last executing test programs: 14.040563324s ago: executing program 1 (id=445): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) 12.836889603s ago: executing program 1 (id=447): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81", 0xa1}, {&(0x7f0000000700)="f80ec2e2badd0335f68d70715f3cbda9183845a4995f9a80f409315c1c0dbfbd19ea9d44961f3b8fdf64cbdbd4d6965145", 0x31}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 12.604509825s ago: executing program 3 (id=450): openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x8001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) 11.067769251s ago: executing program 3 (id=452): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) syz_open_procfs$pagemap(0x0, 0x0) getsockopt(r0, 0x7, 0x8, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 10.942231727s ago: executing program 1 (id=453): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)}, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20040041) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0x8397de475a1b5b02) 10.905794979s ago: executing program 0 (id=454): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x68, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5a, 0xffff, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x0, 0x0, [0x5]}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0xa888, 0x88be, 0x86ddffff, {{0x0, 0x1, 0xfe}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x9}}}}}}}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="d60a0000000000006111a00000000000180000000000000000000000000000009500000000000000db020bc0694f5e514f2cfd2907"], &(0x7f0000000000)='GPL\x00'}, 0x94) 10.606826774s ago: executing program 0 (id=455): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) 8.607280973s ago: executing program 1 (id=456): unshare(0x8000000) socket(0x1a, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040e5e0c0d"], 0x8) 8.47544947s ago: executing program 1 (id=458): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000280)='./file0\x00', 0x200841a, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x553b, &(0x7f00000024c0)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001f80)='.\x00', 0x101000, 0x108) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x9, 0x0, &(0x7f0000000180)) getdents64(r0, 0x0, 0x0) 6.85916018s ago: executing program 3 (id=460): openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x8001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x13, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r5 = fanotify_init(0xf00, 0x1) fanotify_mark(r5, 0x105, 0x40009965, r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) 5.710265137s ago: executing program 3 (id=462): socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x44e02) 5.697517477s ago: executing program 2 (id=463): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 5.696351937s ago: executing program 0 (id=464): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 4.705166747s ago: executing program 1 (id=465): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x4428, &(0x7f0000008940)="$eJzs3T9sG2UfAOD3Lvm+Jv3afknpUCQkLFEJBChKOgGpRJqmTZM2FBVaIRbXSdw24MRV4iCGDmGrxITEgBgqkNgyVRlYy8jIwlgmhkowsCAhVQTZPie5i62YKk5oeR6pOd/73/75Xr83XN84Ubk5t5SbW8oVFnLlmetLJ3MflUvL88UQ75H97p/2dCJOYr9/Lp05987VkyF8N/vjw/X19fVQ1R2aGtry+vffbs9sPTbEmTrVdpu3tlveDyEc2zauqq4QwnvfhhCFEE4naaPJsTeEcCTU867e/vRabpdGc+9B8VT+0dSdteETk6t311q/9yiEL0vPvnpj/pcXuoZ/enmXugcAAAAAAAAAAAAAAAAA4Ak3fvnSlbcHh8L9KHSvRtuf1x1Pjq2ej13fNc93/s0CAAAAAAAAAAAAAAAAAADAP9Tm8/+56GiT5//HkuNIi/rrb3Z+jHTOxFuXxs4ODiX7v0fb8l9Lkn493RX6m+z7nt3//XSmfvP937f387ga42v02xeieCB1HscDAyF8nWz8fjw6GJfKS5VXrpeXF2Z3bRhPrHT867v3p6KTbOi/U/x//r5ebjTTfuf3/39m27epen5t975iT7V0/Ltalvvmk6it6/9Mpt5exJ/Hl45/dy2td2uBkfoEUI3/Z907x38s036n4n8khJCLqmPNpWaA6hqmmt5qvUJaOv7/qaWlps7kg2x1/f+Rif/ZTPv7Nf+vZH+IaCod///W0npSJTav//545+v/XKb9/Yh/dfwrfv/bko7/gXpid6pI7ZNsd/4fz7TfqfhfiZNxHolS34DVqJ7e6v+rIy0d/55t+Zv3f3Fb67/zmfp7df/X6Ldx/9eY/l+K6vd/NJeOf2/Lcu1e/xOZep2e/0dq6z8eVzr+B2tp6bVzX+1vu/GfzLTfqfjXViU9jfhvzid/Hqinf2X915Z0/P9XT4y3llip/a2t/6Kd1/8XMu3vx/qvOv6VuLO9Pi3S8T/Uslw1/j+08ft/MVOv8/HfzdXEv086/odblqtd/z07x38qU6/T8X+xk40DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAFGk2NfiOKB1HkcDwyEcCY5Px4ORtOF2fx0qTzz4VIIY0l6LhyNbpTK04VSfm6hPFvMF0ql8kwIZ5P8Y6EnWiqVK/n5wq1zG231RjeLhcXKdLFQCSGMJ+nPhcONtqbnKvOFWyGE8xt5/4/Li7duFhbys3OLbwwODg6GiY0x9EfFjyvFhUq993puCJMbdfuiLYOrZV/YGMuh6IPy8uJCoVRLv7ilTqk8UyhtqTOV5H0e+qPK4vLCTKFSzJfKNxr97aeR5Dg2cfndyxeHtuVfi+rH0b0dFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB/0/3h178IIXTXz+IQQi5KXkTJv5R7D4qn8o+m7qwNn5hcvbv2sFkZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwi79ozQQRHEAfjMWWnoMq2W3s11RRAtXBE+gx/AwehQv4R0sUqRNEQLJLIT9A9sk1fc1D+bHzHswDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOUe37r317qJSHG1vYz4/fz7P86fS/2+m75/cYYZOZ2nl+7+oW7Kv6dRfluOVm3ep5v110dM1N7PYE+G+3Qw7jM0t29z8/V9ryPlKiLakt+knKtq2VsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI4dOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCxAAAAAIAwf+so+jYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4FQAA//8KEyDQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x4) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5406, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000003c0), 0xb315) 3.924507606s ago: executing program 0 (id=466): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4801}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x6}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0xc568}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_LINKMODE={0x5, 0x11, 0x5}]}, 0x48}}, 0x200088c4) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000880)) shmat(r2, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) syz_clone3(&(0x7f0000000300)={0x100000400, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0], 0x1}, 0x58) 3.922383636s ago: executing program 3 (id=467): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0xfffffffd, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') 3.548494164s ago: executing program 2 (id=468): r0 = socket(0x10, 0x3, 0x1000) sendmsg$can_bcm(r0, 0x0, 0x8800) sendmsg$kcm(r0, &(0x7f0000000b40)={&(0x7f0000000100)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000000)="21cfe65b3b5b0c15c145acc30186525ea639870475c6e9e42518607570e14a", 0x1f}, {&(0x7f0000000180)="0912f7b179d91aebdd36958c70ef", 0xe}, {&(0x7f00000001c0)="b135e84ea58ecd4e9b26c09f40cdfa7fa7e40f5c065f527974ab11a447ce4a040855e5cf1af45e3140d73f9c4f2b4359df74bd7d70a65d0c41db2be8492d44844ffc0b841de39c85eda7ccf20cebc8dbcf1f1d2a39c7771d8be525852f7b84a31d657fb7b1552d836fa1bd2ce29b056f7c7c1fc6fb28824a0a761b7110ea3deca16e7bb07bc87685f0c04f8bd9a2ade852b125a7df1375ea972fa9", 0x9b}, {&(0x7f00000002c0)="445c17c33ae4ea38183fc131f8a3be615c20bd86bb8184f92419a68e974472a45af6aba0cf1064c85647e78c9f26425311b617f63a777542b4d8c9ce4aced8101e6f6b24e5", 0x45}, {&(0x7f0000000380)="ac2032d95fa30d76efd223848bb74a174682c1816c8d1e10209d95f1eec34f520023d0bc0f1f41aeb00a7cc375ff368441dc0f389683b198b0e7080f791292aad935fde5a325365277753f77c88f30318189f27edfa0e6f438b6ff486eddbde81087c7ca13369b6d3d8972fdde9de5560297f8", 0x73}, {&(0x7f0000000400)="fcea50680173131d5d451188b94e1cd1e64f3bbca06484be2509a5dbeed2631c2e256baea8b797b7220fc9fdeb513a986078e79cb96c5e09195f4f22c7b1d7805d1c0ae706582ee358416f31046d602805aeee7bd33eada48a61d413467290820fe82baab19fbe2b8547f0433a8a7139b8ad84cc3e8cc66745f8c98cd80bc77f35d96710ead4cbd59ff847b4eb33fd8a88f296e1715c3b0dbd5af99ac7ffcc6b8ed551bef240aec47ec135d167e7079b09a3b33e0215a9a0187dd570c58de8f1bb471e2d879c8a7027b9ce4b522aa9a66eef85525683c0f5da0830c9f54c717dc8e33bc926641fa7a3a61c18b99b3c67d884f4", 0xf3}, {&(0x7f0000000500)="3755c714410961908ec51bdc3b09cd8f155589154b37dc0225496b9e94de54ce5b087bd4a657c451427ef789919381dbe55a2e0169601f4ae927561210a4c6e778c9b0c5ce2b590b0ec054e1fce0c1d312eda05ed1f47dbe5d774f6e80d33d4e3fbb827f83c243ba8457637d24312fac077cee583ae531b6ddb5686a323c08e2bc582e", 0x83}, {&(0x7f0000000640)="5e4db21c69bfe929de9a26285a77f9228a8c404887a8c83811c670b0d074cce6b8cc438e4cd9caf25a6f7385d6e21b869deecde1eeb35409a43d677778d16efed00b496b168caf8b5cdfffebd01b8ec910ec35c536b2c04c96f56d42a92d926b6fde9f70f744a2f6c911b3b15962a0d68246506c9d0094073d11608b6ba79e3ac495b36b2d85943328b895d20bdbd418daf4a099df67f896386d9f0bd5f226a8b0ea97dab62fd19742fc800a46f08af0ef66f4d76b", 0xb5}], 0x8, &(0x7f00000007c0)=[{0x28, 0x111, 0x6, "ee14e231694ac11d1a8d50a2423b5580df42ebea2b"}, {0xe8, 0x114, 0xffff, "4fb5095e1e0e4b4ee1d53343541bd86221f0636fc07f534576a79efb779b2bf5ba90c5a1c231fe2b37259f35e161047e38fd9faf626b1793fa6d5457b3b605a81644851919f3c5676ddc21aec2bcf7e41dfef1aee53f5b0c3725352bf10fbda8c845f71b67c4550f291c95248b8d4af3caae2783325e86699b39fef4f5f90d8fd9d3cb36fd1cf8f77e2a51a159e771a6eccc8f53de82f43832bb9f7b0e992feff55373a1bc281eeb78dfc26d694aa43623ef447b5f5fb7ee066983fc847a1500c5140159f85ab4715d2e3ea6af5aebe7970f251a5c"}, {0x10, 0x3a, 0xa}, {0x78, 0x6, 0x4, "034ee23293b07d5ff0976f9407114a06aac9d3af74e4d11c9f681a70b49608827cf83ec007697538fb0ab9f94919eddb287ec731dcb67489cdfc99efb2f8275943c72e4163105a6e45519c142ac788f5cc1b4c4ba77600ef89de7a07db6a7c22247c9753"}, {0x28, 0x102, 0x8, "61801d6db8097f4fedc0a6b3774b032d51740af4"}, {0x58, 0x117, 0xffffffcb, "6a3a25da76bf30434677db446e625f45d347a55ab61bbaef87f058793cd7194526bc27183d68f61a4f4211ff43efba22c7e7e0049188a015ed0fd59ff39d8fe4abf6"}], 0x218}, 0x80) fchdir(0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sequencer(0xffffff9c, 0x0, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x28, 0x4, 0x8, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004850}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000000)) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$TCXONC(r2, 0x4b3a, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0x5) 2.481432757s ago: executing program 2 (id=469): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000180)={0x2}, 0x2) 1.844361089s ago: executing program 0 (id=470): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 1.844065839s ago: executing program 2 (id=471): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81", 0xa1}, {&(0x7f0000000700)="f80ec2e2badd0335f68d70715f3cbda9183845a4995f9a80f409315c1c0dbfbd19ea9d44961f3b8fdf64cbdbd4d6965145aa3989", 0x34}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 1.709646436s ago: executing program 3 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x2, [{}, {}]}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}]}, 0x48}}, 0x0) 289.605856ms ago: executing program 2 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfcd, &(0x7f0000001180)={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfbf, 0xfffd, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0xfab, 0x0, @opaque="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"}}}}}, 0x0) 174.996302ms ago: executing program 0 (id=474): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="080000000000000000000000000000000000000094bee2e7e598fea2ad21014d1c3a2af3851e6a191fcbc10774798544f8927886f343cbbb8d43a9ce382b5df710fda8273783e73234acde8234", @ANYRES32=0x0], 0x50) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x10bb41) ioctl$USBDEVFS_RESET(r1, 0x8008550e) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) r5 = accept$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r5, &(0x7f0000000ec0), 0x0, 0x40440c5) recvmsg(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000540)=""/33, 0x21}, {&(0x7f00000007c0)=""/137, 0x89}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1d, 0xffff, 0x9, 0x5059, 0x40000, r0, 0x200, '\x00', r3, 0xffffffffffffffff, 0x1}, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000200)={r3, 0x1, 0x6, @multicast}, 0x10) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x248, 0x0, 0xd0, 0xffffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xff000000, 0x0, 0xff], [0xff000000, 0x0, 0xffffffff, 0xff], 'lo\x00', 'dvmrp0\x00', {0xff}, {}, 0x84, 0x9, 0x4, 0x58}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0xe2, 0x28, "6c8c61c7cb55d04abaae4658fdaad4b05e818e14980e5fb6af19c6c71daf"}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0xff000000, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'team_slave_1\x00', 'bond0\x00', {}, {}, 0x4, 0x40, 0x9, 0x28}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x2, 0x7f, {0xc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r8, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) 0s ago: executing program 2 (id=475): socket$inet_mptcp(0x2, 0x1, 0x106) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0x44e02) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 56.871205][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.890080][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. syzkaller login: [ 78.007293][ T5757] cgroup: Unknown subsys name 'net' [ 78.146049][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.626255][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.999149][ T5769] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.011962][ T5769] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.030699][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.042876][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.052083][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.060347][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.079794][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.093638][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.093693][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.104933][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.115930][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.120548][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.129201][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.140835][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.146540][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.153795][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.161380][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.169272][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.245601][ T5769] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.263586][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.278019][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.295606][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.306950][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.315457][ T5776] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.660380][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 81.722561][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 81.797731][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 81.823201][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 81.937330][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.946443][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.955587][ T5768] bridge_slave_0: entered allmulticast mode [ 81.964297][ T5768] bridge_slave_0: entered promiscuous mode [ 82.000127][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.008652][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.016535][ T5768] bridge_slave_1: entered allmulticast mode [ 82.024952][ T5768] bridge_slave_1: entered promiscuous mode [ 82.058788][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.067531][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.078331][ T5775] bridge_slave_0: entered allmulticast mode [ 82.086915][ T5775] bridge_slave_0: entered promiscuous mode [ 82.123315][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.133034][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.142307][ T5774] bridge_slave_0: entered allmulticast mode [ 82.149979][ T5774] bridge_slave_0: entered promiscuous mode [ 82.158515][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.166863][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.176097][ T5774] bridge_slave_1: entered allmulticast mode [ 82.183400][ T5774] bridge_slave_1: entered promiscuous mode [ 82.192449][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.200815][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.208898][ T5775] bridge_slave_1: entered allmulticast mode [ 82.215968][ T5775] bridge_slave_1: entered promiscuous mode [ 82.277260][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.292375][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.313715][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.328924][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.340773][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.348539][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.356504][ T5771] bridge_slave_0: entered allmulticast mode [ 82.364519][ T5771] bridge_slave_0: entered promiscuous mode [ 82.373499][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.381304][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.389473][ T5771] bridge_slave_1: entered allmulticast mode [ 82.398424][ T5771] bridge_slave_1: entered promiscuous mode [ 82.416808][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.466144][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.483821][ T5774] team0: Port device team_slave_0 added [ 82.505067][ T5768] team0: Port device team_slave_0 added [ 82.521744][ T5774] team0: Port device team_slave_1 added [ 82.540201][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.554587][ T5768] team0: Port device team_slave_1 added [ 82.574565][ T5775] team0: Port device team_slave_0 added [ 82.596888][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.619029][ T5775] team0: Port device team_slave_1 added [ 82.640366][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.652180][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.681916][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.722338][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.729917][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.756834][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.770622][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.778378][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.806688][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.818969][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.827480][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.862033][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.904139][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.911631][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.942870][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.965587][ T5771] team0: Port device team_slave_0 added [ 82.984790][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.993012][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.022819][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.041257][ T5771] team0: Port device team_slave_1 added [ 83.093047][ T5768] hsr_slave_0: entered promiscuous mode [ 83.101001][ T5768] hsr_slave_1: entered promiscuous mode [ 83.119083][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.126242][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.156431][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.172192][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.179358][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.206258][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.232290][ T5774] hsr_slave_0: entered promiscuous mode [ 83.239277][ T5776] Bluetooth: hci0: command tx timeout [ 83.239289][ T51] Bluetooth: hci2: command tx timeout [ 83.251874][ T5774] hsr_slave_1: entered promiscuous mode [ 83.258941][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.267437][ T5774] Cannot create hsr debugfs directory [ 83.320053][ T51] Bluetooth: hci1: command tx timeout [ 83.332448][ T5775] hsr_slave_0: entered promiscuous mode [ 83.340613][ T5775] hsr_slave_1: entered promiscuous mode [ 83.347260][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.356474][ T5775] Cannot create hsr debugfs directory [ 83.398254][ T51] Bluetooth: hci3: command tx timeout [ 83.454142][ T5771] hsr_slave_0: entered promiscuous mode [ 83.460773][ T5771] hsr_slave_1: entered promiscuous mode [ 83.467506][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.476015][ T5771] Cannot create hsr debugfs directory [ 83.822188][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.839807][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.852672][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.863616][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.925938][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.940972][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.956703][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.967307][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.034376][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.065042][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.076905][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.094250][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.193540][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.206433][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.217678][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.230469][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.351123][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.381779][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.411022][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.429979][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.463500][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.471770][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.483024][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.490768][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.518336][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.525741][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.538742][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.546020][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.562247][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.637195][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.681616][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.710067][ T2882] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.720607][ T2882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.745527][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.766844][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.775418][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.835659][ T2882] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843826][ T2882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.861090][ T2882] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.870003][ T2882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.130264][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.235767][ T5768] veth0_vlan: entered promiscuous mode [ 85.294785][ T5768] veth1_vlan: entered promiscuous mode [ 85.319974][ T51] Bluetooth: hci0: command tx timeout [ 85.321108][ T5776] Bluetooth: hci2: command tx timeout [ 85.353145][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.398479][ T5776] Bluetooth: hci1: command tx timeout [ 85.438979][ T5768] veth0_macvtap: entered promiscuous mode [ 85.471327][ T5768] veth1_macvtap: entered promiscuous mode [ 85.479056][ T5776] Bluetooth: hci3: command tx timeout [ 85.501553][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.526152][ T5774] veth0_vlan: entered promiscuous mode [ 85.569982][ T5774] veth1_vlan: entered promiscuous mode [ 85.581067][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.606759][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.626172][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.644692][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.656287][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.667095][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.677480][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.739087][ T5775] veth0_vlan: entered promiscuous mode [ 85.774000][ T5774] veth0_macvtap: entered promiscuous mode [ 85.791259][ T5775] veth1_vlan: entered promiscuous mode [ 85.825992][ T5774] veth1_macvtap: entered promiscuous mode [ 85.873236][ T5771] veth0_vlan: entered promiscuous mode [ 85.911071][ T5775] veth0_macvtap: entered promiscuous mode [ 85.926898][ T5775] veth1_macvtap: entered promiscuous mode [ 85.941927][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.954814][ T5771] veth1_vlan: entered promiscuous mode [ 85.968300][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.973083][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.989342][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.001223][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.029521][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.041604][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.055768][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.067415][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.078128][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.088025][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.100098][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.135879][ T2882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.149638][ T2882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.184022][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.195992][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.206835][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.218245][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.230465][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.257450][ T5771] veth0_macvtap: entered promiscuous mode [ 86.322911][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.360045][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.379954][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.392389][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.414094][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.506400][ T5771] veth1_macvtap: entered promiscuous mode [ 86.766484][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.782940][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.798063][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.809358][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.022658][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.037090][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.051409][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.070701][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.084922][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.096623][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.133975][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.173283][ T5825] IPVS: starting estimator thread 0... [ 87.183083][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.223754][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.263952][ T5834] syz.0.6[5834]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 87.272225][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.282658][ T5834] loop0: detected capacity change from 0 to 64 [ 87.287463][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.295804][ T5832] IPVS: using max 22 ests per chain, 52800 per kthread [ 87.302953][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.320001][ T5834] hfs: gid requires an argument [ 87.334361][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.346357][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.358379][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.368783][ T5834] hfs: unable to parse mount options [ 87.370548][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.399993][ T5776] Bluetooth: hci0: command tx timeout [ 87.400024][ T51] Bluetooth: hci2: command tx timeout [ 87.474625][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.486656][ T51] Bluetooth: hci1: command tx timeout [ 87.500171][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.513812][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.526264][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.551178][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.568662][ T51] Bluetooth: hci3: command tx timeout [ 87.577399][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.754801][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.772486][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.906043][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.937968][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.939016][ T5839] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.036269][ T2984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.098870][ T2984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.244209][ T5836] loop0: detected capacity change from 0 to 32768 [ 88.382511][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.153900][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.337125][ T5836] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.478463][ T5776] Bluetooth: hci2: command tx timeout [ 89.485981][ T51] Bluetooth: hci0: command tx timeout [ 89.511966][ T5849] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 89.572037][ T51] Bluetooth: hci1: command tx timeout [ 89.581471][ T5836] XFS (loop0): Ending clean mount [ 89.705273][ T51] Bluetooth: hci3: command tx timeout [ 90.605914][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.617271][ T5868] loop1: detected capacity change from 0 to 1024 [ 90.651227][ T5868] ======================================================= [ 90.651227][ T5868] WARNING: The mand mount option has been deprecated and [ 90.651227][ T5868] and is ignored by this kernel. Remove the mand [ 90.651227][ T5868] option from the mount to silence this warning. [ 90.651227][ T5868] ======================================================= [ 90.889643][ T5868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.069200][ T5868] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4045: comm syz.1.9: Allocating blocks 449-513 which overlap fs metadata [ 91.313910][ T5871] loop3: detected capacity change from 0 to 32768 [ 91.396466][ T5871] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.489075][ T5877] EXT4-fs (loop1): pa ffff888076563910: logic 5632, phys. 417, len 6 [ 91.498808][ T5877] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5386: group 0, free 1, pa_free 5 [ 91.598026][ T5871] XFS (loop3): Ending clean mount [ 91.694079][ T5876] loop0: detected capacity change from 0 to 32768 [ 91.696116][ T5869] loop2: detected capacity change from 0 to 32768 [ 91.805809][ T5876] JBD2: Ignoring recovery information on journal [ 91.870059][ T5869] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 91.898895][ T5869] JBD2: Ignoring recovery information on journal [ 91.912342][ T5774] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 91.939260][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.980221][ T5869] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 91.994854][ T5876] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 92.338792][ T28] audit: type=1800 audit(1773869541.605:2): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 92.596830][ T5768] ocfs2: Unmounting device (7,0) on (node local) [ 92.692516][ T2131] cfg80211: failed to load regulatory.db [ 92.905820][ T5869] syz.2.3 (5869) used greatest stack depth: 19472 bytes left [ 92.964927][ T5771] OCFS2: ERROR (device loop2): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #33 has bad signature [ 92.988187][ T5771] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 93.003500][ T5771] OCFS2: File system is now read-only. [ 93.004230][ T5891] loop1: detected capacity change from 0 to 40427 [ 93.009770][ T5771] (syz-executor,5771,0):_ocfs2_free_suballoc_bits:2489 ERROR: status = -30 [ 93.038930][ T5771] (syz-executor,5771,0):_ocfs2_free_clusters:2583 ERROR: status = -30 [ 93.046063][ T5891] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 93.050688][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1001 ERROR: status = -30 [ 93.062449][ T5891] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 93.081712][ T5771] (syz-executor,5771,0):ocfs2_sync_local_to_main:1013 ERROR: status = -30 [ 93.095534][ T5771] (syz-executor,5771,0):ocfs2_shutdown_local_alloc:449 ERROR: status = -30 [ 93.127182][ T5771] ocfs2: Unmounting device (7,2) on (node local) [ 93.164510][ T5891] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.228345][ T5825] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.305492][ T5891] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 93.327379][ T5891] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 93.445935][ T5825] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.478359][ T5825] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.499888][ T5825] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 93.544850][ T5825] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.587321][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.598462][ T5891] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 93.617218][ T5891] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 93.625577][ T5825] usb 1-1: Product: syz [ 93.643582][ T5825] usb 1-1: Manufacturer: syz [ 93.662095][ T5891] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 93.680489][ T5825] usb 1-1: SerialNumber: syz [ 93.700580][ T5891] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 93.746487][ T5891] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 93.756020][ T5891] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 93.764831][ T5891] F2FS-fs (loop1): invalid namelen(0), ino:0, run fsck to fix. [ 93.803497][ T5825] cdc_mbim 1-1:1.0: skipping garbage [ 95.532818][ T5918] sched: RT throttling activated [ 96.194629][ T5825] cdc_mbim 1-1:1.0: SET_NTB_FORMAT failed [ 96.261100][ T5825] cdc_mbim 1-1:1.0: bind() failure [ 96.472672][ T5825] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 96.483241][ T5825] cdc_ncm 1-1:1.1: bind() failure [ 96.513067][ T5825] usb 1-1: USB disconnect, device number 2 [ 97.418854][ T5931] loop3: detected capacity change from 0 to 128 [ 97.521416][ T5931] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.568337][ T5931] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.821976][ T5774] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 97.934848][ T5926] loop0: detected capacity change from 0 to 32768 [ 97.968425][ T5926] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 scanned by syz.0.20 (5926) [ 98.189379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 98.213034][ T5926] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 98.258426][ T5935] loop2: detected capacity change from 0 to 32768 [ 98.645651][ T5926] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 98.733754][ T5926] BTRFS info (device loop0): using free space tree [ 99.079939][ T5935] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 99.157954][ T5926] BTRFS info (device loop0): enabling ssd optimizations [ 99.167110][ T5926] BTRFS info (device loop0): auto enabling async discard [ 99.223852][ T5935] XFS (loop2): Ending clean mount [ 101.091112][ T5768] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 101.321536][ T5771] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 102.257685][ T5981] netlink: 56 bytes leftover after parsing attributes in process `syz.2.28'. [ 102.549007][ T5982] syzkaller0: entered promiscuous mode [ 102.555147][ T5982] syzkaller0: entered allmulticast mode [ 102.600281][ T5977] loop1: detected capacity change from 0 to 32768 [ 102.677605][ T5977] (syz.1.26,5977,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.723861][ T5977] (syz.1.26,5977,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 102.801802][ T5985] loop2: detected capacity change from 0 to 16 [ 102.807122][ T5977] JBD2: Ignoring recovery information on journal [ 102.925820][ T5977] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 102.937503][ T5985] erofs: (device loop2): mounted with root inode @ nid 36. [ 103.109578][ T5985] syz.2.29: attempt to access beyond end of device [ 103.109578][ T5985] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 103.148489][ T5989] Cannot find add_set index 0 as target [ 103.154376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 103.156333][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 104.059711][ T5985] syz.2.29: attempt to access beyond end of device [ 104.059711][ T5985] loop2: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 104.121558][ T5985] syz.2.29: attempt to access beyond end of device [ 104.121558][ T5985] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 104.209889][ T5985] syz.2.29: attempt to access beyond end of device [ 104.209889][ T5985] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 104.301745][ T5985] syz.2.29: attempt to access beyond end of device [ 104.301745][ T5985] loop2: rw=0, sector=41, nr_sectors = 1 limit=16 [ 104.319628][ T5995] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.429870][ T5985] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 104.458355][ T5994] syz.2.29: attempt to access beyond end of device [ 104.458355][ T5994] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 104.497998][ T5994] syz.2.29: attempt to access beyond end of device [ 104.497998][ T5994] loop2: rw=0, sector=131156, nr_sectors = 1 limit=16 [ 104.547983][ T5994] syz.2.29: attempt to access beyond end of device [ 104.547983][ T5994] loop2: rw=0, sector=36, nr_sectors = 1 limit=16 [ 104.595199][ T5994] syz.2.29: attempt to access beyond end of device [ 104.595199][ T5994] loop2: rw=0, sector=131157, nr_sectors = 1 limit=16 [ 104.668047][ T5994] syz.2.29: attempt to access beyond end of device [ 104.668047][ T5994] loop2: rw=0, sector=41, nr_sectors = 1 limit=16 [ 104.692685][ T5994] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 104.737509][ T5775] ocfs2: Unmounting device (7,1) on (node local) [ 105.294651][ T6001] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 105.340281][ T6003] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.348238][ T6001] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 105.369384][ T6001] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 105.942055][ T6003] bridge0: port 3(syz_tun) entered blocking state [ 105.950863][ T6003] bridge0: port 3(syz_tun) entered disabled state [ 105.982053][ T6003] syz_tun: entered allmulticast mode [ 106.016208][ T6003] syz_tun: entered promiscuous mode [ 106.037050][ T6003] bridge0: port 3(syz_tun) entered blocking state [ 106.048262][ T6003] bridge0: port 3(syz_tun) entered forwarding state [ 106.908397][ T6014] loop0: detected capacity change from 0 to 2048 [ 106.953367][ T6014] ext4: Unknown parameter 'seclabel' [ 107.211462][ T6017] loop6: detected capacity change from 0 to 7 [ 107.237248][ T6017] Dev loop6: unable to read RDB block 7 [ 107.243712][ T6017] loop6: unable to read partition table [ 107.252277][ T6017] loop6: partition table beyond EOD, truncated [ 107.266996][ T6017] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 107.455318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.557676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.660081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.762249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.772212][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.478033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.487465][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.578329][ T6024] process 'syz.1.37' launched './file0' with NULL argv: empty string added [ 108.871294][ T6026] loop2: detected capacity change from 0 to 40427 [ 108.925671][ T6026] F2FS-fs (loop2): invalid crc value [ 108.955770][ T6026] F2FS-fs (loop2): Found nat_bits in checkpoint [ 109.000804][ T6026] F2FS-fs (loop2): Start checkpoint disabled! [ 109.033185][ T6026] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 109.171011][ T28] audit: type=1800 audit(1773869558.435:3): pid=6026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.38" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 109.703819][ T6014] loop0: detected capacity change from 0 to 40427 [ 109.720670][ T6014] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 109.731069][ T6014] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 109.802157][ T6014] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 109.855926][ T6036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 112.315861][ T6044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41'. [ 113.851319][ T5825] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.221586][ T5825] usb 3-1: Using ep0 maxpacket: 16 [ 114.298427][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 114.449394][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.473100][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 114.586813][ T5825] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.642723][ T5825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.711467][ T5825] usb 3-1: config 0 descriptor?? [ 114.920067][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 114.929082][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 114.950612][ T6057] ceph: No mds server is up or the cluster is laggy [ 114.963963][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 114.972383][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 115.945686][ T9] libceph: connect (1)[c::]:6789 error -101 [ 115.998037][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 116.009279][ T5825] HID 045e:07da: Invalid code 65791 type 1 [ 116.017196][ T6051] loop0: detected capacity change from 0 to 32768 [ 116.024581][ T5825] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 116.040157][ T5825] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 116.061921][ T5825] usb 3-1: USB disconnect, device number 2 [ 116.114714][ T6051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.44 (6051) [ 116.187412][ T6051] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.200071][ T6051] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 116.245844][ T6051] BTRFS info (device loop0): using free space tree [ 116.309121][ T6067] fido_id[6067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 116.380294][ T6051] BTRFS info (device loop0): enabling ssd optimizations [ 116.392280][ T6051] BTRFS info (device loop0): auto enabling async discard [ 116.630724][ T6088] loop3: detected capacity change from 0 to 128 [ 116.686456][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.757720][ T6088] FAT-fs (loop3): Filesystem has been set read-only [ 116.768452][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.798140][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.807927][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.817499][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.911580][ T5825] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.921413][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.936157][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.946368][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.956591][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 116.966964][ T6088] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 117.035353][ T28] audit: type=1800 audit(1773869566.305:4): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.49" name="file2" dev="loop3" ino=1048592 res=0 errno=0 [ 117.100245][ T6088] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 117.118051][ T5825] usb 1-1: Using ep0 maxpacket: 16 [ 117.132327][ T5825] usb 1-1: config 0 has no interfaces? [ 117.145862][ T5825] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 117.168818][ T5825] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.286425][ T5825] usb 1-1: Product: syz [ 117.292551][ T5825] usb 1-1: Manufacturer: syz [ 117.297706][ T5825] usb 1-1: SerialNumber: syz [ 117.307176][ T5825] usb 1-1: config 0 descriptor?? [ 119.041520][ T6051] BTRFS info (device loop0): scrub: started on devid 1 [ 119.225465][ T6051] BTRFS info (device loop0): scrub: finished on devid 1 with status: 0 [ 119.358721][ T51] Bluetooth: hci2: unexpected cc 0x080d length: 2 < 3 [ 119.487192][ T5825] usb 1-1: USB disconnect, device number 3 [ 119.702384][ T5768] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.618270][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.55'. [ 121.130235][ T6118] loop3: detected capacity change from 0 to 512 [ 121.155583][ T6118] EXT4-fs: Ignoring removed orlov option [ 121.178144][ T6118] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 121.217326][ T6118] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c018, mo2=0002] [ 121.251780][ T6118] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.320365][ T6118] EXT4-fs warning (device loop3): ext4_enable_quotas:7184: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 121.463672][ T6118] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 121.491563][ T6118] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.57: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 121.541940][ T6118] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.57: couldn't read orphan inode 13 (err -117) [ 121.615140][ T6118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 122.856795][ T6131] autofs4:pid:6131:autofs_fill_super: called with bogus options [ 123.332023][ T6139] block device autoloading is deprecated and will be removed. [ 124.541519][ T6135] loop1: detected capacity change from 0 to 32768 [ 124.705681][ T6118] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.57: bg 0: block 248: padding at end of block bitmap is not set [ 124.857528][ T6142] loop2: detected capacity change from 0 to 32768 [ 124.952662][ T6142] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 125.081218][ T6142] XFS (loop2): Ending clean mount [ 125.144671][ T6144] loop0: detected capacity change from 0 to 32768 [ 125.239123][ T6144] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 125.240872][ T5771] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 125.468478][ T6144] XFS (loop0): Ending clean mount [ 125.595793][ T5774] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.626979][ T28] audit: type=1800 audit(1773869574.885:5): pid=6144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.62" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 125.746946][ T6163] loop3: detected capacity change from 0 to 2048 [ 125.978736][ T6169] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.040190][ T6165] loop2: detected capacity change from 0 to 4096 [ 126.084493][ T6165] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 126.171757][ T6165] NILFS (loop2): mounting unchecked fs [ 126.307151][ T6168] loop1: detected capacity change from 0 to 40427 [ 126.325946][ T6168] F2FS-fs (loop1): LFS is not compatible with checkpoint=disable [ 126.348514][ T6165] NILFS (loop2): recovery complete [ 126.371614][ T6170] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.494682][ T5762] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.600444][ T6175] loop2: detected capacity change from 0 to 40427 [ 127.633310][ T6175] F2FS-fs (loop2): invalid crc value [ 127.646859][ T6175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 127.695747][ T6175] F2FS-fs (loop2): Start checkpoint disabled! [ 127.727992][ T6175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 127.784456][ T28] audit: type=1800 audit(1773869577.055:6): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.66" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 127.786688][ T5768] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.950219][ T6211] Cannot find add_set index 0 as target [ 133.649471][ T6218] loop3: detected capacity change from 0 to 40427 [ 133.668714][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.676450][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.684195][ T6218] F2FS-fs (loop3): invalid crc value [ 133.695145][ T6218] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.731391][ T6218] F2FS-fs (loop3): Start checkpoint disabled! [ 133.746075][ T6218] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 133.804739][ T28] audit: type=1800 audit(1773869583.075:7): pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.78" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 133.828694][ C0] vkms_vblank_simulate: vblank timer overrun [ 134.963861][ T6237] SET target dimension over the limit! [ 138.094316][ T6254] loop2: detected capacity change from 0 to 40427 [ 138.122894][ T6254] F2FS-fs (loop2): invalid crc value [ 138.160585][ T6254] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.211485][ T6254] F2FS-fs (loop2): Start checkpoint disabled! [ 138.230258][ T6254] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 138.947841][ T28] audit: type=1800 audit(1773869588.205:8): pid=6254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.89" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 142.093043][ T6279] Cannot find add_set index 0 as target [ 142.420292][ T6283] loop0: detected capacity change from 0 to 2048 [ 142.491747][ T6287] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.645094][ T6288] loop1: detected capacity change from 0 to 2048 [ 142.753772][ T6289] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.802622][ T6285] loop2: detected capacity change from 0 to 40427 [ 142.816287][ T6285] F2FS-fs (loop2): invalid crc value [ 142.841917][ T6285] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.890467][ T6285] F2FS-fs (loop2): Start checkpoint disabled! [ 142.898789][ T6285] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 142.953717][ T28] audit: type=1800 audit(1773869592.225:9): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.100" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 142.975154][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.366890][ T6305] Cannot find add_set index 0 as target [ 146.950864][ T6321] loop1: detected capacity change from 0 to 2048 [ 147.181986][ T6318] loop3: detected capacity change from 0 to 40427 [ 147.212961][ T6318] F2FS-fs (loop3): invalid crc value [ 147.235610][ T6318] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.236701][ T6323] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 147.291867][ T6318] F2FS-fs (loop3): Start checkpoint disabled! [ 147.395911][ T6318] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 147.948461][ T28] audit: type=1800 audit(1773869597.215:10): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.110" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 148.320833][ T6331] loop2: detected capacity change from 0 to 2048 [ 148.437995][ T6334] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.788823][ T6340] Cannot find add_set index 0 as target [ 149.615072][ T6346] loop0: detected capacity change from 0 to 128 [ 149.665088][ T6346] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.778251][ T6346] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.812178][ C0] vkms_vblank_simulate: vblank timer overrun [ 149.988416][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.856641][ T6359] netlink: 12 bytes leftover after parsing attributes in process `syz.3.122'. [ 151.311674][ T6362] loop2: detected capacity change from 0 to 40427 [ 151.328072][ T6362] F2FS-fs (loop2): invalid crc value [ 151.349722][ T6362] F2FS-fs (loop2): Found nat_bits in checkpoint [ 151.398171][ T6362] F2FS-fs (loop2): Start checkpoint disabled! [ 151.439736][ T6362] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 151.506290][ T28] audit: type=1800 audit(1773869600.735:11): pid=6362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.123" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 151.852151][ T6371] loop3: detected capacity change from 0 to 2048 [ 152.454486][ T6380] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 153.657424][ T6387] loop2: detected capacity change from 0 to 4096 [ 153.761543][ T6387] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 153.824408][ T6387] NILFS (loop2): mounting unchecked fs [ 153.865729][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 153.915707][ T5759] udevd[5759]: incorrect nilfs2 checksum on /dev/loop2 [ 153.944169][ T6387] NILFS (loop2): recovery complete [ 153.974867][ T6395] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.323513][ T6384] loop1: detected capacity change from 0 to 40427 [ 155.403386][ T6384] F2FS-fs (loop1): invalid crc value [ 155.481629][ T6384] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.805709][ T6384] F2FS-fs (loop1): Start checkpoint disabled! [ 161.594020][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.143'. [ 164.327180][ T6464] loop3: detected capacity change from 0 to 40427 [ 164.370795][ T6464] F2FS-fs (loop3): invalid crc value [ 164.407121][ T6464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 164.493272][ T6452] loop0: detected capacity change from 0 to 40427 [ 164.510990][ T6464] F2FS-fs (loop3): Start checkpoint disabled! [ 164.531591][ T6464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 164.551354][ T28] audit: type=1800 audit(1773869613.825:12): pid=6464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.158" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 164.574841][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.701519][ T6452] F2FS-fs (loop0): invalid crc value [ 164.733071][ T6452] F2FS-fs (loop0): Found nat_bits in checkpoint [ 165.135758][ T6452] F2FS-fs (loop0): Start checkpoint disabled! [ 165.198400][ T6478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.161'. [ 165.558667][ T6482] Cannot find add_set index 0 as target [ 166.957974][ T6495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 167.510330][ T6497] loop0: detected capacity change from 0 to 40427 [ 167.557025][ T6497] F2FS-fs (loop0): invalid crc value [ 167.601319][ T6497] F2FS-fs (loop0): Found nat_bits in checkpoint [ 167.658752][ T6497] F2FS-fs (loop0): Start checkpoint disabled! [ 167.687410][ T6497] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 168.422008][ T6516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.171'. [ 168.459151][ T6520] SET target dimension over the limit! [ 170.147658][ T6528] loop1: detected capacity change from 0 to 40427 [ 170.169780][ T6528] F2FS-fs (loop1): invalid crc value [ 170.177870][ T6528] F2FS-fs (loop1): Found nat_bits in checkpoint [ 170.223274][ T6528] F2FS-fs (loop1): Start checkpoint disabled! [ 170.240282][ T6528] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 170.431908][ T6512] loop2: detected capacity change from 0 to 32768 [ 170.501841][ T6512] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 170.554764][ T6512] XFS (loop2): Ending clean mount [ 170.746312][ T5771] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 172.093346][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 172.575787][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 172.873630][ T6561] SET target dimension over the limit! [ 173.483878][ T6560] loop1: detected capacity change from 0 to 128 [ 173.795266][ T6560] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.877809][ T6560] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 173.912666][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.260792][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.443709][ T6581] loop1: detected capacity change from 0 to 2048 [ 175.489200][ T6582] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 175.834693][ T6588] netlink: 8 bytes leftover after parsing attributes in process `syz.0.194'. [ 176.221701][ T6600] Cannot find add_set index 0 as target [ 177.462170][ T6605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 179.220070][ T6608] loop1: detected capacity change from 0 to 128 [ 179.782131][ T6608] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 179.813918][ T6608] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 180.097088][ T5775] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 180.546761][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 180.808189][ T6626] Cannot find add_set index 0 as target [ 183.788082][ T6641] loop1: detected capacity change from 0 to 4096 [ 184.038521][ T6641] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 184.048772][ T6641] NILFS (loop1): mounting unchecked fs [ 184.220158][ T6641] NILFS (loop1): recovery complete [ 184.383722][ T6647] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 184.916555][ T6656] SET target dimension over the limit! [ 186.024776][ T6655] loop0: detected capacity change from 0 to 32768 [ 186.891024][ T6677] loop0: detected capacity change from 0 to 128 [ 187.427076][ T6677] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 187.479963][ T6677] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 187.679936][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 187.746252][ T6686] loop1: detected capacity change from 0 to 2048 [ 187.859360][ T6689] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.173023][ T6691] loop0: detected capacity change from 0 to 4096 [ 188.204384][ T6691] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 188.220770][ T6691] NILFS (loop0): mounting unchecked fs [ 188.302151][ T6691] NILFS (loop0): recovery complete [ 188.337418][ T6695] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 188.515135][ T6698] Cannot find add_set index 0 as target [ 189.043485][ T6702] loop3: detected capacity change from 0 to 2048 [ 189.258163][ T6707] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.486294][ T6735] loop0: detected capacity change from 0 to 2048 [ 191.508426][ T6736] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.970808][ T6742] Cannot find add_set index 0 as target [ 193.214606][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.240'. [ 195.081817][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.091236][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.513641][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'. [ 198.016543][ T51] Bluetooth: hci0: unexpected cc 0x080d length: 2 < 3 [ 198.133969][ T6773] Cannot find add_set index 0 as target [ 203.292010][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 206.264599][ T6833] syzkaller0: entered promiscuous mode [ 206.276628][ T6833] syzkaller0: entered allmulticast mode [ 207.611868][ T6845] loop1: detected capacity change from 0 to 40427 [ 207.620276][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.620431][ T5777] Bluetooth: hci3: command 0x0406 tx timeout [ 207.627094][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 207.632959][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 207.701916][ T6845] F2FS-fs (loop1): invalid crc value [ 207.717370][ T6845] F2FS-fs (loop1): Found nat_bits in checkpoint [ 207.752732][ T6845] F2FS-fs (loop1): Start checkpoint disabled! [ 207.769898][ T6845] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 208.745505][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 211.348431][ T6865] loop2: detected capacity change from 0 to 4096 [ 211.417960][ T6865] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 211.427583][ T6865] NILFS (loop2): mounting unchecked fs [ 211.549947][ T6865] NILFS (loop2): recovery complete [ 211.561428][ T6868] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 212.544469][ T6873] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 213.372967][ T6880] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 213.854084][ T6888] Cannot find add_set index 0 as target [ 214.283169][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 215.517680][ T6885] loop3: detected capacity change from 0 to 32768 [ 215.710993][ T6885] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 216.821660][ T6885] XFS (loop3): Ending clean mount [ 216.979047][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 219.776083][ T6919] loop1: detected capacity change from 0 to 32768 [ 219.910761][ T6940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.291'. [ 219.919896][ T6919] JBD2: Ignoring recovery information on journal [ 220.906502][ T6919] JBD2: journal reset failed [ 220.927882][ T6919] (syz.1.287,6919,0):ocfs2_journal_load:1167 ERROR: Failed to load journal! [ 220.976174][ T6919] (syz.1.287,6919,0):ocfs2_check_volume:2432 ERROR: ocfs2 journal load failed! -4 [ 222.592888][ T6946] loop3: detected capacity change from 0 to 32768 [ 222.688366][ T6946] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 222.731123][ T6946] XFS (loop3): Ending clean mount [ 223.349721][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 225.959913][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.302'. [ 227.127109][ T6981] loop0: detected capacity change from 0 to 40427 [ 227.147477][ T6981] F2FS-fs (loop0): invalid crc value [ 227.181174][ T6981] F2FS-fs (loop0): Found nat_bits in checkpoint [ 227.334401][ T6981] F2FS-fs (loop0): Start checkpoint disabled! [ 227.344264][ T6981] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 228.499346][ T6997] loop2: detected capacity change from 0 to 1024 [ 228.855524][ T6997] hfsplus: bad catalog entry type [ 229.095746][ T42] hfsplus: b-tree write err: -5, ino 25 [ 229.118270][ T42] hfsplus: b-tree write err: -5, ino 4 [ 229.124434][ T42] hfsplus: b-tree write err: -5, ino 2 [ 230.136908][ T7002] loop3: detected capacity change from 0 to 32768 [ 231.333920][ T7002] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 231.537428][ T7002] XFS (loop3): Ending clean mount [ 232.711280][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 234.508961][ T7052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 234.944577][ T7064] syz.0.322 uses obsolete (PF_INET,SOCK_PACKET) [ 240.743677][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 241.679002][ T6851] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 241.689831][ T6851] CPU: 1 PID: 6851 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 241.698119][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 241.708998][ T6851] Workqueue: hci1 hci_rx_work [ 241.714157][ T6851] Call Trace: [ 241.717707][ T6851] [ 241.720744][ T6851] dump_stack_lvl+0x18c/0x250 [ 241.725633][ T6851] ? show_regs_print_info+0x20/0x20 [ 241.731025][ T6851] ? load_image+0x400/0x400 [ 241.735811][ T6851] sysfs_create_dir_ns+0x26e/0x2a0 [ 241.741619][ T6851] ? sysfs_warn_dup+0xa0/0xa0 [ 241.746295][ T6851] ? do_raw_spin_unlock+0x121/0x230 [ 241.751502][ T6851] kobject_add_internal+0x61c/0xcc0 [ 241.756733][ T6851] kobject_add+0x164/0x240 [ 241.761176][ T6851] ? kobject_init+0x1e0/0x1e0 [ 241.766049][ T6851] ? _raw_spin_unlock+0x3a/0x40 [ 241.771531][ T6851] ? get_device_parent+0x366/0x390 [ 241.777007][ T6851] device_add+0x408/0xc20 [ 241.781454][ T6851] hci_conn_add_sysfs+0xd5/0x1e0 [ 241.786483][ T6851] le_conn_complete_evt+0xf5d/0x1540 [ 241.791788][ T6851] ? hci_event_packet+0x4cb/0x1270 [ 241.796992][ T6851] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 241.803791][ T6851] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 241.809968][ T6851] ? skb_pull_data+0xfb/0x200 [ 241.815023][ T6851] hci_le_conn_complete_evt+0x187/0x440 [ 241.820685][ T6851] ? hci_remote_host_features_evt+0x150/0x150 [ 241.826969][ T6851] hci_event_packet+0x7ba/0x1270 [ 241.831925][ T6851] ? bis_list+0x290/0x290 [ 241.836343][ T6851] ? kcov_remote_start+0x2b/0x7e0 [ 241.841369][ T6851] ? hci_send_to_monitor+0xd7/0x4f0 [ 241.846573][ T6851] hci_rx_work+0x43a/0xd60 [ 241.851023][ T6851] ? process_scheduled_works+0x96f/0x15d0 [ 241.857295][ T6851] process_scheduled_works+0xa5d/0x15d0 [ 241.863256][ T6851] ? worker_attach_to_pool+0x380/0x380 [ 241.868846][ T6851] ? assign_work+0x3d2/0x5d0 [ 241.873526][ T6851] worker_thread+0xa55/0xfc0 [ 241.878114][ T6851] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 241.884099][ T6851] ? _raw_spin_unlock+0x40/0x40 [ 241.889127][ T6851] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 241.895047][ T6851] kthread+0x2fa/0x390 [ 241.899304][ T6851] ? pr_cont_work+0x560/0x560 [ 241.904013][ T6851] ? kthread_blkcg+0xd0/0xd0 [ 241.908887][ T6851] ret_from_fork+0x48/0x80 [ 241.913487][ T6851] ? kthread_blkcg+0xd0/0xd0 [ 241.918364][ T6851] ret_from_fork_asm+0x11/0x20 [ 241.923261][ T6851] [ 242.089153][ T7114] netlink: 20 bytes leftover after parsing attributes in process `syz.2.335'. [ 242.548436][ T7115] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 242.572553][ T6851] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 242.609576][ T6851] Bluetooth: hci1: failed to register connection device [ 242.634872][ T7110] loop0: detected capacity change from 0 to 32768 [ 242.708862][ T7110] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 242.919558][ T7110] XFS (loop0): Ending clean mount [ 244.563207][ T5763] udevd[5763]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 244.636578][ T5759] udevd[5759]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 244.805700][ T5768] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 246.592363][ T7149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.342'. [ 246.717234][ T7154] loop0: detected capacity change from 0 to 128 [ 246.812854][ T7154] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.876267][ T7154] ext4 filesystem being mounted at /87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.329557][ T5768] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 247.398818][ T7168] loop0: detected capacity change from 0 to 512 [ 247.406649][ T7168] EXT4-fs: Ignoring removed i_version option [ 247.427392][ T7168] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.346: inode has both inline data and extents flags [ 247.445553][ T7168] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.346: couldn't read orphan inode 15 (err -117) [ 247.461790][ T7168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.509475][ T5768] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.756188][ T7189] ceph: No mds server is up or the cluster is laggy [ 250.763549][ T5804] libceph: connect (1)[c::]:6789 error -101 [ 250.774408][ T5804] libceph: mon0 (1)[c::]:6789 connect error [ 251.949071][ T5155] libceph: connect (1)[c::]:6789 error -101 [ 251.955994][ T5155] libceph: mon0 (1)[c::]:6789 connect error [ 252.571384][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.0.354'. [ 255.976958][ T7212] loop1: detected capacity change from 0 to 2048 [ 255.988721][ T7212] ext4: Unknown parameter 'seclabel' [ 256.978333][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.984766][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.569386][ T7227] loop2: detected capacity change from 0 to 32768 [ 260.762453][ T7241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 260.795005][ T7227] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop2": -EINTR [ 262.016914][ T6851] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 262.039972][ T6851] CPU: 1 PID: 6851 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 262.049629][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 262.061283][ T6851] Workqueue: hci0 hci_rx_work [ 262.067065][ T6851] Call Trace: [ 262.070821][ T6851] [ 262.074135][ T6851] dump_stack_lvl+0x18c/0x250 [ 262.079391][ T6851] ? show_regs_print_info+0x20/0x20 [ 262.085839][ T6851] ? load_image+0x400/0x400 [ 262.091503][ T6851] sysfs_create_dir_ns+0x26e/0x2a0 [ 262.099161][ T6851] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 262.106055][ T6851] ? sysfs_warn_dup+0xa0/0xa0 [ 262.110896][ T6851] kobject_add_internal+0x61c/0xcc0 [ 262.116698][ T6851] kobject_add+0x164/0x240 [ 262.122177][ T6851] ? kobject_init+0x1e0/0x1e0 [ 262.127724][ T6851] ? _raw_spin_unlock+0x3a/0x40 [ 262.133588][ T6851] ? get_device_parent+0x366/0x390 [ 262.139915][ T6851] device_add+0x408/0xc20 [ 262.144585][ T6851] hci_conn_add_sysfs+0xd5/0x1e0 [ 262.150551][ T6851] le_conn_complete_evt+0xf5d/0x1540 [ 262.157735][ T6851] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 262.165722][ T6851] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 262.172071][ T6851] ? lockdep_hardirqs_on+0x98/0x150 [ 262.177683][ T6851] hci_le_conn_complete_evt+0x187/0x440 [ 262.184258][ T6851] ? hci_remote_host_features_evt+0x150/0x150 [ 262.192290][ T6851] hci_event_packet+0x7ba/0x1270 [ 262.197993][ T6851] ? bis_list+0x290/0x290 [ 262.203024][ T6851] ? lockdep_hardirqs_on+0x98/0x150 [ 262.208528][ T6851] ? hci_send_to_monitor+0xd7/0x4f0 [ 262.214303][ T6851] hci_rx_work+0x43a/0xd60 [ 262.219201][ T6851] ? process_scheduled_works+0x96f/0x15d0 [ 262.226000][ T6851] process_scheduled_works+0xa5d/0x15d0 [ 262.232067][ T6851] ? worker_attach_to_pool+0x380/0x380 [ 262.238797][ T6851] ? assign_work+0x3d2/0x5d0 [ 262.244301][ T6851] worker_thread+0xa55/0xfc0 [ 262.249420][ T6851] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 262.256761][ T6851] ? _raw_spin_unlock+0x40/0x40 [ 262.262328][ T6851] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 262.268899][ T6851] kthread+0x2fa/0x390 [ 262.273171][ T6851] ? pr_cont_work+0x560/0x560 [ 262.278424][ T6851] ? kthread_blkcg+0xd0/0xd0 [ 262.283671][ T6851] ret_from_fork+0x48/0x80 [ 262.288209][ T6851] ? kthread_blkcg+0xd0/0xd0 [ 262.292904][ T6851] ret_from_fork_asm+0x11/0x20 [ 262.297967][ T6851] [ 262.421030][ T6851] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 262.442883][ T6851] Bluetooth: hci0: failed to register connection device [ 264.441454][ T8] libceph: connect (1)[c::]:6789 error -101 [ 264.449178][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 266.098718][ T7268] ceph: No mds server is up or the cluster is laggy [ 266.220514][ T8] libceph: connect (1)[c::]:6789 error -101 [ 266.252575][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 267.303554][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.374'. [ 267.907224][ T7291] loop3: detected capacity change from 0 to 2048 [ 267.969623][ T7291] ext4: Unknown parameter 'seclabel' [ 268.525809][ T7297] loop1: detected capacity change from 0 to 2048 [ 268.709540][ T7300] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 269.607300][ T7289] loop0: detected capacity change from 0 to 32768 [ 269.768824][ T7289] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 270.486707][ T7289] XFS (loop0): Ending clean mount [ 271.386695][ T5768] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 272.408360][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.385'. [ 273.671265][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 273.677652][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 273.699542][ T5806] libceph: connect (1)[c::]:6789 error -101 [ 273.713221][ T5806] libceph: mon0 (1)[c::]:6789 connect error [ 273.762679][ T7341] loop2: detected capacity change from 0 to 2048 [ 273.772689][ T7331] ceph: No mds server is up or the cluster is laggy [ 273.850961][ T7343] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 280.730625][ T28] audit: type=1800 audit(1773869730.005:13): pid=7376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.397" name="/" dev="fuse" ino=4 res=0 errno=0 [ 281.192906][ T7387] loop2: detected capacity change from 0 to 2048 [ 281.476646][ T7396] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 283.496521][ T27] IPVS: starting estimator thread 0... [ 283.512961][ T7410] bridge0: port 3(syz_tun) entered blocking state [ 283.521674][ T7410] bridge0: port 3(syz_tun) entered disabled state [ 283.528685][ T7410] syz_tun: entered allmulticast mode [ 283.536817][ T7410] syz_tun: entered promiscuous mode [ 283.543139][ T7410] bridge0: port 3(syz_tun) entered blocking state [ 283.550392][ T7410] bridge0: port 3(syz_tun) entered forwarding state [ 283.622583][ T7415] IPVS: using max 24 ests per chain, 57600 per kthread [ 283.745710][ T7389] loop0: detected capacity change from 0 to 40427 [ 283.873874][ T7389] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 283.895259][ T7389] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 284.319858][ T7389] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 285.403831][ T7412] loop3: detected capacity change from 0 to 32768 [ 285.824386][ T7412] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 286.183794][ T7412] XFS (loop3): Ending clean mount [ 287.048339][ T5774] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 288.269695][ T7460] loop1: detected capacity change from 0 to 4096 [ 288.404566][ T9] IPVS: starting estimator thread 0... [ 288.432774][ T7460] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 288.480960][ T7460] NILFS (loop1): mounting unchecked fs [ 288.508674][ T7460] NILFS (loop1): recovery complete [ 288.698041][ T7465] IPVS: using max 20 ests per chain, 48000 per kthread [ 288.807164][ T7469] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 291.524206][ T7470] loop3: detected capacity change from 0 to 40427 [ 292.668376][ T5759] I/O error, dev loop3, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 292.974925][ T7500] loop2: detected capacity change from 0 to 4096 [ 293.176301][ T7500] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 293.437638][ T7500] NILFS (loop2): mounting unchecked fs [ 293.492513][ T7500] NILFS (loop2): recovery complete [ 293.501478][ T7509] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 294.730828][ T6851] Bluetooth: hci2: unexpected cc 0x080d length: 2 < 3 [ 294.738672][ T6851] Bluetooth: hci2: unexpected event for opcode 0x080d [ 296.904401][ T7536] loop1: detected capacity change from 0 to 40427 [ 296.958858][ T7536] F2FS-fs (loop1): invalid crc value [ 296.981343][ T7536] F2FS-fs (loop1): Found nat_bits in checkpoint [ 297.013440][ T7536] F2FS-fs (loop1): Start checkpoint disabled! [ 297.037413][ T7536] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 299.467886][ T6851] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 299.478392][ T6851] CPU: 1 PID: 6851 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 299.486055][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 299.496304][ T6851] Workqueue: hci3 hci_rx_work [ 299.501102][ T6851] Call Trace: [ 299.505257][ T6851] [ 299.508345][ T6851] dump_stack_lvl+0x18c/0x250 [ 299.513276][ T6851] ? show_regs_print_info+0x20/0x20 [ 299.518516][ T6851] ? load_image+0x400/0x400 [ 299.523071][ T6851] sysfs_create_dir_ns+0x26e/0x2a0 [ 299.528650][ T6851] ? sysfs_warn_dup+0xa0/0xa0 [ 299.533445][ T6851] ? preempt_schedule_thunk+0x1a/0x30 [ 299.539665][ T6851] kobject_add_internal+0x61c/0xcc0 [ 299.544940][ T6851] kobject_add+0x164/0x240 [ 299.549384][ T6851] ? kobject_init+0x1e0/0x1e0 [ 299.554166][ T6851] ? _raw_spin_unlock+0x3a/0x40 [ 299.559310][ T6851] ? get_device_parent+0x366/0x390 [ 299.564521][ T6851] device_add+0x408/0xc20 [ 299.569348][ T6851] hci_conn_add_sysfs+0xd5/0x1e0 [ 299.574599][ T6851] le_conn_complete_evt+0xf5d/0x1540 [ 299.579911][ T6851] ? hci_event_packet+0x4cb/0x1270 [ 299.585221][ T6851] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 299.591747][ T6851] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 299.597789][ T6851] ? skb_pull_data+0xfb/0x200 [ 299.602611][ T6851] hci_le_conn_complete_evt+0x187/0x440 [ 299.608467][ T6851] ? hci_remote_host_features_evt+0x150/0x150 [ 299.615217][ T6851] hci_event_packet+0x7ba/0x1270 [ 299.620283][ T6851] ? bis_list+0x290/0x290 [ 299.624647][ T6851] ? kcov_remote_start+0x2b/0x7e0 [ 299.629955][ T6851] ? hci_send_to_monitor+0xd7/0x4f0 [ 299.635427][ T6851] hci_rx_work+0x43a/0xd60 [ 299.639908][ T6851] ? process_scheduled_works+0x96f/0x15d0 [ 299.645842][ T6851] process_scheduled_works+0xa5d/0x15d0 [ 299.651475][ T6851] ? worker_attach_to_pool+0x380/0x380 [ 299.656961][ T6851] ? assign_work+0x3d2/0x5d0 [ 299.661766][ T6851] worker_thread+0xa55/0xfc0 [ 299.666582][ T6851] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 299.672614][ T6851] ? _raw_spin_unlock+0x40/0x40 [ 299.677490][ T6851] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 299.683428][ T6851] kthread+0x2fa/0x390 [ 299.687599][ T6851] ? pr_cont_work+0x560/0x560 [ 299.692652][ T6851] ? kthread_blkcg+0xd0/0xd0 [ 299.697349][ T6851] ret_from_fork+0x48/0x80 [ 299.701956][ T6851] ? kthread_blkcg+0xd0/0xd0 [ 299.706558][ T6851] ret_from_fork_asm+0x11/0x20 [ 299.711354][ T6851] [ 299.714507][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.781413][ T6851] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 299.801594][ T6851] Bluetooth: hci3: failed to register connection device [ 300.626173][ T6851] Bluetooth: hci0: unexpected event for opcode 0x000d [ 301.956878][ T7580] Cannot find add_set index 0 as target [ 302.743808][ T7584] loop2: detected capacity change from 0 to 40427 [ 302.800343][ T7584] F2FS-fs (loop2): invalid crc value [ 302.808701][ T7584] F2FS-fs (loop2): Found nat_bits in checkpoint [ 302.837227][ T7584] F2FS-fs (loop2): Start checkpoint disabled! [ 302.858377][ T7584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 304.611650][ T7589] sctp: failed to load transform for md5: -2 [ 304.853258][ T6851] Bluetooth: hci2: unexpected event for opcode 0x000d [ 306.717453][ T7608] loop1: detected capacity change from 0 to 40427 [ 306.748096][ T7608] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 306.756476][ T7608] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 307.375234][ T7608] F2FS-fs (loop1): Found nat_bits in checkpoint [ 307.709920][ T7608] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 307.729833][ T7608] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 308.646502][ T7634] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 308.720313][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.463'. [ 311.051292][ T7648] bridge0: port 3(syz_tun) entered blocking state [ 311.059325][ T7648] bridge0: port 3(syz_tun) entered disabled state [ 311.067104][ T7648] syz_tun: entered allmulticast mode [ 311.204550][ T7648] syz_tun: entered promiscuous mode [ 311.216554][ T7648] bridge0: port 3(syz_tun) entered blocking state [ 311.223746][ T7648] bridge0: port 3(syz_tun) entered forwarding state [ 311.833070][ T7655] Cannot find add_set index 0 as target [ 313.641962][ T7673] ================================================================== [ 313.650145][ T7673] BUG: KASAN: slab-use-after-free in dvb_device_open+0xca/0x370 [ 313.657940][ T7673] Read of size 8 at addr ffff888145a6a018 by task syz.2.475/7673 [ 313.665762][ T7673] [ 313.668102][ T7673] CPU: 1 PID: 7673 Comm: syz.2.475 Not tainted syzkaller #0 [ 313.676011][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 313.687402][ T7673] Call Trace: [ 313.690791][ T7673] [ 313.693835][ T7673] dump_stack_lvl+0x18c/0x250 [ 313.698899][ T7673] ? __lock_acquire+0x7d40/0x7d40 [ 313.704056][ T7673] ? show_regs_print_info+0x20/0x20 [ 313.709547][ T7673] ? load_image+0x400/0x400 [ 313.714087][ T7673] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 313.719855][ T7673] ? __virt_addr_valid+0x18c/0x540 [ 313.725455][ T7673] ? __virt_addr_valid+0x469/0x540 [ 313.730785][ T7673] print_report+0xa8/0x210 [ 313.735323][ T7673] ? dvb_device_open+0xca/0x370 [ 313.740715][ T7673] kasan_report+0x117/0x150 [ 313.747213][ T7673] ? chrdev_open+0x3e3/0x6a0 [ 313.752376][ T7673] ? dvb_device_open+0xca/0x370 [ 313.757517][ T7673] dvb_device_open+0xca/0x370 [ 313.762406][ T7673] ? do_raw_spin_unlock+0x121/0x230 [ 313.768234][ T7673] chrdev_open+0x5cc/0x6a0 [ 313.774058][ T7673] ? cd_forget+0x160/0x160 [ 313.778564][ T7673] ? fsnotify_perm+0x3ed/0x5e0 [ 313.783854][ T7673] ? cd_forget+0x160/0x160 [ 313.788732][ T7673] do_dentry_open+0x8c6/0x1500 [ 313.793906][ T7673] path_openat+0x27f1/0x3230 [ 313.798622][ T7673] ? do_sys_openat2+0xda/0x1d0 [ 313.803937][ T7673] ? verify_lock_unused+0x140/0x140 [ 313.809515][ T7673] ? do_filp_open+0x430/0x430 [ 313.814236][ T7673] ? __virt_addr_valid+0x18c/0x540 [ 313.819465][ T7673] do_filp_open+0x1f5/0x430 [ 313.824164][ T7673] ? vfs_tmpfile+0x490/0x490 [ 313.828786][ T7673] ? _raw_spin_unlock+0x28/0x40 [ 313.834147][ T7673] ? alloc_fd+0x58f/0x630 [ 313.838941][ T7673] do_sys_openat2+0x134/0x1d0 [ 313.843731][ T7673] ? do_sys_open+0xe0/0xe0 [ 313.848262][ T7673] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 313.855307][ T7673] ? lock_chain_count+0x20/0x20 [ 313.860637][ T7673] __x64_sys_openat+0x139/0x160 [ 313.865801][ T7673] do_syscall_64+0x55/0xa0 [ 313.870506][ T7673] ? clear_bhb_loop+0x40/0x90 [ 313.875254][ T7673] ? clear_bhb_loop+0x40/0x90 [ 313.880138][ T7673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 313.886153][ T7673] RIP: 0033:0x7fb3fc15cfce [ 313.890872][ T7673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 313.911544][ T7673] RSP: 002b:00007fb3fd088b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 313.920079][ T7673] RAX: ffffffffffffffda RBX: 00007fb3fd0896c0 RCX: 00007fb3fc15cfce [ 313.928074][ T7673] RDX: 0000000000044e02 RSI: 00007fb3fd088c00 RDI: ffffffffffffff9c [ 313.936408][ T7673] RBP: 00007fb3fd088c00 R08: 0000000000000000 R09: 0000000000000000 [ 313.944852][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 313.953546][ T7673] R13: 00007fb3fc416128 R14: 00007fb3fc416090 R15: 00007fff0b9a6218 [ 313.962581][ T7673] [ 313.965692][ T7673] [ 313.968206][ T7673] Allocated by task 1: [ 313.972562][ T7673] kasan_set_track+0x4e/0x70 [ 313.977349][ T7673] __kasan_kmalloc+0x8f/0xa0 [ 313.982222][ T7673] dvb_register_device+0x2fd/0x2210 [ 313.987438][ T7673] dvb_register_frontend+0x649/0x930 [ 313.992843][ T7673] vidtv_bridge_probe+0x9ab/0xf80 [ 313.999281][ T7673] platform_probe+0x13b/0x1c0 [ 314.004806][ T7673] really_probe+0x25b/0xb20 [ 314.009421][ T7673] __driver_probe_device+0x18c/0x330 [ 314.016211][ T7673] driver_probe_device+0x4f/0x420 [ 314.021693][ T7673] __driver_attach+0x44e/0x6e0 [ 314.026862][ T7673] bus_for_each_dev+0x235/0x2b0 [ 314.032386][ T7673] bus_add_driver+0x340/0x630 [ 314.038502][ T7673] driver_register+0x23a/0x310 [ 314.043791][ T7673] vidtv_bridge_init+0x3d/0x70 [ 314.048837][ T7673] do_one_initcall+0x242/0x790 [ 314.053634][ T7673] do_initcall_level+0x137/0x1f0 [ 314.058949][ T7673] do_initcalls+0x69/0xd0 [ 314.063349][ T7673] kernel_init_freeable+0x3ed/0x580 [ 314.068774][ T7673] kernel_init+0x1d/0x1c0 [ 314.073606][ T7673] ret_from_fork+0x48/0x80 [ 314.078409][ T7673] ret_from_fork_asm+0x11/0x20 [ 314.083459][ T7673] [ 314.085783][ T7673] Freed by task 7634: [ 314.089976][ T7673] kasan_set_track+0x4e/0x70 [ 314.094846][ T7673] kasan_save_free_info+0x2e/0x50 [ 314.100167][ T7673] ____kasan_slab_free+0x126/0x1e0 [ 314.105404][ T7673] slab_free_freelist_hook+0x130/0x1a0 [ 314.107191][ T7662] loop1: detected capacity change from 0 to 32768 [ 314.111067][ T7673] __kmem_cache_free+0xba/0x1e0 [ 314.111089][ T7673] dvb_device_open+0x2ee/0x370 [ 314.111104][ T7673] chrdev_open+0x5cc/0x6a0 [ 314.111117][ T7673] do_dentry_open+0x8c6/0x1500 [ 314.111131][ T7673] path_openat+0x27f1/0x3230 [ 314.111142][ T7673] do_filp_open+0x1f5/0x430 [ 314.111153][ T7673] do_sys_openat2+0x134/0x1d0 [ 314.111166][ T7673] __x64_sys_openat+0x139/0x160 [ 314.111180][ T7673] do_syscall_64+0x55/0xa0 [ 314.111198][ T7673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.111222][ T7673] [ 314.111226][ T7673] The buggy address belongs to the object at ffff888145a6a000 [ 314.111226][ T7673] which belongs to the cache kmalloc-256 of size 256 [ 314.111239][ T7673] The buggy address is located 24 bytes inside of [ 314.111239][ T7673] freed 256-byte region [ffff888145a6a000, ffff888145a6a100) [ 314.111255][ T7673] [ 314.111258][ T7673] The buggy address belongs to the physical page: [ 314.111277][ T7673] page:ffffea0005169a80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x145a6a [ 314.111294][ T7673] head:ffffea0005169a80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 314.111307][ T7673] flags: 0x57ff00000000840(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 314.111329][ T7673] page_type: 0xffffffff() [ 314.212334][ T7662] JBD2: Ignoring recovery information on journal [ 314.219192][ T7673] raw: 057ff00000000840 ffff888017c41b40 dead000000000122 0000000000000000 [ 314.219208][ T7673] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 314.219213][ T7673] page dumped because: kasan: bad access detected [ 314.219232][ T7673] page_owner tracks the page as allocated [ 314.219236][ T7673] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 20761696693, free_ts 0 [ 314.219261][ T7673] post_alloc_hook+0x1c1/0x200 [ 314.219284][ T7673] get_page_from_freelist+0x1951/0x19e0 [ 314.219296][ T7673] __alloc_pages+0x1f0/0x460 [ 314.219306][ T7673] alloc_page_interleave+0x24/0x1e0 [ 314.219318][ T7673] alloc_slab_page+0x5d/0x160 [ 314.219329][ T7673] new_slab+0x87/0x2d0 [ 314.219346][ T7673] ___slab_alloc+0xc5d/0x12f0 [ 314.219362][ T7673] __kmem_cache_alloc_node+0x19e/0x250 [ 314.219378][ T7673] kmalloc_trace+0x2a/0xe0 [ 314.219394][ T7673] dvb_register_device+0x2fd/0x2210 [ 314.350098][ T7673] dvb_register_frontend+0x649/0x930 [ 314.355666][ T7673] vidtv_bridge_probe+0x9ab/0xf80 [ 314.361066][ T7673] platform_probe+0x13b/0x1c0 [ 314.365853][ T7673] really_probe+0x25b/0xb20 [ 314.370397][ T7673] __driver_probe_device+0x18c/0x330 [ 314.375936][ T7673] driver_probe_device+0x4f/0x420 [ 314.381107][ T7673] page_owner free stack trace missing [ 314.386662][ T7673] [ 314.389045][ T7673] Memory state around the buggy address: [ 314.394784][ T7673] ffff888145a69f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.403525][ T7673] ffff888145a69f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.412031][ T7673] >ffff888145a6a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.420690][ T7673] ^ [ 314.426114][ T7673] ffff888145a6a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 314.434456][ T7673] ffff888145a6a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 314.443133][ T7673] ================================================================== [ 314.451766][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.468802][ T7673] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 314.476027][ T7673] CPU: 1 PID: 7673 Comm: syz.2.475 Not tainted syzkaller #0 [ 314.483651][ T7673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 314.493814][ T7673] Call Trace: [ 314.497294][ T7673] [ 314.500599][ T7673] dump_stack_lvl+0x18c/0x250 [ 314.505485][ T7673] ? show_regs_print_info+0x20/0x20 [ 314.510736][ T7673] ? load_image+0x400/0x400 [ 314.515539][ T7673] panic+0x2dc/0x730 [ 314.519891][ T7673] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 314.526136][ T7673] ? bpf_jit_dump+0xd0/0xd0 [ 314.530712][ T7673] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 314.536741][ T7673] ? _raw_spin_unlock+0x40/0x40 [ 314.541898][ T7673] ? dvb_device_open+0xca/0x370 [ 314.546926][ T7673] check_panic_on_warn+0x84/0xa0 [ 314.552133][ T7673] ? dvb_device_open+0xca/0x370 [ 314.557241][ T7673] end_report+0x6f/0x130 [ 314.561926][ T7673] kasan_report+0x128/0x150 [ 314.566521][ T7673] ? chrdev_open+0x3e3/0x6a0 [ 314.571375][ T7673] ? dvb_device_open+0xca/0x370 [ 314.576704][ T7673] dvb_device_open+0xca/0x370 [ 314.581588][ T7673] ? do_raw_spin_unlock+0x121/0x230 [ 314.587074][ T7673] chrdev_open+0x5cc/0x6a0 [ 314.591592][ T7673] ? cd_forget+0x160/0x160 [ 314.596892][ T7673] ? fsnotify_perm+0x3ed/0x5e0 [ 314.602724][ T7673] ? cd_forget+0x160/0x160 [ 314.607662][ T7673] do_dentry_open+0x8c6/0x1500 [ 314.612883][ T7673] path_openat+0x27f1/0x3230 [ 314.617957][ T7673] ? do_sys_openat2+0xda/0x1d0 [ 314.623437][ T7673] ? verify_lock_unused+0x140/0x140 [ 314.629133][ T7673] ? do_filp_open+0x430/0x430 [ 314.634008][ T7673] ? __virt_addr_valid+0x18c/0x540 [ 314.639368][ T7673] do_filp_open+0x1f5/0x430 [ 314.644085][ T7673] ? vfs_tmpfile+0x490/0x490 [ 314.648683][ T7673] ? _raw_spin_unlock+0x28/0x40 [ 314.653616][ T7673] ? alloc_fd+0x58f/0x630 [ 314.657940][ T7673] do_sys_openat2+0x134/0x1d0 [ 314.662783][ T7673] ? do_sys_open+0xe0/0xe0 [ 314.667448][ T7673] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 314.673435][ T7673] ? lock_chain_count+0x20/0x20 [ 314.678395][ T7673] __x64_sys_openat+0x139/0x160 [ 314.683271][ T7673] do_syscall_64+0x55/0xa0 [ 314.687743][ T7673] ? clear_bhb_loop+0x40/0x90 [ 314.692521][ T7673] ? clear_bhb_loop+0x40/0x90 [ 314.697210][ T7673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 314.703129][ T7673] RIP: 0033:0x7fb3fc15cfce [ 314.707734][ T7673] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 314.727448][ T7673] RSP: 002b:00007fb3fd088b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.736504][ T7673] RAX: ffffffffffffffda RBX: 00007fb3fd0896c0 RCX: 00007fb3fc15cfce [ 314.745428][ T7673] RDX: 0000000000044e02 RSI: 00007fb3fd088c00 RDI: ffffffffffffff9c [ 314.753492][ T7673] RBP: 00007fb3fd088c00 R08: 0000000000000000 R09: 0000000000000000 [ 314.761826][ T7673] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 314.770967][ T7673] R13: 00007fb3fc416128 R14: 00007fb3fc416090 R15: 00007fff0b9a6218 [ 314.779316][ T7673] [ 314.783351][ T7673] Kernel Offset: disabled [ 314.788165][ T7673] Rebooting in 86400 seconds..