last executing test programs: 38.91444633s ago: executing program 5 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2b, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000200000040431955220000000000010902190001010080320904000001ff00000007058102400001"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/f2255usb.bin/loading\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/firmware/f2255usb.bin/data\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)="4ada552200000000", 0x8) write(r0, &(0x7f0000000240)='0', 0x1) nanosleep(&(0x7f0000000280)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0) 38.223482729s ago: executing program 2 (id=3): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/rxe0/node_desc\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='new_node_desc\x00', 0xe) 37.750573975s ago: executing program 3 (id=4): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000009780), 0x1, 0x96d5, &(0x7f00000097c0)="$eJzs/QW8bXWhcH/vA4duBEGkpA0aCVGkQxElRQlBWlJABBSklVBBEVDp7u7u7u7u7o73c+CAyh1wvc97/w/3PmOMD3uvvWLP/Vu/75yTtfbcZ61lF1xy3oGBMQc+6MPTf3TxHvevuNRoi254ym6Db9tn58WeGnrx8B+cjDX30NN5hp7OOzAwMGjocgZ9cNnguU4+ZZiBwQND/vtHo4408jCjDgyMPPTs0OUMzPbBySiHfni79z4WD3TSIT9upw8+3m+0IQsZ8sXyK72z3sDAwIj/9P1DxjXDf7ij0padZ6EF/2H1kdswQ68e9I/r3j8d/MHHKAcODIyy/8Anrx9DbjvcP33v/82G/MwxJx9Y+v7P4Gf/r2vZeRZa5GP+Q7bFYYdeNtuQbfzj26Cxj6/nOy+59hNDp3DQ0Ikb/E/by2ex3v8ftew8Cy468Mnb8cBiC2zx+Hvv7zcHzz8wMHiBgYHBCw4MDF7os/ao/54+05WvqqqqPpPmmXfmIc/Zh/nY44ERP3xcS48LL397xocHBgYv9sHzxMErffhcsKqqqqqqqqr+ZzbPvDPPB8//x/y05/+TnrXdWD3/r6qqqqqqqvrf0yLzzDvzkOf6H3v+P/6nPf9//sljDvngb//nnu2D73r3s70TVVVVVVVVVfWpLbgIPv+f9NOe/1958qTX9vy/qqqqqqqq6n9PS8y84HwD//Q6e0MvnubD6+n5/zmP3bvCZzXeqqqqqqqqqvqv9+4zZ577j9d8n3jgY6/3/n5Dfy8w6Pjzr7/+Mxvo/4wG/cffh2z1WY/p/9+GOI945KQDA+st/VkPpT6D/te8Vn39f1L+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uE47/f/T6/+ecuMqH7wU/9ZQz337mP77z/ff+H7zYIs9s/RkN/bPo/9Xj/wNrDRoYGOo75loDAwOLzbPEUtMMDAycefvMU04x8NF1sw+5bs6xh33/DeI//GciC4zFC95qsg9Oh6woA+N8tIzj31/+Iu8dMOygjw3inxrr1EMOWXPZ12b5+OlUn3w/hvnoq9FOefLDf8syzMduNOInfPOHy//wvnzceejYpxky9uk3XneD6TfabPNp11p35TVWW2O19eaYadYZZ5ljjllnnX71tdZZbYYPPn/SnE36/uf5/p05G/Xjc/bMPP88Zx+/b580Z5N++py9v8Tdrxjx2x/O2eD/4pzN9+lzNulaQ3/QWHMPN7DS+3MzaGBgrPmHG9h0yJkZRxgYGGuBobcdf8htvzn2MAMDu/7jjg75aoSP1sFBWw25zbILLjnvB7upgYF/nP6jT3g/++GHjnzuoafzDD2d94MfM+bAP1bFwXOdfMowQ+biX6Zj1JFGHmbUgYGRh54dupyBOT44GfmsD2/3Ce+z/rGBvv8yKzt98PF+ow0MDIwy5IuJVz5n+yFT/3/hfdr/j/7//x+8Zh/00fo4aOjH0Nt84DXPQov842e9Pw1D5m7YoZfNNsTkv/mt7f+l/zDeSUccmPRTxvspr4vzfrR+rXPmuNv8d70uDo13/E8Z76e8ju8njneZh/d64oNF/beN92P7ukXf/zz3v7OvG/j0fd2wtIDVrpno4/u6737yEP9ld/nhHI3wsRt90r5u/L0n2WrI8uf+9H3dokPGPty/7OuGGRgYa74P93VDdnwLDjew65AzMw05s9BwA4cPOTPz+2dGGjh/yJnpVll/nVWHXLDwf1wPphn0L3+gCdvZgh/bzgb9030f9LG/7xz8wekoB374Hk6fsN8cNPRu/af7Clpvx/yU8X7K+0/hPA+5bNUTRhz3v+v9p2i8I376eD/p/bI/cby7vHrO/f/N4/1oOxvun6Zr4X9nO5v0X7ezIXdx2H/aMv7dx2Grwu0/+Hr8j5a2yZZPfvSYYriPLfc/e0yx8KdvZ2Ou9bHv23H/gUGfNjcL/TtzM+F/2Adt/c9z8+8+3ppm8g+uH/ZT5maEOVac6sO5Gf6/ODcL/VfnZu6BYf91bgYPLDAwMDDF0P3Dgv/O3Iz/6XPz7643I8PtP/h6tY8umn/nIy/9cG4+Phf/2dws+F+dm0k/Wm+meP+6yYYZGH74gU1X3njjDWf84POHZ2f64POnb4Pz/ztzOeZ/z1xOMPiT5vIfq+qoD1974H+yDf6HffqHy5//vzqXAx/N5cBaH99Y6n9q/f7PXf7u8neXv7v83eXvLn9xn3D8/6PX/99zzDl3G/rLjeGunWS8HT7r8X7G/T99/H+o778c/99hvEmuHWbgo+s+9fjsB7f5H3l8drYPTkY59MPbffz4IA/0k4/P7j/HbNv9Xzo++3/Uh9vqv/F7uPb/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3GfcPx/hg//DuCxGRd/ceiB0OGe2na5xT/r8X7G/T99/H+o778c/198uW2fGmbgo+s+9fj/B7dxHP9/8K0Fd/mffPz/w2214//1n5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7hOP/c3/4dwDHHLPX5h/+PcDNY+105mc93s+4/1eP//f+/97a/7vL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFDT3+P/Cxt7f8QesFBsf//3f3Cf6L549Z/JfIH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/D/PHLP7L5o9Z/H+UP2bx/3H+mMV/ufwxi//y+WMW/xXyxyz+K+aPWfx/kj9m8V8pf8ziv3L+mMX/p/ljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//P8scs/mvnj1n818kfs/ivmz9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8N8ofs/hvnD9m8f9F/pjFf5P8MYv/L/PHLP6b5o9Z/DfLH7P4b54/ZvH/Vf6Yxf/X+WMW/y3yxyz+W+aPWfx/kz9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+2+ePWfx3yB+z+P82f8zi/7v8MYv/jvljFv+d8scs/jvnj1n8d8kfs/j/Pn/M4v+H/DGL/x/zxyz+u+aPWfx3yx+z+P8pf8zi/+f8MYv/7vljFv+/5I9Z/PfIH7P475k/ZvHfK3/M4v/X/DGL/9/yxyz+f88fs/jvnT9m8d8nf8ziv2/+mMV/v/wxi//++WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+mMX/uvwxi//1+WMW/xvyxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP535o9Z/O/KH7P4350/ZvG/J3/M4n9v/pjF/778MYv//fljFv8H8scs/g/mj1n8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf8zi/27+mMX/vfwxif+ggfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/+fyxyz+4+SPWfzHzR+z+H8+f8ziP17+mMV//Pwxi/8X8scs/hPkj1n8v5g/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/l/KH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8v5w/ZvH/Sv6Yxf+r+WMW/6/lj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/nj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/2/kj1n858wfs/h/M3/M4v+t/DGL/1z5Yxb/b+ePWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/BfOH7P4L5I/ZvH/Tv6Yxf+7+WMW/0Xzxyz+38sfs/gvlj9m8f9+/pjF/wf5Yxb/xfPHLP5L5I9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjF/4f5Yxb/ZfPHLP4/yh+z+P84f8ziv1z+mMV/+fwxi/8K+WMW/xXzxyz+P8kfs/ivlD9m8V85f8zi/9P8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMX/Z/ljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/5/ljFv8N88cs/hvlj1n8N84fs/j/In/M4r9J/pjF/5f5Yxb/TfPHLP6b5Y9Z/DfPH7P4/yp/zOL/6/wxi/8W+WMW/y3zxyz+v8kfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfx/mz9m8f9d/pjFf8f8MYv/TvljFv+d88cs/rvkj1n8f58/ZvH/Q/6Yxf+P+WMW/13zxyz+u+WPWfz/lD9m8f9z/pjFf/f8MYv/X/LHLP575I9Z/PfMH7P475U/ZvH/a/6Yxf9v+WMW/7/nj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f8zi/17+mMT//S/z/49Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5c/ZvEfJ3/M4j9u/pjF//P5Yxb/8fLHLP7j549Z/L+QP2bxnyB/zOL/xfwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1L+mMV/svwxi//k+WMW/ynyxyz+U+aPWfynyh+z+E+dP2bxnyZ/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v/1/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4fyN/zOI/Z/6Yxf+b+WMW/2/lj1n858ofs/h/O3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8F8gfs/gvmD9m8V8of8ziv3D+mMV/kfwxi/938scs/t/NH7P4L5o/ZvH/Xv6YxX+x/DGL//fzxyz+P8gfs/gvnj9m8V8if8ziv2T+mMV/qfwxi//S+WMW/2Xyxyz+P8wfs/gvmz9m8f9R/pjF/8f5Yxb/5fLHLP7L549Z/FfIH7P4r5g/ZvH/Sf6YxX+l/DGL/8r5Yxb/n+aPWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP4/yx+z+K+dP2bxXyd/zOK/bv6YxX+9/DGL//r5Yxb/DfLHLP4/zx+z+G+YP2bx3yh/zOK/cf6Yxf8X+WMW/03yxyz+v8wfs/hvmj9m8d8sf8ziv3n+mMX/V/ljFv9f549Z/LfIH7P4b5k/ZvH/Tf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/b/DGL/+/yxyz+O+aPWfx3yh+z+O+cP2bx3yV/zOL/+/wxi/8f8scs/n/MH7P475o/ZvHfLX/M4v+n/DGL/5/zxyz+u+ePWfz/kj9m8d8jf8ziv2f+mMV/r/wxi/9f88cs/n/LH7P4/z1/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5Yxb/9/LHJP7DDuSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+XP2bxHyd/zOI/bv6Yxf/z+WMW//Hyxyz+4+ePWfy/kD9m8Z8gf8zi/8X8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9S/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/9fwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+H8jf8ziP2f+mMX/m/ljFv9v5Y9Z/OfKH7P4fzt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/d/LHLP7fzR+z+C+aP2bx/17+mMV/sfwxi//388cs/j/IH7P4L54/ZvFfIn/M4r9k/pjFf6n8MYv/0vljFv9l8scs/j/MH7P4L5s/ZvH/Uf6Yxf/H+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bx/0n+mMV/pfwxi//K+WMW/5/mj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+P8sfs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+P88fs/hvmD9m8d8of8ziv3H+mMX/F/ljFv9N8scs/r/MH7P4b5o/ZvHfLH/M4r95/pjF/1f5Yxb/X+ePWfy3yB+z+G+ZP2bx/03+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/2/wxi//v8scs/jvmj1n8d8ofs/jvnD9m8d8lf8zi//v8MYv/H/LHLP5/zB+z+O+aP2bx3y1/zOL/p/wxi/+f88cs/rvnj1n8/5I/ZvHfI3/M4r9n/pjFf6/8MYv/X/PHLP5/yx+z+P89f8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMW//fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/+EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv/hB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/L+RP2bxnzN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4fy9/zOK/WP6Yxf/7+WMW/x/kj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/x/mj1n8l80fs/j/KH/M4v/j/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4/yR/zOK/Uv6YxX/l/DGL/0/zxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/n+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOL/i/wxi/8m+WMW/1/mj1n8N80fs/hvlj9m8d88f8zi/6v8MYv/r/PHLP5b5I9Z/LfMH7P4/yZ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx/33+mMX/D/ljFv8/5o9Z/HfNH7P475Y/ZvH/U/6Yxf/P+WMW/93zxyz+f8kfs/jvkT9m8d8zf8ziv1f+mMX/r/ljFv+/5Y9Z/P+eP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/EQbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/xEH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv+RBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/L+RP2bxnzN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4fy9/zOK/WP6Yxf/7+WMW/x/kj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/x/mj1n8l80fs/j/KH/M4v/j/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4/yR/zOK/Uv6YxX/l/DGL/0/zxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/n+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOL/i/wxi/8m+WMW/1/mj1n8N80fs/hvlj9m8d88f8zi/6v8MYv/r/PHLP5b5I9Z/LfMH7P4/yZ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx/33+mMX/D/ljFv8/5o9Z/HfNH7P475Y/ZvH/U/6Yxf/P+WMW/93zxyz+f8kfs/jvkT9m8d8zf8ziv1f+mMX/r/ljFv+/5Y9Z/P+eP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/kQfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/1EG8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv9RB/LHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvH/ev6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/L+RP2bxnzN/zOL/zfwxi/+38scs/nPlj1n8v50/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/gvlD9m8V84f8ziv0j+mMX/O/ljFv/v5o9Z/BfNH7P4fy9/zOK/WP6Yxf/7+WMW/x/kj1n8F88fs/gvkT9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/x/mj1n8l80fs/j/KH/M4v/j/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4/yR/zOK/Uv6YxX/l/DGL/0/zxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/n+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/n+ePWfw3zB+z+G+UP2bx3zh/zOL/i/wxi/8m+WMW/1/mj1n8N80fs/hvlj9m8d88f8zi/6v8MYv/r/PHLP5b5I9Z/LfMH7P4/yZ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvH/bf6Yxf93+WMW/x3zxyz+O+WPWfx3zh+z+O+SP2bx/33+mMX/D/ljFv8/5o9Z/HfNH7P475Y/ZvH/U/6Yxf/P+WMW/93zxyz+f8kfs/jvkT9m8d8zf8ziv1f+mMX/r/ljFv+/5Y9Z/P+eP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6Yxf/d/DGL/3v5YxL/0Qbyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyx+z+I+TP2bxHzd/zOL/+fwxi/94+WMW//Hzxyz+X8gfs/hPkD9m8f9i/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/KX/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8p84fs/hPkz9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8Z82f8ziP13+mMV/+vwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/3r+mMV/1vwxi/9s+WMW/9nzxyz+c+SPWfy/kT9m8Z8zf8zi/838MYv/t/LHLP5z5Y9Z/L+dP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/zv5Yxb/7+aPWfwXzR+z+H8vf8ziv1j+mMX/+/ljFv8f5I9Z/BfPH7P4L5E/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv8f5o9Z/JfNH7P4/yh/zOL/4/wxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+P8kf8ziv1L+mMV/5fwxi/9P88cs/qvkj1n8V80fs/ivlj9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/5/lj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/hvlD9m8d84f8zi/4v8MYv/JvljFv9f5o9Z/DfNH7P4b5Y/ZvHfPH/M4v+r/DGL/6/zxyz+W+SPWfy3zB+z+P8mf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+O+QP2bx/23+mMX/d/ljFv8d88cs/jvlj1n8d84fs/jvkj9m8f99/pjF/w/5Yxb/P+aPWfx3zR+z+O+WP2bx/1P+mMX/z/ljFv/d88cs/n/JH7P475E/ZvHfM3/M4r9X/pjF/6/5Yxb/v+WPWfz/nj9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxi/97+WMS/9EH8scs/oPyxyz+w+SPWfyHzR+z+A/OH7P4D5c/ZvEfPn/M4j9C/pjFf8T8MYv/SPljFv+R88cs/qPkj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+n8sfs/iPkz9m8R83f8zi//n8MYv/ePljFv/x88cs/l/IH7P4T5A/ZvH/Yv6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/CfNH7P4fyl/zOI/Wf6YxX/y/DGL/xT5Yxb/KfPHLP5T5Y9Z/KfOH7P4T5M/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f96/pjFf9b8MYv/bPljFv/Z88cs/nPkj1n8v5E/ZvGfM3/M4v/N/DGL/7fyxyz+c+WPWfy/nT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf87+WMW/+/mj1n8F80fs/h/L3/M4r9Y/pjF//v5Yxb/H+SPWfwXzx+z+C+RP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/H+aPWfyXzR+z+P8of8zi/+P8MYv/cvljFv/l88cs/ivkj1n8V8wfs/j/JH/M4r9S/pjFf+X8MYv/T/PHLP6r5I9Z/FfNH7P4r5Y/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+f5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv+f549Z/DfMH7P4b5Q/ZvHfOH/M4v+L/DGL/yb5Yxb/X+aPWfw3zR+z+G+WP2bx3zx/zOL/q/wxi/+v88cs/lvkj1n8t8wfs/j/Jn/M4r9V/pjFf+v8MYv/NvljFv9t88cs/tvlj1n8t88fs/jvkD9m8f9t/pjF/3f5Yxb/HfPHLP475Y9Z/HfOH7P475I/ZvH/ff6Yxf8P+WMW/z/mj1n8d80fs/jvlj9m8f9T/pjF/8/5Yxb/3fPHLP5/yR+z+O+RP2bx3zN/zOK/V/6Yxf+v+WMW/7/lj1n8/54/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYv/e/ljEv8xBvLHLP6D8scs/sPkj1n8h80fs/gPzh+z+A+XP2bxHz5/zOI/Qv6YxX/E/DGL/0j5Yxb/kfPHLP6j5I9Z/EfNH7P4j5Y/ZvEfPX/M4j9G/pjFf8z8MYv/WPljFv+x88cs/p/LH7P4j5M/ZvEfN3/M4v/5/DGL/3j5Yxb/8fPHLP5fyB+z+E+QP2bx/2L+mMV/wvwxi/9E+WMW/4nzxyz+k+SPWfwnzR+z+H8pf8ziP1n+mMV/8vwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bxnzZ/zOI/Xf6Yxf//x869B9lZ13ccP7lHlOLPzgBT7OCAZZzO2EhIY6M1BAiE5bKKCRhDCOSyuUgu5EJMgpCkjVWgaaECLZq0BA1NKVathIaWeqvGBkWLtTGtVSmEWoNpSpMakWI6m+zGZPtlp/ukz0Pr9/X6I7vnLN8j5D0fzmEy4zD9Q1n6v0H/UJb+Z+ofytJ/uP6hLP3P0j+Upf8I/UNZ+v+y/qEs/UfqH8rS/436h7L0/xX9Q1n6j9I/lKX/m/QPZen/Zv1DWfr/qv6hLP3fon8oS//R+oey9D9b/1CW/mP0D2Xpf47+oSz9z9U/lKX/efqHsvQfq38oS//z9Q9l6X+B/qEs/cfpH8rS/0L9Q1n6t+kfytL/Iv1DWfpfrH8oS/9L9A9l6X+p/qEs/dv1D2Xp/1b9Q1n6v03/UJb+l+kfytL/7fqHsvQfr38oS/8J+oey9L9c/1CW/lfoH8rS/x36h7L0n6h/KEv/d+ofytJ/kv6hLP2v1D+Upf9k/UNZ+l+lfyhL/yn6h7L0v1r/UJb+1+gfytJ/qv6hLP2n6R/K0n+6/qEs/WfoH8rSv0P/UJb+M/UPZek/S/9Qlv6z9Q9l6T9H/1CW/u/SP5Sl/7X6h7L0n6t/KEv/efqHsvSfr38oS/8F+oey9L9O/1CW/gv1D2Xpv0j/UJb+i/UPZem/RP9Qlv7X6x/K0n+p/qEs/d+tfyhL/2X6h7L0X65/KEv/FfqHsvS/Qf9Qlv7v0T+Upf+N+oey9L9J/1CW/iv1D2Xpv0r/UJb+q/UPZen/a/qHsvT/df1DWfqv0T+Upf979Q9l6f8b+oey9H+f/qEs/d+vfyhL/5v1D2Xpf4v+oSz9b9U/lKX/b+ofytJ/rf6hLP1/S/9Qlv6/rX8oS//b9A9l6X+7/qEs/X9H/1CW/h/QP5Sl/x36h7L0v1P/UJb+d+kfytL/d/UPZen/e/qHsvS/W/9Qlv4f1D+Upf+H9A9l6b9O/1CW/uv1D2Xp//v6h7L0/wP9Q1n636N/KEv/DfqHsvS/V/9Qlv4f1j+Upf9H9A9l6b9R/1CW/vfpH8rS/w/1D2Xpv0n/UJb+f6R/KEv/+/UPZen/x/qHsvR/QP9Qlv4f1T+Upf+f6B/K0v9j+oey9P+4/qEs/T+hfyhL/z/VP5Sl/yf1D2Xp/6D+oSz9N+sfytL/If1DWfr/mf6hLP236B/K0v9h/UNZ+v+5/qEs/f9C/1CW/o/oH8rS/y/1D2Xp/yn9Q1n6f1r/UJb+n9E/lKX/Z/UPZen/Of1DWfr/lf6hLP0/r38oS/8v6B/K0n+r/qEs/b+ofyhL/7/WP5Sl/zb9Q1n6P6p/KEv/L+kfytL/y/qHsvR/TP9Qlv5f0T+Upf9X9Q9l6f83+oey9H9c/1CW/l/TP5Sl/9/qH8rS/+v6h7L0/zv9Q1n6b9c/lKX/N/QPZem/Q/9Qlv5/r38oS/9/0D+Upf839Q9l6f+P+oey9P+W/qEs/b+tfyhL/+/oH8rS/wn9Q1n6/5P+oSz9n9Q/lKX/U/qHsvTfqX8oS/+n9Q9l6f/P+oey9P+u/qEs/f9F/1CW/t/TP5Sl/y79Q1n6P6N/KEv/7+sfytJ/t/6hLP3/Vf9Qlv579A9l6f9v+oey9H9W/1CW/v+ufyhL/736h7L036d/KEv//9A/lKX/D/QPZem/X/9Qlv4/1D+Upf9z+oey9P+R/qEs/Z/XP5Sl/3/qH8rS/wX9Q1n6/1j/UJb+B/QPJen/ypb+oSz9++kfytK/v/6hLP0H6B/K0n+g/qEs/QfpH8rSf7D+oSz9h+gfytJ/qP6hLP1fpn8oS//j9A9l6f9y/UNZ+r9C/1CW/sfrH8rS/2f0D2Xpf4L+oZ+6/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/XLF6+4tqpc+d2LPKNb3zjm8PfvNT/ZgIAAP63/eRD/0v9dwIAAAAAAAAAAAAAAAAAAAB5NfF/J/ZS/zMCAAAAAAAAAAAAAMD/d23t5+we0O+opwYc+eDnH+s4+HXE/omzN258qHR/7frxxcFL9j/ywYEDBw6sf3b02K6HQ1qtVuf/2iu7Hg/tedz5+qtOXXfyoUdlzOfvemLKhOMvWbT59oHfWH9r+zODDj47qHXNzDlzO97Qv9Uq5w1qLet8cGa/VqtcMKh1W+eD4Z0Pxg1qbep8cNbBBy9rfabzwS9NXzB3RucTF1b+PYOfFm3tq1oDjlps66h/Gxy5/1WnPjm7+2svL9n9agNbXfs/bfOXTurxs24vsv/u1y/n9Nx/n/8BgRfVt/0/t6P7ay8v+d/e/z+8bf+K6Gcvvv/u1y/n2j/UJ/j8f9RGe37u7/H5/zXBSx6+P3votjs69992+f2v7npq4P/k8/9PXr+c13P//Y/6/N/5OX5s9+f/Ia1WOf8Yfzsglbb21bt7e//vff8Df67HTb8j93/vV3a+onP/9z3fWtP11KA+7n9sb+//N/f4ewX6pq19w4Ee7/992H/rjOAlD+9/1+bjD37+3/nA9BOP+Flf9n9+z/0PWzLvumGLl694/Zx5U2d1zOqYP2r4yDNHjBo1cuSwg58IDv16jL8pkMSxvf+3jutx06/V6jh8v/X+W8d27n/Pw2s+0vXU0D7u/4Je3/9f4/0fQqf1bw0e3Fo2dcmSRWce+rX74fBDvx76y4L99+G//09/Xddf1v1nhv1arZMP358xZdSQzv3fsLBs6XpqcB/3P67X/Y85+s8qgb45xvf/GT1ujtr/2btuWtq5/9f+4FU7u57q63//X9jr/u/x/g/Hoq29VeubaOf+zxqy+qJq16XNn/9BfZrY/6l7b9tX7bpcZP9Qnyb2P2Htm6dVuy4X2z/Up4n9PzTv6rXVrssl9g/1aWL/L/zsvlOqXZdL7R/q08T+H//u0xurXZd2+4f6NLH/D97dfla16/JW+4f6NLH/11//w9HVrsvb7B/q08T+Z758/KZq1+Uy+4f6NLH/iw6ce2K16/J2+4f6NLH/fqu/t6radRlv/1CfJvb/1NS1C6pdlwn2D/VpYv+bTj3juWrX5XL7h/o0sf81z7xxXLXrcoX9Q32a2P9X71z3eLXr8g77h/o0sf9PTH7VumrXZaL9Q32a2P+PTnv4uGrX5Z32D/VpYv/bt296sNp1mWT/UJ8m9r9+04DTql2XK+0f6tPE/ldeOOuxatdlsv1DfZrY/4iRX76y2nW5yv6hPk3s/+TPfevpatdliv1DfZrY//hHli6udl2utn+oTxP7X3rKx39c7bpcY/9Qnyb2/5aOU2ZXuy5T7R/q08T+y+3Hba92XabZP9Snif1P2rNhTLXrMt3+oT5N7H/LCV/4WLXrMsP+oT5N7H/vwvmjql2XDvuH+jSx/++8d+X7ql2XmfYP9Wli/3c8//VS7brMsn+oTxP73zV80uRq12W2/UN9mtj/hkuefbTadZlj/1CfJva/dssTS6pdl3fZP9Snif1v3Xrxk9Wuy7X2D/VpYv+vPWPY8dWuy1z7h/o0sf8FE9d8qNp1mWf/UJ8m9n/eA3f+QrXrMt/+oT5N7H/o10Z/stp1WWD/UJ8m9v/p0e//VLXrcp39Q32a2P++Mae/rtp1WWj/UJ8m9r/jweF3Vbsui+wf6tPE/j/w6N0Vr8ti+4f6NLH/hb/4wp5q12WJ/UN9mtj/myZcsbzadbne/qE+Tez/xHvGfbHadVlq/1CfJvZ/1be/f1m16/Ju+4f6NLH/00+a9upq12WZ/UN9mtj/7Dnbbql2XZbbP9Snif2PXb9jRLXrssL+oT5N7P+EpxbfW+263GD/UJ8m9r97wEmXVrsu77F/qE8T+7/vxke+We263Gj/UJ8m9n/LzR/tqHZdbrJ/qE8T+//s/sF7q12XlfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8F/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOojeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//+ri+0D") r0 = openat(0xffffffffffffff9c, &(0x7f0000009740)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000009750)='file\x00', 0x42, 0x1ff) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000000)={0xc, 0x101}) 37.196859648s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) nanosleep(&(0x7f0000000540)={0x0, 0x2faf080}, &(0x7f0000000580)) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x40}}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xa}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x50, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8}]}, 0x50}}, 0x0) 36.610981383s ago: executing program 5 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1234\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2625a00}, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000400), 0x0, 0x2) write$midi(r3, &(0x7f0000000440)='hello', 0x5) r4 = syz_open_dev$midi(&(0x7f0000000480), 0x1, 0x2) write$midi(r4, &(0x7f00000004c0)='hello', 0x5) r5 = syz_open_dev$midi(&(0x7f0000000500), 0x2, 0x2) write$midi(r5, &(0x7f0000000540)='hello', 0x5) 35.706488028s ago: executing program 1 (id=11): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040e91700000000000000010902120001010080fa0904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/dri/2/VGA-1/edid_override\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/dri/3/VGA-1/edid_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) write(r1, &(0x7f0000000400)="00ffffffffffff0004430000000000000000010480000000010000000000000000000000000001010101010101010101010101010101000000fd00000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002a", 0x80) r2 = syz_open_dev$dri(&(0x7f0000000500), 0x2, 0x2) r3 = syz_open_dev$dri(&(0x7f0000000540), 0x3, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000700)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}) 35.330224088s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/virtio/devices/virtio0/device\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/256, 0x100) 35.1640326s ago: executing program 0 (id=14): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f0000000400)={0x48, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:default_t:s0\x00'}]}, 0x48}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={&(0x7f0000000600), 0xc, &(0x7f0000000700)={&(0x7f0000000800)={0x14, r1, 0x301}, 0x14}}, 0x0) 35.147451412s ago: executing program 5 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\n\x00', 0x5) 33.815921542s ago: executing program 3 (id=16): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, r2, 0x3e8}}, 0x50) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 33.744921325s ago: executing program 0 (id=17): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0x10, &(0x7f0000000040), &(0x7f0000000100)=0x0, &(0x7f0000000108)=0x0, &(0x7f0000000110)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000080)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x1dcd6500}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_CLOSE={0x13, 0x1, 0x0, 0x0}) io_uring_enter(r1, 0x3, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='cifs\x00', 0x0, &(0x7f0000000480)='unc=\\\\127.0.0.1\\share,ip=127.0.0.1,port=20000,user=root,pass=root\x00') 23.83067701s ago: executing program 3 (id=18): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0x84, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0x84, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000003000)) syz_usb_control_io(r0, 0x0, &(0x7f0000004000)) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) 23.729786162s ago: executing program 1 (id=19): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff040140861246200001000000010902200001010080fa0904000002ff0401000705810200020007050202000200"], 0x0) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x3}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x4}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={&(0x7f0000000240), 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x5}]}, 0x1c}}, 0x0) 23.71981437s ago: executing program 2 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='2049\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='1\n\x00', 0x2) 23.697438505s ago: executing program 0 (id=21): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x0, 0x0, @local}, r2, 0x1}}, 0x50) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x8, 0xfa00, {&(0x7f0000000700)}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x1}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x8, 0xfa00, {&(0x7f0000000900)}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 23.649177589s ago: executing program 5 (id=22): r0 = syz_mount_image$btrfs(&(0x7f0000001000), &(0x7f0000001040)='./file0\x00', 0x0, &(0x7f0000001080), 0x0, 0x559e, &(0x7f0000005680)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000010c0)='./backing0\x00', 0x81ff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./backing0\x00', 0x2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000) r2 = syz_open_dev$loop(&(0x7f0000001140), 0x1, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) mknodat(0xffffffffffffff9c, &(0x7f0000001180)='./loop1\x00', 0x6180, 0x701) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000011c0)={{0x0}, './loop1\x00'}) mknodat(0xffffffffffffff9c, &(0x7f00000021c0)='./backing1\x00', 0x81ff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./backing1\x00', 0x2, 0x0) fallocate(r3, 0x0, 0x0, 0x1000) r4 = syz_open_dev$loop(&(0x7f0000002240), 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mknodat(0xffffffffffffff9c, &(0x7f0000002280)='./loop2\x00', 0x6180, 0x702) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000022c0)={{0x0}, './loop2\x00'}) mknodat(0xffffffffffffff9c, &(0x7f00000032c0)='./backing2\x00', 0x81ff, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000003300)='./backing2\x00', 0x2, 0x0) fallocate(r5, 0x0, 0x0, 0x1000) r6 = syz_open_dev$loop(&(0x7f0000003340), 0x3, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) mknodat(0xffffffffffffff9c, &(0x7f0000003380)='./loop3\x00', 0x6180, 0x703) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f00000033c0)={{0x0}, './loop3\x00'}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f00000043c0)={0x1, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1}}) 23.300473442s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='10\n\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='10\n\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./export\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./export\x00', &(0x7f0000000640)='tmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain ./export 2147483647 8192 0 0 0\n\x00', 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:./export\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 22.505359842s ago: executing program 0 (id=25): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) syz_emit_ethernet(0x3c, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00000000000060000200032f00"/60], 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff00000000000060000200030100"/60], 0x0) 22.213050803s ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x2a39\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x3fd4\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x10000000}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000400), 0x0, 0x2) write$midi(r3, &(0x7f0000000440)='hello', 0x5) r4 = syz_open_dev$sndmidi(&(0x7f0000000480), 0x1, 0x2) write$midi(r4, &(0x7f00000004c0)='hello', 0x5) r5 = syz_open_dev$sndmidi(&(0x7f0000000500), 0x2, 0x2) write$midi(r5, &(0x7f0000000540)='hello', 0x5) 22.133380644s ago: executing program 4 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/wmi/devices\x00', 0x0, 0x0) 21.844705849s ago: executing program 4 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 21.806577717s ago: executing program 1 (id=29): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406411220600000000000109022e0001010080000904000004ffffff0007050102000200070581020002000705840200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000001000)="a0080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808") nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000400)={0x80000000}) 21.717665483s ago: executing program 5 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) 21.541266256s ago: executing program 4 (id=31): r0 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x0, 0x56e, &(0x7f0000000640)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/test\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)='hello world', 0xb) close(r1) close(r0) umount2(&(0x7f00000005c0)='./file0\x00', 0x0) 21.497046631s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n', 0x4) 21.115530165s ago: executing program 2 (id=33): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c05c1060001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000106)="0000ffffff0a00f6d7290000000000000003fd00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000200)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000206)="0000ffffff0300fdd72b00fe00") syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000300)="0000ff00ff00") syz_usb_ep_write(r0, 0x81, 0xe, &(0x7f0000000306)="0000ffffff0400fcd72101000700") nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) 20.768966878s ago: executing program 4 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='8086 100e\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='0000:00:03.0\x00', 0xd) 20.63368954s ago: executing program 4 (id=35): r0 = syz_mount_image$xfs(&(0x7f0000009a00), &(0x7f0000009a40)='./file3\x00', 0x0, &(0x7f0000009a80), 0x0, 0x9718, &(0x7f0000009ac0)="$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") ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000200)=0x1) 20.533914318s ago: executing program 3 (id=36): write(0xffffffffffffffff, &(0x7f0000000140)='disk\n\x00\x00\x00', 0x8) 20.301451103s ago: executing program 3 (id=37): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000100)=""/12) syz_usb_ep_write(r0, 0x81, 0x18, &(0x7f0000000200)='\x00'/24) syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000300)=""/12) syz_usb_ep_write(r0, 0x81, 0x1c, &(0x7f0000000400)='\x00'/28) nanosleep(&(0x7f0000000500)={0x2}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000600)="7777616e3000000000000000000000000100"/40) ioctl(r1, 0x8914, &(0x7f0000000700)="7777616e3100000000000000000000000100"/40) syz_usb_ep_write(r0, 0x81, 0x1a, &(0x7f0000000800)="5744040000000000000057440400000000000000575a00000800") 19.876801565s ago: executing program 4 (id=38): r0 = syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40f30c749308010102030109024a0001010080fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000008a08c83105000000"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000100)={0x1c, &(0x7f0000000200)={0x40, 0x2, 0xc, "0c0000008a08c83105000000"}, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 19.556526843s ago: executing program 5 (id=39): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x3, [0x0, 0x1, 0x2]}}) 191.388516ms ago: executing program 32 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='mem\n', 0x4) 0s ago: executing program 33 (id=29): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406411220600000000000109022e0001010080000904000004ffffff0007050102000200070581020002000705840200020007050202000200"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x100, &(0x7f0000001000)="a0080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808080808") nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000400)={0x80000000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 89.158111][ T5605] cgroup: Unknown subsys name 'net' [ 89.290560][ T5605] cgroup: Unknown subsys name 'cpuset' [ 89.301034][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.944461][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 91.241516][ T24] cfg80211: failed to load regulatory.db [ 93.656523][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.666988][ T5631] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.676070][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.687544][ T5637] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.690091][ T5631] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.697316][ T5637] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.703449][ T5631] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.711621][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.725705][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.731106][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.733017][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.740550][ T5638] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.749981][ T5637] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.765046][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.765169][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.774712][ T5637] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.781319][ T5638] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.790541][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.796435][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.802498][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.810069][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.825658][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.826020][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.834545][ T5638] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.848593][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.856696][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.857612][ T5638] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.875423][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.884011][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.891447][ T5638] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.875674][ T5625] Bluetooth: hci1: command tx timeout [ 95.955347][ T5629] Bluetooth: hci4: command tx timeout [ 95.961931][ T5625] Bluetooth: hci3: command tx timeout [ 95.968033][ T5630] Bluetooth: hci0: command tx timeout [ 95.974151][ T5638] Bluetooth: hci2: command tx timeout [ 95.980742][ T5629] Bluetooth: hci5: command tx timeout [ 96.564162][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.572467][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.580469][ T5619] bridge_slave_0: entered allmulticast mode [ 96.589807][ T5619] bridge_slave_0: entered promiscuous mode [ 96.651931][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.661653][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.669061][ T5619] bridge_slave_1: entered allmulticast mode [ 96.676888][ T5619] bridge_slave_1: entered promiscuous mode [ 96.853881][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.886240][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.893553][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.901368][ T5623] bridge_slave_0: entered allmulticast mode [ 96.909830][ T5623] bridge_slave_0: entered promiscuous mode [ 96.917823][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.925249][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.932773][ T5622] bridge_slave_0: entered allmulticast mode [ 96.940899][ T5622] bridge_slave_0: entered promiscuous mode [ 96.966297][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.984630][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.992121][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.999540][ T5621] bridge_slave_0: entered allmulticast mode [ 97.007530][ T5621] bridge_slave_0: entered promiscuous mode [ 97.017262][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.024411][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.031735][ T5621] bridge_slave_1: entered allmulticast mode [ 97.039610][ T5621] bridge_slave_1: entered promiscuous mode [ 97.048107][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.055479][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.062700][ T5623] bridge_slave_1: entered allmulticast mode [ 97.070894][ T5623] bridge_slave_1: entered promiscuous mode [ 97.091879][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.099305][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.108343][ T5622] bridge_slave_1: entered allmulticast mode [ 97.116383][ T5622] bridge_slave_1: entered promiscuous mode [ 97.246804][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.280104][ T5619] team0: Port device team_slave_0 added [ 97.303735][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.318388][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.331009][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.357140][ T5619] team0: Port device team_slave_1 added [ 97.363032][ T5624] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.370502][ T5624] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.378301][ T5624] bridge_slave_0: entered allmulticast mode [ 97.386353][ T5624] bridge_slave_0: entered promiscuous mode [ 97.397089][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.437963][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.489190][ T5624] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.496452][ T5624] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.503671][ T5624] bridge_slave_1: entered allmulticast mode [ 97.511963][ T5624] bridge_slave_1: entered promiscuous mode [ 97.559364][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.566754][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.574421][ T5620] bridge_slave_0: entered allmulticast mode [ 97.582557][ T5620] bridge_slave_0: entered promiscuous mode [ 97.592440][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.599490][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.625803][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.653814][ T5621] team0: Port device team_slave_0 added [ 97.662973][ T5623] team0: Port device team_slave_0 added [ 97.682506][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.689867][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.697566][ T5620] bridge_slave_1: entered allmulticast mode [ 97.705432][ T5620] bridge_slave_1: entered promiscuous mode [ 97.728088][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.735414][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.761718][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.790507][ T5621] team0: Port device team_slave_1 added [ 97.798716][ T5623] team0: Port device team_slave_1 added [ 97.807088][ T5622] team0: Port device team_slave_0 added [ 97.842573][ T5624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.883714][ T5622] team0: Port device team_slave_1 added [ 97.893661][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.907497][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.933872][ T5624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.956614][ T5629] Bluetooth: hci1: command tx timeout [ 98.030644][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.036324][ T5625] Bluetooth: hci3: command tx timeout [ 98.037940][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.038014][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.043457][ T5630] Bluetooth: hci0: command tx timeout [ 98.072798][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.080141][ T5633] Bluetooth: hci4: command tx timeout [ 98.080277][ T5638] Bluetooth: hci2: command tx timeout [ 98.080377][ T5629] Bluetooth: hci5: command tx timeout [ 98.086662][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.135359][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.156298][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.163309][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.189496][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.215042][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.222153][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.248560][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.262910][ T5620] team0: Port device team_slave_0 added [ 98.292720][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.300545][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.326526][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.351805][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.359086][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.385956][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.399335][ T5620] team0: Port device team_slave_1 added [ 98.420461][ T5624] team0: Port device team_slave_0 added [ 98.430361][ T5624] team0: Port device team_slave_1 added [ 98.454478][ T5619] hsr_slave_0: entered promiscuous mode [ 98.461522][ T5619] hsr_slave_1: entered promiscuous mode [ 98.492544][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.500004][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.526146][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.567667][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.574659][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.600659][ T5624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.614064][ T5624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.621081][ T5624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.647130][ T5624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.674007][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.681720][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.708520][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.814755][ T5623] hsr_slave_0: entered promiscuous mode [ 98.821593][ T5623] hsr_slave_1: entered promiscuous mode [ 98.828256][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 98.834069][ T5623] Cannot create hsr debugfs directory [ 98.851913][ T5621] hsr_slave_0: entered promiscuous mode [ 98.858761][ T5621] hsr_slave_1: entered promiscuous mode [ 98.865638][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 98.871397][ T5621] Cannot create hsr debugfs directory [ 98.910852][ T5622] hsr_slave_0: entered promiscuous mode [ 98.917794][ T5622] hsr_slave_1: entered promiscuous mode [ 98.924272][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 98.930102][ T5622] Cannot create hsr debugfs directory [ 99.034046][ T5624] hsr_slave_0: entered promiscuous mode [ 99.041018][ T5624] hsr_slave_1: entered promiscuous mode [ 99.047760][ T5624] debugfs: 'hsr0' already exists in 'hsr' [ 99.053515][ T5624] Cannot create hsr debugfs directory [ 99.158313][ T5620] hsr_slave_0: entered promiscuous mode [ 99.165126][ T5620] hsr_slave_1: entered promiscuous mode [ 99.171551][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 99.178361][ T5620] Cannot create hsr debugfs directory [ 99.878696][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.896618][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.907173][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.920550][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.929964][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.942198][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.963894][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.975973][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.035413][ T5630] Bluetooth: hci1: command tx timeout [ 100.058310][ T5623] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 100.070414][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.081048][ T5623] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 100.092595][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.101172][ T5623] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 100.111880][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.119315][ T5629] Bluetooth: hci5: command tx timeout [ 100.119898][ T5625] Bluetooth: hci2: command tx timeout [ 100.125288][ T5638] Bluetooth: hci4: command tx timeout [ 100.125657][ T5630] Bluetooth: hci0: command tx timeout [ 100.125818][ T5630] Bluetooth: hci3: command tx timeout [ 100.127901][ T5623] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 100.160032][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.273371][ T5621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.287142][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.307780][ T5621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.319742][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.347296][ T5621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.359379][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.368054][ T5621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.378611][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.498202][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.509985][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.519997][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.532359][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.555671][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.567011][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.591199][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.602015][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.631158][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.721488][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.771707][ T5624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.783760][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.793934][ T5624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.807343][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.817267][ T5624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.829400][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.846228][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.854879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.873157][ T5624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.885636][ T5624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.906031][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.957542][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.964704][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.046061][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.068626][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.075868][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.121992][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.129223][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.137951][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.151005][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.173861][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.185975][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.194438][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.207260][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.236807][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.248748][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.340196][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.380242][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.465348][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.534386][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.541568][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.565783][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.620775][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.628004][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.641465][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.648746][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.731317][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.738544][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.856394][ T5624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.974315][ T5624] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.031291][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.038547][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.090896][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.098174][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.116405][ T5625] Bluetooth: hci1: command tx timeout [ 102.195294][ T5625] Bluetooth: hci3: command tx timeout [ 102.195441][ T5629] Bluetooth: hci5: command tx timeout [ 102.200793][ T5625] Bluetooth: hci4: command tx timeout [ 102.207482][ T5638] Bluetooth: hci2: command tx timeout [ 102.218971][ T5630] Bluetooth: hci0: command tx timeout [ 102.234731][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.431849][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.524070][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.531330][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.627937][ T1515] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.635188][ T1515] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.719661][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.031816][ T5619] veth0_vlan: entered promiscuous mode [ 103.054404][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.123371][ T5619] veth1_vlan: entered promiscuous mode [ 103.393785][ T5619] veth0_macvtap: entered promiscuous mode [ 103.442566][ T5619] veth1_macvtap: entered promiscuous mode [ 103.577488][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.633235][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.732672][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.841649][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.919393][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.967076][ T1016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.046288][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.341181][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.393334][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.429225][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.608873][ T5624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.631070][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.661072][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.701870][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.711007][ T5623] veth0_vlan: entered promiscuous mode [ 104.764103][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 104.810497][ T5623] veth1_vlan: entered promiscuous mode [ 104.867602][ T5622] veth0_vlan: entered promiscuous mode [ 104.962077][ T5622] veth1_vlan: entered promiscuous mode [ 105.069041][ T5624] veth0_vlan: entered promiscuous mode [ 105.094807][ T5623] veth0_macvtap: entered promiscuous mode [ 105.117281][ T5621] veth0_vlan: entered promiscuous mode [ 105.132774][ T5620] veth0_vlan: entered promiscuous mode [ 105.143372][ T5623] veth1_macvtap: entered promiscuous mode [ 105.155211][ T5624] veth1_vlan: entered promiscuous mode [ 105.189328][ T5620] veth1_vlan: entered promiscuous mode [ 105.198641][ T5621] veth1_vlan: entered promiscuous mode [ 105.212620][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.243582][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.278471][ T5622] veth0_macvtap: entered promiscuous mode [ 105.290834][ T5622] veth1_macvtap: entered promiscuous mode [ 105.345646][ T5750] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.355247][ T5624] veth0_macvtap: entered promiscuous mode [ 105.385367][ T5624] veth1_macvtap: entered promiscuous mode [ 105.407981][ T5620] veth0_macvtap: entered promiscuous mode [ 105.442219][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.451545][ T5620] veth1_macvtap: entered promiscuous mode [ 105.483172][ T5621] veth0_macvtap: entered promiscuous mode [ 105.499731][ T369] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.518363][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.544411][ T5750] usb 1-1: config 1 interface 0 has no altsetting 1 [ 105.552340][ T5621] veth1_macvtap: entered promiscuous mode [ 105.572429][ T5750] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 105.574313][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.589549][ T5750] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.589609][ T5750] usb 1-1: Product: syz [ 105.589637][ T5750] usb 1-1: Manufacturer: syz [ 105.589668][ T5750] usb 1-1: SerialNumber: syz [ 105.691759][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.692882][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.710156][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.730589][ T5624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.793904][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.806075][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.817467][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.825816][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.833180][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.836087][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.870422][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.935232][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.985773][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.041534][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.057287][ T5750] dvbdev: DVB: registering new adapter (DEC3000-s) [ 106.094685][ T5750] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC3000-s Frontend)... [ 106.156879][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.277165][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.309897][ T1515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.319128][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.339081][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.341559][ T1515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.352112][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.416622][ T369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.426939][ T369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.438470][ T5764] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 106.446334][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.500342][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.528518][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.555095][ T80] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.607565][ T5764] usb 6-1: not running at top speed; connect to a high speed hub [ 106.615548][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.615627][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.615692][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.615755][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.615820][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.615883][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.670835][ T5764] usb 6-1: New USB device found, idVendor=1943, idProduct=2255, bcdDevice= 0.00 [ 106.689764][ T5750] usb 1-1: USB disconnect, device number 2 [ 106.699559][ T5764] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.767837][ T369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.803222][ T369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.846719][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.851523][ T5764] usb 6-1: Direct firmware load for f2255usb.bin failed with error -2 [ 106.864818][ T5764] usb 6-1: Falling back to sysfs fallback for: f2255usb.bin [ 106.875094][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.876368][ T80] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.899578][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.914560][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.989206][ T5862] lo speed is unknown, defaulting to 1000 [ 107.049386][ T5862] lo speed is unknown, defaulting to 1000 [ 107.099930][ T5764] s2255 6-1:1.0: Firmware invalid. [ 107.132771][ T5862] lo speed is unknown, defaulting to 1000 [ 107.133157][ T5764] Sensoray 2255 driver load failed: 0xffffffed [ 107.241376][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.252074][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.261436][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.279405][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.650921][ T5612] usb 6-1: USB disconnect, device number 2 [ 108.018410][ T30] audit: type=1800 audit(1785885327.192:2): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="idVendor" dev="configfs" ino=8909 res=0 errno=0 [ 108.078990][ T5873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.103831][ T30] audit: type=1800 audit(1785885327.232:3): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="idProduct" dev="configfs" ino=8910 res=0 errno=0 [ 108.183609][ T5875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.185239][ T30] audit: type=1800 audit(1785885327.252:4): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="process_ump" dev="configfs" ino=8916 res=0 errno=0 [ 108.311590][ T30] audit: type=1800 audit(1785885327.252:5): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="ep_name" dev="configfs" ino=8917 res=0 errno=0 [ 108.340369][ T5873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.415496][ T30] audit: type=1800 audit(1785885327.262:6): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="direction" dev="configfs" ino=8918 res=0 errno=0 [ 108.502760][ T30] audit: type=1800 audit(1785885327.272:7): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="name" dev="configfs" ino=8919 res=0 errno=0 [ 108.604427][ T30] audit: type=1800 audit(1785885327.282:8): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="active" dev="configfs" ino=8920 res=0 errno=0 [ 108.679974][ T29] lo speed is unknown, defaulting to 1000 [ 108.692197][ T30] audit: type=1800 audit(1785885327.312:9): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.5" name="UDC" dev="configfs" ino=8922 res=0 errno=0 [ 108.722382][ T5862] infiniband syz0: set active [ 108.727933][ T5862] infiniband syz0: added lo [ 108.790703][ T5868] loop3: detected capacity change from 0 to 32768 [ 108.808629][ T5862] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 108.825454][ T5862] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 108.845815][ T5862] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 108.999445][ T5868] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.002308][ T5870] loop0: detected capacity change from 0 to 32768 [ 109.045541][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.069794][ T5868] XFS (loop3): Ending clean mount [ 109.164220][ T5862] RDS/IB: syz0: added [ 109.179967][ T5870] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.210724][ T5862] smc: adding ib device syz0 with port count 1 [ 109.257430][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 109.274790][ T10] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.02 [ 109.284802][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.295285][ T5862] smc: ib device syz0 port 1 has no pnetid [ 109.365243][ T5853] lo speed is unknown, defaulting to 1000 [ 109.374443][ T5870] XFS (loop0): Ending clean mount [ 109.405625][ T5862] lo speed is unknown, defaulting to 1000 [ 109.656713][ T5624] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.776473][ T29] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 109.803389][ T5619] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.974060][ T29] usb 2-1: New USB device found, idVendor=17e9, idProduct=0000, bcdDevice= 0.00 [ 110.039935][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.173095][ T5909] PM: suspend entry (deep) [ 111.005417][ T48] Filesystems sync: 0.793 seconds [ 111.078095][ T5909] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 111.110534][ T5909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.173848][ T5909] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 111.232689][ T5909] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 111.265231][ T5909] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.329197][ T5909] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 111.430298][ T5920] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 111.438385][ T5909] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 111.461395][ T5920] CIFS: Attempting to mount //127.0.0.1/share [ 111.488832][ T5909] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.524480][ T5909] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 111.531084][ T5862] lo speed is unknown, defaulting to 1000 [ 111.547170][ T5909] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 111.568253][ T5909] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 111.596969][ T5909] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 111.606997][ T29] udl 2-1:1.0: [drm] Unrecognized vendor firmware descriptor [ 111.626010][ T29] [drm:udl_init] *ERROR* Selecting channel failed [ 111.643848][ T5909] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 111.656763][ T5909] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.687094][ T5909] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 111.700743][ T29] [drm] Initialized udl 0.0.1 for 2-1:1.0 on minor 2 [ 111.707781][ T29] [drm] Initialized udl on minor 2 [ 111.729346][ T29] udl 2-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.745457][ T29] udl 2-1:1.0: [drm] Cannot find any crtc or sizes [ 111.760602][ T24] udl 2-1:1.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 111.770803][ T5909] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 111.777596][ T5909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.786505][ T24] udl 2-1:1.0: [drm] Cannot find any crtc or sizes [ 111.800106][ T29] usb 2-1: USB disconnect, device number 2 [ 111.805192][ T5909] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 111.917710][ T5909] Freezing user space processes [ 112.179765][ T5862] lo speed is unknown, defaulting to 1000 [ 112.425465][ T5862] lo speed is unknown, defaulting to 1000 [ 112.668918][ T5862] lo speed is unknown, defaulting to 1000 [ 112.931752][ T5862] lo speed is unknown, defaulting to 1000 [ 113.155999][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.212570][ T5919] lo speed is unknown, defaulting to 1000 [ 113.219269][ T5919] lo speed is unknown, defaulting to 1000 [ 113.226538][ T5919] lo speed is unknown, defaulting to 1000 [ 113.233515][ T5919] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 113.251197][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 113.251314][ T5919] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 113.276857][ T5919] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 113.296979][ T5919] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 113.314096][ T5919] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 113.349621][ T5919] lo speed is unknown, defaulting to 1000 [ 113.357982][ T5919] lo speed is unknown, defaulting to 1000 [ 113.366693][ T5919] lo speed is unknown, defaulting to 1000 [ 113.374551][ T5919] lo speed is unknown, defaulting to 1000 [ 113.383414][ T5919] lo speed is unknown, defaulting to 1000 [ 113.397268][ T5919] lo speed is unknown, defaulting to 1000 [ 113.412635][ T5909] Freezing user space processes completed (elapsed 1.480 seconds) [ 113.420847][ T5909] OOM killer disabled. [ 113.425252][ T5909] Freezing remaining freezable tasks [ 113.476461][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.555727][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout [ 113.715556][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 113.796134][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.235990][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.316877][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.557339][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.635035][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout [ 115.795008][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 115.875234][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 117.315102][ T5630] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.395466][ T5630] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.635222][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.715038][ T5630] Bluetooth: hci5: command 0x0c1a tx timeout [ 117.875047][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 117.955283][ T5630] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.500363][ T5909] Freezing remaining freezable tasks completed (elapsed 5.069 seconds) [ 118.525931][ T5909] printk: Suspending console(s) (use no_console_suspend to debug) [ 118.842280][ T5909] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 118.842384][ T5909] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 118.842486][ T5909] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 118.842594][ T5909] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 118.842684][ T5909] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 118.842788][ T5909] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 118.842891][ T5909] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 118.842983][ T5909] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 118.843090][ T5909] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 118.843187][ T5909] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 118.843281][ T5909] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 118.843386][ T5909] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 118.843478][ T5909] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 118.843573][ T5909] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 118.843676][ T5909] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 118.900340][ T5930] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 119.176086][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 119.981300][ T5909] ACPI: PM: Preparing to enter system sleep state S3 [ 119.982179][ T5909] ACPI: PM: Saving platform NVS memory [ 119.983152][ T5909] Disabling non-boot CPUs ... [ 120.006017][ T5909] smpboot: CPU 1 is now offline [ 120.050168][ T5909] ACPI: PM: Low-level resume complete [ 120.050218][ T5909] ACPI: PM: Restoring platform NVS memory [ 120.076143][ T5909] Enabling non-boot CPUs ... [ 120.077065][ T5909] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 120.097189][ T5909] CPU1 is up [ 120.098100][ T5909] ACPI: PM: Waking up from system sleep state S3 [ 120.238424][ T5947] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 120.734209][ T5978] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 120.971728][ T5909] OOM killer enabled. [ 120.972409][ T5909] Restarting tasks: Starting [ 120.987241][ T5920] CIFS: VFS: cifs_mount failed w/return code = -512 [ 121.013141][ T5909] Restarting tasks: Done [ 121.071541][ T5909] random: crng reseeded on system resumption [ 121.120388][ T5909] PM: suspend exit [ 121.509438][ T5996] rdma_rxe: rxe_newlink: failed to add veth0 [ 121.631527][ T5781] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 121.722667][ T29] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.783938][ T5781] usb 4-1: not running at top speed; connect to a high speed hub [ 121.787712][ T5781] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 121.789012][ T5781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.837557][ T5781] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 121.880813][ T29] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 121.883730][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.938923][ T29] usb 2-1: NFC: intf ffff888036685000 id ffffffff8fc6b9e0 [ 122.085939][ T29] nfcmrvl 2-1:1.0: NFC: registered with nci successfully [ 122.309132][ T5997] loop5: detected capacity change from 0 to 32768 [ 122.340882][ T5997] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.22 (5997) [ 122.466394][ T29] usb 2-1: USB disconnect, device number 3 [ 122.477996][ T6012] CIFS: Attempting to mount //127.0.0.1/share [ 122.489804][ T5997] BTRFS info (device loop5): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 122.500741][ T5997] BTRFS info (device loop5): using sha256 checksum algorithm [ 122.508493][ T29] usb 2-1: NFC: intf ffff888036685000 [ 122.519504][ T6012] CIFS: VFS: Error connecting to socket. Aborting operation. [ 122.535145][ T6012] CIFS: VFS: cifs_mount failed w/return code = -4 [ 122.745702][ T5997] BTRFS info (device loop5): enabling ssd optimizations [ 122.746867][ T5997] BTRFS info (device loop5): turning on async discard [ 122.752912][ T5997] BTRFS info (device loop5): enabling free space tree [ 122.856029][ T5997] loop1: detected capacity change from 0 to 8 [ 122.893810][ T30] audit: type=1800 audit(1785885342.118:10): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="idVendor" dev="configfs" ino=9753 res=0 errno=0 [ 122.910976][ T30] audit: type=1800 audit(1785885342.118:11): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="idProduct" dev="configfs" ino=9754 res=0 errno=0 [ 122.927352][ T30] audit: type=1800 audit(1785885342.128:12): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.26" name="UDC" dev="configfs" ino=9755 res=0 errno=0 [ 122.948664][ T5997] loop2: detected capacity change from 0 to 8 [ 122.989801][ T5997] loop3: detected capacity change from 0 to 8 [ 123.017209][ T5997] BTRFS error (device loop5): balance: mixed groups data and metadata options must be the same [ 123.256517][ T5623] BTRFS info (device loop5): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787 [ 123.541732][ T6004] NFSD: Unable to initialize client recovery tracking! (-110) [ 123.559866][ T6004] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 123.566071][ T6004] NFSD: starting 10-second grace period (net f00003f4) [ 123.596475][ T6043] loop4: detected capacity change from 0 to 512 [ 123.612431][ T5781] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.700040][ T6046] PM: suspend entry (deep) [ 123.792535][ T5781] usb 2-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice= 0.00 [ 123.800817][ T5781] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.848492][ T6043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.859379][ T6043] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.932355][ T5781] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 124.138896][ T5621] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.390486][ T29] usb 4-1: USB disconnect, device number 2 [ 124.928467][ T6060] loop4: detected capacity change from 0 to 32768 [ 124.931690][ T5757] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.959945][ T6060] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 124.998499][ T6060] XFS (loop4): Ending clean mount [ 125.016664][ T6060] XFS (loop4): User initiated shutdown received. [ 125.018331][ T6060] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x16b/0x1a0 (fs/xfs/xfs_fsops.c:464). Shutting down filesystem. [ 125.020548][ T6060] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 125.060798][ T5621] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 125.120626][ T5757] usb 4-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 125.123837][ T5757] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.125076][ T5757] usb 4-1: Product: syz [ 125.125790][ T5757] usb 4-1: Manufacturer: syz [ 125.126495][ T5757] usb 4-1: SerialNumber: syz [ 125.201689][ T6052] NFSD: Unable to initialize client recovery tracking! (-110) [ 125.202895][ T6052] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 125.209010][ T6052] NFSD: starting 90-second grace period (net f00004d4) [ 125.461590][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.635431][ T29] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 125.637720][ T5958] Filesystems sync: 1.928 seconds [ 125.637938][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.641207][ T29] usb 5-1: Product: syz [ 125.645241][ T29] usb 5-1: Manufacturer: syz [ 125.645983][ T29] usb 5-1: SerialNumber: syz [ 125.712251][ T6046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.713673][ T6046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.715652][ T6046] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 125.726847][ T6046] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 125.731459][ T6046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.735810][ T6046] Freezing user space processes [ 125.926666][ T6046] Freezing user space processes completed (elapsed 0.189 seconds) [ 125.930045][ T6046] OOM killer disabled. [ 125.930770][ T6046] Freezing remaining freezable tasks [ 125.977800][ T5978] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.079965][ T5978] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.174108][ T5978] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.273150][ T5978] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.457842][ T5978] bridge_slave_1: left allmulticast mode [ 126.458956][ T5978] bridge_slave_1: left promiscuous mode [ 126.462928][ T5978] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.476787][ T5978] bridge_slave_0: left allmulticast mode [ 126.477727][ T5978] bridge_slave_0: left promiscuous mode [ 126.478944][ T5978] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.794949][ T29] ath6kl: Failed to submit usb control message: -110 [ 126.796177][ T29] ath6kl: unable to send the bmi data to the device: -110 [ 126.799973][ T29] ath6kl: Unable to send get target info: -110 [ 126.816494][ T29] ath6kl: Failed to init ath6kl core: -110 [ 126.830217][ T29] ath6kl_usb 5-1:1.0: probe with driver ath6kl_usb failed with error -110 [ 126.876811][ T5978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.883261][ T5978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.887909][ T5978] bond0 (unregistering): Released all slaves [ 127.493661][ T5978] hsr_slave_0: left promiscuous mode [ 127.495670][ T5978] hsr_slave_1: left promiscuous mode [ 127.497524][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.498610][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.503731][ T5978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.504817][ T5978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.525045][ T5978] veth1_macvtap: left promiscuous mode [ 127.526510][ T5978] veth0_macvtap: left promiscuous mode [ 127.527893][ T5978] veth1_vlan: left promiscuous mode [ 127.528776][ T5978] veth0_vlan: left promiscuous mode [ 127.741525][ T5629] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.751561][ T5629] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.751589][ T5630] Bluetooth: hci4: command 0x0c1a tx timeout [ 127.751620][ T5638] Bluetooth: hci5: command 0x0c1a tx timeout [ 127.752543][ T5630] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.938930][ T5978] team0 (unregistering): Port device team_slave_1 removed [ 127.956929][ T5978] team0 (unregistering): Port device team_slave_0 removed [ 128.166879][ T5942] smc: removing ib device syz0 [ 128.177105][ T5853] lo speed is unknown, defaulting to 1000 [ 128.178046][ T5853] syz0: Port: 1 Link DOWN [ 128.201139][ T5942] smbdirect: ib_dev[syz0] removed [ 129.029610][ T2361] pvrusb2: Failed to submit write-control URB status=-2 [ 129.032425][ T2361] pvrusb2: Device being rendered inoperable [ 129.034540][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 129.037313][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 130.945857][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 130.947473][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.061736][ T5757] kalmia 4-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -110 [ 136.063964][ T5757] kalmia 4-1:1.0: probe with driver kalmia failed with error -110 [ 136.127598][ T6046] Freezing remaining freezable tasks completed (elapsed 10.195 seconds) [ 136.136349][ T6046] printk: Suspending console(s) (use no_console_suspend to debug) [ 136.310684][ T6046] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 136.310801][ T6046] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 136.310907][ T6046] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 136.310987][ T6046] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 136.311092][ T6046] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 136.311194][ T6046] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 136.311376][ T6046] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 136.311566][ T6046] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 136.312124][ T6046] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 136.312292][ T6046] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 136.312459][ T6046] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 136.312625][ T6046] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 136.312793][ T6046] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 136.312973][ T6046] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 136.313212][ T6046] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 136.363721][ T5945] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 137.500020][ T6046] ACPI: PM: Preparing to enter system sleep state S3 [ 137.501727][ T6046] ACPI: PM: Saving platform NVS memory [ 137.501876][ T6046] Disabling non-boot CPUs ... [ 137.515525][ T6046] smpboot: CPU 1 is now offline [ 137.526633][ T6046] ACPI: PM: Low-level resume complete [ 137.526694][ T6046] ACPI: PM: Restoring platform NVS memory [ 137.554342][ T6046] Enabling non-boot CPUs ... [ 137.555217][ T6046] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 137.566315][ T6046] CPU1 is up [ 137.566520][ T6046] ACPI: PM: Waking up from system sleep state S3 [ 137.701327][ T57] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 138.170934][ T36] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 138.172383][ T5944] usb 1-1: reset high-speed USB device number 3 using dummy_hcd [ 138.180943][ T5941] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 138.180984][ T5926] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 138.301263][ T36] usb 5-1: device descriptor read/64, error -32 [ 138.310856][ T5926] usb 2-1: device descriptor read/64, error -32 [ 138.321137][ T5944] usb 1-1: device firmware changed [ 138.550801][ T5926] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 138.560843][ T36] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 138.680819][ T5926] usb 2-1: device descriptor read/64, error -32 [ 138.700765][ T36] usb 5-1: device descriptor read/64, error -32 [ 138.930797][ T5926] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 138.941869][ T36] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 138.961167][ T5926] usb 2-1: device descriptor read/8, error -32 [ 138.961281][ T36] usb 5-1: device descriptor read/8, error -32 [ 139.140832][ T36] raw-gadget.2 gadget.4: failed to queue resume event [ 139.150814][ T5926] raw-gadget.1 gadget.1: failed to queue resume event [ 139.200772][ T36] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 139.210857][ T5926] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 139.221012][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 139.221470][ T36] usb 5-1: device descriptor read/8, error -32 [ 139.244462][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 139.244595][ T5926] usb 2-1: device descriptor read/8, error -32 [ 139.330981][ T36] raw-gadget.2 gadget.4: failed to queue suspend event [ 139.361107][ T5926] raw-gadget.1 gadget.1: failed to queue suspend event [ 143.350835][ T5941] usb 4-1: device descriptor read/64, error -110 [ 143.590856][ T5941] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 143.720858][ T5941] usb 4-1: device descriptor read/64, error -32 [ 143.960860][ T5941] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 143.981236][ T5941] usb 4-1: device descriptor read/8, error -32 [ 144.160957][ T5941] raw-gadget.0 gadget.3: failed to queue resume event [ 144.220814][ T5941] usb 4-1: reset high-speed USB device number 3 using dummy_hcd [ 144.241075][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 144.241263][ T5941] usb 4-1: device descriptor read/8, error -32 [ 144.350815][ T5941] raw-gadget.0 gadget.3: failed to queue suspend event [ 144.433056][ T6046] OOM killer enabled. [ 144.433705][ T6046] Restarting tasks: Starting [ 144.437720][ T5781] usb 1-1: USB disconnect, device number 3 [ 144.460373][ T5757] usb 2-1: USB disconnect, device number 4 [ 144.489845][ T6046] Restarting tasks: Done [ 144.515350][ T6046] random: crng reseeded on system resumption [ 144.536583][ T6046] PM: suspend exit [ 144.568060][ T10] usb 5-1: USB disconnect, device number 2 [ 144.747933][ T185] usb 4-1: USB disconnect, device number 3 [ 144.777918][ T6066] raw-gadget.0 gadget.3: failed to queue disconnect event [ 144.801060][ T6061] raw-gadget.1 gadget.1: failed to queue disconnect event [ 144.821112][ T6076] raw-gadget.2 gadget.4: failed to queue disconnect event [ 145.378639][ T5781] ================================================================== [ 145.379851][ T5781] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670 [ 145.381018][ T5781] Write of size 8 at addr ffff88807d228350 by task kworker/0:6/5781 [ 145.382112][ T5781] [ 145.382480][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 145.382526][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 145.382552][ T5781] Workqueue: usb_hub_wq hub_event [ 145.382606][ T5781] Call Trace: [ 145.382618][ T5781] [ 145.382630][ T5781] dump_stack_lvl+0x100/0x190 [ 145.382672][ T5781] print_report+0x13d/0x4b0 [ 145.382728][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.382777][ T5781] ? __virt_addr_valid+0x239/0x430 [ 145.382825][ T5781] ? snd_usb_midi_v2_free+0x52d/0x670 [ 145.382873][ T5781] kasan_report+0xdf/0x1c0 [ 145.382915][ T5781] ? snd_usb_midi_v2_free+0x52d/0x670 [ 145.382969][ T5781] snd_usb_midi_v2_free+0x52d/0x670 [ 145.383017][ T5781] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 145.383078][ T5781] snd_usb_midi_v2_free_all+0x85/0xe0 [ 145.383130][ T5781] snd_usb_audio_free+0x4e/0x120 [ 145.383190][ T5781] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 145.383255][ T5781] release_card_device+0xb2/0x1a0 [ 145.383296][ T5781] ? __pfx_release_card_device+0x10/0x10 [ 145.383338][ T5781] device_release+0xd2/0x270 [ 145.383380][ T5781] kobject_put+0x1f7/0x640 [ 145.383414][ T5781] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 145.383461][ T5781] put_device+0x1f/0x30 [ 145.383500][ T5781] snd_card_free_when_closed+0x2b/0x40 [ 145.383545][ T5781] usb_audio_disconnect+0x210/0x680 [ 145.383605][ T5781] usb_unbind_interface+0x1dd/0x9e0 [ 145.383670][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.383718][ T5781] ? __pfx_usb_unbind_interface+0x10/0x10 [ 145.383779][ T5781] device_remove+0x12a/0x180 [ 145.383829][ T5781] device_release_driver_internal+0x44e/0x620 [ 145.383888][ T5781] ? __entry_text_end+0x1020b5/0x1020b9 [ 145.383936][ T5781] bus_remove_device+0x2bc/0x560 [ 145.383986][ T5781] ? __pfx_bus_remove_device+0x10/0x10 [ 145.384033][ T5781] ? __pfx_device_remove_attrs+0x10/0x10 [ 145.384089][ T5781] device_del+0x376/0x9b0 [ 145.384142][ T5781] ? __pfx_device_del+0x10/0x10 [ 145.384192][ T5781] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 145.384256][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.384307][ T5781] usb_disable_device+0x367/0x810 [ 145.384359][ T5781] ? mark_held_locks+0x40/0x70 [ 145.384402][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.384454][ T5781] usb_disconnect+0x2e2/0x9a0 [ 145.384511][ T5781] hub_event+0x1c4f/0x4a60 [ 145.384581][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.384628][ T5781] ? __lock_acquire+0x49f/0x1a40 [ 145.384670][ T5781] ? do_raw_spin_unlock+0x145/0x1e0 [ 145.384723][ T5781] ? __pfx_hub_event+0x10/0x10 [ 145.384776][ T5781] ? debug_object_deactivate+0x2e4/0x3b0 [ 145.384838][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.384888][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.384937][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.384984][ T5781] ? rcu_is_watching+0x12/0xc0 [ 145.385045][ T5781] process_one_work+0xa23/0x1940 [ 145.385094][ T5781] ? __pfx_process_one_work+0x10/0x10 [ 145.385130][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.385186][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.385241][ T5781] worker_thread+0x5ef/0xe50 [ 145.385285][ T5781] ? __pfx_worker_thread+0x10/0x10 [ 145.385324][ T5781] ? kthread+0x13a/0x450 [ 145.385383][ T5781] ? __pfx_worker_thread+0x10/0x10 [ 145.385419][ T5781] kthread+0x370/0x450 [ 145.385479][ T5781] ? __pfx_kthread+0x10/0x10 [ 145.385541][ T5781] ret_from_fork+0x72b/0xd50 [ 145.385593][ T5781] ? __pfx_ret_from_fork+0x10/0x10 [ 145.385645][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 145.385692][ T5781] ? __switch_to+0x800/0x10f0 [ 145.385754][ T5781] ? __switch_to_asm+0x39/0x70 [ 145.385809][ T5781] ? __pfx_kthread+0x10/0x10 [ 145.385871][ T5781] ret_from_fork_asm+0x1a/0x30 [ 145.385937][ T5781] [ 145.385951][ T5781] [ 145.435963][ T5781] Allocated by task 10: [ 145.436558][ T5781] kasan_save_stack+0x30/0x50 [ 145.437266][ T5781] kasan_save_track+0x14/0x30 [ 145.437995][ T5781] __kasan_kmalloc+0xaa/0xb0 [ 145.438704][ T5781] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 145.439514][ T5781] snd_ump_endpoint_new+0x93/0x470 [ 145.440275][ T5781] create_midi2_ump+0x2dd/0x920 [ 145.440982][ T5781] snd_usb_midi_v2_create+0x11fa/0x4070 [ 145.441804][ T5781] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 145.442670][ T5781] usb_audio_probe+0xf05/0x3b10 [ 145.443413][ T5781] usb_probe_interface+0x303/0x8f0 [ 145.444203][ T5781] really_probe+0x241/0xa60 [ 145.444880][ T5781] __driver_probe_device+0x20e/0x450 [ 145.445667][ T5781] driver_probe_device+0x4a/0x140 [ 145.446408][ T5781] __device_attach_driver+0x1df/0x320 [ 145.447191][ T5781] bus_for_each_drv+0x159/0x1e0 [ 145.447934][ T5781] __device_attach+0x1e4/0x4d0 [ 145.448633][ T5781] device_initial_probe+0xaf/0xd0 [ 145.449373][ T5781] bus_probe_device+0x64/0x160 [ 145.450101][ T5781] device_add+0x121d/0x1970 [ 145.450779][ T5781] usb_set_configuration+0xd97/0x1c60 [ 145.451562][ T5781] usb_generic_driver_probe+0xa1/0xe0 [ 145.452345][ T5781] usb_probe_device+0xef/0x400 [ 145.453048][ T5781] really_probe+0x241/0xa60 [ 145.453713][ T5781] __driver_probe_device+0x20e/0x450 [ 145.454496][ T5781] driver_probe_device+0x4a/0x140 [ 145.455240][ T5781] __device_attach_driver+0x1df/0x320 [ 145.456046][ T5781] bus_for_each_drv+0x159/0x1e0 [ 145.456752][ T5781] __device_attach+0x1e4/0x4d0 [ 145.457459][ T5781] device_initial_probe+0xaf/0xd0 [ 145.458220][ T5781] bus_probe_device+0x64/0x160 [ 145.458953][ T5781] device_add+0x121d/0x1970 [ 145.459639][ T5781] usb_new_device.cold+0x685/0x115c [ 145.460390][ T5781] hub_event+0x30a3/0x4a60 [ 145.461081][ T5781] process_one_work+0xa23/0x1940 [ 145.461829][ T5781] worker_thread+0x5ef/0xe50 [ 145.462536][ T5781] kthread+0x370/0x450 [ 145.463214][ T5781] ret_from_fork+0x72b/0xd50 [ 145.463931][ T5781] ret_from_fork_asm+0x1a/0x30 [ 145.464634][ T5781] [ 145.464979][ T5781] Freed by task 5781: [ 145.465540][ T5781] kasan_save_stack+0x30/0x50 [ 145.466287][ T5781] kasan_save_track+0x14/0x30 [ 145.467012][ T5781] kasan_save_free_info+0x3b/0x70 [ 145.467783][ T5781] __kasan_slab_free+0x5f/0x80 [ 145.468505][ T5781] kfree+0x22b/0x6c0 [ 145.469163][ T5781] snd_rawmidi_dev_free+0x3e/0x60 [ 145.470037][ T5781] __snd_device_free+0x1a3/0x300 [ 145.470793][ T5781] snd_device_free_all+0xf3/0x220 [ 145.471551][ T5781] release_card_device+0x77/0x1a0 [ 145.472295][ T5781] device_release+0xd2/0x270 [ 145.472985][ T5781] kobject_put+0x1f7/0x640 [ 145.473635][ T5781] put_device+0x1f/0x30 [ 145.474308][ T5781] snd_card_free_when_closed+0x2b/0x40 [ 145.475126][ T5781] usb_audio_disconnect+0x210/0x680 [ 145.475905][ T5781] usb_unbind_interface+0x1dd/0x9e0 [ 145.476673][ T5781] device_remove+0x12a/0x180 [ 145.477352][ T5781] device_release_driver_internal+0x44e/0x620 [ 145.478236][ T5781] bus_remove_device+0x2bc/0x560 [ 145.479022][ T5781] device_del+0x376/0x9b0 [ 145.479679][ T5781] usb_disable_device+0x367/0x810 [ 145.480409][ T5781] usb_disconnect+0x2e2/0x9a0 [ 145.481217][ T5781] hub_event+0x1c4f/0x4a60 [ 145.481879][ T5781] process_one_work+0xa23/0x1940 [ 145.482593][ T5781] worker_thread+0x5ef/0xe50 [ 145.483271][ T5781] kthread+0x370/0x450 [ 145.483904][ T5781] ret_from_fork+0x72b/0xd50 [ 145.484765][ T5781] ret_from_fork_asm+0x1a/0x30 [ 145.485484][ T5781] [ 145.485884][ T5781] The buggy address belongs to the object at ffff88807d228000 [ 145.485884][ T5781] which belongs to the cache kmalloc-4k of size 4096 [ 145.487918][ T5781] The buggy address is located 848 bytes inside of [ 145.487918][ T5781] freed 4096-byte region [ffff88807d228000, ffff88807d229000) [ 145.489825][ T5781] [ 145.490189][ T5781] The buggy address belongs to the physical page: [ 145.491106][ T5781] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d228 [ 145.492404][ T5781] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 145.493614][ T5781] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 145.494672][ T5781] page_type: f5(slab) [ 145.495271][ T5781] raw: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 145.496471][ T5781] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 145.497665][ T5781] head: 00fff00000000040 ffff88813fe22140 dead000000000100 dead000000000122 [ 145.498871][ T5781] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 145.500107][ T5781] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 145.501349][ T5781] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 145.502546][ T5781] page dumped because: kasan: bad access detected [ 145.503484][ T5781] page_owner tracks the page as allocated [ 145.504273][ T5781] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5879, tgid 5878 (syz.5.9), ts 109579311101, free_ts 109572587082 [ 145.507138][ T5781] post_alloc_hook+0xfd/0x120 [ 145.508006][ T5781] get_page_from_freelist+0xf48/0x3530 [ 145.508888][ T5781] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 145.509773][ T5781] new_slab+0xa2/0x640 [ 145.510415][ T5781] refill_objects+0xe3/0x410 [ 145.511111][ T5781] __pcs_replace_empty_main+0x376/0x680 [ 145.512006][ T5781] __kvmalloc_node_noprof+0x793/0x970 [ 145.512820][ T5781] open_substream+0x311/0x970 [ 145.513539][ T5781] rawmidi_open_priv+0x595/0x6f0 [ 145.514271][ T5781] snd_rawmidi_open+0x4c9/0xba0 [ 145.514988][ T5781] soundcore_open+0x2e3/0x5a0 [ 145.515696][ T5781] chrdev_open+0x234/0x6a0 [ 145.516380][ T5781] do_dentry_open+0x6ab/0x14d0 [ 145.517107][ T5781] vfs_open+0x82/0x3f0 [ 145.517744][ T5781] path_openat+0x2873/0x4280 [ 145.518427][ T5781] do_file_open+0x20e/0x430 [ 145.519118][ T5781] page last free pid 5605 tgid 5605 stack trace: [ 145.519995][ T5781] __free_frozen_pages+0x79f/0x1090 [ 145.520785][ T5781] __folio_put+0x3b4/0x5f0 [ 145.521442][ T5781] skb_release_data+0x649/0x8e0 [ 145.522162][ T5781] __kfree_skb+0x4f/0x70 [ 145.522816][ T5781] tcp_ack+0x2079/0x7650 [ 145.523449][ T5781] tcp_rcv_established+0x116d/0x3990 [ 145.524244][ T5781] tcp_v4_do_rcv+0xbb6/0x1260 [ 145.524942][ T5781] tcp_v4_rcv+0x2ec1/0x4840 [ 145.525619][ T5781] ip_protocol_deliver_rcu+0xba/0x4d0 [ 145.526461][ T5781] ip_local_deliver_finish+0x3f2/0x6e0 [ 145.527370][ T5781] ip_local_deliver+0x19a/0x1f0 [ 145.528157][ T5781] ip_list_rcv_finish+0xa14/0xce0 [ 145.528939][ T5781] ip_list_rcv+0x338/0x450 [ 145.529685][ T5781] __netif_receive_skb_list_core+0x74c/0x940 [ 145.530563][ T5781] netif_receive_skb_list_internal+0x722/0xd40 [ 145.531467][ T5781] napi_complete_done+0x221/0x940 [ 145.532224][ T5781] [ 145.532606][ T5781] Memory state around the buggy address: [ 145.533392][ T5781] ffff88807d228200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.534511][ T5781] ffff88807d228280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.535893][ T5781] >ffff88807d228300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.537015][ T5781] ^ [ 145.537980][ T5781] ffff88807d228380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.539085][ T5781] ffff88807d228400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 145.540205][ T5781] ================================================================== [ 145.696021][ T5638] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 145.704733][ T5638] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 145.707496][ T5638] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 145.710688][ T5638] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 145.713174][ T5638] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 145.752584][ T5638] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 145.757941][ T5638] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 145.759972][ T5638] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 145.762657][ T5638] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 145.764917][ T5638] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to send rpc fd=3 want=280 sent=0 n=-1 (errno 32: Broken pipe) [ 146.144158][ T5781] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 146.145339][ T5781] CPU: 0 UID: 0 PID: 5781 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT(full) [ 146.146632][ T5781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 146.148000][ T5781] Workqueue: usb_hub_wq hub_event [ 146.148963][ T5781] Call Trace: [ 146.149606][ T5781] [ 146.150067][ T5781] dump_stack_lvl+0x100/0x190 [ 146.150834][ T5781] vpanic+0x552/0x970 [ 146.151444][ T5781] ? __pfx_vpanic+0x10/0x10 [ 146.152216][ T5781] ? mark_held_locks+0x40/0x70 [ 146.152929][ T5781] ? __pfx___schedule+0x10/0x10 [ 146.153659][ T5781] ? snd_usb_midi_v2_free+0x52d/0x670 [ 146.154535][ T5781] panic+0xd1/0xe0 [ 146.155091][ T5781] ? __pfx_panic+0x10/0x10 [ 146.155753][ T5781] ? preempt_schedule_common+0x42/0xc0 [ 146.156554][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.157384][ T5781] ? preempt_schedule_thunk+0x16/0x40 [ 146.158362][ T5781] end_report.part.0+0x68/0x90 [ 146.159147][ T5781] kasan_report.cold+0xe/0x18 [ 146.159883][ T5781] ? snd_usb_midi_v2_free+0x52d/0x670 [ 146.160684][ T5781] snd_usb_midi_v2_free+0x52d/0x670 [ 146.161483][ T5781] ? __pfx_snd_ctl_dev_free+0x10/0x10 [ 146.162294][ T5781] snd_usb_midi_v2_free_all+0x85/0xe0 [ 146.163113][ T5781] snd_usb_audio_free+0x4e/0x120 [ 146.163881][ T5781] ? __pfx_snd_usb_audio_free+0x10/0x10 [ 146.165291][ T5781] release_card_device+0xb2/0x1a0 [ 146.166342][ T5781] ? __pfx_release_card_device+0x10/0x10 [ 146.167349][ T5781] device_release+0xd2/0x270 [ 146.168094][ T5781] kobject_put+0x1f7/0x640 [ 146.168804][ T5781] ? snd_card_disconnect.part.0+0x443/0x5b0 [ 146.169675][ T5781] put_device+0x1f/0x30 [ 146.170339][ T5781] snd_card_free_when_closed+0x2b/0x40 [ 146.171180][ T5781] usb_audio_disconnect+0x210/0x680 [ 146.171969][ T5781] usb_unbind_interface+0x1dd/0x9e0 [ 146.172783][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.173647][ T5781] ? __pfx_usb_unbind_interface+0x10/0x10 [ 146.174497][ T5781] device_remove+0x12a/0x180 [ 146.175187][ T5781] device_release_driver_internal+0x44e/0x620 [ 146.176073][ T5781] ? __entry_text_end+0x1020b5/0x1020b9 [ 146.176891][ T5781] bus_remove_device+0x2bc/0x560 [ 146.177652][ T5781] ? __pfx_bus_remove_device+0x10/0x10 [ 146.178451][ T5781] ? __pfx_device_remove_attrs+0x10/0x10 [ 146.179526][ T5781] device_del+0x376/0x9b0 [ 146.180293][ T5781] ? __pfx_device_del+0x10/0x10 [ 146.181028][ T5781] ? __pfx___pm_runtime_barrier+0x10/0x10 [ 146.181862][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.182691][ T5781] usb_disable_device+0x367/0x810 [ 146.183435][ T5781] ? mark_held_locks+0x40/0x70 [ 146.184162][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.185008][ T5781] usb_disconnect+0x2e2/0x9a0 [ 146.185754][ T5781] hub_event+0x1c4f/0x4a60 [ 146.186451][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.187319][ T5781] ? __lock_acquire+0x49f/0x1a40 [ 146.188238][ T5781] ? do_raw_spin_unlock+0x145/0x1e0 [ 146.189057][ T5781] ? __pfx_hub_event+0x10/0x10 [ 146.189807][ T5781] ? debug_object_deactivate+0x2e4/0x3b0 [ 146.191094][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.192253][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.193353][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.194270][ T5781] ? rcu_is_watching+0x12/0xc0 [ 146.195051][ T5781] process_one_work+0xa23/0x1940 [ 146.195903][ T5781] ? __pfx_process_one_work+0x10/0x10 [ 146.196859][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.197729][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.198563][ T5781] worker_thread+0x5ef/0xe50 [ 146.199470][ T5781] ? __pfx_worker_thread+0x10/0x10 [ 146.200236][ T5781] ? kthread+0x13a/0x450 [ 146.200894][ T5781] ? __pfx_worker_thread+0x10/0x10 [ 146.201632][ T5781] kthread+0x370/0x450 [ 146.202258][ T5781] ? __pfx_kthread+0x10/0x10 [ 146.202957][ T5781] ret_from_fork+0x72b/0xd50 [ 146.203660][ T5781] ? __pfx_ret_from_fork+0x10/0x10 [ 146.204412][ T5781] ? srso_alias_return_thunk+0x5/0xfbef5 [ 146.205225][ T5781] ? __switch_to+0x800/0x10f0 [ 146.205930][ T5781] ? __switch_to_asm+0x39/0x70 [ 146.206640][ T5781] ? __pfx_kthread+0x10/0x10 [ 146.207345][ T5781] ret_from_fork_asm+0x1a/0x30 [ 146.208078][ T5781] [ 146.208859][ T5781] Kernel Offset: disabled [ 146.209537][ T5781] Rebooting in 86400 seconds..