Trying to free block not in datazone
[  263.855925][ T6767] Trying to free block not in datazone
[  263.861818][ T6767] minix_free_block (loop0:6): bit already cleared
[  264.427561][ T5849] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  264.445325][ T5865] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  266.021876][ T5865] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[  266.030607][ T5865] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.042739][ T5865] usb 4-1: config 0 has no interface number 0
[  266.049406][ T5849] usb 1-1: Using ep0 maxpacket: 8
[  266.056845][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  266.059970][ T5865] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  266.068336][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  266.087035][ T5849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  266.097718][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  266.097728][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.097751][ T5865] usb 4-1: Product: syz
[  266.109448][ T5849] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  266.122044][ T5865] usb 4-1: Manufacturer: syz
[  266.142614][ T5865] usb 4-1: SerialNumber: syz
[  266.144019][ T5849] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  266.154101][ T5865] usb 4-1: config 0 descriptor??
[  266.166273][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.183287][ T5849] usb 1-1: config 0 descriptor??
[  266.195320][ T6790] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  266.542193][ T5865] usb 4-1: USB disconnect, device number 4
[  266.589507][    C1] Bluetooth: hci4: Unexpected continuation: 1 bytes
[  266.596918][   T52] Bluetooth: hci4: unexpected event 0x10 length: 71 > 1
[  266.817522][ T5783] Bluetooth: hci4: Opcode 0x0c03 failed: -71
[  266.833319][ T5783] Bluetooth: hci4: hardware error 0x51
[  266.844055][ T5849] usb 1-1: USB disconnect, device number 5
[  266.845322][   T52] Bluetooth: hci4: sending frame failed (-19)
[  266.858740][ T5783] Bluetooth: hci4: Opcode 0x0c03 failed: -19
[  268.529145][ T5159] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  268.538855][ T5783] Bluetooth: Frame is too long (len 18, expected len 8)
[  268.635602][ T6816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.241'.
[  269.685100][ T5159] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  269.693458][ T5159] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  269.718587][ T5159] usb 4-1: config 8 has no interface number 0
[  269.725832][ T5159] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x1 has invalid wMaxPacketSize 0
[  269.737946][ T5159] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  269.834416][ T5159] usb 4-1: config 8 interface 177 has no altsetting 0
[  269.865370][ T5159] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  269.874490][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.997567][ T6825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.243'.
[  270.011042][ T5159] ir_toy 4-1:8.177: required endpoints not found
[  270.052504][ T6828] loop1: detected capacity change from 0 to 16
[  270.087189][ T6828] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  270.130446][ T5794] udevd[5794]: incorrect cramfs checksum on /dev/loop1
[  270.257053][ T5794] udevd[5794]: incorrect cramfs checksum on /dev/loop1
[  270.288394][ T5159] usb 4-1: USB disconnect, device number 5
[  270.658853][ T5783] Bluetooth: hci3: Invalid handle: 0x9c98 > 0x0eff
[  270.716028][ T6840] Invalid option length (1040122) for dns_resolver key
[  270.796204][    T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  270.987818][    T9] usb 2-1: Using ep0 maxpacket: 32
[  271.026290][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  271.055664][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.081007][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  271.126143][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[  271.144273][ T6854] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  271.164483][   T27] audit: type=1804 audit(1781729921.846:20): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.253" name="bus" dev="ramfs" ino=10402 res=1 errno=0
[  271.194894][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.293758][    T9] usb 2-1: Product: syz
[  271.350027][    T9] usb 2-1: Manufacturer: syz
[  271.392822][   T27] audit: type=1804 audit(1781729921.865:21): pid=6854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.253" name="bus" dev="ramfs" ino=10402 res=1 errno=0
[  271.440648][    T9] usb 2-1: SerialNumber: syz
[  272.192857][ T6862] snd_virmidi snd_virmidi.0: control 5:3343:7:syz1:1 is already present
[  272.279184][   T27] audit: type=1804 audit(1781729922.885:22): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.254" name="bus" dev="ramfs" ino=10421 res=1 errno=0
[  384.564736][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  384.576130][    C1] rcu: 	(detected by 1, t=10502 jiffies, g=18337, q=217 ncpus=2)
[  384.585898][    C1] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294974015-4294963513), jiffies_till_next_fqs=1, root ->qsmask 0x0
[  384.603656][    C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g18337 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  384.617501][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  384.628972][    C1] rcu: RCU grace-period kthread stack dump:
[  384.637116][    C1] task:rcu_preempt     state:R  running task     stack:26728 pid:17    ppid:2      flags:0x00004000
[  384.651721][    C1] Call Trace:
[  384.655393][    C1]  <TASK>
[  384.659755][    C1]  __schedule+0x1553/0x45a0
[  384.665242][    C1]  ? _raw_spin_unlock_irqrestore+0x40/0x120
[  384.671655][    C1]  ? _raw_spin_unlock_irqrestore+0xc5/0x120
[  384.678262][    C1]  ? asan.module_dtor+0x20/0x20
[  384.683641][    C1]  ? enqueue_timer+0x23d/0x550
[  384.689094][    C1]  ? __mod_timer+0x984/0xdb0
[  384.694497][    C1]  schedule+0xbd/0x170
[  384.699336][    C1]  schedule_timeout+0x188/0x2d0
[  384.705219][    C1]  ? console_conditional_schedule+0x40/0x40
[  384.711260][    C1]  ? update_process_times+0x1b0/0x1b0
[  384.716960][    C1]  ? prepare_to_swait_event+0x339/0x360
[  384.723024][    C1]  rcu_gp_fqs_loop+0x313/0x1590
[  384.728235][    C1]  ? rcu_gp_init+0x1162/0x1560
[  384.733578][    C1]  ? rcu_gp_kthread+0x3b0/0x3b0
[  384.738916][    C1]  ? lockdep_hardirqs_on_prepare+0x40d/0x770
[  384.746461][    C1]  ? rcu_gp_init+0x1560/0x1560
[  384.753009][    C1]  ? rcu_gp_cleanup+0xb41/0xc90
[  384.760673][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  384.767006][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  384.773335][    C1]  rcu_gp_kthread+0x9d/0x3b0
[  384.778522][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  384.784574][    C1]  ? __kthread_parkme+0x7a/0x1c0
[  384.790190][    C1]  ? __kthread_parkme+0x162/0x1c0
[  384.798493][    C1]  kthread+0x2fa/0x390
[  384.804289][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  384.810457][    C1]  ? kthread_blkcg+0xd0/0xd0
[  384.816939][    C1]  ret_from_fork+0x48/0x80
[  384.822744][    C1]  ? kthread_blkcg+0xd0/0xd0
[  384.828104][    C1]  ret_from_fork_asm+0x11/0x20
[  384.834004][    C1]  </TASK>
[  384.838636][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  384.846427][    C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0
[  384.854810][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  384.866490][    C1] RIP: 0010:pv_native_safe_halt+0xf/0x10
[  384.874557][    C1] Code: 88 1f 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 43 e4 3f 00 fb f4 <c3> 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80
[  384.893567][    T9] usb 2-1: unit 255 not found!
[  384.897581][    C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c2
[  384.897611][    C1] RAX: 8c89c7b3cd9d5d00 RBX: ffffffff8162af3d RCX: 8c89c7b3cd9d5d00
[  384.897624][    C1] RDX: 0000000000000001 RSI: ffffffff8acacbe0 RDI: ffffffff8b1c9c20
[  384.897635][    C1] RBP: ffffc90000187f20 R08: ffff8880b8f36bab R09: 1ffff110171e6d75
[  384.897646][    C1] R10: dffffc0000000000 R11: ffffed10171e6d76 R12: 1ffff92000030fc8
[  384.897657][    C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000
[  384.897669][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  384.897684][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  384.897696][    C1] CR2: 00007f598f1ea540 CR3: 000000001c7b2000 CR4: 00000000003506e0
[  384.897714][    C1] Call Trace:
[  384.897723][    C1]  <TASK>
[  384.897731][    C1]  default_idle+0x13/0x20
[  384.897763][    C1]  default_idle_call+0x6c/0xa0
[  384.897788][    C1]  do_idle+0x33d/0x590
[  384.897816][    C1]  ? idle_inject_timer_fn+0x60/0x60
[  384.897838][    C1]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  384.897881][    C1]  cpu_startup_entry+0x43/0x60
[  384.897903][    C1]  start_secondary+0xee/0xf0
[  384.897922][    C1]  secondary_startup_64_no_verify+0x179/0x17b
[  384.897961][    C1]  </TASK>
[  384.974912][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
SYZFAIL: failed to send rpc
fd=3 want=152 sent=0 n=-1 (errno 32: Broken pipe)
[  386.799661][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  386.820895][   T27] audit: type=1804 audit(1781729922.903:23): pid=6858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.254" name="bus" dev="ramfs" ino=10421 res=1 errno=0
[  387.054996][    T9] usb 2-1: USB disconnect, device number 5
[  387.904731][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  388.921088][ T5778] bridge0: port 3(syz_tun) entered disabled state
[  389.069921][ T5778] syz_tun (unregistering): left allmulticast mode
[  389.097817][ T5778] syz_tun (unregistering): left promiscuous mode
[  389.104611][ T5778] bridge0: port 3(syz_tun) entered disabled state
[  389.648091][  T994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.805823][  T994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.965618][  T994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.999737][ T5779] bridge0: port 3(syz_tun) entered disabled state
[  390.062447][ T5779] syz_tun (unregistering): left allmulticast mode
[  390.068966][ T5779] syz_tun (unregistering): left promiscuous mode
[  390.076180][ T5779] bridge0: port 3(syz_tun) entered disabled state
[  390.124834][  T994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  391.551304][  T994] hsr_slave_0: left promiscuous mode
[  391.563316][  T994] hsr_slave_1: left promiscuous mode
[  391.570482][  T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  391.589378][  T994] batman_adv: batadv0: Removing interface: batadv_slave_0
[  391.599451][  T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  391.607206][  T994] batman_adv: batadv0: Removing interface: batadv_slave_1
[  391.622870][  T994] bridge_slave_1: left allmulticast mode
[  391.628631][  T994] bridge_slave_1: left promiscuous mode
[  391.640641][  T994] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.657691][  T994] bridge_slave_0: left allmulticast mode
[  391.664813][  T994] bridge_slave_0: left promiscuous mode
[  391.670632][  T994] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.721236][  T994] veth1_macvtap: left promiscuous mode
[  391.727498][  T994] veth0_macvtap: left promiscuous mode
[  391.742595][  T994] veth1_vlan: left promiscuous mode
[  391.748253][  T994] veth0_vlan: left promiscuous mode
[  392.742702][  T994] team0 (unregistering): Port device team_slave_1 removed
[  392.796199][  T994] team0 (unregistering): Port device team_slave_0 removed
[  392.855552][  T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  392.910460][  T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  393.255791][  T994] bond0 (unregistering): (slave dummy0): Releasing backup interface
[  393.328576][  T994] bond0 (unregistering): Released all slaves
[  393.795461][  T994] IPVS: stop unused estimator thread 0...
[  393.966165][  T994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.084378][  T994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.177839][  T994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.237122][  T994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.453927][  T994] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  394.551428][  T994] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0