last executing test programs: 414.176804ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000200)='mm_page_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1802000000000001000000000000007b850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfffffffffffffc85, 0x0, &(0x7f0000000240)="259a534f6577119472ae1206", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0xfff, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x0, &(0x7f0000000100), 0x4) r4 = syz_open_dev$usbmon(0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r4, 0x9208, &(0x7f00000000c0)) timer_create(0x0, 0x0, &(0x7f0000000080)) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) r5 = syz_io_uring_setup(0x222c, &(0x7f0000000080), &(0x7f0000000100), 0x0) io_uring_enter(r5, 0x54, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, 0x0) r6 = gettid() tkill(r6, 0x14) 356.096756ms ago: executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="08b9db94cc86ac0385a2ae2a95354417", 0x10) socket$inet_sctp(0x2, 0x5, 0x84) syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'nicvf0\x00'}, 0x18) 306.604259ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000240), 0x0}, 0x20) 263.267033ms ago: executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$NL80211_CMD_RADAR_DETECT(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={0xffffffffffffffff, r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000008000700d000000018000180140002006e657464657673696d300000000000000800080000fcffff080009"], 0x4c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_newaddr={0x40, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_CACHEINFO={0x14, 0x6, {0x92, 0x7fff}}]}, 0x40}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xd}, {}, {0xfff8}}, [@filter_kind_options=@f_u32={{0x8}, {0xfffffffffffffde7, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x0, 0x0, 0x3}}]}}]}, 0x44}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 33.704849ms ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0], 0x1, 0x5511, &(0x7f0000015b80)="$eJzs3E1rY9UfB/CTdjqdp//8i7hwNxcGoYVJmPRh0F3VGXzADsWHhStNkzRkJsktTZrWrly4FBe+Djei4Mql+BIEXbsTF4o7Qck9pzIdFdRmkqn9fOD2e+/JzS+/E0rLuQk3AGfWQvbzj6VwNVwMIcyGEK6EUOyX0lZYj/FUCOFaCGHmga2Uxn8fOB9CuBRCuDoqHmuW0kMf3RheX/vhlZ+++Hr+3OVPPv92erMGpu3pEEJ3J+7vd2PmrZj30nht2C6yuzpMGR/o3k/Hecz95lZRYb92dF6tyJVWPD/f2euPcrtTq4+y1d4uxnd68QX7w9ZRneIJ92q7xXGjuVVku58X2TqMfR0cxr9th/1BrNNI9d4tyofB4CjjePOgGeczf7/Iem+QxmPdvNE8GOUwZXq5UM87jaKPrZO804+3V9u9vYNs2Nztt/NetlapPlOp3ipXd/NGc9BcLde6jVur2WKrMzqtPGjWuuutPG91mpV63l3KFlv1erlazRZvN7fatV5WrVZWKjfLa0tp70b24t03s04jWxzl8+3e3qDd6Wfb+W4Wn7GULVdWnl3Krlez1zc2s83X7tzZ2Hzj7dtv3X1u4+UX0kl/aCtbXL65vFyu3iwvV5dO7/xH/+v/0fzfT02Pcf5wIqVpNwBw+lj/A5P28VcxT/P6P/yb9f+O9f/DrP/P9vzhRKz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOrO/mPn2p2FmIx5fT+P/S0BPpuBRCmAkh/PonZsP5YzVnU525vzh/7qEeviyFosLoNebTdimEsJ62X/7/qN8FAAAA+O/67L1rH8bVevyxMO2GmKR40WbmyjtjqlcKIcwtfD+GKiFdbApPnryraPT7fS4cjKlacQHrwpiKxUtu58ZV7W+ZPRYXHohSjJmJtgMAAEzE8ZXAZFchAAAATNIH026A6Sg+aU3fxU9f4J+PkT4QvHjsCAAAADiFStNuAAAAAHjkivX/43P/v2+Kfff/AwAAgPGK9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiNnfvJSR2K4gB8Wuh7vD9GYpy7FWewDFdgHDo0LMBNsATcghtgDThzCQYMbYnWYKLhto3k+5K23Bvy45QwOfeSAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCmp2Ixfbi7uD80Z705TJq7AQAAAPZZFYtp+WJcjf/V8yf11Fk9ziIij4h9vfsgfjUyB3VO8cn7iw81PEaUCdvP+F0ffyPisj5eTtv+FgAAAOB4LWfzSdWtV6dx3wXRpWrRJv9/lSgvi4hi/JwoLd+ezhOFlb/vYdwmSisXsEaJwqolt2GqtC8ZNC6jd5esuuSdlgMAAHSi2Ql024UAAADQpZu+C6AfWey2Mnd7weU/7982BP80RgAAAMAPlPVdAAAAANC6sv/3/D8AAAA4btXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGjTqlhMl7P5pDF5/f2c9eYw6e4IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXtmfdxQIgTAIg73rO5O5/2GlQUNjkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYud+XuOo4gCAf3dnZ2urYoySQ0QUPOjFptva2qsHJXjwTxBCuq3RrT/aHGwpQi7eJOdeRI8ighJv/R96bqGXeuthDxU89VCZ2ZnkdS24WjqzST4fePO+Mwzzvm8SQr7zZhcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDa+L29OCs2C5O4Wx27df/aetHfnuoLN7bvLBetiDtNJr0PPHgYr6b7naX2cgEAAODwyOr6PiLu5jurRd9dKOv/vD6nqPl/eH4S1/X8dN1f93XtX7Tff7v38u5AC5Nxioue3xgNT/wzld7Tm+V8e+Ffz+iVd7589pKVP5Duh1svjfPyfna+u3nz/X4ZHmkiWwDg/zhe91VQ/z9U9IM2EwPg0OglhXdd/2cL7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IT+Vjxbx52IWO7txYXb96+tl/3U/o3tO8t1O3P9+nZ6zeISeUSc3xgNTzQ1kX3g8pWrn62NRsNLzQevRUR7o1fBxzOcE9FmhoInDbrV7/q85LM/gpb/MAEAcODkVSvq+rv5zmpxrLMY8fDHR+v/N5M40vp/qk/r/3ufnLmVjpXW/4PGZjj/VjYvfrly+crVtzcurl0YXhh+/s7JwbuDU2dPnz67Uj4rWfHEBAAAgCfTr1pa/3cXI8ZT6//HkjhmrP+/+n7wTTpWpv5/rL1Fv7YzAQAAONxefP2vPzuPOd7p9+Prtc3NS4PJdnf/5GTbQqr/2ZGqpfV/tth2VgAAAEATxludR9b/zyVxzLj+/9xPr/ySXjOLiKPV+v/x9S9G55qbTksezHRWEx8nfupTBQAAYK4drVq6/p+X7/93d1956EbEW29M4uprAGeq/7MPvv05HSt9//9Uc1OcS92lyf0o+6WI3lLbGQEAAHCQPVO1otj/I99Z/fTXYx/1vf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0LS/AwAA//+xhkJ5") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000000), &(0x7f0000000280)) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x4b3a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x0, &(0x7f0000001400)=""/251, 0xfb) syslog(0xa, &(0x7f0000002700)=""/96, 0x60) syslog(0x3, &(0x7f0000002780)=""/253, 0xfd) syslog(0x9, 0x0, 0x0) syslog(0x4, 0x0, 0x0) syslog(0x0, &(0x7f00000002c0)=""/51, 0xffffffffffffffa2) syslog(0x0, 0x0, 0x0) syslog(0x0, 0x0, 0x0) syslog(0x9, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) ftruncate(0xffffffffffffffff, 0xffffffffffffffe0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) fchown(0xffffffffffffffff, 0xee01, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 12.78749ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, r1, 0xa4fbfd4840e03a43}, 0x14}}, 0x0) 0s ago: executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.23' (ED25519) to the list of known hosts. 1970/01/01 00:00:38 fuzzer started 1970/01/01 00:00:38 dialing manager at 10.128.0.169:30028 [ 38.571454][ T6253] cgroup: Unknown subsys name 'net' [ 38.678236][ T6262] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 38.857806][ T6253] cgroup: Unknown subsys name 'rlimit' 1970/01/01 00:00:39 starting 5 executor processes [ 39.818656][ T6274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.821952][ T6274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.827387][ T6280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.828964][ T6285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.831470][ T6280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 39.834455][ T6280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 39.836946][ T6285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.837086][ T6280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 39.839265][ T6285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.841631][ T6280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 39.843050][ T6285] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.845424][ T6280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 39.847485][ T6285] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.848539][ T6280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 39.850333][ T6285] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.854650][ T6285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.859046][ T6285] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 39.863284][ T6285] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 39.865397][ T6285] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.868060][ T6285] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 39.881273][ T6285] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 39.892663][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 39.895751][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 39.898147][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 39.900189][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.903027][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 39.903408][ T6285] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 39.905064][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.907413][ T6285] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 39.910646][ T6285] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 40.087483][ T6272] chnl_net:caif_netlink_parms(): no params data found [ 40.109282][ T6273] chnl_net:caif_netlink_parms(): no params data found [ 40.177541][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.179547][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.181570][ T6272] bridge_slave_0: entered allmulticast mode [ 40.184064][ T6272] bridge_slave_0: entered promiscuous mode [ 40.189484][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.191285][ T6272] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.193655][ T6272] bridge_slave_1: entered allmulticast mode [ 40.195924][ T6272] bridge_slave_1: entered promiscuous mode [ 40.212821][ T6273] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.214756][ T6273] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.216646][ T6273] bridge_slave_0: entered allmulticast mode [ 40.218827][ T6273] bridge_slave_0: entered promiscuous mode [ 40.246511][ T6273] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.248465][ T6273] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.250446][ T6273] bridge_slave_1: entered allmulticast mode [ 40.252875][ T6273] bridge_slave_1: entered promiscuous mode [ 40.263489][ T6272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.269407][ T6276] chnl_net:caif_netlink_parms(): no params data found [ 40.300497][ T6272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.311856][ T6273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.316675][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 40.354780][ T6273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.359528][ T6272] team0: Port device team_slave_0 added [ 40.371505][ T6272] team0: Port device team_slave_1 added [ 40.383719][ T6286] chnl_net:caif_netlink_parms(): no params data found [ 40.405365][ T6273] team0: Port device team_slave_0 added [ 40.436379][ T6273] team0: Port device team_slave_1 added [ 40.439038][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.440943][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.448636][ T6272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.460474][ T6276] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.462777][ T6276] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.464803][ T6276] bridge_slave_0: entered allmulticast mode [ 40.466828][ T6276] bridge_slave_0: entered promiscuous mode [ 40.478626][ T6272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.480413][ T6272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.487789][ T6272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.501685][ T6276] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.503794][ T6276] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.505731][ T6276] bridge_slave_1: entered allmulticast mode [ 40.507927][ T6276] bridge_slave_1: entered promiscuous mode [ 40.510462][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.513461][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.520281][ T6273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.532023][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.534316][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.536359][ T6278] bridge_slave_0: entered allmulticast mode [ 40.538394][ T6278] bridge_slave_0: entered promiscuous mode [ 40.545726][ T6273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.547671][ T6273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.555113][ T6273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.567847][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.569755][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.571751][ T6278] bridge_slave_1: entered allmulticast mode [ 40.574374][ T6278] bridge_slave_1: entered promiscuous mode [ 40.587202][ T6276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.634191][ T6272] hsr_slave_0: entered promiscuous mode [ 40.682632][ T6272] hsr_slave_1: entered promiscuous mode [ 40.739443][ T6276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.747613][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.755669][ T6286] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.757583][ T6286] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.759531][ T6286] bridge_slave_0: entered allmulticast mode [ 40.761735][ T6286] bridge_slave_0: entered promiscuous mode [ 40.765549][ T6286] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.767618][ T6286] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.769707][ T6286] bridge_slave_1: entered allmulticast mode [ 40.771967][ T6286] bridge_slave_1: entered promiscuous mode [ 40.780771][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.823869][ T6273] hsr_slave_0: entered promiscuous mode [ 40.862608][ T6273] hsr_slave_1: entered promiscuous mode [ 40.892436][ T6273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.894914][ T6273] Cannot create hsr debugfs directory [ 40.911030][ T6276] team0: Port device team_slave_0 added [ 40.933841][ T6276] team0: Port device team_slave_1 added [ 40.936963][ T6286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.941315][ T6278] team0: Port device team_slave_0 added [ 40.960602][ T6286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.964741][ T6278] team0: Port device team_slave_1 added [ 41.003002][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.004804][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.011930][ T6276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.017181][ T6276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.019035][ T6276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.027027][ T6276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.040117][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.041962][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.049195][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.054080][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.055926][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.063114][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.088794][ T6286] team0: Port device team_slave_0 added [ 41.094480][ T6286] team0: Port device team_slave_1 added [ 41.154442][ T6278] hsr_slave_0: entered promiscuous mode [ 41.192498][ T6278] hsr_slave_1: entered promiscuous mode [ 41.232459][ T6278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.234642][ T6278] Cannot create hsr debugfs directory [ 41.246765][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.248710][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.255788][ T6286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.305478][ T6286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.307504][ T6286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.314441][ T6286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.384657][ T6276] hsr_slave_0: entered promiscuous mode [ 41.422641][ T6276] hsr_slave_1: entered promiscuous mode [ 41.463071][ T6276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.465076][ T6276] Cannot create hsr debugfs directory [ 41.544970][ T6286] hsr_slave_0: entered promiscuous mode [ 41.582618][ T6286] hsr_slave_1: entered promiscuous mode [ 41.622320][ T6286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.624504][ T6286] Cannot create hsr debugfs directory [ 41.663209][ T6272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 41.703667][ T6272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 41.709116][ T6272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 41.721856][ T6272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 41.747699][ T6273] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 41.764326][ T6273] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 41.767898][ T6273] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 41.794624][ T6273] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 41.837727][ T6276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 41.841432][ T6276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 41.860354][ T6272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.867972][ T6276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 41.881212][ T6278] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 41.888913][ T6276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 41.899959][ T6278] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 41.903545][ T6278] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 41.910524][ T6272] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.922402][ T6278] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 41.927240][ T6273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.933292][ T6285] Bluetooth: hci3: command tx timeout [ 41.935179][ T6285] Bluetooth: hci4: command tx timeout [ 41.936782][ T6285] Bluetooth: hci0: command tx timeout [ 41.938889][ T6285] Bluetooth: hci1: command tx timeout [ 41.940662][ T6279] Bluetooth: hci2: command tx timeout [ 41.955588][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.957663][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.962617][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.964600][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.987613][ T6286] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 41.993972][ T6286] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 42.011656][ T6286] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 42.016189][ T6286] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 42.020287][ T6273] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.051412][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.053411][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.056869][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.058747][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.063765][ T6272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.118872][ T6273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.121939][ T6273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.160922][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.200416][ T6286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.218767][ T6272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.223226][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.230530][ T6276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.243213][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.245232][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.268294][ T6286] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.278948][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.280875][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.295591][ T6273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.298765][ T6272] veth0_vlan: entered promiscuous mode [ 42.311948][ T6278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.315996][ T6278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.320686][ T6276] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.325850][ T6325] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.327755][ T6325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.335003][ T6325] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.336981][ T6325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.348512][ T6272] veth1_vlan: entered promiscuous mode [ 42.378405][ T6286] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 42.381307][ T6286] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 42.399154][ T6273] veth0_vlan: entered promiscuous mode [ 42.408240][ T6272] veth0_macvtap: entered promiscuous mode [ 42.415112][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.417196][ T6326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.426167][ T6273] veth1_vlan: entered promiscuous mode [ 42.440266][ T6272] veth1_macvtap: entered promiscuous mode [ 42.450844][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.452916][ T6326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.481081][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.500834][ T6273] veth0_macvtap: entered promiscuous mode [ 42.508272][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.521463][ T6272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.528093][ T6273] veth1_macvtap: entered promiscuous mode [ 42.558679][ T6272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.561350][ T6272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.565489][ T6272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.567873][ T6272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.586687][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.589888][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.598740][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.619344][ T6286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.625203][ T6273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.627965][ T6273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.631530][ T6273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.650841][ T6273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.656150][ T6273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.658547][ T6273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.661035][ T6273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.761280][ T6286] veth0_vlan: entered promiscuous mode [ 42.774197][ T2010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.776519][ T6278] veth0_vlan: entered promiscuous mode [ 42.778048][ T2010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.790329][ T6286] veth1_vlan: entered promiscuous mode [ 42.812110][ T6286] veth0_macvtap: entered promiscuous mode [ 42.821417][ T6286] veth1_macvtap: entered promiscuous mode [ 42.831315][ T6278] veth1_vlan: entered promiscuous mode [ 42.836730][ T6276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.847719][ T2010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.850177][ T2010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.876087][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.879031][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.881656][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.886165][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.889651][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.897856][ T2034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.901225][ T2034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.908966][ T2034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 42.911775][ T2034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 42.914384][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.917122][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.919689][ T6286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.923479][ T6286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.927084][ T6286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.944971][ T6286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.947379][ T6286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.949695][ T6286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.952028][ T6286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.961312][ T6276] veth0_vlan: entered promiscuous mode [ 42.974104][ T6278] veth0_macvtap: entered promiscuous mode [ 42.980556][ T6276] veth1_vlan: entered promiscuous mode [ 42.989321][ T6278] veth1_macvtap: entered promiscuous mode [ 43.018346][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.028155][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.031428][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.035134][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.037747][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.040487][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.045847][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.049173][ T6276] veth0_macvtap: entered promiscuous mode [ 43.051988][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.055635][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.058301][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.071124][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.074099][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.076969][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.080391][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.097433][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.099835][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.123904][ T6276] veth1_macvtap: entered promiscuous mode [ 43.131401][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.139161][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.141995][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.146550][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.149405][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.153398][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.156135][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 43.159015][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.174080][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.177852][ T6278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.180317][ T6278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.184033][ T6278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.186583][ T6278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.196985][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.199796][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.204035][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.207011][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.209761][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.215293][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.218104][ T6276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 43.221039][ T6276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 43.225207][ T6276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.249686][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.265804][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.270692][ T6276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.274244][ T6276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.279478][ T6276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.282005][ T6276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.311639][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.319413][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.353944][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.355975][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.415421][ T6363] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 43.436930][ T6326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.452082][ T6326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.496754][ T275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 43.505111][ T275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 43.623789][ T6371] sp0: Synchronizing with TNC [ 43.633173][ T6371] ------------[ cut here ]------------ [ 43.633384][ T6371] [ 43.633389][ T6371] ====================================================== [ 43.633393][ T6371] WARNING: possible circular locking dependency detected [ 43.633398][ T6371] 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 Tainted: G W [ 43.633405][ T6371] ------------------------------------------------------ [ 43.633408][ T6371] syz-executor.0/6371 is trying to acquire lock: [ 43.633414][ T6371] ffff80008f1bcea0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x88/0xec [ 43.633447][ T6371] [ 43.633447][ T6371] but task is already holding lock: [ 43.633450][ T6371] ffff800093bc1c58 (&port_lock_key){-...}-{2:2}, at: uart_write+0x114/0x2ec [ 43.633477][ T6371] [ 43.633477][ T6371] which lock already depends on the new lock. [ 43.633477][ T6371] [ 43.633481][ T6371] [ 43.633481][ T6371] the existing dependency chain (in reverse order) is: [ 43.633485][ T6371] [ 43.633485][ T6371] -> #1 (&port_lock_key){-...}-{2:2}: [ 43.633499][ T6371] _raw_spin_lock_irqsave+0x5c/0x7c [ 43.633512][ T6371] pl011_console_write+0x148/0x724 [ 43.633524][ T6371] console_flush_all+0x5cc/0xb74 [ 43.633533][ T6371] console_unlock+0xec/0x3d4 [ 43.633543][ T6371] vprintk_emit+0x1ec/0x350 [ 43.633551][ T6371] vprintk_default+0xa0/0xe4 [ 43.633561][ T6371] vprintk+0x200/0x2d4 [ 43.633570][ T6371] _printk+0xdc/0x128 [ 43.633583][ T6371] register_console+0x700/0xa8c [ 43.633593][ T6371] serial_core_register_port+0x1428/0x1bf4 [ 43.633606][ T6371] serial_ctrl_register_port+0x28/0x38 [ 43.633615][ T6371] uart_add_one_port+0x28/0x38 [ 43.633625][ T6371] pl011_register_port+0x1b4/0x44c [ 43.633635][ T6371] sbsa_uart_probe+0x488/0x608 [ 43.633646][ T6371] platform_probe+0x148/0x1c0 [ 43.633656][ T6371] really_probe+0x38c/0x8fc [ 43.633669][ T6371] __driver_probe_device+0x194/0x374 [ 43.633684][ T6371] driver_probe_device+0x78/0x330 [ 43.633698][ T6371] __device_attach_driver+0x2a8/0x4f4 [ 43.633710][ T6371] bus_for_each_drv+0x228/0x2bc [ 43.633721][ T6371] __device_attach+0x2b4/0x434 [ 43.633733][ T6371] device_initial_probe+0x24/0x34 [ 43.633745][ T6371] bus_probe_device+0x178/0x240 [ 43.633756][ T6371] device_add+0x728/0xa6c [ 43.633765][ T6371] platform_device_add+0x3e8/0x6e8 [ 43.633774][ T6371] platform_device_register_full+0x4ec/0x604 [ 43.633784][ T6371] acpi_create_platform_device+0x5bc/0x744 [ 43.633796][ T6371] acpi_default_enumeration+0x6c/0xdc [ 43.633810][ T6371] acpi_bus_attach+0x8b8/0xaa8 [ 43.633822][ T6371] acpi_dev_for_one_check+0xa0/0xb4 [ 43.633833][ T6371] device_for_each_child+0xec/0x174 [ 43.633844][ T6371] acpi_dev_for_each_child+0xc4/0x108 [ 43.633855][ T6371] acpi_bus_attach+0x358/0xaa8 [ 43.633867][ T6371] acpi_dev_for_one_check+0xa0/0xb4 [ 43.633878][ T6371] device_for_each_child+0xec/0x174 [ 43.633888][ T6371] acpi_dev_for_each_child+0xc4/0x108 [ 43.633899][ T6371] acpi_bus_attach+0x358/0xaa8 [ 43.633911][ T6371] acpi_bus_scan+0x118/0x4f0 [ 43.633923][ T6371] acpi_scan_init+0x214/0x6b0 [ 43.633943][ T6371] acpi_init+0x190/0x254 [ 43.633951][ T6371] do_one_initcall+0x254/0x9e4 [ 43.633962][ T6371] do_initcall_level+0x154/0x214 [ 43.633974][ T6371] do_initcalls+0x58/0xac [ 43.633983][ T6371] do_basic_setup+0x8c/0xa0 [ 43.633993][ T6371] kernel_init_freeable+0x324/0x478 [ 43.634003][ T6371] kernel_init+0x24/0x2a0 [ 43.634016][ T6371] ret_from_fork+0x10/0x20 [ 43.634026][ T6371] [ 43.634026][ T6371] -> #0 (console_owner){-...}-{0:0}: [ 43.634040][ T6371] __lock_acquire+0x3384/0x763c [ 43.634053][ T6371] lock_acquire+0x248/0x73c [ 43.634065][ T6371] console_lock_spinning_enable+0xb4/0xec [ 43.634076][ T6371] console_flush_all+0x58c/0xb74 [ 43.634085][ T6371] console_unlock+0xec/0x3d4 [ 43.634094][ T6371] vprintk_emit+0x1ec/0x350 [ 43.634103][ T6371] vprintk_default+0xa0/0xe4 [ 43.634112][ T6371] vprintk+0x200/0x2d4 [ 43.634121][ T6371] _printk+0xdc/0x128 [ 43.634133][ T6371] report_bug+0x3b8/0x5b0 [ 43.634144][ T6371] bug_handler+0x50/0x1fc [ 43.634153][ T6371] brk_handler+0x17c/0x2e0 [ 43.634163][ T6371] do_debug_exception+0x1e4/0x398 [ 43.634176][ T6371] el1_dbg+0x64/0x80 [ 43.634186][ T6371] el1h_64_sync_handler+0x40/0xac [ 43.634196][ T6371] el1h_64_sync+0x64/0x68 [ 43.634204][ T6371] uart_write+0x280/0x2ec [ 43.634216][ T6371] sixpack_open+0x5d8/0x8b0 [ 43.634230][ T6371] tty_ldisc_open+0x9c/0x14c [ 43.634242][ T6371] tty_set_ldisc+0x2f8/0x4e0 [ 43.634254][ T6371] tiocsetd+0x100/0x13c [ 43.634265][ T6371] tty_ioctl+0xba0/0xd8c [ 43.634274][ T6371] __arm64_sys_ioctl+0x14c/0x1c8 [ 43.634286][ T6371] invoke_syscall+0x98/0x2b8 [ 43.634294][ T6371] el0_svc_common+0x130/0x23c [ 43.634302][ T6371] do_el0_svc+0x48/0x58 [ 43.634310][ T6371] el0_svc+0x54/0x168 [ 43.634320][ T6371] el0t_64_sync_handler+0x84/0xfc [ 43.634331][ T6371] el0t_64_sync+0x190/0x194 [ 43.634346][ T6371] [ 43.634346][ T6371] other info that might help us debug this: [ 43.634346][ T6371] [ 43.634350][ T6371] Possible unsafe locking scenario: [ 43.634350][ T6371] [ 43.634353][ T6371] CPU0 CPU1 [ 43.634356][ T6371] ---- ---- [ 43.634359][ T6371] lock(&port_lock_key); [ 43.634366][ T6371] lock(console_owner); [ 43.634373][ T6371] lock(&port_lock_key); [ 43.634381][ T6371] lock(console_owner); [ 43.634387][ T6371] [ 43.634387][ T6371] *** DEADLOCK *** [ 43.634387][ T6371] [ 43.634390][ T6371] 5 locks held by syz-executor.0/6371: [ 43.634397][ T6371] #0: ffff0000cdfcd1c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0x78/0xc8 [ 43.634421][ T6371] #1: ffff0000cdfcd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_write+0x3c/0x4c [ 43.634446][ T6371] #2: ffff800093bc1c58 (&port_lock_key){-...}-{2:2}, at: uart_write+0x114/0x2ec [ 43.634473][ T6371] #3: ffff80008f0a47c0 (console_lock){+.+.}-{0:0}, at: vprintk_emit+0x1d0/0x350 [ 43.634497][ T6371] #4: ffff80008f0a43f0 (console_srcu){....}-{0:0}, at: rcu_try_lock_acquire+0x10/0x4c [ 43.634523][ T6371] [ 43.634523][ T6371] stack backtrace: [ 43.634528][ T6371] CPU: 0 PID: 6371 Comm: syz-executor.0 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 [ 43.634540][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 43.634547][ T6371] Call trace: [ 43.634551][ T6371] dump_backtrace+0x1b8/0x1e4 [ 43.634560][ T6371] show_stack+0x2c/0x3c [ 43.634569][ T6371] dump_stack_lvl+0xe4/0x150 [ 43.634578][ T6371] dump_stack+0x1c/0x28 [ 43.634587][ T6371] print_circular_bug+0x150/0x1b8 [ 43.634596][ T6371] check_noncircular+0x310/0x404 [ 43.634605][ T6371] __lock_acquire+0x3384/0x763c [ 43.634616][ T6371] lock_acquire+0x248/0x73c [ 43.634627][ T6371] console_lock_spinning_enable+0xb4/0xec [ 43.634638][ T6371] console_flush_all+0x58c/0xb74 [ 43.634647][ T6371] console_unlock+0xec/0x3d4 [ 43.634655][ T6371] vprintk_emit+0x1ec/0x350 [ 43.634664][ T6371] vprintk_default+0xa0/0xe4 [ 43.634673][ T6371] vprintk+0x200/0x2d4 [ 43.634682][ T6371] _printk+0xdc/0x128 [ 43.634692][ T6371] report_bug+0x3b8/0x5b0 [ 43.634702][ T6371] bug_handler+0x50/0x1fc [ 43.634711][ T6371] brk_handler+0x17c/0x2e0 [ 43.634720][ T6371] do_debug_exception+0x1e4/0x398 [ 43.634732][ T6371] el1_dbg+0x64/0x80 [ 43.634741][ T6371] el1h_64_sync_handler+0x40/0xac [ 43.634751][ T6371] el1h_64_sync+0x64/0x68 [ 43.634759][ T6371] uart_write+0x280/0x2ec [ 43.634770][ T6371] sixpack_open+0x5d8/0x8b0 [ 43.634782][ T6371] tty_ldisc_open+0x9c/0x14c [ 43.634793][ T6371] tty_set_ldisc+0x2f8/0x4e0 [ 43.634804][ T6371] tiocsetd+0x100/0x13c [ 43.634814][ T6371] tty_ioctl+0xba0/0xd8c [ 43.634823][ T6371] __arm64_sys_ioctl+0x14c/0x1c8 [ 43.634833][ T6371] invoke_syscall+0x98/0x2b8 [ 43.634841][ T6371] el0_svc_common+0x130/0x23c [ 43.634849][ T6371] do_el0_svc+0x48/0x58 [ 43.634857][ T6371] el0_svc+0x54/0x168 [ 43.634866][ T6371] el0t_64_sync_handler+0x84/0xfc [ 43.634876][ T6371] el0t_64_sync+0x190/0x194 [ 43.656499][ T6368] loop2: detected capacity change from 0 to 40427 [ 43.656770][ T6371] WARNING: CPU: 0 PID: 6371 at drivers/tty/serial/serial_core.c:625 uart_write+0x280/0x2ec [ 43.673175][ T6368] F2FS-fs (loop2): Unrecognized mount option "00000000000000000003" or missing value [ 43.674094][ T6371] Modules linked in: [ 43.868105][ T6371] CPU: 0 PID: 6371 Comm: syz-executor.0 Tainted: G W 6.10.0-rc2-syzkaller-g8867bbd4a056 #0 [ 43.871355][ T6371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 43.874180][ T6371] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 43.876372][ T6371] pc : uart_write+0x280/0x2ec [ 43.877717][ T6371] lr : uart_write+0x278/0x2ec [ 43.879056][ T6371] sp : ffff800099bf7ad0 [ 43.880151][ T6371] x29: ffff800099bf7ad0 x28: 1ffff0001337ef68 x27: dfff800000000000 [ 43.882520][ T6371] x26: 0000000000000001 x25: dfff800000000000 x24: ffff0000c8b10f48 [ 43.884748][ T6371] x23: 0000000000000000 x22: ffff800093bc1c40 x21: ffff800099bf7b60 [ 43.886980][ T6371] x20: 0000000000000001 x19: ffff0000c8b10be8 x18: ffff800099bf7780 [ 43.889265][ T6371] x17: 0000000000016d7a x16: ffff8000803514ec x15: ffff70001337ef40 [ 43.891431][ T6371] x14: 1ffff0001337ef40 x13: 0000000000000004 x12: ffffffffffffffff [ 43.893700][ T6371] x11: 0000000000040000 x10: 000000000001b7f3 x9 : ffff8000a0f5c000 [ 43.895973][ T6371] x8 : 000000000001b7f4 x7 : 0000000000000000 x6 : 0000000000000000 [ 43.898209][ T6371] x5 : 0000000000000020 x4 : 0000000000000000 x3 : ffff80008035161c [ 43.900528][ T6371] x2 : 0000000000000001 x1 : 0000000000000000 x0 : ffff800093bc1c40 [ 43.902823][ T6371] Call trace: [ 43.903745][ T6371] uart_write+0x280/0x2ec [ 43.904950][ T6371] sixpack_open+0x5d8/0x8b0 [ 43.906177][ T6371] tty_ldisc_open+0x9c/0x14c [ 43.907483][ T6371] tty_set_ldisc+0x2f8/0x4e0 [ 43.908777][ T6371] tiocsetd+0x100/0x13c [ 43.909948][ T6371] tty_ioctl+0xba0/0xd8c [ 43.911117][ T6371] __arm64_sys_ioctl+0x14c/0x1c8 [ 43.912516][ T6371] invoke_syscall+0x98/0x2b8 [ 43.913823][ T6371] el0_svc_common+0x130/0x23c [ 43.915138][ T6371] do_el0_svc+0x48/0x58 [ 43.916279][ T6371] el0_svc+0x54/0x168 [ 43.917409][ T6371] el0t_64_sync_handler+0x84/0xfc [ 43.918823][ T6371] el0t_64_sync+0x190/0x194 [ 43.920117][ T6371] irq event stamp: 2074 [ 43.921259][ T6371] hardirqs last enabled at (2073): [] finish_lock_switch+0xbc/0x1e4 [ 43.923874][ T6371] hardirqs last disabled at (2074): [] _raw_spin_lock_irqsave+0x2c/0x7c [ 43.926647][ T6371] softirqs last enabled at (1906): [] neigh_parms_alloc+0x330/0x464 [ 43.929333][ T6371] softirqs last disabled at (1904): [] neigh_parms_alloc+0x284/0x464 [ 43.932140][ T6371] ---[ end trace 0000000000000000 ]--- [ 43.942010][ T6373] loop4: detected capacity change from 0 to 512 1970/01/01 00:00:43 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 43.972348][ T6373] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.974926][ T6373] EXT4-fs (loop4): blocks per group (3008) and clusters per group (32768) inconsistent [ 44.075008][ T6285] Bluetooth: hci1: command tx timeout [ 44.076724][ T6285] Bluetooth: hci3: command tx timeout [ 44.078318][ T6285] Bluetooth: hci0: command tx timeout [ 44.079815][ T6285] Bluetooth: hci4: command tx timeout [ 44.081346][ T6285] Bluetooth: hci2: command tx timeout