last executing test programs: 5m48.209049371s ago: executing program 32 (id=214): mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r0, &(0x7f0000000000), 0x3f5aa546) ioctl$EVIOCGABS20(r0, 0x80184560, 0x0) 5m16.77113411s ago: executing program 5 (id=326): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) 5m15.422480782s ago: executing program 5 (id=332): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r0, 0x8901, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, 0x0, 0x0, 0x10005, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x4000) statfs(0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) 5m14.270267818s ago: executing program 5 (id=333): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0x4}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x8}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1996}}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 5m13.949031646s ago: executing program 5 (id=334): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000300)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 5m13.460640787s ago: executing program 5 (id=336): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff070067060000200000007a0a00ff0ee60000bf250000000000002d350000000000006507000002080000270700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce04000000000000140000000000000095"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd2b, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x300, 0x0, 0x0, 0x0, 0xa, 0x40, 0x50, 0x87, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x800000}, 0x4, 0x6e6bb8}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000800}, 0x8004) 5m11.59441864s ago: executing program 33 (id=310): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000740)) 5m11.529314122s ago: executing program 5 (id=342): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2a, 0x364, &(0x7f0000000640)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 5m10.888454437s ago: executing program 34 (id=342): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000200)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2a, 0x364, &(0x7f0000000640)="$eJzs3T1sG3UUAPBnzonTSCUZkBBMhg0JVU0QA7AkqopUkQGKLL4WLJryEZtKsbCUDHGzgBhBLEhIDGwdYGDojBgqxMbASpFQAbHQLVIrDtk++84foYGSFNTfb7Ce3v3f/f93PtVX6/zy6kpsnJuJ89evX4u5uVKUV06txF4pFiOJgYsxRXlaEgD4P9hL0/g97bv16A/nB9HsIa8LADg8vc//14/nicqdXA0AcBQO+P//Z7svpfHshUNdGgBwSPai8Pk/FxEPj2we+5q/PHgqIDnCJQIA/7LnX3r5mdW1iLPV6lxE8712rV2LJ/Ptq+fjzWjEepyMhbgZ0b9R6H9b0H19+sza6XJEVKs/L0atW9GuRTQ77Vr/FmE16dVXYikWYjGrT4f1Sbd+qdoTERc7vfmjWWrXZmI+m/+H+ViP5ViI+ybqI86snV6uZjuoNQf1nYjd3u1MT3f9J2IhvnstLkQjzkW3Nl//zlK1eipdG6lvX6r0xmUmHnf41POPAAAAAAAAAAAAAAAAAAAAAADchhPVocVh/5u02Wm/e3Z8wGKxP86gIU7WH2i33x8orQy687yf5P11Tk7pz9OuleOeO3ngAAAAAAAAAAAAAAAAAAAA8B/S2pqNeqOxvtna2t4oBp1C5u1vPv/6WIyPeSvJM1Hu725kTJaLQlUSw/J0WJ4mI2OyIInIB1+6PFxxcUxleBTbg2YCxf1U+psKmVK2pnqjcfyhnz6ZmHRre+OPPJPExGkZDUqTkzbv7af+omr/YPkWY66mabpf+c7Hk1VRiihPvHG3E8xmwZVrbzzwWOv+x3ubvsqaPjzy6MILVz/67NeNeiOyU9NozG62bqb/ZK7ovwX5tVHKznNpypUwPdjNM7ubra168v1vLz74wbdjg5OYVt69ePLMO/vP9cV4ZrYfdJc5terKyJ7XZ6Zc/FOCp76sv3JjePX+rZO5kp2w+uWdH385aFXhHwmNOgAAAAAAAAAAAAAAAAAA4EgUfm59IP3fXj/x3OGuCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACOVv73/wvB7kTmIMGNTkxuqqxvtvad/NiRHioAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHexPwMAAP//TeVs8A==") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 3m43.338112879s ago: executing program 7 (id=544): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) 3m41.57580244s ago: executing program 7 (id=550): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000002100010027bd710003dcdf250a00106206000005", @ANYRES32=0x0, @ANYBLOB="14e00200fc0200"/20], 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@private1, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0xfffffffffffe, 0x5, 0x9}, {0x0, 0x0, 0x0, 0x2}, 0x80006c, 0x0, 0x1, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0xffffffff, 0x33}, 0xa, @in=@empty, 0x3507, 0x1, 0x1, 0x0, 0x40000, 0x8007c, 0xfffffffe}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0xaf, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0xfffffffd}, 0x1c) 3m39.333355602s ago: executing program 7 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) socket(0x21, 0x6, 0xe) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r0, 0x0, 0x0) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) 3m38.197064458s ago: executing program 7 (id=561): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 3m37.102794004s ago: executing program 7 (id=567): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000440)=ANY=[@ANYBLOB='+('], 0x150) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffc, @loopback, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x6000, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3m36.713188912s ago: executing program 7 (id=571): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023898) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3m21.381975909s ago: executing program 35 (id=571): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023898) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) 3m17.493029519s ago: executing program 6 (id=626): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x82, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES16], 0x1, 0x105ba, &(0x7f0000000980)="$eJzs3MtuG2UbB/DH7ZeevlIi1AOsGAkhxRK24iSNQEIoQCuoRKqIw4IVOLZjubU9Uewc6IpFu4JLYIuEUHdcA5veRsUCiRUSuyKQZyYogSwoceS2+f2k0X/m9bzPvOPO5vFUCeDYmk5++7UUF+JsRJyMiPMR2X6p2DJLebwYES9HxIk9W6kY/2vgVESci4gLo+J5zVLx0eLvDx99+9KNN7/6/mG59vN330zuroFJezUieuv5/nYvz7Sd561ivL7VybK3sFVk/kHvdnGc5rndWs0qbNd3z6tnOd/Oz0/XNwejXOvWG6Nsd9ay8fV+fsHBVnu3TjbhVn0jO262VrPsDNIs23fyde0UeWcwzOs0i3pfZOVjONzNfLy108rvZ/12lo3+sBjP66bN1s4ot4osLheNtNvM1rH6n7/mJ94Hnf7mTrLV2hh00n5ytVp7vVpbrNQ20mZr2Fqo1HvNxYVkpt0dnVYZtuq9pXaatrutaiPtlZOZdqNRqdWSmWut1U69n9Rq1fnqbOVqudh7LXnv5idJt5nMjPKdTn9z2OkOkrV0I8lnlJO56vwb5eSVWvLR8kqy8uH168srH3927dObby/feLc46R/LSmbmZufmKrXZylyt7P4Po3S46Rx3HiCAx6b/ByZB/6//j739b5w4lv2v/h8OwQMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs/TT1w/vZznR+/P9i/Lli6IWIuBIRlyPiUkT8cYCTcWpfzYsRUSr2Dzp/6m9r+LEUWYXRnNPFdi4ilort0fNH/S0AAADAs+v+g7v39rbWbz3O5C/Hvx6OyomDBosfbc6M6yLZTz7/G1e1i1mxnTFVu7RbciwuR8TU9C9jqnZl9A90/vMxVftXTu6LM3uilMeBDwwAAPB0298JjK17AwAA4Inz9aQXwGRk72uL/4tfvAs+nUfxQvDsviMAAADgKVSa9AIAAACAI5f1//7+HwAAADzb7j+4e2/SawAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+JOde8dNI4jjAPwHsoG8FBTxuApVlJKCQ+QIKVPakn0bd5zBEuIcuPMRLLDYHWMvhoplQfj7pGUewE8DEsXMsAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw6R6y6fhufnN7aM5y9ep6tUdcRex7CgAAADiaRTYd55Vu0f6W+n+krl8RMYyIQUT0Y/f0vRWfS5m9iGik+q7XZ1tjuI/IE9bvaafra0T8SdfTz2N/CwAAAHC55rPRJKK1ruYPvzc1PoC0aNOpKi9f8vlUVVovD/tfUVr/JbISg4jIuo8VpQ0jovn9b2rV8vtrlYrOm6JRFM06RgEAANSrPBOobPYGAADA2fl36gFwGvl+bfovftoLbhdF2hD8UmoBAAAA52v7bvuNRr3jAAAAAE4gn/+/O/8vrQo4/w8AAAAuQ3H+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMe0yKbj+Ww0OTRnuTpMNZ8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhmf85RKITBKIzevFH3FNz/suRCbG1tzoH8fGQoAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCdsVZeV7wbR8dYd74dM8mvu41/HzS2Hjf2JJ/55E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA42Z+zEwyBIAiD/R9eYEiL+YclDRqDCFWw8LHDPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC81ed6+d7xaxxJ/v1tTEn2kWTuqLF01Fi70Ni6MJ6+BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJMdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirsz72JAkEYx+F39+64W7jorgTzxY8aTIxES/ADhIWtwQJsyMTIdLERbUFBRzAzkg18nuT3HyaZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhP5yf3v4+Hj4jIIx+t/4+fEfEV+aZpht/XmW1Ph/rnNqe7/TjNv5h0iogoInvtRwAAWlLem8ZyVS26qb3UfuogtZzV1bzNRwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBh545ZmwjDAAB/SZvY6uRoBREcdLGxrdUIWRwK3QVBt9DGUkxV0gxt6dJfIDq5+hfspn/BPyA4aMHBoYOCiyDKJZfkCwRJEe5CfR54795cwt33ZQi8970XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiR44NwrpcXQghz04M88eHb/tqo/bvnH+d68fXu20vxOZNTlEIIjzabjRsZzmXSbe/uPa43m42WRCKR9JO8f5kAADhtSmkkdf3n0uFqcqxQC+H36+H6/2qUh7/U/19eXbjYi18779vxteL6fyGzGU6+SnvrWWV7d+/65lZ9o7HReLK0tLh8a/nmnduLlc69koo7JgAAAPybchpx/V+spev/M93PJO+dDYM8jFn/3195+CC+1pT6f6TBol/eIwEAAPi/nb/843thxPFCuRx26u12a6G77b9e7G5zGOqJnUkjrv+nanmPCgAAAMjC8UFhqP9/PcrDmOv/82/2j+JzToUQZtP1//m1p8317KYz0bJ4nDjvOQIAAJCv2TTi9f9Sp/+/2G95KIYQrl3p5unfAI5V/396eW/oofW4/38puylOpGK1+3109tUQpqt5jwgAAIDTbCaNpNg/Kh2utn6+WCnr/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP+zYMUoDQRQG4M1uVisxYKVWXkC0swpYCGLjIURB8AQiiAcQW0vvYOkdUivYWFim8AbyZndU0gQsdpV8H0zeIwyZl0mTfwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCu6f53X8XLqOnL9r3nj6uTqC8zNbzfr2/Gin7Q5dD/0GCv7wkAAABYBFXO90VRvNWPh1HLccr/dd4Tmf9hpelznp/N/bk+3b1u5Px/fbx1+XXQqDknPvTs/OJ0p7Nv+Petzt0xTDefnr1U6Qcpj27WpnW6z8HtZHKwlNrlLqYFAH5jO9e2yf+Hou72ORgAC2PYruJH/q/G/c4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IXPAAAA//8F312f") openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40, 0xab) 3m12.743086459s ago: executing program 6 (id=636): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x180) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0x10d, 0x0, 0x0, 0x0, 0x0) 3m11.41237482s ago: executing program 6 (id=643): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) userfaultfd(0x800) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) 3m9.107228324s ago: executing program 6 (id=648): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 3m7.025838392s ago: executing program 6 (id=652): ioperm(0x0, 0x9, 0x20) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x2000, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioperm(0x0, 0x1, 0x1) 3m6.109525493s ago: executing program 6 (id=658): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r0, 0x8901, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(0x0, 0x0, 0x0, 0x10005, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x4000) statfs(0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) 3m4.213613007s ago: executing program 36 (id=658): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$TUNDETACHFILTER(r0, 0x8901, 0x1000000000000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xedafb000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mount(0x0, 0x0, 0x0, 0x10005, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x4000) statfs(0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) 2m53.573331014s ago: executing program 0 (id=692): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r0, &(0x7f00000002c0)='0', 0x1) syz_usb_connect(0x4, 0x24, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x553, &(0x7f00000009c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x1) syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x1, 0xf, 0xe0, 0x7, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x3, 0x1ec9, 0x8}, [@network_terminal={0x7, 0x24, 0xa, 0x1, 0x3, 0xd, 0x14}, @ncm={0x6, 0x24, 0x1a, 0xe, 0x2c}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x80, 0x10, 0x1c}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0xf7, 0x7f, 0x79}}}}}]}}]}}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000005c0)) 2m50.684919192s ago: executing program 0 (id=694): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x8, &(0x7f0000000000)) lstat(&(0x7f0000019080)='./file1\x00', &(0x7f0000019100)) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_rr_get_interval(r0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) 2m48.094667641s ago: executing program 0 (id=700): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x1003, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0xc880) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2m47.547512754s ago: executing program 0 (id=703): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 2m46.617329796s ago: executing program 0 (id=707): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=0x1, @ANYRES32, @ANYBLOB="1a0000000220"], 0x20) 2m46.120678727s ago: executing program 4 (id=709): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x9, &(0x7f0000000140)=[{&(0x7f00000006c0)="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", 0x186}, {&(0x7f0000000180)="96bc1480bb5c", 0x6}], 0x2, &(0x7f0000000240)=[@ip_tos_int={{0x0, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x7}}], 0x38}, 0x200408c4) 2m45.98622003s ago: executing program 0 (id=710): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x6, &(0x7f0000000280)=@framed={{}, [@alu={0x7, 0x1, 0x2, 0x5, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m45.610023439s ago: executing program 37 (id=710): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x6, &(0x7f0000000280)=@framed={{}, [@alu={0x7, 0x1, 0x2, 0x5, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff0}, @map_fd={0x18, 0x1}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m45.597488299s ago: executing program 4 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m44.69370906s ago: executing program 4 (id=716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000002000000000000000000008523000087000000180100002020642500000000002020207b1af8ff00200000b8a100000000000007010000f8ffffffb702000008000000b703000004000000850000009b00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 2m44.452743466s ago: executing program 4 (id=717): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r2, &(0x7f0000000100)=""/134, 0x86) 2m43.580032876s ago: executing program 4 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', r1}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', r1}, 0x94) 2m41.840772057s ago: executing program 4 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000002000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008040) close(0x3) 2m40.438839729s ago: executing program 38 (id=731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x24, 0x3, "7339f2f304fdd672bad09dfb040000000002000001f9580dabf95ddc91967c20"}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xc, 0x1, 'RATEEST\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008040) close(0x3) 1m30.468509423s ago: executing program 3 (id=1140): lseek(0xffffffffffffffff, 0x81, 0x1) 1m29.818514119s ago: executing program 3 (id=1143): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file1\x00', 0x24842, 0x1a6) fcntl$dupfd(r0, 0x406, r1) 1m29.235125802s ago: executing program 3 (id=1145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b160000000000000000020000084000048018000180080001006f7366000c0002800800014000000004240001800a000100726564697200000014000280080001400000011408000340000000480900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 1m28.656852485s ago: executing program 3 (id=1149): r0 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x7, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) faccessat2(r1, 0x0, 0x60, 0x1000) 1m26.688749121s ago: executing program 3 (id=1153): r0 = gettid() timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/ipc\x00') setns(r1, 0x20000) 1m25.8853943s ago: executing program 3 (id=1157): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000100000000400"/20, @ANYBLOB="0000004cc5c600"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fac40801"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x8, 0x8, {{0x28, 0x4, 0x3, 0x5, 0xa0, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x4, 0xf4, 0x0, 0x4}, @timestamp_addr={0x44, 0x2c, 0xa3, 0x1, 0x4, [{@remote, 0x100}, {@private=0x4, 0x1}, {@multicast1, 0x180}, {@multicast2, 0x80000000}, {@broadcast, 0x79}]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0xa, [0x4, 0xc89a, 0xfffffffc, 0x3, 0xd45a, 0x5]}, @cipso={0x86, 0x30, 0x2, [{0x7, 0xd, "710eaff7035ad87edc2c53"}, {0x1, 0x4, "4288"}, {0x6, 0x5, "40e015"}, {0x0, 0x7, "e3d26b7261"}, {0x5, 0xd, "e80e36272078a481bcc6fe"}]}, @ssrr={0x89, 0xf, 0x89, [@local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) 1m10.386627251s ago: executing program 39 (id=1157): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="15000000100000000400"/20, @ANYBLOB="0000004cc5c600"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00fac40801"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x10, 0x8, 0x8, 0x8, {{0x28, 0x4, 0x3, 0x5, 0xa0, 0x65, 0x0, 0x3, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp={0x44, 0x4, 0xf4, 0x0, 0x4}, @timestamp_addr={0x44, 0x2c, 0xa3, 0x1, 0x4, [{@remote, 0x100}, {@private=0x4, 0x1}, {@multicast1, 0x180}, {@multicast2, 0x80000000}, {@broadcast, 0x79}]}, @timestamp={0x44, 0x1c, 0xe3, 0x0, 0xa, [0x4, 0xc89a, 0xfffffffc, 0x3, 0xd45a, 0x5]}, @cipso={0x86, 0x30, 0x2, [{0x7, 0xd, "710eaff7035ad87edc2c53"}, {0x1, 0x4, "4288"}, {0x6, 0x5, "40e015"}, {0x0, 0x7, "e3d26b7261"}, {0x5, 0xd, "e80e36272078a481bcc6fe"}]}, @ssrr={0x89, 0xf, 0x89, [@local, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) 41.962254557s ago: executing program 9 (id=1337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 41.521166187s ago: executing program 9 (id=1339): r0 = socket(0x2, 0x3, 0xff) setuid(0xee01) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000040)={'mangle\x00', 0x36, "cd202100"}, &(0x7f00000000c0)=0x28) 40.713287137s ago: executing program 9 (id=1341): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0xa, 0x7fff, 0x0, 0x1, 0x4000000000010001, 0x1000000000000008, 0x400, 0x7}, 0x0, 0x0, 0x0, 0x0) 39.446462986s ago: executing program 9 (id=1345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000fe0200000a88000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000005c0004805800018007000100637400004c000280050003000000000005000300000000000800044000000003080001400000001208000140000000030800014000000003080002"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 38.776241852s ago: executing program 9 (id=1347): socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffff80, 0x0) 37.447022243s ago: executing program 9 (id=1354): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x4, 0x0, 0x0) timer_create(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00') fchown(r0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x411d831, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 28.5938692s ago: executing program 2 (id=1380): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvfrom(r5, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x1c) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) 24.695284332s ago: executing program 2 (id=1388): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x31c6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000200), &(0x7f0000000340)=r1}, 0x20) 21.78721508s ago: executing program 40 (id=1354): syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) semctl$IPC_SET(0x0, 0x0, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4, 0x8) fsmount(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x2, 0x0) timer_create(0x4, 0x0, 0x0) timer_create(0x5, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/netlink\x00') fchown(r0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x200000d, 0x411d831, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) renameat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0) 20.429114912s ago: executing program 2 (id=1395): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x8, &(0x7f0000000000)) lstat(&(0x7f0000019080)='./file1\x00', &(0x7f0000019100)) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r3 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) 18.328458061s ago: executing program 8 (id=1397): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6(0xa, 0x6, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104800000000006104000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvfrom(r5, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, 0x0, 0x0, 0x1c) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x2, 0x0, 0x0) 13.903166234s ago: executing program 2 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000fe0200000a88000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000005c0004805800018007000100637400004c000280050003000000000005000300000000000800044000000003080001400000001208000140000000030800014000000003080002"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 13.553500843s ago: executing program 8 (id=1402): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x38, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 12.884165299s ago: executing program 8 (id=1404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003400000000808000640ffffff00540000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000028000380240000800800034000000002100002800c0002800800"], 0xe8}}, 0x4000840) 12.464525119s ago: executing program 2 (id=1406): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffc3c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000002000000000000000000000000000000000000000000000000008000000000000000000000000000000400040000000000000000000000000000000a000200cd00000000000000480002"], 0x1a4}}, 0x0) 11.896876412s ago: executing program 8 (id=1407): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000380)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000740)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001a40)={0x2c, &(0x7f0000001800)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f0000000000)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000600)={0x1c, &(0x7f00000003c0)={0x40, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000140)={0x6eb4b8ece19adc84, 0x14, 0x4, "371fcf83"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 11.878835992s ago: executing program 2 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x8, &(0x7f0000000000)) lstat(&(0x7f0000019080)='./file1\x00', &(0x7f0000019100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) r2 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r2, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) 6.309229812s ago: executing program 8 (id=1412): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000006c0)={0x0, 0x8, 0x35, "004744e728872e94214794fa1f7fd1273175a727422a59f241cda526586984021680f0eda09ab801b7ee8e929e24ea4a899662fd36"}, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x20, 0x82, 0x2, '2U'}, 0x0, 0x0, 0x0}) syz_open_dev$evdev(0x0, 0x40, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, 0x0, 0x0}, 0x0) 2.632483479s ago: executing program 1 (id=1417): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setuid(0xee01) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x98, 0x168, 0xffffffff, 0xffffffff, 0x200, 0x200, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}, 0xffffffff, 0xff000000, 'netdevsim0\x00', '\x00', {0x2231f6efff726425}, {0xff}, 0x1d, 0x0, 0x30}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@local, [0xffffffff, 0xff, 0xff000000, 0xff], 0x4e22, 0x4e21, 0x4e24, 0x4e26, 0x6, 0x8, 0x3, 0x1, 0xc6e}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8) 2.392900384s ago: executing program 1 (id=1418): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 2.14919083s ago: executing program 1 (id=1419): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x7b, 0xfe, 0x51, 0x8, 0x7ca, 0xb800, 0x1a86, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0x87, 0xe0, 0x8, "", [{{0x9, 0x4, 0xab, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x1, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x311, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x103, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x8, 0x60, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0x28}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x400, 0x2, 0x1, 0x37}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x304, 0x6, 0x2, 0x5f}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x404, 0x1, 0x4, 0x226b, 0x6, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x5c, 0x9, 0x9, {0x7, 0x25, 0x1, 0x0, 0x3, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0x9, 0x6, {0x7, 0x25, 0x1, 0x4, 0x10}}}}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x4, 0x15, 0x7, 0xa3eb9a5a9d640240, 0x2}, 0x29, &(0x7f0000000140)={0x5, 0xf, 0x29, 0x1, [@generic={0x24, 0x10, 0x3, "558a97ff53649d5864eef7d87826e2b9138d790d48977c1436f881ddca5c0dc3ff"}]}, 0x3, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc07}}, {0x3e, &(0x7f00000001c0)=@string={0x3e, 0x3, "24a26faffffaaf461b43875730bd44ce0e6835999ff258dbc1d78fcaef99bfba83c8cb834e5f30c8ad3673587ed20e4dfc565c13c4d4b515364a416d"}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x457}}]}) 2.057056142s ago: executing program 8 (id=1420): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc714, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150091a60906a101090182008c0508950129309102c0"], 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000240)="3a14") 621.489206ms ago: executing program 1 (id=1421): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x31c6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xa000000}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 349.258402ms ago: executing program 1 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@gettaction={0x38, 0x32, 0x301, 0x70bd2c, 0xfffffffe, {}, [@action_gd=@TCA_ACT_TAB={0x4}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}]}, 0x38}}, 0x4000840) 0s ago: executing program 1 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000fe0200000a88000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000005c0004805800018007000100637400004c000280050003000000000005000300000000000800044000000003080001400000001208000140000000030800014000000003080002"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): 552][ T7097] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 325.357134][ T7124] loop1: detected capacity change from 0 to 512 [ 325.375005][ T7124] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 325.387943][ T7124] EXT4-fs (loop1): orphan cleanup on readonly fs [ 325.394666][ T7124] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.673: bad orphan inode 15 [ 325.406164][ T7124] ext4_test_bit(bit=14, block=18) = 1 [ 325.411819][ T7124] is_bad_inode(inode)=0 [ 325.415999][ T7124] NEXT_ORPHAN(inode)=1023 [ 325.420385][ T7124] max_ino=32 [ 325.423602][ T7124] i_nlink=0 [ 325.428182][ T7124] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2921: inode #15: comm syz.1.673: corrupted xattr block 19 [ 325.440875][ T7124] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 325.451943][ T7124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 325.621481][ T7128] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 325.754546][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 325.953609][ T7113] chnl_net:caif_netlink_parms(): no params data found [ 325.966240][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 326.272161][ T7155] loop4: detected capacity change from 0 to 512 [ 326.326362][ T7155] EXT4-fs: Ignoring removed oldalloc option [ 326.420530][ T7155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 326.850920][ T49] Bluetooth: hci3: command 0x0409 tx timeout [ 327.676037][ T7155] EXT4-fs (loop4): 1 orphan inode deleted [ 327.707313][ T7155] EXT4-fs (loop4): 1 truncate cleaned up [ 327.769275][ T7155] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 327.849711][ T7155] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 327.870285][ T7179] loop8: detected capacity change from 0 to 512 [ 327.950647][ T7155] EXT4-fs (loop4): Remounting filesystem read-only [ 327.990483][ T7179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 328.067448][ T7179] System zones: 1-12 [ 328.080522][ T7179] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.683: missing EA_INODE flag [ 328.109636][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 328.183965][ T7179] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.683: error while reading EA inode 12 err=-117 [ 328.236165][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.263128][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.277376][ T7179] EXT4-fs (loop8): 1 orphan inode deleted [ 328.297553][ T7113] device bridge_slave_0 entered promiscuous mode [ 328.313019][ T7179] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 328.645193][ T7193] loop4: detected capacity change from 0 to 512 [ 328.676150][ T7193] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 328.834518][ T7193] EXT4-fs (loop4): orphan cleanup on readonly fs [ 328.843129][ T7193] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.686: bad orphan inode 15 [ 328.862337][ T7193] ext4_test_bit(bit=14, block=18) = 1 [ 328.867934][ T7193] is_bad_inode(inode)=0 [ 328.872186][ T7193] NEXT_ORPHAN(inode)=1023 [ 328.876560][ T7193] max_ino=32 [ 328.879867][ T7193] i_nlink=0 [ 328.885446][ T7193] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2921: inode #15: comm syz.4.686: corrupted xattr block 19 [ 328.904030][ T7193] EXT4-fs warning (device loop4): ext4_evict_inode:301: xattr delete (err -117) [ 328.913603][ T7193] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 328.939700][ T49] Bluetooth: hci3: command 0x041b tx timeout [ 329.603608][ T7199] loop1: detected capacity change from 0 to 512 [ 329.769231][ T7199] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 329.866630][ T7199] System zones: 1-12 [ 329.917626][ T7199] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.688: missing EA_INODE flag [ 330.010518][ T7199] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.688: error while reading EA inode 12 err=-117 [ 330.115502][ T7199] EXT4-fs (loop1): 1 orphan inode deleted [ 330.154268][ T7199] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 330.226961][ T6392] device hsr_slave_0 left promiscuous mode [ 330.337102][ T6392] device hsr_slave_1 left promiscuous mode [ 330.367594][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.397479][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 330.468333][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.516762][ T6392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.528385][ T6392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.529290][ T6817] EXT4-fs (loop8): unmounting filesystem. [ 330.543091][ T6392] device bridge_slave_1 left promiscuous mode [ 330.570951][ T6392] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.606999][ T6392] device bridge_slave_0 left promiscuous mode [ 330.629875][ T6392] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.764851][ T6392] device veth1_macvtap left promiscuous mode [ 330.783452][ T6392] device veth0_macvtap left promiscuous mode [ 330.807158][ T6392] device veth1_vlan left promiscuous mode [ 330.813058][ T6392] device veth0_vlan left promiscuous mode [ 331.017295][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 331.971940][ T7212] loop0: detected capacity change from 0 to 512 [ 332.060107][ T7212] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 332.186302][ T7212] EXT4-fs error (device loop0): ext4_orphan_get:1435: comm syz.0.692: bad orphan inode 13 [ 332.231891][ T7212] ext4_test_bit(bit=12, block=18) = 1 [ 332.256681][ T7212] is_bad_inode(inode)=0 [ 332.305614][ T7212] NEXT_ORPHAN(inode)=0 [ 332.349741][ T7212] max_ino=32 [ 332.353004][ T7212] i_nlink=1 [ 332.356216][ T7212] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 332.547850][ T7212] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 332.567696][ T7212] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.692: bg 0: block 248: padding at end of block bitmap is not set [ 332.661823][ T7212] Quota error (device loop0): write_blk: dquota write failed [ 332.722004][ T7212] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 332.765511][ T6392] team0 (unregistering): Port device team_slave_1 removed [ 332.773604][ T7212] EXT4-fs error (device loop0): ext4_acquire_dquot:6841: comm syz.0.692: Failed to acquire dquot type 1 [ 332.899575][ T6392] team0 (unregistering): Port device team_slave_0 removed [ 332.945511][ T7204] loop4: detected capacity change from 0 to 131072 [ 332.980241][ T7204] F2FS-fs (loop4): Invalid segment/section count (458783, 24 x 150994945) [ 333.005957][ T7204] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 333.016544][ T7204] F2FS-fs (loop4): invalid crc value [ 333.037941][ T6392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.077495][ T7204] F2FS-fs (loop4): Found nat_bits in checkpoint [ 333.107164][ T49] Bluetooth: hci3: command 0x0419 tx timeout [ 333.114967][ T5888] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 333.223135][ T6392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.237633][ T7204] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 333.246589][ T7204] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 333.317084][ T5888] usb 1-1: Using ep0 maxpacket: 32 [ 333.326580][ T5888] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 333.351131][ T5888] usb 1-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 333.368142][ T7204] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=60900, run fsck to fix. [ 333.388492][ T5888] usb 1-1: config 1 interface 0 has no altsetting 0 [ 333.401097][ T5888] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 333.423715][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.485205][ T5888] usb 1-1: Product: syz [ 333.497588][ T5888] usb 1-1: Manufacturer: syz [ 333.502247][ T5888] usb 1-1: SerialNumber: syz [ 333.532663][ T7217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 333.554252][ T7217] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 333.962137][ T5888] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 333.978478][ T5888] usb 1-1: USB disconnect, device number 7 [ 334.360789][ T6392] bond0 (unregistering): Released all slaves [ 334.476530][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.483790][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.511635][ T7113] device bridge_slave_1 entered promiscuous mode [ 334.589173][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.640972][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 334.648579][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.657971][ T4371] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5 [ 334.687794][ T4371] EXT4-fs error (device loop0): ext4_release_dquot:6877: comm kworker/u4:8: Failed to release dquot type 1 [ 334.736748][ T7225] loop4: detected capacity change from 0 to 16 [ 334.787735][ T7113] team0: Port device team_slave_0 added [ 334.796431][ T7113] team0: Port device team_slave_1 added [ 334.808764][ T7225] erofs: (device loop4): mounted with root inode @ nid 36. [ 334.883148][ T7225] syz.4.695: attempt to access beyond end of device [ 334.883148][ T7225] loop4: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 334.941222][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.958871][ T7225] syz.4.695: attempt to access beyond end of device [ 334.958871][ T7225] loop4: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 335.012096][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.128830][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.507110][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.646533][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.133342][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 336.777340][ T7241] xt_CONNSECMARK: invalid mode: 66 [ 336.853074][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.927378][ T7241] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 337.608550][ T7113] device hsr_slave_0 entered promiscuous mode [ 337.803166][ T7113] device hsr_slave_1 entered promiscuous mode [ 337.837237][ T7113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.839171][ T7256] loop1: detected capacity change from 0 to 512 [ 337.857737][ T7256] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 337.879804][ T7256] EXT4-fs (loop1): orphan cleanup on readonly fs [ 337.884778][ T7254] loop4: detected capacity change from 0 to 4096 [ 337.893690][ T7113] Cannot create hsr debugfs directory [ 337.893726][ T7256] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.698: bad orphan inode 15 [ 337.911013][ T7256] ext4_test_bit(bit=14, block=18) = 1 [ 337.916627][ T7256] is_bad_inode(inode)=0 [ 337.921004][ T7256] NEXT_ORPHAN(inode)=1023 [ 337.925356][ T7256] max_ino=32 [ 337.928757][ T7256] i_nlink=0 [ 337.932287][ T7256] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2921: inode #15: comm syz.1.698: corrupted xattr block 19 [ 337.944844][ T7256] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 337.954333][ T7256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 337.983186][ T7254] EXT4-fs: Ignoring removed nobh option [ 338.047527][ T7254] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=284ec118, mo2=0002] [ 338.050906][ T7261] loop0: detected capacity change from 0 to 256 [ 338.064361][ T7254] System zones: 0-5 [ 338.077082][ T7261] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 338.164125][ T7264] loop8: detected capacity change from 0 to 512 [ 338.171105][ T7254] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 338.201237][ T7264] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 338.234234][ T7113] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 338.290161][ T7113] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 338.332954][ T7113] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 338.346423][ T7264] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.704: bad orphan inode 13 [ 338.393506][ T7264] ext4_test_bit(bit=12, block=18) = 1 [ 338.409741][ T7264] is_bad_inode(inode)=0 [ 338.424161][ T7264] NEXT_ORPHAN(inode)=0 [ 338.436257][ T7264] max_ino=32 [ 338.452631][ T7264] i_nlink=1 [ 338.463510][ T7113] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 338.485438][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 338.498591][ T4286] EXT4-fs (loop4): unmounting filesystem. [ 338.501795][ T7264] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 338.639415][ T7264] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 338.675577][ T4275] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 338.714495][ T7264] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.704: bg 0: block 248: padding at end of block bitmap is not set [ 338.772531][ T7264] Quota error (device loop8): write_blk: dquota write failed [ 338.792701][ T4275] exFAT-fs (loop0): Filesystem has been set read-only [ 338.822717][ T7264] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota [ 338.837189][ T4275] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 338.855318][ T7113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 338.870143][ T7264] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.704: Failed to acquire dquot type 1 [ 338.919484][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 339.038499][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 339.083730][ T7281] unsupported nla_type 37 [ 339.113136][ T7113] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.119975][ T5888] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 339.144660][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 339.162617][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 339.203270][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.210469][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.257519][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 339.269407][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 339.278540][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.285700][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.306974][ T5888] usb 9-1: Using ep0 maxpacket: 32 [ 339.313894][ T5888] usb 9-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 339.346988][ T5888] usb 9-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 339.356816][ T5888] usb 9-1: config 1 interface 0 has no altsetting 0 [ 339.361789][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 339.397319][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 339.431561][ T5888] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 339.452286][ T5888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.479501][ T5888] usb 9-1: Product: syz [ 339.483720][ T5888] usb 9-1: Manufacturer: syz [ 339.503680][ T5888] usb 9-1: SerialNumber: syz [ 339.518052][ T7278] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 339.525373][ T7278] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 339.550348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 339.727578][ T4499] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.740785][ T7288] netlink: 104 bytes leftover after parsing attributes in process `syz.1.712'. [ 339.764826][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 339.783409][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 339.800294][ T5888] cdc_ether: probe of 9-1:1.0 failed with error -71 [ 339.846000][ T5888] usb 9-1: USB disconnect, device number 2 [ 339.847782][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 340.172991][ T7294] loop1: detected capacity change from 0 to 512 [ 340.194181][ T7294] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 340.239420][ T7294] EXT4-fs (loop1): orphan cleanup on readonly fs [ 340.246138][ T7294] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.714: bad orphan inode 15 [ 340.256893][ T7294] ext4_test_bit(bit=14, block=18) = 1 [ 340.262301][ T7294] is_bad_inode(inode)=0 [ 340.266470][ T7294] NEXT_ORPHAN(inode)=1023 [ 340.270859][ T7294] max_ino=32 [ 340.274071][ T7294] i_nlink=0 [ 340.277535][ T7294] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2921: inode #15: comm syz.1.714: corrupted xattr block 19 [ 340.290178][ T7294] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 340.299614][ T7294] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 340.381412][ T4274] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.394225][ T4274] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.408251][ T4274] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.416428][ T4274] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.425924][ T4274] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.434748][ T4274] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.463706][ T4499] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.502400][ T6817] EXT4-fs (loop8): unmounting filesystem. [ 340.509092][ T6392] Quota error (device loop8): do_check_range: Getting block 0 out of range 1-5 [ 340.522280][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 340.543104][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 340.551244][ T6392] EXT4-fs error (device loop8): ext4_release_dquot:6877: comm kworker/u4:28: Failed to release dquot type 1 [ 340.663660][ T4499] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.701918][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 340.726484][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 340.856389][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 340.931565][ T4499] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.970047][ T7113] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 340.980952][ T7316] loop4: detected capacity change from 0 to 256 [ 341.004446][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 341.048987][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 341.060521][ T6392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 341.073958][ T7316] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 341.719921][ T4286] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 341.802033][ T4286] exFAT-fs (loop4): Filesystem has been set read-only [ 341.876305][ T4286] exFAT-fs (loop4): error, invalid access to FAT (entry 0x00000005) bogus content (0x3f3f3f3f) [ 342.033231][ T7328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.039576][ T7328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.045756][ T7328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.051844][ T7328] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 342.057867][ T7328] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 342.073487][ T7328] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 342.080795][ T7328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.086937][ T7328] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 342.095084][ T7328] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 342.102371][ T7328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.108391][ T7328] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 342.116577][ T7328] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 342.472202][ T7299] chnl_net:caif_netlink_parms(): no params data found [ 342.758277][ T7299] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.796058][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.835288][ T7299] device bridge_slave_0 entered promiscuous mode [ 342.917821][ T7299] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.974669][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.984969][ T7299] device bridge_slave_1 entered promiscuous mode [ 343.124886][ T7350] netlink: 'syz.1.725': attribute type 1 has an invalid length. [ 343.161118][ T7350] netlink: 'syz.1.725': attribute type 2 has an invalid length. [ 343.292194][ T7113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.320736][ T7299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.395510][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 343.444193][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 343.508912][ T7299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.539360][ T7365] loop8: detected capacity change from 0 to 512 [ 343.546518][ T7365] EXT4-fs: Ignoring removed bh option [ 343.600353][ T7365] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 343.685585][ T7299] team0: Port device team_slave_0 added [ 343.736949][ T49] Bluetooth: hci0: command 0x0c1a tx timeout [ 343.899936][ T7299] team0: Port device team_slave_1 added [ 344.168640][ T49] Bluetooth: hci1: command 0x041b tx timeout [ 344.176005][ T49] Bluetooth: hci3: command 0x0c1a tx timeout [ 344.182951][ T49] Bluetooth: hci5: command 0x0c1a tx timeout [ 344.190873][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.663857][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 344.673665][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 344.681263][ T7372] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 344.813135][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.821068][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.012533][ T7299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.848149][ T7299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.855775][ T7299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.884681][ T7299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.087255][ T7379] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.093380][ T7379] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.099462][ T7379] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 346.105437][ T7379] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 346.124370][ T7379] Bluetooth: hci5: Suspend notifier action (1) failed: -4 [ 346.131978][ T7379] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.138012][ T7379] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 346.147517][ T7379] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 346.154762][ T7379] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.161449][ T7379] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 346.172031][ T7379] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 346.850460][ T49] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 346.860778][ T49] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 346.869658][ T49] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 346.886347][ T49] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 346.899664][ T49] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 346.911145][ T49] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.983615][ T7299] device hsr_slave_0 entered promiscuous mode [ 347.022153][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.739'. [ 347.041951][ T7299] device hsr_slave_1 entered promiscuous mode [ 347.097448][ T7299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 347.114371][ T7299] Cannot create hsr debugfs directory [ 347.186436][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.740'. [ 347.206642][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.8.740'. [ 347.224124][ T7400] loop1: detected capacity change from 0 to 256 [ 347.255054][ T7400] exfat: Deprecated parameter 'utf8' [ 347.351412][ T7400] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbcba5927, utbl_chksum : 0xe619d30d) [ 347.456746][ T4499] device hsr_slave_0 left promiscuous mode [ 347.467712][ T4499] device hsr_slave_1 left promiscuous mode [ 347.497449][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.504927][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.537724][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.545222][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.567641][ T4499] device bridge_slave_1 left promiscuous mode [ 347.573949][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.582580][ T4499] device bridge_slave_0 left promiscuous mode [ 347.590765][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.618243][ T4499] device veth1_macvtap left promiscuous mode [ 347.624484][ T4499] device veth0_macvtap left promiscuous mode [ 347.630720][ T4499] device veth1_vlan left promiscuous mode [ 347.636702][ T4499] device veth0_vlan left promiscuous mode [ 348.148089][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 348.148294][ T49] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.155031][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.219167][ T49] Bluetooth: hci1: command 0x0419 tx timeout [ 348.219173][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 348.442054][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 348.489839][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 348.541121][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.589073][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.925570][ T4499] bond0 (unregistering): Released all slaves [ 348.941843][ T49] Bluetooth: hci4: command 0x0409 tx timeout [ 349.064575][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 349.088379][ T7406] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.094491][ T7406] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.100922][ T7406] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 349.107040][ T7406] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.114101][ T7406] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.120255][ T7406] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 349.121099][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.126194][ T7406] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 349.144198][ T7406] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 349.185655][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 349.206610][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.283356][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.8.745'. [ 349.358376][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 349.366564][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 349.386275][ T7113] device veth0_vlan entered promiscuous mode [ 349.597912][ T7113] device veth1_vlan entered promiscuous mode [ 350.005951][ T7387] chnl_net:caif_netlink_parms(): no params data found [ 350.077103][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 350.094493][ T4536] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 350.109800][ T7113] device veth0_macvtap entered promiscuous mode [ 350.209346][ T7435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 350.234863][ T7113] device veth1_macvtap entered promiscuous mode [ 350.428914][ T7387] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.436474][ T7387] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.461745][ T7387] device bridge_slave_0 entered promiscuous mode [ 350.474295][ T7387] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.482467][ T7387] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.491334][ T7387] device bridge_slave_1 entered promiscuous mode [ 350.620164][ T7387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.649796][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.663972][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.674916][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.685932][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.717127][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.726599][ T7449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.760'. [ 350.737014][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.737037][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.737053][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.738492][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.821842][ T7387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.965089][ T4499] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.015660][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 351.028578][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 351.037529][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 351.048539][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.062535][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.149299][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.188736][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 351.188778][ T4281] Bluetooth: hci4: command 0x040f tx timeout [ 351.188881][ T4272] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.287651][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout [ 351.293780][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 351.406926][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.465204][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.569227][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.038050][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.065031][ T7113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.093778][ T7113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.135513][ T7113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 352.205854][ T7113] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.245501][ T7113] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.274217][ T7113] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.292726][ T7113] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.355964][ T7387] team0: Port device team_slave_0 added [ 352.376479][ T7387] team0: Port device team_slave_1 added [ 352.415343][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.430837][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.467067][ T7387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.488771][ T7387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.495894][ T7387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.531733][ T7387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.822304][ T7387] device hsr_slave_0 entered promiscuous mode [ 352.829583][ T7387] device hsr_slave_1 entered promiscuous mode [ 352.836105][ T7387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.844007][ T7387] Cannot create hsr debugfs directory [ 352.858730][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 352.871879][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.068403][ T7464] netlink: 92 bytes leftover after parsing attributes in process `syz.8.765'. [ 353.109218][ T4499] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.219155][ T4499] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.260160][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 353.410941][ T4499] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.447102][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 353.515611][ T7299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 353.563887][ T7299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 353.644485][ T7475] loop8: detected capacity change from 0 to 512 [ 353.653342][ T7475] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 353.724598][ T7475] EXT4-fs (loop8): orphan cleanup on readonly fs [ 353.732157][ T7475] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.770: bad orphan inode 15 [ 353.744001][ T7475] ext4_test_bit(bit=14, block=18) = 1 [ 353.749530][ T7475] is_bad_inode(inode)=0 [ 353.753691][ T7475] NEXT_ORPHAN(inode)=1023 [ 353.758180][ T7475] max_ino=32 [ 353.761391][ T7475] i_nlink=0 [ 353.765036][ T7475] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2921: inode #15: comm syz.8.770: corrupted xattr block 19 [ 353.778675][ T7475] EXT4-fs warning (device loop8): ext4_evict_inode:301: xattr delete (err -117) [ 353.787860][ T7475] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 354.776187][ T6817] EXT4-fs (loop8): unmounting filesystem. [ 354.792320][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.854978][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.869865][ T7299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 354.905933][ T7299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 354.942077][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 354.995165][ T4326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.047539][ T4326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.198752][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 355.337300][ T4281] Bluetooth: hci4: command 0x0c1a tx timeout [ 355.402916][ T7491] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 355.567953][ T4281] Bluetooth: hci1: command 0x0406 tx timeout [ 356.338530][ T7499] netlink: 4 bytes leftover after parsing attributes in process `syz.8.779'. [ 356.475121][ T7501] loop1: detected capacity change from 0 to 512 [ 356.825172][ T7501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 356.834702][ T7501] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 357.437033][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 357.577065][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.021252][ T7299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.104763][ T7299] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.265588][ T7299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 358.306145][ T7299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 358.419494][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 358.512372][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 358.536698][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 358.555724][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 358.579270][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 358.604029][ T4326] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.611508][ T4326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.621838][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 358.635482][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 358.645431][ T4326] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.652616][ T4326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.662620][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 358.671848][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 358.681396][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 358.701400][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 358.711288][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 358.720648][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 358.730928][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 358.740984][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 358.754939][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 358.764148][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 358.773503][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 358.782082][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 358.790628][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 358.856523][ T7526] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 359.130913][ T7516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 359.137194][ T7516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.143274][ T7516] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 359.150144][ T7516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 359.156179][ T7516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 359.162526][ T7516] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 359.169287][ T7516] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 359.184799][ T7516] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 359.672156][ T7529] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.788'. [ 359.684134][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.789'. [ 359.851708][ T7387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 359.935847][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.946113][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.989128][ T7387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 360.070356][ T7299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.096991][ T7387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 360.130015][ T7387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 360.232249][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 360.248110][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 360.259625][ T7551] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 360.402515][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 360.414059][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 360.461185][ T7299] device veth0_vlan entered promiscuous mode [ 360.471557][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 360.480335][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 360.590924][ T7299] device veth1_vlan entered promiscuous mode [ 360.809807][ T7387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.836096][ T4499] device hsr_slave_0 left promiscuous mode [ 360.852488][ T4499] device hsr_slave_1 left promiscuous mode [ 360.865335][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 360.886228][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 360.896030][ T4499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.911774][ T4499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 360.936272][ T4499] device bridge_slave_1 left promiscuous mode [ 360.956592][ T4499] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.981747][ T4499] device bridge_slave_0 left promiscuous mode [ 360.989964][ T7547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 360.997082][ T7547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.003359][ T7547] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 361.010080][ T7547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.016106][ T7547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.022280][ T7547] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.128068][ T4499] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.164037][ T7573] loop9: detected capacity change from 0 to 512 [ 361.227326][ T7573] EXT4-fs (loop9): Test dummy encryption mode enabled [ 361.235841][ T4499] device veth1_macvtap left promiscuous mode [ 361.244362][ T4499] device veth0_macvtap left promiscuous mode [ 361.257339][ T4499] device veth1_vlan left promiscuous mode [ 361.263192][ T4499] device veth0_vlan left promiscuous mode [ 361.290580][ T7573] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 361.339442][ T7573] EXT4-fs error (device loop9): ext4_orphan_get:1435: comm syz.9.806: bad orphan inode 131083 [ 361.358313][ T7573] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 362.051128][ T7590] fscrypt (loop9): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 362.297117][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.513384][ T7113] EXT4-fs (loop9): unmounting filesystem. [ 363.097200][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 363.097216][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 363.103276][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 363.109287][ T4285] Bluetooth: hci5: command 0x0c1a tx timeout [ 363.115269][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 363.969859][ T4499] team0 (unregistering): Port device team_slave_1 removed [ 364.085883][ T4499] team0 (unregistering): Port device team_slave_0 removed [ 364.199162][ T4499] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.307674][ T4499] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 365.177073][ T4285] Bluetooth: hci4: command 0x0c1a tx timeout [ 365.261915][ T4499] bond0 (unregistering): Released all slaves [ 365.447281][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 365.460277][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 365.477702][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 365.506717][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 365.533196][ T7299] device veth0_macvtap entered promiscuous mode [ 365.567204][ T7299] device veth1_macvtap entered promiscuous mode [ 365.596613][ T7624] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.816'. [ 365.633765][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 365.657690][ T7623] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 365.662770][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.663829][ T7623] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 365.708511][ T7623] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 365.714669][ T7623] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 365.721221][ T7623] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 365.729191][ T7623] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 365.748243][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.766258][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.855554][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.891517][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.920069][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.944709][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.968728][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.984657][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.003007][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.032005][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.055972][ T7387] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.080884][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 366.125578][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 366.158548][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.198643][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.231391][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.277210][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.307313][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.346904][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.356767][ T7299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.427079][ T7299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.458417][ T7299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.472222][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 366.517929][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 366.554902][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 366.606491][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 366.652745][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.659975][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.702913][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 366.732914][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 366.774757][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.781960][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.817254][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.859856][ T7299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.886578][ T7299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.919697][ T7299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.936970][ T7299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.977965][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 367.053906][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 367.084309][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 367.135062][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 367.161269][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 367.190045][ T7699] netlink: 108 bytes leftover after parsing attributes in process `syz.1.828'. [ 367.195437][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 367.223391][ T7387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 367.240908][ T7387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 367.277354][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.288088][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 367.312030][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 367.346270][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 367.375595][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 367.443348][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.607553][ T6020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.615689][ T6020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.704709][ T6020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.717487][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 367.737105][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 367.743211][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 367.749581][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 367.755600][ T4276] Bluetooth: hci5: command 0x0c1a tx timeout [ 367.757042][ T4285] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.761835][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 367.804247][ T6020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.881666][ T7719] netlink: 36 bytes leftover after parsing attributes in process `syz.1.836'. [ 367.894330][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 367.926760][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 368.620283][ T7743] netlink: 64591 bytes leftover after parsing attributes in process `syz.2.843'. [ 368.691891][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.729844][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.772623][ T7387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.885043][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 368.913275][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 368.964935][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 368.992133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 369.023220][ T7387] device veth0_vlan entered promiscuous mode [ 369.030049][ T7737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 369.053998][ T7737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 369.060884][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 369.074545][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 369.109305][ T7387] device veth1_vlan entered promiscuous mode [ 369.116170][ T7737] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 369.229874][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 369.246715][ T7737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 369.252335][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 369.269914][ T7737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 369.282276][ T7758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 369.307742][ T7737] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 369.323840][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 369.367876][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 369.409474][ T7387] device veth0_macvtap entered promiscuous mode [ 369.450053][ T7387] device veth1_macvtap entered promiscuous mode [ 369.528725][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.572915][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.613007][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.639997][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.667919][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.688426][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.708371][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.733932][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.766972][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.800955][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.869847][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.688660][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 370.721822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 370.739940][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.856'. [ 370.744087][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 370.784349][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 370.805669][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.829950][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.885385][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.920595][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.942966][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 370.960299][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 370.981445][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.012361][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.027067][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 371.035893][ T7387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.076428][ T7387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.097154][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 371.125974][ T7387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.171084][ T7780] netlink: 128 bytes leftover after parsing attributes in process `syz.1.857'. [ 371.187124][ T4276] Bluetooth: hci5: command 0x0c1a tx timeout [ 371.193284][ T7783] pimreg0: tun_chr_ioctl cmd 1074025677 [ 371.199272][ T7783] pimreg0: linktype set to 780 [ 371.209456][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 371.228635][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 371.257086][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 371.272980][ T7387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.281938][ T7387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.291400][ T7387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.300685][ T7387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.338122][ T4276] Bluetooth: hci4: command 0x0c1a tx timeout [ 371.344213][ T4276] Bluetooth: hci1: command 0x0c1a tx timeout [ 371.553080][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.593735][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.634374][ T6020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 371.703881][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.718385][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.741812][ T6382] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 373.635056][ T7847] netlink: 'syz.2.878': attribute type 26 has an invalid length. [ 373.672810][ T7848] loop1: detected capacity change from 0 to 512 [ 373.682683][ T7848] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 373.705565][ T7847] netlink: 64899 bytes leftover after parsing attributes in process `syz.2.878'. [ 373.834864][ T7848] EXT4-fs (loop1): orphan cleanup on readonly fs [ 373.842960][ T7848] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.877: bad orphan inode 15 [ 373.854717][ T7848] ext4_test_bit(bit=14, block=18) = 1 [ 373.860363][ T7848] is_bad_inode(inode)=0 [ 373.864554][ T7848] NEXT_ORPHAN(inode)=1023 [ 373.868979][ T7848] max_ino=32 [ 373.872183][ T7848] i_nlink=0 [ 373.877280][ T7848] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2921: inode #15: comm syz.1.877: corrupted xattr block 19 [ 373.892636][ T7848] EXT4-fs warning (device loop1): ext4_evict_inode:301: xattr delete (err -117) [ 373.903933][ T7848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 374.804660][ T7866] ksmbd: Unknown IPC event: 4, ignore. [ 375.570396][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 376.046199][ T7898] loop8: detected capacity change from 0 to 512 [ 376.075527][ T7900] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 376.130599][ T7900] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 376.149446][ T7903] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 376.239069][ T7898] EXT4-fs (loop8): Test dummy encryption mode enabled [ 376.251709][ T7898] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 376.268207][ T7900] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 376.306472][ T7900] netlink: 'syz.2.896': attribute type 29 has an invalid length. [ 376.386311][ T7898] EXT4-fs error (device loop8): ext4_orphan_get:1435: comm syz.8.895: bad orphan inode 131083 [ 376.441437][ T7898] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 376.528102][ T6817] EXT4-fs (loop8): unmounting filesystem. [ 377.014862][ T7925] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 377.414678][ T7942] loop2: detected capacity change from 0 to 512 [ 377.438190][ T7942] EXT4-fs (loop2): Test dummy encryption mode enabled [ 377.482519][ T7942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 377.556991][ T7942] EXT4-fs error (device loop2): ext4_orphan_get:1435: comm syz.2.907: bad orphan inode 131083 [ 377.610181][ T7942] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 377.738822][ T7299] EXT4-fs (loop2): unmounting filesystem. [ 377.771390][ T7959] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 378.379231][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.389440][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.281207][ T8027] netlink: 64 bytes leftover after parsing attributes in process `syz.8.921'. [ 379.329472][ T8034] loop3: detected capacity change from 0 to 512 [ 379.429658][ T8034] EXT4-fs (loop3): Test dummy encryption mode enabled [ 379.436497][ T8034] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 379.546144][ T8034] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.923: bad orphan inode 131083 [ 379.559121][ T8034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 379.609912][ T7387] EXT4-fs (loop3): unmounting filesystem. [ 379.802606][ T8050] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 380.460268][ T8045] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.557486][ T8045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 380.563609][ T8045] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 380.598131][ T8045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.634876][ T8045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.712798][ T8045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 381.257831][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 381.335667][ T8082] netlink: 'syz.9.938': attribute type 5 has an invalid length. [ 381.737372][ T4281] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.487740][ T8117] netlink: 112 bytes leftover after parsing attributes in process `syz.2.950'. [ 382.496750][ T8117] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 382.617194][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.623276][ T4281] Bluetooth: hci5: command 0x0c1a tx timeout [ 382.630021][ T4276] Bluetooth: hci2: command 0x0c1a tx timeout [ 382.697121][ T4281] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.776967][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 383.171877][ T8136] netlink: 'syz.2.957': attribute type 4 has an invalid length. [ 383.507260][ T8145] netlink: 5468 bytes leftover after parsing attributes in process `syz.2.960'. [ 383.600160][ T8149] ksmbd: Unknown IPC event: 3, ignore. [ 384.469404][ T8177] netlink: 16 bytes leftover after parsing attributes in process `syz.9.971'. [ 385.422426][ T8206] netlink: 52 bytes leftover after parsing attributes in process `syz.8.981'. [ 386.448538][ T8242] syz.3.996 uses obsolete (PF_INET,SOCK_PACKET) [ 387.091031][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1004'. [ 387.640397][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1009'. [ 387.910599][ T8293] netlink: 180 bytes leftover after parsing attributes in process `syz.9.1013'. [ 388.536579][ T8315] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 389.434814][ T8325] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1025'. [ 392.067898][ T8346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.074024][ T8346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.080179][ T8346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 392.086208][ T8346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.092311][ T8346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.098395][ T8346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.447352][ T8359] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 393.904103][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 393.917266][ T8390] tc_dump_action: action bad kind [ 394.137125][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.143633][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.152370][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.158862][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout [ 394.165413][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout [ 394.173032][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 394.563496][ T8394] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 394.569723][ T8394] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 394.575761][ T8394] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 394.581880][ T8394] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 394.587958][ T8394] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 394.594473][ T8394] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 395.745409][ T8401] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 396.317050][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 396.717024][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 396.723618][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 396.730586][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 396.737257][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout [ 396.745105][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout [ 398.266314][ T8442] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.272606][ T8442] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.278788][ T8442] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 398.285445][ T8442] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.291545][ T8442] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.297621][ T8442] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 399.487179][ T8447] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 399.896928][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 401.177265][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 401.183404][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 401.190212][ T4276] Bluetooth: hci3: command 0x0c1a tx timeout [ 401.196311][ T4276] Bluetooth: hci5: command 0x0c1a tx timeout [ 401.207334][ T4281] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.873388][ T8536] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 402.880471][ T8531] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 402.920264][ T8531] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 402.990078][ T8531] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 403.043407][ T8531] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.067038][ T8531] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 403.107140][ T8531] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.937248][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout [ 404.943329][ T4274] Bluetooth: hci0: command 0x0c1a tx timeout [ 405.017199][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout [ 405.096957][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 405.103081][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 405.109197][ T4285] Bluetooth: hci3: command 0x0c1a tx timeout [ 413.313643][ T8751] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.367172][ T8751] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 413.373307][ T8751] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 413.686144][ T8751] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 413.972755][ T8751] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 414.044715][ T8751] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.336977][ T4276] Bluetooth: hci0: command 0x0c1a tx timeout [ 415.416948][ T4274] Bluetooth: hci5: command 0x0c1a tx timeout [ 415.423062][ T4274] Bluetooth: hci2: command 0x0c1a tx timeout [ 415.737049][ T4274] Bluetooth: hci3: command 0x0c1a tx timeout [ 415.977068][ T4274] Bluetooth: hci1: command 0x0c1a tx timeout [ 416.057121][ T4274] Bluetooth: hci4: command 0x0c1a tx timeout [ 421.348427][ T27] audit: type=1326 audit(1788706108.126:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8875 comm="syz.9.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1aa399e159 code=0x10000 [ 422.293402][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1164'. [ 427.441151][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 435.028032][ T9142] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1203'. [ 435.983981][ T4276] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 435.995538][ T4276] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 436.016017][ T4276] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 436.023828][ T4276] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 436.037388][ T4285] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 436.046232][ T4285] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 436.751075][ T9158] chnl_net:caif_netlink_parms(): no params data found [ 437.107343][ T9158] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.114500][ T9158] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.160431][ T9158] device bridge_slave_0 entered promiscuous mode [ 437.202828][ T9158] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.258122][ T9158] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.289749][ T9158] device bridge_slave_1 entered promiscuous mode [ 437.412861][ T9158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.469839][ T9158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.576088][ T9158] team0: Port device team_slave_0 added [ 437.932481][ T9158] team0: Port device team_slave_1 added [ 438.137251][ T4285] Bluetooth: hci6: command 0x0409 tx timeout [ 438.294592][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.343974][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.456930][ T9158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.160782][ T9226] netlink: 388 bytes leftover after parsing attributes in process `syz.9.1222'. [ 439.827525][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.833875][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.878361][ T9158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.885403][ T9158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.023077][ T9158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.217262][ T4285] Bluetooth: hci6: command 0x041b tx timeout [ 440.904683][ T4536] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.350263][ T9158] device hsr_slave_0 entered promiscuous mode [ 441.454827][ T9158] device hsr_slave_1 entered promiscuous mode [ 441.637043][ T9158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.644666][ T9158] Cannot create hsr debugfs directory [ 442.297222][ T4285] Bluetooth: hci6: command 0x040f tx timeout [ 442.380399][ T4536] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.440983][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1241'. [ 443.548685][ T4536] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.377138][ T4285] Bluetooth: hci6: command 0x0419 tx timeout [ 445.364673][ T9373] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1254'. [ 445.544111][ T4536] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.950308][ T9457] netlink: 52 bytes leftover after parsing attributes in process `syz.8.1268'. [ 448.687242][ T9475] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1271'. [ 450.727238][ T9515] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1279'. [ 450.940089][ T9522] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1281'. [ 453.227085][ T9572] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1293'. [ 454.362845][ T9158] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 454.555274][ T9158] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 454.616451][ T9158] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 455.601127][ T9617] netlink: 108 bytes leftover after parsing attributes in process `syz.8.1305'. [ 455.684667][ T9158] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 456.328342][ T9158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.841416][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.869017][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.891294][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.919804][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.957483][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.987104][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.994280][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 457.047796][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 457.097332][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 457.127308][ T5924] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 457.156442][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.163662][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.855394][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 457.879303][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 457.943039][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 457.997719][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 458.033755][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 458.077688][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 458.115903][ T9158] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 458.187882][ T9158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 458.222615][ T9671] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1316'. [ 458.544426][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 458.571755][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 458.634631][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 458.674990][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 458.707946][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 458.743294][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 460.557117][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.564898][ T4451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.607715][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.211734][ T9728] netlink: 108 bytes leftover after parsing attributes in process `syz.9.1328'. [ 462.057544][ T9742] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1331'. [ 464.045923][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 464.093264][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 464.147887][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 464.156459][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 464.221511][ T9158] device veth0_vlan entered promiscuous mode [ 464.237785][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 464.248183][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 464.280318][ T9158] device veth1_vlan entered promiscuous mode [ 464.510730][ T9787] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1340'. [ 464.836046][ T4536] device hsr_slave_0 left promiscuous mode [ 465.067177][ T4536] device hsr_slave_1 left promiscuous mode [ 465.420172][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 465.440331][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.787780][ T4536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.795267][ T4536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.896832][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1344'. [ 466.249546][ T4536] device bridge_slave_1 left promiscuous mode [ 466.255864][ T4536] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.586387][ T4536] device bridge_slave_0 left promiscuous mode [ 466.603755][ T4536] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.435944][ T4536] device veth1_macvtap left promiscuous mode [ 467.449466][ T4536] device veth0_macvtap left promiscuous mode [ 467.467185][ T4536] device veth1_vlan left promiscuous mode [ 467.494547][ T4536] device veth0_vlan left promiscuous mode [ 470.253443][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1358'. [ 472.660095][ T9894] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1366'. [ 476.737180][ T9928] netlink: 180 bytes leftover after parsing attributes in process `syz.8.1377'. [ 477.477495][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1382'. [ 477.486446][ T9936] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1382'. [ 480.184290][ T9833] syz.9.1347 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 480.281492][ T9833] CPU: 0 PID: 9833 Comm: syz.9.1347 Not tainted syzkaller #0 [ 480.288945][ T9833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 480.299020][ T9833] Call Trace: [ 480.302316][ T9833] [ 480.305267][ T9833] dump_stack_lvl+0x188/0x24e [ 480.310026][ T9833] ? ___ratelimit+0x14e/0x610 [ 480.314749][ T9833] ? show_regs_print_info+0x12/0x12 [ 480.319977][ T9833] ? load_image+0x410/0x410 [ 480.324502][ T9833] ? ___ratelimit+0x474/0x610 [ 480.329212][ T9833] ? radix_tree_cpu_dead+0x160/0x160 [ 480.334524][ T9833] dump_header+0xd8/0x820 [ 480.338927][ T9833] oom_kill_process+0x361/0x550 [ 480.343882][ T9833] out_of_memory+0xe25/0x1220 [ 480.348593][ T9833] ? mutex_lock_nested+0x10/0x10 [ 480.353693][ T9833] ? unregister_oom_notifier+0x20/0x20 [ 480.359183][ T9833] mem_cgroup_out_of_memory+0x2c0/0x390 [ 480.364827][ T9833] ? mem_cgroup_oom_trylock+0x210/0x210 [ 480.370417][ T9833] ? do_raw_spin_unlock+0x11d/0x230 [ 480.375672][ T9833] try_charge_memcg+0xc9d/0x17c0 [ 480.380740][ T9833] ? percpu_ref_put+0x180/0x180 [ 480.385641][ T9833] ? get_mem_cgroup_from_mm+0x34/0x290 [ 480.391142][ T9833] charge_memcg+0x117/0x3b0 [ 480.395676][ T9833] ? __mem_cgroup_charge+0x80/0x80 [ 480.400812][ T9833] ? get_mem_cgroup_from_mm+0x34/0x290 [ 480.406297][ T9833] ? get_mem_cgroup_from_mm+0x34/0x290 [ 480.411782][ T9833] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 480.417357][ T9833] __mem_cgroup_charge+0x21/0x80 [ 480.422323][ T9833] shmem_add_to_page_cache+0x8d7/0x1c90 [ 480.428031][ T9833] ? __filemap_get_folio+0x10f/0xde0 [ 480.433369][ T9833] ? __filemap_get_folio+0x10f/0xde0 [ 480.438691][ T9833] ? put_page+0x270/0x270 [ 480.443056][ T9833] ? mark_lock+0x94/0x320 [ 480.447468][ T9833] shmem_get_folio_gfp+0x1663/0x35e0 [ 480.452843][ T9833] shmem_write_begin+0xee/0x3f0 [ 480.457739][ T9833] generic_perform_write+0x2fa/0x5c0 [ 480.463069][ T9833] ? generic_file_direct_write+0x330/0x330 [ 480.468904][ T9833] ? __file_remove_privs+0x5f0/0x5f0 [ 480.474247][ T9833] ? rwsem_write_trylock+0x135/0x1c0 [ 480.479556][ T9833] ? clear_nonspinnable+0x60/0x60 [ 480.484606][ T9833] ? generic_write_checks_count+0x363/0x440 [ 480.490641][ T9833] __generic_file_write_iter+0x148/0x2a0 [ 480.496308][ T9833] generic_file_write_iter+0xab/0x2e0 [ 480.501717][ T9833] __kernel_write_iter+0x298/0x690 [ 480.506865][ T9833] ? vfs_read+0x960/0x960 [ 480.511235][ T9833] ? dump_user_range+0x313/0x840 [ 480.516288][ T9833] ? iov_iter_bvec+0x4a/0x1f0 [ 480.521022][ T9833] dump_user_range+0x40a/0x840 [ 480.525828][ T9833] ? dump_skip+0x40/0x40 [ 480.530109][ T9833] ? dump_emit+0x74/0xe0 [ 480.534393][ T9833] ? dump_emit+0xa2/0xe0 [ 480.538656][ T9833] ? elf_core_dump+0x2aa9/0x3630 [ 480.543625][ T9833] elf_core_dump+0x30ca/0x3630 [ 480.548436][ T9833] ? load_elf_binary+0x2820/0x2820 [ 480.553664][ T9833] ? dump_vma_snapshot+0xaea/0xe40 [ 480.558803][ T9833] ? verify_lock_unused+0x140/0x140 [ 480.564029][ T9833] ? __lock_acquire+0x7c40/0x7c40 [ 480.569079][ T9833] ? mas_next_entry+0xe03/0xe90 [ 480.574024][ T9833] ? rcu_read_lock_any_held+0xb0/0x130 [ 480.579617][ T9833] ? 0xffffffffff600000 [ 480.583792][ T9833] ? getname_kernel+0x142/0x2f0 [ 480.588674][ T9833] do_coredump+0x16c1/0x2480 [ 480.593320][ T9833] ? nfs_stat_to_errno+0x170/0x170 [ 480.598486][ T9833] ? lock_chain_count+0x20/0x20 [ 480.603365][ T9833] ? _raw_spin_unlock_irq+0x1f/0x40 [ 480.608586][ T9833] ? lockdep_hardirqs_on+0x94/0x140 [ 480.613900][ T9833] get_signal+0x1093/0x1340 [ 480.618536][ T9833] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 480.624548][ T9833] arch_do_signal_or_restart+0xc4/0x1310 [ 480.630309][ T9833] ? __send_signal_locked+0xb38/0xde0 [ 480.635729][ T9833] ? get_sigframe_size+0x10/0x10 [ 480.640706][ T9833] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 480.646727][ T9833] ? exit_to_user_mode_loop+0x3b/0x110 [ 480.652320][ T9833] exit_to_user_mode_loop+0x70/0x110 [ 480.657642][ T9833] exit_to_user_mode_prepare+0xee/0x180 [ 480.663213][ T9833] irqentry_exit_to_user_mode+0x5/0x30 [ 480.668692][ T9833] exc_page_fault+0x88/0x100 [ 480.673311][ T9833] asm_exc_page_fault+0x22/0x30 [ 480.678193][ T9833] RIP: 0033:0x7f1aa3853bd7 [ 480.682624][ T9833] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 480.702341][ T9833] RSP: 002b:00007f1aa4885120 EFLAGS: 00010202 [ 480.708437][ T9833] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f1aa399e159 [ 480.716435][ T9833] RDX: 00007f1aa4885140 RSI: 00007f1aa4885270 RDI: 000000000000000b [ 480.724431][ T9833] RBP: 00007f1aa3a35024 R08: 0000000000000000 R09: 0000000000000000 [ 480.732450][ T9833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 480.740447][ T9833] R13: 00007f1aa3c26128 R14: 00007f1aa3c26090 R15: 00007fff6ed89f88 [ 480.748457][ T9833] [ 481.376968][ T9833] memory: usage 307200kB, limit 307200kB, failcnt 1977 [ 481.407086][ T9833] memory+swap: usage 315904kB, limit 9007199254740988kB, failcnt 0 [ 481.413997][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1390'. [ 481.415045][ T9833] kmem: usage 3856kB, limit 9007199254740988kB, failcnt 0 [ 481.480775][ T9833] Memory cgroup stats for /syz9: [ 481.481573][ T9833] anon 1478656 [ 481.481573][ T9833] file 309145600 [ 481.481573][ T9833] kernel 3948544 [ 481.481573][ T9833] kernel_stack 196608 [ 481.481573][ T9833] pagetables 1060864 [ 481.481573][ T9833] sec_pagetables 0 [ 481.481573][ T9833] percpu 1184 [ 481.481573][ T9833] sock 0 [ 481.481573][ T9833] vmalloc 0 [ 481.481573][ T9833] shmem 309141504 [ 481.481573][ T9833] zswap 0 [ 481.481573][ T9833] zswapped 0 [ 481.481573][ T9833] file_mapped 114073600 [ 481.481573][ T9833] file_dirty 0 [ 481.481573][ T9833] file_writeback 0 [ 481.481573][ T9833] swapcached 8912896 [ 481.481573][ T9833] anon_thp 0 [ 481.481573][ T9833] file_thp 0 [ 481.481573][ T9833] shmem_thp 0 [ 481.481573][ T9833] inactive_anon 31711232 [ 481.481573][ T9833] active_anon 278908928 [ 481.481573][ T9833] inactive_file 4096 [ 481.481573][ T9833] active_file 0 [ 481.481573][ T9833] unevictable 0 [ 481.481573][ T9833] slab_reclaimable 944256 [ 481.481573][ T9833] slab_unreclaimable 1607216 [ 481.652260][ T9833] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0-1,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.1216,pid=9197,uid=0 [ 481.689006][ T9833] Memory cgroup out of memory: Killed process 9197 (syz.9.1216) total-vm:200684kB, anon-rss:1548kB, file-rss:20608kB, shmem-rss:93056kB, UID:0 pgtables:288kB oom_score_adj:1000 [ 481.869784][ T9395] syz.2.1256 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 481.897513][ T9395] CPU: 0 PID: 9395 Comm: syz.2.1256 Not tainted syzkaller #0 [ 481.904949][ T9395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 481.915149][ T9395] Call Trace: [ 481.918644][ T9395] [ 481.921591][ T9395] dump_stack_lvl+0x188/0x24e [ 481.926481][ T9395] ? ___ratelimit+0x14e/0x610 [ 481.931208][ T9395] ? show_regs_print_info+0x12/0x12 [ 481.936447][ T9395] ? load_image+0x410/0x410 [ 481.940979][ T9395] ? ___ratelimit+0x474/0x610 [ 481.945689][ T9395] ? radix_tree_cpu_dead+0x160/0x160 [ 481.950997][ T9395] dump_header+0xd8/0x820 [ 481.955368][ T9395] oom_kill_process+0x361/0x550 [ 481.960377][ T9395] out_of_memory+0xe25/0x1220 [ 481.965087][ T9395] ? __mutex_lock+0x3ba/0xae0 [ 481.969802][ T9395] ? mutex_lock_nested+0x10/0x10 [ 481.974778][ T9395] ? unregister_oom_notifier+0x20/0x20 [ 481.980271][ T9395] mem_cgroup_out_of_memory+0x2c0/0x390 [ 481.985852][ T9395] ? mem_cgroup_oom_trylock+0x210/0x210 [ 481.991631][ T9395] ? do_raw_spin_unlock+0x11d/0x230 [ 481.996858][ T9395] try_charge_memcg+0xc9d/0x17c0 [ 482.001830][ T9395] ? percpu_ref_put+0x180/0x180 [ 482.006698][ T9395] ? get_mem_cgroup_from_mm+0x34/0x290 [ 482.012160][ T9395] charge_memcg+0x117/0x3b0 [ 482.016662][ T9395] ? __mem_cgroup_charge+0x80/0x80 [ 482.021868][ T9395] ? get_mem_cgroup_from_mm+0x34/0x290 [ 482.027324][ T9395] ? get_mem_cgroup_from_mm+0x34/0x290 [ 482.032782][ T9395] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 482.038423][ T9395] __mem_cgroup_charge+0x21/0x80 [ 482.043385][ T9395] shmem_add_to_page_cache+0x8d7/0x1c90 [ 482.048987][ T9395] ? __filemap_get_folio+0x10f/0xde0 [ 482.054286][ T9395] ? __filemap_get_folio+0x10f/0xde0 [ 482.059575][ T9395] ? put_page+0x270/0x270 [ 482.063908][ T9395] ? mark_lock+0x94/0x320 [ 482.068244][ T9395] shmem_get_folio_gfp+0x1663/0x35e0 [ 482.073552][ T9395] shmem_write_begin+0xee/0x3f0 [ 482.078422][ T9395] generic_perform_write+0x2fa/0x5c0 [ 482.083722][ T9395] ? generic_file_direct_write+0x330/0x330 [ 482.089528][ T9395] ? __file_remove_privs+0x5f0/0x5f0 [ 482.094817][ T9395] ? rwsem_write_trylock+0x135/0x1c0 [ 482.100097][ T9395] ? clear_nonspinnable+0x60/0x60 [ 482.105120][ T9395] ? generic_write_checks_count+0x363/0x440 [ 482.111185][ T9395] __generic_file_write_iter+0x148/0x2a0 [ 482.116829][ T9395] generic_file_write_iter+0xab/0x2e0 [ 482.122292][ T9395] __kernel_write_iter+0x298/0x690 [ 482.127412][ T9395] ? vfs_read+0x960/0x960 [ 482.131772][ T9395] ? dump_user_range+0x2a0/0x840 [ 482.136712][ T9395] ? iov_iter_bvec+0x4a/0x1f0 [ 482.141409][ T9395] dump_user_range+0x40a/0x840 [ 482.146208][ T9395] ? dump_skip+0x40/0x40 [ 482.150545][ T9395] ? dump_emit+0x74/0xe0 [ 482.154834][ T9395] ? dump_emit+0xa2/0xe0 [ 482.159081][ T9395] ? elf_core_dump+0x2aa9/0x3630 [ 482.164027][ T9395] elf_core_dump+0x30ca/0x3630 [ 482.168808][ T9395] ? load_elf_binary+0x2820/0x2820 [ 482.173922][ T9395] ? dump_vma_snapshot+0xaea/0xe40 [ 482.179039][ T9395] ? verify_lock_unused+0x140/0x140 [ 482.184241][ T9395] ? __lock_acquire+0x7c40/0x7c40 [ 482.189266][ T9395] ? mas_next_entry+0xe03/0xe90 [ 482.194144][ T9395] ? rcu_read_lock_any_held+0xb0/0x130 [ 482.199603][ T9395] ? 0xffffffffff600000 [ 482.203753][ T9395] ? getname_kernel+0x142/0x2f0 [ 482.208696][ T9395] do_coredump+0x16c1/0x2480 [ 482.213301][ T9395] ? nfs_stat_to_errno+0x170/0x170 [ 482.218427][ T9395] ? lock_chain_count+0x20/0x20 [ 482.223309][ T9395] ? _raw_spin_unlock_irq+0x1f/0x40 [ 482.228503][ T9395] ? lockdep_hardirqs_on+0x94/0x140 [ 482.233703][ T9395] get_signal+0x1093/0x1340 [ 482.238215][ T9395] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.244197][ T9395] arch_do_signal_or_restart+0xc4/0x1310 [ 482.249842][ T9395] ? __send_signal_locked+0xb38/0xde0 [ 482.255218][ T9395] ? get_sigframe_size+0x10/0x10 [ 482.260158][ T9395] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 482.266145][ T9395] ? exit_to_user_mode_loop+0x3b/0x110 [ 482.271607][ T9395] exit_to_user_mode_loop+0x70/0x110 [ 482.276890][ T9395] exit_to_user_mode_prepare+0xee/0x180 [ 482.282436][ T9395] irqentry_exit_to_user_mode+0x5/0x30 [ 482.287890][ T9395] exc_page_fault+0x88/0x100 [ 482.292475][ T9395] asm_exc_page_fault+0x22/0x30 [ 482.297325][ T9395] RIP: 0033:0x7f3089053bd7 [ 482.301736][ T9395] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 482.321355][ T9395] RSP: 002b:00007f3089f83120 EFLAGS: 00010202 [ 482.327418][ T9395] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f308919e159 [ 482.335472][ T9395] RDX: 00007f3089f83140 RSI: 00007f3089f83270 RDI: 000000000000000b [ 482.343438][ T9395] RBP: 00007f3089235024 R08: 0000000000000000 R09: 0000000000000000 [ 482.351402][ T9395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 482.359389][ T9395] R13: 00007f3089426128 R14: 00007f3089426090 R15: 00007ffd968974c8 [ 482.367368][ T9395] [ 482.986803][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 483.169536][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 483.197463][ T9395] memory: usage 307200kB, limit 307200kB, failcnt 37809 [ 483.204458][ T9395] memory+swap: usage 423280kB, limit 9007199254740988kB, failcnt 0 [ 483.226928][ T9395] kmem: usage 3492kB, limit 9007199254740988kB, failcnt 0 [ 483.234187][ T9395] Memory cgroup stats for /syz2: [ 483.234377][ T9395] anon 1040384 [ 483.234377][ T9395] file 309940224 [ 483.234377][ T9395] kernel 3575808 [ 483.234377][ T9395] kernel_stack 262144 [ 483.234377][ T9395] pagetables 1507328 [ 483.234377][ T9395] sec_pagetables 0 [ 483.234377][ T9395] percpu 0 [ 483.234377][ T9395] sock 0 [ 483.234377][ T9395] vmalloc 0 [ 483.234377][ T9395] shmem 309940224 [ 483.234377][ T9395] zswap 0 [ 483.234377][ T9395] zswapped 0 [ 483.234377][ T9395] file_mapped 19922944 [ 483.234377][ T9395] file_dirty 0 [ 483.234377][ T9395] file_writeback 0 [ 483.234377][ T9395] swapcached 142213120 [ 483.234377][ T9395] anon_thp 0 [ 483.234377][ T9395] file_thp 0 [ 483.234377][ T9395] shmem_thp 0 [ 483.234377][ T9395] inactive_anon 266715136 [ 483.234377][ T9395] active_anon 44277760 [ 483.234377][ T9395] inactive_file 0 [ 483.234377][ T9395] active_file 0 [ 483.234377][ T9395] unevictable 0 [ 483.234377][ T9395] slab_reclaimable 1249832 [ 483.234377][ T9395] slab_unreclaimable 372968 [ 483.461152][ T9395] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1256,pid=9395,uid=0 [ 483.517070][ T9395] Memory cgroup out of memory: Killed process 9395 (syz.2.1256) total-vm:104424kB, anon-rss:1376kB, file-rss:52728kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 483.668006][ T9959] syz.1.1386 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 483.696932][ T9959] CPU: 0 PID: 9959 Comm: syz.1.1386 Not tainted syzkaller #0 [ 483.704365][ T9959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 483.714483][ T9959] Call Trace: [ 483.717777][ T9959] [ 483.720753][ T9959] dump_stack_lvl+0x188/0x24e [ 483.725455][ T9959] ? ___ratelimit+0x14e/0x610 [ 483.730153][ T9959] ? show_regs_print_info+0x12/0x12 [ 483.735381][ T9959] ? load_image+0x410/0x410 [ 483.739916][ T9959] ? ___ratelimit+0x474/0x610 [ 483.744616][ T9959] ? radix_tree_cpu_dead+0x160/0x160 [ 483.749921][ T9959] dump_header+0xd8/0x820 [ 483.754276][ T9959] oom_kill_process+0x361/0x550 [ 483.759151][ T9959] out_of_memory+0xe25/0x1220 [ 483.763834][ T9959] ? __mutex_lock+0x3ba/0xae0 [ 483.768515][ T9959] ? mutex_lock_nested+0x10/0x10 [ 483.773450][ T9959] ? unregister_oom_notifier+0x20/0x20 [ 483.778912][ T9959] mem_cgroup_out_of_memory+0x2c0/0x390 [ 483.784488][ T9959] ? mem_cgroup_oom_trylock+0x210/0x210 [ 483.790052][ T9959] ? do_raw_spin_unlock+0x11d/0x230 [ 483.795248][ T9959] try_charge_memcg+0xc9d/0x17c0 [ 483.800207][ T9959] ? percpu_ref_put+0x180/0x180 [ 483.805069][ T9959] ? get_mem_cgroup_from_mm+0x34/0x290 [ 483.810540][ T9959] charge_memcg+0x117/0x3b0 [ 483.815051][ T9959] ? __mem_cgroup_charge+0x80/0x80 [ 483.820160][ T9959] ? get_mem_cgroup_from_mm+0x34/0x290 [ 483.825614][ T9959] ? get_mem_cgroup_from_mm+0x34/0x290 [ 483.831071][ T9959] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 483.836614][ T9959] __mem_cgroup_charge+0x21/0x80 [ 483.841606][ T9959] shmem_add_to_page_cache+0x8d7/0x1c90 [ 483.847170][ T9959] ? __filemap_get_folio+0x10f/0xde0 [ 483.852466][ T9959] ? __filemap_get_folio+0x10f/0xde0 [ 483.857763][ T9959] ? put_page+0x270/0x270 [ 483.862105][ T9959] ? mark_lock+0x94/0x320 [ 483.866441][ T9959] shmem_get_folio_gfp+0x1663/0x35e0 [ 483.871773][ T9959] shmem_write_begin+0xee/0x3f0 [ 483.876639][ T9959] generic_perform_write+0x2fa/0x5c0 [ 483.881981][ T9959] ? generic_file_direct_write+0x330/0x330 [ 483.887801][ T9959] ? __file_remove_privs+0x5f0/0x5f0 [ 483.893094][ T9959] ? rwsem_write_trylock+0x135/0x1c0 [ 483.898380][ T9959] ? clear_nonspinnable+0x60/0x60 [ 483.903398][ T9959] ? generic_write_checks_count+0x363/0x440 [ 483.909376][ T9959] __generic_file_write_iter+0x148/0x2a0 [ 483.915103][ T9959] generic_file_write_iter+0xab/0x2e0 [ 483.920480][ T9959] __kernel_write_iter+0x298/0x690 [ 483.925599][ T9959] ? vfs_read+0x960/0x960 [ 483.929931][ T9959] ? dump_user_range+0x313/0x840 [ 483.934882][ T9959] ? iov_iter_bvec+0x4a/0x1f0 [ 483.939563][ T9959] dump_user_range+0x40a/0x840 [ 483.944337][ T9959] ? dump_skip+0x40/0x40 [ 483.948577][ T9959] ? dump_emit+0x74/0xe0 [ 483.952832][ T9959] ? dump_emit+0xa2/0xe0 [ 483.957074][ T9959] ? elf_core_dump+0x2aa9/0x3630 [ 483.962019][ T9959] elf_core_dump+0x30ca/0x3630 [ 483.966826][ T9959] ? load_elf_binary+0x2820/0x2820 [ 483.972041][ T9959] ? dump_vma_snapshot+0xaea/0xe40 [ 483.977155][ T9959] ? verify_lock_unused+0x140/0x140 [ 483.982352][ T9959] ? __lock_acquire+0x7c40/0x7c40 [ 483.987374][ T9959] ? mas_next_entry+0xe03/0xe90 [ 483.992249][ T9959] ? rcu_read_lock_any_held+0xb0/0x130 [ 483.997706][ T9959] ? 0xffffffffff600000 [ 484.001858][ T9959] ? getname_kernel+0x142/0x2f0 [ 484.006708][ T9959] do_coredump+0x16c1/0x2480 [ 484.011313][ T9959] ? nfs_stat_to_errno+0x170/0x170 [ 484.016439][ T9959] ? lock_chain_count+0x20/0x20 [ 484.021293][ T9959] ? _raw_spin_unlock_irq+0x1f/0x40 [ 484.026516][ T9959] ? lockdep_hardirqs_on+0x94/0x140 [ 484.031737][ T9959] get_signal+0x1093/0x1340 [ 484.036260][ T9959] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.042425][ T9959] arch_do_signal_or_restart+0xc4/0x1310 [ 484.048066][ T9959] ? __send_signal_locked+0xb38/0xde0 [ 484.053449][ T9959] ? get_sigframe_size+0x10/0x10 [ 484.058476][ T9959] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 484.064466][ T9959] ? exit_to_user_mode_loop+0x3b/0x110 [ 484.070104][ T9959] exit_to_user_mode_loop+0x70/0x110 [ 484.075399][ T9959] exit_to_user_mode_prepare+0xee/0x180 [ 484.081032][ T9959] irqentry_exit_to_user_mode+0x5/0x30 [ 484.086507][ T9959] exc_page_fault+0x88/0x100 [ 484.091132][ T9959] asm_exc_page_fault+0x22/0x30 [ 484.095994][ T9959] RIP: 0033:0x7f5f23053bd7 [ 484.100407][ T9959] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 484.120014][ T9959] RSP: 002b:00007f5f240e2120 EFLAGS: 00010202 [ 484.126076][ T9959] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f5f2319e159 [ 484.134058][ T9959] RDX: 00007f5f240e2140 RSI: 00007f5f240e2270 RDI: 000000000000000b [ 484.142124][ T9959] RBP: 00007f5f23235024 R08: 0000000000000000 R09: 0000000000000000 [ 484.150100][ T9959] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 484.158065][ T9959] R13: 00007f5f23426038 R14: 00007f5f23425fa0 R15: 00007ffc42127e68 [ 484.166043][ T9959] [ 484.317433][ T4536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 484.397932][ T4274] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 484.408592][ T4274] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 484.417172][ T4274] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 484.437054][ T9959] memory: usage 307200kB, limit 307200kB, failcnt 1649 [ 484.443963][ T9959] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 484.483923][ T4274] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 484.491736][ T4274] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 484.499293][ T4274] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 484.502267][ T9959] kmem: usage 2260kB, limit 9007199254740988kB, failcnt 0 [ 484.576915][ T9959] Memory cgroup stats for /syz1: [ 484.577102][ T9959] anon 802816 [ 484.577102][ T9959] file 311447552 [ 484.577102][ T9959] kernel 2314240 [ 484.577102][ T9959] kernel_stack 163840 [ 484.577102][ T9959] pagetables 782336 [ 484.577102][ T9959] sec_pagetables 0 [ 484.577102][ T9959] percpu 2368 [ 484.577102][ T9959] sock 0 [ 484.577102][ T9959] vmalloc 0 [ 484.577102][ T9959] shmem 311402496 [ 484.577102][ T9959] zswap 0 [ 484.577102][ T9959] zswapped 0 [ 484.577102][ T9959] file_mapped 131395584 [ 484.577102][ T9959] file_dirty 0 [ 484.577102][ T9959] file_writeback 0 [ 484.577102][ T9959] swapcached 1224704 [ 484.577102][ T9959] anon_thp 0 [ 484.577102][ T9959] file_thp 0 [ 484.577102][ T9959] shmem_thp 0 [ 484.577102][ T9959] inactive_anon 305082368 [ 484.577102][ T9959] active_anon 7131136 [ 484.577102][ T9959] inactive_file 0 [ 484.577102][ T9959] active_file 45056 [ 484.577102][ T9959] unevictable 0 [ 484.577102][ T9959] slab_reclaimable 912008 [ 484.577102][ T9959] slab_unreclaimable 351088 [ 484.854223][ T9959] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz1,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1267,pid=9458,uid=0 [ 484.896985][ T9959] Memory cgroup out of memory: Killed process 9458 (syz.1.1267) total-vm:200684kB, anon-rss:1548kB, file-rss:20608kB, shmem-rss:128168kB, UID:0 pgtables:356kB oom_score_adj:1000 [ 485.483823][ T4536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 485.581948][ T29] oom_reaper: reaped process 9395 (syz.2.1256), now anon-rss:0kB, file-rss:13072kB, shmem-rss:0kB [ 485.720908][ T9484] syz.2.1266 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 485.916959][ T9484] CPU: 0 PID: 9484 Comm: syz.2.1266 Not tainted syzkaller #0 [ 485.924403][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 485.934483][ T9484] Call Trace: [ 485.937815][ T9484] [ 485.940763][ T9484] dump_stack_lvl+0x188/0x24e [ 485.945465][ T9484] ? ___ratelimit+0x14e/0x610 [ 485.950161][ T9484] ? show_regs_print_info+0x12/0x12 [ 485.955398][ T9484] ? load_image+0x410/0x410 [ 485.959932][ T9484] ? ___ratelimit+0x474/0x610 [ 485.964629][ T9484] ? radix_tree_cpu_dead+0x160/0x160 [ 485.969944][ T9484] dump_header+0xd8/0x820 [ 485.974304][ T9484] oom_kill_process+0x361/0x550 [ 485.979346][ T9484] out_of_memory+0xe25/0x1220 [ 485.984042][ T9484] ? print_unlock_imbalance_bug+0x160/0x160 [ 485.989963][ T9484] ? mutex_lock_nested+0x10/0x10 [ 485.994918][ T9484] ? unregister_oom_notifier+0x20/0x20 [ 486.000407][ T9484] mem_cgroup_out_of_memory+0x2c0/0x390 [ 486.005976][ T9484] ? mem_cgroup_oom_trylock+0x210/0x210 [ 486.011564][ T9484] ? do_raw_spin_unlock+0x11d/0x230 [ 486.016798][ T9484] try_charge_memcg+0xc9d/0x17c0 [ 486.021794][ T9484] ? percpu_ref_put+0x180/0x180 [ 486.026693][ T9484] ? get_mem_cgroup_from_mm+0x34/0x290 [ 486.032193][ T9484] charge_memcg+0x117/0x3b0 [ 486.036727][ T9484] ? __mem_cgroup_charge+0x80/0x80 [ 486.041862][ T9484] ? get_mem_cgroup_from_mm+0x34/0x290 [ 486.047427][ T9484] ? get_mem_cgroup_from_mm+0x34/0x290 [ 486.052908][ T9484] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 486.058475][ T9484] __mem_cgroup_charge+0x21/0x80 [ 486.063440][ T9484] shmem_add_to_page_cache+0x8d7/0x1c90 [ 486.069007][ T9484] ? __filemap_get_folio+0x10f/0xde0 [ 486.074335][ T9484] ? __filemap_get_folio+0x10f/0xde0 [ 486.079656][ T9484] ? put_page+0x270/0x270 [ 486.084012][ T9484] ? mark_lock+0x94/0x320 [ 486.088393][ T9484] shmem_get_folio_gfp+0x1663/0x35e0 [ 486.093757][ T9484] shmem_write_begin+0xee/0x3f0 [ 486.098644][ T9484] generic_perform_write+0x2fa/0x5c0 [ 486.103971][ T9484] ? generic_file_direct_write+0x330/0x330 [ 486.109845][ T9484] ? __file_remove_privs+0x5f0/0x5f0 [ 486.115156][ T9484] ? rwsem_write_trylock+0x135/0x1c0 [ 486.120815][ T9484] ? clear_nonspinnable+0x60/0x60 [ 486.125857][ T9484] ? generic_write_checks_count+0x363/0x440 [ 486.131778][ T9484] __generic_file_write_iter+0x148/0x2a0 [ 486.137459][ T9484] generic_file_write_iter+0xab/0x2e0 [ 486.142961][ T9484] __kernel_write_iter+0x298/0x690 [ 486.148114][ T9484] ? vfs_read+0x960/0x960 [ 486.152471][ T9484] ? iov_iter_bvec+0xfd/0x1f0 [ 486.157257][ T9484] ? iov_iter_bvec+0x4a/0x1f0 [ 486.161955][ T9484] dump_user_range+0x40a/0x840 [ 486.166749][ T9484] ? dump_skip+0x40/0x40 [ 486.171007][ T9484] ? dump_emit+0x74/0xe0 [ 486.175283][ T9484] ? dump_emit+0xa2/0xe0 [ 486.179551][ T9484] ? elf_core_dump+0x2aa9/0x3630 [ 486.184508][ T9484] elf_core_dump+0x30ca/0x3630 [ 486.189311][ T9484] ? load_elf_binary+0x2820/0x2820 [ 486.194449][ T9484] ? dump_vma_snapshot+0xaea/0xe40 [ 486.199588][ T9484] ? verify_lock_unused+0x140/0x140 [ 486.204813][ T9484] ? __lock_acquire+0x7c40/0x7c40 [ 486.209860][ T9484] ? mas_next_entry+0xe03/0xe90 [ 486.214776][ T9484] ? rcu_read_lock_any_held+0xb0/0x130 [ 486.220253][ T9484] ? 0xffffffffff600000 [ 486.224418][ T9484] ? getname_kernel+0x142/0x2f0 [ 486.229296][ T9484] do_coredump+0x16c1/0x2480 [ 486.233947][ T9484] ? nfs_stat_to_errno+0x170/0x170 [ 486.239116][ T9484] ? lock_chain_count+0x20/0x20 [ 486.244007][ T9484] ? _raw_spin_unlock_irq+0x1f/0x40 [ 486.249226][ T9484] ? lockdep_hardirqs_on+0x94/0x140 [ 486.254450][ T9484] get_signal+0x1093/0x1340 [ 486.258995][ T9484] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 486.265005][ T9484] arch_do_signal_or_restart+0xc4/0x1310 [ 486.270672][ T9484] ? __send_signal_locked+0xb38/0xde0 [ 486.276255][ T9484] ? get_sigframe_size+0x10/0x10 [ 486.281233][ T9484] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 486.287258][ T9484] ? exit_to_user_mode_loop+0x3b/0x110 [ 486.292753][ T9484] exit_to_user_mode_loop+0x70/0x110 [ 486.298078][ T9484] exit_to_user_mode_prepare+0xee/0x180 [ 486.303645][ T9484] irqentry_exit_to_user_mode+0x5/0x30 [ 486.309123][ T9484] exc_page_fault+0x88/0x100 [ 486.313733][ T9484] asm_exc_page_fault+0x22/0x30 [ 486.318602][ T9484] RIP: 0033:0x7f3089053bd7 [ 486.323035][ T9484] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 486.342671][ T9484] RSP: 002b:00007f3089f83120 EFLAGS: 00010202 [ 486.348801][ T9484] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f308919e159 [ 486.356793][ T9484] RDX: 00007f3089f83140 RSI: 00007f3089f83270 RDI: 000000000000000b [ 486.364873][ T9484] RBP: 00007f3089235024 R08: 0000000000000000 R09: 0000000000000000 [ 486.372871][ T9484] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 486.380863][ T9484] R13: 00007f3089426128 R14: 00007f3089426090 R15: 00007ffd968974c8 [ 486.388878][ T9484] [ 486.537338][ T4276] Bluetooth: hci4: command 0x0409 tx timeout [ 487.837197][ T9484] memory: usage 307056kB, limit 307200kB, failcnt 39726 [ 487.844207][ T9484] memory+swap: usage 429292kB, limit 9007199254740988kB, failcnt 0 [ 487.853151][ T9484] kmem: usage 3256kB, limit 9007199254740988kB, failcnt 0 [ 487.860611][ T9484] Memory cgroup stats for /syz2: [ 487.860809][ T9484] anon 188416 [ 487.860809][ T9484] file 308854784 [ 487.860809][ T9484] kernel 3334144 [ 487.860809][ T9484] kernel_stack 262144 [ 487.860809][ T9484] pagetables 1290240 [ 487.860809][ T9484] sec_pagetables 0 [ 487.860809][ T9484] percpu 0 [ 487.860809][ T9484] sock 0 [ 487.860809][ T9484] vmalloc 0 [ 487.860809][ T9484] shmem 307806208 [ 487.860809][ T9484] zswap 0 [ 487.860809][ T9484] zswapped 0 [ 487.860809][ T9484] file_mapped 22552576 [ 487.860809][ T9484] file_dirty 0 [ 487.860809][ T9484] file_writeback 0 [ 487.860809][ T9484] swapcached 153030656 [ 487.860809][ T9484] anon_thp 0 [ 487.860809][ T9484] file_thp 0 [ 487.860809][ T9484] shmem_thp 0 [ 487.860809][ T9484] inactive_anon 167006208 [ 487.860809][ T9484] active_anon 140627968 [ 487.860809][ T9484] inactive_file 4096 [ 487.860809][ T9484] active_file 1044480 [ 487.860809][ T9484] unevictable 0 [ 487.860809][ T9484] slab_reclaimable 1270480 [ 487.860809][ T9484] slab_unreclaimable 347920 [ 488.068327][ T9484] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1282,pid=9561,uid=0 [ 488.276019][ T9484] Memory cgroup out of memory: Killed process 9561 (syz.2.1282) total-vm:102376kB, anon-rss:1248kB, file-rss:53172kB, shmem-rss:0kB, UID:0 pgtables:208kB oom_score_adj:1000 [ 488.693354][ T4276] Bluetooth: hci4: command 0x041b tx timeout [ 490.649497][ T29] oom_reaper: reaped process 9561 (syz.2.1282), now anon-rss:0kB, file-rss:19328kB, shmem-rss:0kB [ 490.761777][ T9383] syz.2.1256 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 490.787148][ T4276] Bluetooth: hci4: command 0x040f tx timeout [ 490.805635][ T9383] CPU: 0 PID: 9383 Comm: syz.2.1256 Not tainted syzkaller #0 [ 490.813070][ T9383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 490.823170][ T9383] Call Trace: [ 490.826470][ T9383] [ 490.829416][ T9383] dump_stack_lvl+0x188/0x24e [ 490.834130][ T9383] ? ___ratelimit+0x14e/0x610 [ 490.838829][ T9383] ? show_regs_print_info+0x12/0x12 [ 490.844070][ T9383] ? load_image+0x410/0x410 [ 490.848600][ T9383] ? ___ratelimit+0x474/0x610 [ 490.853318][ T9383] ? radix_tree_cpu_dead+0x160/0x160 [ 490.858636][ T9383] dump_header+0xd8/0x820 [ 490.862988][ T9383] oom_kill_process+0x361/0x550 [ 490.867849][ T9383] out_of_memory+0xe25/0x1220 [ 490.872529][ T9383] ? print_unlock_imbalance_bug+0x160/0x160 [ 490.878425][ T9383] ? mutex_lock_nested+0x10/0x10 [ 490.883361][ T9383] ? unregister_oom_notifier+0x20/0x20 [ 490.888820][ T9383] mem_cgroup_out_of_memory+0x2c0/0x390 [ 490.894366][ T9383] ? mem_cgroup_oom_trylock+0x210/0x210 [ 490.899922][ T9383] ? do_raw_spin_unlock+0x11d/0x230 [ 490.905135][ T9383] try_charge_memcg+0xc9d/0x17c0 [ 490.910096][ T9383] ? percpu_ref_put+0x180/0x180 [ 490.914964][ T9383] ? get_mem_cgroup_from_mm+0x34/0x290 [ 490.920448][ T9383] charge_memcg+0x117/0x3b0 [ 490.925017][ T9383] ? __mem_cgroup_charge+0x80/0x80 [ 490.930142][ T9383] ? get_mem_cgroup_from_mm+0x34/0x290 [ 490.935717][ T9383] ? get_mem_cgroup_from_mm+0x34/0x290 [ 490.941556][ T9383] ? get_mem_cgroup_from_mm+0x1ae/0x290 [ 490.947130][ T9383] __mem_cgroup_charge+0x21/0x80 [ 490.952073][ T9383] shmem_add_to_page_cache+0x8d7/0x1c90 [ 490.957637][ T9383] ? __filemap_get_folio+0x10f/0xde0 [ 490.962940][ T9383] ? __filemap_get_folio+0x10f/0xde0 [ 490.968232][ T9383] ? put_page+0x270/0x270 [ 490.972586][ T9383] ? mark_lock+0x94/0x320 [ 490.976943][ T9383] shmem_get_folio_gfp+0x1663/0x35e0 [ 490.982265][ T9383] shmem_write_begin+0xee/0x3f0 [ 490.987158][ T9383] generic_perform_write+0x2fa/0x5c0 [ 490.992486][ T9383] ? generic_file_direct_write+0x330/0x330 [ 490.998302][ T9383] ? __file_remove_privs+0x5f0/0x5f0 [ 491.003585][ T9383] ? rwsem_write_trylock+0x135/0x1c0 [ 491.008887][ T9383] ? clear_nonspinnable+0x60/0x60 [ 491.013933][ T9383] ? generic_write_checks_count+0x363/0x440 [ 491.019845][ T9383] __generic_file_write_iter+0x148/0x2a0 [ 491.025510][ T9383] generic_file_write_iter+0xab/0x2e0 [ 491.030903][ T9383] __kernel_write_iter+0x298/0x690 [ 491.036043][ T9383] ? vfs_read+0x960/0x960 [ 491.040396][ T9383] ? dump_user_range+0x5af/0x840 [ 491.045339][ T9383] ? iov_iter_bvec+0x4a/0x1f0 [ 491.050022][ T9383] dump_user_range+0x40a/0x840 [ 491.054802][ T9383] ? dump_skip+0x40/0x40 [ 491.059049][ T9383] ? dump_emit+0x74/0xe0 [ 491.063346][ T9383] ? dump_emit+0xa2/0xe0 [ 491.067604][ T9383] ? elf_core_dump+0x2aa9/0x3630 [ 491.072550][ T9383] elf_core_dump+0x30ca/0x3630 [ 491.077331][ T9383] ? load_elf_binary+0x2820/0x2820 [ 491.082444][ T9383] ? dump_vma_snapshot+0xaea/0xe40 [ 491.087559][ T9383] ? verify_lock_unused+0x140/0x140 [ 491.092773][ T9383] ? __lock_acquire+0x7c40/0x7c40 [ 491.097813][ T9383] ? mas_next_entry+0xe03/0xe90 [ 491.102913][ T9383] ? rcu_read_lock_any_held+0xb0/0x130 [ 491.108377][ T9383] ? 0xffffffffff600000 [ 491.112529][ T9383] ? getname_kernel+0x142/0x2f0 [ 491.117380][ T9383] do_coredump+0x16c1/0x2480 [ 491.121987][ T9383] ? nfs_stat_to_errno+0x170/0x170 [ 491.127205][ T9383] ? lock_chain_count+0x20/0x20 [ 491.132085][ T9383] ? _raw_spin_unlock_irq+0x1f/0x40 [ 491.137331][ T9383] ? lockdep_hardirqs_on+0x94/0x140 [ 491.142631][ T9383] get_signal+0x1093/0x1340 [ 491.147349][ T9383] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 491.153360][ T9383] arch_do_signal_or_restart+0xc4/0x1310 [ 491.159100][ T9383] ? __send_signal_locked+0xb38/0xde0 [ 491.164593][ T9383] ? get_sigframe_size+0x10/0x10 [ 491.169549][ T9383] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 491.175736][ T9383] ? exit_to_user_mode_loop+0x3b/0x110 [ 491.181215][ T9383] exit_to_user_mode_loop+0x70/0x110 [ 491.186541][ T9383] exit_to_user_mode_prepare+0xee/0x180 [ 491.192206][ T9383] irqentry_exit_to_user_mode+0x5/0x30 [ 491.197714][ T9383] exc_page_fault+0x88/0x100 [ 491.202310][ T9383] asm_exc_page_fault+0x22/0x30 [ 491.207182][ T9383] RIP: 0033:0x7f3089053bd7 [ 491.211597][ T9383] Code: e8 fe f9 ff ff 89 f2 48 8d 3d 5d 4f 1b 00 48 8d 35 c3 0a 1e 00 31 c0 e8 37 f8 ff ff 0f 1f 80 00 00 00 00 53 89 fb 48 83 ec 10 <64> 8b 04 25 a4 ff ff ff 85 c0 74 2a 89 fe 31 c0 bf 3c 00 00 00 e8 [ 491.231221][ T9383] RSP: 002b:00007f3089fa4120 EFLAGS: 00010202 [ 491.237286][ T9383] RAX: 0000000000000000 RBX: 000000000000000b RCX: 00007f308919e159 [ 491.245251][ T9383] RDX: 00007f3089fa4140 RSI: 00007f3089fa4270 RDI: 000000000000000b [ 491.253218][ T9383] RBP: 00007f3089235024 R08: 0000000000000000 R09: 0000000000000000 [ 491.261184][ T9383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 491.269236][ T9383] R13: 00007f3089426038 R14: 00007f3089425fa0 R15: 00007ffd968974c8 [ 491.277217][ T9383] [ 491.937023][ T9383] memory: usage 305084kB, limit 307200kB, failcnt 45393 [ 491.944027][ T9383] memory+swap: usage 424736kB, limit 9007199254740988kB, failcnt 0 [ 492.088291][ T9383] kmem: usage 3240kB, limit 9007199254740988kB, failcnt 0 [ 492.190417][ T9383] Memory cgroup stats for /syz2: [ 492.190612][ T9383] anon 339968 [ 492.190612][ T9383] file 309448704 [ 492.190612][ T9383] kernel 3313664 [ 492.190612][ T9383] kernel_stack 327680 [ 492.190612][ T9383] pagetables 1196032 [ 492.190612][ T9383] sec_pagetables 0 [ 492.190612][ T9383] percpu 0 [ 492.190612][ T9383] sock 0 [ 492.190612][ T9383] vmalloc 0 [ 492.190612][ T9383] shmem 309448704 [ 492.190612][ T9383] zswap 0 [ 492.190612][ T9383] zswapped 0 [ 492.190612][ T9383] file_mapped 25214976 [ 492.190612][ T9383] file_dirty 0 [ 492.190612][ T9383] file_writeback 0 [ 492.190612][ T9383] swapcached 156385280 [ 492.190612][ T9383] anon_thp 0 [ 492.190612][ T9383] file_thp 0 [ 492.190612][ T9383] shmem_thp 0 [ 492.190612][ T9383] inactive_anon 110727168 [ 492.190612][ T9383] active_anon 199061504 [ 492.190612][ T9383] inactive_file 0 [ 492.190612][ T9383] active_file 0 [ 492.190612][ T9383] unevictable 0 [ 492.190612][ T9383] slab_reclaimable 1275328 [ 492.190612][ T9383] slab_unreclaimable 360088 [ 492.667334][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1404'. [ 492.856995][ T4276] Bluetooth: hci4: command 0x0419 tx timeout [ 493.287168][ T9383] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1256,pid=9383,uid=0 [ 493.517014][ T9383] Memory cgroup out of memory: Killed process 9383 (syz.2.1256) total-vm:104292kB, anon-rss:1256kB, file-rss:54328kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 494.060046][ T7] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 494.270477][ T7] usb 9-1: Using ep0 maxpacket: 32 [ 494.285651][ T7] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 494.324190][ T7] usb 9-1: config 0 has no interface number 0 [ 494.352386][ T7] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 494.384296][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.419852][ T7] usb 9-1: Product: syz [ 494.424086][ T7] usb 9-1: Manufacturer: syz [ 494.439469][ T7] usb 9-1: SerialNumber: syz [ 494.453269][ T7] usb 9-1: config 0 descriptor?? [ 494.466251][ T7] smsc95xx v2.0.0 [ 494.615463][ T4536] bond0 (unregistering): Released all slaves [ 494.907104][ T4318] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 494.924506][ T7] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 494.966354][ T7] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 495.109163][ T4318] usb 2-1: config 6 has an invalid interface number: 38 but max is 0 [ 495.125234][ T4318] usb 2-1: config 6 has no interface number 0 [ 495.131495][ T4318] usb 2-1: config 6 interface 38 has no altsetting 0 [ 495.172478][ T4318] usb 2-1: string descriptor 0 read error: -22 [ 495.196031][ T4318] usb 2-1: New USB device found, idVendor=7392, idProduct=b811, bcdDevice=ef.15 [ 495.206774][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.461463][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 495.497788][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 495.997106][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.139011][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.285612][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.357191][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.458057][ T4285] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 496.469052][ T4285] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 496.477423][ T4285] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 496.487433][ T4285] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 496.494994][ T4285] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 496.502436][ T4285] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 496.545409][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.687515][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.756988][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.822866][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.961636][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.079382][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.747972][ T7] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 497.780801][ T7] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 497.789475][ T9982] chnl_net:caif_netlink_parms(): no params data found [ 497.870403][ T7] usb 9-1: USB disconnect, device number 3 [ 498.153905][ T9982] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.187128][ T9982] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.195350][ T9982] device bridge_slave_0 entered promiscuous mode [ 498.214370][ T9982] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.277220][ T9982] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.308143][ T9982] device bridge_slave_1 entered promiscuous mode [ 498.547276][ T4276] Bluetooth: hci7: command 0x0409 tx timeout [ 498.857619][ T954] usb 2-1: USB disconnect, device number 7 [ 499.037291][T10053] chnl_net:caif_netlink_parms(): no params data found [ 499.064222][ T9982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.127654][ T9982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.250225][ T9982] team0: Port device team_slave_0 added [ 499.316296][ T9982] team0: Port device team_slave_1 added [ 499.326403][T10053] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.347043][T10053] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.355485][T10053] device bridge_slave_0 entered promiscuous mode [ 499.362286][ T954] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 499.616947][ T954] usb 2-1: Using ep0 maxpacket: 16 [ 499.628139][ T954] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.657144][ T7242] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 499.665228][ T954] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 499.706931][ T954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 499.713688][ T954] usb 2-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 499.756948][ T954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.804463][ T954] usb 2-1: config 0 descriptor?? [ 499.880622][ T7242] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 499.901465][ T7242] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 499.912752][T10053] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.927202][ T7242] usb 9-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 499.936548][ T7242] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.947032][T10053] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.955676][T10053] device bridge_slave_1 entered promiscuous mode [ 500.008828][ T7242] usb 9-1: probing VID:PID(0424:012C) [ 500.023814][ T7242] usb 9-1: vub300 testing BULK IN EndPoint(0) 81 [ 500.040853][ T7242] usb 9-1: vub300 testing BULK OUT EndPoint(1) 02 [ 500.040891][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.066771][ T7242] usb 9-1: vub300 testing BULK IN EndPoint(2) 83 [ 500.074964][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.096944][ T7242] usb 9-1: vub300 testing BULK OUT EndPoint(3) 04 [ 500.127039][ T9982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.136924][ T7242] usb 9-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 500.319301][ T954] input: HID 0b05:18c6 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0B05:18C6.0007/input/input9 [ 500.439034][ T954] hid-generic 0003:0B05:18C6.0007: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.1-1/input0 [ 500.448433][ T7242] usb 9-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 500.530693][ T954] kernel read not supported for file /bus/input/devices (pid: 954 comm: kworker/0:2) [ 500.617110][ T4276] Bluetooth: hci7: command 0x041b tx timeout [ 500.663378][ T7242] usb 9-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 500.819974][ T9982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.846983][ T9982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.940490][ T9982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.982825][T10053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 501.072485][T10053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 501.088110][ T7048] usb 2-1: USB disconnect, device number 8 [ 501.261543][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.268007][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.643019][T10053] team0: Port device team_slave_0 added [ 501.688467][T10053] team0: Port device team_slave_1 added [ 501.730768][ T9982] device hsr_slave_0 entered promiscuous mode [ 501.771963][ T9982] device hsr_slave_1 entered promiscuous mode [ 501.780648][ T9982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.797467][ T9982] Cannot create hsr debugfs directory [ 501.845707][T10108] tc_dump_action: action bad kind [ 501.965623][T10053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.978178][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.047203][T10053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.066537][T10111] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1414'. [ 502.081596][T10053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.090247][T10053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.157084][T10053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.360946][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 502.510552][ T4536] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.697036][ T4276] Bluetooth: hci7: command 0x040f tx timeout [ 502.797000][ T4499] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 502.822263][ T4536] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.960755][T10053] device hsr_slave_0 entered promiscuous mode [ 503.019369][T10053] device hsr_slave_1 entered promiscuous mode [ 503.083917][T10053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.130150][T10053] Cannot create hsr debugfs directory [ 503.476998][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 503.608314][ T4536] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.667069][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 503.675463][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 503.698225][ T7] usb 2-1: config 3 has an invalid interface number: 171 but max is 0 [ 503.716650][ T7] usb 2-1: config 3 has no interface number 0 [ 503.725266][ T7] usb 2-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 503.754759][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.762925][ T7] usb 2-1: Product: syz [ 503.779635][ T7] usb 2-1: Manufacturer: syz [ 503.784269][ T7] usb 2-1: SerialNumber: syz [ 503.845201][ T4499] usb 9-1: device descriptor read/64, error -71 [ 504.013473][T10122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.048923][T10122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.073730][ T7] (null): radio-mr800 - initialization failed [ 504.097149][ T7] radio-mr800: probe of 2-1:3.171 failed with error -22 [ 504.104327][ T7] usbhid 2-1:3.171: couldn't find an input interrupt endpoint [ 504.115413][ T4536] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.137096][ T4499] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 504.167488][ T7] usb 2-1: USB disconnect, device number 9 [ 504.403044][ T4499] usb 9-1: device firmware changed [ 504.419715][ T4315] usb 9-1: USB disconnect, device number 4 [ 504.523857][ T4315] USB vub300 remote SDIO host controller[0] now disconnected [ 504.677042][ T4315] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 504.777120][ T4276] Bluetooth: hci7: command 0x0419 tx timeout [ 504.918335][ T4315] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.949287][ T4315] usb 9-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 504.983318][ T4315] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.030105][ T4315] usb 9-1: config 0 descriptor?? [ 505.170093][T10137] tc_dump_action: action bad kind [ 505.311821][ T4315] usbhid 9-1:0.0: can't add hid device: -71 [ 505.319992][ T4315] usbhid: probe of 9-1:0.0 failed with error -71 [ 505.380030][ T4315] usb 9-1: USB disconnect, device number 5 [ 505.500206][ C1] [ 505.502581][ C1] ================================ [ 505.507690][ C1] WARNING: inconsistent lock state [ 505.512838][ C1] syzkaller #0 Not tainted [ 505.517261][ C1] -------------------------------- [ 505.522369][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 505.529218][ C1] kworker/u4:16/4536 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 505.535822][ C1] ffff888053894648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 505.547234][ C1] {SOFTIRQ-ON-W} state was registered at: [ 505.552959][ C1] lock_acquire+0x1bb/0x4a0 [ 505.557565][ C1] process_one_work+0x7ec/0x1160 [ 505.562599][ C1] worker_thread+0xaf5/0x12a0 [ 505.567367][ C1] kthread+0x29d/0x330 [ 505.571610][ C1] ret_from_fork+0x1f/0x30 [ 505.576140][ C1] irq event stamp: 5293094 [ 505.580539][ C1] hardirqs last enabled at (5293094): [] __cancel_work_timer+0x36a/0x560 [ 505.590604][ C1] hardirqs last disabled at (5293093): [] try_to_grab_pending+0xfa/0x890 [ 505.600578][ C1] softirqs last enabled at (5293008): [] fib6_run_gc+0x1e1/0x2a0 [ 505.610044][ C1] softirqs last disabled at (5293029): [] __irq_exit_rcu+0x13b/0x230 [ 505.619666][ C1] [ 505.619666][ C1] other info that might help us debug this: [ 505.627715][ C1] Possible unsafe locking scenario: [ 505.627715][ C1] [ 505.635149][ C1] CPU0 [ 505.638414][ C1] ---- [ 505.641682][ C1] lock((work_completion)(&(&host->detect)->work)); [ 505.648344][ C1] [ 505.651781][ C1] lock((work_completion)(&(&host->detect)->work)); [ 505.658616][ C1] [ 505.658616][ C1] *** DEADLOCK *** [ 505.658616][ C1] [ 505.666740][ C1] 6 locks held by kworker/u4:16/4536: [ 505.672090][ C1] #0: ffff88801761e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 505.682344][ C1] #1: ffffc90004f6fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 505.692241][ C1] #2: ffffffff8dd4fa90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x148/0xba0 [ 505.701648][ C1] #3: ffff8880553602f8 (&devlink->lock_key#13){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x104/0x280 [ 505.712599][ C1] #4: ffffffff8dd5c928 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3b/0x150 [ 505.721549][ C1] #5: ffffc900001e0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 505.732044][ C1] [ 505.732044][ C1] stack backtrace: [ 505.737921][ C1] CPU: 1 PID: 4536 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 505.745541][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 505.755582][ C1] Workqueue: netns cleanup_net [ 505.760343][ C1] Call Trace: [ 505.763612][ C1] [ 505.766447][ C1] dump_stack_lvl+0x188/0x24e [ 505.771119][ C1] ? show_regs_print_info+0x12/0x12 [ 505.776312][ C1] valid_state+0x13b/0x1d0 [ 505.780719][ C1] mark_lock_irq+0xa9/0x900 [ 505.785210][ C1] ? stack_trace_save+0xa6/0xf0 [ 505.790051][ C1] ? save_trace+0xbb0/0xbb0 [ 505.794548][ C1] ? save_trace+0x5a/0xbb0 [ 505.798955][ C1] mark_lock+0x208/0x320 [ 505.803193][ C1] __lock_acquire+0xce0/0x7c40 [ 505.807950][ C1] ? verify_lock_unused+0x140/0x140 [ 505.813143][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 505.818161][ C1] ? debug_object_assert_init+0x1ed/0x300 [ 505.823938][ C1] lock_acquire+0x1bb/0x4a0 [ 505.828434][ C1] ? __flush_work+0x109/0xac0 [ 505.833097][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 505.838279][ C1] ? read_lock_is_recursive+0x10/0x10 [ 505.843641][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 505.849538][ C1] ? _raw_spin_unlock+0x40/0x40 [ 505.854392][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 505.860113][ C1] ? kobject_put+0x25c/0x450 [ 505.864699][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 505.871074][ C1] ? call_timer_fn+0x1ac/0x670 [ 505.875831][ C1] ? __flush_work+0x109/0xac0 [ 505.880494][ C1] __flush_work+0x122/0xac0 [ 505.884981][ C1] ? __flush_work+0x109/0xac0 [ 505.889643][ C1] ? flush_work+0x20/0x20 [ 505.893956][ C1] ? __timer_delete+0x6c/0x220 [ 505.898706][ C1] ? mark_lock+0x94/0x320 [ 505.903026][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 505.908996][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 505.914266][ C1] ? lock_chain_count+0x20/0x20 [ 505.919110][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 505.924379][ C1] ? __cancel_work_timer+0x36a/0x560 [ 505.929650][ C1] __cancel_work_timer+0x3f4/0x560 [ 505.934745][ C1] ? cancel_work_sync+0x20/0x20 [ 505.939578][ C1] ? kobject_put+0x25c/0x450 [ 505.944153][ C1] ? __kmem_cache_free+0xb6/0x200 [ 505.949165][ C1] ? kobject_put+0x41d/0x450 [ 505.953741][ C1] mmc_free_host+0x15/0x30 [ 505.958221][ C1] call_timer_fn+0x1ac/0x670 [ 505.962817][ C1] ? kref_get+0x70/0x70 [ 505.966977][ C1] ? call_timer_fn+0xcf/0x670 [ 505.971645][ C1] ? __run_timers+0x810/0x810 [ 505.976316][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 505.981510][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 505.986700][ C1] ? kref_get+0x70/0x70 [ 505.990863][ C1] __run_timers+0x56c/0x810 [ 505.995358][ C1] ? detach_timer+0x350/0x350 [ 506.000025][ C1] ? lock_chain_count+0x20/0x20 [ 506.004866][ C1] run_timer_softirq+0x63/0xf0 [ 506.009617][ C1] handle_softirqs+0x291/0x910 [ 506.014369][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 506.019208][ C1] ? do_softirq+0x210/0x210 [ 506.023693][ C1] ? hrtimer_interrupt+0x775/0x980 [ 506.028798][ C1] __irq_exit_rcu+0x13b/0x230 [ 506.033460][ C1] ? irq_exit_rcu+0x20/0x20 [ 506.037965][ C1] irq_exit_rcu+0x5/0x20 [ 506.042214][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 506.047848][ C1] [ 506.050773][ C1] [ 506.053697][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 506.059675][ C1] RIP: 0010:lockdep_unregister_key+0x4e8/0x550 [ 506.065827][ C1] Code: 31 ac 90 48 c7 c6 30 b2 64 81 e8 73 a5 07 00 e8 be b8 07 00 e9 5c fc ff ff e8 44 96 cc 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb 88 0f 0b e9 f8 fe ff ff 0f 0b e9 45 ff ff ff [ 506.085419][ C1] RSP: 0018:ffffc90004f6f4e0 EFLAGS: 00000202 [ 506.091478][ C1] RAX: dffffc0000000000 RBX: ffff88805836ba01 RCX: 65cab3831ec66400 [ 506.099435][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c2580 RDI: ffffffff8adf6420 [ 506.107392][ C1] RBP: ffffc90004f6f5c0 R08: ffffffff90ae521f R09: 1ffffffff215ca43 [ 506.115352][ C1] R10: dffffc0000000000 R11: fffffbfff215ca44 R12: 0000000000000a03 [ 506.123322][ C1] R13: ffff88805836ba99 R14: ffffffff90ae31a8 R15: 1ffff920009edea0 [ 506.131288][ C1] ? lockdep_reset_lock+0x300/0x300 [ 506.136482][ C1] ? rcu_is_watching+0x11/0xa0 [ 506.141242][ C1] ? qdisc_reset+0x39e/0x5c0 [ 506.145911][ C1] __qdisc_destroy+0x128/0x430 [ 506.150664][ C1] dev_shutdown+0x351/0x440 [ 506.155161][ C1] unregister_netdevice_many_notify+0xa7e/0x1990 [ 506.161524][ C1] ? unregister_netdevice_many+0x20/0x20 [ 506.167146][ C1] ? trace_contention_end+0x5f/0x170 [ 506.172420][ C1] ? __mutex_lock+0x1ab/0xae0 [ 506.177085][ C1] ? lock_chain_count+0x20/0x20 [ 506.181927][ C1] unregister_netdevice_queue+0x2e5/0x330 [ 506.187639][ C1] ? queue_delayed_work_on+0x19d/0x1f0 [ 506.193082][ C1] ? list_netdevice+0x640/0x640 [ 506.197922][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 506.203192][ C1] nsim_destroy+0x49/0x150 [ 506.207598][ C1] __nsim_dev_port_del+0x155/0x1c0 [ 506.212715][ C1] nsim_dev_reload_destroy+0x283/0x480 [ 506.218183][ C1] nsim_dev_reload_down+0x86/0xb0 [ 506.223203][ C1] devlink_reload+0x202/0x690 [ 506.227876][ C1] ? devlink_resources_validate+0xc0/0xc0 [ 506.233588][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 506.238944][ C1] ? devlinks_xa_find_get+0x319/0x330 [ 506.244307][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 506.249585][ C1] devlink_pernet_pre_exit+0x122/0x280 [ 506.255031][ C1] ? mutex_unlock+0x10/0x10 [ 506.259524][ C1] ? devlink_trap_notify+0x1b0/0x1b0 [ 506.264794][ C1] ? nfct_timeout_pernet+0x1ed/0x230 [ 506.270127][ C1] ? cttimeout_net_pre_exit+0x1f2/0x210 [ 506.275663][ C1] cleanup_net+0x58e/0xba0 [ 506.280074][ C1] ? ops_free_list+0x3b0/0x3b0 [ 506.284829][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.290711][ C1] ? _raw_spin_unlock+0x40/0x40 [ 506.295547][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 506.300732][ C1] ? process_one_work+0x7b4/0x1160 [ 506.305831][ C1] process_one_work+0x8ab/0x1160 [ 506.310763][ C1] ? worker_detach_from_pool+0x240/0x240 [ 506.316382][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 506.321394][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 506.326928][ C1] ? wq_worker_running+0x97/0x190 [ 506.331943][ C1] worker_thread+0xaf5/0x12a0 [ 506.336611][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 506.342490][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.348375][ C1] kthread+0x29d/0x330 [ 506.352430][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 506.357441][ C1] ? kthread_blkcg+0xd0/0xd0 [ 506.362013][ C1] ret_from_fork+0x1f/0x30 [ 506.366424][ C1] [ 506.369483][ C1] BUG: sleeping function called from invalid context at kernel/workqueue.c:3013 [ 506.378526][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 4536, name: kworker/u4:16 [ 506.387838][ C1] preempt_count: 100, expected: 0 [ 506.392863][ C1] RCU nest depth: 0, expected: 0 [ 506.397820][ C1] INFO: lockdep is turned off. [ 506.402576][ C1] Preemption disabled at: [ 506.402584][ C1] [] handle_softirqs+0xfd/0x910 [ 506.413342][ C1] CPU: 1 PID: 4536 Comm: kworker/u4:16 Not tainted syzkaller #0 [ 506.420978][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 506.431041][ C1] Workqueue: netns cleanup_net [ 506.435824][ C1] Call Trace: [ 506.439108][ C1] [ 506.441957][ C1] dump_stack_lvl+0x188/0x24e [ 506.446657][ C1] ? show_regs_print_info+0x12/0x12 [ 506.451881][ C1] ? load_image+0x410/0x410 [ 506.456398][ C1] ? handle_softirqs+0xfd/0x910 [ 506.461261][ C1] __might_resched+0x489/0x5f0 [ 506.466117][ C1] ? handle_softirqs+0xfd/0x910 [ 506.470985][ C1] ? __might_sleep+0xd0/0xd0 [ 506.475583][ C1] ? __lock_acquire+0x7c40/0x7c40 [ 506.480621][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.486523][ C1] ? _raw_spin_unlock+0x40/0x40 [ 506.491383][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 506.497023][ C1] ? kobject_put+0x25c/0x450 [ 506.501618][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 506.507954][ C1] ? call_timer_fn+0x1ac/0x670 [ 506.512728][ C1] ? __flush_work+0x109/0xac0 [ 506.517422][ C1] __flush_work+0x142/0xac0 [ 506.521936][ C1] ? flush_work+0x20/0x20 [ 506.526275][ C1] ? __timer_delete+0x6c/0x220 [ 506.531052][ C1] ? mark_lock+0x94/0x320 [ 506.535395][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 506.541387][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 506.546679][ C1] ? lock_chain_count+0x20/0x20 [ 506.551542][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 506.556837][ C1] ? __cancel_work_timer+0x36a/0x560 [ 506.562132][ C1] __cancel_work_timer+0x3f4/0x560 [ 506.567248][ C1] ? cancel_work_sync+0x20/0x20 [ 506.572103][ C1] ? kobject_put+0x25c/0x450 [ 506.576701][ C1] ? __kmem_cache_free+0xb6/0x200 [ 506.581736][ C1] ? kobject_put+0x41d/0x450 [ 506.586337][ C1] mmc_free_host+0x15/0x30 [ 506.590763][ C1] call_timer_fn+0x1ac/0x670 [ 506.595361][ C1] ? kref_get+0x70/0x70 [ 506.599513][ C1] ? call_timer_fn+0xcf/0x670 [ 506.604185][ C1] ? __run_timers+0x810/0x810 [ 506.608857][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 506.614051][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 506.619240][ C1] ? kref_get+0x70/0x70 [ 506.623392][ C1] __run_timers+0x56c/0x810 [ 506.627895][ C1] ? detach_timer+0x350/0x350 [ 506.632563][ C1] ? lock_chain_count+0x20/0x20 [ 506.637407][ C1] run_timer_softirq+0x63/0xf0 [ 506.642156][ C1] handle_softirqs+0x291/0x910 [ 506.646907][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 506.651744][ C1] ? do_softirq+0x210/0x210 [ 506.656232][ C1] ? hrtimer_interrupt+0x775/0x980 [ 506.661334][ C1] __irq_exit_rcu+0x13b/0x230 [ 506.666520][ C1] ? irq_exit_rcu+0x20/0x20 [ 506.671013][ C1] irq_exit_rcu+0x5/0x20 [ 506.675240][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 506.680864][ C1] [ 506.683783][ C1] [ 506.686704][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 506.692674][ C1] RIP: 0010:lockdep_unregister_key+0x4e8/0x550 [ 506.698825][ C1] Code: 31 ac 90 48 c7 c6 30 b2 64 81 e8 73 a5 07 00 e8 be b8 07 00 e9 5c fc ff ff e8 44 96 cc 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb 88 0f 0b e9 f8 fe ff ff 0f 0b e9 45 ff ff ff [ 506.718514][ C1] RSP: 0018:ffffc90004f6f4e0 EFLAGS: 00000202 [ 506.724568][ C1] RAX: dffffc0000000000 RBX: ffff88805836ba01 RCX: 65cab3831ec66400 [ 506.732524][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c2580 RDI: ffffffff8adf6420 [ 506.740483][ C1] RBP: ffffc90004f6f5c0 R08: ffffffff90ae521f R09: 1ffffffff215ca43 [ 506.748437][ C1] R10: dffffc0000000000 R11: fffffbfff215ca44 R12: 0000000000000a03 [ 506.756398][ C1] R13: ffff88805836ba99 R14: ffffffff90ae31a8 R15: 1ffff920009edea0 [ 506.764363][ C1] ? lockdep_reset_lock+0x300/0x300 [ 506.769554][ C1] ? rcu_is_watching+0x11/0xa0 [ 506.774304][ C1] ? qdisc_reset+0x39e/0x5c0 [ 506.778884][ C1] __qdisc_destroy+0x128/0x430 [ 506.783633][ C1] dev_shutdown+0x351/0x440 [ 506.788128][ C1] unregister_netdevice_many_notify+0xa7e/0x1990 [ 506.794450][ C1] ? unregister_netdevice_many+0x20/0x20 [ 506.800068][ C1] ? trace_contention_end+0x5f/0x170 [ 506.805338][ C1] ? __mutex_lock+0x1ab/0xae0 [ 506.810002][ C1] ? lock_chain_count+0x20/0x20 [ 506.814842][ C1] unregister_netdevice_queue+0x2e5/0x330 [ 506.820552][ C1] ? queue_delayed_work_on+0x19d/0x1f0 [ 506.825994][ C1] ? list_netdevice+0x640/0x640 [ 506.830831][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 506.836103][ C1] nsim_destroy+0x49/0x150 [ 506.840508][ C1] __nsim_dev_port_del+0x155/0x1c0 [ 506.845606][ C1] nsim_dev_reload_destroy+0x283/0x480 [ 506.851053][ C1] nsim_dev_reload_down+0x86/0xb0 [ 506.856067][ C1] devlink_reload+0x202/0x690 [ 506.860731][ C1] ? devlink_resources_validate+0xc0/0xc0 [ 506.866437][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 506.871732][ C1] ? devlinks_xa_find_get+0x319/0x330 [ 506.877106][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 506.882390][ C1] devlink_pernet_pre_exit+0x122/0x280 [ 506.887841][ C1] ? mutex_unlock+0x10/0x10 [ 506.892339][ C1] ? devlink_trap_notify+0x1b0/0x1b0 [ 506.897618][ C1] ? nfct_timeout_pernet+0x1ed/0x230 [ 506.902895][ C1] ? cttimeout_net_pre_exit+0x1f2/0x210 [ 506.908433][ C1] cleanup_net+0x58e/0xba0 [ 506.912847][ C1] ? ops_free_list+0x3b0/0x3b0 [ 506.917604][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.923487][ C1] ? _raw_spin_unlock+0x40/0x40 [ 506.928327][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 506.933517][ C1] ? process_one_work+0x7b4/0x1160 [ 506.938619][ C1] process_one_work+0x8ab/0x1160 [ 506.943551][ C1] ? worker_detach_from_pool+0x240/0x240 [ 506.949175][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 506.954191][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 506.959729][ C1] ? wq_worker_running+0x97/0x190 [ 506.964744][ C1] worker_thread+0xaf5/0x12a0 [ 506.969412][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 506.975296][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 506.981180][ C1] kthread+0x29d/0x330 [ 506.985236][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 506.990247][ C1] ? kthread_blkcg+0xd0/0xd0 [ 506.994823][ C1] ret_from_fork+0x1f/0x30 [ 506.999233][ C1] [ 507.002274][ C1] ODEBUG: object ffffc900001e09a0 is NOT on stack ffffc90004f68000, but annotated. [ 507.011949][ C1] ------------[ cut here ]------------ [ 507.017421][ C1] WARNING: CPU: 1 PID: 4536 at lib/debugobjects.c:558 __debug_object_init+0x18e/0x440 [ 507.026992][ C1] Modules linked in: [ 507.030895][ C1] CPU: 1 PID: 4536 Comm: kworker/u4:16 Tainted: G W syzkaller #0 [ 507.040008][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.050072][ C1] Workqueue: netns cleanup_net [ 507.054860][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 507.060769][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 9e ed dd 12 48 c7 c1 c0 6c df 8a 48 c7 c7 20 6d df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 bd 0b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 507.080403][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 507.086484][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 65cab3831ec66400 [ 507.094468][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 507.102450][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 507.110430][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff888030823c20 [ 507.118403][ C1] R13: ffff888030a17e38 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 507.126381][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 507.135299][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 507.141872][ C1] CR2: 0000001b2fb22ff6 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 507.149829][ C1] DR0: 0000000000000000 DR1: 0000000000006800 DR2: 0000000000009951 [ 507.157781][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 507.165754][ C1] Call Trace: [ 507.169015][ C1] [ 507.171841][ C1] __synchronize_srcu+0x227/0x350 [ 507.176850][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 507.182565][ C1] ? _raw_spin_unlock+0x40/0x40 [ 507.187392][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 507.192920][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 507.197923][ C1] wakeup_source_unregister+0x112/0x190 [ 507.203536][ C1] mmc_host_classdev_release+0x43/0xf0 [ 507.208975][ C1] ? mmc_free_host+0x30/0x30 [ 507.213544][ C1] device_release+0x92/0x1c0 [ 507.218153][ C1] kobject_put+0x217/0x450 [ 507.222548][ C1] call_timer_fn+0x1ac/0x670 [ 507.227115][ C1] ? kref_get+0x70/0x70 [ 507.231250][ C1] ? call_timer_fn+0xcf/0x670 [ 507.235901][ C1] ? __run_timers+0x810/0x810 [ 507.240557][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 507.245733][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 507.250908][ C1] ? kref_get+0x70/0x70 [ 507.255045][ C1] __run_timers+0x56c/0x810 [ 507.259527][ C1] ? detach_timer+0x350/0x350 [ 507.264177][ C1] ? lock_chain_count+0x20/0x20 [ 507.269009][ C1] run_timer_softirq+0x63/0xf0 [ 507.273746][ C1] handle_softirqs+0x291/0x910 [ 507.278485][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 507.283330][ C1] ? do_softirq+0x210/0x210 [ 507.287807][ C1] ? hrtimer_interrupt+0x775/0x980 [ 507.292896][ C1] __irq_exit_rcu+0x13b/0x230 [ 507.297550][ C1] ? irq_exit_rcu+0x20/0x20 [ 507.302031][ C1] irq_exit_rcu+0x5/0x20 [ 507.306247][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 507.311875][ C1] [ 507.314790][ C1] [ 507.317731][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 507.323703][ C1] RIP: 0010:lockdep_unregister_key+0x4e8/0x550 [ 507.329846][ C1] Code: 31 ac 90 48 c7 c6 30 b2 64 81 e8 73 a5 07 00 e8 be b8 07 00 e9 5c fc ff ff e8 44 96 cc 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb 88 0f 0b e9 f8 fe ff ff 0f 0b e9 45 ff ff ff [ 507.349430][ C1] RSP: 0018:ffffc90004f6f4e0 EFLAGS: 00000202 [ 507.355474][ C1] RAX: dffffc0000000000 RBX: ffff88805836ba01 RCX: 65cab3831ec66400 [ 507.363427][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c2580 RDI: ffffffff8adf6420 [ 507.371374][ C1] RBP: ffffc90004f6f5c0 R08: ffffffff90ae521f R09: 1ffffffff215ca43 [ 507.379324][ C1] R10: dffffc0000000000 R11: fffffbfff215ca44 R12: 0000000000000a03 [ 507.387268][ C1] R13: ffff88805836ba99 R14: ffffffff90ae31a8 R15: 1ffff920009edea0 [ 507.395220][ C1] ? lockdep_reset_lock+0x300/0x300 [ 507.400403][ C1] ? rcu_is_watching+0x11/0xa0 [ 507.405146][ C1] ? qdisc_reset+0x39e/0x5c0 [ 507.409716][ C1] __qdisc_destroy+0x128/0x430 [ 507.414460][ C1] dev_shutdown+0x351/0x440 [ 507.418940][ C1] unregister_netdevice_many_notify+0xa7e/0x1990 [ 507.425248][ C1] ? unregister_netdevice_many+0x20/0x20 [ 507.430861][ C1] ? trace_contention_end+0x5f/0x170 [ 507.436125][ C1] ? __mutex_lock+0x1ab/0xae0 [ 507.440779][ C1] ? lock_chain_count+0x20/0x20 [ 507.445609][ C1] unregister_netdevice_queue+0x2e5/0x330 [ 507.451306][ C1] ? queue_delayed_work_on+0x19d/0x1f0 [ 507.456753][ C1] ? list_netdevice+0x640/0x640 [ 507.461579][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 507.466843][ C1] nsim_destroy+0x49/0x150 [ 507.471265][ C1] __nsim_dev_port_del+0x155/0x1c0 [ 507.476364][ C1] nsim_dev_reload_destroy+0x283/0x480 [ 507.481835][ C1] nsim_dev_reload_down+0x86/0xb0 [ 507.486849][ C1] devlink_reload+0x202/0x690 [ 507.491507][ C1] ? devlink_resources_validate+0xc0/0xc0 [ 507.497207][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 507.502475][ C1] ? devlinks_xa_find_get+0x319/0x330 [ 507.507830][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 507.513096][ C1] devlink_pernet_pre_exit+0x122/0x280 [ 507.518537][ C1] ? mutex_unlock+0x10/0x10 [ 507.523018][ C1] ? devlink_trap_notify+0x1b0/0x1b0 [ 507.528281][ C1] ? nfct_timeout_pernet+0x1ed/0x230 [ 507.533546][ C1] ? cttimeout_net_pre_exit+0x1f2/0x210 [ 507.539067][ C1] cleanup_net+0x58e/0xba0 [ 507.543464][ C1] ? ops_free_list+0x3b0/0x3b0 [ 507.548204][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 507.554077][ C1] ? _raw_spin_unlock+0x40/0x40 [ 507.558904][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 507.564079][ C1] ? process_one_work+0x7b4/0x1160 [ 507.569169][ C1] process_one_work+0x8ab/0x1160 [ 507.574103][ C1] ? worker_detach_from_pool+0x240/0x240 [ 507.579714][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 507.584714][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 507.590236][ C1] ? wq_worker_running+0x97/0x190 [ 507.595239][ C1] worker_thread+0xaf5/0x12a0 [ 507.599913][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 507.605781][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 507.611653][ C1] kthread+0x29d/0x330 [ 507.615717][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 507.620720][ C1] ? kthread_blkcg+0xd0/0xd0 [ 507.625285][ C1] ret_from_fork+0x1f/0x30 [ 507.629680][ C1] [ 507.632713][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 507.639984][ C1] CPU: 1 PID: 4536 Comm: kworker/u4:16 Tainted: G W syzkaller #0 [ 507.649079][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 507.659121][ C1] Workqueue: netns cleanup_net [ 507.663875][ C1] Call Trace: [ 507.667137][ C1] [ 507.669965][ C1] dump_stack_lvl+0x188/0x24e [ 507.674630][ C1] ? memcpy+0x3c/0x60 [ 507.678593][ C1] ? show_regs_print_info+0x12/0x12 [ 507.683797][ C1] ? load_image+0x410/0x410 [ 507.688284][ C1] panic+0x2d3/0x710 [ 507.692157][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 507.696642][ C1] ? ret_from_fork+0x1f/0x30 [ 507.701227][ C1] __warn+0x2f8/0x4f0 [ 507.705188][ C1] ? __debug_object_init+0x18e/0x440 [ 507.710451][ C1] ? __debug_object_init+0x18e/0x440 [ 507.715710][ C1] report_bug+0x2ba/0x4f0 [ 507.720088][ C1] ? __debug_object_init+0x18e/0x440 [ 507.725346][ C1] handle_bug+0x3a/0x70 [ 507.729480][ C1] exc_invalid_op+0x16/0x40 [ 507.733974][ C1] asm_exc_invalid_op+0x16/0x20 [ 507.738997][ C1] RIP: 0010:__debug_object_init+0x18e/0x440 [ 507.744882][ C1] Code: 24 04 74 2f 41 ff c6 44 89 35 9e ed dd 12 48 c7 c1 c0 6c df 8a 48 c7 c7 20 6d df 8a 84 c0 48 0f 45 f9 48 89 de e8 32 bd 0b 06 <0f> 0b eb 05 4c 8b 7c 24 18 4d 8d 65 10 4d 89 e6 49 c1 ee 03 41 0f [ 507.764464][ C1] RSP: 0018:ffffc900001e0908 EFLAGS: 00010046 [ 507.770523][ C1] RAX: 0000000000000050 RBX: ffffc900001e09a0 RCX: 65cab3831ec66400 [ 507.778474][ C1] RDX: 0000000000000100 RSI: 0000000000000101 RDI: 0000000000000000 [ 507.786420][ C1] RBP: dffffc0000000000 R08: ffffc900001e0587 R09: 1ffff9200003c0b0 [ 507.794366][ C1] R10: dffffc0000000000 R11: fffff5200003c0b1 R12: ffff888030823c20 [ 507.802315][ C1] R13: ffff888030a17e38 R14: 0000000000000001 R15: ffffffff8a8d3120 [ 507.810268][ C1] ? __debug_object_init+0x18e/0x440 [ 507.815549][ C1] __synchronize_srcu+0x227/0x350 [ 507.820555][ C1] ? synchronize_srcu_expedited+0x20/0x20 [ 507.826252][ C1] ? _raw_spin_unlock+0x40/0x40 [ 507.831080][ C1] ? ktime_get_mono_fast_ns+0x199/0x1b0 [ 507.836618][ C1] ? synchronize_srcu+0x18f/0x1b0 [ 507.841638][ C1] wakeup_source_unregister+0x112/0x190 [ 507.847176][ C1] mmc_host_classdev_release+0x43/0xf0 [ 507.852622][ C1] ? mmc_free_host+0x30/0x30 [ 507.857192][ C1] device_release+0x92/0x1c0 [ 507.861767][ C1] kobject_put+0x217/0x450 [ 507.866182][ C1] call_timer_fn+0x1ac/0x670 [ 507.870747][ C1] ? kref_get+0x70/0x70 [ 507.874879][ C1] ? call_timer_fn+0xcf/0x670 [ 507.879550][ C1] ? __run_timers+0x810/0x810 [ 507.884238][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 507.889424][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 507.894619][ C1] ? kref_get+0x70/0x70 [ 507.898764][ C1] __run_timers+0x56c/0x810 [ 507.903252][ C1] ? detach_timer+0x350/0x350 [ 507.907921][ C1] ? lock_chain_count+0x20/0x20 [ 507.912759][ C1] run_timer_softirq+0x63/0xf0 [ 507.917503][ C1] handle_softirqs+0x291/0x910 [ 507.922247][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 507.927075][ C1] ? do_softirq+0x210/0x210 [ 507.931554][ C1] ? hrtimer_interrupt+0x775/0x980 [ 507.936646][ C1] __irq_exit_rcu+0x13b/0x230 [ 507.941294][ C1] ? irq_exit_rcu+0x20/0x20 [ 507.945772][ C1] irq_exit_rcu+0x5/0x20 [ 507.949989][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 507.955603][ C1] [ 507.958511][ C1] [ 507.961420][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 507.967465][ C1] RIP: 0010:lockdep_unregister_key+0x4e8/0x550 [ 507.973599][ C1] Code: 31 ac 90 48 c7 c6 30 b2 64 81 e8 73 a5 07 00 e8 be b8 07 00 e9 5c fc ff ff e8 44 96 cc 08 41 f7 c4 00 02 00 00 74 d1 fb 84 db <75> d0 eb e1 0f 0b eb 88 0f 0b e9 f8 fe ff ff 0f 0b e9 45 ff ff ff [ 507.993197][ C1] RSP: 0018:ffffc90004f6f4e0 EFLAGS: 00000202 [ 507.999242][ C1] RAX: dffffc0000000000 RBX: ffff88805836ba01 RCX: 65cab3831ec66400 [ 508.007200][ C1] RDX: 0000000000000001 RSI: ffffffff8a8c2580 RDI: ffffffff8adf6420 [ 508.015175][ C1] RBP: ffffc90004f6f5c0 R08: ffffffff90ae521f R09: 1ffffffff215ca43 [ 508.023160][ C1] R10: dffffc0000000000 R11: fffffbfff215ca44 R12: 0000000000000a03 [ 508.031117][ C1] R13: ffff88805836ba99 R14: ffffffff90ae31a8 R15: 1ffff920009edea0 [ 508.039078][ C1] ? lockdep_reset_lock+0x300/0x300 [ 508.044285][ C1] ? rcu_is_watching+0x11/0xa0 [ 508.049032][ C1] ? qdisc_reset+0x39e/0x5c0 [ 508.053621][ C1] __qdisc_destroy+0x128/0x430 [ 508.058369][ C1] dev_shutdown+0x351/0x440 [ 508.062868][ C1] unregister_netdevice_many_notify+0xa7e/0x1990 [ 508.069193][ C1] ? unregister_netdevice_many+0x20/0x20 [ 508.074805][ C1] ? trace_contention_end+0x5f/0x170 [ 508.080068][ C1] ? __mutex_lock+0x1ab/0xae0 [ 508.084737][ C1] ? lock_chain_count+0x20/0x20 [ 508.089598][ C1] unregister_netdevice_queue+0x2e5/0x330 [ 508.095315][ C1] ? queue_delayed_work_on+0x19d/0x1f0 [ 508.100772][ C1] ? list_netdevice+0x640/0x640 [ 508.105603][ C1] ? delayed_work_timer_fn+0x80/0x80 [ 508.110874][ C1] nsim_destroy+0x49/0x150 [ 508.115293][ C1] __nsim_dev_port_del+0x155/0x1c0 [ 508.120386][ C1] nsim_dev_reload_destroy+0x283/0x480 [ 508.125826][ C1] nsim_dev_reload_down+0x86/0xb0 [ 508.130830][ C1] devlink_reload+0x202/0x690 [ 508.135486][ C1] ? devlink_resources_validate+0xc0/0xc0 [ 508.141179][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 508.146444][ C1] ? devlinks_xa_find_get+0x319/0x330 [ 508.151803][ C1] ? devlinks_xa_find_get+0x27/0x330 [ 508.157082][ C1] devlink_pernet_pre_exit+0x122/0x280 [ 508.162530][ C1] ? mutex_unlock+0x10/0x10 [ 508.167019][ C1] ? devlink_trap_notify+0x1b0/0x1b0 [ 508.172283][ C1] ? nfct_timeout_pernet+0x1ed/0x230 [ 508.177558][ C1] ? cttimeout_net_pre_exit+0x1f2/0x210 [ 508.183088][ C1] cleanup_net+0x58e/0xba0 [ 508.187499][ C1] ? ops_free_list+0x3b0/0x3b0 [ 508.192255][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 508.198141][ C1] ? _raw_spin_unlock+0x40/0x40 [ 508.202977][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 508.208156][ C1] ? process_one_work+0x7b4/0x1160 [ 508.213248][ C1] process_one_work+0x8ab/0x1160 [ 508.218168][ C1] ? worker_detach_from_pool+0x240/0x240 [ 508.223779][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 508.228782][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 508.234303][ C1] ? wq_worker_running+0x97/0x190 [ 508.239308][ C1] worker_thread+0xaf5/0x12a0 [ 508.243986][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 508.249855][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 508.255724][ C1] kthread+0x29d/0x330 [ 508.259783][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 508.264783][ C1] ? kthread_blkcg+0xd0/0xd0 [ 508.269346][ C1] ret_from_fork+0x1f/0x30 [ 508.273744][ C1] [ 509.372192][ C1] Shutting down cpus with NMI [ 509.377195][ C1] Kernel Offset: disabled [ 509.381516][ C1] Rebooting in 86400 seconds..