last executing test programs: 3.728839233s ago: executing program 2 (id=167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x2000884c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140016"], 0x4c}, 0x1, 0x0, 0x0, 0x40080}, 0x14) 3.575798616s ago: executing program 2 (id=169): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r1, 0x401, 0x70bd24, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_PMK={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) 3.40375242s ago: executing program 2 (id=170): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_X86_SET_MSR_FILTER(r2, 0x4188aec6, &(0x7f0000002e80)={0x1, [{0x1, 0x0, 0x8, 0x0}, {0x3, 0x0, 0xf4d, 0x0}, {0x1, 0x3008, 0x3ff, &(0x7f00000006c0)="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"}, {0x2, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x4de8, 0x0}, {0x4, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9185, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x0, 0x0}, {0x0, 0x0, 0xffff, 0x0}, {0x0, 0x0, 0x3, 0x0}]}) 3.01492042s ago: executing program 2 (id=172): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) flock(r1, 0x6) 2.945998302s ago: executing program 0 (id=173): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) mbind(&(0x7f0000582000/0x1000)=nil, 0x1000, 0x8003, &(0x7f0000000000)=0x7, 0x1c0, 0x0) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 2.743020006s ago: executing program 2 (id=174): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2010018, &(0x7f0000000540)={[{@nodiscard}, {@nocheckpoint_merge}, {@resgid}, {@six_active_logs}, {@flush_merge}, {@grpjquota={'grpjquota', 0x3d, '!'}}, {@acl}, {@noacl}, {@nobarrier}, {@lfs_mode}, {@jqfmt_vfsold}, {@compress_cache}, {@fault_type={'fault_type', 0x3d, 0x4}}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103) 1.33285815s ago: executing program 3 (id=181): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='se', 0x2) 1.209670143s ago: executing program 1 (id=182): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) write$binfmt_elf32(r0, &(0x7f00000005c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80, 0xd, 0x4, 0x0, 0x100020001, 0x2, 0x6, 0x1, 0xdd, 0x38, 0x345, 0x8, 0x5, 0x20, 0x1, 0x5, 0x9, 0x100}, [{0x3, 0x4, 0x5, 0x6, 0x80, 0x6, 0x2, 0x5ba2}]}, 0x58) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.094497956s ago: executing program 0 (id=183): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x24, 0x0, &(0x7f0000000000)) 1.014999907s ago: executing program 3 (id=184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "41b57012b47bc8e8d8e3484d9c5998b3"}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x8, 0x1a95, 0x88ad, 0x2, 0x7, 0x2752}}, {0x4}}]}]}, 0x6c}}, 0x0) 932.689079ms ago: executing program 2 (id=185): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)="0200000000000038", 0x8) 901.64282ms ago: executing program 1 (id=186): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) 840.448862ms ago: executing program 3 (id=187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbf8, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) 813.904462ms ago: executing program 0 (id=188): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0x0, 0x8080, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmmsg$inet(r0, &(0x7f00000051c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}}, {{&(0x7f0000000500)={0x2, 0x4e20, @remote}, 0x10, 0x0}}], 0x2, 0x927c408517621174) 691.051445ms ago: executing program 1 (id=189): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fcntl$lock(r0, 0x25, &(0x7f0000000380)={0x1, 0x0, 0x3, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000100)={0x1, 0x0, 0x9, 0xfffd}) fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x2, 0x1, 0x40000007, 0x7ffc}) 642.267305ms ago: executing program 0 (id=190): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0x6, [@typedef={0x6, 0x0, 0x0, 0x8, 0x5}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x4}, @var={0xe, 0x0, 0x0, 0xe, 0x2, 0x2}, @enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x3, 0x7}]}, @ptr={0x8}, @volatile={0x80000001, 0x0, 0x0, 0x9, 0x4}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x2e]}}, 0x0, 0x72, 0x0, 0x1, 0x3, 0x10000}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000140001002bbd7000ffdbdf25020000fd", @ANYRES32=r1, @ANYBLOB="08000b00e000000108000200a4141403290006"], 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40010) 629.206366ms ago: executing program 3 (id=191): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f045}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x4, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5, 0x9, 0x5, 0xffff2d37, 0x0, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0xe, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x48, 0x4c74, 0x80000000, 0x242, 0x3, 0x4, 0x0, 0x80008071, 0x7, 0x8, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x3, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x4, 0xc8, 0xf9, 0xe, 0x2c0, 0x7, 0x209, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x8000047, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x24f, 0x42, 0x3], [0x7, 0x408, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x0, 0x4, 0x2950bfaf, 0x1000, 0x4b2760ed, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2eb, 0x0, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x1, 0x8, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x201, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x2, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x6b, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x9, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x400007, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 521.558288ms ago: executing program 1 (id=192): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x8, 0x5, 0x14, 0x1}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000d00000000000000fcffffff18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000031000000850000000c000007b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 396.909091ms ago: executing program 3 (id=193): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_LOCK(r1, 0x6405) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x0, 0x7d, 0x100, 0xf, 0x10, 0x6, 0x2, 0xf, 0x10, 0xfffffffd, 0xffffffff, 0x6e, 0x0, 0x0, 0x0}) 373.817572ms ago: executing program 1 (id=194): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 345.731262ms ago: executing program 0 (id=195): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x204031, 0xffffffffffffffff, 0x23ec1000) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r0, 0x1, &(0x7f0000000140)=[&(0x7f0000fff000/0x1000)=nil], 0x0, &(0x7f00000002c0), 0x2) 154.757846ms ago: executing program 3 (id=196): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x1020008, r0}) 70.558288ms ago: executing program 0 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='1', 0x1) 0s ago: executing program 1 (id=198): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/fs/bcache/register\x00', 0x1, 0x0) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000680)={0xa0, 0xfffffffffffffff5, 0x0, {{0x1, 0x1, 0x1ff, 0x10000000000000, 0x4248, 0x6, {0x6, 0x100000000000000, 0x6, 0x0, 0x5, 0x1680000000000000, 0x9a1, 0x0, 0x1, 0x4000, 0x5, 0x0, 0x0, 0x9, 0x5bcf}}, {0x0, 0x2}}}, 0xa0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. [ 74.407306][ T5762] cgroup: Unknown subsys name 'net' [ 74.542736][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.341568][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.947717][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.963321][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.977560][ T5783] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.986366][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.995950][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.005923][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.013724][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.023633][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.036897][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.037771][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.053408][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.054925][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.084726][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.105708][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.113052][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.124884][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.126672][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.133495][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.146440][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.148211][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.153571][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.162450][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.176047][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.184107][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.558107][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 78.780079][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.797238][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.806151][ T5773] bridge_slave_0: entered allmulticast mode [ 78.813911][ T5773] bridge_slave_0: entered promiscuous mode [ 78.822860][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 78.859604][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.866916][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.874528][ T5773] bridge_slave_1: entered allmulticast mode [ 78.881377][ T5773] bridge_slave_1: entered promiscuous mode [ 78.899897][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 78.943591][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.955926][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 78.988952][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.075536][ T5773] team0: Port device team_slave_0 added [ 79.082160][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.091378][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.098894][ T5779] bridge_slave_0: entered allmulticast mode [ 79.106636][ T5779] bridge_slave_0: entered promiscuous mode [ 79.115153][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.122338][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.129660][ T5779] bridge_slave_1: entered allmulticast mode [ 79.136904][ T5779] bridge_slave_1: entered promiscuous mode [ 79.160296][ T5773] team0: Port device team_slave_1 added [ 79.249463][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.256846][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.264101][ T5778] bridge_slave_0: entered allmulticast mode [ 79.271393][ T5778] bridge_slave_0: entered promiscuous mode [ 79.279419][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.286715][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.316312][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.330704][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.351522][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.361442][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.370527][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.378067][ T5778] bridge_slave_1: entered allmulticast mode [ 79.385264][ T5778] bridge_slave_1: entered promiscuous mode [ 79.392350][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.402331][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.429162][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.501887][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.510286][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.517559][ T5777] bridge_slave_0: entered allmulticast mode [ 79.524953][ T5777] bridge_slave_0: entered promiscuous mode [ 79.567810][ T5779] team0: Port device team_slave_0 added [ 79.574044][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.581596][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.589504][ T5777] bridge_slave_1: entered allmulticast mode [ 79.596484][ T5777] bridge_slave_1: entered promiscuous mode [ 79.606457][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.620487][ T5773] hsr_slave_0: entered promiscuous mode [ 79.627728][ T5773] hsr_slave_1: entered promiscuous mode [ 79.636464][ T5779] team0: Port device team_slave_1 added [ 79.663679][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.698654][ T5778] team0: Port device team_slave_0 added [ 79.742388][ T5778] team0: Port device team_slave_1 added [ 79.749304][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.756853][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.783763][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.797074][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.804243][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.830841][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.846288][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.891531][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.919194][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.928323][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.955254][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.002637][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.009850][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.036984][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.052373][ T5777] team0: Port device team_slave_0 added [ 80.072076][ T5777] team0: Port device team_slave_1 added [ 80.122966][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.130014][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.156061][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.167591][ T51] Bluetooth: hci0: command tx timeout [ 80.191640][ T5779] hsr_slave_0: entered promiscuous mode [ 80.198608][ T5779] hsr_slave_1: entered promiscuous mode [ 80.205514][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.213324][ T5779] Cannot create hsr debugfs directory [ 80.220001][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.227354][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.253910][ T51] Bluetooth: hci1: command tx timeout [ 80.259647][ T51] Bluetooth: hci3: command tx timeout [ 80.264715][ T5785] Bluetooth: hci2: command tx timeout [ 80.271171][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.330970][ T5778] hsr_slave_0: entered promiscuous mode [ 80.337376][ T5778] hsr_slave_1: entered promiscuous mode [ 80.343512][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.351743][ T5778] Cannot create hsr debugfs directory [ 80.459750][ T5777] hsr_slave_0: entered promiscuous mode [ 80.466750][ T5777] hsr_slave_1: entered promiscuous mode [ 80.473304][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.481491][ T5777] Cannot create hsr debugfs directory [ 80.693444][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.722491][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.739662][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.782514][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.898173][ T5779] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.929059][ T5779] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.940182][ T5779] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.953068][ T5779] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.001732][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.022324][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.038369][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.078671][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.114428][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.143518][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.161661][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.173046][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.327140][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.350768][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.386856][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.427276][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.452314][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.459641][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.472355][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.479501][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.515085][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.528174][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.535441][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.546110][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.553533][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.617902][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.646473][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.683722][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.691209][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.710056][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.717346][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.770431][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.864009][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.871387][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.932035][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.939466][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.061853][ T5777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.221801][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.246533][ T5776] Bluetooth: hci0: command tx timeout [ 82.273269][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.324746][ T5776] Bluetooth: hci3: command tx timeout [ 82.330776][ T5776] Bluetooth: hci1: command tx timeout [ 82.339374][ T51] Bluetooth: hci2: command tx timeout [ 82.470920][ T5773] veth0_vlan: entered promiscuous mode [ 82.488761][ T5773] veth1_vlan: entered promiscuous mode [ 82.521849][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.562628][ T5779] veth0_vlan: entered promiscuous mode [ 82.582598][ T5773] veth0_macvtap: entered promiscuous mode [ 82.599804][ T5779] veth1_vlan: entered promiscuous mode [ 82.618424][ T5773] veth1_macvtap: entered promiscuous mode [ 82.647958][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.673723][ T5778] veth0_vlan: entered promiscuous mode [ 82.698830][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.737863][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.747886][ T5779] veth0_macvtap: entered promiscuous mode [ 82.763193][ T5778] veth1_vlan: entered promiscuous mode [ 82.788492][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.798359][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.813000][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.822595][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.836774][ T5779] veth1_macvtap: entered promiscuous mode [ 82.889718][ T5777] veth0_vlan: entered promiscuous mode [ 82.971481][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.985434][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.000803][ T5777] veth1_vlan: entered promiscuous mode [ 83.009837][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.022229][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.035230][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.077505][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.090454][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.101717][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.111731][ T5778] veth0_macvtap: entered promiscuous mode [ 83.138675][ T5779] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.147932][ T5779] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.157140][ T5779] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.166025][ T5779] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.180029][ T5778] veth1_macvtap: entered promiscuous mode [ 83.192759][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.200679][ T5777] veth0_macvtap: entered promiscuous mode [ 83.206583][ T5777] veth1_macvtap: entered promiscuous mode [ 83.220236][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.301982][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.330087][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.340934][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.352974][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.369522][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.380008][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.390625][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.401351][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.417799][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.428766][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.442152][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.458322][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.486502][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.525169][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.552663][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.566430][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.579149][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.589112][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.612201][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.623813][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.654531][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.664437][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.689130][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.716221][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.762827][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.784281][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.801256][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.810686][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.842460][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.862678][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.872229][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.881377][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.917500][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.929654][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.991305][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.000088][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.044774][ T5819] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.195543][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.212692][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.225264][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.233404][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.291953][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 84.309414][ T5819] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 84.323945][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.333584][ T51] Bluetooth: hci0: command tx timeout [ 84.350682][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.363334][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.405249][ T51] Bluetooth: hci1: command tx timeout [ 84.406582][ T5776] Bluetooth: hci2: command tx timeout [ 84.410852][ T51] Bluetooth: hci3: command tx timeout [ 84.423517][ T1085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.471247][ T1085] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.903328][ T5819] lg-g15 0003:046D:C222.0001: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.0-1/input0 [ 85.061470][ T5819] lg-g15 0003:046D:C222.0001: Error getting LED brightness: -71 [ 85.118526][ T5819] lg-g15: probe of 0003:046D:C222.0001 failed with error -71 [ 85.206504][ T5819] usb 1-1: USB disconnect, device number 2 [ 85.215591][ T5864] syz.2.11[5864]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.263591][ T5864] loop2: detected capacity change from 0 to 256 [ 85.275602][ T5859] fido_id[5859]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 85.398750][ T5864] FAT-fs (loop2): Directory bread(block 64) failed [ 85.412371][ T5864] FAT-fs (loop2): Directory bread(block 65) failed [ 85.437783][ T5864] FAT-fs (loop2): Directory bread(block 66) failed [ 85.481670][ T5864] FAT-fs (loop2): Directory bread(block 67) failed [ 85.503542][ T5864] FAT-fs (loop2): Directory bread(block 68) failed [ 85.518445][ T5864] FAT-fs (loop2): Directory bread(block 69) failed [ 85.543266][ T5864] FAT-fs (loop2): Directory bread(block 70) failed [ 85.560807][ T5864] FAT-fs (loop2): Directory bread(block 71) failed [ 85.588838][ T5864] FAT-fs (loop2): Directory bread(block 72) failed [ 85.625191][ T5864] FAT-fs (loop2): Directory bread(block 73) failed [ 85.821299][ T5870] loop3: detected capacity change from 0 to 8192 [ 85.878597][ T5870] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 85.892360][ T5870] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 85.904264][ T5870] REISERFS (device loop3): using ordered data mode [ 85.911666][ T5870] reiserfs: using flush barriers [ 85.931373][ T5870] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 85.958229][ T5870] REISERFS (device loop3): checking transaction log (loop3) [ 86.157917][ T5877] loop2: detected capacity change from 0 to 128 [ 86.198845][ T5877] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 86.250181][ T5877] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.257678][ T5870] REISERFS (device loop3): Using tea hash to sort names [ 86.295882][ T5880] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.328281][ T5870] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 86.406821][ T51] Bluetooth: hci0: command tx timeout [ 86.407560][ T1085] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 86.484796][ T51] Bluetooth: hci2: command tx timeout [ 86.487160][ T5776] Bluetooth: hci1: command tx timeout [ 86.490426][ T51] Bluetooth: hci3: command tx timeout [ 86.613213][ T5870] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 86.814567][ T5890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21'. [ 86.950823][ T5894] loop0: detected capacity change from 0 to 128 [ 87.059079][ T5894] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 87.102323][ T5894] FAT-fs (loop0): Filesystem has been set read-only [ 87.468416][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 87.763882][ T5915] use of bytesused == 0 is deprecated and will be removed in the future, [ 87.794805][ T5915] use the actual size instead. [ 87.810521][ T5911] loop3: detected capacity change from 0 to 8192 [ 87.864866][ T5911] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 88.668291][ T5933] loop1: detected capacity change from 0 to 2048 [ 88.761483][ T5933] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.922211][ T28] audit: type=1800 audit(1787166715.666:2): pid=5933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.41" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 88.951102][ T5933] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.975742][ T5933] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 88.990684][ T5933] EXT4-fs (loop1): This should not happen!! Data will be lost [ 88.990684][ T5933] [ 89.001135][ T5933] EXT4-fs (loop1): Total free blocks count 0 [ 89.007616][ T5933] EXT4-fs (loop1): Free/Dirty block details [ 89.013927][ T5933] EXT4-fs (loop1): free_blocks=2415919104 [ 89.020414][ T5933] EXT4-fs (loop1): dirty_blocks=64 [ 89.030604][ T5933] EXT4-fs (loop1): Block reservation details [ 89.039748][ T5933] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 89.071255][ T5933] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.496426][ T5954] capability: warning: `syz.2.50' uses 32-bit capabilities (legacy support in use) [ 89.538748][ T5954] program syz.2.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 89.581163][ T5956] loop0: detected capacity change from 0 to 1024 [ 89.627312][ T5956] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.702772][ T5956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.750807][ T5956] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 89.800669][ T5956] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 89.869886][ T5965] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 89.925379][ T5965] EXT4-fs (loop0): This should not happen!! Data will be lost [ 89.925379][ T5965] [ 89.946095][ T5965] EXT4-fs (loop0): Total free blocks count 0 [ 89.971718][ T5965] EXT4-fs (loop0): Free/Dirty block details [ 89.992005][ T5965] EXT4-fs (loop0): free_blocks=20480 [ 90.011948][ T5965] EXT4-fs (loop0): dirty_blocks=80 [ 90.027724][ T5965] EXT4-fs (loop0): Block reservation details [ 90.044106][ T5965] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 90.062592][ T5956] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28 [ 90.064897][ T5965] EXT4-fs error (device loop0) in ext4_setattr:5683: error 28 [ 90.683346][ T5958] loop1: detected capacity change from 0 to 40427 [ 90.765827][ T5958] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 90.784573][ T5958] F2FS-fs (loop1): Image doesn't support compression [ 90.791388][ T5958] F2FS-fs (loop1): Image doesn't support compression [ 90.845247][ T5958] F2FS-fs (loop1): invalid crc value [ 90.865799][ T5958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 90.991078][ T5958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 91.122659][ T5969] loop2: detected capacity change from 0 to 40427 [ 91.154424][ T5969] ======================================================= [ 91.154424][ T5969] WARNING: The mand mount option has been deprecated and [ 91.154424][ T5969] and is ignored by this kernel. Remove the mand [ 91.154424][ T5969] option from the mount to silence this warning. [ 91.154424][ T5969] ======================================================= [ 91.292469][ T5969] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x7ffff [ 91.347913][ T5969] F2FS-fs (loop2): invalid crc value [ 91.360782][ T5779] syz-executor: attempt to access beyond end of device [ 91.360782][ T5779] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.397728][ T5969] F2FS-fs (loop2): Found nat_bits in checkpoint [ 91.408403][ T5779] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 91.664945][ T5969] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 91.963797][ T5778] syz-executor: attempt to access beyond end of device [ 91.963797][ T5778] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.006929][ T5778] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 92.251058][ T56] cfg80211: failed to load regulatory.db [ 92.549436][ T6014] batman_adv: batadv0: Adding interface: vlan2 [ 92.574895][ T6014] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.613019][ T6014] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 92.879451][ T5819] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.131363][ T5819] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 93.141748][ T5819] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 93.159178][ T5819] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 93.168634][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 93.180077][ T5819] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 93.192043][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.204630][ T5819] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 93.219101][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 93.227332][ T5819] usb 1-1: Product: syz [ 93.231807][ T5819] usb 1-1: Manufacturer: syz [ 93.245104][ T5819] cdc_wdm 1-1:1.0: skipping garbage [ 93.250707][ T5819] cdc_wdm 1-1:1.0: skipping garbage [ 93.262024][ T5819] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 93.269692][ T5819] cdc_wdm 1-1:1.0: Unknown control protocol [ 93.377180][ T9] usb 2-1: config 0 has no interfaces? [ 93.383140][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 93.411554][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.440316][ T9] usb 2-1: config 0 descriptor?? [ 93.535068][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.542034][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.550234][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.556873][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.563404][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.570131][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.576874][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.583621][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.590390][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.597030][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.603414][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.610127][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.616789][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.623446][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.630234][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.636898][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.643246][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.649930][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.657285][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 93.663941][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 93.671822][ T9] usb 1-1: USB disconnect, device number 3 [ 93.671886][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 93.831854][ T173] usb 2-1: USB disconnect, device number 2 [ 94.122530][ T6056] loop3: detected capacity change from 0 to 8 [ 94.170264][ T6056] squashfs image failed sanity check [ 94.203358][ T6058] gre0: entered promiscuous mode [ 94.215938][ T6057] gre0: left promiscuous mode [ 94.347767][ T6060] loop2: detected capacity change from 0 to 256 [ 94.456557][ T6060] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 94.589485][ T6065] loop0: detected capacity change from 0 to 512 [ 94.936046][ T6071] Illegal XDP return value 601582096 on prog (id 9) dev N/A, expect packet loss! [ 95.254680][ T173] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.474908][ T173] usb 4-1: Using ep0 maxpacket: 16 [ 95.483899][ T173] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 95.514593][ T173] usb 4-1: config 0 has no interface number 0 [ 95.530144][ T173] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 95.557441][ T173] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 95.593621][ T173] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 95.613716][ T173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.622702][ T173] usb 4-1: Product: syz [ 95.628882][ T173] usb 4-1: Manufacturer: syz [ 95.633639][ T173] usb 4-1: SerialNumber: syz [ 95.642540][ T173] usb 4-1: config 0 descriptor?? [ 95.659395][ T6076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.674855][ T6076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.878506][ T6099] loop1: detected capacity change from 0 to 512 [ 95.891493][ T6099] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.906776][ T6099] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 95.930723][ T6099] EXT4-fs (loop1): 1 truncate cleaned up [ 95.939271][ T6099] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.967712][ T6076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 95.981714][ T6076] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 96.023740][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.211028][ T173] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 96.554837][ T5819] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.609390][ T173] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 96.651848][ T173] asix: probe of 4-1:0.34 failed with error -71 [ 96.673097][ T173] usb 4-1: USB disconnect, device number 2 [ 96.747199][ T6103] loop1: detected capacity change from 0 to 32768 [ 96.765348][ T5819] usb 1-1: Using ep0 maxpacket: 32 [ 96.783357][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.810549][ T5819] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.842780][ T5819] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 96.863527][ T5819] usb 1-1: New USB device strings: Mfr=24, Product=0, SerialNumber=0 [ 96.882168][ T5819] usb 1-1: Manufacturer: syz [ 96.897767][ T5819] usb 1-1: config 0 descriptor?? [ 97.158580][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.180295][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.401717][ T6122] loop2: detected capacity change from 0 to 256 [ 97.443743][ T5819] hid (null): unknown global tag 0xd [ 97.514202][ T5819] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0002/input/input6 [ 97.666600][ T5819] input: syz Mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:5543:0042.0002/input/input7 [ 97.714423][ T5819] uclogic 0003:5543:0042.0002: input,hidraw0: USB HID v7f.fd Mouse [syz] on usb-dummy_hcd.0-1/input0 [ 97.778057][ T5819] usb 1-1: USB disconnect, device number 4 [ 98.134975][ T6134] fido_id[6134]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 98.591162][ T23] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.07 Device [syz1] on syz1 [ 98.841055][ T6146] fido_id[6146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 98.841595][ T6130] loop2: detected capacity change from 0 to 32768 [ 98.937421][ T6130] *** Log Is Dirty ! *** [ 98.942662][ T6130] lmLogInit: exit(-22) [ 98.963025][ T6130] lmLogOpen: exit(-22) [ 99.043040][ T6130] jfs_dirty_inode called on read-only volume [ 99.069388][ T6130] Is remount racy? [ 99.116070][ T6156] i2c i2c-0: new_device: Can't parse I2C address [ 99.697423][ T6171] loop2: detected capacity change from 0 to 1024 [ 100.011021][ T6176] bond1: option ad_user_port_key: invalid value (65535) [ 100.034551][ T6176] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 100.053005][ T6176] bond1 (unregistering): Released all slaves [ 100.168994][ T6176] Zero length message leads to an empty skb [ 100.228946][ T6187] loop1: detected capacity change from 0 to 1024 [ 100.265307][ T6187] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 100.288337][ T6187] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 100.297735][ T6187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.365500][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.426337][ T6187] fscrypt (loop1, inode 18): Unsupported encryption flags (0x08) [ 100.500010][ T5779] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.594990][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 100.623305][ T5819] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 100.634961][ T5819] usb 3-1: config 0 has no interface number 0 [ 100.641230][ T5819] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.657108][ T5819] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.667897][ T5819] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 100.682167][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.694096][ T5819] usb 3-1: config 0 descriptor?? [ 100.744627][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.944602][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 100.953823][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 100.963165][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.971346][ T9] usb 4-1: Product: syz [ 100.975696][ T9] usb 4-1: Manufacturer: syz [ 100.980369][ T9] usb 4-1: SerialNumber: syz [ 100.991708][ T9] usb 4-1: config 0 descriptor?? [ 100.999997][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 101.332936][ T5819] uclogic 0003:28BD:0094.0004: pen parameters not found [ 101.344903][ T5819] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 101.357566][ T5819] usb 3-1: USB disconnect, device number 2 [ 101.816684][ T9] gspca_sonixj: reg_r err -71 [ 101.831820][ T9] sonixj: probe of 4-1:0.0 failed with error -71 [ 101.888277][ T9] usb 4-1: USB disconnect, device number 3 [ 102.551368][ T6209] loop0: detected capacity change from 0 to 32768 [ 102.756717][ T6221] loop3: detected capacity change from 0 to 4096 [ 102.816890][ T6221] NILFS (loop3): invalid segment: Checksum error in segment payload [ 102.838185][ T6221] NILFS (loop3): trying rollback from an earlier position [ 102.930548][ T6221] NILFS (loop3): recovery complete [ 102.945784][ T6224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 104.211008][ T6226] loop2: detected capacity change from 0 to 40427 [ 104.273908][ T6226] F2FS-fs (loop2): Image doesn't support compression [ 104.284943][ T6226] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x4 [ 104.326133][ T6226] F2FS-fs (loop2): invalid crc value [ 104.348741][ T6226] F2FS-fs (loop2): Found nat_bits in checkpoint [ 104.480333][ T6226] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.564336][ T6245] rnbd_client L203: map_device: Unknown parameter or missing value 'se' [ 104.583485][ T6226] syz.2.174: attempt to access beyond end of device [ 104.583485][ T6226] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 104.626551][ T6247] process 'syz.1.182' launched './file0' with NULL argv: empty string added [ 104.631543][ T6226] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 105.219370][ T6262] netlink: 'syz.0.190': attribute type 11 has an invalid length. [ 105.250627][ T6262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 105.811437][ T6280] general protection fault, probably for non-canonical address 0xdffffc000000001d: 0000 [#1] PREEMPT SMP KASAN [ 105.819565][ T6282] bcache: register_bcache() error : failed to open device [ 105.823332][ T6280] KASAN: null-ptr-deref in range [0x00000000000000e8-0x00000000000000ef] [ 105.823369][ T6280] CPU: 1 PID: 6280 Comm: syz.0.197 Not tainted syzkaller #0 [ 105.832852][ T5776] Bluetooth: hci0: Zero size dump init pkt [ 105.838999][ T6280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.839018][ T6280] RIP: 0010:rebind_store+0xc7/0x240 [ 105.839053][ T6280] Code: 83 c7 30 4d 89 fd 49 c1 ed 03 41 80 7c 2d 00 00 74 08 4c 89 ff e8 79 f4 04 fb 41 bc e8 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 5b f4 04 fb 4d 8b 24 24 4d 85 e4 0f [ 105.839069][ T6280] RSP: 0018:ffffc9000c08fc78 EFLAGS: 00010206 [ 105.839089][ T6280] RAX: 000000000000001d RBX: 0000000000000001 RCX: 0000000000000000 [ 105.839103][ T6280] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 105.839117][ T6280] RBP: dffffc0000000000 R08: ffffffff97662543 R09: 1ffffffff2ecc4a8 [ 105.839131][ T6280] R10: dffffc0000000000 R11: fffffbfff2ecc4a9 R12: 00000000000000e8 [ 105.839145][ T6280] R13: 1ffffffff2ecc4a6 R14: ffff88802cf85938 R15: ffffffff97662530 [ 105.839160][ T6280] FS: 00007fa37aadc6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 105.839177][ T6280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 105.839190][ T6280] CR2: 0000200000001000 CR3: 00000000603ba000 CR4: 00000000003506e0 [ 105.839209][ T6280] Call Trace: [ 105.839217][ T6280] [ 105.839228][ T6280] ? sysfs_kf_read+0x360/0x360 [ 105.839249][ T6280] kernfs_fop_write_iter+0x3a4/0x520 [ 105.839283][ T6280] vfs_write+0x474/0x9a0 [ 105.839314][ T6280] ? file_end_write+0x250/0x250 [ 105.839343][ T6280] ? __fget_files+0x3fc/0x460 [ 105.839374][ T6280] ? __fdget_pos+0x2a3/0x330 [ 105.839400][ T6280] ? ksys_write+0x74/0x260 [ 105.839427][ T6280] ksys_write+0x151/0x260 [ 105.839454][ T6280] ? __ia32_sys_read+0x90/0x90 [ 105.839481][ T6280] ? lockdep_hardirqs_on+0x98/0x150 [ 105.839510][ T6280] do_syscall_64+0x55/0xb0 [ 105.839533][ T6280] ? clear_bhb_loop+0x40/0x90 [ 105.839556][ T6280] ? clear_bhb_loop+0x40/0x90 [ 105.839580][ T6280] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.839603][ T6280] RIP: 0033:0x7fa379b9e0d9 [ 105.839621][ T6280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.839635][ T6280] RSP: 002b:00007fa37aadc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 105.839655][ T6280] RAX: ffffffffffffffda RBX: 00007fa379e25fa0 RCX: 00007fa379b9e0d9 [ 105.839670][ T6280] RDX: 0000000000000001 RSI: 0000200000001000 RDI: 0000000000000003 [ 105.839682][ T6280] RBP: 00007fa379c35024 R08: 0000000000000000 R09: 0000000000000000 [ 105.839694][ T6280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.839716][ T6280] R13: 00007fa379e26038 R14: 00007fa379e25fa0 R15: 00007ffc577164e8 [ 105.839738][ T6280] [ 105.839746][ T6280] Modules linked in: [ 105.931548][ T6280] ---[ end trace 0000000000000000 ]--- [ 106.123668][ T6280] RIP: 0010:rebind_store+0xc7/0x240 [ 106.136189][ T6280] Code: 83 c7 30 4d 89 fd 49 c1 ed 03 41 80 7c 2d 00 00 74 08 4c 89 ff e8 79 f4 04 fb 41 bc e8 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <80> 3c 28 00 74 08 4c 89 e7 e8 5b f4 04 fb 4d 8b 24 24 4d 85 e4 0f [ 106.161646][ T6280] RSP: 0018:ffffc9000c08fc78 EFLAGS: 00010206 [ 106.168269][ T6280] RAX: 000000000000001d RBX: 0000000000000001 RCX: 0000000000000000 [ 106.177640][ T6280] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 106.187565][ T6280] RBP: dffffc0000000000 R08: ffffffff97662543 R09: 1ffffffff2ecc4a8 [ 106.195883][ T6280] R10: dffffc0000000000 R11: fffffbfff2ecc4a9 R12: 00000000000000e8 [ 106.203923][ T6280] R13: 1ffffffff2ecc4a6 R14: ffff88802cf85938 R15: ffffffff97662530 [ 106.212362][ T6280] FS: 00007fa37aadc6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 106.221425][ T6280] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 106.228121][ T6280] CR2: 00007fc7397ef2f8 CR3: 00000000603ba000 CR4: 00000000003506f0 [ 106.236146][ T6280] Kernel panic - not syncing: Fatal exception [ 106.242503][ T6280] Kernel Offset: disabled [ 106.246866][ T6280] Rebooting in 86400 seconds..