last executing test programs: 9.509198387s ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000007c0)="d8000000160081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed087", 0x43}, {&(0x7f00000009c0)="383d180ced167f4e20efe387e9f655200e9ef57059e65fda2a46ea72b507f849a24f8bd9dd8ae87a8f55a832c4f11e448538ffcee0c6b8380f6a53c33c12f3a69d81efd66f3affa37aaa0159", 0x4c}, {&(0x7f0000000e00)="92b3496e5f9739034072a85b5d770103bb6c9d3326d180ee3bc795d87c09aef7311ec9e77057f58bf50c656b29166eadd02f136a971bb10b796e0ea434adda93", 0x40}], 0x3, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0xc000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}]}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) syz_extract_tcp_res(&(0x7f0000000080)={0x41424344, 0x41424344}, 0x8, 0x42) syz_emit_ethernet(0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x0, 0x3}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x2ff, 0x0, 0x0, 0x89, 0x0, @rand_addr, @empty}, {{0x4, 0x4e26, 0x41424344, r4, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x2}}}}, 0x36) 9.141408166s ago: executing program 3 (id=5): syz_usb_connect$uac3(0x3, 0x86, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201100300000010820582054000010203010902740003010f6003080b0002010130000904000000010130000a2401050a00e58a000009040100000102300009040101010102300006240201000709050109100090060f0a2525040000000a040009040200ffff023000090402010101023000090506"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000040)='./file1\x00', 0x1804810, &(0x7f0000000100)=ANY=[], 0x1, 0x692, &(0x7f0000000cc0)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x2) 8.736960586s ago: executing program 1 (id=2): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$kcm(0x11, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) accept4(r1, 0x0, 0x0, 0x80000) 8.361906534s ago: executing program 1 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='jffs2\x00', 0x0, &(0x7f0000000140)='compr=none\x00') close(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) gettid() r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$panthor(0xffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000003c0)={@link_local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "1b00", 0x64, 0x11, 0x0, @local, @mcast2, {[], {0x4000, 0xe25, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x2, "1983426a97e3503bbbc12ef01ae488918c1ea89a08a25f78de9f802d2628cc4b", "b6af91bfb69252b136c8f50eaee89ebe", {"26e39726e261b1997fe90de7841c2e1f", "8def4140df2b9c11e876f120f5f7bfc5"}}}}}}}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) 8.206502958s ago: executing program 0 (id=1): bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x404, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0, @ANYRES8, @ANYRES8], 0x1, 0x122e, &(0x7f0000002580)="$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") r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000280)={0x2, 0x1, 0x1, 0x0, 0x8}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000200)={0x1d, r6}, 0x10) sendmsg$can_bcm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe"], 0x20000600}}, 0x0) sendmsg$sock(r7, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f046}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, "a730b801"}, 0xffffffff, 0x1, {0x0}}) syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10042, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14b302, 0x8c) pwritev2(r9, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) sendfile(r8, r8, 0x0, 0x1000000000007) 7.001269536s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f00000000c0)="02", 0x1, 0x4) 4.382976547s ago: executing program 0 (id=7): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/route\x00') setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000080)=0x8, 0x4) r1 = syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4f5, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x64eb2000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) read$FUSE(r0, &(0x7f00000061c0)={0x2020}, 0x2020) pread64(r0, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 4.29127578s ago: executing program 2 (id=8): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet(0xffffffffffffffff, 0x0, 0x0) r5 = accept(r4, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x4000840) r6 = syz_open_dev$media(&(0x7f00000000c0), 0xc, 0x80c2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r6, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, 0x0, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r7, 0x7c80, 0x0) 4.217879421s ago: executing program 1 (id=9): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}}, &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd1, &(0x7f0000000440)=""/209, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x7, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x400000000000009b, &(0x7f0000000480)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r4, &(0x7f0000000300)='0', 0x1) 4.216877681s ago: executing program 3 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) getpid() socketpair(0x1, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfDS609AdV3fcq3cExeoQuu4y4CkcgV8gFOAPZZZtdBBH2JAoRhBAbE6Lvk+xhbOvxjPDijUcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABzTdTEbX1787teNs1zV08zdAAAAANssitm4/DCs+oN0/Fs69DP1s4jII2Jb7d6JTxsxOylOseP64lkOVxFlhPV39NL2JSL+pO3ux7F/BQAAAPi45pPpqKrWq93w1AnRpmrQJv/6t6F4WUQUw5uGouXr3a9XXbraPz60/n934/+Os9lhqZUDW1F7ysyDcsit21S0/TrpcX9s+k+arGry9tIBAADaslkJtFiFAAAA0LJ/p06A0yjfeqa5+GkCf69q0gvBzxs9AAAA4AwdOusZAAAAeI8GL54t6/8zWP/v+631/wAAAODNqvX/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOKZFMRvPJ9NR3TjLVT3N3A0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAPfvzjsIwDAZhcJMor07oAr7/Lc2C3bp1MwOCj38rAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABceRwvzzNejZlso9eZ5N3zSvLp1Ph2avw6N/5Jxrr7NwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF/3ul/8TU+NMMnfaWDoeSdauGltXjb0HjaMH4+3fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fvGzcVBwD8e+fzlRYQIaAMQYhKDLDQ9FpaujKAIgb+BKQovZbAlR9tBlpVoCxsKHMXBCNCSKCw9X/o3EpdytbhhiIxMYDss5PXo4iDKvaRfD7S8/vacvy+z4mifP2cAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2fnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6vIRLE=") open(0x0, 0x4827e, 0xdc) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, 0x0, 0x40001a2) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x3, 0x0, 0x8000000200007, 0x6, 0x20103, 0x80001, {0x200004, 0x10005c62, 0x203, 0x1000000000, 0x83, 0x4, 0x7, 0x3, 0x0, 0x0, 0x0, 0xee00, 0x0, 0x8, 0x1}}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000100)=0x4, 0x8112) 3.00237078s ago: executing program 2 (id=11): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) 1.865228326s ago: executing program 1 (id=12): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xd4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x30}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) pipe(&(0x7f0000000140)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001", @ANYRES32=r3, @ANYBLOB='\b\x00', @ANYRES32, @ANYBLOB="e58e148ec78d5f9f669bd018def922626752a495778229239cf99451a77227486aea9e84d594415596ec14b788578b85b24fe4d82bb1eb34fd85e1f627512b0f"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) 189.483355ms ago: executing program 3 (id=13): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) listen(r0, 0xd) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, 0x0, 0x20004018) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 33.303639ms ago: executing program 0 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth1\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000700)="ffffffffffff0011223344554305000f32000000000100112233445500112233445500ff0000", 0x26, 0x0, &(0x7f0000000800)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a80)=ANY=[@ANYBLOB="3400000011000500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300626174616476300000000000000000007d6c73db27a08975c65cdf3b611077c197"], 0x34}}, 0x0) 0s ago: executing program 1 (id=15): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2010480, &(0x7f00000001c0), 0x5, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=") r0 = fanotify_init(0x8, 0x40000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0) io_uring_enter(0xffffffffffffffff, 0x3d0f, 0xd2a6, 0x80, 0x0, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x92c9, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x140) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80041, 0x196) truncate(&(0x7f0000000180)='./file1\x00', 0xc00) close_range(r0, r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. [ 336.966294][ T5805] cgroup: Unknown subsys name 'net' [ 337.078228][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 338.783793][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 340.633390][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.660877][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.672911][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.680542][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 340.689827][ T5830] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.698127][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 340.706582][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.715231][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.722513][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 340.730027][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.752645][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.760775][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.760861][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.772172][ T5831] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.778926][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.784523][ T5831] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.792810][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 340.804891][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.807735][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.817600][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 340.827421][ T5820] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.834730][ T5820] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 340.842294][ T5820] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.849906][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 341.297901][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 341.344014][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 341.432916][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 341.539674][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.547058][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.554911][ T5817] bridge_slave_0: entered allmulticast mode [ 341.562875][ T5817] bridge_slave_0: entered promiscuous mode [ 341.598323][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.605715][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.613261][ T5817] bridge_slave_1: entered allmulticast mode [ 341.620489][ T5817] bridge_slave_1: entered promiscuous mode [ 341.632997][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.640295][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.647731][ T5816] bridge_slave_0: entered allmulticast mode [ 341.655320][ T5816] bridge_slave_0: entered promiscuous mode [ 341.692346][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.699837][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.707061][ T5816] bridge_slave_1: entered allmulticast mode [ 341.714282][ T5816] bridge_slave_1: entered promiscuous mode [ 341.783014][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.812092][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.819441][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.826692][ T5818] bridge_slave_0: entered allmulticast mode [ 341.834252][ T5818] bridge_slave_0: entered promiscuous mode [ 341.845320][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.862459][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.882560][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.890517][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.897704][ T5818] bridge_slave_1: entered allmulticast mode [ 341.905518][ T5818] bridge_slave_1: entered promiscuous mode [ 341.924504][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.976662][ T5816] team0: Port device team_slave_0 added [ 341.986190][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.000033][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.009504][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 342.034177][ T5816] team0: Port device team_slave_1 added [ 342.081053][ T5817] team0: Port device team_slave_0 added [ 342.100731][ T5818] team0: Port device team_slave_0 added [ 342.107759][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.115376][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.141906][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.163992][ T5817] team0: Port device team_slave_1 added [ 342.172529][ T5818] team0: Port device team_slave_1 added [ 342.181673][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.189383][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.215585][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.287747][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.295065][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.321348][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.356514][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.363766][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.391184][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.404235][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.411310][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.437265][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.450751][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.457753][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.483905][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.583769][ T5816] hsr_slave_0: entered promiscuous mode [ 342.590436][ T5816] hsr_slave_1: entered promiscuous mode [ 342.624075][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.631530][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.639022][ T5819] bridge_slave_0: entered allmulticast mode [ 342.646624][ T5819] bridge_slave_0: entered promiscuous mode [ 342.671631][ T5818] hsr_slave_0: entered promiscuous mode [ 342.678751][ T5818] hsr_slave_1: entered promiscuous mode [ 342.685858][ T5818] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.694177][ T5818] Cannot create hsr debugfs directory [ 342.713351][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.720909][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.728216][ T5819] bridge_slave_1: entered allmulticast mode [ 342.735919][ T5819] bridge_slave_1: entered promiscuous mode [ 342.782207][ T5817] hsr_slave_0: entered promiscuous mode [ 342.788940][ T5817] hsr_slave_1: entered promiscuous mode [ 342.795234][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.803758][ T5817] Cannot create hsr debugfs directory [ 342.867583][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.877675][ T5821] Bluetooth: hci1: command tx timeout [ 342.883490][ T5821] Bluetooth: hci3: command tx timeout [ 342.889157][ T5820] Bluetooth: hci2: command tx timeout [ 342.922079][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.948662][ T5820] Bluetooth: hci0: command tx timeout [ 343.024319][ T5819] team0: Port device team_slave_0 added [ 343.039749][ T5819] team0: Port device team_slave_1 added [ 343.149101][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.156162][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.187365][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.234040][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.241080][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.268095][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.373274][ T5819] hsr_slave_0: entered promiscuous mode [ 343.381543][ T5819] hsr_slave_1: entered promiscuous mode [ 343.387782][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.398433][ T5819] Cannot create hsr debugfs directory [ 343.467604][ T5816] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.496379][ T5816] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.508070][ T5816] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.524175][ T5816] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.642455][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.653665][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.673493][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.699758][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.780401][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.794025][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.806310][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.833320][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.940835][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 343.968034][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.976397][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 343.988035][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 344.010683][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 344.094358][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.124113][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.131482][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.154875][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.183432][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.190790][ T5839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.237588][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.269681][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.276905][ T5839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.325760][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.333143][ T5858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.412052][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.435540][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.480907][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.488097][ T5857] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.525011][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.553685][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.560947][ T5857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.657994][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.687716][ T3476] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.694991][ T3476] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.726374][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.733695][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.946331][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.956997][ T5820] Bluetooth: hci2: command tx timeout [ 344.963873][ T5821] Bluetooth: hci3: command tx timeout [ 344.965581][ T5820] Bluetooth: hci1: command tx timeout [ 345.029160][ T5820] Bluetooth: hci0: command tx timeout [ 345.115253][ T5816] veth0_vlan: entered promiscuous mode [ 345.155325][ T5816] veth1_vlan: entered promiscuous mode [ 345.223681][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.286467][ T5816] veth0_macvtap: entered promiscuous mode [ 345.300639][ T5816] veth1_macvtap: entered promiscuous mode [ 345.340764][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.376659][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.402636][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.426431][ T5818] veth0_vlan: entered promiscuous mode [ 345.443838][ T5816] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.454748][ T5816] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.466443][ T5816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.475488][ T5816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.517905][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.530343][ T5818] veth1_vlan: entered promiscuous mode [ 345.562342][ T5817] veth0_vlan: entered promiscuous mode [ 345.660264][ T5817] veth1_vlan: entered promiscuous mode [ 345.676867][ T5818] veth0_macvtap: entered promiscuous mode [ 345.734140][ T5818] veth1_macvtap: entered promiscuous mode [ 345.749573][ T3476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.757665][ T3476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.783353][ T5819] veth0_vlan: entered promiscuous mode [ 345.805074][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.818819][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.832797][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.875395][ T5818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.886375][ T5818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.900612][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.914642][ T5819] veth1_vlan: entered promiscuous mode [ 345.926941][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.936759][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.938661][ T5877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.947950][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.962974][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.971907][ T5877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.997664][ T5817] veth0_macvtap: entered promiscuous mode [ 346.016349][ T5817] veth1_macvtap: entered promiscuous mode [ 346.066253][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.077069][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.095427][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.106813][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.140212][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.182371][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.197802][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.208888][ T5817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.222733][ T5817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.236708][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.322778][ T5817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.340848][ T5817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.353662][ T5817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.363284][ T5817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.386021][ T5819] veth0_macvtap: entered promiscuous mode [ 346.401564][ T5886] syzkaller1: entered promiscuous mode [ 346.407102][ T5886] syzkaller1: entered allmulticast mode [ 346.475123][ T5819] veth1_macvtap: entered promiscuous mode [ 346.499651][ T5839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.525812][ T5839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.592313][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.603204][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.613877][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.625563][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.644586][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 346.655403][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.672489][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.716858][ T5858] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.725454][ T5858] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.752086][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.765050][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.776517][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.787253][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.797988][ T5819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 346.811317][ T5819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.823157][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.842735][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.860745][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.871811][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.881183][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.928878][ T5857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.950015][ T5857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.969857][ T970] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 347.029640][ T5825] Bluetooth: hci3: command tx timeout [ 347.035134][ T5825] Bluetooth: hci2: command tx timeout [ 347.041113][ T5820] Bluetooth: hci1: command tx timeout [ 347.092236][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.109475][ T5820] Bluetooth: hci0: command tx timeout [ 347.140155][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.179204][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 347.206562][ T970] usb 4-1: unable to get BOS descriptor or descriptor too short [ 347.233384][ T970] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.263407][ T970] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 347.291620][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.304341][ T970] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 347.311903][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.346965][ T970] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 347.392351][ T970] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 347.407332][ T970] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 347.416785][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.426454][ T970] usb 4-1: Product: syz [ 347.432369][ T970] usb 4-1: Manufacturer: syz [ 347.437117][ T970] usb 4-1: SerialNumber: syz [ 347.488255][ T3476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.516861][ T3476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.552971][ T5894] jffs2: notice: (5894) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 347.739822][ T5888] syz.3.5[5888]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 348.233574][ T5901] loop0: detected capacity change from 0 to 8192 [ 348.434918][ T5901] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 349.192613][ T5821] Bluetooth: hci3: command tx timeout [ 349.199036][ T5821] Bluetooth: hci0: command tx timeout [ 349.205055][ T5825] Bluetooth: hci2: command tx timeout [ 349.213390][ T5820] Bluetooth: hci1: command tx timeout [ 349.648371][ C0] sched: RT throttling activated [ 351.529737][ T970] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 352.709146][ T970] usb 4-1: USB disconnect, device number 2 [ 354.364585][ T5914] loop3: detected capacity change from 0 to 40427 [ 354.550759][ T5914] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 354.557406][ T5914] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 354.583456][ T5914] F2FS-fs (loop3): invalid crc value [ 354.811396][ T5914] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 354.818788][ T5914] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 354.861658][ T5832] udevd[5832]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.190861][ T5914] syz.3.10: attempt to access beyond end of device [ 355.190861][ T5914] loop3: rw=10241, sector=53248, nr_sectors = 8 limit=40427 [ 355.520919][ T5816] syz-executor: attempt to access beyond end of device [ 355.520919][ T5816] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 355.558616][ T5816] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 355.862790][ T5937] loop1: detected capacity change from 0 to 2048 [ 356.014936][ T5937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 356.140813][ T5942] batman_adv: batadv0: Adding interface: veth0 [ 356.173180][ T5942] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.227628][ T5937] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 356.280905][ T5937] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 356.353180][ T5942] batman_adv: batadv0: Interface activated: veth0 [ 356.364768][ T5937] EXT4-fs (loop1): This should not happen!! Data will be lost [ 356.364768][ T5937] [ 356.392238][ T5943] batman_adv: batadv0: Interface deactivated: veth0 [ 356.419622][ T5937] EXT4-fs (loop1): Total free blocks count 0 [ 356.431782][ T5937] EXT4-fs (loop1): Free/Dirty block details [ 356.448573][ T5937] EXT4-fs (loop1): free_blocks=2415919104 [ 356.454508][ T5943] batman_adv: batadv0: Removing interface: veth0 [ 356.478529][ T5937] EXT4-fs (loop1): dirty_blocks=16 [ 356.483745][ T5937] EXT4-fs (loop1): Block reservation details [ 356.498797][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.506417][ T5937] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 356.539315][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.569628][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.577149][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.033740][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.041020][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.471625][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.478138][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 463.037235][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 463.037392][ T5086] Bluetooth: hci1: command 0x0406 tx timeout [ 463.049696][ T5825] Bluetooth: hci3: command 0x0406 tx timeout [ 463.055808][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 500.628601][ T29] INFO: task kworker/u4:1:5857 blocked for more than 143 seconds. [ 500.636975][ T29] Not tainted syzkaller #0 [ 500.643418][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 500.653863][ T29] task:kworker/u4:1 state:D stack:22280 pid:5857 ppid:2 flags:0x00004000 [ 500.664306][ T29] Workqueue: writeback wb_workfn (flush-8:0) [ 500.670455][ T29] Call Trace: [ 500.673782][ T29] [ 500.676763][ T29] __schedule+0x15ae/0x4660 [ 500.681553][ T29] ? asan.module_dtor+0x20/0x20 [ 500.686638][ T29] ? blk_check_plugged+0x250/0x250 [ 500.691991][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 500.697970][ T29] ? wq_worker_sleeping+0x63/0x240 [ 500.703299][ T29] schedule+0xbd/0x170 [ 500.707438][ T29] io_schedule+0x80/0xd0 [ 500.711801][ T29] bit_wait_io+0x11/0xd0 [ 500.716113][ T29] __wait_on_bit+0x9f/0x2c0 [ 500.720735][ T29] ? bit_wait+0xd0/0xd0 [ 500.724956][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 500.731724][ T29] ? bit_wait+0xd0/0xd0 [ 500.736159][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 500.741012][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 500.746121][ T29] ? bit_waitqueue+0x30/0x30 [ 500.754840][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 500.760170][ T29] do_get_write_access+0x5c9/0xe00 [ 500.765377][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 500.771565][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 500.777796][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 500.787235][ T29] ext4_mb_mark_diskspace_used+0x1c3/0x14b0 [ 500.793610][ T29] ? __kasan_slab_alloc+0x6c/0x80 [ 500.798862][ T29] ? ext4_discard_allocated_blocks+0x620/0x620 [ 500.805093][ T29] ext4_mb_new_blocks+0x105b/0x42f0 [ 500.810519][ T29] ? ext4_find_extent+0x1f5/0xcd0 [ 500.815606][ T29] ? rcu_is_watching+0x15/0xb0 [ 500.820472][ T29] ? ext4_mb_release_inode_pa+0xa30/0xa30 [ 500.826256][ T29] ? ext4_inode_to_goal_block+0x317/0x450 [ 500.832086][ T29] ext4_ext_map_blocks+0x1811/0x68c0 [ 500.837456][ T29] ? __might_sleep+0xe0/0xe0 [ 500.842235][ T29] ? ext4_ext_release+0x10/0x10 [ 500.847158][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 500.856472][ T29] ? ext4_es_lookup_extent+0x601/0x9f0 [ 500.863412][ T29] ext4_map_blocks+0x9db/0x1a90 [ 500.868527][ T29] ? ext4_issue_zeroout+0x250/0x250 [ 500.873817][ T29] ? rcu_is_watching+0x15/0xb0 [ 500.878714][ T29] ? ext4_inode_journal_mode+0x376/0x460 [ 500.884409][ T29] ext4_do_writepages+0x1463/0x3990 [ 500.890818][ T29] ? ext4_normal_submit_inode_data_buffers+0x240/0x240 [ 500.897785][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 500.903355][ T29] ? __lock_acquire+0x1336/0x7d80 [ 500.908502][ T29] ext4_writepages+0x1dd/0x350 [ 500.913324][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 500.918495][ T29] ? reacquire_held_locks+0x31f/0x5c0 [ 500.923929][ T29] ? writeback_sb_inodes+0x35e/0x1020 [ 500.929402][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 500.934693][ T29] ? ext4_read_folio+0x2f0/0x2f0 [ 500.939726][ T29] do_writepages+0x351/0x590 [ 500.944458][ T29] ? folio_clear_dirty_for_io+0xca0/0xca0 [ 500.952504][ T29] ? writeback_sb_inodes+0x4bd/0x1020 [ 500.961244][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 500.966363][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 500.975985][ T29] __writeback_single_inode+0x14e/0xee0 [ 500.981681][ T29] writeback_sb_inodes+0x813/0x1020 [ 500.986968][ T29] ? queue_io+0x530/0x530 [ 500.994677][ T29] __writeback_inodes_wb+0x114/0x240 [ 501.001094][ T29] wb_writeback+0x472/0xbe0 [ 501.005676][ T29] ? percpu_ref_tryget+0x250/0x250 [ 501.014189][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 501.020404][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.025518][ T29] wb_workfn+0xad7/0xe60 [ 501.033617][ T29] ? inode_wait_for_writeback+0x230/0x230 [ 501.039503][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 501.045546][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.050771][ T29] ? read_lock_is_recursive+0x20/0x20 [ 501.057131][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.067823][ T29] ? process_scheduled_works+0x975/0x1600 [ 501.074735][ T29] ? process_scheduled_works+0x975/0x1600 [ 501.085230][ T29] process_scheduled_works+0xa60/0x1600 [ 501.091245][ T29] ? worker_attach_to_pool+0x370/0x370 [ 501.096776][ T29] ? assign_work+0x3cc/0x5d0 [ 501.101593][ T29] worker_thread+0xa5e/0xfe0 [ 501.106254][ T29] ? _raw_spin_unlock+0x40/0x40 [ 501.112201][ T29] ? __kthread_parkme+0x71/0x1c0 [ 501.117221][ T29] kthread+0x2fa/0x390 [ 501.121378][ T29] ? pr_cont_work+0x550/0x550 [ 501.126116][ T29] ? kthread_blkcg+0xd0/0xd0 [ 501.130852][ T29] ret_from_fork+0x48/0x80 [ 501.135337][ T29] ? kthread_blkcg+0xd0/0xd0 [ 501.140177][ T29] ret_from_fork_asm+0x11/0x20 [ 501.145058][ T29] [ 501.148139][ T29] INFO: task syz.0.7:5918 blocked for more than 143 seconds. [ 501.155620][ T29] Not tainted syzkaller #0 [ 501.161604][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.171383][ T29] task:syz.0.7 state:D stack:23368 pid:5918 ppid:5817 flags:0x00004002 [ 501.181546][ T29] Call Trace: [ 501.184869][ T29] [ 501.187835][ T29] __schedule+0x15ae/0x4660 [ 501.192521][ T29] ? asan.module_dtor+0x20/0x20 [ 501.197442][ T29] ? mark_lock+0x94/0x320 [ 501.201893][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.206976][ T29] ? lock_chain_count+0x20/0x20 [ 501.211994][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 501.217074][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 501.222776][ T29] schedule+0xbd/0x170 [ 501.226916][ T29] io_schedule+0x80/0xd0 [ 501.231511][ T29] folio_wait_bit_common+0x881/0xfa0 [ 501.236876][ T29] ? folio_wait_bit+0x30/0x30 [ 501.241913][ T29] ? _compound_head+0x120/0x120 [ 501.246843][ T29] ? __filemap_get_folio+0x6d0/0xbe0 [ 501.252401][ T29] filemap_fault+0xb62/0x1540 [ 501.257145][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 501.263870][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.269537][ T29] __do_fault+0x13b/0x4d0 [ 501.273919][ T29] ? handle_mm_fault+0x3929/0x4a50 [ 501.279181][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 501.284179][ T29] handle_mm_fault+0x3945/0x4a50 [ 501.289284][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 501.294298][ T29] ? numa_migrate_prep+0x350/0x350 [ 501.299536][ T29] __get_user_pages+0x604/0x1580 [ 501.304579][ T29] ? file_update_time+0x98/0x1a0 [ 501.309597][ T29] ? populate_vma_page_range+0x380/0x380 [ 501.315294][ T29] ? get_dump_page+0xb6/0x200 [ 501.320077][ T29] ? down_read_killable+0x1d0/0x340 [ 501.325366][ T29] get_dump_page+0x10c/0x200 [ 501.331021][ T29] ? fault_in_readable+0x150/0x150 [ 501.336209][ T29] ? __asan_memset+0x22/0x40 [ 501.340952][ T29] ? iov_iter_bvec+0xd4/0x1b0 [ 501.345696][ T29] dump_user_range+0x127/0x840 [ 501.350731][ T29] ? dump_skip+0x40/0x40 [ 501.355036][ T29] ? dump_emit+0x78/0xe0 [ 501.359605][ T29] ? dump_emit+0xa6/0xe0 [ 501.365673][ T29] ? elf_core_dump+0x2dbb/0x37c0 [ 501.370759][ T29] elf_core_dump+0x320e/0x37c0 [ 501.375595][ T29] ? load_elf_binary+0x2850/0x2850 [ 501.380833][ T29] ? verify_lock_unused+0x140/0x140 [ 501.386111][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.391236][ T29] ? mas_next_slot+0x94c/0x980 [ 501.396075][ T29] ? rcu_read_lock_any_held+0xb4/0x140 [ 501.401638][ T29] ? 0xffffffffff600000 [ 501.405883][ T29] do_coredump+0x1791/0x24a0 [ 501.410604][ T29] ? nfs_stat_to_errno+0x170/0x170 [ 501.415795][ T29] ? lock_chain_count+0x20/0x20 [ 501.420799][ T29] ? _raw_spin_unlock_irq+0x23/0x50 [ 501.426057][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 501.431810][ T29] get_signal+0x10da/0x1390 [ 501.436387][ T29] arch_do_signal_or_restart+0xc2/0x7b0 [ 501.442088][ T29] ? get_sigframe_size+0x20/0x20 [ 501.447134][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 501.453307][ T29] ? exit_to_user_mode_loop+0x3b/0x110 [ 501.458888][ T29] exit_to_user_mode_loop+0x70/0x110 [ 501.464240][ T29] exit_to_user_mode_prepare+0xee/0x180 [ 501.472446][ T29] irqentry_exit_to_user_mode+0x9/0x30 [ 501.478021][ T29] exc_page_fault+0x8c/0x100 [ 501.482707][ T29] asm_exc_page_fault+0x26/0x30 [ 501.487612][ T29] RIP: 0033:0x7f8b99f9e161 [ 501.492385][ T29] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 501.498574][ T29] RAX: 0000000000000000 RBX: 00007f8b9a226090 RCX: 00007f8b99f9e159 [ 501.506592][ T29] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 501.514690][ T29] RBP: 00007f8b9a035024 R08: 0000000000000000 R09: 0000000000000000 [ 501.522761][ T29] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 501.531020][ T29] R13: 00007f8b9a226128 R14: 00007f8b9a226090 R15: 00007fff2fbe5508 [ 501.539266][ T29] [ 501.542341][ T29] INFO: task syz.2.11:5921 blocked for more than 144 seconds. [ 501.550102][ T29] Not tainted syzkaller #0 [ 501.555101][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.564078][ T29] task:syz.2.11 state:D stack:25384 pid:5921 ppid:5819 flags:0x00004004 [ 501.574285][ T29] Call Trace: [ 501.577614][ T29] [ 501.581006][ T29] __schedule+0x15ae/0x4660 [ 501.585610][ T29] ? mark_lock+0x94/0x320 [ 501.590238][ T29] ? asan.module_dtor+0x20/0x20 [ 501.595996][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.601294][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 501.607237][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 501.612696][ T29] schedule+0xbd/0x170 [ 501.616851][ T29] io_schedule+0x80/0xd0 [ 501.621297][ T29] bit_wait_io+0x11/0xd0 [ 501.625606][ T29] __wait_on_bit+0x9f/0x2c0 [ 501.630310][ T29] ? bit_wait+0xd0/0xd0 [ 501.634528][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 501.640165][ T29] ? bit_wait+0xd0/0xd0 [ 501.644373][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 501.649390][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 501.654486][ T29] ? bit_waitqueue+0x30/0x30 [ 501.659243][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 501.664492][ T29] do_get_write_access+0x5c9/0xe00 [ 501.670473][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 501.676515][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 501.682798][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 501.689133][ T29] ? __might_sleep+0xe0/0xe0 [ 501.693799][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 501.699483][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 501.705022][ T29] ext4_dirty_inode+0xcb/0x110 [ 501.709925][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 501.715827][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 501.720955][ T29] file_update_time+0x187/0x1a0 [ 501.725855][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 501.731045][ T29] ? filemap_fault+0x103c/0x1540 [ 501.736053][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 501.741915][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 501.748505][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.753936][ T29] ? __pte_offset_map+0x20d/0x280 [ 501.759301][ T29] do_page_mkwrite+0x153/0x3f0 [ 501.764161][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 501.769209][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 501.774779][ T29] ? numa_migrate_prep+0x350/0x350 [ 501.780036][ T29] ? do_user_addr_fault+0x55b/0x12d0 [ 501.785444][ T29] do_user_addr_fault+0x736/0x12d0 [ 501.790750][ T29] exc_page_fault+0x64/0x100 [ 501.795396][ T29] ? clear_bhb_loop+0x40/0x90 [ 501.800173][ T29] asm_exc_page_fault+0x26/0x30 [ 501.805073][ T29] RIP: 0033:0x7f6048e72f32 [ 501.809622][ T29] RSP: 002b:00007ffc42b848f0 EFLAGS: 00010202 [ 501.815731][ T29] RAX: 0000000000009008 RBX: 00007f6049d55720 RCX: 0000000000000000 [ 501.823826][ T29] RDX: 0000001b3081b000 RSI: 0000000000000008 RDI: 00007f6049d55720 [ 501.831971][ T29] RBP: 00000000000001a6 R08: 00007f6049210000 R09: 00007f6049226128 [ 501.840069][ T29] R10: 0000000000000001 R11: 0000000000000009 R12: ffffffff81dc7801 [ 501.848097][ T29] R13: 00007f6049226128 R14: 0000000000000093 R15: ffffffffffff7000 [ 501.856250][ T29] ? alloc_pages+0x4e1/0x740 [ 501.860960][ T29] [ 501.864104][ T29] INFO: task syz.1.15:5936 blocked for more than 144 seconds. [ 501.875963][ T29] Not tainted syzkaller #0 [ 501.881444][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 501.890367][ T29] task:syz.1.15 state:D stack:27048 pid:5936 ppid:5818 flags:0x00004004 [ 501.899724][ T29] Call Trace: [ 501.903049][ T29] [ 501.906030][ T29] __schedule+0x15ae/0x4660 [ 501.910761][ T29] ? mark_lock+0x94/0x320 [ 501.915191][ T29] ? asan.module_dtor+0x20/0x20 [ 501.920159][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 501.925251][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 501.929774][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.931538][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 501.937708][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.942829][ T29] schedule+0xbd/0x170 [ 501.953173][ T29] io_schedule+0x80/0xd0 [ 501.957481][ T29] bit_wait_io+0x11/0xd0 [ 501.962611][ T29] __wait_on_bit+0x9f/0x2c0 [ 501.967199][ T29] ? bit_wait+0xd0/0xd0 [ 501.973674][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 501.979894][ T29] ? bit_wait+0xd0/0xd0 [ 501.984132][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 501.990164][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 501.995260][ T29] ? bit_waitqueue+0x30/0x30 [ 501.999967][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 502.005231][ T29] do_get_write_access+0x5c9/0xe00 [ 502.010519][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 502.016560][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 502.022849][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 502.029119][ T29] ? __might_sleep+0xe0/0xe0 [ 502.033741][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 502.039402][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 502.044942][ T29] ext4_dirty_inode+0xcb/0x110 [ 502.049831][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 502.055665][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 502.060850][ T29] file_update_time+0x187/0x1a0 [ 502.065755][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 502.070958][ T29] ? filemap_fault+0x103c/0x1540 [ 502.075954][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 502.083766][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 502.090293][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 502.095374][ T29] ? __pte_offset_map+0x20d/0x280 [ 502.101527][ T29] do_page_mkwrite+0x153/0x3f0 [ 502.106366][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 502.111483][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 502.116475][ T29] ? numa_migrate_prep+0x350/0x350 [ 502.121722][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 502.127077][ T29] do_user_addr_fault+0x736/0x12d0 [ 502.132373][ T29] exc_page_fault+0x64/0x100 [ 502.137031][ T29] ? clear_bhb_loop+0x40/0x90 [ 502.141807][ T29] asm_exc_page_fault+0x26/0x30 [ 502.146688][ T29] RIP: 0033:0x7f0ae2e72f32 [ 502.151327][ T29] RSP: 002b:00007ffe0ea67c70 EFLAGS: 00010202 [ 502.157439][ T29] RAX: 0000000000010008 RBX: 00007f0ae3d55720 RCX: 0000000000000000 [ 502.165508][ T29] RDX: 0000001b30714000 RSI: 0000000000000008 RDI: 00007f0ae3d55720 [ 502.173565][ T29] RBP: 0000000000000118 R08: 00007f0ae3210000 R09: 00007f0ae3226128 [ 502.183103][ T29] R10: 0000000000000003 R11: 000000000000000c R12: ffffffff813bcb5e [ 502.191263][ T29] R13: 00007f0ae3226128 R14: 00000000000000fe R15: ffffffffffff0000 [ 502.199488][ T29] ? unwind_next_frame+0x178e/0x2990 [ 502.204947][ T29] [ 502.208024][ T29] INFO: task syz.0.14:5938 blocked for more than 144 seconds. [ 502.215829][ T29] Not tainted syzkaller #0 [ 502.220834][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.229698][ T29] task:syz.0.14 state:D stack:27048 pid:5938 ppid:5817 flags:0x00004004 [ 502.239287][ T29] Call Trace: [ 502.242603][ T29] [ 502.245554][ T29] __schedule+0x15ae/0x4660 [ 502.250248][ T29] ? mark_lock+0x94/0x320 [ 502.254643][ T29] ? asan.module_dtor+0x20/0x20 [ 502.259628][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 502.264717][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 502.270731][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 502.275990][ T29] schedule+0xbd/0x170 [ 502.280181][ T29] io_schedule+0x80/0xd0 [ 502.285082][ T29] bit_wait_io+0x11/0xd0 [ 502.289576][ T29] __wait_on_bit+0x9f/0x2c0 [ 502.294148][ T29] ? bit_wait+0xd0/0xd0 [ 502.298467][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 502.303990][ T29] ? bit_wait+0xd0/0xd0 [ 502.308171][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 502.313302][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 502.318470][ T29] ? bit_waitqueue+0x30/0x30 [ 502.325285][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 502.330660][ T29] do_get_write_access+0x5c9/0xe00 [ 502.335847][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 502.341957][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 502.348186][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 502.354492][ T29] ? __might_sleep+0xe0/0xe0 [ 502.359201][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 502.364783][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 502.370388][ T29] ext4_dirty_inode+0xcb/0x110 [ 502.375212][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 502.381163][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 502.386264][ T29] file_update_time+0x187/0x1a0 [ 502.392080][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 502.397201][ T29] ? filemap_fault+0x103c/0x1540 [ 502.402310][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 502.408110][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 502.414543][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 502.419836][ T29] ? __pte_offset_map+0x20d/0x280 [ 502.424920][ T29] do_page_mkwrite+0x153/0x3f0 [ 502.429899][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 502.434956][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 502.440013][ T29] ? numa_migrate_prep+0x350/0x350 [ 502.445201][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 502.450608][ T29] do_user_addr_fault+0x736/0x12d0 [ 502.455791][ T29] exc_page_fault+0x64/0x100 [ 502.460492][ T29] asm_exc_page_fault+0x26/0x30 [ 502.465398][ T29] RIP: 0033:0x7f8b99e72f32 [ 502.469989][ T29] RSP: 002b:00007fff2fbe5560 EFLAGS: 00010202 [ 502.476115][ T29] RAX: 0000000000004008 RBX: 00007f8b9ad55720 RCX: 0000000000000000 [ 502.484298][ T29] RDX: 0000001b30620000 RSI: 0000000000000008 RDI: 00007f8b9ad55720 [ 502.493023][ T29] RBP: 00000000000006a6 R08: 00007f8b9a210000 R09: 00007f8b9a226038 [ 502.501179][ T29] R10: 0000000000000007 R11: 0000000000000004 R12: ffffffff8a527cff [ 502.509361][ T29] R13: 00007f8b9a226038 R14: 00000000000000e1 R15: ffffffffffffc000 [ 502.517376][ T29] ? batadv_primary_if_get_selected+0xbf/0x410 [ 502.523680][ T29] [ 502.526774][ T29] INFO: task syz.3.13:5945 blocked for more than 145 seconds. [ 502.534512][ T29] Not tainted syzkaller #0 [ 502.540520][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 502.551314][ T29] task:syz.3.13 state:D stack:27560 pid:5945 ppid:5816 flags:0x00004004 [ 502.560821][ T29] Call Trace: [ 502.564298][ T29] [ 502.567301][ T29] __schedule+0x15ae/0x4660 [ 502.572003][ T29] ? mark_lock+0x94/0x320 [ 502.576397][ T29] ? asan.module_dtor+0x20/0x20 [ 502.581548][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 502.586650][ T29] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 502.593861][ T29] ? lockdep_hardirqs_on+0x98/0x150 [ 502.599441][ T29] schedule+0xbd/0x170 [ 502.603597][ T29] io_schedule+0x80/0xd0 [ 502.607886][ T29] bit_wait_io+0x11/0xd0 [ 502.612219][ T29] __wait_on_bit+0x9f/0x2c0 [ 502.616937][ T29] ? bit_wait+0xd0/0xd0 [ 502.621192][ T29] out_of_line_wait_on_bit+0x13c/0x190 [ 502.626803][ T29] ? bit_wait+0xd0/0xd0 [ 502.631781][ T29] ? __wait_on_bit+0x2c0/0x2c0 [ 502.636656][ T29] ? do_raw_spin_lock+0x11f/0x2b0 [ 502.641942][ T29] ? bit_waitqueue+0x30/0x30 [ 502.646589][ T29] ? do_raw_spin_unlock+0x121/0x230 [ 502.651891][ T29] do_get_write_access+0x5c9/0xe00 [ 502.657068][ T29] jbd2_journal_get_write_access+0x10c/0x140 [ 502.663405][ T29] __ext4_journal_get_write_access+0x208/0x6d0 [ 502.670814][ T29] ? __ext4_journal_ensure_credits+0x450/0x450 [ 502.677042][ T29] ? __might_sleep+0xe0/0xe0 [ 502.682140][ T29] ext4_reserve_inode_write+0x205/0x2a0 [ 502.687759][ T29] __ext4_mark_inode_dirty+0x13f/0x6d0 [ 502.693415][ T29] ext4_dirty_inode+0xcb/0x110 [ 502.699901][ T29] ? __ext4_expand_extra_isize+0x400/0x400 [ 502.705790][ T29] __mark_inode_dirty+0x2cc/0xc90 [ 502.711198][ T29] file_update_time+0x187/0x1a0 [ 502.716435][ T29] ext4_page_mkwrite+0x1f9/0x11a0 [ 502.721620][ T29] ? filemap_fault+0x103c/0x1540 [ 502.726745][ T29] ? mapping_seek_hole_data+0x1330/0x1330 [ 502.732562][ T29] ? pte_alloc_one+0x3b6/0x540 [ 502.737400][ T29] ? ext4_change_inode_journal_flag+0x8a0/0x8a0 [ 502.743871][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 502.749009][ T29] do_page_mkwrite+0x153/0x3f0 [ 502.753823][ T29] handle_mm_fault+0x1a2c/0x4a50 [ 502.758838][ T29] ? handle_mm_fault+0xe6/0x4a50 [ 502.763835][ T29] ? numa_migrate_prep+0x350/0x350 [ 502.770123][ T29] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 502.775480][ T29] do_user_addr_fault+0x736/0x12d0 [ 502.780717][ T29] exc_page_fault+0x64/0x100 [ 502.785405][ T29] ? clear_bhb_loop+0x40/0x90 [ 502.790192][ T29] asm_exc_page_fault+0x26/0x30 [ 502.795106][ T29] RIP: 0033:0x7f16b5a6baa3 [ 502.800623][ T29] RSP: 002b:00007ffc9f2cf480 EFLAGS: 00010246 [ 502.806758][ T29] RAX: 00000000005ffde8 RBX: 0000000000000000 RCX: 0000001b30364000 [ 502.814864][ T29] RDX: 0000001b30324000 RSI: 0000000000600000 RDI: 00007f16b5de0708 [ 502.823432][ T29] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 502.831620][ T29] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 502.839788][ T29] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffc9f2cf710 [ 502.847828][ T29] [ 502.850984][ T29] [ 502.850984][ T29] Showing all locks held in the system: [ 502.858809][ T29] 1 lock held by khungtaskd/29: [ 502.863691][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 502.874311][ T29] 2 locks held by getty/5535: [ 502.879449][ T29] #0: ffff88803143a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 502.889489][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 502.900313][ T29] 3 locks held by syz-executor/5805: [ 502.905641][ T29] #0: ffff88807cdfb120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 502.915716][ T29] #1: ffff88814df66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 502.925619][ T29] #2: ffff88814df72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 502.935448][ T29] 6 locks held by kworker/u4:1/5857: [ 502.940847][ T29] #0: ffff888018acc538 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 502.954192][ T29] #1: ffffc90004bdfd00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 502.966887][ T29] #2: ffff88814df660e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x20/0xf0 [ 502.977663][ T29] #3: ffff88814df70c58 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1a4/0x350 [ 502.988540][ T29] #4: ffff88814df72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 502.998456][ T29] #5: ffff8880782b3488 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x918/0x1a90 [ 503.008979][ T29] 5 locks held by kworker/u4:4/5870: [ 503.014316][ T29] #0: ffff8880b8e3c258 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x9c/0x130 [ 503.024430][ T29] #1: ffff8880b8f28a00 (psi_seq){-.-.}-{0:0}, at: __schedule+0x21d3/0x4660 [ 503.033265][ T29] #2: ffff88801cb60768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: cfg80211_wiphy_work+0x35/0x260 [ 503.043521][ T29] #3: ffff88805d6d0dc0 (&wdev->mtx){+.+.}-{3:3}, at: ieee80211_ibss_work+0xac/0x1100 [ 503.053279][ T29] #4: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: ieee80211_sta_active_ibss+0xb1/0x320 [ 503.063707][ T29] 2 locks held by syz.0.7/5918: [ 503.068698][ T29] #0: ffff88807c6f2418 (sb_writers#5){.+.+}-{0:0}, at: do_coredump+0x1774/0x24a0 [ 503.078024][ T29] #1: ffff888024cad720 (&mm->mmap_lock){++++}-{3:3}, at: get_dump_page+0xb6/0x200 [ 503.087773][ T29] 3 locks held by syz.2.11/5921: [ 503.092838][ T29] #0: ffff88807d32c420 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 503.103900][ T29] #1: ffff88814df66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 503.115180][ T29] #2: ffff88814df72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 503.125056][ T29] 3 locks held by syz.1.15/5936: [ 503.130098][ T29] #0: ffff88807d32baa0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 503.140356][ T29] #1: ffff88814df66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 503.150299][ T29] #2: ffff88814df72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 503.160142][ T29] 3 locks held by syz.0.14/5938: [ 503.165097][ T29] #0: ffff888024cae0a0 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 503.175207][ T29] #1: ffff88814df66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 503.185076][ T29] #2: ffff88814df72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 503.194950][ T29] 3 locks held by syz.3.13/5945: [ 503.200014][ T29] #0: ffff88807d32b120 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 503.210741][ T29] #1: ffff88814df66510 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1e2/0x11a0 [ 503.220720][ T29] #2: ffff88814df72990 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 503.231821][ T29] [ 503.234216][ T29] ============================================= [ 503.234216][ T29] [ 503.243117][ T29] NMI backtrace for cpu 0 [ 503.247495][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 503.254710][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.264777][ T29] Call Trace: [ 503.268068][ T29] [ 503.271011][ T29] dump_stack_lvl+0x18c/0x250 [ 503.275782][ T29] ? __wake_up_klogd+0xd9/0x100 [ 503.280673][ T29] ? show_regs_print_info+0x20/0x20 [ 503.285894][ T29] ? load_image+0x420/0x420 [ 503.290442][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 503.295402][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 503.301592][ T29] ? load_image+0x420/0x420 [ 503.306152][ T29] ? wq_watchdog_touch+0xef/0x170 [ 503.311257][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 503.317393][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 503.323430][ T29] watchdog+0xf59/0xfa0 [ 503.327661][ T29] ? watchdog+0x1e1/0xfa0 [ 503.332043][ T29] kthread+0x2fa/0x390 [ 503.336185][ T29] ? hungtask_pm_notify+0x50/0x50 [ 503.341252][ T29] ? kthread_blkcg+0xd0/0xd0 [ 503.345878][ T29] ret_from_fork+0x48/0x80 [ 503.350311][ T29] ? kthread_blkcg+0xd0/0xd0 [ 503.354944][ T29] ret_from_fork_asm+0x11/0x20 [ 503.359736][ T29] [ 503.363869][ T29] Sending NMI from CPU 0 to CPUs 1: [ 503.369396][ C1] NMI backtrace for cpu 1 [ 503.369424][ C1] CPU: 1 PID: 5839 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 503.369441][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.369450][ C1] Workqueue: 0x0 (events_unbound) [ 503.369474][ C1] RIP: 0010:finish_task_switch+0x27b/0x8f0 [ 503.369496][ C1] Code: d5 04 00 00 4c 89 e7 e8 a3 a7 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 49 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 <84> c0 0f 85 d0 02 00 00 41 80 a4 24 03 16 00 00 bf 49 8d 9c 24 80 [ 503.369509][ C1] RSP: 0018:ffffc90004adfb20 EFLAGS: 00000a06 [ 503.369522][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: a7bea8dc277d1200 [ 503.369533][ C1] RDX: dffffc0000000000 RSI: ffffffff8acacce0 RDI: ffff8880787e9600 [ 503.369545][ C1] RBP: ffffc90004adfb70 R08: ffffffff8e8c8daf R09: 1ffffffff1d191b5 [ 503.369557][ C1] R10: dffffc0000000000 R11: fffffbfff1d191b6 R12: ffff8880787e8000 [ 503.369570][ C1] R13: ffff8880b8f3cf88 R14: dffffc0000000000 R15: ffff8880b8f3cd08 [ 503.369582][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 503.369596][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.369607][ C1] CR2: 000055ad0f7e5d08 CR3: 000000000cf32000 CR4: 00000000003506e0 [ 503.369622][ C1] Call Trace: [ 503.369627][ C1] [ 503.369637][ C1] __schedule+0x15b6/0x4660 [ 503.369660][ C1] ? pwq_dec_nr_in_flight+0x1e1/0x3d0 [ 503.369693][ C1] ? asan.module_dtor+0x20/0x20 [ 503.369716][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 503.369739][ C1] ? kthread_data+0x4f/0xc0 [ 503.369754][ C1] ? wq_worker_sleeping+0x63/0x240 [ 503.369774][ C1] schedule+0xbd/0x170 [ 503.369795][ C1] worker_thread+0xc17/0xfe0 [ 503.369830][ C1] kthread+0x2fa/0x390 [ 503.369845][ C1] ? pr_cont_work+0x550/0x550 [ 503.369866][ C1] ? kthread_blkcg+0xd0/0xd0 [ 503.369883][ C1] ret_from_fork+0x48/0x80 [ 503.369903][ C1] ? kthread_blkcg+0xd0/0xd0 [ 503.369919][ C1] ret_from_fork_asm+0x11/0x20 [ 503.369949][ C1] [ 503.370998][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 503.575379][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 503.582599][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 503.592679][ T29] Call Trace: [ 503.595996][ T29] [ 503.598953][ T29] dump_stack_lvl+0x18c/0x250 [ 503.603677][ T29] ? show_regs_print_info+0x20/0x20 [ 503.608904][ T29] ? load_image+0x420/0x420 [ 503.613438][ T29] panic+0x2ca/0x720 [ 503.617370][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 503.621914][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 503.627495][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 503.632905][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 503.639095][ T29] watchdog+0xf98/0xfa0 [ 503.643284][ T29] ? watchdog+0x1e1/0xfa0 [ 503.647650][ T29] kthread+0x2fa/0x390 [ 503.651747][ T29] ? hungtask_pm_notify+0x50/0x50 [ 503.656810][ T29] ? kthread_blkcg+0xd0/0xd0 [ 503.661425][ T29] ret_from_fork+0x48/0x80 [ 503.665869][ T29] ? kthread_blkcg+0xd0/0xd0 [ 503.670484][ T29] ret_from_fork_asm+0x11/0x20 [ 503.675285][ T29] [ 503.678926][ T29] Kernel Offset: disabled [ 503.683259][ T29] Rebooting in 86400 seconds..