last executing test programs: 6.513564679s ago: executing program 2 (id=156): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/custom0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2843, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x22, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@increfs]}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f00000028c0)={0x2020}, 0x2020) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) r7 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/ptp/ptp0/n_vclocks\x00', 0x2, 0x0) 5.319814288s ago: executing program 2 (id=151): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800800, &(0x7f0000000700)={[{@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@prjquota}, {@jqfmt_vfsv0}, {@noload}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}, {@inlinecrypt}, {@abort}, {@data_err_abort}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x2}}]}, 0x2, 0x24f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./debug\x00', &(0x7f0000000b40)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000b80), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='Y', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000c80)='100', 0x3) close(r2) write(0xffffffffffffffff, &(0x7f0000000cc0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000d40)='5\x00', 0x1) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000000dc0)='1', 0x1) syz_mount_image$f2fs(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000010c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") bpf$PROG_LOAD(0x5, &(0x7f000000ac00)={0x1, 0x4, &(0x7f000000acc0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x61}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f000000ad00)='GPL\x00', 0x5, 0xc3, &(0x7f000000ad40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000000ae40), 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) syz_usb_connect$printer(0x0, 0x36, &(0x7f000000afc0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 5.268320719s ago: executing program 3 (id=153): setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) r0 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$inet6(r0, 0x0, 0x700, 0x120, 0x0, 0x0) bind$l2tp6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) 3.587310951s ago: executing program 3 (id=157): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x44, 0x0, &(0x7f0000000840)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 3.463831004s ago: executing program 3 (id=160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r2, r0}, 0xc) 3.128572012s ago: executing program 3 (id=162): r0 = syz_open_dev$sg(&(0x7f00000006c0), 0x7f, 0x0) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000380)=[{&(0x7f00000003c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)='a', 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000000480)=[{&(0x7f00000004c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f00000005c0)='a', 0x4101}], 0x1, &(0x7f0000000600)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x4}}], 0x30}], 0x1, 0x0) bind$bt_hci(r1, &(0x7f0000000640)={0x1f, 0x0, 0x4}, 0x6) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x5}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000680)=0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1}) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000140)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) io_uring_setup(0x74ef, &(0x7f0000000500)={0x0, 0xdf03, 0x0, 0x2, 0x237, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 2.83587326s ago: executing program 3 (id=165): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) 2.743956372s ago: executing program 3 (id=166): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000040)={0x34, &(0x7f0000000080)={0x0, 0x14, 0x2, "70e5"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 2.519608398s ago: executing program 4 (id=167): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$kcm(0x2, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000028c0)={'macvlan1\x00', 0x10}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 2.505965598s ago: executing program 0 (id=168): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f00000004c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r2, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r2, 0x400c0930, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0) 2.43211408s ago: executing program 0 (id=169): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000004e40)={0x30, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.272014634s ago: executing program 0 (id=170): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000001700)={0x0, 0x0}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x101c42, 0x0) write$binfmt_aout(r0, &(0x7f0000000440)=ANY=[], 0xfffffee2) r1 = gettid() timer_create(0x1, &(0x7f0000000480)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000004c0)=0x0) timer_settime(r2, 0x1, &(0x7f0000000500)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='map_files\x00') getdents(r3, &(0x7f0000000580)=""/4104, 0x1008) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4800) 2.166919426s ago: executing program 1 (id=171): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./dev\x00', &(0x7f00000003c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r0, 0x40480923, &(0x7f00000004c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r0, 0x40140921, 0x0) ioctl(r0, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r0, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r0, 0x400c0930, 0x0) 1.462759114s ago: executing program 2 (id=172): openat$tun(0xffffffffffffff9c, 0x0, 0x129642, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x202000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x20040084) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3902, 0x0) sendfile(r3, r3, 0x0, 0x2000fb) 1.431335705s ago: executing program 4 (id=173): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 1.280077818s ago: executing program 0 (id=174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd24, 0xffffbfff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040080) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'syzkaller0\x00', 0x0}) close(r4) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000800)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000840), 0x56) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f00000008c0)=@xdp={0x2c, 0x0, r6, 0x10042}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000980)="27030200dc0f14000e0003000024c1020000ff", 0x13}, {&(0x7f00000009c0)="88db0b9ef1cafdab", 0x8}, {&(0x7f0000000a00)="f8dbb89bfc5f187cca4335143b54aedd2c3332", 0x13}], 0x3}, 0x24004015) 1.22447545s ago: executing program 4 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x34, 0x6, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004853}, 0x40804) 1.163140071s ago: executing program 4 (id=176): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000044c0)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000004500)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000004580)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfff7e002, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0x6, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x10000, 0x3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000004600)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004680)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x1, 0x4000001, 0x206, 0x6}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x94}, 0x24040084) 1.092919173s ago: executing program 2 (id=177): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket(0x10, 0x80002, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x437, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40489}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) r3 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xa20, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) 1.074511263s ago: executing program 1 (id=178): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000600)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000000c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f00000001c0)='0', 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000780)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x8, 0x0, &(0x7f0000000800)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000840)={0x4c, 0x0, &(0x7f0000000880)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) 1.024075435s ago: executing program 4 (id=179): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000100)='GPL\x00', 0xa, 0xffad, &(0x7f0000000140)=""/133}, 0x94) r0 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./sys\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./dev\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/md0\x00', 0x2, 0x0) ioctl(r2, 0x40480923, &(0x7f00000004c0)="00000000000000000000000000000000050000000010000003000000030000000000000001000000000000000100000003000000030000000000000000000000020000000010") ioctl(r2, 0x40140921, 0x0) ioctl(r2, 0x40140921, &(0x7f0000000540)="0100000001000000010000000100000006") ioctl(r2, 0x40140921, &(0x7f0000000580)="0200000001000000020000000200000006") ioctl(r2, 0x400c0930, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00'], 0x30}], 0x1, 0x0) 1.019279425s ago: executing program 0 (id=180): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000480)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f00000004c0)=0x4, 0x4) 985.433266ms ago: executing program 4 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff07bbbf7f00931c07b2fd"], 0x1c}}, 0x0) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 974.015406ms ago: executing program 1 (id=182): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004801c0001800500010003000000060004000a0a0000060005000a0a0000"], 0xbc}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000002340)={0x0, 0x10, &(0x7f0000002380)=[@in={0x2, 0x0, @local}]}, &(0x7f00000023c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000002400)={r1, 0xf371}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(&(0x7f00000002c0)=@filename='mtd0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000380)='./file0\x00') openat$binderfs(0xffffff9c, &(0x7f0000001e40)='./binderfs/binder0\x00', 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000001ec0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001f80)={0x10, 0x0, &(0x7f0000001fc0)=[@request_death]}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000002300)='file0\x00', 0x42, 0x1ff) ftruncate(r3, 0xf4240) 803.95345ms ago: executing program 0 (id=183): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800800, &(0x7f0000000700)={[{@debug}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@prjquota}, {@jqfmt_vfsv0}, {@noload}, {@usrjquota_path={'usrjquota', 0x3d, '.'}}, {@test_dummy_encryption}, {@inlinecrypt}, {@abort}, {@data_err_abort}, {@test_dummy_encryption}, {@sb={'sb', 0x3d, 0x2}}]}, 0x2, 0x24f, &(0x7f0000000840)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000ac0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000b00)='./debug\x00', &(0x7f0000000b40)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000b80), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000bc0)='./debug/failslab/task-filter\x00', 0x2, 0x0) write(r1, &(0x7f0000000c00)='Y', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./debug/failslab/times\x00', 0x2, 0x0) write(r2, &(0x7f0000000c80)='100', 0x3) close(r2) write(0xffffffffffffffff, &(0x7f0000000cc0), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./debug/failslab/probability\x00', 0x2, 0x0) write(r3, &(0x7f0000000d40)='5\x00', 0x1) r4 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r4, &(0x7f0000000dc0)='1', 0x1) syz_mount_image$f2fs(&(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000010c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") bpf$PROG_LOAD(0x5, &(0x7f000000ac00)={0x1, 0x4, &(0x7f000000acc0)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x61}, [@ldst={0x6, 0x0, 0x5}]}, &(0x7f000000ad00)='GPL\x00', 0x5, 0xc3, &(0x7f000000ad40)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f000000ae40), 0x8}, 0x94) openat(0xffffffffffffff9c, &(0x7f000000aec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 685.140533ms ago: executing program 1 (id=184): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire]}) 398.01921ms ago: executing program 1 (id=185): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}]}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}]}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 394.95077ms ago: executing program 1 (id=186): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f0000000100)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./proc_dir\x00', &(0x7f0000000280)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000680)='./proc_dir/acpi/wakeup\x00', 0x2, 0x103) r1 = syz_open_dev$mtd(&(0x7f0000000980), 0x0, 0x2) ioctl$BLKPG(r1, 0x1269, &(0x7f00000009c0)={0x1, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x10000, 0x1}}) 121.179887ms ago: executing program 2 (id=187): mkdirat(0xffffffffffffff9c, &(0x7f0000020700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000020740)='./sys\x00', &(0x7f0000020780)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000020b00)='md', 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000020b40)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000020b80)='10', 0x2) 0s ago: executing program 2 (id=188): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0x3) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000003ac0)={{r1}, &(0x7f0000003b00), &(0x7f0000003b40)='%ps \x00'}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000003bc0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000003c00)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000003c40)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000003c80)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000003cc0), 0x0, 0x0) read$msr(r5, &(0x7f0000003d00)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r6, &(0x7f0000000400)={'syz1\x00', {0x5, 0x7, 0xffff, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x5, 0xea45, 0xe, 0x1, 0x63, 0x1, 0x6, 0xc, 0x7, 0x9, 0x1, 0x3ff, 0x8000ffe, 0x7fffffff, 0xf, 0x8, 0x800, 0x6, 0x401, 0x4, 0x6, 0x10001, 0xffff, 0x0, 0x4, 0x6, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x939, 0x805, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xffffffff, 0x9, 0x2a, 0x1, 0x23], [0x9, 0x3, 0x9, 0x39b7c38a, 0x80000015, 0x12, 0x802, 0xc, 0x0, 0x2329, 0x6, 0x3, 0x7, 0x6, 0x7, 0x24a, 0x2, 0xfffffff7, 0xfffffffb, 0x3, 0x5, 0x5, 0x80, 0x6, 0x0, 0x40, 0x9d, 0x4, 0xffffffff, 0x2, 0x10004, 0x9a, 0xffffff00, 0x100007ff, 0x6, 0x1, 0x0, 0xe, 0xffff3f16, 0xc, 0x2, 0x5, 0xa, 0x5, 0x2, 0x207, 0x800, 0x5, 0xc5, 0x1, 0x1, 0x9, 0x8, 0x3, 0xffff7ff7, 0x3, 0x24c, 0x1ff, 0xd, 0x5, 0x6, 0x6, 0x280007, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x9, 0x1, 0x8, 0x7aae, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x10001, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x10000, 0xc90, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x4, 0x2, 0x2, 0x1, 0xfffffffe, 0x3, 0x6, 0x8007c12, 0x5, 0x1, 0x0, 0x8000, 0xe, 0x3, 0x4, 0x8, 0xfff, 0xffffff00, 0x100, 0x3fff80, 0x2, 0x0, 0x4, 0xdd, 0x1, 0x9, 0xc3, 0x7, 0x7a3], [0x9, 0x3a8d, 0xffff9a7f, 0x80000000, 0x6, 0x1, 0x1, 0xfffffff3, 0xd077, 0x2, 0xffffffff, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfffffffd, 0x2, 0x66608000, 0x7, 0x7fb, 0x3, 0x0, 0x7, 0x9, 0x3, 0xffff, 0xd, 0x0, 0xfffffffd, 0x1, 0x10001, 0x61, 0x11, 0x6e5, 0xc, 0x100, 0x3, 0x20000000, 0x8, 0x15, 0xffff, 0xec000000, 0x8001, 0x1904, 0x0, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x2]}, 0x45c) mmap(&(0x7f0000926000/0x2000)=nil, 0x2000, 0x1, 0x13, r6, 0x92cad000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000880)={{0x0, 0x1, 0x0, 0xffffffff, 'syz0\x00', 0x71}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.39' (ED25519) to the list of known hosts. [ 51.263274][ T4174] cgroup: Unknown subsys name 'net' [ 51.412950][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 52.660021][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 53.729118][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.737089][ T4193] rdma_rxe: rxe_register_device failed with error -23 [ 53.750770][ T4190] rdma_rxe: rxe_register_device failed with error -23 [ 53.753092][ T4187] rdma_rxe: rxe_register_device failed with error -23 [ 53.758680][ T4190] rdma_rxe: failed to add rxe_eth0 [ 53.766255][ T4186] rdma_rxe: rxe_register_device failed with error -23 [ 53.777090][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.787642][ T4187] rdma_rxe: failed to add rxe_eth0 [ 53.794887][ T4186] rdma_rxe: failed to add rxe_eth0 [ 53.800245][ T4193] rdma_rxe: failed to add rxe_eth0 [ 53.825816][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 53.994591][ T4191] infiniband rxe0: set active [ 54.022297][ T4191] infiniband rxe0: added rxe_eth0 [ 54.030978][ T7] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.043887][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 54.091998][ T4191] RDS/IB: rxe0: added [ 54.096605][ T4191] smc: adding ib device rxe0 with port count 1 [ 54.121474][ T4191] smc: ib device rxe0 port 1 has pnetid [ 54.143163][ T1345] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.179087][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.206877][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 54.219760][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 54.272971][ T4193] chnl_net:caif_netlink_parms(): no params data found [ 54.329512][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.336624][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.346458][ T4190] device bridge_slave_0 entered promiscuous mode [ 54.383587][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.392566][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.407749][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.423765][ T4190] device bridge_slave_1 entered promiscuous mode [ 54.495242][ T1345] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.504124][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.511565][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.520324][ T4186] device bridge_slave_0 entered promiscuous mode [ 54.529652][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.540851][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.566573][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.581528][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.588792][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.596918][ T4186] device bridge_slave_1 entered promiscuous mode [ 54.616717][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.625730][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.635189][ T4187] device bridge_slave_0 entered promiscuous mode [ 54.643644][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.653684][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.663751][ T4193] device bridge_slave_0 entered promiscuous mode [ 54.684068][ T4190] team0: Port device team_slave_0 added [ 54.698326][ T4190] team0: Port device team_slave_1 added [ 54.704336][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.711669][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.719727][ T4187] device bridge_slave_1 entered promiscuous mode [ 54.727431][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.734621][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.742874][ T4193] device bridge_slave_1 entered promiscuous mode [ 54.759415][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.768604][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.770826][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.809106][ T3852] infiniband rxe0: set active [ 54.844689][ T1345] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.846329][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.890754][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.898841][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.925660][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.944557][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.955977][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.973446][ T4186] team0: Port device team_slave_0 added [ 54.979925][ T13] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.990988][ T4191] rxe_eth0 speed is unknown, defaulting to 1000 [ 54.997896][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.004882][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.057358][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.080326][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.110390][ T4186] team0: Port device team_slave_1 added [ 55.148141][ T4193] team0: Port device team_slave_0 added [ 55.190658][ T4190] device hsr_slave_0 entered promiscuous mode [ 55.198254][ T4190] device hsr_slave_1 entered promiscuous mode [ 55.225556][ T4193] team0: Port device team_slave_1 added [ 55.244396][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.251488][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.277870][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.291943][ T4187] team0: Port device team_slave_0 added [ 55.300490][ T4187] team0: Port device team_slave_1 added [ 55.316475][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.323568][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.349841][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.371254][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.378319][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.404444][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.418625][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.425581][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.451556][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.480472][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.487515][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.513752][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.527676][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.534630][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.560745][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.602947][ T4187] device hsr_slave_0 entered promiscuous mode [ 55.610559][ T4187] device hsr_slave_1 entered promiscuous mode [ 55.617800][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.625575][ T4187] Cannot create hsr debugfs directory [ 55.675744][ T4193] device hsr_slave_0 entered promiscuous mode [ 55.682400][ T4193] device hsr_slave_1 entered promiscuous mode [ 55.689838][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.698039][ T4193] Cannot create hsr debugfs directory [ 55.698634][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 55.727992][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 55.734121][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 55.767442][ T4186] device hsr_slave_0 entered promiscuous mode [ 55.774204][ T4186] device hsr_slave_1 entered promiscuous mode [ 55.781084][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 55.787548][ T1345] Bluetooth: hci4: command 0x0409 tx timeout [ 55.793881][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.801740][ T4186] Cannot create hsr debugfs directory [ 55.953575][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 56.069807][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.081128][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.088542][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.096272][ T4191] device bridge_slave_0 entered promiscuous mode [ 56.105114][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.112604][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.120691][ T4191] device bridge_slave_1 entered promiscuous mode [ 56.128033][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.137473][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.156743][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.186029][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.197472][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.239239][ T4191] team0: Port device team_slave_0 added [ 56.246961][ T4191] team0: Port device team_slave_1 added [ 56.279481][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.286462][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.314712][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.344722][ T4190] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.354941][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.362291][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.388608][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.411957][ T4190] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.421418][ T4190] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.452568][ T4190] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.462722][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.477042][ T4191] device hsr_slave_0 entered promiscuous mode [ 56.484502][ T4191] device hsr_slave_1 entered promiscuous mode [ 56.491316][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.499995][ T4191] Cannot create hsr debugfs directory [ 56.513989][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.537093][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.567977][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.620477][ T4186] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.640830][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.648266][ T4186] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.671538][ T4186] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.680941][ T4186] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.752169][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 56.761779][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.780971][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.799396][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.808557][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.817916][ T3051] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.825361][ T3051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.836117][ T4191] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.845177][ T4191] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.856758][ T4191] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.876135][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.892333][ T4191] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.904080][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.912799][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.922550][ T3051] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.929832][ T3051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.938852][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.962199][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.979399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.988334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.996919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.008807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.016701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.027739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.053713][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.070258][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.081462][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.102875][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.112816][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.122316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.131762][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.141333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.159165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.172382][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.190862][ T4193] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.203309][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.212270][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.240609][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.264689][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.273693][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.282998][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.291741][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.298835][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.314366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.323053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.332016][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.339144][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.346904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.374153][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.383441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.412559][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.426040][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.433177][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.442457][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.451637][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.460891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.471239][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.478384][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.486288][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.494514][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.509226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.542708][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.553785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.564406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.573420][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.582640][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.589753][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.598356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.607177][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.616375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.630241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.639023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.646764][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.655614][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.664069][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.671433][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.679813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.704701][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.718199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.730843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.740435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.750614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.759396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 57.768709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 57.776867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.785118][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 57.786102][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.791459][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 57.804941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.805108][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 57.813415][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.828452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.836781][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.851772][ T4193] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 57.860846][ T4264] Bluetooth: hci4: command 0x041b tx timeout [ 57.866771][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.869562][ T4264] Bluetooth: hci0: command 0x041b tx timeout [ 57.882152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.892491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.902162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 57.912136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 57.920709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 57.930309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 57.938850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 57.946276][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.955923][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.964533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.973353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.981977][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.989085][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.997736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.005814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.033716][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.052398][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.066996][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.079824][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.088283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.098621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.107019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.115922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.124695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.133192][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.142486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.151676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.160466][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.167572][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.176491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.185662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.194108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.240378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.257980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.266922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.279573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.313661][ T4187] device veth0_vlan entered promiscuous mode [ 58.336673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.356319][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.365384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 58.375104][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 58.384910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.393850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.403072][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.411643][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 58.420414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 58.435157][ T4187] device veth1_vlan entered promiscuous mode [ 58.468187][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.479527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 58.513366][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.528802][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.536758][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.546093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.555031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.564815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.583988][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.606715][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 58.616153][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.624777][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.636461][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.644686][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.664193][ T4187] device veth0_macvtap entered promiscuous mode [ 58.676576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 58.691028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 58.706397][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.715839][ T4187] device veth1_macvtap entered promiscuous mode [ 58.725667][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.742233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.765692][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.799589][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.812676][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.824214][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.833512][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.843309][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.852700][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.863169][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.873420][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.889549][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.899047][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.908357][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.916863][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.933344][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 58.942531][ T3051] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 58.991340][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.000756][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.010698][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.020189][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.028594][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.036043][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.043976][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.052124][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.064116][ T4190] device veth0_vlan entered promiscuous mode [ 59.079055][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.091399][ T4193] device veth0_vlan entered promiscuous mode [ 59.109167][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.118102][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.146389][ T4190] device veth1_vlan entered promiscuous mode [ 59.166855][ T4193] device veth1_vlan entered promiscuous mode [ 59.176159][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.184445][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.192429][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.200469][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.209867][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.218655][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.226912][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.234805][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.249128][ T4186] device veth0_vlan entered promiscuous mode [ 59.291006][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.300153][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.314202][ T4186] device veth1_vlan entered promiscuous mode [ 59.336565][ T4193] device veth0_macvtap entered promiscuous mode [ 59.349198][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.358968][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.369204][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.378521][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.387137][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.396083][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.405152][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.417303][ T4190] device veth0_macvtap entered promiscuous mode [ 59.439522][ T4193] device veth1_macvtap entered promiscuous mode [ 59.459026][ T3051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.467049][ T3051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.472119][ T4191] device veth0_vlan entered promiscuous mode [ 59.493145][ T4190] device veth1_macvtap entered promiscuous mode [ 59.503388][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.511521][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.520512][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.528725][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.536462][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.545485][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.554126][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.562602][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.585549][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.600192][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.611555][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.626047][ T4191] device veth1_vlan entered promiscuous mode [ 59.642587][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.652140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.661197][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.669787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.678600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.689519][ T4186] device veth0_macvtap entered promiscuous mode [ 59.700504][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.712332][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.723817][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.738289][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.747018][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.755988][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.761197][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.764299][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.774431][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.795498][ T4186] device veth1_macvtap entered promiscuous mode [ 59.804691][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.815310][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.825646][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.838866][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.851618][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.858135][ T2303] Bluetooth: hci2: command 0x040f tx timeout [ 59.859837][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.866586][ T2303] Bluetooth: hci3: command 0x040f tx timeout [ 59.873690][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.884188][ T2303] Bluetooth: hci1: command 0x040f tx timeout [ 59.887622][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.902428][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.911687][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.920645][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.928510][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.937823][ T2303] Bluetooth: hci0: command 0x040f tx timeout [ 59.944116][ T2303] Bluetooth: hci4: command 0x040f tx timeout [ 59.944170][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.978358][ T4191] device veth0_macvtap entered promiscuous mode [ 59.995459][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.012035][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.024942][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.037386][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.049360][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.068157][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.077064][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.088386][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.097003][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.111236][ T4191] device veth1_macvtap entered promiscuous mode [ 60.137410][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.145567][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.161829][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.162886][ T4299] input: syz1 as /devices/virtual/input/input5 [ 60.179338][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.192010][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.202925][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.212878][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.223666][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.235214][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.261260][ T4190] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.275746][ T4190] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.286716][ T4190] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.297837][ T4190] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.317751][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.327051][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.376815][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.389263][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.399862][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.411846][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.423684][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.434581][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.444679][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.456781][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.469542][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.484334][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.495454][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.506971][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.517756][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.529258][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.539975][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.551937][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.568961][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.580002][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.589528][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.599310][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.615884][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.633588][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.645018][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.656298][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.666701][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.678566][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.688818][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.700103][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.712061][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.720477][ T4304] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7'. [ 60.738060][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.745965][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.780357][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.803930][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.813211][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.830219][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.845142][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.856419][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.866427][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.878178][ T4186] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.886897][ T4186] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.896515][ T4186] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.907149][ T4186] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.964863][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.991202][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.012722][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.050007][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.071528][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.100953][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.135358][ T4309] process 'syz.4.5' launched './file0' with NULL argv: empty string added [ 61.149518][ T892] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.173643][ T4278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.199642][ T4278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.226666][ T892] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.255783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.275712][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.277490][ T4305] binder: 4302:4305 unknown command 1074553619 [ 61.291982][ T4305] binder: 4302:4305 ioctl c0306201 200000000640 returned -22 [ 61.421868][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.445833][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.454953][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.462413][ T892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.462432][ T892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.482279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.566057][ T4267] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.576309][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.591299][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.628980][ T892] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.699549][ T4318] binder_alloc: 4317: binder_alloc_buf, no vma [ 61.755577][ T4320] FAULT_INJECTION: forcing a failure. [ 61.755577][ T4320] name failslab, interval 1, probability 0, space 0, times 1 [ 61.793538][ T4320] CPU: 1 PID: 4320 Comm: syz.3.8 Not tainted syzkaller #0 [ 61.800705][ T4320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.810808][ T4320] Call Trace: [ 61.814106][ T4320] [ 61.817061][ T4320] dump_stack_lvl+0x188/0x250 [ 61.821745][ T4320] ? show_regs_print_info+0x20/0x20 [ 61.826949][ T4320] ? load_image+0x410/0x410 [ 61.831448][ T4320] ? __lock_acquire+0x7d40/0x7d40 [ 61.836499][ T4320] should_fail+0x383/0x4b0 [ 61.840911][ T4320] should_failslab+0x5/0x20 [ 61.845402][ T4320] slab_pre_alloc_hook+0x51/0xc0 [ 61.850364][ T4320] __kmalloc+0x6b/0x340 [ 61.854529][ T4320] ? tomoyo_supervisor+0xc5f/0x1190 [ 61.859739][ T4320] tomoyo_supervisor+0xc5f/0x1190 [ 61.864786][ T4320] ? tomoyo_profile+0x50/0x50 [ 61.869481][ T4320] ? vsnprintf+0x1b22/0x1c20 [ 61.874073][ T4320] ? vscnprintf+0x80/0x80 [ 61.878393][ T4320] ? tomoyo_check_acl+0x3a4/0x420 [ 61.883421][ T4320] tomoyo_path_number_perm+0x4fb/0x6b0 [ 61.888874][ T4320] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 61.894329][ T4320] ? __lock_acquire+0x7d40/0x7d40 [ 61.899343][ T4320] ? do_raw_spin_lock+0x128/0x2f0 [ 61.904363][ T4320] ? do_raw_spin_unlock+0x11d/0x230 [ 61.909567][ T4320] ? d_set_d_op+0x25b/0x370 [ 61.914056][ T4320] ? simple_lookup+0xc1/0xf0 [ 61.918630][ T4320] ? lookup_one_qstr_excl+0x11c/0x240 [ 61.923986][ T4320] tomoyo_path_mkdir+0xad/0xf0 [ 61.928743][ T4320] ? tomoyo_path_unlink+0xf0/0xf0 [ 61.933770][ T4320] ? kern_path_create+0x190/0x190 [ 61.938235][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 61.938789][ T4320] security_path_mkdir+0xe0/0x130 [ 61.949811][ T4320] do_mkdirat+0x15e/0x5c0 [ 61.954133][ T4320] ? vfs_mkdir+0x570/0x570 [ 61.958550][ T4320] __x64_sys_mkdirat+0x85/0x90 [ 61.963314][ T4320] do_syscall_64+0x4c/0xa0 [ 61.967727][ T4320] ? clear_bhb_loop+0x30/0x80 [ 61.972396][ T4320] ? clear_bhb_loop+0x30/0x80 [ 61.977213][ T4320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 61.983132][ T4320] RIP: 0033:0x7f0098032559 [ 61.987569][ T4320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.007302][ T4320] RSP: 002b:00007f009628a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 62.015712][ T4320] RAX: ffffffffffffffda RBX: 00007f00982b9fa0 RCX: 00007f0098032559 [ 62.023679][ T4320] RDX: 00000000000001ff RSI: 0000200000000040 RDI: ffffffffffffff9c [ 62.031779][ T4320] RBP: 00007f00980c98b0 R08: 0000000000000000 R09: 0000000000000000 [ 62.039767][ T4320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.047736][ T4320] R13: 00007f00982ba038 R14: 00007f00982b9fa0 R15: 00007ffee76b4418 [ 62.055706][ T4320] [ 62.087332][ T13] Bluetooth: hci3: command 0x0419 tx timeout [ 62.122342][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 62.152676][ T4325] ODEBUG: Out of memory. ODEBUG disabled [ 62.155985][ T7] Bluetooth: hci4: command 0x0419 tx timeout [ 62.192335][ T7] Bluetooth: hci0: command 0x0419 tx timeout [ 62.327572][ T4267] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.447967][ T4267] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.560941][ T4267] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 62.739974][ T4267] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 62.762102][ T4267] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.785360][ T4267] usb 5-1: Product: syz [ 62.802190][ T4267] usb 5-1: Manufacturer: syz [ 62.815645][ T4267] usb 5-1: SerialNumber: syz [ 62.929096][ T4267] usb 5-1: selecting invalid altsetting 1 [ 62.938503][ T4267] usb 5-1: unit 6 not found! [ 63.116356][ T4341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11'. [ 63.477371][ T4266] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 63.667359][ T13] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 63.752445][ T4309] udc-core: couldn't find an available UDC or it's busy [ 63.765298][ T4309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 63.767393][ T4267] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 63.776949][ T4309] udc-core: couldn't find an available UDC or it's busy [ 63.801974][ T4309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 63.837526][ T4267] usb 5-1: cannot get ctl value: req = 0x81, wValue = 0x100, wIndex = 0x200, type = 3 [ 63.869143][ T4267] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 63.879816][ T4266] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 63.899709][ T4267] usb 5-1: USB disconnect, device number 2 [ 63.905938][ T4266] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 63.924139][ T4266] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 63.956741][ T4266] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 63.971109][ T4266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.037463][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 64.038580][ T4266] usb 1-1: invalid MIDI out EP 0 [ 64.057351][ T13] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 64.095409][ T13] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 64.128700][ T4266] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 64.132409][ T4357] fuse: Bad value for 'fd' [ 64.165389][ T4204] udevd[4204]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.189838][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 64.206227][ T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 64.267120][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 64.291661][ T4361] binder: 4356:4361 ioctl c0306201 20000001fb40 returned -14 [ 64.297369][ T13] usb 3-1: SerialNumber: syz [ 64.378096][ T4352] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 64.392127][ T4352] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 64.669513][ T4352] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 64.687754][ T4263] usb 1-1: USB disconnect, device number 2 [ 64.749661][ T4352] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 64.798575][ T4372] netlink: 64 bytes leftover after parsing attributes in process `syz.4.20'. [ 64.832728][ T4372] device syzkaller1 entered promiscuous mode [ 64.855218][ T4372] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 65.275913][ T13] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 65.335879][ T4385] netlink: 'syz.0.23': attribute type 39 has an invalid length. [ 65.520294][ T13] usb 3-1: USB disconnect, device number 2 [ 65.530929][ T13] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 65.918944][ T4405] device gretap1 entered promiscuous mode [ 66.747238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 66.767247][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!! [ 66.777238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.787245][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 66.797240][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.807243][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.827241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.837241][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.847239][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.857236][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 67.097227][ C0] sched: RT throttling activated [ 67.248174][ T4412] binder: 4410:4412 ioctl c0306201 200000000080 returned -14 [ 67.324037][ T1110] rxe_eth0 speed is unknown, defaulting to 1000 [ 67.527799][ T4419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 67.579687][ T4425] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.580699][ T4426] sctp: failed to load transform for md5: -2 [ 68.877568][ T1110] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 69.143667][ T13] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.0001/input/input7 [ 69.216561][ T13] hid-generic 0005:FFFD057E:0305.0001: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 69.336797][ T4466] device syzkaller0 entered promiscuous mode [ 69.366585][ T4267] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 69.387815][ T1110] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 69.542634][ T4263] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 69.596548][ T4478] binder: 4477:4478 ioctl c0306201 200000000080 returned -14 [ 69.622841][ T1110] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 69.947406][ T4263] usb 2-1: unable to get BOS descriptor or descriptor too short [ 70.025604][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.027464][ T4263] usb 2-1: no configurations [ 70.033968][ T1110] usb 5-1: Product: syz [ 70.042630][ T1110] usb 5-1: Manufacturer: syz [ 70.047808][ T1110] usb 5-1: SerialNumber: syz [ 70.064822][ T4263] usb 2-1: can't read configurations, error -22 [ 70.177534][ T4267] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 70.193366][ T4267] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 70.299477][ T4441] udc-core: couldn't find an available UDC or it's busy [ 70.308636][ T4441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 70.347843][ T4267] usb 3-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 70.356925][ T4267] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 70.365922][ T4441] udc-core: couldn't find an available UDC or it's busy [ 70.386463][ T4441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.147563][ T4497] udc-core: couldn't find an available UDC or it's busy [ 71.155015][ T4267] usb 3-1: Product: syz [ 71.165163][ T4267] usb 3-1: Manufacturer: syz [ 71.170123][ T4497] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 71.212548][ T1110] usb 5-1: BOGUS urb xfer, pipe 1 != type 3 [ 71.222535][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.229183][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.725643][ T1110] usb 5-1: USB disconnect, device number 3 [ 72.747282][ C1] usb 5-1: comm data receiver aborted. [ 73.122890][ T4509] binder: 4508:4509 unknown command 1074553620 [ 73.153879][ T4509] binder: 4508:4509 ioctl c0306201 200000000640 returned -22 [ 73.190194][ T4517] udevd[4517]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.076216][ T4548] ======================================================= [ 74.076216][ T4548] WARNING: The mand mount option has been deprecated and [ 74.076216][ T4548] and is ignored by this kernel. Remove the mand [ 74.076216][ T4548] option from the mount to silence this warning. [ 74.076216][ T4548] ======================================================= [ 74.701322][ T26] usb 3-1: USB disconnect, device number 3 [ 74.947774][ T4558] program syz.4.58 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.287383][ T4263] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 76.938918][ T4572] autofs4:pid:4572:autofs_fill_super: called with bogus options [ 77.997354][ T4263] usb 2-1: device not accepting address 4, error -71 [ 78.364919][ T4592] binder: 4591:4592 unknown command 0 [ 78.375233][ T4592] binder: 4591:4592 ioctl c0306201 2000000004c0 returned -22 [ 78.400241][ T1110] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 78.400760][ T4592] binder: 4591:4592 ioctl c0306201 200000000180 returned -14 [ 78.979093][ T1110] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 80.380636][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.390293][ T4604] binder: BINDER_SET_CONTEXT_MGR already set [ 80.418314][ T1110] usb 4-1: Product: syz [ 80.422647][ T1110] usb 4-1: Manufacturer: syz [ 80.431317][ T4604] binder: 4601:4604 ioctl 4018620d 200000004a80 returned -16 [ 80.446889][ T1110] usb 4-1: SerialNumber: syz [ 80.543645][ T1110] usb 4-1: config 0 descriptor?? [ 80.614124][ T1110] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 81.008515][ T4581] udc-core: couldn't find an available UDC or it's busy [ 81.027598][ T4581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.046964][ T4581] udc-core: couldn't find an available UDC or it's busy [ 81.088660][ T4581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.239582][ T1110] gspca_stk1135: reg_w 0x2 err -110 [ 81.246040][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.252723][ T1110] gspca_stk1135: Sensor write failed [ 81.258164][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.264548][ T1110] gspca_stk1135: Sensor write failed [ 81.269965][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.375379][ T1110] gspca_stk1135: Sensor read failed [ 81.380774][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.387099][ T1110] gspca_stk1135: Sensor read failed [ 81.392447][ T1110] gspca_stk1135: Detected sensor type unknown (0x0) [ 81.399126][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.405446][ T1110] gspca_stk1135: Sensor read failed [ 81.410709][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.417036][ T1110] gspca_stk1135: Sensor read failed [ 81.422324][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.556507][ T1107] cfg80211: failed to load regulatory.db [ 81.568442][ T4581] udc-core: couldn't find an available UDC or it's busy [ 81.597737][ T1110] gspca_stk1135: Sensor write failed [ 81.607620][ T4581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.633456][ T4581] udc-core: couldn't find an available UDC or it's busy [ 81.638098][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 81.654675][ T4581] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.816297][ T1110] gspca_stk1135: Sensor write failed [ 81.829769][ T1110] stk1135: probe of 4-1:0.0 failed with error -110 [ 82.017410][ T1110] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 82.248799][ T4326] usb 4-1: USB disconnect, device number 2 [ 82.397797][ T1110] usb 3-1: config 127 has an invalid interface number: 57 but max is 0 [ 82.583575][ T1110] usb 3-1: config 127 has no interface number 0 [ 82.610622][ T1110] usb 3-1: config 127 interface 57 altsetting 0 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 82.817535][ T1110] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=d2.4b [ 82.857359][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.892488][ T1110] usb 3-1: Product: syz [ 82.922507][ T1110] usb 3-1: Manufacturer: syz [ 82.927143][ T1110] usb 3-1: SerialNumber: syz [ 82.967617][ T4624] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 83.061558][ T3852] device veth0_macvtap left promiscuous mode [ 83.114204][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.409925][ T4624] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 83.647542][ T1110] asix 3-1:127.57 (unnamed net_device) (uninitialized): invalid hw address, using random [ 83.921895][ T1110] asix 3-1:127.57 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 83.942550][ T1110] asix 3-1:127.57 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 84.793923][ T4673] binder: BINDER_SET_CONTEXT_MGR already set [ 84.837879][ T4673] binder: 4672:4673 ioctl 4018620d 200000004a80 returned -16 [ 84.946464][ T4682] binder: 4680:4682 ioctl c0306201 200000000080 returned -14 [ 84.961875][ T1110] asix: probe of 3-1:127.57 failed with error -71 [ 84.985618][ T1110] usb 3-1: USB disconnect, device number 4 [ 84.994834][ T4682] binder: BINDER_SET_CONTEXT_MGR already set [ 85.007872][ T4682] binder: 4680:4682 ioctl 4018620d 200000004a80 returned -16 [ 88.208707][ T4723] loop0: detected capacity change from 0 to 32768 [ 88.334199][ T4728] netlink: 'syz.3.101': attribute type 1 has an invalid length. [ 88.343815][ T4728] netlink: 'syz.3.101': attribute type 2 has an invalid length. [ 88.393777][ T4734] binder_alloc: 4733: binder_alloc_buf, no vma [ 88.529467][ T4735] binder: 4731:4735 ioctl c0306201 200000000080 returned -14 [ 88.584072][ T4720] device-mapper: thin: Data device (loop1) discard unsupported: Disabling discard passdown. [ 89.673512][ T4754] netlink: 131 bytes leftover after parsing attributes in process `syz.3.106'. [ 91.468032][ T4758] binder_alloc: 4757: binder_alloc_buf, no vma [ 91.911422][ T4764] binder: 4763:4764 ioctl c0306201 0 returned -14 [ 92.014853][ T4769] binder_alloc: 4767: binder_alloc_buf, no vma [ 92.104251][ T4779] FAULT_INJECTION: forcing a failure. [ 92.104251][ T4779] name failslab, interval 1, probability 0, space 0, times 0 [ 92.109722][ T4780] Unsupported digest algo: 92 [ 92.123465][ T4779] CPU: 0 PID: 4779 Comm: syz.2.118 Not tainted syzkaller #0 [ 92.130876][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.140942][ T4779] Call Trace: [ 92.144318][ T4779] [ 92.147257][ T4779] dump_stack_lvl+0x188/0x250 [ 92.151947][ T4779] ? show_regs_print_info+0x20/0x20 [ 92.157161][ T4779] ? load_image+0x410/0x410 [ 92.161676][ T4779] ? __might_sleep+0xf0/0xf0 [ 92.166282][ T4779] ? __lock_acquire+0x7d40/0x7d40 [ 92.171395][ T4779] should_fail+0x383/0x4b0 [ 92.175829][ T4779] should_failslab+0x5/0x20 [ 92.178592][ T4780] FAULT_INJECTION: forcing a failure. [ 92.178592][ T4780] name failslab, interval 1, probability 0, space 0, times 0 [ 92.180332][ T4779] slab_pre_alloc_hook+0x51/0xc0 [ 92.198112][ T4779] ? __d_alloc+0x27/0x6d0 [ 92.202440][ T4779] kmem_cache_alloc+0x3d/0x280 [ 92.207197][ T4779] __d_alloc+0x27/0x6d0 [ 92.211342][ T4779] d_alloc_name+0xb7/0x320 [ 92.215751][ T4779] ? do_raw_spin_unlock+0x11d/0x230 [ 92.220938][ T4779] ? d_alloc_pseudo+0x70/0x70 [ 92.225606][ T4779] ? do_raw_spin_unlock+0x11d/0x230 [ 92.230793][ T4779] simple_fill_super+0x2db/0x5e0 [ 92.235729][ T4779] nfsd_fill_super+0x80/0x110 [ 92.240393][ T4779] ? nfsd_fs_get_tree+0xc0/0xc0 [ 92.245239][ T4779] get_tree_keyed+0xd8/0x190 [ 92.249825][ T4779] vfs_get_tree+0x88/0x270 [ 92.254326][ T4779] do_new_mount+0x247/0xa40 [ 92.258830][ T4779] __se_sys_mount+0x2e3/0x3d0 [ 92.263504][ T4779] ? __x64_sys_mount+0xc0/0xc0 [ 92.268261][ T4779] ? lockdep_hardirqs_on+0x94/0x140 [ 92.273454][ T4779] ? __x64_sys_mount+0x1c/0xc0 [ 92.278213][ T4779] do_syscall_64+0x4c/0xa0 [ 92.282709][ T4779] ? clear_bhb_loop+0x30/0x80 [ 92.287376][ T4779] ? clear_bhb_loop+0x30/0x80 [ 92.292043][ T4779] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.297925][ T4779] RIP: 0033:0x7ff55ce1d559 [ 92.302329][ T4779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.322099][ T4779] RSP: 002b:00007ff55b075028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 92.330500][ T4779] RAX: ffffffffffffffda RBX: 00007ff55d0a4fa0 RCX: 00007ff55ce1d559 [ 92.338651][ T4779] RDX: 0000200000000480 RSI: 0000200000000440 RDI: 0000000000000000 [ 92.346631][ T4779] RBP: 00007ff55ceb48b0 R08: 0000000000000000 R09: 0000000000000000 [ 92.354589][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.362546][ T4779] R13: 00007ff55d0a5038 R14: 00007ff55d0a4fa0 R15: 00007fff168519c8 [ 92.370523][ T4779] [ 92.373532][ T4780] CPU: 1 PID: 4780 Comm: syz.4.119 Not tainted syzkaller #0 [ 92.380826][ T4780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.390878][ T4780] Call Trace: [ 92.394147][ T4780] [ 92.397061][ T4780] dump_stack_lvl+0x188/0x250 [ 92.401731][ T4780] ? show_regs_print_info+0x20/0x20 [ 92.406913][ T4780] ? load_image+0x410/0x410 [ 92.411405][ T4780] should_fail+0x383/0x4b0 [ 92.415809][ T4780] should_failslab+0x5/0x20 [ 92.420296][ T4780] slab_pre_alloc_hook+0x51/0xc0 [ 92.425320][ T4780] ? __sigqueue_alloc+0x3a6/0x4b0 [ 92.430332][ T4780] kmem_cache_alloc+0x3d/0x280 [ 92.435095][ T4780] __sigqueue_alloc+0x3a6/0x4b0 [ 92.439941][ T4780] __send_signal+0x223/0xd40 [ 92.444514][ T4780] do_notify_parent+0xa90/0xc90 [ 92.449374][ T4780] ? trace_signal_generate+0x1c0/0x1c0 [ 92.454818][ T4780] ? __lock_acquire+0x7d40/0x7d40 [ 92.459930][ T4780] release_task+0x1190/0x15f0 [ 92.464596][ T4780] ? do_exit+0x14e2/0x2110 [ 92.469200][ T4780] ? delayed_put_task_struct+0x260/0x260 [ 92.474818][ T4780] ? _raw_write_lock_irq+0xb7/0xf0 [ 92.480037][ T4780] ? _raw_write_lock_irqsave+0x100/0x100 [ 92.485656][ T4780] ? _raw_write_unlock_irq+0x1f/0x40 [ 92.490960][ T4780] ? lockdep_hardirqs_on+0x94/0x140 [ 92.496166][ T4780] do_exit+0x14e2/0x2110 [ 92.500405][ T4780] ? put_task_struct+0x80/0x80 [ 92.505177][ T4780] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 92.511150][ T4780] ? _raw_spin_lock_irq+0xb7/0xf0 [ 92.516166][ T4780] do_group_exit+0x12c/0x2f0 [ 92.520749][ T4780] ? lockdep_hardirqs_on+0x94/0x140 [ 92.525939][ T4780] get_signal+0x7eb/0x12e0 [ 92.530351][ T4780] arch_do_signal_or_restart+0xe6/0x12a0 [ 92.535979][ T4780] ? futex_exit_release+0x1c0/0x1c0 [ 92.541164][ T4780] ? get_sigframe_size+0x10/0x10 [ 92.546089][ T4780] ? __context_tracking_exit+0x4c/0x80 [ 92.551554][ T4780] ? exit_to_user_mode_loop+0x3b/0x130 [ 92.557013][ T4780] exit_to_user_mode_loop+0x9e/0x130 [ 92.562298][ T4780] exit_to_user_mode_prepare+0xee/0x180 [ 92.567872][ T4780] syscall_exit_to_user_mode+0x16/0x40 [ 92.573329][ T4780] do_syscall_64+0x58/0xa0 [ 92.577730][ T4780] ? clear_bhb_loop+0x30/0x80 [ 92.582400][ T4780] ? clear_bhb_loop+0x30/0x80 [ 92.587104][ T4780] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.592995][ T4780] RIP: 0033:0x7f7391dbb559 [ 92.597402][ T4780] Code: Unable to access opcode bytes at RIP 0x7f7391dbb52f. [ 92.604747][ T4780] RSP: 002b:00007f73900130e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 92.613151][ T4780] RAX: 0000000000000001 RBX: 00007f7392042fa8 RCX: 00007f7391dbb559 [ 92.621257][ T4780] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7392042fac [ 92.629226][ T4780] RBP: 00007f7392042fa0 R08: 000606cde8fe532a R09: 0000000000000000 [ 92.637188][ T4780] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 92.645146][ T4780] R13: 00007f7392043038 R14: 00007ffd87311a70 R15: 00007ffd87311b58 [ 92.653110][ T4780] [ 92.821575][ T4792] binder: 4791:4792 ioctl c0306201 200000000080 returned -14 [ 92.829207][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.838457][ T4792] binder: BINDER_SET_CONTEXT_MGR already set [ 92.844760][ T4792] binder: 4791:4792 ioctl 4018620d 200000004a80 returned -16 [ 92.968596][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.015036][ T4806] binder: 4805:4806 ioctl c0306201 0 returned -14 [ 93.074940][ T4811] binder_alloc: 4810: binder_alloc_buf, no vma [ 93.122189][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.129'. [ 93.239086][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 93.271406][ T7] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 93.296506][ T4819] pit: kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 93.307364][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 93.330406][ T4819] pit: kvm: requested 98895 ns i8254 timer period limited to 200000 ns [ 93.371041][ T4819] pit: kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 93.408251][ T4819] pit: kvm: requested 72076 ns i8254 timer period limited to 200000 ns [ 93.438220][ T4819] pit: kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 93.457714][ T13] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 93.470761][ T13] usb 5-1: config 0 has no interface number 0 [ 93.477793][ T7] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 93.490835][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.499969][ T13] usb 5-1: config 0 interface 184 has no altsetting 0 [ 93.507826][ T4819] pit: kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 93.516335][ T7] usb 4-1: Product: syz [ 93.521475][ T7] usb 4-1: Manufacturer: syz [ 93.526093][ T7] usb 4-1: SerialNumber: syz [ 93.531785][ T4819] pit: kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 93.550085][ T7] usb 4-1: config 0 descriptor?? [ 93.582526][ T4819] pit: kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 93.591510][ T4772] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.599946][ T4772] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.617556][ T4819] pit: kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 93.630966][ T4819] pit: kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 93.705437][ T13] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 93.733504][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.757525][ T13] usb 5-1: Product: syz [ 93.761842][ T13] usb 5-1: Manufacturer: syz [ 93.766747][ T13] usb 5-1: SerialNumber: syz [ 93.783970][ T13] usb 5-1: config 0 descriptor?? [ 93.835560][ T4772] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 93.838805][ T13] smsc75xx v1.0.0 [ 93.857614][ T4772] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 94.107583][ T4846] binder: 4845:4846 ioctl c0306201 0 returned -14 [ 94.156758][ T4850] binder_alloc: 4849: binder_alloc_buf, no vma [ 94.937348][ T7] Error reading MAC address [ 94.974991][ T7] usb 4-1: USB disconnect, device number 3 [ 95.207497][ T13] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 95.229143][ T13] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 95.707345][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 96.764715][ T4887] binder: 4881:4887 ioctl c0306201 200000000b40 returned -14 [ 96.907619][ T13] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 96.937369][ T13] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 96.960003][ T4900] hugetlbfs: syz.3.153 (4900): Using mlock ulimits for SHM_HUGETLB is deprecated [ 96.963210][ T4897] loop2: detected capacity change from 0 to 128 [ 98.063270][ T4897] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.294866][ T13] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 98.381569][ T4897] EXT4-fs (loop2): inline encryption not supported [ 98.483479][ T4897] EXT4-fs (loop2): Test dummy encryption mode enabled [ 98.493916][ T13] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 98.570160][ T4897] EXT4-fs (loop2): Project quota feature not enabled. Cannot enable project quota enforcement. [ 98.605341][ T13] usb 5-1: USB disconnect, device number 4 [ 98.806547][ T4897] FAULT_INJECTION: forcing a failure. [ 98.806547][ T4897] name failslab, interval 1, probability 5, space 0, times 100 [ 98.833129][ T4897] CPU: 0 PID: 4897 Comm: syz.2.151 Not tainted syzkaller #0 [ 98.840464][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.850536][ T4897] Call Trace: [ 98.853811][ T4897] [ 98.856732][ T4897] dump_stack_lvl+0x188/0x250 [ 98.861410][ T4897] ? show_regs_print_info+0x20/0x20 [ 98.866610][ T4897] ? load_image+0x410/0x410 [ 98.871136][ T4897] should_fail+0x383/0x4b0 [ 98.875568][ T4897] should_failslab+0x5/0x20 [ 98.880062][ T4897] slab_pre_alloc_hook+0x51/0xc0 [ 98.884991][ T4897] ? vm_area_alloc+0x20/0xe0 [ 98.889575][ T4897] kmem_cache_alloc+0x3d/0x280 [ 98.894344][ T4897] vm_area_alloc+0x20/0xe0 [ 98.898774][ T4897] mmap_region+0xbd2/0x1730 [ 98.903279][ T4897] ? get_unmapped_area+0x2f0/0x360 [ 98.908392][ T4897] do_mmap+0x801/0xe30 [ 98.912458][ T4897] ? vm_mmap_pgoff+0x16c/0x2d0 [ 98.917216][ T4897] vm_mmap_pgoff+0x1c1/0x2d0 [ 98.921817][ T4897] ? account_locked_vm+0xe0/0xe0 [ 98.926825][ T4897] ? __context_tracking_exit+0x4c/0x80 [ 98.932456][ T4897] ? __lock_acquire+0x7d40/0x7d40 [ 98.937494][ T4897] ksys_mmap_pgoff+0x140/0x790 [ 98.942255][ T4897] ? mmap_region+0x1730/0x1730 [ 98.947017][ T4897] ? lockdep_hardirqs_on+0x94/0x140 [ 98.952214][ T4897] do_syscall_64+0x4c/0xa0 [ 98.956626][ T4897] ? clear_bhb_loop+0x30/0x80 [ 98.961298][ T4897] ? clear_bhb_loop+0x30/0x80 [ 98.966007][ T4897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.971911][ T4897] RIP: 0033:0x7ff55ce1d2c2 [ 98.976317][ T4897] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 98.996029][ T4897] RSP: 002b:00007ff55b074df8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 99.004458][ T4897] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff55ce1d2c2 [ 99.012476][ T4897] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 99.020444][ T4897] RBP: 0000000000000022 R08: 00000000ffffffff R09: 0000000000000000 [ 99.028408][ T4897] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000007 [ 99.036384][ T4897] R13: 00007ff55b074ee0 R14: 00007ff55b074ea0 R15: 0000200000000e80 [ 99.044360][ T4897] [ 99.438610][ T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 99.487547][ T4897] FAULT_INJECTION: forcing a failure. [ 99.487547][ T4897] name failslab, interval 1, probability 5, space 0, times 99 [ 99.532904][ T4897] CPU: 0 PID: 4897 Comm: syz.2.151 Not tainted syzkaller #0 [ 99.540247][ T4897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.550312][ T4897] Call Trace: [ 99.553596][ T4897] [ 99.556532][ T4897] dump_stack_lvl+0x188/0x250 [ 99.561233][ T4897] ? show_regs_print_info+0x20/0x20 [ 99.566443][ T4897] ? load_image+0x410/0x410 [ 99.570955][ T4897] ? prandom_u32+0x217/0x250 [ 99.575646][ T4897] should_fail+0x383/0x4b0 [ 99.580084][ T4897] should_failslab+0x5/0x20 [ 99.584691][ T4897] slab_pre_alloc_hook+0x51/0xc0 [ 99.589645][ T4897] __kmalloc+0x6b/0x340 [ 99.593811][ T4897] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 99.599545][ T4897] tomoyo_realpath_from_path+0xed/0x5e0 [ 99.605128][ T4897] tomoyo_path_number_perm+0x251/0x6b0 [ 99.610608][ T4897] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 99.616089][ T4897] ? make_qualifier+0x3b0/0x3b0 [ 99.620996][ T4897] security_file_ioctl+0x6c/0xa0 [ 99.625953][ T4897] __se_sys_ioctl+0x48/0x170 [ 99.630550][ T4897] do_syscall_64+0x4c/0xa0 [ 99.634982][ T4897] ? clear_bhb_loop+0x30/0x80 [ 99.639674][ T4897] ? clear_bhb_loop+0x30/0x80 [ 99.644374][ T4897] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 99.650276][ T4897] RIP: 0033:0x7ff55ce1d1eb [ 99.654942][ T4897] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 99.674568][ T4897] RSP: 002b:00007ff55b072f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 99.683002][ T4897] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00007ff55ce1d1eb [ 99.690991][ T4897] RDX: 00007ff55b072fc0 RSI: 0000000040085503 RDI: 0000000000000007 [ 99.698983][ T4897] RBP: 00007ff55b073fd0 R08: 0000000000000040 R09: 00007ff55b072fc8 [ 99.706976][ T4897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 99.715055][ T4897] R13: 0000000800000000 R14: 0000000000000012 R15: 00007ff55ced33f9 [ 99.723146][ T4897] [ 99.757480][ T4897] ERROR: Out of memory at tomoyo_realpath_from_path. [ 99.917794][ T4268] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.014930][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 100.227973][ T13] usb 3-1: unable to read config index 0 descriptor/all [ 100.262264][ T13] usb 3-1: can't read configurations, error -71 [ 100.557752][ T4268] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 100.756059][ T4268] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.766126][ T4268] usb 4-1: Product: syz [ 100.772034][ T4268] usb 4-1: Manufacturer: syz [ 100.776677][ T4268] usb 4-1: SerialNumber: syz [ 100.803388][ T4974] binder: BINDER_SET_CONTEXT_MGR already set [ 100.819306][ T4268] usb 4-1: config 0 descriptor?? [ 100.846437][ T4974] binder: 4973:4974 ioctl 4018620d 200000004a80 returned -16 [ 100.879099][ T4268] ch341 4-1:0.0: ch341-uart converter detected [ 100.901153][ T4971] md/raid:md0: device ram2 operational as raid disk 2 [ 100.923993][ T4971] md/raid:md0: device ram1 operational as raid disk 1 [ 101.001674][ T4971] md/raid:md0: raid level 5 active with 2 out of 3 devices, algorithm 2 [ 101.039417][ T4971] md0: detected capacity change from 0 to 16384 [ 101.052881][ T4990] device syzkaller0 entered promiscuous mode [ 101.306166][ T5009] jffs2: notice: (5009) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 101.411090][ T5016] FAULT_INJECTION: forcing a failure. [ 101.411090][ T5016] name failslab, interval 1, probability 5, space 0, times 100 [ 101.426201][ T5016] CPU: 0 PID: 5016 Comm: syz.0.183 Not tainted syzkaller #0 [ 101.433534][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.443608][ T5016] Call Trace: [ 101.446903][ T5016] [ 101.449850][ T5016] dump_stack_lvl+0x188/0x250 [ 101.454553][ T5016] ? show_regs_print_info+0x20/0x20 [ 101.459769][ T5016] ? load_image+0x410/0x410 [ 101.464295][ T5016] ? prandom_u32+0x217/0x250 [ 101.468896][ T5016] should_fail+0x383/0x4b0 [ 101.473322][ T5016] should_failslab+0x5/0x20 [ 101.477836][ T5016] slab_pre_alloc_hook+0x51/0xc0 [ 101.482824][ T5016] ? ptlock_alloc+0x1c/0x60 [ 101.487352][ T5016] kmem_cache_alloc+0x3d/0x280 [ 101.492139][ T5016] ptlock_alloc+0x1c/0x60 [ 101.496482][ T5016] pte_alloc_one+0xc0/0x310 [ 101.501007][ T5016] ? rcu_lock_release+0x20/0x20 [ 101.505885][ T5016] ? count_memcg_event_mm+0x324/0x370 [ 101.511483][ T5016] ? remove_device_exclusive_entry+0xac0/0xac0 [ 101.517642][ T5016] ? userfaultfd_unmap_complete+0x28f/0x310 [ 101.523569][ T5016] ? verify_lock_unused+0x140/0x140 [ 101.528773][ T5016] __pte_alloc+0x21/0x150 [ 101.533121][ T5016] handle_mm_fault+0x39d9/0x4440 [ 101.538186][ T5016] ? get_page+0xe0/0xe0 [ 101.542369][ T5016] ? vmacache_find+0x4f0/0x590 [ 101.547139][ T5016] ? vmacache_update+0xa0/0x100 [ 101.552018][ T5016] ? find_vma+0x1df/0x230 [ 101.556359][ T5016] do_user_addr_fault+0x494/0xc90 [ 101.561397][ T5016] exc_page_fault+0x60/0x100 [ 101.566082][ T5016] ? clear_bhb_loop+0x30/0x80 [ 101.570762][ T5016] asm_exc_page_fault+0x22/0x30 [ 101.575620][ T5016] RIP: 0033:0x7f3a3801934e [ 101.580057][ T5016] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 101.599685][ T5016] RSP: 002b:00007f3a363b9470 EFLAGS: 00010246 [ 101.605776][ T5016] RAX: 0000000000000001 RBX: 00007f3a363b9530 RCX: 0000000000000101 [ 101.613842][ T5016] RDX: 0000000000000010 RSI: 0000000000000001 RDI: 00007f3a363b95d0 [ 101.621818][ T5016] RBP: 0000000000000102 R08: 00007f3a2df9a000 R09: 0000000000000000 [ 101.630471][ T5016] R10: 0000000000000000 R11: 00007f3a363b9540 R12: 0000000000000001 [ 101.638445][ T5016] R13: 00007f3a38219b40 R14: 0000000000000000 R15: 00007f3a363b95d0 [ 101.646471][ T5016] [ 101.651423][ T4268] usb 4-1: failed to send control message: -71 [ 101.652259][ T5016] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 101.659690][ T4268] ch341-uart: probe of ttyUSB0 failed with error -71 [ 101.683547][ T5016] FAULT_INJECTION: forcing a failure. [ 101.683547][ T5016] name failslab, interval 1, probability 5, space 0, times 99 [ 101.687759][ T4268] usb 4-1: USB disconnect, device number 4 [ 101.705867][ T5016] CPU: 1 PID: 5016 Comm: syz.0.183 Not tainted syzkaller #0 [ 101.713528][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.715836][ T4268] ch341 4-1:0.0: device disconnected [ 101.723735][ T5016] Call Trace: [ 101.723837][ T5016] [ 101.723847][ T5016] dump_stack_lvl+0x188/0x250 [ 101.723874][ T5016] ? show_regs_print_info+0x20/0x20 [ 101.738904][ T5021] binder: 5020:5021 ioctl c0306201 200000000080 returned -14 [ 101.740058][ T5016] ? load_image+0x410/0x410 [ 101.740088][ T5016] ? prandom_u32+0x217/0x250 [ 101.740112][ T5016] should_fail+0x383/0x4b0 [ 101.740134][ T5016] should_failslab+0x5/0x20 [ 101.770641][ T5016] slab_pre_alloc_hook+0x51/0xc0 [ 101.775603][ T5016] ? ptlock_alloc+0x1c/0x60 [ 101.780132][ T5016] kmem_cache_alloc+0x3d/0x280 [ 101.785033][ T5016] ptlock_alloc+0x1c/0x60 [ 101.789385][ T5016] pte_alloc_one+0xc0/0x310 [ 101.793994][ T5016] ? rcu_lock_release+0x20/0x20 [ 101.798864][ T5016] ? count_memcg_event_mm+0x324/0x370 [ 101.804263][ T5016] ? remove_device_exclusive_entry+0xac0/0xac0 [ 101.810535][ T5016] ? verify_lock_unused+0x140/0x140 [ 101.815822][ T5016] __pte_alloc+0x21/0x150 [ 101.818929][ T5025] 0x000000000000-0x000000010000 : "" [ 101.820191][ T5016] handle_mm_fault+0x39d9/0x4440 [ 101.820232][ T5016] ? get_page+0xe0/0xe0 [ 101.820255][ T5016] ? vmacache_find+0x52a/0x590 [ 101.839983][ T5016] ? find_vma+0xd2/0x230 [ 101.844249][ T5016] do_user_addr_fault+0x494/0xc90 [ 101.849309][ T5016] exc_page_fault+0x60/0x100 [ 101.850704][ T5025] ftl_cs: FTL header not found. [ 101.853916][ T5016] asm_exc_page_fault+0x22/0x30 [ 101.853947][ T5016] RIP: 0033:0x7f3a3801934e [ 101.853965][ T5016] Code: c1 49 39 4f 08 72 54 8d 4d ff 85 ed 74 3b 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 <47> 0f b6 0c 08 45 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 [ 101.853977][ T5016] RSP: 002b:00007f3a363b9470 EFLAGS: 00010206 [ 101.862836][ T5025] FAULT_INJECTION: forcing a failure. [ 101.862836][ T5025] name failslab, interval 1, probability 5, space 0, times 99 [ 101.864755][ T5016] [ 101.864765][ T5016] RAX: 0000000000066001 RBX: 00007f3a363b9530 RCX: 00000000000000b5 [ 101.864778][ T5016] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f3a363b95d0 [ 101.864789][ T5016] RBP: 0000000000000102 R08: 00007f3a2df9a000 R09: 0000000000066000 [ 101.934083][ T5016] R10: 0000000000000000 R11: 00007f3a363b9540 R12: 0000000000000001 [ 101.942078][ T5016] R13: 00007f3a38219b40 R14: 0000000000000000 R15: 00007f3a363b95d0 [ 101.950062][ T5016] [ 101.953087][ T5025] CPU: 0 PID: 5025 Comm: syz.1.186 Not tainted syzkaller #0 [ 101.960386][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.970449][ T5025] Call Trace: [ 101.973748][ T5025] [ 101.976728][ T5025] dump_stack_lvl+0x188/0x250 [ 101.981426][ T5025] ? show_regs_print_info+0x20/0x20 [ 101.986649][ T5025] ? load_image+0x410/0x410 [ 101.991179][ T5025] ? __might_sleep+0xf0/0xf0 [ 101.995816][ T5025] ? __lock_acquire+0x7d40/0x7d40 [ 102.001045][ T5025] should_fail+0x383/0x4b0 [ 102.005517][ T5025] should_failslab+0x5/0x20 [ 102.010036][ T5025] slab_pre_alloc_hook+0x51/0xc0 [ 102.015299][ T5025] ? __kernfs_new_node+0xe3/0x6b0 [ 102.015582][ T5016] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 102.020347][ T5025] kmem_cache_alloc+0x3d/0x280 [ 102.020375][ T5025] __kernfs_new_node+0xe3/0x6b0 [ 102.020395][ T5025] ? __lock_acquire+0x7d40/0x7d40 [ 102.020415][ T5025] ? kernfs_new_node+0x250/0x250 [ 102.020442][ T5025] ? kernfs_activate+0x1eb/0x210 [ 102.020462][ T5025] kernfs_new_node+0x148/0x250 [ 102.020485][ T5025] __kernfs_create_file+0x47/0x2e0 [ 102.020506][ T5025] sysfs_add_file_mode_ns+0x2d2/0x390 [ 102.020530][ T5025] internal_create_group+0x492/0xd00 [ 102.020565][ T5025] ? sysfs_create_group+0x20/0x20 [ 102.020580][ T5025] ? kernfs_activate+0x1eb/0x210 [ 102.020602][ T5025] ? kernfs_add_one+0x564/0x6c0 [ 102.020626][ T5025] sysfs_create_groups+0x55/0x120 [ 102.020647][ T5025] device_add_attrs+0xcc/0x690 [ 102.020668][ T5025] device_add+0x677/0x1050 [ 102.020691][ T5025] device_add_disk+0x3ab/0xde0 [ 102.020720][ T5025] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 102.020747][ T5025] mtdblock_add_mtd+0x186/0x240 [ 102.020768][ T5025] blktrans_notify_add+0x95/0xe0 [ 102.020787][ T5025] add_mtd_device+0xd40/0x1260 [ 102.020818][ T5025] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 102.020846][ T5025] ? mtd_cls_resume+0x130/0x130 [ 102.020878][ T5025] mtd_add_partition+0x25d/0x420 [ 102.143186][ T5025] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 102.148430][ T5025] ? shrink_ecclayout+0xab0/0xab0 [ 102.153503][ T5025] ? __might_fault+0xb3/0x110 [ 102.158201][ T5025] ? _copy_from_user+0x111/0x170 [ 102.163162][ T5025] mtdchar_ioctl+0x14cb/0x1d70 [ 102.168457][ T5025] ? mtdchar_close+0x180/0x180 [ 102.173265][ T5025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 102.179259][ T5025] ? verify_lock_unused+0x140/0x140 [ 102.184892][ T5025] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 102.190549][ T5025] ? rcu_lock_release+0x5/0x20 [ 102.195367][ T5025] ? __mutex_trylock_common+0x15c/0x260 [ 102.200939][ T5025] ? rcu_lock_release+0x20/0x20 [ 102.205822][ T5025] ? __mutex_lock_common+0x435/0x2400 [ 102.211214][ T5025] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 102.216603][ T5025] ? mutex_lock_io_nested+0x60/0x60 [ 102.221841][ T5025] mtdchar_unlocked_ioctl+0xad/0xd0 [ 102.226032][ T5016] FAULT_INJECTION: forcing a failure. [ 102.226032][ T5016] name failslab, interval 1, probability 5, space 0, times 98 [ 102.227054][ T5025] ? mtdchar_write+0x5a0/0x5a0 [ 102.227081][ T5025] __se_sys_ioctl+0xfa/0x170 [ 102.227100][ T5025] do_syscall_64+0x4c/0xa0 [ 102.254026][ T5025] ? clear_bhb_loop+0x30/0x80 [ 102.258705][ T5025] ? clear_bhb_loop+0x30/0x80 [ 102.263387][ T5025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.269268][ T5025] RIP: 0033:0x7f09104e8559 [ 102.273672][ T5025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.293359][ T5025] RSP: 002b:00007f090e740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.301769][ T5025] RAX: ffffffffffffffda RBX: 00007f091076ffa0 RCX: 00007f09104e8559 [ 102.309729][ T5025] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000005 [ 102.317693][ T5025] RBP: 00007f091057f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 102.325786][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.333760][ T5025] R13: 00007f0910770038 R14: 00007f091076ffa0 R15: 00007fff71704d48 [ 102.341748][ T5025] [ 102.344761][ T5016] CPU: 1 PID: 5016 Comm: syz.0.183 Not tainted syzkaller #0 [ 102.352104][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.362168][ T5016] Call Trace: [ 102.365456][ T5016] [ 102.368390][ T5016] dump_stack_lvl+0x188/0x250 [ 102.373083][ T5016] ? show_regs_print_info+0x20/0x20 [ 102.378294][ T5016] ? load_image+0x410/0x410 [ 102.382824][ T5016] ? prandom_u32+0x217/0x250 [ 102.387467][ T5016] should_fail+0x383/0x4b0 [ 102.391893][ T5016] should_failslab+0x5/0x20 [ 102.396511][ T5016] slab_pre_alloc_hook+0x51/0xc0 [ 102.401468][ T5016] ? xas_create+0x1047/0x15a0 [ 102.406152][ T5016] kmem_cache_alloc+0x3d/0x280 [ 102.410929][ T5016] xas_create+0x1047/0x15a0 [ 102.415498][ T5016] xas_create_range+0x1e4/0x810 [ 102.420380][ T5016] shmem_add_to_page_cache+0xbd8/0x14d0 [ 102.422586][ T5025] ------------[ cut here ]------------ [ 102.425954][ T5016] ? put_page+0x200/0x200 [ 102.425986][ T5016] ? _raw_spin_lock_irq+0xb7/0xf0 [ 102.432216][ T5025] WARNING: CPU: 0 PID: 5025 at block/genhd.c:554 device_add_disk+0x8d6/0xde0 [ 102.435758][ T5016] ? _raw_spin_lock_irqsave+0x100/0x100 [ 102.435782][ T5016] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.440940][ T5025] Modules linked in: [ 102.449533][ T5016] ? lockdep_hardirqs_on+0x94/0x140 [ 102.449562][ T5016] shmem_getpage_gfp+0x1735/0x2c10 [ 102.449610][ T5016] shmem_write_begin+0xcd/0x1a0 [ 102.455282][ T5025] [ 102.460316][ T5016] generic_perform_write+0x2b6/0x550 [ 102.460353][ T5016] ? grab_cache_page_write_begin+0xa0/0xa0 [ 102.464268][ T5025] CPU: 0 PID: 5025 Comm: syz.1.186 Not tainted syzkaller #0 [ 102.469412][ T5016] ? file_remove_privs+0x5d0/0x5d0 [ 102.469438][ T5016] ? rwsem_write_trylock+0x135/0x1c0 [ 102.469458][ T5016] ? clear_nonspinnable+0x60/0x60 [ 102.469478][ T5016] __generic_file_write_iter+0x261/0x4e0 [ 102.475218][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.479894][ T5016] ? generic_write_checks+0x3be/0x460 [ 102.479931][ T5016] generic_file_write_iter+0xa6/0x1b0 [ 102.479965][ T5016] vfs_write+0x748/0xd70 [ 102.482350][ T5025] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 102.487682][ T5016] ? file_end_write+0x250/0x250 [ 102.487711][ T5016] ? __fget_files+0x402/0x470 [ 102.487735][ T5016] ? __fdget_pos+0x1e2/0x370 [ 102.487749][ T5016] ? ksys_write+0x70/0x260 [ 102.487765][ T5016] ksys_write+0x153/0x260 [ 102.487783][ T5016] ? __ia32_sys_read+0x80/0x80 [ 102.487801][ T5016] ? lockdep_hardirqs_on+0x94/0x140 [ 102.487823][ T5016] do_syscall_64+0x4c/0xa0 [ 102.487839][ T5016] ? clear_bhb_loop+0x30/0x80 [ 102.487855][ T5016] ? clear_bhb_loop+0x30/0x80 [ 102.487874][ T5016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.487892][ T5016] RIP: 0033:0x7f3a38122d8e [ 102.514987][ T5025] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 102.516444][ T5016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.516459][ T5016] RSP: 002b:00007f3a363b9da8 EFLAGS: 00000246 [ 102.522155][ T5025] RSP: 0018:ffffc9000338f470 EFLAGS: 00010246 [ 102.532130][ T5016] ORIG_RAX: 0000000000000001 [ 102.532140][ T5016] RAX: ffffffffffffffda RBX: 00007f3a363ba6c0 RCX: 00007f3a38122d8e [ 102.532152][ T5016] RDX: 00000000013bd7ef RSI: 00007f3a2df9a000 RDI: 0000000000000007 [ 102.532163][ T5016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.532173][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 102.532183][ T5016] R13: 00007f3a363b9ee0 R14: 00007f3a363b9ea0 R15: 00007f3a2df9a000 [ 102.532211][ T5016] [ 102.555000][ T5031] md: couldn't update array info. -22 [ 102.609971][ T5016] FAULT_INJECTION: forcing a failure. [ 102.609971][ T5016] name failslab, interval 1, probability 5, space 0, times 96 [ 102.611235][ T5025] [ 102.630750][ T5016] CPU: 0 PID: 5016 Comm: syz.0.183 Not tainted syzkaller #0 [ 102.630772][ T5016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.630781][ T5016] Call Trace: [ 102.630789][ T5016] [ 102.630796][ T5016] dump_stack_lvl+0x188/0x250 [ 102.630823][ T5016] ? show_regs_print_info+0x20/0x20 [ 102.630841][ T5016] ? load_image+0x410/0x410 [ 102.630867][ T5016] ? prandom_u32+0x217/0x250 [ 102.684940][ T5025] RAX: ffffffff83d31e76 RBX: ffff88805f74dc00 RCX: 0000000000080000 [ 102.691189][ T5016] should_fail+0x383/0x4b0 [ 102.691221][ T5016] should_failslab+0x5/0x20 [ 102.691239][ T5016] slab_pre_alloc_hook+0x51/0xc0 [ 102.699927][ T5025] RDX: ffffc90004cc9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 102.707484][ T5016] ? xas_create+0x1047/0x15a0 [ 102.707510][ T5016] kmem_cache_alloc+0x3d/0x280 [ 102.707532][ T5016] xas_create+0x1047/0x15a0 [ 102.707561][ T5016] xas_create_range+0x1e4/0x810 [ 102.707590][ T5016] shmem_add_to_page_cache+0xbd8/0x14d0 [ 102.707621][ T5016] ? put_page+0x200/0x200 [ 102.707642][ T5016] ? _raw_spin_lock_irq+0xb7/0xf0 [ 102.717180][ T5025] RBP: 000000000000001f R08: ffff888017caa3bb R09: 1ffff11002f95477 [ 102.728672][ T5016] ? _raw_spin_lock_irqsave+0x100/0x100 [ 102.728704][ T5016] ? _raw_spin_unlock_irq+0x1f/0x40 [ 102.728721][ T5016] ? lockdep_hardirqs_on+0x94/0x140 [ 102.728743][ T5016] shmem_getpage_gfp+0x1735/0x2c10 [ 102.728787][ T5016] shmem_write_begin+0xcd/0x1a0 [ 102.728808][ T5016] generic_perform_write+0x2b6/0x550 [ 102.728843][ T5016] ? grab_cache_page_write_begin+0xa0/0xa0 [ 102.728860][ T5016] ? file_remove_privs+0x5d0/0x5d0 [ 102.728885][ T5016] ? rwsem_write_trylock+0x135/0x1c0 [ 102.728904][ T5016] ? clear_nonspinnable+0x60/0x60 [ 102.728925][ T5016] __generic_file_write_iter+0x261/0x4e0 [ 102.728941][ T5016] ? generic_write_checks+0x3be/0x460 [ 102.731850][ T5025] R10: dffffc0000000000 R11: ffffed1002f95478 R12: 1ffff11002f95477 [ 102.738558][ T5016] generic_file_write_iter+0xa6/0x1b0 [ 102.738608][ T5016] vfs_write+0x748/0xd70 [ 102.738633][ T5016] ? file_end_write+0x250/0x250 [ 102.738655][ T5016] ? __fget_files+0x402/0x470 [ 102.738678][ T5016] ? __fdget_pos+0x1e2/0x370 [ 102.738693][ T5016] ? ksys_write+0x70/0x260 [ 102.738710][ T5016] ksys_write+0x153/0x260 [ 102.738731][ T5016] ? __ia32_sys_read+0x80/0x80 [ 102.738751][ T5016] ? lockdep_hardirqs_on+0x94/0x140 [ 102.738776][ T5016] do_syscall_64+0x4c/0xa0 [ 102.738793][ T5016] ? clear_bhb_loop+0x30/0x80 [ 102.738812][ T5016] ? clear_bhb_loop+0x30/0x80 [ 102.738832][ T5016] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.738851][ T5016] RIP: 0033:0x7f3a38122d8e [ 102.738874][ T5016] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 102.738887][ T5016] RSP: 002b:00007f3a363b9da8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 102.738907][ T5016] RAX: ffffffffffffffda RBX: 00007f3a363ba6c0 RCX: 00007f3a38122d8e [ 102.738918][ T5016] RDX: 00000000013bd7ef RSI: 00007f3a2df9a000 RDI: 0000000000000007 [ 102.738929][ T5016] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.738940][ T5016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 102.738949][ T5016] R13: 00007f3a363b9ee0 R14: 00007f3a363b9ea0 R15: 00007f3a2df9a000 [ 102.738978][ T5016] [ 102.755188][ T5031] md: could not open device unknown-block(1,1). [ 102.770432][ T5025] R13: 1ffff1100bee9b94 R14: dffffc0000000000 R15: ffff888017caa380 [ 102.787082][ T5031] md: md_import_device returned -16 [ 102.791368][ T5025] FS: 00007f090e7406c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 102.798154][ T5032] md: could not open device unknown-block(1,2). [ 102.820091][ T5025] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.834609][ T5032] md: md_import_device returned -16 [ 102.842126][ T5025] CR2: 0000200000003ac0 CR3: 000000005cd97000 CR4: 00000000003506e0 [ 104.160829][ T5025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.175119][ T5025] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.185504][ T5025] Call Trace: [ 104.189109][ T5025] [ 104.192072][ T5025] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 104.197848][ T5025] mtdblock_add_mtd+0x186/0x240 [ 104.202748][ T5025] blktrans_notify_add+0x95/0xe0 [ 104.208152][ T5025] add_mtd_device+0xd40/0x1260 [ 104.213047][ T5025] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 104.219335][ T5025] ? mtd_cls_resume+0x130/0x130 [ 104.224236][ T5025] mtd_add_partition+0x25d/0x420 [ 104.229769][ T5025] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 104.234912][ T5025] ? shrink_ecclayout+0xab0/0xab0 [ 104.241066][ T5025] ? __might_fault+0xb3/0x110 [ 104.245781][ T5025] ? _copy_from_user+0x111/0x170 [ 104.251293][ T5025] mtdchar_ioctl+0x14cb/0x1d70 [ 104.257077][ T5025] ? mtdchar_close+0x180/0x180 [ 104.269498][ T5025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.276433][ T5025] ? verify_lock_unused+0x140/0x140 [ 104.283751][ T5025] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 104.298577][ T5025] ? rcu_lock_release+0x5/0x20 [ 104.307754][ T5025] ? __mutex_trylock_common+0x15c/0x260 [ 104.323763][ T5025] ? rcu_lock_release+0x20/0x20 [ 104.332615][ T5025] ? __mutex_lock_common+0x435/0x2400 [ 104.347340][ T5025] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 104.352802][ T5025] ? mutex_lock_io_nested+0x60/0x60 [ 104.367343][ T5025] mtdchar_unlocked_ioctl+0xad/0xd0 [ 104.372631][ T5025] ? mtdchar_write+0x5a0/0x5a0 [ 104.386557][ T5025] __se_sys_ioctl+0xfa/0x170 [ 104.407336][ T5025] do_syscall_64+0x4c/0xa0 [ 104.411819][ T5025] ? clear_bhb_loop+0x30/0x80 [ 104.416511][ T5025] ? clear_bhb_loop+0x30/0x80 [ 104.427789][ T5025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.433738][ T5025] RIP: 0033:0x7f09104e8559 [ 104.447447][ T5025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.487349][ T5025] RSP: 002b:00007f090e740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.495833][ T5025] RAX: ffffffffffffffda RBX: 00007f091076ffa0 RCX: 00007f09104e8559 [ 104.510441][ T5025] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000005 [ 104.527346][ T5025] RBP: 00007f091057f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 104.535373][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.546879][ T5025] R13: 00007f0910770038 R14: 00007f091076ffa0 R15: 00007fff71704d48 [ 104.555551][ T5025] [ 104.564246][ T5025] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.571570][ T5025] CPU: 0 PID: 5025 Comm: syz.1.186 Not tainted syzkaller #0 [ 104.578872][ T5025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.588948][ T5025] Call Trace: [ 104.592239][ T5025] [ 104.595174][ T5025] dump_stack_lvl+0x188/0x250 [ 104.599870][ T5025] ? show_regs_print_info+0x20/0x20 [ 104.605088][ T5025] ? load_image+0x410/0x410 [ 104.609741][ T5025] panic+0x2f8/0x850 [ 104.613663][ T5025] ? bpf_jit_dump+0xd0/0xd0 [ 104.618197][ T5025] ? device_add_disk+0x8d6/0xde0 [ 104.623156][ T5025] __warn+0x248/0x2b0 [ 104.627164][ T5025] ? device_add_disk+0x8d6/0xde0 [ 104.632096][ T5025] report_bug+0x1b9/0x2e0 [ 104.636448][ T5025] handle_bug+0x3a/0x70 [ 104.641159][ T5025] exc_invalid_op+0x16/0x40 [ 104.645774][ T5025] asm_exc_invalid_op+0x16/0x20 [ 104.650623][ T5025] RIP: 0010:device_add_disk+0x8d6/0xde0 [ 104.656162][ T5025] Code: 04 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 8f 03 00 00 8b 33 48 c7 c7 00 f4 70 8d e8 b1 3d 37 00 eb 05 e8 ea 04 a6 fd <0f> 0b 41 bd 01 00 00 00 44 89 e8 48 83 c4 50 5b 41 5c 41 5d 41 5e [ 104.675878][ T5025] RSP: 0018:ffffc9000338f470 EFLAGS: 00010246 [ 104.682450][ T5025] RAX: ffffffff83d31e76 RBX: ffff88805f74dc00 RCX: 0000000000080000 [ 104.690432][ T5025] RDX: ffffc90004cc9000 RSI: 000000000007ffff RDI: 0000000000080000 [ 104.698394][ T5025] RBP: 000000000000001f R08: ffff888017caa3bb R09: 1ffff11002f95477 [ 104.706370][ T5025] R10: dffffc0000000000 R11: ffffed1002f95478 R12: 1ffff11002f95477 [ 104.714346][ T5025] R13: 1ffff1100bee9b94 R14: dffffc0000000000 R15: ffff888017caa380 [ 104.722315][ T5025] ? device_add_disk+0x8d6/0xde0 [ 104.727266][ T5025] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 104.732549][ T5025] mtdblock_add_mtd+0x186/0x240 [ 104.737392][ T5025] blktrans_notify_add+0x95/0xe0 [ 104.742321][ T5025] add_mtd_device+0xd40/0x1260 [ 104.747098][ T5025] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 104.752902][ T5025] ? mtd_cls_resume+0x130/0x130 [ 104.757758][ T5025] mtd_add_partition+0x25d/0x420 [ 104.762692][ T5025] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 104.767890][ T5025] ? shrink_ecclayout+0xab0/0xab0 [ 104.773022][ T5025] ? __might_fault+0xb3/0x110 [ 104.777695][ T5025] ? _copy_from_user+0x111/0x170 [ 104.782684][ T5025] mtdchar_ioctl+0x14cb/0x1d70 [ 104.787464][ T5025] ? mtdchar_close+0x180/0x180 [ 104.792229][ T5025] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.798241][ T5025] ? verify_lock_unused+0x140/0x140 [ 104.803540][ T5025] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 104.809177][ T5025] ? rcu_lock_release+0x5/0x20 [ 104.814070][ T5025] ? __mutex_trylock_common+0x15c/0x260 [ 104.819629][ T5025] ? rcu_lock_release+0x20/0x20 [ 104.824492][ T5025] ? __mutex_lock_common+0x435/0x2400 [ 104.829888][ T5025] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 104.835267][ T5025] ? mutex_lock_io_nested+0x60/0x60 [ 104.840461][ T5025] mtdchar_unlocked_ioctl+0xad/0xd0 [ 104.845665][ T5025] ? mtdchar_write+0x5a0/0x5a0 [ 104.850445][ T5025] __se_sys_ioctl+0xfa/0x170 [ 104.855055][ T5025] do_syscall_64+0x4c/0xa0 [ 104.859484][ T5025] ? clear_bhb_loop+0x30/0x80 [ 104.864156][ T5025] ? clear_bhb_loop+0x30/0x80 [ 104.868854][ T5025] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.874757][ T5025] RIP: 0033:0x7f09104e8559 [ 104.879259][ T5025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.898978][ T5025] RSP: 002b:00007f090e740028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.907386][ T5025] RAX: ffffffffffffffda RBX: 00007f091076ffa0 RCX: 00007f09104e8559 [ 104.915350][ T5025] RDX: 00002000000009c0 RSI: 0000000000001269 RDI: 0000000000000005 [ 104.923331][ T5025] RBP: 00007f091057f8b0 R08: 0000000000000000 R09: 0000000000000000 [ 104.931316][ T5025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.939280][ T5025] R13: 00007f0910770038 R14: 00007f091076ffa0 R15: 00007fff71704d48 [ 104.947263][ T5025] [ 104.950539][ T5025] Kernel Offset: disabled [ 104.955061][ T5025] Rebooting in 86400 seconds..