last executing test programs: 1m20.308942083s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f00000001c0)=0x1) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f0000000200)) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2703) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/icmp\x00') pread64(r5, &(0x7f0000000440)=""/245, 0xf5, 0x4) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x0, 0x2, 0x0, 0x3, {0xa, 0x4e21, 0x9, @private2, 0x29}}}, 0x32) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000280)={0x0, 0x5, 0x4, &(0x7f0000000080)={0x9, "b3d92cdddf96c20e9064264ccfc6000000fa00008c0000c87fb100000000000100"}}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1m16.972873873s ago: executing program 2 (id=11): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) syz_mount_image$hfs(&(0x7f0000000640), &(0x7f0000000680)='./file0\x00', 0x1214080, &(0x7f00000006c0)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0xee01, @ANYBLOB=',codepage=macgreek,gid=', @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000000004,iocharset=iso8859-6,part=0x00000000000007ff,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c00841578607e49813aae559d0db033577f34eac65bbe0bd0971db44c7b9c0d0c797f5f0cd1a23e27bc0be1e6e06a809aa32a194bfcd4c7a48d10305364e28e2ca063d53e3e9b8b7a228d0876d5afb3a8668090ccfd9100572df108d0e33b2b82dcfa202665ed7116403c0b65da65463dc29440f9b84fe67838eddc553645de9ea2de0c3cda7b0016a307959d3f08"], 0x1, 0x32e, &(0x7f0000000800)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000001040)={0x1, &(0x7f0000001080)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r1, r1, 0x200000000000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000010c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', 0x0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000011c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000001200)='./file0\x00', &(0x7f0000001240), 0x0, &(0x7f0000001280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f0000001300)={0x2020, 0x0, 0x0}, 0x2020) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000003340)={0x0, 0xea60}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) write$FUSE_INIT(r2, &(0x7f0000003380)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8001}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000003400)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000005400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000054c0)={0x20, 0x0, 0x400000000000, {0x0, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000005500)='./file0\x00', 0x42, 0xa7) readv(r4, &(0x7f0000005540)=[{&(0x7f0000005580)=""/5, 0xfdef}], 0x20) open(&(0x7f0000000b40)='./file0\x00', 0x108843, 0x55) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:00.0/rescan\x00', 0x1, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c040000", @ANYRES16=r7, @ANYBLOB="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"], 0x41c}}, 0x0) write(r5, &(0x7f0000000100)="1c", 0x1) syz_open_dev$mtd(&(0x7f0000000180), 0x42, 0xa02) unshare(0x22020600) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000055c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_mount_image$ext4(&(0x7f0000005600)='ext4\x00', &(0x7f0000005640)='./file0\x00', 0x800714, &(0x7f0000005680)={[{@nobarrier}]}, 0xff, 0x489, &(0x7f00000056c0)="$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") 1m12.813265444s ago: executing program 2 (id=23): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000648, &(0x7f0000000600)={[{@sb={'sb', 0x3d, 0x9}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@user_xattr}, {@grpjquota}, {@data_err_abort}, {@block_validity}, {@minixdf}, {@journal_checksum}]}, 0x0, 0x60d, &(0x7f0000000800)="$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") setxattr$trusted_overlay_origin(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f00000002c0)={0x1, 0x1, 0x4, 0xc, 0x7fffffff, 0xb}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="06000000ff09000000c6330400", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$igmp(0x2, 0x3, 0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000004c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000005c0), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000700)=0x6) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000740)=0x79, 0x4) bind$inet(r5, &(0x7f0000000780)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000007c0)={0x1, &(0x7f0000000e40)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x240007fd, &(0x7f0000000e80)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000ec0)='bbr', 0x3) sendmmsg$inet(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000f80)="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", 0x126}], 0x1}}], 0x1, 0x2090) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f00000010c0)=0xdf8, 0x4) writev(r5, &(0x7f0000001100)=[{&(0x7f0000001180)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e", 0xc0}, {&(0x7f0000001240)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbc", 0x88}, {&(0x7f0000001300)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423bce", 0x5b}, {&(0x7f0000001380)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086", 0x4d}, {&(0x7f0000001400)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e56b9ba42", 0x4d}, {&(0x7f0000001480)="1cc96615eecaacfe", 0x8}], 0x6) write(r5, &(0x7f00000014c0)="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", 0x3a6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={r6, 0x1, 0x6, @multicast}, 0x10) 1m10.92056685s ago: executing program 2 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x2, 0x2001) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x9, 0x109000) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000010d40)=""/4096, 0x766fbb3c54c12e72}) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000140)=ANY=[], 0x1, 0x10683, &(0x7f0000000600)="$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") open(&(0x7f0000010cc0)='./file1\x00', 0x146142, 0x90) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000011d40)="$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") r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000122c0)='/sys/power/resume_offset', 0x20400, 0x2e) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000012300)=0x4) finit_module(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020601080000000000ee00000100000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000016000300686173683a6e65742c706f72742c6e6574000000050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4020045}, 0x0) 1m10.715051055s ago: executing program 32 (id=33): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$ARCH_MAP_VDSO_X32(0x1e, r0, 0x2, 0x2001) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0), 0x9, 0x109000) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000300)={&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000010d40)=""/4096, 0x766fbb3c54c12e72}) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x1805a, &(0x7f0000000140)=ANY=[], 0x1, 0x10683, &(0x7f0000000600)="$eJzs3E9vFGUYAPBnKVCKiMTwx8SDkxiTNnEbthQiMVFUiJoAIaIHL+q2O2wWup3aXZaVixw08eDX4Ga8ePATePF7mBjjRRNvGsz8KRYCaSnbNrW/XzI8M+++++zzbmh2n5l2Ati1jiR//VmLwzERsXcsIg5F5PtRq7bCuTK8EBEvRcSeYrtaxFo1Xg1G7I+IgxFxOE8eMVbNyR/6/vMf/xncvvjN3dd/++Ts3T9q27dqYKu9+dDxKxHRXSr3b3XLmLXLeL0abw46RezODqpYPtC9UR1nZbyVzhUZbjVX5jWLeKpdzs+WbvbyeG2hOZ/HdudaMb60WL5gb9BeyVM84XpzuThupXNF7PSyIrZvl3UNq3i71y/ztKp8XxTpo99fieV4OkzL9SzdKOL8Yr8aL/NORDrM46BVxurlYj5baBV1zD3RW72jXOws3hwmg3S518kWk9PTjdemG2fqjeWslfbT2Xqz2zozm0y280+WYb2fNrvn2lnWXkin57PuVDLZnp+vNxrJ5Pl0rtNcTBqN6VPTJ+unp6q9V5N3L3+ULLSSyTy+3Vm82e8s9JJr2XJSPmMqmZk+dXYqebmRXL10JbnywYULl658+On5jy+/den9d6pJK2WNF/8n+ulsMjlzcmam3jhZn2lMPe3688/INde/kL9N273++2WNcP3wVNb5TXJ8s+sA2EFW9f/xZP1/6P+BDdP//9f/Z610OL6r+/97Y2v1v90Xy/nb0P/mLzuq/nfi0evX/8OG+CYJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALBr/bLvh/eKnSPl8TPV+LPV0PMRcSIiOR4RxyLi3iOMxf4Hch6NiFq1/6j5+x6q4adaFBny54xX28GIOFdtfz+32e8CAAAA/H999/NXX0eM5bvFP29sd0FspeqkzYFR5StO+ex9zIMPn/NZ09Ei2fCpqyodW0k5EsfzBR35fUTZTkTEnkOfjSjb2u5UP+73w4FVoVaGPVtWDQAAsGUe7AQe1709Rm309QAAALBZvt3uAhi5dV1tra2aWV0LHi9DdUFw4v7R/tGXCAAAAGzQvS/XmrHqt71dvQcAAICdY6N/q1v0/+u8/1+s9/5/v27a/f/ubHCZAAAAsLuV9/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf9m5lxwlgjgOwP+hbWd8RWJ4HMErsDJuTFhwCI/g0gPobdxxBGNCOAfuPIIBQ1EsIG3S2gUM5PuSfhXVvy5gVVVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKf2s59Nvyy9f/1phc9cqZ/1900nBtwQAAAAcWdXzaTrp765f5PJXuehNRIwjYhQRw4ho6rtX8fQgcxAR+1GDpvr1URt+RKSE7T33eXseEe/z9vv1qT8FAAAAuF3LxWQWUW1P0+7dpRtEJ2//rXoetHko9fg05POkVNoghX0ulDbcRxYxioi6/6tQ2jgiei8/FkprpcqHg+8+XdztDr1ztgYAADiP6uBQrPcGAADAo/Pp0g3gPI4netN8bf4tfp4Lvs8vrdMf8p813wcAAABcj3YL+wEAAADXLPX/rf8HAAAAt223/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACntKrn0+ViMusQ8WG7W2/ae2go+68n9zq0GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD/vzksIwDARRsPOP7iRyshzeNNjghdfeuAoEjxmEEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBBt/XkvsWj8Uvy7LTx6ngmeXfV+HTV+HbdGL0wk//hC3vjnI8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALCwPwc3DMJAEEXHiROgJ4v+y0JDEwjpvdP3rvZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHiNkZnR+NyPJN/GmWR22vh1vJL8u2psXTX2HjSOHqynfwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdife9uEgTCOw68viRK3yQjprQRmoKFCMAIfEpIlz8AALERDRWuxCKwAEpxrOlPwPM3/V1xxLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8JouD1+8RUQRqcsUabz5Ob1HxEekbduOPm9Z7M7H5uues/1hkvM7pr9lRJRR9HEOAEDvqm5zrNb18i/vf95B3mHeat7Ui2d+GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODKvv2zNvHGAQB/0vxp++vww8VBF0GhXTSmLh2yChVBXDo4hjaWYqolrdCWotR3IPgG3HXq6mtwFDooKA6CdKgigkvlkkt7rbH/NLlgPh94et+7y93zfAMNfO95DgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiRrfUw0oozIYRzub04srm9Nt1u+/nr67OtdudVbiF5z+gW+RDC3bla9WoXc+k1jw7sL66s3qvUatV6B4PB0/VV6PjA/iQohBAOnHrzsZlnj4wwhaCfcx86+VVzJ+1rOP5PavuZ6GSbq0L2dHl181cJAIB+kI9bVNe/z29MRscy5RB2nu+v/0cTcThm/f/9xZMbyb6S9X+paxn2jHf//+ZEcWl+obi4snp5br4yW52t3i+1aoxSsfGspHj0E5Odx399vAAAAPxDCnFL1v8D5V/n//9LxOGY9f/Dm7fPR8eG4muyx6n/C53KtHftTfqlPRIAAID+dubCty+ZNsczhUJYriwt1UvNv7v748uVqVAfT2GoR5vavzsYt2T9ny2nNDYAAACgq7bWMyMhhI3W/ky8bTv/P7Z3XXL+/+2z3K3kPbMhhOF4/v/K9IPaTFcy6X2Jl36jr6gjb0ennSMAAADpGo5bcv4/31j/n9v9zEAIYexiM24d3dxea6zrP2z9/+ill5+SfSXX/1/rXoopGTj87ETz+2hsJ0LITXRtYAAAAPShobhF9f+HfJis/3h6vVDux7fwAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc79o/SQBDFAXiS2Y2VaGVj4wlEO6uAheA9REHwCF7BO3gF8R5bipbWYiEWtjI7M7qIFml2Rb8PHr+35M++TJq8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBqng8/+xhCmJV+XvL+5fIk5cMi5CzXydNrt5UqDF7H92YHU08AAADAfxBLJY/t7XHK+bLf/9v6nLTzX6/nvu7zdd//mnX3T7Ud794+brSZ75Pe9Oz84nRvtE/4+238/NBNjqY/+f6/l5i/kKacZRtmV113tOjbtbEmBgBWtVuzNPX3UMr9KQcD4C/bGV40pcJg/4/LSeYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGNV7AAAA//8wd15M") open(&(0x7f0000010cc0)='./file1\x00', 0x146142, 0x90) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file1\x00', 0x200000, &(0x7f0000000480)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000011d40)="$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") r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000122c0)='/sys/power/resume_offset', 0x20400, 0x2e) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000012300)=0x4) finit_module(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000020601080000000000ee00000100000005000100070000000900020073797a30000000000c00078008001240fffffffe050004000000000016000300686173683a6e65742c706f72742c6e6574000000050005000a"], 0x5c}, 0x1, 0x0, 0x0, 0x4020045}, 0x0) 1m0.008679033s ago: executing program 1 (id=54): syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f00000002c0)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3", @ANYRESHEX], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup(0x5e0a, &(0x7f0000000040)={0x0, 0x58ca, 0x40, 0x0, 0x279}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000000000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="66b9800000c00f326635000800000f3066b8007000000f23d80f21f86635400000c00f23f864f2c025d666b8d55c23630f23d00f21f86635000000010f23f8f20f10f6440f20c066350c000000440f22c0f30fc7b780daba210066edbaf80c66b83ea6898b66efbafc0ced670f38ca6915", 0x71}], 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000640)={{0x0, 0x0, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x20c, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2d}, {0x0, 0x0, 0x8, 0x98f, 0xffff}}) 58.981892299s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000004340)='./mnt\x00', 0x17f) mount$nfs(0x0, &(0x7f00000043c0)='./mnt\x00', &(0x7f0000004400), 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB='addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,lock']) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x800, 0x2, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000400)=0x2005, 0x4) sendmsg$inet6(r1, &(0x7f0000000440)={&(0x7f0000000480)={0xa, 0x4e60, 0x80000, @local, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1000000000000000290000000b"], 0x30}, 0x3400c8d4) mount(0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000080)={{{@in=@remote, @in=@multicast1}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000009c0)=0xe8) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000380), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x6) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), r4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000500)=ANY=[@ANYBLOB="18000000a55e4864a581394b702615d2f90bfe7fc76db1fd9c4f7f80f4ad24f7612a437a0086e9381cd4f9941d77baf193599860e1828c6d3a1418", @ANYRES16=r5, @ANYBLOB="210323bd7000fbdbdf250400000042000180"]}, 0x1, 0x0, 0x0, 0x41}, 0x24004095) r6 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) timer_create(0x8, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380)=0x0) timer_settime(r7, 0xca9a3b, &(0x7f0000000900)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(r7, 0x1, &(0x7f0000000940), &(0x7f0000000980)) bind$tipc(r6, &(0x7f0000000040)=@id={0x1e, 0x3, 0x1, {0x4e22, 0x1}}, 0x10) 57.856723476s ago: executing program 1 (id=58): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f00000004c0)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x110000000000) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000500)={0xc0002003}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000540)={0x44, 0x0, &(0x7f0000000580)=[@transaction={0x40406300, {0x3, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 57.844388636s ago: executing program 1 (id=59): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0xe2, 0x0, 0x0, 0x8000}, 0x28) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x400, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC], 0xfb, 0x2b4, &(0x7f0000000740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f0000000a40)='./file0\x00', r0, &(0x7f0000000a80)='.\x02\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./debug\x00', &(0x7f0000000ac0)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./debug/dynamic_debug/control\x00', 0x2, 0x108) write(r1, &(0x7f0000000b40)='+p', 0x2) syz_mount_image$ocfs2(&(0x7f0000000b80), &(0x7f0000000bc0)='./file0\x00', 0x100000a, &(0x7f0000000c00)=ANY=[@ANYBLOB='journal_asyoc_commit,heartbeat=none,usrquota,data=writeback,dir_resv_level=00000000000000000000,inode64,\x00'], 0x0, 0x4714, &(0x7f0000000c80)="$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") r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000053c0)={0x1f, 0x0, @any, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000005400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x800}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000005440)={0x4, 0x70}, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) sendmsg$TIPC_CMD_GET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2c, 0x25dfdbfc}, 0x1c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0x5}, 0x804) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x2, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x5, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x25000, 0x102280}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x9, 0x5, 0x2000006, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x8, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 53.082014961s ago: executing program 1 (id=70): r0 = memfd_create(&(0x7f0000000280)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xef-\xa6m\xa1\xc4\xb5{\xf2\\\x8d[7k~\x04\x03~K\xfbP\x84=\xfa\x81\x8c\x1et\x10', 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x21011, r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000009100000000400000010a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001daaf5ff00000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000a40)='GPL\x00', 0x7, 0x1000, &(0x7f0000000a80)=""/4096, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x7c) 51.317497763s ago: executing program 1 (id=76): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40010040) 51.02932491s ago: executing program 33 (id=76): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x40010040) 5.465978342s ago: executing program 3 (id=544): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000b00)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 4.556463295s ago: executing program 5 (id=562): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200080d4) r0 = eventfd2(0x80, 0x800) r1 = syz_usb_connect(0x1, 0x36, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0xa, 0x43, 0x8, 0x8, 0x6737, 0x1, 0x9180, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x8e, 0x5, 0x10, 0x7, "", [{{0x9, 0x4, 0xfb, 0xb, 0x2, 0x82, 0xd2, 0xd2, 0x0, [], [{{0x9, 0x5, 0x9f, 0x2, 0x40, 0x7, 0x0, 0x7}}, {{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/ttyUSB0\x00', 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.272813087s ago: executing program 6 (id=574): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000005c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000640), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="000008050000010b007e0b0a43b820a8e8c9881db642", @ANYRES8=r0, @ANYRES64=r1], 0x97) 3.025520014s ago: executing program 4 (id=577): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x8000, 0x0) r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r2, &(0x7f0000000840)='7', 0x1) read$char_usb(r2, 0x0, 0x0) write$tun(r1, &(0x7f0000001880)=ANY=[], 0x103) 2.536106696s ago: executing program 6 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r0, &(0x7f00000002c0)='27', 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 2.535821676s ago: executing program 4 (id=580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x20044080) write(r1, &(0x7f0000000540)='\x00\x00\b\x00', 0x4) 1.748005206s ago: executing program 6 (id=583): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635000800000f3066b8007000000f23d80f21f86635400000c00f23f864f2c025d666b8d55c23630f23d00f21f86635000000010f23f8f20f10f6440f20c066350c000000440f22c0f30fc7b780daba210066edbaf80c66b83ea6898b66efbafc0ced670f38ca6915", 0x71}], 0x1, 0x6, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x4) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) 1.695183797s ago: executing program 0 (id=584): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffdffdfc, {0x0, 0x0, 0x0, r4, {0x6}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x60c4814) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r1, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40400dd}, 0x4000080) 1.58343392s ago: executing program 4 (id=585): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x437, 0x800000, 0x400000, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5, 0x8, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1, &(0x7f0000000500)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @broadcast}}}, @ip_retopts={{0x10}}], 0x30}, 0x200000e0) 1.280087068s ago: executing program 4 (id=586): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x8100, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000a80)={0x6}) 1.279880858s ago: executing program 0 (id=587): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x0, 0x2) ioctl$BLKPG(r0, 0x80104d12, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0}) 1.17752664s ago: executing program 0 (id=588): socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) socket(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 1.158932041s ago: executing program 4 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000500)=[@text64={0x40, 0x0}], 0x1, 0x14, &(0x7f0000000680)=[@cr4={0x1, 0x140245}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.056062504s ago: executing program 3 (id=590): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x2000c045}, 0x24000004) 971.388046ms ago: executing program 3 (id=591): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) 903.025077ms ago: executing program 3 (id=592): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) 844.052059ms ago: executing program 6 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x135) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004025057a1200010102030109023200010100c0010904"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyUSB0\x00', 0x2, 0x0) 843.848589ms ago: executing program 0 (id=594): r0 = syz_open_dev$sg(&(0x7f0000000200), 0xf9ba, 0x14b082) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000080)) 767.738131ms ago: executing program 0 (id=595): mount(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000080)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') 691.999433ms ago: executing program 4 (id=596): r0 = syz_open_dev$evdev(&(0x7f0000000cc0), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000d00)=ANY=[@ANYBLOB="12010000db9d1b08d112e2fa8b70010203010902"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, &(0x7f0000000d40)=0x1) 626.995395ms ago: executing program 0 (id=597): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x80015b12, 0x0) 626.745844ms ago: executing program 3 (id=598): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_clone3(&(0x7f0000000280)={0x801400, &(0x7f0000000300), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="60000000300005060100000000000000000000004c0001804800018007000100637400003c0002801800010001000000000000000300000000000000000000000600030008000000080010006674700005001100020000000500120006000000b3d62f8b7367b16efb94", 0x6a}], 0x1}, 0x0) 543.971626ms ago: executing program 3 (id=599): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000380)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./dev/ttyUSB0\x00', 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x28100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) write$tun(r1, &(0x7f0000000480)={@val={0x0, 0x6}, @void, @ipv4=@esp={{0x5, 0x4, 0x0, 0x25, 0x1e9, 0x65, 0x0, 0xe, 0x32, 0x0, @rand_addr=0x64010101, @broadcast}, {0x4d6, 0x1b68, @cc={0x1, 0x0, 0x9, 0x2, 0x6, 0x7f, 0x5a74, [@ipv6=@generic={0x5, 0x6, "8e4fef", 0x18b, 0x5c, 0x1, @empty, @private0, {[], "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"}}]}}}}, 0x1ed) 416.74697ms ago: executing program 5 (id=600): r0 = socket(0x2b, 0x80801, 0x1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)) 345.040401ms ago: executing program 5 (id=601): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x7b0c, 0x40000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x9, &(0x7f0000000080)=[{0x23, '\x00', @st={0x4, [{0x3, @uvalue=0x9}, {0x1, @uvalue=0x4}, {0x0, @uvalue=0x7fffffff}, {0x3, @uvalue=0xbaf5}]}}, {0x36, '\x00', @buffer={"15dc33ce9a54973d8fcc7513cfef7ec6000000002300", 0x20}, 0x74}, {0x2f, '\x00', @data=0x3, 0x2}, {0x4, '\x00', @st={0x4, [{0x1, @uvalue=0xfffffffffffffffa}, {0x3, @svalue=0x6}, {0x3, @svalue=0xb}, {0x5d1ae71d15d461ec, @uvalue=0x1}]}, 0x6}, {0xd, '\x00', @data=0xf, 0x6}, {0x11, '\x00', @buffer={"8bf85060e37980b2ca188f430e1a6042d644127f6bdf9e9421b9cb87f1be9fcb", 0x20}, 0x7}, {0x3c, '\x00', @buffer={"d34fa264b0b65af381df51d6407942d5adf700e785a2c999105153b3b3eb7232", 0x20}, 0x40001b}, {0x1c, '\x00', @data=0x7fffffff, 0x5}, {0x1f, '\x00', @data=0x7, 0x5}]}) 208.125575ms ago: executing program 5 (id=602): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 207.892875ms ago: executing program 6 (id=603): r0 = syz_open_dev$dri(&(0x7f0000000740), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000780), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000840)={r2}) 172.241246ms ago: executing program 5 (id=604): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40242, 0x31) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000001040)='\x00', 0x89901) fchdir(r1) close(r1) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 115.575647ms ago: executing program 6 (id=605): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket(0x1, 0x1, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r2 = socket(0x11, 0x3, 0x0) connect$can_bcm(r2, &(0x7f0000000740), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000780), 0x801, 0x0) syz_emit_ethernet(0x6a, &(0x7f00000007c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f57a14", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0xfffd, 0x3a, 0x0, @private1, @mcast1}}}}}}}, 0x0) write$rfkill(r3, &(0x7f0000000900)={0x0, 0x0, 0x3, 0x1}, 0x8) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f0000000940)=0x1, 0x4) bind$inet(r4, &(0x7f0000000980)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r4, &(0x7f00000009c0)=[{{&(0x7f0000000a00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000a80)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d0", 0x47}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000b00)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc364fdbaaa4d2954c1166835dbbe78286228", "bd69dbc7", "1d7265a045a85572"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, r6, 0x1, 0x0, 0x25dfdbfc, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4) 0s ago: executing program 5 (id=606): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCSBRK(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0xc0) kernel console output (not intermixed with test programs): xf0/0xf0 [ 104.115129][ T4813] ? __lock_acquire+0x7d40/0x7d40 [ 104.120209][ T4813] should_fail+0x383/0x4b0 [ 104.120244][ T4813] should_failslab+0x5/0x20 [ 104.129196][ T4813] slab_pre_alloc_hook+0x51/0xc0 [ 104.134237][ T4813] ? taskstats_exit+0x14a/0xd80 [ 104.139131][ T4813] kmem_cache_alloc+0x3d/0x280 [ 104.143939][ T4813] taskstats_exit+0x14a/0xd80 [ 104.148655][ T4813] ? lockdep_hardirqs_on+0x94/0x140 [ 104.153899][ T4813] ? __delayacct_thrashing_end+0x110/0x110 [ 104.159742][ T4813] ? rcu_is_watching+0x11/0xa0 [ 104.159766][ T4813] ? mm_trace_rss_stat+0x81/0x1c0 [ 104.159789][ T4813] ? sync_mm_rss+0x211/0x350 [ 104.159810][ T4813] do_exit+0x5ab/0x2110 [ 104.159837][ T4813] ? put_task_struct+0x80/0x80 [ 104.178519][ T4813] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.189574][ T4813] ? _raw_spin_lock_irq+0xb7/0xf0 [ 104.194634][ T4813] do_group_exit+0x12c/0x2f0 [ 104.199259][ T4813] ? lockdep_hardirqs_on+0x94/0x140 [ 104.204503][ T4813] get_signal+0x7eb/0x12e0 [ 104.208978][ T4813] arch_do_signal_or_restart+0xe6/0x12a0 [ 104.214728][ T4813] ? futex_exit_release+0x1c0/0x1c0 [ 104.219965][ T4813] ? get_sigframe_size+0x10/0x10 [ 104.220297][ T4709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.224945][ T4813] ? __context_tracking_exit+0x4c/0x80 [ 104.237372][ T4813] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 104.243412][ T4813] ? exit_to_user_mode_loop+0x3b/0x130 [ 104.248940][ T4813] exit_to_user_mode_loop+0x9e/0x130 [ 104.254267][ T4813] exit_to_user_mode_prepare+0xee/0x180 [ 104.257434][ T4709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.259854][ T4813] syscall_exit_to_user_mode+0x16/0x40 [ 104.291245][ T4813] do_syscall_64+0x58/0xa0 [ 104.295712][ T4813] ? clear_bhb_loop+0x30/0x80 [ 104.300429][ T4813] ? clear_bhb_loop+0x30/0x80 [ 104.305152][ T4813] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 104.311090][ T4813] RIP: 0033:0x7f3e7fdda1d9 [ 104.315537][ T4813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.335195][ T4813] RSP: 002b:00007f3e7e0320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.343643][ T4813] RAX: fffffffffffffe00 RBX: 00007f3e80061fa8 RCX: 00007f3e7fdda1d9 [ 104.351651][ T4813] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3e80061fa8 [ 104.359652][ T4813] RBP: 00007f3e80061fa0 R08: 0000000000000000 R09: 0000000000000000 [ 104.367667][ T4813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.375778][ T4813] R13: 00007f3e80062038 R14: 00007ffc22d81ee0 R15: 00007ffc22d81fc8 [ 104.383808][ T4813] [ 104.388658][ T4709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.466884][ T7] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 104.475031][ T7] usb 1-1: config 0 has no interface number 0 [ 104.506794][ T7] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.560509][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 104.637294][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 104.669275][ T4810] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.736495][ T7] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 104.772571][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.802471][ T7] usb 1-1: Product: syz [ 104.816256][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 104.823452][ T7] usb 1-1: Manufacturer: syz [ 104.844863][ T7] usb 1-1: SerialNumber: syz [ 104.876816][ T7] usb 1-1: config 0 descriptor?? [ 104.936449][ T4230] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 104.948369][ T7] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 104.981721][ T4810] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.112510][ T4835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.115'. [ 105.121974][ T4230] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 105.131285][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 105.149752][ T4230] usb 5-1: Product: syz [ 105.154052][ T4230] usb 5-1: Manufacturer: syz [ 105.165187][ T4230] usb 5-1: SerialNumber: syz [ 105.184047][ T4231] usb 1-1: USB disconnect, device number 3 [ 105.200163][ T4230] usb 5-1: config 0 descriptor?? [ 105.226801][ T4231] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 105.247885][ T4821] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 105.267694][ T4230] hub 5-1:0.0: bad descriptor, ignoring hub [ 105.273684][ T4230] hub: probe of 5-1:0.0 failed with error -5 [ 105.394133][ T4709] device hsr_slave_0 entered promiscuous mode [ 105.408607][ T4709] device hsr_slave_1 entered promiscuous mode [ 105.431872][ T4709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.444017][ T4709] Cannot create hsr debugfs directory [ 105.505983][ T4810] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.678805][ T4810] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.822296][ T4851] netlink: 20 bytes leftover after parsing attributes in process `syz.0.119'. [ 106.056233][ T7] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.097525][ T4852] udc-core: couldn't find an available UDC or it's busy [ 106.104534][ T4852] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 106.460705][ T7] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.489011][ T7] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.523210][ T7] usb 6-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice= 0.00 [ 106.552923][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.727567][ T4232] Bluetooth: hci3: command 0x040f tx timeout [ 106.861118][ T4231] usb 6-1: USB disconnect, device number 2 [ 107.125540][ T4291] device hsr_slave_0 left promiscuous mode [ 107.150707][ T4291] device hsr_slave_1 left promiscuous mode [ 107.182504][ T4229] usb 5-1: USB disconnect, device number 3 [ 107.206317][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.214229][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.264463][ T4863] syz.0.122 uses obsolete (PF_INET,SOCK_PACKET) [ 107.293950][ T4291] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.337196][ T4291] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.348124][ T4291] device bridge_slave_1 left promiscuous mode [ 107.377145][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.435974][ T4291] device bridge_slave_0 left promiscuous mode [ 107.442556][ C0] net_ratelimit: 45 callbacks suppressed [ 107.488210][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.539317][ T4291] device veth1_macvtap left promiscuous mode [ 107.552783][ T4291] device veth0_macvtap left promiscuous mode [ 107.570445][ T4291] device veth1_vlan left promiscuous mode [ 107.588042][ T4291] device veth0_vlan left promiscuous mode [ 108.386284][ T4229] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 108.417384][ T4291] team0 (unregistering): Port device team_slave_1 removed [ 108.472650][ T4291] team0 (unregistering): Port device team_slave_0 removed [ 108.510062][ T4291] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.560703][ T4291] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.656134][ T4229] usb 4-1: Using ep0 maxpacket: 8 [ 108.772930][ T4291] bond0 (unregistering): Released all slaves [ 108.796188][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 108.823660][ T4709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 108.836200][ T4229] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.946383][ T4229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.962857][ T4709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 108.989616][ T4229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.021975][ T4229] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 109.121228][ T4709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.175297][ T4709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.266485][ T4229] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=33.40 [ 109.283530][ T4229] usb 4-1: New USB device strings: Mfr=235, Product=123, SerialNumber=127 [ 109.296451][ T4229] usb 4-1: Product: syz [ 109.300808][ T4229] usb 4-1: Manufacturer: syz [ 109.300828][ T4229] usb 4-1: SerialNumber: syz [ 109.323366][ T4909] device-mapper: ioctl: device has been removed from the dev hash table. [ 109.654885][ T4709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.742030][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.758337][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.822018][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.892529][ T4933] FAULT_INJECTION: forcing a failure. [ 109.892529][ T4933] name failslab, interval 1, probability 0, space 0, times 0 [ 109.919502][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.936405][ T4933] CPU: 1 PID: 4933 Comm: syz.0.140 Not tainted syzkaller #0 [ 109.943757][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 109.953847][ T4933] Call Trace: [ 109.957157][ T4933] [ 109.960125][ T4933] dump_stack_lvl+0x188/0x250 [ 109.964891][ T4933] ? show_regs_print_info+0x20/0x20 [ 109.970133][ T4933] ? load_image+0x410/0x410 [ 109.974693][ T4933] ? __lock_acquire+0x7d40/0x7d40 [ 109.979769][ T4933] should_fail+0x383/0x4b0 [ 109.984236][ T4933] should_failslab+0x5/0x20 [ 109.988940][ T4933] slab_pre_alloc_hook+0x51/0xc0 [ 109.994011][ T4933] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 109.999777][ T4933] ? __get_vm_area_node+0x119/0x2d0 [ 110.005029][ T4933] __get_vm_area_node+0x119/0x2d0 [ 110.010096][ T4933] ? aa_get_newest_label+0xf5/0x5a0 [ 110.010128][ T4933] __vmalloc_node_range+0xef/0x8b0 [ 110.010155][ T4933] ? bpf_jit_binary_alloc+0x120/0x240 [ 110.010187][ T4933] module_alloc+0x81/0x90 [ 110.030561][ T4933] ? bpf_jit_binary_alloc+0x120/0x240 [ 110.035987][ T4933] bpf_jit_binary_alloc+0x120/0x240 [ 110.041449][ T4933] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 110.041484][ T4933] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 110.052272][ T4933] ? kfree+0xef/0x2a0 [ 110.056326][ T4933] ? stack_trace_snprint+0xe0/0xe0 [ 110.061521][ T4933] ? emit_bpf_dispatcher+0x1050/0x1050 [ 110.067062][ T4933] bpf_prog_select_runtime+0x46f/0x7b0 [ 110.072576][ T4933] ? bpf_prog_realloc+0x142/0x1c0 [ 110.077649][ T4933] bpf_prepare_filter+0x100e/0x11b0 [ 110.077672][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.082895][ T4933] ? seccomp_attach_filter+0xbb0/0xbb0 [ 110.082925][ T4933] ? bpf_prog_create+0x1f0/0x1f0 [ 110.082947][ T4933] ? kmemdup+0x3d/0x50 [ 110.082966][ T4933] ? memcpy+0x3c/0x60 [ 110.082990][ T4933] bpf_prog_create_from_user+0x2cc/0x420 [ 110.083014][ T4933] ? seccomp_attach_filter+0xbb0/0xbb0 [ 110.083041][ T4933] do_seccomp+0x808/0x16a0 [ 110.083068][ T4933] ? __lock_acquire+0x7d40/0x7d40 [ 110.083098][ T4933] ? prctl_set_seccomp+0x60/0x60 [ 110.083120][ T4933] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.083159][ T4933] ? lockdep_hardirqs_on+0x94/0x140 [ 110.083189][ T4933] do_syscall_64+0x4c/0xa0 [ 110.083219][ T4933] ? clear_bhb_loop+0x30/0x80 [ 110.083244][ T4933] ? clear_bhb_loop+0x30/0x80 [ 110.083271][ T4933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.083297][ T4933] RIP: 0033:0x7fd59aab41d9 [ 110.130463][ T4933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.150778][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.151055][ T4933] RSP: 002b:00007fd598d0c028 EFLAGS: 00000246 [ 110.155953][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.160430][ T4933] ORIG_RAX: 000000000000013d [ 110.160443][ T4933] RAX: ffffffffffffffda RBX: 00007fd59ad3bfa0 RCX: 00007fd59aab41d9 [ 110.160461][ T4933] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 110.160476][ T4933] RBP: 00007fd59ab4b888 R08: 0000000000000000 R09: 0000000000000000 [ 110.160492][ T4933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.170824][ T4933] R13: 00007fd59ad3c038 R14: 00007fd59ad3bfa0 R15: 00007fff544c0d08 [ 110.197525][ T4933] [ 110.260789][ T4933] syz.0.140: vmalloc error: size 4096, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 110.316834][ T4933] CPU: 0 PID: 4933 Comm: syz.0.140 Not tainted syzkaller #0 [ 110.324257][ T4933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.334368][ T4933] Call Trace: [ 110.337677][ T4933] [ 110.340654][ T4933] dump_stack_lvl+0x188/0x250 [ 110.345393][ T4933] ? rcu_lock_release+0x5/0x20 [ 110.350207][ T4933] ? show_regs_print_info+0x20/0x20 [ 110.355441][ T4933] ? load_image+0x410/0x410 [ 110.360002][ T4933] warn_alloc+0x245/0x320 [ 110.364393][ T4933] ? zone_watermark_ok_safe+0x250/0x250 [ 110.369982][ T4933] ? rcu_is_watching+0x11/0xa0 [ 110.374793][ T4933] ? __get_vm_area_node+0x119/0x2d0 [ 110.380037][ T4933] ? __get_vm_area_node+0x2b5/0x2d0 [ 110.385281][ T4933] ? aa_get_newest_label+0xf5/0x5a0 [ 110.390531][ T4933] __vmalloc_node_range+0x2b1/0x8b0 [ 110.395818][ T4933] module_alloc+0x81/0x90 [ 110.400180][ T4933] ? bpf_jit_binary_alloc+0x120/0x240 [ 110.405590][ T4933] bpf_jit_binary_alloc+0x120/0x240 [ 110.410825][ T4933] ? bpf_int_jit_compile+0xc4d0/0xc4d0 [ 110.416329][ T4933] bpf_int_jit_compile+0xb2f5/0xc4d0 [ 110.421656][ T4933] ? kfree+0xef/0x2a0 [ 110.425712][ T4933] ? stack_trace_snprint+0xe0/0xe0 [ 110.430885][ T4933] ? emit_bpf_dispatcher+0x1050/0x1050 [ 110.436425][ T4933] bpf_prog_select_runtime+0x46f/0x7b0 [ 110.441953][ T4933] ? bpf_prog_realloc+0x142/0x1c0 [ 110.447017][ T4933] bpf_prepare_filter+0x100e/0x11b0 [ 110.452260][ T4933] ? seccomp_attach_filter+0xbb0/0xbb0 [ 110.457805][ T4933] ? bpf_prog_create+0x1f0/0x1f0 [ 110.462785][ T4933] ? kmemdup+0x3d/0x50 [ 110.466892][ T4933] ? memcpy+0x3c/0x60 [ 110.470914][ T4933] bpf_prog_create_from_user+0x2cc/0x420 [ 110.476586][ T4933] ? seccomp_attach_filter+0xbb0/0xbb0 [ 110.482093][ T4933] do_seccomp+0x808/0x16a0 [ 110.486556][ T4933] ? __lock_acquire+0x7d40/0x7d40 [ 110.491653][ T4933] ? prctl_set_seccomp+0x60/0x60 [ 110.496640][ T4933] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 110.502690][ T4933] ? lockdep_hardirqs_on+0x94/0x140 [ 110.507936][ T4933] do_syscall_64+0x4c/0xa0 [ 110.512388][ T4933] ? clear_bhb_loop+0x30/0x80 [ 110.517112][ T4933] ? clear_bhb_loop+0x30/0x80 [ 110.521834][ T4933] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 110.527769][ T4933] RIP: 0033:0x7fd59aab41d9 [ 110.532218][ T4933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.551862][ T4933] RSP: 002b:00007fd598d0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 110.560337][ T4933] RAX: ffffffffffffffda RBX: 00007fd59ad3bfa0 RCX: 00007fd59aab41d9 [ 110.568358][ T4933] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 110.576367][ T4933] RBP: 00007fd59ab4b888 R08: 0000000000000000 R09: 0000000000000000 [ 110.584404][ T4933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.592506][ T4933] R13: 00007fd59ad3c038 R14: 00007fd59ad3bfa0 R15: 00007fff544c0d08 [ 110.600534][ T4933] [ 110.852102][ T4940] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 110.980722][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 111.024126][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 111.034711][ T4461] tipc: Subscription rejected, illegal request [ 111.063452][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 111.104549][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.111723][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.168628][ T4229] cdc_ncm 4-1:1.0: skipping garbage [ 111.173912][ T4229] cdc_ncm 4-1:1.0: skipping garbage [ 111.191718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 111.206657][ T4229] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 111.213504][ T4229] cdc_ncm 4-1:1.0: bind() failure [ 111.219887][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 111.312183][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 111.330094][ T4229] usb 4-1: USB disconnect, device number 3 [ 111.348696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 111.382396][ T4933] Mem-Info: [ 111.385581][ T4933] active_anon:329 inactive_anon:6340 isolated_anon:0 [ 111.385581][ T4933] active_file:4937 inactive_file:46111 isolated_file:0 [ 111.385581][ T4933] unevictable:768 dirty:94 writeback:0 [ 111.385581][ T4933] slab_reclaimable:20860 slab_unreclaimable:96750 [ 111.385581][ T4933] mapped:30009 shmem:1654 pagetables:636 bounce:0 [ 111.385581][ T4933] kernel_misc_reclaimable:0 [ 111.385581][ T4933] free:1364082 free_pcp:13489 free_cma:0 [ 111.437085][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 111.472528][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 111.483469][ T4963] jffs2: notice: (4963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 111.512888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 111.532972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 111.628972][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.657550][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 111.682267][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 111.701991][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 111.731410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 111.955599][ T4980] tmpfs: Unknown parameter 'quota' [ 112.154775][ T4933] Node 0 active_anon:1280kB inactive_anon:25372kB active_file:19548kB inactive_file:184444kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120152kB dirty:380kB writeback:0kB shmem:4544kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:10896kB pagetables:2780kB all_unreclaimable? no [ 112.266354][ T4933] Node 1 active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:2080kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 112.316639][ T4933] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.382025][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 112.418836][ T4933] lowmem_reserve[]: 0 2523 2524 2524 2524 [ 112.430580][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 112.437346][ T4933] Node 0 DMA32 free:1529976kB min:34648kB low:43308kB high:51968kB reserved_highatomic:0KB active_anon:1280kB inactive_anon:25572kB active_file:19548kB inactive_file:184444kB unevictable:1536kB writepending:380kB present:3129332kB managed:2591004kB mlocked:0kB bounce:0kB free_pcp:42308kB local_pcp:21220kB free_cma:0kB [ 112.516661][ T4933] lowmem_reserve[]: 0 0 0 0 0 [ 112.528169][ T4933] Node 0 Normal free:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:916kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.636109][ C1] net_ratelimit: 53 callbacks suppressed [ 112.648993][ T4709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.672509][ T4933] lowmem_reserve[]: 0 0 0 0 0 [ 112.706789][ T4933] Node 1 Normal free:3911112kB min:55240kB low:69048kB high:82856kB reserved_highatomic:0KB active_anon:32kB inactive_anon:512kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:11644kB local_pcp:5796kB free_cma:0kB [ 112.812166][ T4933] lowmem_reserve[]: 0 0 0 0 0 [ 112.837752][ T4933] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.895136][ T4933] Node 0 DMA32: 1530*4kB (UME) [ 112.932643][ T4933] 844*8kB (UME) 388*16kB (UME) 404*32kB (UME) 202*64kB (UME) 27*128kB (UME) 8*256kB (UME) 10*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 358*4096kB (M) = 1530120kB [ 113.016575][ T4933] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 113.076107][ T4933] Node 1 Normal: 66*4kB (U) 16*8kB (UME) 18*16kB (UME) 53*32kB (UE) 24*64kB (UME) 17*128kB (UME) 4*256kB (UME) 3*512kB (U) 1*1024kB (U) 1*2048kB (M) 952*4096kB (M) = 3911112kB [ 113.127582][ T5033] FAULT_INJECTION: forcing a failure. [ 113.127582][ T5033] name failslab, interval 1, probability 0, space 0, times 0 [ 113.146201][ T4933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.167713][ T5033] CPU: 0 PID: 5033 Comm: syz.5.166 Not tainted syzkaller #0 [ 113.175065][ T5033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 113.185162][ T5033] Call Trace: [ 113.188477][ T5033] [ 113.191485][ T5033] dump_stack_lvl+0x188/0x250 [ 113.196214][ T5033] ? show_regs_print_info+0x20/0x20 [ 113.201457][ T5033] ? load_image+0x410/0x410 [ 113.206052][ T5033] ? __might_sleep+0xf0/0xf0 [ 113.206081][ T5033] ? __lock_acquire+0x7d40/0x7d40 [ 113.206111][ T5033] should_fail+0x383/0x4b0 [ 113.220219][ T5033] should_failslab+0x5/0x20 [ 113.224781][ T5033] slab_pre_alloc_hook+0x51/0xc0 [ 113.229776][ T5033] ? sockfs_init_fs_context+0xa0/0xa0 [ 113.235203][ T5033] ? sock_alloc_inode+0x17/0xb0 [ 113.240101][ T5033] kmem_cache_alloc+0x3d/0x280 [ 113.244919][ T5033] ? sockfs_init_fs_context+0xa0/0xa0 [ 113.250335][ T5033] sock_alloc_inode+0x17/0xb0 [ 113.255053][ T5033] ? sockfs_init_fs_context+0xa0/0xa0 [ 113.260478][ T5033] new_inode_pseudo+0x5f/0x210 [ 113.265285][ T5033] __sock_create+0x128/0x910 [ 113.269941][ T5033] __sys_socket+0xe2/0x170 [ 113.269972][ T5033] __x64_sys_socket+0x76/0x80 [ 113.269998][ T5033] do_syscall_64+0x4c/0xa0 [ 113.270021][ T5033] ? clear_bhb_loop+0x30/0x80 [ 113.288459][ T5033] ? clear_bhb_loop+0x30/0x80 [ 113.293193][ T5033] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 113.299161][ T5033] RIP: 0033:0x7f3e7fdda1d9 [ 113.303623][ T5033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.323270][ T5033] RSP: 002b:00007f3e7e031fc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 113.331745][ T5033] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f3e7fdda1d9 [ 113.339773][ T5033] RDX: 0000000000000001 RSI: 0000000000000003 RDI: 000000000000001f [ 113.347783][ T5033] RBP: 00007f3e7fe71888 R08: 0000000000000000 R09: 0000000000000000 [ 113.355800][ T5033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.363832][ T5033] R13: 00007f3e80062038 R14: 00007f3e80061fa0 R15: 00007ffc22d81fc8 [ 113.366553][ T4573] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.371873][ T5033] [ 113.385458][ T4933] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.414053][ T4933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.444174][ T4933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.474625][ T4933] 52704 total pagecache pages [ 113.491727][ T4933] 0 pages in swap cache [ 113.506429][ T4933] Swap cache stats: add 34, delete 34, find 1/6 [ 113.528874][ T4933] Free swap = 124728kB [ 113.546558][ T4933] Total swap = 124996kB [ 113.556082][ T4933] 2097051 pages RAM [ 113.567343][ T4933] 0 pages HighMem/MovableOnly [ 113.576359][ T4933] 415313 pages reserved [ 113.596535][ T4933] 0 pages cma reserved [ 113.646594][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 113.659467][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 113.727821][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 113.746962][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 113.772214][ T4709] device veth0_vlan entered promiscuous mode [ 113.778415][ T4573] usb 5-1: config 0 has no interfaces? [ 113.783997][ T4573] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 113.793974][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 113.813111][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 113.845385][ T4573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.870906][ T4709] device veth1_vlan entered promiscuous mode [ 113.905220][ T4573] usb 5-1: config 0 descriptor?? [ 113.998784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 114.017875][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 114.063639][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 114.102253][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 114.134727][ T4709] device veth0_macvtap entered promiscuous mode [ 114.173062][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 114.220629][ T4709] device veth1_macvtap entered promiscuous mode [ 114.295251][ T13] usb 5-1: USB disconnect, device number 4 [ 114.323355][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.323372][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.323386][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.323401][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.323411][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.323424][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.323437][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 114.441612][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.460185][ T5052] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.471310][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.479419][ T5052] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 114.497647][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 114.507305][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 114.561934][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.593823][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.623123][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.670575][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.696779][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.743448][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.772897][ T4709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 114.813937][ T4709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 114.866794][ T4709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.879973][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 114.935097][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 114.955558][ T5079] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 114.978813][ T4709] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.053431][ T4709] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.070060][ T5097] device-mapper: table: 248:0: too large device [ 115.086989][ T5079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 115.105399][ T5097] device-mapper: ioctl: error adding target to table [ 115.132092][ T4709] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.161895][ T4709] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.532829][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.532848][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.533598][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.718015][ T5101] jffs2: notice: (5101) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 115.785350][ T4251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.805324][ T4251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.848820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.859484][ T5120] FAULT_INJECTION: forcing a failure. [ 115.859484][ T5120] name failslab, interval 1, probability 0, space 0, times 0 [ 115.876413][ T5120] CPU: 0 PID: 5120 Comm: syz.5.189 Not tainted syzkaller #0 [ 115.883756][ T5120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 115.893852][ T5120] Call Trace: [ 115.897176][ T5120] [ 115.900144][ T5120] dump_stack_lvl+0x188/0x250 [ 115.904862][ T5120] ? show_regs_print_info+0x20/0x20 [ 115.910103][ T5120] ? load_image+0x410/0x410 [ 115.914661][ T5120] ? __might_sleep+0xf0/0xf0 [ 115.919324][ T5120] ? __lock_acquire+0x7d40/0x7d40 [ 115.924403][ T5120] should_fail+0x383/0x4b0 [ 115.928855][ T5120] should_failslab+0x5/0x20 [ 115.928881][ T5120] slab_pre_alloc_hook+0x51/0xc0 [ 115.928905][ T5120] ? security_file_alloc+0x30/0x110 [ 115.928930][ T5120] kmem_cache_alloc+0x3d/0x280 [ 115.928951][ T5120] ? rcu_is_watching+0x11/0xa0 [ 115.928977][ T5120] security_file_alloc+0x30/0x110 [ 115.929004][ T5120] __alloc_file+0xc2/0x240 [ 115.948740][ T5120] alloc_empty_file+0x90/0x180 [ 115.948776][ T5120] alloc_file+0x5c/0x510 [ 115.958578][ T5120] ? do_raw_spin_unlock+0x11d/0x230 [ 115.958615][ T5120] alloc_file_pseudo+0x180/0x200 [ 115.967810][ T5120] ? alloc_empty_file_noaccount+0x80/0x80 [ 115.967852][ T5120] anon_inode_getfile+0xc1/0x1a0 [ 115.967881][ T5120] sync_file_create+0x72/0x1c0 [ 115.977332][ T5120] sw_sync_ioctl+0x91d/0xaa0 [ 115.977372][ T5120] ? __bpf_trace_sync_timeline+0x20/0x20 [ 115.977410][ T5120] ? bpf_lsm_file_ioctl+0x5/0x10 [ 115.977432][ T5120] ? security_file_ioctl+0x7c/0xa0 [ 115.977457][ T5120] ? __bpf_trace_sync_timeline+0x20/0x20 [ 115.977481][ T5120] __se_sys_ioctl+0xfa/0x170 [ 116.008233][ T5120] do_syscall_64+0x4c/0xa0 [ 116.008266][ T5120] ? clear_bhb_loop+0x30/0x80 [ 116.018345][ T5120] ? clear_bhb_loop+0x30/0x80 [ 116.018381][ T5120] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 116.042460][ T5120] RIP: 0033:0x7f3e7fdda1d9 [ 116.042487][ T5120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.072459][ T5120] RSP: 002b:00007f3e7e032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 116.072504][ T5120] RAX: ffffffffffffffda RBX: 00007f3e80061fa0 RCX: 00007f3e7fdda1d9 [ 116.072522][ T5120] RDX: 0000200000000b00 RSI: 00000000c0285700 RDI: 0000000000000004 [ 116.072536][ T5120] RBP: 00007f3e7fe71888 R08: 0000000000000000 R09: 0000000000000000 [ 116.072550][ T5120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.072563][ T5120] R13: 00007f3e80062038 R14: 00007f3e80061fa0 R15: 00007ffc22d81fc8 [ 116.072596][ T5120] [ 116.072621][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.105380][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.136458][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.226156][ T1108] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.432021][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.193'. [ 116.436764][ T5137] netlink: 104 bytes leftover after parsing attributes in process `syz.6.191'. [ 116.489275][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 116.646792][ T1108] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 116.660006][ T1108] usb 5-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 116.686993][ T1108] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 116.766276][ T4187] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.911985][ T1108] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 116.927600][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.948729][ T1108] usb 5-1: Product: syz [ 116.952945][ T1108] usb 5-1: Manufacturer: syz [ 116.964064][ T1108] usb 5-1: SerialNumber: syz [ 117.019169][ T1108] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 117.033400][ T1108] imon 5-1:155.0: unable to initialize intf0, err -19 [ 117.040587][ T1108] imon:imon_probe: failed to initialize context! [ 117.048661][ T1108] imon 5-1:155.0: unable to register, err -19 [ 117.086275][ T4187] usb 4-1: Using ep0 maxpacket: 8 [ 117.100489][ T4267] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 117.142447][ T5169] 9pnet_virtio: no channels available for device syz [ 117.228526][ T4187] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 117.239892][ T4187] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 117.288673][ T4187] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 117.326165][ T4187] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 117.346237][ T4267] usb 6-1: Using ep0 maxpacket: 8 [ 117.362541][ T4187] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 117.379464][ T4187] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 117.398560][ T5181] tipc: Started in network mode [ 117.408841][ T4187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.424756][ T5181] tipc: Node identity 4, cluster identity 4711 [ 117.434977][ T5181] tipc: Node number set to 4 [ 117.469831][ T4267] usb 6-1: config 0 has no interfaces? [ 117.541562][ T5189] tipc: Started in network mode [ 117.557122][ T5189] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 117.564573][ T5189] tipc: Enabled bearer , priority 0 [ 117.603242][ T5195] tipc: Disabling bearer [ 117.646562][ T4267] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 117.672608][ T4267] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.687585][ C0] net_ratelimit: 75 callbacks suppressed [ 117.695191][ T4187] usb 4-1: GET_CAPABILITIES returned 0 [ 117.708311][ T4187] usbtmc 4-1:16.0: can't read capabilities [ 117.711734][ T4267] usb 6-1: Product: syz [ 117.731969][ T4267] usb 6-1: Manufacturer: syz [ 117.751590][ T4267] usb 6-1: SerialNumber: syz [ 117.785900][ T4267] usb 6-1: config 0 descriptor?? [ 117.852853][ T5205] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 117.967548][ T5139] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 118.047547][ T1108] usb 6-1: USB disconnect, device number 3 [ 118.066117][ T4187] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.170169][ T13] usb 4-1: USB disconnect, device number 4 [ 118.516367][ T4187] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.532326][ T4187] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 118.544338][ T4187] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 118.574009][ T4187] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 118.596232][ T4187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.011841][ T7] usb 5-1: USB disconnect, device number 5 [ 119.019475][ T5251] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 119.157235][ T4187] cxacru_cm: 523 callbacks suppressed [ 119.157256][ T4187] cxacru 1-1:1.0: send of cm 0x91 failed (-71) [ 119.186295][ T4187] ATM dev 0: cxacru_atm_start: CARD_GET_MAC_ADDRESS returned -71 [ 119.209358][ T4187] ATM dev 0: usbatm_atm_init: atm_start failed: -71! [ 119.265702][ T4187] cxacru: probe of 1-1:1.0 failed with error -71 [ 119.339567][ T4187] usb 1-1: USB disconnect, device number 4 [ 119.636686][ T5285] device syzkaller0 entered promiscuous mode [ 119.862022][ T5298] netlink: 12 bytes leftover after parsing attributes in process `syz.5.235'. [ 119.991785][ T5305] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 120.172481][ T5309] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 120.232408][ T5309] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 120.694226][ T5347] overlayfs: failed to resolve 'upper': -2 [ 120.757882][ T5342] device syzkaller0 entered promiscuous mode [ 120.914331][ T5359] FAULT_INJECTION: forcing a failure. [ 120.914331][ T5359] name failslab, interval 1, probability 0, space 0, times 0 [ 121.007111][ T5359] CPU: 1 PID: 5359 Comm: syz.4.256 Not tainted syzkaller #0 [ 121.014472][ T5359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.024741][ T5359] Call Trace: [ 121.028100][ T5359] [ 121.031068][ T5359] dump_stack_lvl+0x188/0x250 [ 121.035797][ T5359] ? show_regs_print_info+0x20/0x20 [ 121.041045][ T5359] ? load_image+0x410/0x410 [ 121.045619][ T5359] ? __lock_acquire+0x7d40/0x7d40 [ 121.050687][ T5359] ? __mutex_lock_common+0x435/0x2400 [ 121.056108][ T5359] should_fail+0x383/0x4b0 [ 121.060575][ T5359] should_failslab+0x5/0x20 [ 121.065125][ T5359] slab_pre_alloc_hook+0x51/0xc0 [ 121.070099][ T5359] kmem_cache_alloc_trace+0x47/0x290 [ 121.075411][ T5359] ? usb_control_msg+0x70/0x3e0 [ 121.080310][ T5359] usb_control_msg+0x70/0x3e0 [ 121.085028][ T5359] hub_ext_port_status+0x103/0x6c0 [ 121.090190][ T5359] hub_activate+0x73e/0x1ad0 [ 121.094837][ T5359] hub_resume+0xa2/0x360 [ 121.099117][ T5359] ? usb_hub_find_child+0x115/0x1d0 [ 121.099145][ T5359] ? hub_suspend+0xa90/0xa90 [ 121.109005][ T5359] usb_resume_both+0x5e7/0xaf0 [ 121.113944][ T5359] ? autosuspend_check+0x5b0/0x5b0 [ 121.113975][ T5359] __rpm_callback+0x2fd/0x790 [ 121.123805][ T5359] ? autosuspend_check+0x5b0/0x5b0 [ 121.128958][ T5359] rpm_resume+0x11aa/0x1c70 [ 121.128986][ T5359] ? autosuspend_check+0x5b0/0x5b0 [ 121.129018][ T5359] ? __pm_runtime_resume+0x170/0x170 [ 121.138646][ T5359] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 121.138677][ T5359] ? _raw_spin_lock+0x40/0x40 [ 121.138702][ T5359] ? device_match_fwnode+0x30/0x30 [ 121.138724][ T5359] ? bus_for_each_dev+0x1f0/0x1f0 [ 121.149816][ T5359] __pm_runtime_resume+0x11a/0x170 [ 121.149850][ T5359] usb_autoresume_device+0x1f/0x60 [ 121.149875][ T5359] usbdev_open+0x18d/0x7a0 [ 121.159694][ T5359] ? __lock_acquire+0x7d40/0x7d40 [ 121.169840][ T5359] ? do_raw_spin_lock+0x128/0x2f0 [ 121.169870][ T5359] ? usbdev_mmap+0x6d0/0x6d0 [ 121.169906][ T5359] ? do_raw_spin_unlock+0x11d/0x230 [ 121.179555][ T5359] chrdev_open+0x585/0x5f0 [ 121.179593][ T5359] ? cd_forget+0x160/0x160 [ 121.179622][ T5359] ? fsnotify_perm+0x3a7/0x560 [ 121.179647][ T5359] ? cd_forget+0x160/0x160 [ 121.179668][ T5359] do_dentry_open+0x7f7/0xf90 [ 121.190059][ T5359] ? vfs_open+0x2b/0x80 [ 121.190093][ T5359] path_openat+0x2718/0x2fb0 [ 121.204703][ T5359] ? __kasan_slab_alloc+0xa9/0xc0 [ 121.213843][ T5359] ? do_filp_open+0x400/0x400 [ 121.213929][ T5359] do_filp_open+0x1df/0x400 [ 121.246185][ T5359] ? vfs_tmpfile+0x300/0x300 [ 121.250852][ T5359] ? _raw_spin_unlock+0x24/0x40 [ 121.255756][ T5359] ? alloc_fd+0x59e/0x650 [ 121.260149][ T5359] do_sys_openat2+0x14b/0x500 [ 121.265004][ T5359] ? __lock_acquire+0x7d40/0x7d40 [ 121.270088][ T5359] ? do_sys_open+0xe0/0xe0 [ 121.274562][ T5359] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 121.280587][ T5359] ? lock_chain_count+0x20/0x20 [ 121.285483][ T5359] __x64_sys_openat+0x135/0x160 [ 121.290412][ T5359] do_syscall_64+0x4c/0xa0 [ 121.294872][ T5359] ? clear_bhb_loop+0x30/0x80 [ 121.299598][ T5359] ? clear_bhb_loop+0x30/0x80 [ 121.304332][ T5359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 121.310283][ T5359] RIP: 0033:0x7f43ec560a0e [ 121.314836][ T5359] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.334479][ T5359] RSP: 002b:00007f43ea7f7b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 121.342944][ T5359] RAX: ffffffffffffffda RBX: 00007f43ea7f86c0 RCX: 00007f43ec560a0e [ 121.342965][ T5359] RDX: 0000000000160301 RSI: 00007f43ea7f7c00 RDI: ffffffffffffff9c [ 121.342981][ T5359] RBP: 00007f43ea7f7c00 R08: 0000000000000000 R09: 0000000000000000 [ 121.342997][ T5359] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 121.343012][ T5359] R13: 00007f43ec828038 R14: 00007f43ec827fa0 R15: 00007fff5c7bf7f8 [ 121.383299][ T5359] [ 121.410374][ T5359] hub 6-0:1.0: hub_ext_port_status failed (err = -12) [ 121.593792][ T5382] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.612014][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.669039][ T5388] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 121.853717][ T5388] device bond1 entered promiscuous mode [ 121.889866][ T5388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.902825][ T5393] bond1: (slave gre1): refused to change device type [ 121.976579][ T4233] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 122.246135][ T4233] usb 7-1: Using ep0 maxpacket: 16 [ 122.366365][ T4233] usb 7-1: config 0 has no interfaces? [ 122.532515][ T5438] FAULT_INJECTION: forcing a failure. [ 122.532515][ T5438] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.546135][ T4233] usb 7-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 122.555227][ T4233] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.577328][ T4233] usb 7-1: Product: syz [ 122.581683][ T4233] usb 7-1: Manufacturer: syz [ 122.596192][ T4233] usb 7-1: SerialNumber: syz [ 122.627032][ T4233] usb 7-1: config 0 descriptor?? [ 122.642785][ T5438] CPU: 0 PID: 5438 Comm: syz.0.280 Not tainted syzkaller #0 [ 122.650129][ T5438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 122.660216][ T5438] Call Trace: [ 122.663527][ T5438] [ 122.666494][ T5438] dump_stack_lvl+0x188/0x250 [ 122.671220][ T5438] ? show_regs_print_info+0x20/0x20 [ 122.676469][ T5438] ? load_image+0x410/0x410 [ 122.681019][ T5438] ? __lock_acquire+0x7d40/0x7d40 [ 122.686085][ T5438] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 122.692103][ T5438] ? mutex_unlock+0x10/0x10 [ 122.696638][ T5438] should_fail+0x383/0x4b0 [ 122.701081][ T5438] _copy_from_user+0x2e/0x170 [ 122.705787][ T5438] sg_write+0x9af/0xe90 [ 122.709986][ T5438] ? sg_read+0x1420/0x1420 [ 122.710072][ T5438] ? end_current_label_crit_section+0x14b/0x170 [ 122.720698][ T5438] ? common_file_perm+0x171/0x1c0 [ 122.720726][ T5438] ? fsnotify_perm+0x5d/0x560 [ 122.730473][ T5438] ? security_file_permission+0x75/0xa0 [ 122.736088][ T5438] ? sg_read+0x1420/0x1420 [ 122.740549][ T5438] vfs_write+0x304/0xd70 [ 122.744845][ T5438] ? file_end_write+0x250/0x250 [ 122.749747][ T5438] ? __fget_files+0x402/0x470 [ 122.754467][ T5438] ? __fdget_pos+0x1e2/0x370 [ 122.759091][ T5438] ? ksys_write+0x70/0x260 [ 122.763545][ T5438] ksys_write+0x153/0x260 [ 122.767908][ T5438] ? __ia32_sys_read+0x80/0x80 [ 122.772712][ T5438] ? lockdep_hardirqs_on+0x94/0x140 [ 122.777944][ T5438] do_syscall_64+0x4c/0xa0 [ 122.777969][ T5438] ? clear_bhb_loop+0x30/0x80 [ 122.777994][ T5438] ? clear_bhb_loop+0x30/0x80 [ 122.778020][ T5438] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 122.778045][ T5438] RIP: 0033:0x7fd59aab41d9 [ 122.778066][ T5438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.778085][ T5438] RSP: 002b:00007fd598d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 122.778109][ T5438] RAX: ffffffffffffffda RBX: 00007fd59ad3bfa0 RCX: 00007fd59aab41d9 [ 122.778125][ T5438] RDX: 0000000000000103 RSI: 0000200000001880 RDI: 0000000000000004 [ 122.778140][ T5438] RBP: 00007fd59ab4b888 R08: 0000000000000000 R09: 0000000000000000 [ 122.778155][ T5438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.778169][ T5438] R13: 00007fd59ad3c038 R14: 00007fd59ad3bfa0 R15: 00007fff544c0d08 [ 122.778200][ T5438] [ 122.778243][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.920514][ T5383] udc-core: couldn't find an available UDC or it's busy [ 122.941347][ T5383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.036253][ C1] net_ratelimit: 71 callbacks suppressed [ 123.247766][ T5469] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 123.738170][ T5501] jffs2: notice: (5501) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 123.755251][ T5498] netlink: 'syz.0.303': attribute type 4 has an invalid length. [ 123.847329][ T4191] Bluetooth: Wrong link type (-22) [ 123.965864][ T5517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.311'. [ 124.177903][ T5529] netlink: 44 bytes leftover after parsing attributes in process `syz.6.315'. [ 124.209081][ T5529] netlink: 43 bytes leftover after parsing attributes in process `syz.6.315'. [ 124.218980][ T5536] 9pnet_virtio: no channels available for device syz [ 124.238200][ T5529] netlink: 'syz.6.315': attribute type 5 has an invalid length. [ 124.257307][ T5529] netlink: 43 bytes leftover after parsing attributes in process `syz.6.315'. [ 124.571825][ T4191] Bluetooth: Frame is too long (len 16, expected len 15) [ 125.528944][ T5588] ftl_cs: FTL header not found. [ 125.655295][ T5588] block2mtd: mtd1: [/dev/zram0] erase_size = 0KiB [65] [ 126.313883][ T5631] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 126.322089][ T5631] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 126.386270][ T5639] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 127.249016][ T5689] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 127.353824][ T5689] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 127.496102][ T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.525059][ T5707] FAULT_INJECTION: forcing a failure. [ 127.525059][ T5707] name failslab, interval 1, probability 0, space 0, times 0 [ 127.538872][ T5707] CPU: 0 PID: 5707 Comm: syz.0.353 Not tainted syzkaller #0 [ 127.546208][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.556298][ T5707] Call Trace: [ 127.559619][ T5707] [ 127.562590][ T5707] dump_stack_lvl+0x188/0x250 [ 127.567325][ T5707] ? show_regs_print_info+0x20/0x20 [ 127.572572][ T5707] ? load_image+0x410/0x410 [ 127.577129][ T5707] ? __might_sleep+0xf0/0xf0 [ 127.581760][ T5707] ? __lock_acquire+0x7d40/0x7d40 [ 127.586835][ T5707] should_fail+0x383/0x4b0 [ 127.591317][ T5707] should_failslab+0x5/0x20 [ 127.595860][ T5707] slab_pre_alloc_hook+0x51/0xc0 [ 127.600845][ T5707] kmem_cache_alloc_node_trace+0x4a/0x2f0 [ 127.606600][ T5707] ? __get_vm_area_node+0x119/0x2d0 [ 127.611862][ T5707] __get_vm_area_node+0x119/0x2d0 [ 127.616950][ T5707] __vmalloc_node_range+0xef/0x8b0 [ 127.622106][ T5707] ? prealloc_elems_and_freelist+0x86/0x1c0 [ 127.628046][ T5707] ? mutex_unlock+0x10/0x10 [ 127.628083][ T5707] bpf_map_area_alloc+0xd4/0xe0 [ 127.628109][ T5707] ? prealloc_elems_and_freelist+0x86/0x1c0 [ 127.628136][ T5707] prealloc_elems_and_freelist+0x86/0x1c0 [ 127.628167][ T5707] stack_map_alloc+0x3b0/0x550 [ 127.628196][ T5707] map_create+0x481/0x2330 [ 127.643502][ T5707] ? bpf_lsm_bpf+0x5/0x10 [ 127.643539][ T5707] __sys_bpf+0x30a/0x6f0 [ 127.667097][ T5707] ? bpf_link_show_fdinfo+0x380/0x380 [ 127.672543][ T5707] __x64_sys_bpf+0x78/0x90 [ 127.677022][ T5707] do_syscall_64+0x4c/0xa0 [ 127.681483][ T5707] ? clear_bhb_loop+0x30/0x80 [ 127.686305][ T5707] ? clear_bhb_loop+0x30/0x80 [ 127.691034][ T5707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.696984][ T5707] RIP: 0033:0x7fd59aab41d9 [ 127.701447][ T5707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.721097][ T5707] RSP: 002b:00007fd598d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 127.729558][ T5707] RAX: ffffffffffffffda RBX: 00007fd59ad3bfa0 RCX: 00007fd59aab41d9 [ 127.737588][ T5707] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 127.745622][ T5707] RBP: 00007fd59ab4b888 R08: 0000000000000000 R09: 0000000000000000 [ 127.753640][ T5707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.761659][ T5707] R13: 00007fd59ad3c038 R14: 00007fd59ad3bfa0 R15: 00007fff544c0d08 [ 127.769698][ T5707] [ 127.772863][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.996846][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 128.030798][ T5721] device syzkaller0 entered promiscuous mode [ 128.147607][ T7] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 128.156996][ C0] net_ratelimit: 64 callbacks suppressed [ 128.174241][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.186306][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.196492][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.207464][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.220909][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.230426][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.539394][ T7] usb 4-1: usb_control_msg returned -32 [ 128.550419][ T7] usbtmc 4-1:16.0: can't read capabilities [ 129.004186][ T5751] FAULT_INJECTION: forcing a failure. [ 129.004186][ T5751] name failslab, interval 1, probability 0, space 0, times 0 [ 129.018836][ T5751] CPU: 1 PID: 5751 Comm: syz.6.366 Not tainted syzkaller #0 [ 129.026179][ T5751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.036261][ T5751] Call Trace: [ 129.039571][ T5751] [ 129.042564][ T5751] dump_stack_lvl+0x188/0x250 [ 129.047294][ T5751] ? show_regs_print_info+0x20/0x20 [ 129.052547][ T5751] ? load_image+0x410/0x410 [ 129.057095][ T5751] ? __might_sleep+0xf0/0xf0 [ 129.061731][ T5751] ? __lock_acquire+0x7d40/0x7d40 [ 129.066809][ T5751] should_fail+0x383/0x4b0 [ 129.071309][ T5751] should_failslab+0x5/0x20 [ 129.075848][ T5751] slab_pre_alloc_hook+0x51/0xc0 [ 129.080820][ T5751] __kmalloc_node_track_caller+0x68/0x3a0 [ 129.086584][ T5751] ? cfg80211_del_sta_sinfo+0x1c5/0x550 [ 129.092167][ T5751] ? __alloc_skb+0xf4/0x750 [ 129.096707][ T5751] ? cfg80211_del_sta_sinfo+0x1c5/0x550 [ 129.102300][ T5751] __alloc_skb+0x22c/0x750 [ 129.106762][ T5751] cfg80211_del_sta_sinfo+0x1c5/0x550 [ 129.112178][ T5751] ? nl80211_send_station+0x3420/0x3420 [ 129.117789][ T5751] ? trace_drv_return_int+0x7e/0x1c0 [ 129.123118][ T5751] ? drv_sta_state+0x8c3/0x1080 [ 129.128020][ T5751] __sta_info_destroy_part2+0x2f7/0x3f0 [ 129.133617][ T5751] __sta_info_flush+0x3ad/0x460 [ 129.138505][ T5751] ? sta_info_stop+0x30/0x30 [ 129.143124][ T5751] ? __local_bh_enable_ip+0x136/0x1c0 [ 129.148569][ T5751] ? _local_bh_enable+0xa0/0xa0 [ 129.153462][ T5751] ? do_raw_spin_unlock+0x11d/0x230 [ 129.158700][ T5751] ieee80211_ibss_disconnect+0x25a/0x6f0 [ 129.164389][ T5751] ieee80211_ibss_leave+0x21/0x120 [ 129.169650][ T5751] __cfg80211_leave_ibss+0x1ce/0x3f0 [ 129.174989][ T5751] cfg80211_ibss_wext_siwessid+0x14b/0x330 [ 129.180850][ T5751] __cfg80211_wext_siwessid+0xd4/0x120 [ 129.186378][ T5751] ioctl_standard_iw_point+0x823/0xd50 [ 129.191921][ T5751] ? __cfg80211_wext_giwscan+0x30/0x30 [ 129.197424][ T5751] ? iw_handler_get_iwstats+0x240/0x240 [ 129.203022][ T5751] ? mutex_lock_io_nested+0x60/0x60 [ 129.208276][ T5751] ? apparmor_capable+0x12c/0x190 [ 129.213333][ T5751] ? full_name_hash+0x8e/0xe0 [ 129.218056][ T5751] ioctl_standard_call+0xaa/0x250 [ 129.223140][ T5751] ? __cfg80211_wext_giwscan+0x30/0x30 [ 129.228644][ T5751] ? __cfg80211_wext_giwscan+0x30/0x30 [ 129.234191][ T5751] wext_ioctl_dispatch+0x3da/0x470 [ 129.239352][ T5751] ? wext_ioctl_dispatch+0x470/0x470 [ 129.244692][ T5751] ? iw_handler_get_private+0x1e0/0x1e0 [ 129.250284][ T5751] wext_handle_ioctl+0x114/0x1d0 [ 129.255286][ T5751] ? call_commit_handler+0xf0/0xf0 [ 129.260436][ T5751] sock_ioctl+0x143/0x700 [ 129.264792][ T5751] ? sock_poll+0x420/0x420 [ 129.269249][ T5751] ? bpf_lsm_file_ioctl+0x5/0x10 [ 129.274206][ T5751] ? security_file_ioctl+0x7c/0xa0 [ 129.279352][ T5751] ? sock_poll+0x420/0x420 [ 129.283832][ T5751] __se_sys_ioctl+0xfa/0x170 [ 129.288442][ T5751] do_syscall_64+0x4c/0xa0 [ 129.292876][ T5751] ? clear_bhb_loop+0x30/0x80 [ 129.297571][ T5751] ? clear_bhb_loop+0x30/0x80 [ 129.302271][ T5751] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.308181][ T5751] RIP: 0033:0x7fd80a0f11d9 [ 129.312649][ T5751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.332276][ T5751] RSP: 002b:00007fd808349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.340716][ T5751] RAX: ffffffffffffffda RBX: 00007fd80a378fa0 RCX: 00007fd80a0f11d9 [ 129.348716][ T5751] RDX: 0000200000000800 RSI: 0000000000008b1a RDI: 0000000000000003 [ 129.356706][ T5751] RBP: 00007fd80a188888 R08: 0000000000000000 R09: 0000000000000000 [ 129.364697][ T5751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.372682][ T5751] R13: 00007fd80a379038 R14: 00007fd80a378fa0 R15: 00007ffe56cb8f18 [ 129.380695][ T5751] [ 129.488526][ T5754] FAULT_INJECTION: forcing a failure. [ 129.488526][ T5754] name failslab, interval 1, probability 0, space 0, times 0 [ 129.509785][ T5754] CPU: 0 PID: 5754 Comm: syz.6.367 Not tainted syzkaller #0 [ 129.517141][ T5754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.527228][ T5754] Call Trace: [ 129.530542][ T5754] [ 129.533506][ T5754] dump_stack_lvl+0x188/0x250 [ 129.538224][ T5754] ? show_regs_print_info+0x20/0x20 [ 129.538256][ T5754] ? load_image+0x410/0x410 [ 129.538281][ T5754] ? __might_sleep+0xf0/0xf0 [ 129.548429][ T5754] ? __lock_acquire+0x7d40/0x7d40 [ 129.548465][ T5754] should_fail+0x383/0x4b0 [ 129.548495][ T5754] should_failslab+0x5/0x20 [ 129.558377][ T5754] slab_pre_alloc_hook+0x51/0xc0 [ 129.558411][ T5754] __kmalloc_node+0x6d/0x3a0 [ 129.576975][ T5754] ? qdisc_alloc+0x97/0xae0 [ 129.581531][ T5754] qdisc_alloc+0x97/0xae0 [ 129.585942][ T5754] qdisc_create_dflt+0x5f/0x410 [ 129.590855][ T5754] prio_tune+0x64b/0x1320 [ 129.595248][ T5754] ? prio_destroy+0x3b0/0x3b0 [ 129.599976][ T5754] ? up_write+0x1b6/0x410 [ 129.604373][ T5754] ? tcf_block_get+0x64/0x90 [ 129.609001][ T5754] ? tcf_block_get+0x90/0x90 [ 129.613646][ T5754] ? prio_peek+0x160/0x160 [ 129.618135][ T5754] qdisc_create+0x7e4/0x11a0 [ 129.622786][ T5754] ? qdisc_notify+0x360/0x360 [ 129.627509][ T5754] ? lockdep_rtnl_is_held+0x22/0x30 [ 129.632752][ T5754] tc_modify_qdisc+0xae1/0x17d0 [ 129.637660][ T5754] ? rcu_lock_release+0x20/0x20 [ 129.642573][ T5754] ? rcu_lock_release+0x20/0x20 [ 129.647469][ T5754] rtnetlink_rcv_msg+0x7f1/0xf10 [ 129.652458][ T5754] ? rtnetlink_bind+0x80/0x80 [ 129.657176][ T5754] ? lock_chain_count+0x20/0x20 [ 129.662131][ T5754] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 129.668239][ T5754] ? lockdep_hardirqs_on+0x94/0x140 [ 129.673491][ T5754] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 129.679462][ T5754] ? _raw_spin_unlock+0x40/0x40 [ 129.684362][ T5754] ? rcu_preempt_deferred_qs_irqrestore+0x82d/0xbd0 [ 129.691007][ T5754] ? sync_rcu_exp_done_unlocked+0x140/0x140 [ 129.696960][ T5754] ? __copy_skb_header+0x3ba/0x4f0 [ 129.702117][ T5754] ? rcu_read_unlock_special+0xf0/0x4a0 [ 129.707707][ T5754] netlink_rcv_skb+0x1e9/0x430 [ 129.712512][ T5754] ? rtnetlink_bind+0x80/0x80 [ 129.717235][ T5754] ? netlink_ack+0xb10/0xb10 [ 129.721881][ T5754] ? __rcu_read_unlock+0x78/0xd0 [ 129.726868][ T5754] netlink_unicast+0x78f/0x940 [ 129.731684][ T5754] netlink_sendmsg+0x8ba/0xbe0 [ 129.736493][ T5754] ? netlink_getsockopt+0x570/0x570 [ 129.741731][ T5754] ? aa_sock_msg_perm+0x94/0x150 [ 129.746716][ T5754] ? apparmor_socket_sendmsg+0x88/0x230 [ 129.752311][ T5754] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 129.757677][ T5754] ? security_socket_sendmsg+0x7c/0xa0 [ 129.763177][ T5754] ? netlink_getsockopt+0x570/0x570 [ 129.768420][ T5754] ____sys_sendmsg+0x5be/0x8f0 [ 129.773276][ T5754] ? __sys_sendmsg_sock+0x30/0x30 [ 129.778387][ T5754] ? import_iovec+0x6f/0xa0 [ 129.782940][ T5754] ___sys_sendmsg+0x236/0x2e0 [ 129.787667][ T5754] ? __sys_sendmsg+0x290/0x290 [ 129.792508][ T5754] __se_sys_sendmsg+0x1b7/0x2a0 [ 129.797399][ T5754] ? __x64_sys_sendmsg+0x80/0x80 [ 129.802380][ T5754] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 129.808425][ T5754] ? lockdep_hardirqs_on+0x94/0x140 [ 129.813677][ T5754] do_syscall_64+0x4c/0xa0 [ 129.818125][ T5754] ? clear_bhb_loop+0x30/0x80 [ 129.822854][ T5754] ? clear_bhb_loop+0x30/0x80 [ 129.827575][ T5754] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 129.833531][ T5754] RIP: 0033:0x7fd80a0f11d9 [ 129.838010][ T5754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.857739][ T5754] RSP: 002b:00007fd808349028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.866204][ T5754] RAX: ffffffffffffffda RBX: 00007fd80a378fa0 RCX: 00007fd80a0f11d9 [ 129.874228][ T5754] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 129.882246][ T5754] RBP: 00007fd80a188888 R08: 0000000000000000 R09: 0000000000000000 [ 129.890297][ T5754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.898410][ T5754] R13: 00007fd80a379038 R14: 00007fd80a378fa0 R15: 00007ffe56cb8f18 [ 129.906435][ T5754] [ 129.909603][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.932277][ T13] usb 4-1: USB disconnect, device number 5 [ 130.097163][ T5758] FAULT_INJECTION: forcing a failure. [ 130.097163][ T5758] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 130.111635][ T5758] CPU: 0 PID: 5758 Comm: syz.6.369 Not tainted syzkaller #0 [ 130.118963][ T5758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 130.129053][ T5758] Call Trace: [ 130.132369][ T5758] [ 130.135332][ T5758] dump_stack_lvl+0x188/0x250 [ 130.140052][ T5758] ? show_regs_print_info+0x20/0x20 [ 130.145303][ T5758] ? load_image+0x410/0x410 [ 130.149846][ T5758] ? uncharge_page+0x490/0x490 [ 130.154641][ T5758] should_fail+0x383/0x4b0 [ 130.159124][ T5758] prepare_alloc_pages+0x1e3/0x5b0 [ 130.164279][ T5758] __alloc_pages+0x11b/0x480 [ 130.168904][ T5758] ? zone_statistics+0x170/0x170 [ 130.168936][ T5758] ? rcu_lock_acquire+0x30/0x30 [ 130.178755][ T5758] ? alloc_pages+0x452/0x560 [ 130.178787][ T5758] __get_free_pages+0x8/0x30 [ 130.187991][ T5758] __tlb_remove_page_size+0x1f2/0x3f0 [ 130.193418][ T5758] unmap_page_range+0xfcf/0x2410 [ 130.198536][ T5758] unmap_vmas+0x131/0x250 [ 130.202909][ T5758] ? unmap_page_range+0x2410/0x2410 [ 130.208140][ T5758] ? __mutex_lock_common+0x435/0x2400 [ 130.213569][ T5758] ? exit_mm_release+0x16/0x30 [ 130.218383][ T5758] exit_mmap+0x3b9/0x640 [ 130.222675][ T5758] ? vm_brk+0x20/0x20 [ 130.226708][ T5758] ? uprobe_clear_state+0x2f6/0x460 [ 130.231956][ T5758] __mmput+0x115/0x390 [ 130.236066][ T5758] exit_mm+0x632/0x7b0 [ 130.240233][ T5758] ? perf_pmu_migrate_context+0xb70/0xb70 [ 130.246024][ T5758] ? do_exit+0x2110/0x2110 [ 130.250498][ T5758] ? __ia32_sys_timer_delete+0x40/0x40 [ 130.256006][ T5758] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 130.261531][ T5758] ? tty_audit_exit+0x149/0x1f0 [ 130.266427][ T5758] do_exit+0x5b8/0x2110 [ 130.270631][ T5758] ? put_task_struct+0x80/0x80 [ 130.275439][ T5758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.281479][ T5758] ? _raw_spin_lock_irq+0xb7/0xf0 [ 130.286557][ T5758] do_group_exit+0x12c/0x2f0 [ 130.291195][ T5758] ? lockdep_hardirqs_on+0x94/0x140 [ 130.296464][ T5758] get_signal+0x7eb/0x12e0 [ 130.300948][ T5758] arch_do_signal_or_restart+0xe6/0x12a0 [ 130.306644][ T5758] ? futex_exit_release+0x1c0/0x1c0 [ 130.311900][ T5758] ? get_sigframe_size+0x10/0x10 [ 130.316891][ T5758] ? __context_tracking_exit+0x4c/0x80 [ 130.322400][ T5758] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 130.328453][ T5758] ? exit_to_user_mode_loop+0x3b/0x130 [ 130.329669][ T5682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.333949][ T5758] exit_to_user_mode_loop+0x9e/0x130 [ 130.333975][ T5758] exit_to_user_mode_prepare+0xee/0x180 [ 130.333998][ T5758] syscall_exit_to_user_mode+0x16/0x40 [ 130.334020][ T5758] do_syscall_64+0x58/0xa0 [ 130.334039][ T5758] ? clear_bhb_loop+0x30/0x80 [ 130.368898][ T5758] ? clear_bhb_loop+0x30/0x80 [ 130.373626][ T5758] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 130.379571][ T5758] RIP: 0033:0x7fd80a0f11d9 [ 130.384026][ T5758] Code: Unable to access opcode bytes at RIP 0x7fd80a0f11af. [ 130.391444][ T5758] RSP: 002b:00007fd8083490e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 130.399899][ T5758] RAX: fffffffffffffe00 RBX: 00007fd80a378fa8 RCX: 00007fd80a0f11d9 [ 130.407914][ T5758] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd80a378fa8 [ 130.415928][ T5758] RBP: 00007fd80a378fa0 R08: 0000000000000000 R09: 0000000000000000 [ 130.423940][ T5758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.423960][ T5758] R13: 00007fd80a379038 R14: 00007ffe56cb8e30 R15: 00007ffe56cb8f18 [ 130.423993][ T5758] [ 130.424048][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.743243][ T5767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 130.920670][ T5767] netlink: 8 bytes leftover after parsing attributes in process `syz.6.371'. [ 130.988400][ T5785] netlink: 112 bytes leftover after parsing attributes in process `syz.5.379'. [ 131.014765][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.6.371'. [ 131.176209][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.189553][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.253131][ T5767] bond1: (slave bond0): making interface the new active one [ 131.298682][ T5767] bond1: (slave bond0): Enslaving as an active interface with an up link [ 131.360322][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 131.426357][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 131.546455][ T5816] FAULT_INJECTION: forcing a failure. [ 131.546455][ T5816] name failslab, interval 1, probability 0, space 0, times 0 [ 131.615818][ T5816] CPU: 0 PID: 5816 Comm: syz.0.389 Not tainted syzkaller #0 [ 131.623177][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.633289][ T5816] Call Trace: [ 131.636600][ T5816] [ 131.636611][ T5816] dump_stack_lvl+0x188/0x250 [ 131.644272][ T5816] ? show_regs_print_info+0x20/0x20 [ 131.649509][ T5816] ? load_image+0x410/0x410 [ 131.654064][ T5816] ? __might_sleep+0xf0/0xf0 [ 131.658693][ T5816] ? __lock_acquire+0x7d40/0x7d40 [ 131.663764][ T5816] should_fail+0x383/0x4b0 [ 131.668277][ T5816] should_failslab+0x5/0x20 [ 131.672833][ T5816] slab_pre_alloc_hook+0x51/0xc0 [ 131.677817][ T5816] kmem_cache_alloc_trace+0x47/0x290 [ 131.683145][ T5816] ? raw_ioctl+0x192f/0x3750 [ 131.687781][ T5816] raw_ioctl+0x192f/0x3750 [ 131.687814][ T5816] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 131.687843][ T5816] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 131.687869][ T5816] ? make_qualifier+0x3b0/0x3b0 [ 131.687935][ T5816] ? bpf_lsm_file_ioctl+0x5/0x10 [ 131.687957][ T5816] ? security_file_ioctl+0x7c/0xa0 [ 131.687981][ T5816] ? make_qualifier+0x3b0/0x3b0 [ 131.688005][ T5816] __se_sys_ioctl+0xfa/0x170 [ 131.688029][ T5816] do_syscall_64+0x4c/0xa0 [ 131.688052][ T5816] ? clear_bhb_loop+0x30/0x80 [ 131.688077][ T5816] ? clear_bhb_loop+0x30/0x80 [ 131.688103][ T5816] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 131.688129][ T5816] RIP: 0033:0x7fd59aab3e6b [ 131.688152][ T5816] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 131.688172][ T5816] RSP: 002b:00007fd598d09f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 131.703746][ T5816] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fd59aab3e6b [ 131.703768][ T5816] RDX: 00007fd598d0afd0 RSI: 0000000041015500 RDI: 0000000000000005 [ 131.703783][ T5816] RBP: 00007fd598d0afd0 R08: 0000000000000001 R09: 00000000ffffffff [ 131.703800][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fd598d09fa0 [ 131.718790][ T5816] R13: 0000200000000480 R14: 0000000000000001 R15: 0000000000000000 [ 131.718825][ T5816] [ 131.718863][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.806173][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.841352][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 131.941897][ T5823] netlink: 64 bytes leftover after parsing attributes in process `syz.6.391'. [ 131.970634][ T5822] device syzkaller1 entered promiscuous mode [ 132.216428][ T7] usb 5-1: string descriptor 0 read error: -22 [ 132.222807][ T7] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 132.248050][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.341528][ T5841] device ip6gre1 entered promiscuous mode [ 132.396279][ T5851] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.458418][ T4572] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.483313][ T4572] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.521788][ T4231] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 132.551674][ T5853] FAULT_INJECTION: forcing a failure. [ 132.551674][ T5853] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.565586][ T5853] CPU: 1 PID: 5853 Comm: syz.0.400 Not tainted syzkaller #0 [ 132.572913][ T5853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.572929][ T5853] Call Trace: [ 132.572937][ T5853] [ 132.572946][ T5853] dump_stack_lvl+0x188/0x250 [ 132.586368][ T5853] ? show_regs_print_info+0x20/0x20 [ 132.586397][ T5853] ? load_image+0x410/0x410 [ 132.594066][ T5853] ? mark_lock+0x94/0x320 [ 132.603789][ T5853] should_fail+0x383/0x4b0 [ 132.603823][ T5853] prepare_alloc_pages+0x1e3/0x5b0 [ 132.613224][ T5853] __alloc_pages+0x11b/0x480 [ 132.622936][ T5853] ? zone_statistics+0x170/0x170 [ 132.622976][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.627914][ T5853] ? rcu_lock_acquire+0x30/0x30 [ 132.638757][ T5853] ? alloc_pages+0x452/0x560 [ 132.638791][ T5853] __get_free_pages+0x8/0x30 [ 132.638815][ T5853] __tlb_remove_page_size+0x1f2/0x3f0 [ 132.638845][ T5853] unmap_page_range+0xfcf/0x2410 [ 132.638898][ T5853] unmap_vmas+0x131/0x250 [ 132.638922][ T5853] ? unmap_page_range+0x2410/0x2410 [ 132.638941][ T5853] ? __mutex_lock_common+0x435/0x2400 [ 132.638968][ T5853] ? exit_mm_release+0x16/0x30 [ 132.639000][ T5853] exit_mmap+0x3b9/0x640 [ 132.639027][ T5853] ? vm_brk+0x20/0x20 [ 132.639063][ T5853] ? uprobe_clear_state+0x2f6/0x460 [ 132.639092][ T5853] __mmput+0x115/0x390 [ 132.639117][ T5853] exit_mm+0x632/0x7b0 [ 132.639137][ T5853] ? perf_pmu_migrate_context+0xb70/0xb70 [ 132.639168][ T5853] ? do_exit+0x2110/0x2110 [ 132.639199][ T5853] ? __ia32_sys_timer_delete+0x40/0x40 [ 132.639222][ T5853] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 132.639251][ T5853] ? tty_audit_exit+0x149/0x1f0 [ 132.639278][ T5853] do_exit+0x5b8/0x2110 [ 132.639301][ T5853] ? put_task_struct+0x80/0x80 [ 132.639318][ T5853] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.639345][ T5853] ? _raw_spin_lock_irq+0xb7/0xf0 [ 132.639385][ T5853] do_group_exit+0x12c/0x2f0 [ 132.639401][ T5853] ? lockdep_hardirqs_on+0x94/0x140 [ 132.639425][ T5853] get_signal+0x7eb/0x12e0 [ 132.639459][ T5853] arch_do_signal_or_restart+0xe6/0x12a0 [ 132.639494][ T5853] ? futex_exit_release+0x1c0/0x1c0 [ 132.639514][ T5853] ? get_sigframe_size+0x10/0x10 [ 132.639535][ T5853] ? __context_tracking_exit+0x4c/0x80 [ 132.639561][ T5853] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.639596][ T5853] ? exit_to_user_mode_loop+0x3b/0x130 [ 132.639617][ T5853] exit_to_user_mode_loop+0x9e/0x130 [ 132.639636][ T5853] exit_to_user_mode_prepare+0xee/0x180 [ 132.639655][ T5853] syscall_exit_to_user_mode+0x16/0x40 [ 132.639672][ T5853] do_syscall_64+0x58/0xa0 [ 132.639690][ T5853] ? clear_bhb_loop+0x30/0x80 [ 132.639710][ T5853] ? clear_bhb_loop+0x30/0x80 [ 132.639730][ T5853] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.639752][ T5853] RIP: 0033:0x7fd59aab41d9 [ 132.639770][ T5853] Code: Unable to access opcode bytes at RIP 0x7fd59aab41af. [ 132.639779][ T5853] RSP: 002b:00007fd598d0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.639803][ T5853] RAX: fffffffffffffe00 RBX: 00007fd59ad3bfa8 RCX: 00007fd59aab41d9 [ 132.639820][ T5853] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd59ad3bfa8 [ 132.639834][ T5853] RBP: 00007fd59ad3bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 132.639848][ T5853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.639861][ T5853] R13: 00007fd59ad3c038 R14: 00007fff544c0c20 R15: 00007fff544c0d08 [ 132.639892][ T5853] [ 132.796207][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.796311][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.916428][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.019098][ T7] dw2102: su3000_identify_state [ 133.024071][ T7] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 133.032332][ T7] dw2102: su3000_power_ctrl: 1, initialized 0 [ 133.040897][ T7] dvb-usb: bulk message failed: -22 (2/0) [ 133.101379][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.152112][ T7] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 133.172304][ T7] usb 5-1: media controller created [ 133.184901][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 133.205573][ T7] dw2102: i2c transfer failed. [ 133.223007][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 133.243388][ T5863] device syzkaller0 entered promiscuous mode [ 133.249551][ T7] dw2102: i2c transfer failed. [ 133.271861][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 133.277813][ T4251] net_ratelimit: 49 callbacks suppressed [ 133.292446][ T7] dw2102: i2c transfer failed. [ 133.302843][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 133.325355][ T7] dw2102: i2c transfer failed. [ 133.336857][ T5869] device syzkaller0 entered promiscuous mode [ 133.344377][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 133.356429][ T5869] tipc: Started in network mode [ 133.361489][ T5869] tipc: Node identity aa7b17e99607, cluster identity 4711 [ 133.375053][ T7] dw2102: i2c transfer failed. [ 133.379993][ T7] dvb-usb: bulk message failed: -22 (6/0) [ 133.385891][ T5869] tipc: Enabled bearer , priority 0 [ 133.396990][ T7] dw2102: i2c transfer failed. [ 133.401810][ T7] dvb-usb: MAC address: 02:02:02:02:02:02 [ 133.436245][ T4573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.493619][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.517807][ T4573] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 133.640117][ T5867] tipc: Resetting bearer [ 133.670964][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 133.677181][ T7] dw2102: command 0x0e transfer failed. [ 133.684845][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 133.698959][ T7] dw2102: command 0x0e transfer failed. [ 133.720894][ T5867] tipc: Disabling bearer [ 134.026978][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 134.032787][ T7] dw2102: command 0x0e transfer failed. [ 134.057625][ T7] dvb-usb: bulk message failed: -22 (3/0) [ 134.089156][ T7] dw2102: command 0x0e transfer failed. [ 134.124384][ T7] dvb-usb: bulk message failed: -22 (1/0) [ 134.154426][ T7] dw2102: command 0x51 transfer failed. [ 134.284987][ T7] DVB: Unable to find symbol ds3000_attach() [ 134.291764][ T7] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 134.506250][ T7] rc_core: IR keymap rc-su3000 not found [ 134.511951][ T7] Registered IR keymap rc-empty [ 134.545559][ T7] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 134.642856][ T7] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input10 [ 134.727583][ T5937] 9pnet_virtio: no channels available for device syz [ 134.770332][ T7] dvb-usb: schedule remote query interval to 150 msecs. [ 134.797121][ T7] dw2102: su3000_power_ctrl: 0, initialized 1 [ 134.833469][ T7] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 134.928199][ T7] usb 5-1: USB disconnect, device number 6 [ 135.050532][ T5955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.433'. [ 135.274132][ T5968] FAULT_INJECTION: forcing a failure. [ 135.274132][ T5968] name failslab, interval 1, probability 0, space 0, times 0 [ 135.296971][ T5965] FAULT_INJECTION: forcing a failure. [ 135.296971][ T5965] name failslab, interval 1, probability 0, space 0, times 0 [ 135.350619][ T5968] CPU: 0 PID: 5968 Comm: syz.6.438 Not tainted syzkaller #0 [ 135.357978][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.368081][ T5968] Call Trace: [ 135.371408][ T5968] [ 135.374375][ T5968] dump_stack_lvl+0x188/0x250 [ 135.379097][ T5968] ? show_regs_print_info+0x20/0x20 [ 135.384310][ T5968] ? load_image+0x410/0x410 [ 135.388855][ T5968] ? __might_sleep+0xf0/0xf0 [ 135.393493][ T5968] ? __lock_acquire+0x7d40/0x7d40 [ 135.398558][ T5968] should_fail+0x383/0x4b0 [ 135.403020][ T5968] should_failslab+0x5/0x20 [ 135.407561][ T5968] slab_pre_alloc_hook+0x51/0xc0 [ 135.412543][ T5968] __kmalloc+0x6b/0x340 [ 135.416742][ T5968] ? realloc_user_queue+0xb5/0x2a0 [ 135.421997][ T5968] realloc_user_queue+0xb5/0x2a0 [ 135.426987][ T5968] snd_timer_user_open+0xf8/0x160 [ 135.432069][ T5968] chrdev_open+0x585/0x5f0 [ 135.436527][ T5968] ? cd_forget+0x160/0x160 [ 135.441035][ T5968] ? fsnotify_perm+0x3a7/0x560 [ 135.445847][ T5968] ? cd_forget+0x160/0x160 [ 135.450336][ T5968] do_dentry_open+0x7f7/0xf90 [ 135.455078][ T5968] ? vfs_open+0x2b/0x80 [ 135.459283][ T5968] path_openat+0x2718/0x2fb0 [ 135.463938][ T5968] ? __kasan_slab_alloc+0xa9/0xc0 [ 135.469022][ T5968] ? do_filp_open+0x400/0x400 [ 135.473761][ T5968] do_filp_open+0x1df/0x400 [ 135.478306][ T5968] ? vfs_tmpfile+0x300/0x300 [ 135.482969][ T5968] ? _raw_spin_unlock+0x24/0x40 [ 135.487880][ T5968] ? alloc_fd+0x59e/0x650 [ 135.492251][ T5968] do_sys_openat2+0x14b/0x500 [ 135.496958][ T5968] ? __lock_acquire+0x7d40/0x7d40 [ 135.502017][ T5968] ? do_sys_open+0xe0/0xe0 [ 135.506476][ T5968] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.512515][ T5968] ? lock_chain_count+0x20/0x20 [ 135.517416][ T5968] __x64_sys_openat+0x135/0x160 [ 135.522300][ T5968] do_syscall_64+0x4c/0xa0 [ 135.526757][ T5968] ? clear_bhb_loop+0x30/0x80 [ 135.531466][ T5968] ? clear_bhb_loop+0x30/0x80 [ 135.536191][ T5968] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.542131][ T5968] RIP: 0033:0x7fd80a0f11d9 [ 135.542154][ T5968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.542176][ T5968] RSP: 002b:00007fd808349028 EFLAGS: 00000246 [ 135.566233][ T5968] ORIG_RAX: 0000000000000101 [ 135.566249][ T5968] RAX: ffffffffffffffda RBX: 00007fd80a378fa0 RCX: 00007fd80a0f11d9 [ 135.566265][ T5968] RDX: 0000000000008080 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 135.566281][ T5968] RBP: 00007fd80a188888 R08: 0000000000000000 R09: 0000000000000000 [ 135.577078][ T5968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.577101][ T5968] R13: 00007fd80a379038 R14: 00007fd80a378fa0 R15: 00007ffe56cb8f18 [ 135.577136][ T5968] [ 135.577294][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.630852][ T5965] CPU: 1 PID: 5965 Comm: syz.0.437 Not tainted syzkaller #0 [ 135.638203][ T5965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.638293][ T5965] Call Trace: [ 135.638306][ T5965] [ 135.638317][ T5965] dump_stack_lvl+0x188/0x250 [ 135.652510][ T5965] ? show_regs_print_info+0x20/0x20 [ 135.660154][ T5965] ? load_image+0x410/0x410 [ 135.660187][ T5965] ? __might_sleep+0xf0/0xf0 [ 135.669933][ T5965] ? __lock_acquire+0x7d40/0x7d40 [ 135.669974][ T5965] should_fail+0x383/0x4b0 [ 135.679618][ T5965] should_failslab+0x5/0x20 [ 135.679646][ T5965] slab_pre_alloc_hook+0x51/0xc0 [ 135.688628][ T5965] kmem_cache_alloc_trace+0x47/0x290 [ 135.688657][ T5965] ? apply_wqattrs_prepare+0x175/0xad0 [ 135.688693][ T5965] apply_wqattrs_prepare+0x175/0xad0 [ 135.698949][ T5965] ? mutex_lock_io_nested+0x60/0x60 [ 135.699002][ T5965] apply_workqueue_attrs+0xd0/0x170 [ 135.709773][ T5965] alloc_workqueue+0xf1e/0x1450 [ 135.720196][ T5965] ? vsnprintf+0x1b22/0x1c20 [ 135.720245][ T5965] ? snprintf+0xe5/0x140 [ 135.729734][ T5965] ? apply_workqueue_attrs+0x170/0x170 [ 135.729789][ T5965] nci_register_device+0x3fc/0x9f0 [ 135.739535][ T5965] ? nci_free_device+0x90/0x90 [ 135.749449][ T5965] ? nci_hci_allocate+0x1dd/0x2a0 [ 135.754522][ T5965] ? nci_allocate_device+0x241/0x350 [ 135.754557][ T5965] virtual_ncidev_open+0x55/0xc0 [ 135.754585][ T5965] ? virtual_ncidev_ioctl+0x90/0x90 [ 135.765522][ T5965] misc_open+0x31f/0x390 [ 135.775003][ T5965] chrdev_open+0x585/0x5f0 [ 135.775040][ T5965] ? cd_forget+0x160/0x160 [ 135.783944][ T5965] ? fsnotify_perm+0x3a7/0x560 [ 135.788757][ T5965] ? cd_forget+0x160/0x160 [ 135.788789][ T5965] do_dentry_open+0x7f7/0xf90 [ 135.788819][ T5965] ? vfs_open+0x2b/0x80 [ 135.797955][ T5965] path_openat+0x2718/0x2fb0 [ 135.798077][ T5965] ? __kasan_slab_alloc+0xa9/0xc0 [ 135.806766][ T5965] ? do_filp_open+0x400/0x400 [ 135.806831][ T5965] do_filp_open+0x1df/0x400 [ 135.816560][ T5965] ? vfs_tmpfile+0x300/0x300 [ 135.816674][ T5965] ? _raw_spin_unlock+0x24/0x40 [ 135.825746][ T5965] ? alloc_fd+0x59e/0x650 [ 135.834987][ T5965] do_sys_openat2+0x14b/0x500 [ 135.839708][ T5965] ? __lock_acquire+0x7d40/0x7d40 [ 135.839743][ T5965] ? do_sys_open+0xe0/0xe0 [ 135.839769][ T5965] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 135.849247][ T5965] ? lock_chain_count+0x20/0x20 [ 135.849288][ T5965] __x64_sys_openat+0x135/0x160 [ 135.860151][ T5965] do_syscall_64+0x4c/0xa0 [ 135.860182][ T5965] ? clear_bhb_loop+0x30/0x80 [ 135.869474][ T5965] ? clear_bhb_loop+0x30/0x80 [ 135.878867][ T5965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 135.878903][ T5965] RIP: 0033:0x7fd59aab41d9 [ 135.889255][ T5965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.908922][ T5965] RSP: 002b:00007fd598d0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 135.917400][ T5965] RAX: ffffffffffffffda RBX: 00007fd59ad3bfa0 RCX: 00007fd59aab41d9 [ 135.925421][ T5965] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 135.925443][ T5965] RBP: 00007fd59ab4b888 R08: 0000000000000000 R09: 0000000000000000 [ 135.925458][ T5965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.949452][ T5965] R13: 00007fd59ad3c038 R14: 00007fd59ad3bfa0 R15: 00007fff544c0d08 [ 135.957500][ T5965] [ 135.979119][ T7] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 136.041944][ T5976] FAULT_INJECTION: forcing a failure. [ 136.041944][ T5976] name failslab, interval 1, probability 0, space 0, times 0 [ 136.119036][ T5976] CPU: 0 PID: 5976 Comm: syz.3.441 Not tainted syzkaller #0 [ 136.126426][ T5976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.136540][ T5976] Call Trace: [ 136.139870][ T5976] [ 136.142845][ T5976] dump_stack_lvl+0x188/0x250 [ 136.147585][ T5976] ? show_regs_print_info+0x20/0x20 [ 136.152878][ T5976] ? load_image+0x410/0x410 [ 136.157454][ T5976] ? __might_sleep+0xf0/0xf0 [ 136.162096][ T5976] ? __lock_acquire+0x7d40/0x7d40 [ 136.167159][ T5976] should_fail+0x383/0x4b0 [ 136.167193][ T5976] should_failslab+0x5/0x20 [ 136.176146][ T5976] slab_pre_alloc_hook+0x51/0xc0 [ 136.176175][ T5976] kmem_cache_alloc_trace+0x47/0x290 [ 136.186428][ T5976] ? snd_pcm_oss_change_params_locked+0x888/0x3cf0 [ 136.192970][ T5976] snd_pcm_oss_change_params_locked+0x888/0x3cf0 [ 136.199337][ T5976] ? __mutex_lock_common+0x435/0x2400 [ 136.204760][ T5976] ? aa_file_perm+0x38b/0xe80 [ 136.204791][ T5976] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 136.214645][ T5976] ? aa_path_link+0x8a0/0x8a0 [ 136.219374][ T5976] snd_pcm_oss_write+0x26d/0xb10 [ 136.224386][ T5976] ? snd_pcm_oss_read+0x890/0x890 [ 136.229466][ T5976] vfs_write+0x304/0xd70 [ 136.233766][ T5976] ? file_end_write+0x250/0x250 [ 136.238659][ T5976] ? __fget_files+0x402/0x470 [ 136.243389][ T5976] ? __fdget_pos+0x1e2/0x370 [ 136.248013][ T5976] ? ksys_write+0x70/0x260 [ 136.252477][ T5976] ksys_write+0x153/0x260 [ 136.256851][ T5976] ? __ia32_sys_read+0x80/0x80 [ 136.261667][ T5976] ? lockdep_hardirqs_on+0x94/0x140 [ 136.266946][ T5976] do_syscall_64+0x4c/0xa0 [ 136.271407][ T5976] ? clear_bhb_loop+0x30/0x80 [ 136.276127][ T5976] ? clear_bhb_loop+0x30/0x80 [ 136.280855][ T5976] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.286830][ T5976] RIP: 0033:0x7f53b7c8f1d9 [ 136.291292][ T5976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.310943][ T5976] RSP: 002b:00007f53b5ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 136.319414][ T5976] RAX: ffffffffffffffda RBX: 00007f53b7f16fa0 RCX: 00007f53b7c8f1d9 [ 136.327433][ T5976] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 136.327452][ T5976] RBP: 00007f53b7d26888 R08: 0000000000000000 R09: 0000000000000000 [ 136.327465][ T5976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.327479][ T5976] R13: 00007f53b7f17038 R14: 00007f53b7f16fa0 R15: 00007ffe4e7d50a8 [ 136.327513][ T5976] [ 136.327565][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.369281][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.475352][ T26] audit: type=1807 audit(1791741980.940:537): func=FILE_CHECK res=0 [ 136.488557][ T5982] ima: policy update failed [ 136.535759][ T26] audit: type=1802 audit(1791741980.960:538): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.443" res=0 errno=0 [ 136.570722][ T4191] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 136.581206][ T4191] CPU: 1 PID: 4191 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 136.581275][ T4191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 136.581289][ T4191] Workqueue: hci1 hci_rx_work [ 136.581320][ T4191] Call Trace: [ 136.599488][ T4191] [ 136.599502][ T4191] dump_stack_lvl+0x188/0x250 [ 136.599550][ T4191] ? show_regs_print_info+0x20/0x20 [ 136.599573][ T4191] ? load_image+0x410/0x410 [ 136.599607][ T4191] sysfs_create_dir_ns+0x26a/0x290 [ 136.599644][ T4191] ? sysfs_warn_dup+0xa0/0xa0 [ 136.607628][ T4191] ? do_raw_spin_unlock+0x11d/0x230 [ 136.607667][ T4191] kobject_add_internal+0x5ba/0xcd0 [ 136.615980][ T4191] kobject_add+0x160/0x230 [ 136.640742][ T4191] ? kobject_init+0x1c0/0x1c0 [ 136.650387][ T4191] ? __raw_spin_lock_init+0x41/0x100 [ 136.660370][ T4191] ? klist_children_get+0x50/0x50 [ 136.665429][ T4191] ? get_device_parent+0x121/0x3e0 [ 136.670603][ T4191] device_add+0x470/0x1050 [ 136.670628][ T4191] ? device_initialize+0x2a5/0x4d0 [ 136.680202][ T4191] hci_conn_add_sysfs+0xd1/0x1e0 [ 136.685190][ T4191] le_conn_complete_evt+0xc55/0x14d0 [ 136.690537][ T4191] ? cs_le_create_conn+0x5e0/0x5e0 [ 136.695716][ T4191] hci_le_meta_evt+0xd36/0x3ca0 [ 136.700610][ T4191] ? hci_event_packet+0x363/0x1310 [ 136.705878][ T4191] ? __lock_acquire+0x7d40/0x7d40 [ 136.710958][ T4191] ? _printk+0xda/0x130 [ 136.715178][ T4191] ? hci_remote_host_features_evt+0x240/0x240 [ 136.721284][ T4191] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 136.726958][ T4191] ? mark_lock+0x94/0x320 [ 136.731343][ T4191] ? mutex_unlock+0x10/0x10 [ 136.735895][ T4191] ? __dynamic_pr_debug+0x196/0x240 [ 136.741134][ T4191] ? __rwlock_init+0x140/0x140 [ 136.745950][ T4191] hci_event_packet+0xe0b/0x1310 [ 136.750936][ T4191] ? _raw_spin_unlock+0x40/0x40 [ 136.755831][ T4191] ? rcu_lock_release+0x20/0x20 [ 136.760734][ T4191] ? hci_send_to_monitor+0x9c/0x4a0 [ 136.765980][ T4191] hci_rx_work+0x255/0xa10 [ 136.770455][ T4191] process_one_work+0x867/0xff0 [ 136.775410][ T4191] ? worker_detach_from_pool+0x240/0x240 [ 136.781084][ T4191] ? lockdep_hardirqs_off+0x70/0x100 [ 136.786418][ T4191] ? _raw_spin_lock_irq+0xb7/0xf0 [ 136.786762][ T26] audit: type=1802 audit(1791741981.020:539): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.443" res=0 errno=0 [ 136.791486][ T4191] ? _raw_spin_lock_irqsave+0x100/0x100 [ 136.791516][ T4191] ? wq_worker_running+0x97/0x170 [ 136.818884][ T4191] worker_thread+0xad7/0x12a0 [ 136.823657][ T4191] kthread+0x42e/0x520 [ 136.827789][ T4191] ? rcu_lock_release+0x20/0x20 [ 136.832692][ T4191] ? kthread_blkcg+0xd0/0xd0 [ 136.837322][ T4191] ret_from_fork+0x1f/0x30 [ 136.841799][ T4191] [ 136.845807][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 136.857345][ T4191] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 136.870646][ T4191] Bluetooth: hci1: failed to register connection device [ 137.124270][ T6013] udc-core: couldn't find an available UDC or it's busy [ 137.166206][ T6013] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.213010][ T6013] FAULT_INJECTION: forcing a failure. [ 137.213010][ T6013] name failslab, interval 1, probability 0, space 0, times 0 [ 137.226958][ T6013] CPU: 1 PID: 6013 Comm: syz.6.450 Not tainted syzkaller #0 [ 137.234304][ T6013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.244546][ T6013] Call Trace: [ 137.247858][ T6013] [ 137.250842][ T6013] dump_stack_lvl+0x188/0x250 [ 137.255572][ T6013] ? show_regs_print_info+0x20/0x20 [ 137.260806][ T6013] ? load_image+0x410/0x410 [ 137.265360][ T6013] should_fail+0x383/0x4b0 [ 137.269817][ T6013] should_failslab+0x5/0x20 [ 137.274354][ T6013] slab_pre_alloc_hook+0x51/0xc0 [ 137.279398][ T6013] ? xas_create+0x1047/0x15a0 [ 137.284130][ T6013] kmem_cache_alloc+0x3d/0x280 [ 137.288922][ T6013] ? xas_descend+0x210/0x3b0 [ 137.288952][ T6013] xas_create+0x1047/0x15a0 [ 137.288996][ T6013] ? lockdep_hardirqs_off+0x70/0x100 [ 137.298084][ T6013] xas_create_range+0x1e4/0x810 [ 137.298169][ T6013] add_to_swap_cache+0xbb3/0x1470 [ 137.308286][ T6013] ? get_swap_page+0x5da/0x780 [ 137.308314][ T6013] ? get_shadow_from_swap_cache+0xc0/0xc0 [ 137.318363][ T6013] ? free_swap_slot+0x310/0x310 [ 137.318401][ T6013] ? mark_lock+0x94/0x320 [ 137.318422][ T6013] ? page_referenced+0x5b0/0x5b0 [ 137.329027][ T6013] ? page_get_anon_vma+0x320/0x320 [ 137.329061][ T6013] add_to_swap+0x1a9/0x270 [ 137.338351][ T6013] shrink_page_list+0x3de5/0x6de0 [ 137.338439][ T6013] ? reclaim_clean_pages_from_list+0xaf0/0xaf0 [ 137.347955][ T6013] ? verify_lock_unused+0x140/0x140 [ 137.348103][ T6013] reclaim_pages+0x712/0x990 [ 137.359200][ T6013] ? isolate_lru_page+0xbd0/0xbd0 [ 137.359239][ T6013] ? do_raw_spin_unlock+0x11d/0x230 [ 137.369041][ T6013] madvise_cold_or_pageout_pte_range+0x1680/0x1ea0 [ 137.379304][ T6013] ? rcu_lock_release+0x20/0x20 [ 137.390707][ T6013] walk_pgd_range+0xb28/0x1370 [ 137.395539][ T6013] __walk_page_range+0x136/0x590 [ 137.400530][ T6013] ? vmacache_find+0x238/0x590 [ 137.405347][ T6013] ? find_vma+0xd2/0x230 [ 137.409634][ T6013] walk_page_range+0x3a3/0x550 [ 137.414438][ T6013] ? local_lock_release+0x97/0x170 [ 137.419597][ T6013] ? page_mapped_in_vma+0x520/0x520 [ 137.424863][ T6013] do_madvise+0x16a6/0x2aa0 [ 137.429420][ T6013] ? mark_lock+0x94/0x320 [ 137.433804][ T6013] ? __lock_acquire+0x13b3/0x7d40 [ 137.438879][ T6013] ? get_nr_vmemmap_pages_cb+0x40/0x40 [ 137.444404][ T6013] ? futex_wait+0x680/0x680 [ 137.448944][ T6013] ? rcu_read_lock_any_held+0xb0/0x130 [ 137.454462][ T6013] ? verify_lock_unused+0x140/0x140 [ 137.459715][ T6013] ? proc_fail_nth_write+0x180/0x200 [ 137.465047][ T6013] ? verify_lock_unused+0x140/0x140 [ 137.470324][ T6013] ? __context_tracking_exit+0x4c/0x80 [ 137.475829][ T6013] ? __lock_acquire+0x7d40/0x7d40 [ 137.480909][ T6013] ? lock_chain_count+0x20/0x20 [ 137.485824][ T6013] __x64_sys_madvise+0xa2/0xb0 [ 137.490629][ T6013] do_syscall_64+0x4c/0xa0 [ 137.495086][ T6013] ? clear_bhb_loop+0x30/0x80 [ 137.499809][ T6013] ? clear_bhb_loop+0x30/0x80 [ 137.504535][ T6013] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 137.510512][ T6013] RIP: 0033:0x7fd80a0f11d9 [ 137.514978][ T6013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.534625][ T6013] RSP: 002b:00007fd808349028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 137.543096][ T6013] RAX: ffffffffffffffda RBX: 00007fd80a378fa0 RCX: 00007fd80a0f11d9 [ 137.551108][ T6013] RDX: 0000000000000015 RSI: 0000000000600003 RDI: 0000200000000000 [ 137.559119][ T6013] RBP: 00007fd80a188888 R08: 0000000000000000 R09: 0000000000000000 [ 137.567135][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.575147][ T6013] R13: 00007fd80a379038 R14: 00007fd80a378fa0 R15: 00007ffe56cb8f18 [ 137.583175][ T6013] [ 137.742113][ T6032] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 137.765649][ T6032] FAULT_INJECTION: forcing a failure. [ 137.765649][ T6032] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.779164][ T6032] CPU: 1 PID: 6032 Comm: syz.5.457 Not tainted syzkaller #0 [ 137.786505][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 137.786521][ T6032] Call Trace: [ 137.786530][ T6032] [ 137.786540][ T6032] dump_stack_lvl+0x188/0x250 [ 137.786571][ T6032] ? show_regs_print_info+0x20/0x20 [ 137.786590][ T6032] ? load_image+0x410/0x410 [ 137.800660][ T6032] ? mark_lock+0x94/0x320 [ 137.800689][ T6032] should_fail+0x383/0x4b0 [ 137.800716][ T6032] prepare_alloc_pages+0x1e3/0x5b0 [ 137.808905][ T6032] __alloc_pages+0x11b/0x480 [ 137.808948][ T6032] ? zone_statistics+0x170/0x170 [ 137.818709][ T6032] ? rcu_lock_acquire+0x30/0x30 [ 137.818739][ T6032] ? alloc_pages+0x452/0x560 [ 137.827504][ T6032] __get_free_pages+0x8/0x30 [ 137.827531][ T6032] __tlb_remove_page_size+0x1f2/0x3f0 [ 137.837265][ T6032] unmap_page_range+0xfcf/0x2410 [ 137.837339][ T6032] unmap_vmas+0x131/0x250 [ 137.847114][ T6032] ? unmap_page_range+0x2410/0x2410 [ 137.847139][ T6032] ? __mutex_lock_common+0x435/0x2400 [ 137.856371][ T6032] ? exit_mm_release+0x16/0x30 [ 137.856405][ T6032] exit_mmap+0x3b9/0x640 [ 137.866742][ T6032] ? vm_brk+0x20/0x20 [ 137.866801][ T6032] ? uprobe_clear_state+0x2f6/0x460 [ 137.876309][ T6032] __mmput+0x115/0x390 [ 137.876335][ T6032] exit_mm+0x632/0x7b0 [ 137.886496][ T6032] ? perf_pmu_migrate_context+0xb70/0xb70 [ 137.886532][ T6032] ? do_exit+0x2110/0x2110 [ 137.894801][ T6032] ? __ia32_sys_timer_delete+0x40/0x40 [ 137.904190][ T6032] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 137.904226][ T6032] ? tty_audit_exit+0x149/0x1f0 [ 137.914036][ T6032] do_exit+0x5b8/0x2110 [ 137.923981][ T6032] ? put_task_struct+0x80/0x80 [ 137.924010][ T6032] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.934339][ T6032] ? _raw_spin_lock_irq+0xb7/0xf0 [ 137.943282][ T6032] do_group_exit+0x12c/0x2f0 [ 137.954310][ T6032] ? lockdep_hardirqs_on+0x94/0x140 [ 137.964124][ T6032] get_signal+0x7eb/0x12e0 [ 137.968599][ T6032] arch_do_signal_or_restart+0xe6/0x12a0 [ 137.974295][ T6032] ? futex_exit_release+0x1c0/0x1c0 [ 137.979529][ T6032] ? get_sigframe_size+0x10/0x10 [ 137.979558][ T6032] ? __context_tracking_exit+0x4c/0x80 [ 137.979591][ T6032] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 137.979621][ T6032] ? exit_to_user_mode_loop+0x3b/0x130 [ 137.990749][ T6032] exit_to_user_mode_loop+0x9e/0x130 [ 137.990780][ T6032] exit_to_user_mode_prepare+0xee/0x180 [ 138.002257][ T6032] syscall_exit_to_user_mode+0x16/0x40 [ 138.013117][ T6032] do_syscall_64+0x58/0xa0 [ 138.023019][ T6032] ? clear_bhb_loop+0x30/0x80 [ 138.023047][ T6032] ? clear_bhb_loop+0x30/0x80 [ 138.032468][ T6032] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.038407][ T6032] RIP: 0033:0x7f3e7fdda1d9 [ 138.042865][ T6032] Code: Unable to access opcode bytes at RIP 0x7f3e7fdda1af. [ 138.050264][ T6032] RSP: 002b:00007f3e7e0320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 138.058763][ T6032] RAX: 0000000000000001 RBX: 00007f3e80061fa8 RCX: 00007f3e7fdda1d9 [ 138.066779][ T6032] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3e80061fac [ 138.074900][ T6032] RBP: 00007f3e80061fa0 R08: 002a8837f4a2856e R09: 0000000000000000 [ 138.082925][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.090963][ T6032] R13: 00007f3e80062038 R14: 00007ffc22d81ee0 R15: 00007ffc22d81fc8 [ 138.098988][ T6032] [ 138.119137][ T6034] FAULT_INJECTION: forcing a failure. [ 138.119137][ T6034] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.142789][ T6034] CPU: 1 PID: 6034 Comm: syz.0.458 Not tainted syzkaller #0 [ 138.150167][ T6034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.160454][ T6034] Call Trace: [ 138.163778][ T6034] [ 138.166746][ T6034] dump_stack_lvl+0x188/0x250 [ 138.171475][ T6034] ? show_regs_print_info+0x20/0x20 [ 138.176728][ T6034] ? load_image+0x410/0x410 [ 138.181274][ T6034] ? __lock_acquire+0x7d40/0x7d40 [ 138.186340][ T6034] ? __vmalloc_node_range+0x2dd/0x8b0 [ 138.191743][ T6034] ? dup_task_struct+0x41a/0xbc0 [ 138.191776][ T6034] should_fail+0x383/0x4b0 [ 138.191807][ T6034] prepare_alloc_pages+0x1e3/0x5b0 [ 138.201189][ T6034] __alloc_pages+0x11b/0x480 [ 138.210914][ T6034] ? zone_statistics+0x170/0x170 [ 138.215902][ T6034] ? alloc_pages+0x452/0x560 [ 138.220536][ T6034] __vmalloc_node_range+0x4b1/0x8b0 [ 138.220576][ T6034] dup_task_struct+0x41a/0xbc0 [ 138.230579][ T6034] ? copy_process+0x61f/0x3e70 [ 138.230603][ T6034] ? _raw_spin_unlock_irq+0x1f/0x40 [ 138.240591][ T6034] ? lockdep_hardirqs_on+0x94/0x140 [ 138.240623][ T6034] copy_process+0x61f/0x3e70 [ 138.240718][ T6034] ? __pidfd_prepare+0x140/0x140 [ 138.250469][ T6034] ? verify_lock_unused+0x140/0x140 [ 138.250507][ T6034] kernel_clone+0x23f/0x990 [ 138.260718][ T6034] ? create_io_thread+0x180/0x180 [ 138.260793][ T6034] __x64_sys_clone+0x19a/0x210 [ 138.270328][ T6034] ? __ia32_sys_vfork+0x130/0x130 [ 138.270372][ T6034] ? lockdep_hardirqs_on+0x94/0x140 [ 138.280189][ T6034] do_syscall_64+0x4c/0xa0 [ 138.280219][ T6034] ? clear_bhb_loop+0x30/0x80 [ 138.289857][ T6034] ? clear_bhb_loop+0x30/0x80 [ 138.289888][ T6034] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.289914][ T6034] RIP: 0033:0x7fd59aab41d9 [ 138.299303][ T6034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.299324][ T6034] RSP: 002b:00007fd598d0bfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 138.299350][ T6034] RAX: ffffffffffffffda RBX: 00007fd59ad3bfa0 RCX: 00007fd59aab41d9 [ 138.309679][ T6034] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 138.309696][ T6034] RBP: 00007fd59ab4b888 R08: 0000000000000000 R09: 0000000000000000 [ 138.309710][ T6034] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 138.337790][ T6034] R13: 00007fd59ad3c038 R14: 00007fd59ad3bfa0 R15: 00007fff544c0d08 [ 138.337835][ T6034] [ 138.396061][ C0] net_ratelimit: 53 callbacks suppressed [ 138.445141][ T6037] 0x000000000000-0x000000010000 : "" [ 138.446415][ T4573] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 138.514144][ T6037] ftl_cs: FTL header not found. [ 138.577787][ T6037] FAULT_INJECTION: forcing a failure. [ 138.577787][ T6037] name failslab, interval 1, probability 0, space 0, times 0 [ 138.615640][ T6037] CPU: 0 PID: 6037 Comm: syz.5.459 Not tainted syzkaller #0 [ 138.623004][ T6037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 138.633145][ T6037] Call Trace: [ 138.636458][ T6037] [ 138.639425][ T6037] dump_stack_lvl+0x188/0x250 [ 138.644141][ T6037] ? show_regs_print_info+0x20/0x20 [ 138.649406][ T6037] ? load_image+0x410/0x410 [ 138.653945][ T6037] ? __lock_acquire+0x7d40/0x7d40 [ 138.659027][ T6037] should_fail+0x383/0x4b0 [ 138.663523][ T6037] should_failslab+0x5/0x20 [ 138.668072][ T6037] slab_pre_alloc_hook+0x51/0xc0 [ 138.673048][ T6037] ? kobject_set_name_vargs+0x5d/0x110 [ 138.678550][ T6037] __kmalloc_track_caller+0x69/0x330 [ 138.683886][ T6037] ? kobject_set_name_vargs+0x5d/0x110 [ 138.689392][ T6037] kvasprintf+0xe3/0x1a0 [ 138.693717][ T6037] ? bust_spinlocks+0xd0/0xd0 [ 138.698436][ T6037] ? kvasprintf_const+0xdd/0x240 [ 138.703409][ T6037] kobject_set_name_vargs+0x5d/0x110 [ 138.708741][ T6037] kobject_add+0x11e/0x230 [ 138.713204][ T6037] ? kobject_init+0x1c0/0x1c0 [ 138.717934][ T6037] ? kobject_init+0x1c0/0x1c0 [ 138.722659][ T6037] blk_mq_register_hctx+0x1d5/0x400 [ 138.726335][ T4573] usb 5-1: Using ep0 maxpacket: 8 [ 138.727905][ T6037] __blk_mq_register_dev+0x206/0x640 [ 138.738246][ T6037] ? debugfs_create_dir+0x423/0x4c0 [ 138.743500][ T6037] blk_register_queue+0x1fc/0x3a0 [ 138.743536][ T6037] device_add_disk+0x60f/0xde0 [ 138.743571][ T6037] add_mtd_blktrans_dev+0xfb1/0x13f0 [ 138.758703][ T6037] mtdblock_add_mtd+0x186/0x240 [ 138.763601][ T6037] blktrans_notify_add+0x95/0xe0 [ 138.768573][ T6037] add_mtd_device+0xd40/0x1260 [ 138.773388][ T6037] ? mtd_pairing_info_to_wunit+0x360/0x360 [ 138.779244][ T6037] ? mtd_cls_resume+0x130/0x130 [ 138.784171][ T6037] mtd_add_partition+0x25d/0x420 [ 138.789166][ T6037] mtdchar_blkpg_ioctl+0x283/0x2b0 [ 138.794318][ T6037] ? shrink_ecclayout+0xab0/0xab0 [ 138.799402][ T6037] ? __might_fault+0xb3/0x110 [ 138.804124][ T6037] ? _copy_from_user+0x111/0x170 [ 138.809109][ T6037] mtdchar_ioctl+0x14cb/0x1d70 [ 138.813918][ T6037] ? mtdchar_close+0x180/0x180 [ 138.818729][ T6037] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 138.824784][ T6037] ? verify_lock_unused+0x140/0x140 [ 138.830087][ T6037] ? __ia32_compat_sys_ioctl+0x910/0x910 [ 138.835802][ T6037] ? rcu_lock_release+0x5/0x20 [ 138.840638][ T6037] ? __mutex_trylock_common+0x15c/0x260 [ 138.846221][ T6037] ? rcu_lock_release+0x20/0x20 [ 138.851129][ T6037] ? __mutex_lock_common+0x435/0x2400 [ 138.856568][ T6037] ? mtdchar_unlocked_ioctl+0xa0/0xd0 [ 138.862026][ T6037] ? mutex_lock_io_nested+0x60/0x60 [ 138.867305][ T6037] mtdchar_unlocked_ioctl+0xad/0xd0 [ 138.872551][ T6037] ? mtdchar_write+0x5a0/0x5a0 [ 138.877361][ T6037] __se_sys_ioctl+0xfa/0x170 [ 138.882004][ T6037] do_syscall_64+0x4c/0xa0 [ 138.886478][ T6037] ? clear_bhb_loop+0x30/0x80 [ 138.891189][ T6037] ? clear_bhb_loop+0x30/0x80 [ 138.891937][ T4573] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 138.895908][ T6037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 138.910067][ T6037] RIP: 0033:0x7f3e7fdda1d9 [ 138.914524][ T6037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.934176][ T6037] RSP: 002b:00007f3e7e032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.942660][ T6037] RAX: ffffffffffffffda RBX: 00007f3e80061fa0 RCX: 00007f3e7fdda1d9 [ 138.945189][ T4573] usb 5-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 138.950701][ T6037] RDX: 0000200000000840 RSI: 0000000000001269 RDI: 0000000000000004 [ 138.950720][ T6037] RBP: 00007f3e7fe71888 R08: 0000000000000000 R09: 0000000000000000 [ 138.950733][ T6037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.950748][ T6037] R13: 00007f3e80062038 R14: 00007f3e80061fa0 R15: 00007ffc22d81fc8 [ 138.950782][ T6037] [ 138.985042][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.002329][ T4573] usb 5-1: config 179 has no interface number 0 [ 139.020827][ T4573] usb 5-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 139.053181][ T6037] kobject: can not set name properly! [ 139.126144][ T4573] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 139.170550][ T4573] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.399664][ T6062] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 139.494486][ T6027] faulting far call emulation tainted memory [ 139.513273][ T4573] usb 5-1: USB disconnect, device number 7 [ 140.346153][ T4187] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.636147][ T4187] usb 1-1: Using ep0 maxpacket: 8 [ 140.776523][ T4187] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.784730][ T4187] usb 1-1: config 0 has no interface number 0 [ 140.829196][ T4187] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 140.886533][ T4187] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 140.933329][ T4187] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 141.027555][ T4187] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 141.073475][ T4187] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.118389][ T4187] usb 1-1: config 0 descriptor?? [ 141.169670][ T4187] ldusb 1-1:0.55: Interrupt in endpoint not found [ 141.381306][ T4187] usb 1-1: USB disconnect, device number 5 [ 141.849915][ T6153] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 142.374112][ T6178] netlink: 13104 bytes leftover after parsing attributes in process `syz.3.499'. [ 142.896116][ T4573] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 143.266350][ T4573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 143.266379][ T4573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.266403][ T4573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 143.266430][ T4573] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 143.293253][ T6229] udc-core: couldn't find an available UDC or it's busy [ 143.293275][ T6229] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 143.371050][ C1] vkms_vblank_simulate: vblank timer overrun [ 143.436076][ C1] net_ratelimit: 52 callbacks suppressed [ 143.456431][ T4573] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 143.474511][ T4573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.497221][ T4573] usb 1-1: Product: syz [ 143.501506][ T4573] usb 1-1: Manufacturer: syz [ 143.523430][ T4573] usb 1-1: SerialNumber: syz [ 143.537040][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.573737][ T4573] usb 1-1: config 0 descriptor?? [ 143.792184][ T6239] netlink: 'syz.5.521': attribute type 3 has an invalid length. [ 143.854254][ T4573] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 143.966402][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 143.982335][ T6244] device syzkaller0 entered promiscuous mode [ 143.996045][ T7] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 144.032606][ T7] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 144.062619][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.076675][ T4573] usb 1-1: USB disconnect, device number 6 [ 144.112064][ T6255] ip_tables: iptables: counters copy to user failed while replacing table [ 144.159779][ T7] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 144.210058][ T7] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 144.220513][ T6258] jffs2: notice: (6258) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.586364][ T6227] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 144.606391][ T6227] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 144.656447][ T6227] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 144.673821][ T4228] usb 5-1: USB disconnect, device number 8 [ 144.724048][ T26] audit: type=1800 audit(1791741989.190:540): pid=6281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.534" name="UDC" dev="configfs" ino=41126 res=0 errno=0 [ 144.752969][ T6281] Need at least one configuration in g1. [ 144.791535][ T6281] udc dummy_udc.0: failed to start g1: -22 [ 144.816416][ T6225] SPCP8x5 ttyUSB0: failed to set control lines: -19 [ 144.843677][ T4228] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 144.878806][ T4228] spcp8x5 5-1:1.0: device disconnected [ 145.238149][ T6309] lo speed is unknown, defaulting to 1000 [ 145.303436][ T6309] lo speed is unknown, defaulting to 1000 [ 145.338020][ T6309] lo speed is unknown, defaulting to 1000 [ 145.420035][ T26] audit: type=1800 audit(1791741989.890:541): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.549" name=08 dev="sda1" ino=2052 res=0 errno=0 [ 145.635567][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz.6.552'. [ 145.938880][ T7] lo speed is unknown, defaulting to 1000 [ 145.985435][ T6309] infiniband syz0: set active [ 146.008773][ T6309] infiniband syz0: added lo [ 146.076406][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 146.259326][ T6309] RDS/IB: syz0: added [ 146.265178][ T6309] smc: adding ib device syz0 with port count 1 [ 146.322161][ T6309] smc: ib device syz0 port 1 has pnetid [ 146.347275][ T4573] lo speed is unknown, defaulting to 1000 [ 146.390541][ T6309] lo speed is unknown, defaulting to 1000 [ 146.506153][ T7] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 146.556381][ T4573] Bluetooth: hci3: command 0x0405 tx timeout [ 146.609253][ T6393] FAULT_INJECTION: forcing a failure. [ 146.609253][ T6393] name failslab, interval 1, probability 0, space 0, times 0 [ 146.677761][ T6393] CPU: 0 PID: 6393 Comm: syz.0.569 Not tainted syzkaller #0 [ 146.685127][ T6393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 146.695231][ T6393] Call Trace: [ 146.698547][ T6393] [ 146.701522][ T6393] dump_stack_lvl+0x188/0x250 [ 146.706248][ T6393] ? show_regs_print_info+0x20/0x20 [ 146.711490][ T6393] ? load_image+0x410/0x410 [ 146.716064][ T6393] ? __might_sleep+0xf0/0xf0 [ 146.720743][ T6393] ? __lock_acquire+0x7d40/0x7d40 [ 146.725829][ T6393] should_fail+0x383/0x4b0 [ 146.730334][ T6393] should_failslab+0x5/0x20 [ 146.734890][ T6393] slab_pre_alloc_hook+0x51/0xc0 [ 146.739870][ T6393] ? radix_tree_node_alloc+0x7e/0x3a0 [ 146.745293][ T6393] kmem_cache_alloc+0x3d/0x280 [ 146.750104][ T6393] radix_tree_node_alloc+0x7e/0x3a0 [ 146.755356][ T6393] idr_get_free+0x28b/0xa10 [ 146.759920][ T6393] idr_alloc_u32+0x187/0x330 [ 146.764553][ T6393] ? __fprop_inc_percpu_max+0x1b0/0x1b0 [ 146.770157][ T6393] tcf_idr_check_alloc+0x5e1/0x7a0 [ 146.775318][ T6393] ? tcf_idr_cleanup+0x70/0x70 [ 146.780131][ T6393] ? __nla_parse+0x3c/0x50 [ 146.784592][ T6393] tunnel_key_init+0x219/0x15e0 [ 146.784670][ T6393] ? __kasan_kmalloc+0xc6/0xe0 [ 146.784695][ T6393] ? __kasan_kmalloc+0xaf/0xe0 [ 146.795130][ T6393] ? tcf_action_init_1+0x1bb/0x6b0 [ 146.805045][ T6393] ? tc_ctl_action+0x437/0xba0 [ 146.809848][ T6393] ? rtnetlink_rcv_msg+0x7f1/0xf10 [ 146.809880][ T6393] ? netlink_unicast+0x78f/0x940 [ 146.819962][ T6393] ? netlink_sendmsg+0x8ba/0xbe0 [ 146.819986][ T6393] ? ____sys_sendmsg+0x5be/0x8f0 [ 146.820013][ T6393] ? do_syscall_64+0x4c/0xa0 [ 146.829925][ T6393] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 146.829965][ T6393] ? tunnel_key_search+0x40/0x40 [ 146.840666][ T6393] ? tcf_action_init_1+0x1f8/0x6b0 [ 146.840697][ T6393] ? nla_memcpy+0x55/0xb0 [ 146.850765][ T6393] tcf_action_init_1+0x3fd/0x6b0 [ 146.850800][ T6393] ? tc_action_load_ops+0x550/0x550 [ 146.865317][ T6393] ? _raw_read_unlock+0x24/0x40 [ 146.870214][ T6393] ? tc_action_load_ops+0x237/0x550 [ 146.875468][ T6393] ? __nla_parse+0x3c/0x50 [ 146.879945][ T6393] tcf_action_init+0x243/0x6b0 [ 146.884761][ T6393] ? tcf_action_init_1+0x6b0/0x6b0 [ 146.889913][ T6393] ? mark_lock+0x94/0x320 [ 146.894336][ T6393] ? __nla_parse+0x3c/0x50 [ 146.898799][ T6393] tc_ctl_action+0x437/0xba0 [ 146.903436][ T6393] ? tcf_free_cookie_rcu+0x40/0x40 [ 146.908596][ T6393] ? __dev_queue_xmit+0x195d/0x2e50 [ 146.913834][ T6393] ? ___sys_sendmsg+0x236/0x2e0 [ 146.918773][ T6393] ? tcf_free_cookie_rcu+0x40/0x40 [ 146.923932][ T6393] rtnetlink_rcv_msg+0x7f1/0xf10 [ 146.928910][ T6393] ? lock_chain_count+0x20/0x20 [ 146.933814][ T6393] ? rtnetlink_bind+0x80/0x80 [ 146.938533][ T6393] ? __local_bh_enable_ip+0x136/0x1c0 [ 146.943943][ T6393] ? lockdep_hardirqs_on+0x94/0x140 [ 146.949184][ T6393] ? __local_bh_enable_ip+0x136/0x1c0 [ 146.954603][ T6393] ? _local_bh_enable+0xa0/0xa0 [ 146.959509][ T6393] ? __dev_queue_xmit+0x1b64/0x2e50 [ 146.964772][ T6393] ? dev_queue_xmit+0x20/0x20 [ 146.969515][ T6393] ? memcpy+0x3c/0x60 [ 146.973552][ T6393] ? __copy_skb_header+0x3ba/0x4f0 [ 146.978735][ T6393] netlink_rcv_skb+0x1e9/0x430 [ 146.983539][ T6393] ? rtnetlink_bind+0x80/0x80 [ 146.983588][ T6393] ? netlink_ack+0xb10/0xb10 [ 146.983625][ T6393] netlink_unicast+0x78f/0x940 [ 146.983663][ T6393] netlink_sendmsg+0x8ba/0xbe0 [ 146.992983][ T6393] ? netlink_getsockopt+0x570/0x570 [ 147.002525][ T6393] ? aa_sock_msg_perm+0x94/0x150 [ 147.012694][ T6393] ? apparmor_socket_sendmsg+0x88/0x230 [ 147.018281][ T6393] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 147.023606][ T6393] ? security_socket_sendmsg+0x7c/0xa0 [ 147.029107][ T6393] ? netlink_getsockopt+0x570/0x570 [ 147.034356][ T6393] ____sys_sendmsg+0x5be/0x8f0 [ 147.039171][ T6393] ? __sys_sendmsg_sock+0x30/0x30 [ 147.044254][ T6393] ? import_iovec+0x6f/0xa0 [ 147.048802][ T6393] ___sys_sendmsg+0x236/0x2e0 [ 147.053535][ T6393] ? __sys_sendmsg+0x290/0x290 [ 147.058383][ T6393] __se_sys_sendmsg+0x1b7/0x2a0 [ 147.063277][ T6393] ? __x64_sys_sendmsg+0x80/0x80 [ 147.068250][ T6393] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 147.074275][ T6393] ? lockdep_hardirqs_on+0x94/0x140 [ 147.074310][ T6393] do_syscall_64+0x4c/0xa0 [ 147.074340][ T6393] ? clear_bhb_loop+0x30/0x80 [ 147.074365][ T6393] ? clear_bhb_loop+0x30/0x80 [ 147.074386][ T6393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.084796][ T6393] RIP: 0033:0x7fd59aab41d9 [ 147.084822][ T6393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.084842][ T6393] RSP: 002b:00007fd598d0c028 EFLAGS: 00000246 [ 147.094209][ T6393] ORIG_RAX: 000000000000002e [ 147.094221][ T6393] RAX: ffffffffffffffda RBX: 00007fd59ad3bfa0 RCX: 00007fd59aab41d9 [ 147.094238][ T6393] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 147.094253][ T6393] RBP: 00007fd59ab4b888 R08: 0000000000000000 R09: 0000000000000000 [ 147.094268][ T6393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.094282][ T6393] R13: 00007fd59ad3c038 R14: 00007fd59ad3bfa0 R15: 00007fff544c0d08 [ 147.143097][ T6393] [ 147.243605][ T6309] lo speed is unknown, defaulting to 1000 [ 147.381467][ T6403] jffs2: notice: (6403) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.446651][ T7] usb 6-1: unable to get BOS descriptor or descriptor too short [ 147.566415][ T7] usb 6-1: config 142 has an invalid interface number: 251 but max is 0 [ 147.585042][ T7] usb 6-1: config 142 has no interface number 0 [ 147.591529][ T7] usb 6-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 147.621119][ T7] usb 6-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 147.636912][ T6416] FAULT_INJECTION: forcing a failure. [ 147.636912][ T6416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.650596][ T7] usb 6-1: config 142 interface 251 has no altsetting 0 [ 147.659962][ T6416] CPU: 0 PID: 6416 Comm: syz.4.577 Not tainted syzkaller #0 [ 147.667334][ T6416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 147.677433][ T6416] Call Trace: [ 147.680787][ T6416] [ 147.683754][ T6416] dump_stack_lvl+0x188/0x250 [ 147.688484][ T6416] ? show_regs_print_info+0x20/0x20 [ 147.693738][ T6416] ? load_image+0x410/0x410 [ 147.698294][ T6416] ? __lock_acquire+0x7d40/0x7d40 [ 147.703372][ T6416] should_fail+0x383/0x4b0 [ 147.707851][ T6416] copy_page_from_iter+0x33a/0x760 [ 147.713015][ T6416] ? bio_kmalloc+0xf4/0x1e0 [ 147.717565][ T6416] blk_rq_map_user_iov+0x1509/0x1b70 [ 147.723024][ T6416] ? blk_rq_append_bio+0x550/0x550 [ 147.728196][ T6416] ? memset+0x1e/0x40 [ 147.732219][ T6416] ? import_single_range+0x1aa/0x2a0 [ 147.737555][ T6416] blk_rq_map_user+0x14c/0x1e0 [ 147.742362][ T6416] ? sg_common_write+0xa50/0x1c10 [ 147.747440][ T6416] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 147.752595][ T6416] ? mutex_unlock+0x10/0x10 [ 147.757152][ T6416] ? memset+0x1e/0x40 [ 147.761195][ T6416] ? sg_common_write+0x55c/0x1c10 [ 147.766320][ T6416] sg_common_write+0x109f/0x1c10 [ 147.771455][ T6416] ? sg_add_request+0x690/0x690 [ 147.776365][ T6416] ? __lock_acquire+0x7d40/0x7d40 [ 147.781440][ T6416] ? _raw_write_unlock_irqrestore+0xc1/0x120 [ 147.787478][ T6416] ? mutex_unlock+0x10/0x10 [ 147.792071][ T6416] ? __lock_acquire+0x7d40/0x7d40 [ 147.797143][ T6416] ? __might_fault+0xb3/0x110 [ 147.801867][ T6416] ? _copy_from_user+0x111/0x170 [ 147.806855][ T6416] sg_write+0xac0/0xe90 [ 147.811065][ T6416] ? _raw_spin_unlock+0x40/0x40 [ 147.816003][ T6416] ? sg_read+0x1420/0x1420 [ 147.820489][ T6416] ? end_current_label_crit_section+0x14b/0x170 [ 147.826776][ T6416] ? common_file_perm+0x171/0x1c0 [ 147.831849][ T6416] ? fsnotify_perm+0x5d/0x560 [ 147.836580][ T6416] ? security_file_permission+0x75/0xa0 [ 147.842189][ T6416] ? sg_read+0x1420/0x1420 [ 147.846648][ T6416] vfs_write+0x304/0xd70 [ 147.850935][ T6416] ? file_end_write+0x250/0x250 [ 147.850969][ T6416] ? __fget_files+0x402/0x470 [ 147.860535][ T6416] ? __fdget_pos+0x1e2/0x370 [ 147.865163][ T6416] ? ksys_write+0x70/0x260 [ 147.869614][ T6416] ksys_write+0x153/0x260 [ 147.874008][ T6416] ? __ia32_sys_read+0x80/0x80 [ 147.878814][ T6416] ? lockdep_hardirqs_on+0x94/0x140 [ 147.878850][ T6416] do_syscall_64+0x4c/0xa0 [ 147.878873][ T6416] ? clear_bhb_loop+0x30/0x80 [ 147.878897][ T6416] ? clear_bhb_loop+0x30/0x80 [ 147.888567][ T6416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 147.888601][ T6416] RIP: 0033:0x7f43ec5a01d9 [ 147.898009][ T6416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.898031][ T6416] RSP: 002b:00007f43ea7f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 147.898055][ T6416] RAX: ffffffffffffffda RBX: 00007f43ec827fa0 RCX: 00007f43ec5a01d9 [ 147.898071][ T6416] RDX: 0000000000000103 RSI: 0000200000001880 RDI: 0000000000000004 [ 147.898087][ T6416] RBP: 00007f43ec637888 R08: 0000000000000000 R09: 0000000000000000 [ 147.908410][ T6416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.908426][ T6416] R13: 00007f43ec828038 R14: 00007f43ec827fa0 R15: 00007fff5c7bf7f8 [ 147.908458][ T6416] [ 147.982063][ T6309] lo speed is unknown, defaulting to 1000 [ 148.141226][ T6422] FAULT_INJECTION: forcing a failure. [ 148.141226][ T6422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 148.227935][ T6422] CPU: 0 PID: 6422 Comm: syz.6.579 Not tainted syzkaller #0 [ 148.235303][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 148.245424][ T6422] Call Trace: [ 148.248752][ T6422] [ 148.251725][ T6422] dump_stack_lvl+0x188/0x250 [ 148.256587][ T6422] ? show_regs_print_info+0x20/0x20 [ 148.261839][ T6422] ? load_image+0x410/0x410 [ 148.266408][ T6422] ? __lock_acquire+0x7d40/0x7d40 [ 148.271494][ T6422] should_fail+0x383/0x4b0 [ 148.275964][ T6422] prepare_alloc_pages+0x1e3/0x5b0 [ 148.281134][ T6422] __alloc_pages+0x11b/0x480 [ 148.285795][ T6422] ? zone_statistics+0x170/0x170 [ 148.290795][ T6422] ? alloc_pages+0x452/0x560 [ 148.295470][ T6422] __vmalloc_node_range+0x4b1/0x8b0 [ 148.300729][ T6422] ? kvm_dev_ioctl+0x165/0x20a0 [ 148.305635][ T6422] __vmalloc+0x76/0x80 [ 148.309753][ T6422] ? kvm_dev_ioctl+0x165/0x20a0 [ 148.314652][ T6422] kvm_dev_ioctl+0x165/0x20a0 [ 148.319406][ T6422] ? hardware_enable_nolock+0x130/0x130 [ 148.325104][ T6422] ? bpf_lsm_file_ioctl+0x5/0x10 [ 148.330090][ T6422] ? security_file_ioctl+0x7c/0xa0 [ 148.335286][ T6422] ? hardware_enable_nolock+0x130/0x130 [ 148.340885][ T6422] __se_sys_ioctl+0xfa/0x170 [ 148.345526][ T6422] do_syscall_64+0x4c/0xa0 [ 148.349993][ T6422] ? clear_bhb_loop+0x30/0x80 [ 148.354718][ T6422] ? clear_bhb_loop+0x30/0x80 [ 148.359678][ T6422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.365841][ T6422] RIP: 0033:0x7fd80a0f11d9 [ 148.370362][ T6422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.390028][ T6422] RSP: 002b:00007fd808349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.398491][ T6422] RAX: ffffffffffffffda RBX: 00007fd80a378fa0 RCX: 00007fd80a0f11d9 [ 148.406514][ T6422] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000004 [ 148.414534][ T6422] RBP: 00007fd80a188888 R08: 0000000000000000 R09: 0000000000000000 [ 148.422555][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.430590][ T6422] R13: 00007fd80a379038 R14: 00007fd80a378fa0 R15: 00007ffe56cb8f18 [ 148.438672][ T6422] [ 148.442909][ T7] usb 6-1: string descriptor 0 read error: -22 [ 148.454379][ T7] usb 6-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 148.463986][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.489603][ T6309] lo speed is unknown, defaulting to 1000 [ 148.526738][ T6365] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.534187][ T6365] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 148.556059][ C1] net_ratelimit: 43 callbacks suppressed [ 148.588694][ T7] cypress_m8 6-1:142.251: HID->COM RS232 Adapter converter detected [ 148.601629][ T7] cyphidcom ttyUSB0: required endpoint is missing [ 148.952191][ T6309] lo speed is unknown, defaulting to 1000 [ 149.035765][ T6438] user requested TSC rate below hardware speed [ 149.802819][ T6488] udc-core: couldn't find an available UDC or it's busy [ 149.823344][ T6488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.061333][ T6505] infiniband syz0: set active [ 150.075739][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 150.088142][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.095718][ T6505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.111268][ T6505] device bridge_slave_0 left promiscuous mode [ 150.123224][ T6505] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.143366][ T6505] device bridge_slave_1 left promiscuous mode [ 150.150590][ T6505] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.164369][ T6505] bond0: (slave bond_slave_0): Releasing backup interface [ 150.181436][ T1108] usb 6-1: USB disconnect, device number 4 [ 150.200052][ T1108] cypress_m8 6-1:142.251: device disconnected [ 150.264000][ T6505] bond0: (slave bond_slave_1): Releasing backup interface [ 150.306148][ T13] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 150.355686][ T6505] team0: Port device team_slave_0 removed [ 150.396301][ T4267] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.447464][ T6505] team0: Port device team_slave_1 removed [ 150.475810][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.494310][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.525365][ T6505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.548051][ T6505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.557943][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 150.564066][ T4572] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 150.604330][ T4228] lo speed is unknown, defaulting to 1000 [ 150.696506][ T13] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 150.704779][ T13] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.735860][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.751797][ T13] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.761990][ T13] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.781115][ T13] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.790399][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.790497][ T4267] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.810651][ T4267] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 150.820999][ T4267] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.836246][ T4572] usb 5-1: Using ep0 maxpacket: 8 [ 150.896530][ T6519] [ 150.898915][ T6519] ====================================================== [ 150.905967][ T6519] WARNING: possible circular locking dependency detected [ 150.906155][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 150.913021][ T6519] syzkaller #0 Not tainted [ 150.921180][ C1] kcov: kcov_start: t = ffff88807d37d940, size = 262144, area = ffffc900021c9000 [ 150.925605][ T6519] ------------------------------------------------------ [ 150.925616][ T6519] syz.6.605/6519 is trying to acquire lock: [ 150.934753][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc900021c9000 6 [ 150.941741][ T6519] ffff8880795dd028 [ 150.947835][ C1] vkms_vblank_simulate: vblank timer overrun [ 150.955880][ T6519] ((work_completion)(&hdev->bg_scan_update) [ 150.959881][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 150.965593][ T6519] ){+.+.}-{0:0} [ 150.971595][ C1] kcov: kcov_start: t = ffff88807d37d940, size = 262144, area = ffffc900021c9000 [ 150.979749][ T6519] , at: __flush_work+0xfa/0x210 [ 150.983236][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 6 [ 150.992323][ T6519] [ 150.992323][ T6519] but task is already holding lock: [ 150.992333][ T6519] ffffffff8e4d7308 [ 150.997209][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.005424][ T6519] (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 151.030856][ T6519] [ 151.030856][ T6519] which lock already depends on the new lock. [ 151.030856][ T6519] [ 151.041286][ T6519] [ 151.041286][ T6519] the existing dependency chain (in reverse order) is: [ 151.046152][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 151.050327][ T6519] [ 151.050327][ T6519] -> #4 (rfkill_global_mutex [ 151.058504][ C1] kcov: kcov_start: t = ffff88807d37d940, size = 262144, area = ffffc900021c9000 [ 151.058515][ T6519] ){+.+.}-{3:3} [ 151.058542][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc900021c9000 6 [ 151.065297][ T6519] : [ 151.065320][ T6519] __mutex_lock_common+0x1e5/0x2400 [ 151.074513][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.077885][ T6519] mutex_lock_nested+0x17/0x20 [ 151.086489][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 151.088553][ T6519] rfkill_register+0x2f/0x970 [ 151.094276][ C1] kcov: kcov_start: t = ffff88807d37d940, size = 262144, area = ffffc900021c9000 [ 151.100262][ T6519] hci_register_dev+0x459/0x980 [ 151.105566][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 6 [ 151.113708][ T6519] vhci_create_device+0x32e/0x5c0 [ 151.119011][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.128036][ T6519] vhci_write+0x389/0x440 [ 151.134561][ T4267] usb 4-1: udev 6, busnum 4, minor = 389 [ 151.141671][ T6519] vfs_write+0x748/0xd70 [ 151.141698][ T6519] ksys_write+0x153/0x260 [ 151.141715][ T6519] do_syscall_64+0x4c/0xa0 [ 151.147392][ T4267] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 151.153307][ T6519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.160406][ T4572] usb 5-1: config 0 has no interfaces? [ 151.163808][ T6519] [ 151.163808][ T6519] -> #3 ( [ 151.175170][ T4267] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 151.178378][ T6519] &data->open_mutex){+.+.}-{3:3}: [ 151.178405][ T6519] __mutex_lock_common+0x1e5/0x2400 [ 151.178431][ T6519] mutex_lock_nested+0x17/0x20 [ 151.189864][ T4267] usb 4-1: Product: syz [ 151.193915][ T6519] vhci_send_frame+0x88/0x100 [ 151.193944][ T6519] hci_send_frame+0x1a9/0x2e0 [ 151.203865][ T4267] usb 4-1: Manufacturer: syz [ 151.204527][ T6519] hci_tx_work+0x9b5/0x16d0 [ 151.225296][ T4267] device: '4-1': device_add [ 151.228571][ T6519] process_one_work+0x867/0xff0 [ 151.228600][ T6519] worker_thread+0xad7/0x12a0 [ 151.228621][ T6519] kthread+0x42e/0x520 [ 151.228637][ T6519] ret_from_fork+0x1f/0x30 [ 151.228658][ T6519] [ 151.228658][ T6519] -> #2 ( [ 151.228657][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 151.228671][ T6519] (work_completion)(&hdev->tx_work)){+.+.}-{0:0}: [ 151.228681][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 262144, area = ffffc900021c9000 [ 151.228695][ T6519] __flush_work+0x116/0x210 [ 151.228714][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 1048576, area = ffffc90013adb000 [ 151.228716][ T6519] hci_dev_do_close+0x201/0x1020 [ 151.228738][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 6 [ 151.228738][ T6519] hci_unregister_dev+0x2eb/0x590 [ 151.228761][ T6519] vhci_release+0x73/0xc0 [ 151.228780][ T6519] __fput+0x212/0x8c0 [ 151.228800][ T6519] task_work_run+0x125/0x1a0 [ 151.233918][ T4572] usb 5-1: default language 0x0409 [ 151.238187][ T6519] do_exit+0x635/0x2110 [ 151.238212][ T6519] do_group_exit+0x12c/0x2f0 [ 151.238228][ T6519] __x64_sys_exit_group+0x3b/0x40 [ 151.238244][ T6519] do_syscall_64+0x4c/0xa0 [ 151.257660][ T4267] kobject: '4-1' (ffff8880606c80a8): kobject_add_internal: parent: 'usb4', set: 'devices' [ 151.262994][ T6519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.263030][ T6519] [ 151.263030][ T6519] -> #1 [ 151.284460][ T4267] usb 4-1: ACPI companion not found [ 151.291179][ T6519] (&hdev->req_lock){+.+.}-{3:3}: [ 151.291208][ T6519] __mutex_lock_common+0x1e5/0x2400 [ 151.291233][ T6519] mutex_lock_nested+0x17/0x20 [ 151.291250][ T6519] bg_scan_update+0x44/0x3b0 [ 151.291271][ T6519] process_one_work+0x867/0xff0 [ 151.291290][ T6519] worker_thread+0xad7/0x12a0 [ 151.291308][ T6519] kthread+0x42e/0x520 [ 151.291324][ T6519] ret_from_fork+0x1f/0x30 [ 151.291342][ T6519] [ 151.291342][ T6519] -> #0 ((work_completion)(&hdev->bg_scan_update)){+.+.}-{0:0} [ 151.306173][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 151.306925][ T6519] : [ 151.306933][ T6519] __lock_acquire+0x38f7/0x7d40 [ 151.312009][ C1] kcov: kcov_start: t = ffff8880292ad940, size = 262144, area = ffffc900021c9000 [ 151.321202][ T6519] lock_acquire+0x19f/0x400 [ 151.326737][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 6 [ 151.334949][ T6519] __flush_work+0x116/0x210 [ 151.340699][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.345368][ T6519] __cancel_work_timer+0x3f4/0x560 [ 151.354995][ T4267] usb 4-1: No ACPI support [ 151.360121][ T6519] hci_request_cancel_all+0xcc/0x300 [ 151.360152][ T6519] hci_dev_do_close+0x4e/0x1020 [ 151.360173][ T6519] hci_rfkill_set_block+0x101/0x180 [ 151.360195][ T6519] rfkill_set_block+0x1c1/0x3c0 [ 151.360218][ T6519] rfkill_fop_write+0x453/0x560 [ 151.360236][ T6519] vfs_write+0x304/0xd70 [ 151.368804][ T4267] bus: 'usb': add device 4-1 [ 151.370049][ T6519] ksys_write+0x153/0x260 [ 151.377378][ T4267] PM: Adding info for usb:4-1 [ 151.380564][ T6519] do_syscall_64+0x4c/0xa0 [ 151.380592][ T6519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.390825][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 151.397116][ T6519] [ 151.397116][ T6519] other info that might help us debug this: [ 151.397116][ T6519] [ 151.397126][ T6519] Chain exists of: [ 151.397126][ T6519] [ 151.402068][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 262144, area = ffffc900021c9000 [ 151.407271][ T6519] (work_completion)(&hdev->bg_scan_update) [ 151.412333][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 1048576, area = ffffc90013adb000 [ 151.418024][ T6519] --> &data->open_mutex [ 151.423319][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 6 [ 151.428442][ T6519] --> rfkill_global_mutex [ 151.433958][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.439042][ T6519] [ 151.439042][ T6519] [ 151.439049][ T6519] Possible unsafe locking scenario: [ 151.439049][ T6519] [ 151.462575][ T6518] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 218 [ 151.466507][ T6519] CPU0 CPU1 [ 151.466514][ T6519] ---- ---- [ 151.466520][ T6519] lock(rfkill_global_mutex); [ 151.466534][ T6519] lock(&data->open_mutex); [ 151.466547][ T6519] lock(rfkill_global_mutex); [ 151.466562][ T6519] lock((work_completion)(&hdev->bg_scan_update)); [ 151.466578][ T6519] [ 151.466578][ T6519] *** DEADLOCK *** [ 151.466578][ T6519] [ 151.482337][ T6518] MPTCP: msk=ffff8880637a8b40 state=7 [ 151.483491][ T6519] 1 lock held by syz.6.605/6519: [ 151.493996][ T6518] MPTCP: msk=ffff8880637a8b40 [ 151.496805][ T6519] #0: ffffffff8e4d7308 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x1ae/0x560 [ 151.503177][ T6518] MPTCP: msk=ffff8880637a8b40 [ 151.507900][ T6519] [ 151.507900][ T6519] stack backtrace: [ 151.507908][ T6519] CPU: 0 PID: 6519 Comm: syz.6.605 Not tainted syzkaller #0 [ 151.507929][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 151.507942][ T6519] Call Trace: [ 151.507950][ T6519] [ 151.507957][ T6519] dump_stack_lvl+0x188/0x250 [ 151.507982][ T6519] ? load_image+0x410/0x410 [ 151.507991][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 151.508003][ T6519] ? show_regs_print_info+0x20/0x20 [ 151.508015][ C1] kcov: kcov_start: t = ffff8880292abb80, size = 262144, area = ffffc900021c9000 [ 151.508029][ T6519] ? print_circular_bug+0x12b/0x1a0 [ 151.508047][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 6 [ 151.508053][ T6519] check_noncircular+0x2f8/0x400 [ 151.508073][ T6519] ? look_up_lock_class+0x71/0x110 [ 151.515634][ T4572] usb 5-1: udev 9, busnum 5, minor = 520 [ 151.518159][ T6519] ? print_deadlock_bug+0x5d0/0x5d0 [ 151.518183][ T6519] ? lockdep_lock+0xf1/0x1f0 [ 151.518209][ T6519] ? __lock_acquire+0x12df/0x7d40 [ 151.526924][ T4572] usb 5-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 151.529424][ T6519] ? mark_lock+0x94/0x320 [ 151.536992][ T4267] kobject: '4-1' (ffff8880606c80a8): kobject_uevent_env [ 151.540518][ T6519] ? _find_first_zero_bit+0xd1/0xf0 [ 151.546931][ T6518] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 218 [ 151.550667][ T6519] __lock_acquire+0x38f7/0x7d40 [ 151.558504][ T4572] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.560146][ T6519] ? console_lock+0x70/0x70 [ 151.564887][ T4572] usb 5-1: Product: syz [ 151.569808][ T6519] ? verify_lock_unused+0x140/0x140 [ 151.569846][ T6519] ? prb_read_valid+0x39/0x60 [ 151.569869][ T6519] ? verify_lock_unused+0x140/0x140 [ 151.578095][ T4267] kobject: '4-1' (ffff8880606c80a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1' [ 151.584462][ T6519] ? console_trylock_spinning+0x370/0x370 [ 151.584520][ T6519] lock_acquire+0x19f/0x400 [ 151.596871][ T4572] usb 5-1: Manufacturer: syz [ 151.600793][ T6519] ? __flush_work+0xfa/0x210 [ 151.612354][ T4267] bus: 'usb': __driver_probe_device: matched device 4-1 with driver usb [ 151.615737][ T6519] ? __lock_acquire+0x7d40/0x7d40 [ 151.615772][ T6519] ? read_lock_is_recursive+0x10/0x10 [ 151.626473][ T4572] usb 5-1: SerialNumber: syz [ 151.629211][ T6519] ? start_flush_work+0x784/0x830 [ 151.639106][ T4267] bus: 'usb': really_probe: probing driver usb with device 4-1 [ 151.641900][ T6519] __flush_work+0x116/0x210 [ 151.650276][ T4572] device: '5-1': device_add [ 151.652397][ T6519] ? __flush_work+0xfa/0x210 [ 151.662785][ T4267] usb 4-1: usb_probe_device [ 151.667589][ T6519] ? flush_work+0x20/0x20 [ 151.667630][ T6519] ? try_to_grab_pending+0xfb/0x820 [ 151.667663][ T6519] ? mark_lock+0x94/0x320 [ 151.674525][ T4572] kobject: '5-1' (ffff8880606ca0a8): kobject_add_internal: parent: 'usb5', set: 'devices' [ 151.678475][ T6519] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 151.678508][ T6519] ? lock_chain_count+0x20/0x20 [ 151.678533][ T6519] ? __cancel_work_timer+0x36a/0x560 [ 151.678556][ T6519] __cancel_work_timer+0x3f4/0x560 [ 151.678578][ T6519] ? cancel_work_sync+0x20/0x20 [ 151.678599][ T6519] ? __cancel_work+0x1f9/0x2e0 [ 151.678622][ T6519] ? cancel_work+0x20/0x20 [ 151.678644][ T6519] hci_request_cancel_all+0xcc/0x300 [ 151.678671][ T6519] hci_dev_do_close+0x4e/0x1020 [ 151.678693][ T6519] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 151.678716][ T6519] ? _raw_spin_unlock+0x40/0x40 [ 151.678739][ T6519] hci_rfkill_set_block+0x101/0x180 [ 151.678763][ T6519] ? rcu_lock_release+0x20/0x20 [ 151.678786][ T6519] rfkill_set_block+0x1c1/0x3c0 [ 151.678822][ T6519] rfkill_fop_write+0x453/0x560 [ 151.678842][ T6519] ? rfkill_fop_read+0x560/0x560 [ 151.678860][ T6519] ? common_file_perm+0x160/0x1c0 [ 151.688242][ T4267] usb 4-1: configuration #1 chosen from 1 choice [ 151.690758][ T6519] ? fsnotify_perm+0x5d/0x560 [ 151.701300][ T4572] usb 5-1: ACPI companion not found [ 151.704643][ T6519] ? security_file_permission+0x75/0xa0 [ 151.714458][ T4572] usb 5-1: No ACPI support [ 151.718182][ T6519] ? rfkill_fop_read+0x560/0x560 [ 151.718207][ T6519] vfs_write+0x304/0xd70 [ 151.725520][ T4572] bus: 'usb': add device 5-1 [ 151.727842][ T6519] ? file_end_write+0x250/0x250 [ 151.727872][ T6519] ? __fget_files+0x402/0x470 [ 151.727895][ T6519] ? __fdget_pos+0x1e2/0x370 [ 151.727912][ T6519] ? ksys_write+0x70/0x260 [ 151.727933][ T6519] ksys_write+0x153/0x260 [ 151.738954][ T6506] dummy_udc dummy_udc.3: enabled ep1in-bulk (ep1in-intr) maxpacket 64 stream disabled [ 151.742679][ T6519] ? __ia32_sys_read+0x80/0x80 [ 151.757999][ T6506] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 151.765936][ T6519] ? lockdep_hardirqs_on+0x94/0x140 [ 151.777187][ T4572] PM: Adding info for usb:5-1 [ 151.781367][ T6519] do_syscall_64+0x4c/0xa0 [ 151.781396][ T6519] ? clear_bhb_loop+0x30/0x80 [ 151.781422][ T6519] ? clear_bhb_loop+0x30/0x80 [ 151.795217][ T4572] kobject: '5-1' (ffff8880606ca0a8): kobject_uevent_env [ 151.803902][ T6519] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.803935][ T6519] RIP: 0033:0x7fd80a0f11d9 [ 151.803954][ T6519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.803970][ T6519] RSP: 002b:00007fd808349028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 151.803992][ T6519] RAX: ffffffffffffffda RBX: 00007fd80a378fa0 RCX: 00007fd80a0f11d9 [ 151.804007][ T6519] RDX: 0000000000000008 RSI: 0000200000000900 RDI: 0000000000000007 [ 151.804019][ T6519] RBP: 00007fd80a188888 R08: 0000000000000000 R09: 0000000000000000 [ 151.804032][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.809531][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 151.817487][ T6519] R13: 00007fd80a379038 R14: 00007fd80a378fa0 R15: 00007ffe56cb8f18 [ 151.822432][ C1] kcov: kcov_start: t = ffff88807b168000, size = 262144, area = ffffc900021c9000 [ 151.827549][ T6519] [ 151.833204][ C1] kcov: kcov_start: t = ffff88807b168000, size = 1048576, area = ffffc900122d8000 [ 151.838522][ C0] virtqueue callback for ffff88802319ee00 (ffffffff85497fd0) [ 151.842982][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc900021c9000 6 [ 151.848099][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 151.857047][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.861463][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 151.875745][ T4267] usb 4-1: adding 4-1:1.0 (config #1, interface 0) [ 151.881234][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 151.881293][ C0] virtqueue callback for ffff88802319ee00 (ffffffff85497fd0) [ 151.881489][ C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 151.886278][ T4267] device: '4-1:1.0': device_add [ 151.894160][ C0] kcov: kcov_start: t = ffff88802c63bb80, size = 262144, area = ffffc900021c9000 [ 151.899771][ T3520] sd 0:0:1:0: cmd ffff8880246b9928 CDB: 0x2a [ 151.902868][ C0] kcov: kcov_start: t = ffff88802c63bb80, size = 524288, area = ffffc900156e1000 [ 151.908155][ T3520] Added buffer head 78 to ffff888147bff000 [ 151.912728][ C0] kcov: kcov_move_area: ffffc900106d4000 1048576 <= ffffc900021c9000 6 [ 151.919534][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 151.932398][ C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 151.934566][ C1] sd 0:0:1:0: cmd ffff8880246b9928 response 0 status 0x0 sense_len 0 [ 151.941850][ T13] usb 1-1: adding 1-1:16.0 (config #16, interface 0) [ 151.943660][ C1] No more buffers in queue [ 151.948312][ C0] No more buffers in queue [ 151.956618][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.957691][ T1444] bridge0: bond_netdev_event received NETDEV_CHANGE [ 151.961747][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 151.967170][ T1444] net bridge0: siw: event 4 [ 151.971777][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 151.982609][ T150] sd 0:0:1:0: cmd ffff8880246b9d28 CDB: 0x2a [ 151.984400][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 151.988858][ T150] Added buffer head 78 to ffff888147bff000 [ 151.993432][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 151.998185][ T150] sd 0:0:1:0: cmd ffff8880246ba128 CDB: 0x2a [ 152.002483][ C0] No more buffers in queue [ 152.006838][ T150] Added buffer head 1 to ffff888147bff000 [ 152.012033][ C0] Added buffer head 36 to ffff88802319ee00 [ 152.016456][ T150] sd 0:0:1:0: cmd ffff8880246ba528 CDB: 0x2a [ 152.026280][ C0] Added buffer head 35 to ffff88802319ee00 [ 152.032338][ T150] Added buffer head 119 to ffff888147bff000 [ 152.037165][ C0] Added buffer head 34 to ffff88802319ee00 [ 152.042523][ T150] sd 0:0:1:0: cmd ffff8880246ba928 CDB: 0x2a [ 152.047563][ C0] Added buffer head 33 to ffff88802319ee00 [ 152.052427][ T150] Added buffer head 68 to ffff888147bff000 [ 152.057234][ C0] Added buffer head 32 to ffff88802319ee00 [ 152.061708][ T150] sd 0:0:1:0: cmd ffff8880246b9928 CDB: 0x2a [ 152.066919][ C0] Added buffer head 31 to ffff88802319ee00 [ 152.071791][ T150] Added buffer head 77 to ffff888147bff000 [ 152.077742][ C0] Added buffer head 30 to ffff88802319ee00 [ 152.086177][ T150] sd 0:0:1:0: cmd ffff8880246bad28 CDB: 0x2a [ 152.087791][ C0] Added buffer head 29 to ffff88802319ee00 [ 152.092593][ T150] Added buffer head 39 to ffff888147bff000 [ 152.097477][ C0] Added buffer head 28 to ffff88802319ee00 [ 152.103521][ T150] sd 0:0:1:0: cmd ffff8880246bb128 CDB: 0x2a [ 152.107265][ C0] Added buffer head 27 to ffff88802319ee00 [ 152.112304][ T150] Added buffer head 165 to ffff888147bff000 [ 152.118672][ C0] Added buffer head 26 to ffff88802319ee00 [ 152.123536][ T150] sd 0:0:1:0: cmd ffff8880246bb528 CDB: 0x2a [ 152.128640][ C0] Added buffer head 25 to ffff88802319ee00 [ 152.134140][ T150] Added buffer head 74 to ffff888147bff000 [ 152.138556][ C0] Added buffer head 24 to ffff88802319ee00 [ 152.145662][ T150] sd 0:0:1:0: cmd ffff8880246bb928 CDB: 0x2a [ 152.147885][ C0] Added buffer head 23 to ffff88802319ee00 [ 152.152505][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 152.157436][ C0] Added buffer head 22 to ffff88802319ee00 [ 152.162061][ C1] sd 0:0:1:0: cmd ffff8880246ba928 response 0 status 0x0 sense_len 0 [ 152.166734][ C0] Added buffer head 21 to ffff88802319ee00 [ 152.171114][ C1] sd 0:0:1:0: cmd ffff8880246ba128 response 0 status 0x0 sense_len 0 [ 152.175471][ C0] Added buffer head 20 to ffff88802319ee00 [ 152.185015][ C1] sd 0:0:1:0: cmd ffff8880246ba528 response 0 status 0x0 sense_len 0 [ 152.185057][ C1] sd 0:0:1:0: cmd ffff8880246b9928 response 0 status 0x0 sense_len 0 [ 152.189871][ C0] Added buffer head 19 to ffff88802319ee00 [ 152.196770][ C1] sd 0:0:1:0: cmd ffff8880246bad28 response 0 status 0x0 sense_len 0 [ 152.202013][ C0] Added buffer head 18 to ffff88802319ee00 [ 152.206707][ C1] sd 0:0:1:0: cmd ffff8880246bb128 response 0 status 0x0 sense_len 0 [ 152.206730][ C1] sd 0:0:1:0: cmd ffff8880246bb528 response 0 status 0x0 sense_len 0 [ 152.211157][ C0] Added buffer head 17 to ffff88802319ee00 [ 152.215843][ C1] sd 0:0:1:0: cmd ffff8880246b9d28 response 0 status 0x0 sense_len 0 [ 152.220565][ C0] Added buffer head 16 to ffff88802319ee00 [ 152.227459][ C1] No more buffers in queue [ 152.227545][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.233427][ C0] Added buffer head 4033 to ffff88802319ee00 [ 152.238853][ T150] Added buffer head 78 to ffff888147bff000 [ 152.257537][ C0] Added buffer head 4034 to ffff88802319ee00 [ 152.265967][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.273941][ C0] Added buffer head 4035 to ffff88802319ee00 [ 152.283642][ T150] sd 0:0:1:0: cmd ffff8880246bbd28 CDB: 0x2a [ 152.290215][ C0] Added buffer head 4036 to ffff88802319ee00 [ 152.298412][ T150] Added buffer head 74 to ffff888147bff000 [ 152.306432][ C0] Added buffer head 4037 to ffff88802319ee00 [ 152.314520][ T150] sd 0:0:1:0: cmd ffff8880246bc128 CDB: 0x2a [ 152.323497][ C0] Added buffer head 4038 to ffff88802319ee00 [ 152.323515][ C0] Added buffer head 4039 to ffff88802319ee00 [ 152.323529][ C0] Added buffer head 4040 to ffff88802319ee00 [ 152.323542][ C0] Added buffer head 4041 to ffff88802319ee00 [ 152.323558][ C0] Added buffer head 4042 to ffff88802319ee00 [ 152.326699][ T150] Added buffer head 165 to ffff888147bff000 [ 152.335815][ C0] Added buffer head 4043 to ffff88802319ee00 [ 152.343383][ T150] sd 0:0:1:0: cmd ffff8880246bc528 CDB: 0x2a [ 152.351667][ C0] Added buffer head 4044 to ffff88802319ee00 [ 152.359185][ T150] Added buffer head 39 to ffff888147bff000 [ 152.365058][ C0] Added buffer head 4045 to ffff88802319ee00 [ 152.373144][ T150] sd 0:0:1:0: cmd ffff8880246bc928 CDB: 0x2a [ 152.378677][ C0] Added buffer head 4046 to ffff88802319ee00 [ 152.378807][ C0] tcp_in_window: START [ 152.385777][ T150] Added buffer head 77 to ffff888147bff000 [ 152.393192][ C0] tcp_in_window: [ 152.401687][ T150] sd 0:0:1:0: cmd ffff8880246bcd28 CDB: 0x2a [ 152.406220][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.406248][ C0] tcp_in_window: sender end=1487972048 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.415553][ T150] Added buffer head 119 to ffff888147bff000 [ 152.421401][ C0] tcp_in_window: [ 152.430567][ T150] sd 0:0:1:0: cmd ffff8880246bd128 CDB: 0x2a [ 152.436299][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.444594][ T150] Added buffer head 1 to ffff888147bff000 [ 152.451996][ C0] tcp_in_window: sender end=1487972048 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.463695][ T150] sd 0:0:1:0: cmd ffff8880246bd528 CDB: 0x2a [ 152.471627][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 152.480865][ T150] Added buffer head 68 to ffff888147bff000 [ 152.482787][ C0] tcp_in_window: res=1 sender end=1487972049 maxend=1491116880 maxwin=3144576 receiver end=1558279958 maxend=1561424534 maxwin=3144832 [ 152.488981][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 152.493228][ C0] tcp_conntracks: [ 152.499841][ C1] sd 0:0:1:0: cmd ffff8880246bd128 response 0 status 0x0 sense_len 0 [ 152.499872][ C1] sd 0:0:1:0: cmd ffff8880246bb928 response 0 status 0x0 sense_len 0 [ 152.505703][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 152.510229][ C1] sd 0:0:1:0: cmd ffff8880246bbd28 response 0 status 0x0 sense_len 0 [ 152.510255][ C1] sd 0:0:1:0: cmd ffff8880246bc128 response 0 status 0x0 sense_len 0 [ 152.516144][ C0] tcp_in_window: START [ 152.522051][ C1] sd 0:0:1:0: cmd ffff8880246bcd28 response 0 status 0x0 sense_len 0 [ 152.527895][ C0] tcp_in_window: [ 152.533685][ C1] sd 0:0:1:0: cmd ffff8880246bc528 response 0 status 0x0 sense_len 0 [ 152.539533][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.545503][ C1] sd 0:0:1:0: cmd ffff8880246bd528 response 0 status 0x0 sense_len 0 [ 152.549967][ C0] tcp_in_window: sender end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.555648][ C1] sd 0:0:1:0: cmd ffff8880246bc928 response 0 status 0x0 sense_len 0 [ 152.561502][ C0] tcp_in_window: [ 152.567462][ C1] No more buffers in queue [ 152.567563][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.573283][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.585157][ T1444] sd 0:0:1:0: cmd ffff8880246bd928 CDB: 0x2a [ 152.591062][ C0] tcp_in_window: sender end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.596914][ T1444] Added buffer head 77 to ffff888147bff000 [ 152.602753][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 152.608713][ T1444] sd 0:0:1:0: cmd ffff8880246bdd28 CDB: 0x2a [ 152.614565][ C0] tcp_in_window: res=1 sender end=1487972049 maxend=1491116880 maxwin=3144576 receiver end=1558279958 maxend=1561424534 maxwin=3144832 [ 152.620414][ T1444] Added buffer head 68 to ffff888147bff000 [ 152.626249][ C0] tcp_conntracks: [ 152.632150][ T1444] sd 0:0:1:0: cmd ffff8880246be128 CDB: 0x2a [ 152.638031][ C0] syn=0 ack=1 fin=1 rst=0 old=4 new=6 [ 152.638069][ C0] tcp_in_window: START [ 152.638077][ C0] tcp_in_window: [ 152.638084][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.643932][ T1444] Added buffer head 39 to ffff888147bff000 [ 152.649802][ C0] tcp_in_window: sender end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.655724][ T1444] sd 0:0:1:0: cmd ffff8880246be528 CDB: 0x2a [ 152.661560][ C0] tcp_in_window: [ 152.667484][ T1444] Added buffer head 119 to ffff888147bff000 [ 152.673330][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.680067][ T1444] sd 0:0:1:0: cmd ffff8880246be928 CDB: 0x2a [ 152.685138][ C0] tcp_in_window: sender end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.685169][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 152.685184][ C0] tcp_in_window: res=1 sender end=1487972049 maxend=1491116880 maxwin=3144576 receiver end=1558279958 maxend=1561424534 maxwin=3144832 [ 152.685212][ C0] tcp_conntracks: [ 152.691051][ T1444] Added buffer head 165 to ffff888147bff000 [ 152.696891][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 152.702811][ T1444] sd 0:0:1:0: cmd ffff8880246bed28 CDB: 0x2a [ 152.708813][ C0] tcp_in_window: START [ 152.714634][ T1444] Added buffer head 74 to ffff888147bff000 [ 152.722012][ C0] tcp_in_window: [ 152.727847][ T1444] sd 0:0:1:0: cmd ffff8880246b0128 CDB: 0x2a [ 152.735847][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.741707][ T1444] Added buffer head 78 to ffff888147bff000 [ 152.749844][ C0] tcp_in_window: sender end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.755772][ T1444] sd 0:0:1:0: cmd ffff8880246bf928 CDB: 0x2a [ 152.763715][ C0] virtqueue callback for ffff88802319ee00 (ffffffff85497fd0) [ 152.771916][ T1444] Added buffer head 2 to ffff888147bff000 [ 152.777680][ C0] tcp_in_window: [ 152.785836][ T1444] sd 0:0:1:0: cmd ffff8880246bfd28 CDB: 0x2a [ 152.791520][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 152.799637][ T1444] Added buffer head 27 to ffff888147bff000 [ 152.807711][ C0] tcp_in_window: sender end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 152.813631][ T1444] sd 0:0:1:0: cmd ffff8880246bf128 CDB: 0x2a [ 152.821608][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 152.827456][ T1444] Added buffer head 81 to ffff888147bff000 [ 152.831875][ C0] tcp_in_window: res=1 sender end=1487972049 maxend=1491116880 maxwin=3144576 receiver end=1558279958 maxend=1561424534 maxwin=3144832 [ 152.837991][ T1444] sd 0:0:1:0: cmd ffff8880246bf528 CDB: 0x2a [ 152.843882][ C0] tcp_conntracks: [ 152.849765][ T1444] Added buffer head 170 to ffff888147bff000 [ 152.855699][ C0] syn=0 ack=1 fin=1 rst=0 old=6 new=6 [ 152.863440][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 152.868514][ C0] nf_conntrack: normal packet for ffff88801c390480 [ 152.873713][ C1] sd 0:0:1:0: cmd ffff8880246be928 response 0 status 0x0 sense_len 0 [ 152.879802][ C0] tcp_in_window: START [ 152.885550][ C1] sd 0:0:1:0: cmd ffff8880246bd928 response 0 status 0x0 sense_len 0 [ 152.891587][ C0] tcp_in_window: [ 152.897517][ C1] sd 0:0:1:0: cmd ffff8880246be128 response 0 status 0x0 sense_len 0 [ 152.903512][ C0] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 152.909502][ C1] sd 0:0:1:0: cmd ffff8880246bdd28 response 0 status 0x0 sense_len 0 [ 152.909526][ C1] sd 0:0:1:0: cmd ffff8880246be528 response 0 status 0x0 sense_len 0 [ 152.915502][ C0] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 [ 152.921486][ C1] sd 0:0:1:0: cmd ffff8880246bed28 response 0 status 0x0 sense_len 0 [ 152.921510][ C1] sd 0:0:1:0: cmd ffff8880246bf128 response 0 status 0x0 sense_len 0 [ 152.927519][ C0] tcp_in_window: [ 152.933405][ C1] sd 0:0:1:0: cmd ffff8880246bfd28 response 0 status 0x0 sense_len 0 [ 152.939441][ C0] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 152.945379][ C1] sd 0:0:1:0: cmd ffff8880246bf928 response 0 status 0x0 sense_len 0 [ 152.951400][ C0] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116880 maxwin=3144576 scale=7 [ 152.957175][ C1] sd 0:0:1:0: cmd ffff8880246b0128 response 0 status 0x0 sense_len 0 [ 152.963168][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 152.969160][ C1] sd 0:0:1:0: cmd ffff8880246bf528 response 0 status 0x0 sense_len 0 [ 152.969182][ C1] No more buffers in queue [ 152.969225][ C1] vkms_vblank_simulate: vblank timer overrun [ 152.975182][ C0] tcp_in_window: res=1 sender end=1558279958 maxend=1561424534 maxwin=3144832 receiver end=1487972049 maxend=1491116881 maxwin=3144576 [ 153.776074][ C0] tcp_conntracks: [ 153.776089][ C0] syn=0 ack=1 fin=0 rst=0 old=6 new=7 [ 153.785315][ C0] No more buffers in queue [ 153.789749][ C0] eth0: xmit ffff888059a8c3c0 42:01:0a:80:00:01 [ 153.796043][ C0] Added buffer head 2 to ffff88802319ef00 [ 153.801804][ C0] virtqueue callback for ffff88802319ef00 (ffffffff854980c0) [ 153.809604][ T4461] net_ratelimit: 29 callbacks suppressed [ 153.809618][ T4461] wireguard: wg0: Sending handshake initiation to peer 14 ([::1]:20003/0%0) [ 153.824109][ T6519] hci1: cancelling interleave scan [ 153.829413][ T6525] kcov: kcov_task_exit: t = ffff88801f2d9dc0, kcov->t = ffff88801f2d9dc0 [ 153.836486][ C0] wireguard: wg0: Sending keepalive packet to peer 38 ([::1]:20003/0%0) [ 153.838030][ T4267] kobject: '4-1:1.0' (ffff88802bea1030): kobject_add_internal: parent: '4-1', set: 'devices' [ 153.846380][ C0] wireguard: wg0: Sending keepalive packet to peer 14 ([::1]:20003/0%0) [ 153.861055][ T6498] raw-gadget.1 gadget: event fetching interrupted [ 153.865007][ C0] tcp_in_window: START [ 153.875307][ C0] tcp_in_window: [ 153.875325][ C0] seq=77805 ack=85983+(0) sack=139230+(0) win=61425 end=81888 [ 153.876726][ T6519] hci1 state 0 -> 0 [ 153.879007][ C0] tcp_in_window: sender end=36855 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 153.893351][ T6503] kcov: kcov_task_exit: t = ffff888026458000, kcov->t = ffff888026458000 [ 153.902613][ C0] tcp_in_window: [ 153.910986][ C0] seq=77805 ack=85983+(0) sack=139230+(0) win=61425 end=81888 [ 153.921789][ T4461] nf_conntrack: new packet for ffff88802a389980 [ 153.922137][ C0] tcp_in_window: sender end=36855 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 153.928411][ T4461] nf_nat: Already setup manip DST for ct ffff88802a389980 (status bits 0x188) [ 153.940673][ C0] tcp_in_window: I=0 II=1 III=0 IV=1 [ 153.949599][ T4461] nf_nat: Already setup manip SRC for ct ffff88802a389980 (status bits 0x188) [ 153.954856][ C0] tcp_in_window: res=1 sender end=36855 maxend=65495 maxwin=65495 receiver end=0 maxend=65495 maxwin=65495 [ 153.973363][ T150] sd 0:0:1:0: cmd ffff888022034128 CDB: 0x35 [ 153.975141][ C0] tcp_conntracks: [ 153.981102][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 153.981144][ T150] Added buffer head 170 to ffff888147bff000 [ 153.985870][ C0] wireguard: wg2: Sending keepalive packet to peer 41 ([::1]:20001/0%0) [ 153.990348][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 153.996270][ C0] wireguard: wg0: Sending keepalive packet to peer 8 ([::1]:20003/0%0) [ 154.004464][ C1] sd 0:0:1:0: cmd ffff888022034128 response 0 status 0x0 sense_len 0 [ 154.011952][ C0] wireguard: wg0: Sending keepalive packet to peer 32 ([::1]:20003/0%0) [ 154.020079][ C1] No more buffers in queue [ 154.020167][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.028275][ C0] wireguard: wg0: Sending keepalive packet to peer 26 ([::1]:20003/0%0) [ 154.036898][ T150] sd 0:0:1:0: cmd ffff8880246b0528 CDB: 0x2a [ 154.041028][ C0] wireguard: wg1: Sending keepalive packet to peer 10 (127.0.0.1:20003) [ 154.046930][ T150] Added buffer head 170 to ffff888147bff000 [ 154.057508][ C0] tcp_in_window: START [ 154.079661][ C0] tcp_in_window: [ 154.079678][ C0] seq=200643 ack=85983+(0) sack=139230+(0) win=61425 end=200643 [ 154.081053][ T6498] kcov: kcov_task_exit: t = ffff88802b49bb80, kcov->t = ffff88802b49bb80 [ 154.083703][ C0] tcp_in_window: sender end=36855 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 154.091411][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 154.099821][ C0] tcp_in_window: [ 154.112028][ C1] sd 0:0:1:0: cmd ffff8880246b0528 response 0 status 0x0 sense_len 0 [ 154.119424][ C0] seq=200643 ack=85983+(0) sack=139230+(0) win=61425 end=200643 [ 154.123051][ C1] No more buffers in queue [ 154.131150][ C0] tcp_in_window: sender end=36855 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 154.138816][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.143223][ C0] tcp_in_window: I=0 II=1 III=0 IV=1 [ 154.155517][ C1] virtqueue callback for ffff8880236df000 (ffffffff85497fd0) [ 154.161483][ C0] tcp_in_window: res=1 sender end=36855 maxend=65495 maxwin=65495 receiver end=0 maxend=65495 maxwin=65495 [ 154.167159][ C1] No more buffers in queue [ 154.174141][ C0] tcp_conntracks: [ 154.185618][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 154.189991][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 154.193712][ C1] No more buffers in queue [ 154.200349][ C0] tcp_in_window: START [ 154.205152][ C1] No more buffers in queue [ 154.209377][ C0] tcp_in_window: [ 154.213452][ C1] eth0: xmit ffff888023942c80 42:01:0a:80:00:01 [ 154.217913][ C0] seq=200643 ack=85983+(0) sack=139230+(0) win=61425 end=200643 [ 154.221591][ C1] Added buffer head 6 to ffff8880236df100 [ 154.221657][ C1] virtqueue callback for ffff8880236df100 (ffffffff854980c0) [ 154.227859][ C0] tcp_in_window: sender end=36855 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 154.241195][ C0] tcp_in_window: [ 154.249504][ T150] sd 0:0:1:0: cmd ffff888022034128 CDB: 0x35 [ 154.260843][ C0] seq=200643 ack=85983+(0) sack=139230+(0) win=61425 end=200643 [ 154.260883][ C0] tcp_in_window: sender end=36855 maxend=65495 maxwin=65495 scale=0 receiver end=0 maxend=65495 maxwin=65495 scale=0 [ 154.260899][ C1] Sent skb ffff888023942c80 [ 154.260908][ C0] tcp_in_window: I=0 II=1 III=0 IV=1 [ 154.260922][ C0] tcp_in_window: res=1 sender end=36855 maxend=65495 maxwin=65495 receiver end=0 maxend=65495 maxwin=65495 [ 154.260943][ C1] No more buffers in queue [ 154.260953][ C0] tcp_conntracks: [ 154.260960][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 154.262220][ T13] device: '1-1:16.0': device_add [ 154.264759][ T150] Added buffer head 170 to ffff888147bff000 [ 154.271509][ C0] nf_conntrack: new packet for ffff88801c391e00 [ 154.278470][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 154.291175][ C0] nf_conntrack: Confirming conntrack ffff88801c391e00 [ 154.295503][ C1] sd 0:0:1:0: cmd ffff888022034128 response 0 status 0x0 sense_len 0 [ 154.301018][ C0] Sent skb ffff888059a8c3c0 [ 154.312170][ C1] No more buffers in queue [ 154.312195][ C1] vkms_vblank_simulate: vblank timer overrun [ 154.316742][ C0] No more buffers in queue [ 154.332232][ T4267] usb 4-1:1.0: No ACPI support [ 154.342077][ T13] kobject: '1-1:16.0' (ffff888060b38030): kobject_add_internal: parent: '1-1', set: 'devices' [ 154.376367][ T6519] All LE pending actions cleared [ 154.380748][ T13] usb 1-1:16.0: No ACPI support [ 154.385847][ T4267] bus: 'usb': add device 4-1:1.0 [ 154.390157][ T13] bus: 'usb': add device 1-1:16.0 [ 154.406196][ T6519] hdev hci1 [ 154.410073][ T13] PM: Adding info for usb:1-1:16.0 [ 154.428307][ T13] kobject: '1-1:16.0' (ffff888060b38030): kobject_uevent_env [ 154.435501][ T4572] kobject: '5-1' (ffff8880606ca0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1' [ 154.435771][ T13] kobject: '1-1:16.0' (ffff888060b38030): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.0' [ 154.452220][ T6519] hcon ffff888058d12000 reason 22 [ 154.459696][ T13] bus: 'usb': __driver_probe_device: matched device 1-1:16.0 with driver usbtmc [ 154.472846][ T13] bus: 'usb': really_probe: probing driver usbtmc with device 1-1:16.0 [ 154.481278][ T13] usbtmc 1-1:16.0: usb_probe_interface [ 154.486815][ T13] usbtmc 1-1:16.0: usb_probe_interface - got id [ 154.493103][ T13] usbtmc 1-1:16.0: usbtmc_probe called [ 154.498645][ T13] usbtmc 1-1:16.0: Found bulk in endpoint at 139 [ 154.505012][ T13] usbtmc 1-1:16.0: Found Bulk out endpoint at 5 [ 154.511493][ T7] addr is not unicast. [ 154.515808][ T4228] Added buffer head 0 to ffff88801f593b00 [ 154.519767][ T6519] hcon ffff888058d12000 conn ffff888073cbc800, err 103 [ 154.521925][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 154.528807][ T4267] PM: Adding info for usb:4-1:1.0 [ 154.535859][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 154.547852][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 154.559182][ T4228] addr is not unicast. [ 154.563367][ T4228] nf_conntrack: normal packet for ffff88802a388d80 [ 154.564952][ T4572] bus: 'usb': __driver_probe_device: matched device 5-1 with driver usb [ 154.570373][ T1108] nf_conntrack: new packet for ffff88802a389980 [ 154.585082][ T1108] nf_nat: Already setup manip DST for ct ffff88802a389980 (status bits 0x188) [ 154.589954][ T6505] debugfs: creating file '6505-8' [ 154.594022][ T1108] nf_nat: Already setup manip SRC for ct ffff88802a389980 (status bits 0x188) [ 154.604822][ T6503] udc dummy_udc.0: unregistering UDC driver [USB Raw Gadget] [ 154.608293][ T4187] Added buffer head 0 to ffff88801f593b00 [ 154.619672][ T6519] hci1 hcon ffff888058d12000 chan ffff888026065100 [ 154.621193][ T7] nf_conntrack: normal packet for ffff888025677080 [ 154.631408][ T6503] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes [ 154.634477][ T4229] nf_conntrack: normal packet for ffff88805b35c480 [ 154.646542][ T4267] kobject: '4-1:1.0' (ffff88802bea1030): kobject_uevent_env [ 154.648364][ T4232] nf_conntrack: normal packet for ffff88801c391800 [ 154.655606][ T4267] kobject: '4-1:1.0' (ffff88802bea1030): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 154.661925][ T4232] proto(17) != IPPROTO_TCP or too short (len = 40) [ 154.680480][ T1323] addr is not unicast. [ 154.683497][ T6505] debugfs: creating file 'remote_tlb_flush' [ 154.684763][ T1323] addr is not unicast. [ 154.694774][ T1323] addr is not unicast. [ 154.698998][ T1323] addr is not unicast. [ 154.703151][ T1323] addr is not unicast. [ 154.707331][ T1323] addr is not unicast. [ 154.711485][ T1323] addr is not unicast. [ 154.713981][ T4572] bus: 'usb': really_probe: probing driver usb with device 5-1 [ 154.715695][ T1323] addr is not unicast. [ 154.727359][ T1323] addr is not unicast. [ 154.730314][ T6503] kobject: 'dummy_udc.0' (ffff88802582e018): kobject_uevent_env [ 154.730470][ C1] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 154.731632][ T1323] addr is not unicast. [ 154.739088][ C1] kcov: kcov_start: t = ffff888026458000, size = 262144, area = ffffc900021c9000 [ 154.739243][ C1] kcov: kcov_move_area: ffffc900106d4000 1048576 <= ffffc900021c9000 51 [ 154.747506][ T1323] addr is not unicast. [ 154.751822][ C1] wireguard: wg1: Sending keepalive packet to peer 27 ([::1]:20001/0%0) [ 154.760661][ T1323] addr is not unicast. [ 154.785451][ T4232] addr is not unicast. [ 154.786908][ T6505] debugfs: creating file 'remote_tlb_flush_requests' [ 154.789776][ T4232] addr is not unicast. [ 154.800478][ T4232] addr is not unicast. [ 154.802957][ T6503] kobject: 'dummy_udc.0' (ffff88802582e018): fill_kobj_path: path = '/devices/platform/dummy_udc.0/udc/dummy_udc.0' [ 154.804764][ T4232] addr is not unicast. [ 154.820962][ T4232] addr is not unicast. [ 154.827254][ T4232] addr is not unicast. [ 154.829308][ T4572] usb 5-1: usb_probe_device [ 154.832257][ T4232] addr is not unicast. [ 154.836924][ T4572] usb 5-1: configuration #0 chosen from 1 choice [ 154.840226][ T4232] addr is not unicast. [ 154.850488][ T4232] addr is not unicast. [ 154.854691][ T4232] addr is not unicast. [ 154.858883][ T4232] addr is not unicast. [ 154.863042][ T4232] addr is not unicast. [ 154.867228][ T4232] addr is not unicast. [ 154.871265][ T6505] debugfs: creating file 'mmu_shadow_zapped' [ 154.871488][ T4232] addr is not unicast. [ 154.881089][ T4267] bus: 'usb': __driver_probe_device: matched device 4-1:1.0 with driver garmin_gps [ 154.881671][ T4232] addr is not unicast. [ 154.895024][ C0] wireguard: wg1: Sending keepalive packet to peer 40 (127.0.0.1:20003) [ 154.903505][ C0] dummy_hcd dummy_hcd.0: no ep configured for urb ffff888025481d00 [ 154.906689][ T6498] udc dummy_udc.4: unregistering UDC driver [USB Raw Gadget] [ 154.911435][ C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 154.919351][ T6505] debugfs: creating file 'mmu_pte_write' [ 154.926988][ C0] kcov: kcov_start: t = ffff88813fea1dc0, size = 262144, area = ffffc900021c9000 [ 154.927025][ C0] kcov: kcov_move_area: ffffc900106d4000 1048576 <= ffffc900021c9000 6 [ 154.927672][ C0] No more buffers in queue [ 154.950476][ T4572] usb 5-1: config 0 descriptor?? [ 154.954620][ C0] Receiving skb proto 0x0800 len 52 type 0 [ 154.965346][ C0] No more buffers in queue [ 154.969860][ C0] tcp_in_window: START [ 154.973953][ C0] tcp_in_window: [ 154.973969][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 154.975400][ T6522] kcov: kcov_task_exit: t = ffff88801f2d8000, kcov->t = ffff88801f2d8000 [ 154.977731][ C0] tcp_in_window: sender end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 155.006411][ T4267] bus: 'usb': really_probe: probing driver garmin_gps with device 4-1:1.0 [ 155.009887][ C0] tcp_in_window: [ 155.018385][ C0] seq=1487972048 ack=1558279958+(0) sack=1558279958+(0) win=24567 end=1487972049 [ 155.024344][ T6498] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 155.031217][ C0] tcp_in_window: sender end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 receiver end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 [ 155.038532][ C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 11) [ 155.053143][ C0] tcp_in_window: I=1 II=1 III=1 IV=1 [ 155.070112][ C0] tcp_in_window: res=1 sender end=1487972049 maxend=1491116881 maxwin=3144576 receiver end=1558279958 maxend=1561424534 maxwin=3144832 [ 155.080815][ T6506] kcov: kcov_task_exit: t = ffff88801f6ed940, kcov->t = ffff88801f6ed940 [ 155.084039][ C0] tcp_conntracks: [ 155.092397][ C0] syn=0 ack=1 fin=1 rst=0 old=7 new=7 [ 155.096033][ C1] dummy_hcd dummy_hcd.4: no ep configured for urb ffff888025be4300 [ 155.097988][ C0] nf_nat: Already setup manip DST for ct ffff88801c391e00 (status bits 0x188) [ 155.101565][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 155.109606][ C0] nf_nat: Already setup manip SRC for ct ffff88801c391e00 (status bits 0x188) [ 155.118305][ C1] kcov: kcov_start: t = ffff88801e728000, size = 262144, area = ffffc900021c9000 [ 155.131123][ T4232] nf_conntrack: normal packet for ffff88802a388f00 [ 155.135322][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 6 [ 155.144747][ T13] usb 1-1: usb_control_msg returned -71 [ 155.150952][ C1] vkms_vblank_simulate: vblank timer overrun [ 155.151261][ T4572] usb 5-1: can't set config #0, error -71 [ 155.162806][ T6498] kobject: 'dummy_udc.4' (ffff888025882018): kobject_uevent_env [ 155.164828][ T4572] driver: 'usb': driver_bound: bound to device '5-1' [ 155.170795][ C0] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 155.176601][ T4572] kobject: '5-1' (ffff8880606ca0a8): kobject_uevent_env [ 155.184136][ C0] kcov: kcov_start: t = ffff88802b49bb80, size = 262144, area = ffffc900021c9000 [ 155.190980][ T4572] kobject: '5-1' (ffff8880606ca0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1' [ 155.199013][ C0] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 51 [ 155.210465][ T4267] garmin_gps 4-1:1.0: usb_probe_interface [ 155.218217][ T6505] debugfs: creating file 'mmu_pde_zapped' [ 155.231704][ T4572] bus: 'usb': really_probe: bound device 5-1 to driver usb [ 155.239722][ T13] usbtmc 1-1:16.0: can't read capabilities [ 155.249122][ T4267] garmin_gps 4-1:1.0: usb_probe_interface - got id [ 155.253518][ T6505] debugfs: creating file 'mmu_flooded' [ 155.270967][ T4232] nf_conntrack: normal packet for ffff88802a388f00 [ 155.276491][ T4572] device: 'ep_00': device_add [ 155.277743][ T13] device class 'usbmisc': registering [ 155.282515][ T4572] kobject: 'ep_00' (ffff88805fc49010): kobject_add_internal: parent: '5-1', set: 'devices' [ 155.287688][ T6498] kobject: 'dummy_udc.4' (ffff888025882018): fill_kobj_path: path = '/devices/platform/dummy_udc.4/udc/dummy_udc.4' [ 155.310090][ T13] kobject: 'usbmisc' (ffff88802376e850): kobject_add_internal: parent: 'class', set: 'class' [ 155.310495][ T4267] garmin_gps 4-1:1.0: static descriptor matches [ 155.320553][ T6505] debugfs: creating file 'mmu_recycled' [ 155.332417][ T13] kobject: 'usbmisc' (ffff88802376e850): kobject_uevent_env [ 155.336713][ T4572] ep_00: No ACPI support [ 155.339882][ T13] kobject: 'usbmisc' (ffff88802376e850): fill_kobj_path: path = '/class/usbmisc' [ 155.353437][ T6505] debugfs: creating file 'mmu_cache_miss' [ 155.359281][ T6505] debugfs: creating file 'mmu_unsync' [ 155.362468][ T4267] garmin_gps 4-1:1.0: found interrupt in endpoint 81 [ 155.365101][ T6505] debugfs: creating file 'pages_4k' [ 155.375837][ T4572] PM: Adding info for No Bus:ep_00 [ 155.377322][ T13] usbtmc 1-1:16.0: looking for a minor, starting at 0 [ 155.389143][ T13] device: 'usbtmc0': device_add [ 155.394054][ T13] kobject: 'usbmisc' (ffff8880755ac280): kobject_add_internal: parent: '1-1:16.0', set: '(null)' [ 155.403317][ T4572] kobject: 'ep_00' (ffff88805fc49010): kobject_uevent_env [ 155.404824][ T6505] debugfs: creating file 'pages_2m' [ 155.417174][ T13] kobject: 'usbtmc0' (ffff888020502000): kobject_add_internal: parent: 'usbmisc', set: 'devices' [ 155.427812][ T6505] debugfs: creating file 'pages_1g' [ 155.427906][ T4267] garmin_gps 4-1:1.0: found bulk out endpoint 02 [ 155.427927][ T4267] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 155.433215][ T6505] debugfs: creating file 'nx_lpage_splits' [ 155.451995][ T4572] kobject: 'ep_00' (ffff88805fc49010): kobject_uevent_env: filter function caused the event to drop! [ 155.453387][ T13] usbmisc usbtmc0: No ACPI support [ 155.469296][ T13] PM: Adding info for No Bus:usbtmc0 [ 155.476414][ T13] kobject: 'usbtmc0' (ffff888020502000): kobject_uevent_env [ 155.479566][ T4267] garmin_gps 4-1:1.0: setting up 1 port structure(s) [ 155.483852][ T13] kobject: 'usbtmc0' (ffff888020502000): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.0/usbmisc/usbtmc0' [ 155.504243][ T6505] debugfs: creating file 'max_mmu_rmap_size' [ 155.509746][ T4572] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900122d8000 830736 [ 155.511116][ T6505] debugfs: creating file 'max_mmu_page_hash_collisions' [ 155.525951][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 155.526001][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 155.526015][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 155.539748][ T4267] garmin_gps 4-1:1.0: allocate_minors 1 [ 155.542989][ T13] usbtmc 1-1:16.0: Using minor number 0 [ 155.551421][ T4572] kcov: kcov_remote_start: handle = 100000000000005, context: task [ 155.554069][ T13] driver: 'usbtmc': driver_bound: bound to device '1-1:16.0' [ 155.558549][ T4572] kcov: kcov_start: t = ffff88807b168000, size = 1048576, area = ffffc900122d8000 [ 155.569136][ T4267] garmin_gps 4-1:1.0: registering ttyUSB0 [ 155.574249][ T6505] debugfs: creating file 'halt_successful_poll' [ 155.596016][ T13] kobject: '1-1:16.0' (ffff888060b38030): kobject_uevent_env [ 155.596011][ C1] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 9) [ 155.596979][ T4572] hub 5-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 155.603507][ T13] kobject: '1-1:16.0' (ffff888060b38030): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.0' [ 155.626422][ T6505] debugfs: creating file 'halt_attempted_poll' [ 155.640175][ T4267] device: 'ttyUSB0': device_add [ 155.641187][ T13] bus: 'usb': really_probe: bound device 1-1:16.0 to driver usbtmc [ 155.645064][ T4267] kobject: 'ttyUSB0' (ffff888051b26538): kobject_add_internal: parent: '4-1:1.0', set: 'devices' [ 155.654175][ T13] device: 'ep_05': device_add [ 155.664169][ T4572] dummy_hcd dummy_hcd.4: port status 0x00010100 has changes [ 155.676164][ T6505] debugfs: creating file 'halt_poll_invalid' [ 155.676314][ T13] kobject: 'ep_05' (ffff888020501010): kobject_add_internal: parent: '1-1:16.0', set: 'devices' [ 155.682331][ T6505] debugfs: creating file 'halt_wakeup' [ 155.716066][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 155.724282][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc900021c9000 [ 155.733478][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 109 [ 155.742045][ T4267] usb-serial ttyUSB0: No ACPI support [ 155.747462][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 155.747482][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 262144, area = ffffc900021c9000 [ 155.747511][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 1048576, area = ffffc90013adb000 [ 155.747531][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 22 [ 155.777036][ T13] ep_05: No ACPI support [ 155.783417][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 155.794925][ C1] kcov: kcov_start: t = ffff88801e728000, size = 262144, area = ffffc900021c9000 [ 155.797229][ T13] PM: Adding info for No Bus:ep_05 [ 155.804194][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900021c9000 30 [ 155.809370][ T13] kobject: 'ep_05' (ffff888020501010): kobject_uevent_env [ 155.824683][ T13] kobject: 'ep_05' (ffff888020501010): kobject_uevent_env: filter function caused the event to drop! [ 155.824728][ T4572] usb usb5-port1: status 0100, change 0001, 12 Mb/s [ 155.836102][ T6505] debugfs: creating file 'halt_poll_success_ns' [ 155.848979][ T13] device: 'ep_8b': device_add [ 155.854459][ T13] kobject: 'ep_8b' (ffff888020507010): kobject_add_internal: parent: '1-1:16.0', set: 'devices' [ 155.865266][ T6505] debugfs: creating file 'halt_poll_fail_ns' [ 155.868347][ T3851] Deleting a9feffff/32 tos=0 t=ffff8880187e38b0 [ 155.872404][ T6505] debugfs: creating file 'halt_wait_ns' [ 155.878534][ T4572] usb 5-1: USB disconnect, device number 9 [ 155.889247][ T3851] Deleting a9feffff/32 tos=0 t=ffff8880187e38b0 [ 155.891215][ T13] ep_8b: No ACPI support [ 155.895531][ T3851] Deleting a9feb967/32 tos=0 t=ffff8880187e38b0 [ 155.906245][ T4572] usb 5-1: unregistering device [ 155.911130][ T4572] usb 5-1: usb_disable_device nuking all URBs [ 155.917474][ T6505] debugfs: creating file 'halt_poll_success_hist' [ 155.917847][ T3851] sctp: sctp_addr_wq_mgmt: add new entry for cmd:2, addr:169.254.185.103 in wq:ffffffff974d9858 [ 155.924065][ T6505] debugfs: creating file 'halt_poll_fail_hist' [ 155.934645][ T4572] kernfs port: removing [ 155.944861][ T1323] Added buffer head 0 to ffff88801f593b00 [ 155.946313][ T4572] kernfs device: removing [ 155.955230][ T4572] device: 'ep_00': device_unregister [ 155.955529][ T4267] bus: 'usb-serial': add device ttyUSB0 [ 155.958098][ T13] PM: Adding info for No Bus:ep_8b [ 155.966409][ T4267] PM: Adding info for usb-serial:ttyUSB0 [ 155.966476][ T4267] kobject: 'ttyUSB0' (ffff888051b26538): kobject_uevent_env [ 155.966522][ T4267] kobject: 'ttyUSB0' (ffff888051b26538): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/ttyUSB0' [ 155.972374][ T13] kobject: 'ep_8b' (ffff888020507010): kobject_uevent_env [ 155.984839][ T6505] debugfs: creating file 'halt_wait_hist' [ 156.006800][ T3851] Deleting a9fe0000/16 tos=0 t=ffff8880187e38b0 [ 156.010260][ T13] kobject: 'ep_8b' (ffff888020507010): kobject_uevent_env: filter function caused the event to drop! [ 156.018468][ T4267] bus: 'usb-serial': __driver_probe_device: matched device ttyUSB0 with driver garmin_gps [ 156.028066][ T13] driver: 'usb': driver_bound: bound to device '1-1' [ 156.044315][ T6505] debugfs: creating file 'pf_fixed' [ 156.047251][ T4572] kernfs runtime_status: removing [ 156.050677][ T6505] debugfs: creating file 'pf_guest' [ 156.054639][ T4572] kernfs control: removing [ 156.068464][ T6505] debugfs: creating file 'tlb_flush' [ 156.073846][ T6505] debugfs: creating file 'invlpg' [ 156.081393][ T6505] debugfs: creating file 'exits' [ 156.086304][ T4267] bus: 'usb-serial': really_probe: probing driver garmin_gps with device ttyUSB0 [ 156.090598][ T6505] debugfs: creating file 'io_exits' [ 156.095785][ T4572] kernfs runtime_suspended_time: removing [ 156.107461][ T6505] debugfs: creating file 'mmio_exits' [ 156.112915][ T13] kobject: '1-1' (ffff8880535510a8): kobject_uevent_env [ 156.118090][ T4573] nfc: nfc_urelease_event_work: portid 218 [ 156.125736][ T4573] nfc: nfc_urelease_event_work: portid 218 [ 156.125969][ T6505] debugfs: creating file 'signal_exits' [ 156.132103][ T4267] garmin_gps ttyUSB0: garmin_init_session - starting session ... [ 156.137911][ T13] kobject: '1-1' (ffff8880535510a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1' [ 156.146305][ T4572] kernfs runtime_active_time: removing [ 156.156717][ T6505] debugfs: creating file 'irq_window_exits' [ 156.161738][ T4267] garmin_gps ttyUSB0: garmin_write_bulk - length = 12, data = 00 00 00 00 05 00 00 00 00 00 00 00 [ 156.170876][ T13] bus: 'usb': really_probe: bound device 1-1 to driver usb [ 156.185557][ T6505] debugfs: creating file 'nmi_window_exits' [ 156.186193][ T4572] kernfs autosuspend_delay_ms: removing [ 156.196256][ T6505] debugfs: creating file 'l1d_flush' [ 156.202404][ T6505] debugfs: creating file 'halt_exits' [ 156.206363][ T4267] garmin_gps ttyUSB0: garmin_write_bulk - length = 12, data = 00 00 00 00 05 00 00 00 00 00 00 00 [ 156.218891][ T6505] debugfs: creating file 'request_irq_exits' [ 156.224968][ T6505] debugfs: creating file 'irq_exits' [ 156.226123][ C1] dummy_hcd dummy_hcd.3: no ep configured for urb ffff888025be4700 [ 156.237084][ T6505] debugfs: creating file 'host_state_reload' [ 156.238220][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 156.244314][ T6505] debugfs: creating file 'fpu_reload' [ 156.252326][ C1] kcov: kcov_start: t = ffff88807d921dc0, size = 262144, area = ffffc900021c9000 [ 156.252392][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc900021c9000 66 [ 156.259130][ T6505] debugfs: creating file 'insn_emulation' [ 156.267786][ T4572] kernfs power: removing [ 156.285739][ T4267] garmin_gps ttyUSB0: garmin_write_bulk - length = 12, data = 00 00 00 00 05 00 00 00 00 00 00 00 [ 156.286152][ T6505] debugfs: creating file 'insn_emulation_fail' [ 156.296385][ C1] dummy_hcd dummy_hcd.3: no ep configured for urb ffff88801b9f8000 [ 156.310488][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 156.318680][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 262144, area = ffffc900021c9000 [ 156.326294][ T6505] debugfs: creating file 'hypercalls' [ 156.327913][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 1048576, area = ffffc90013adb000 [ 156.333346][ T6505] debugfs: creating file 'irq_injections' [ 156.342426][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc900021c9000 16 [ 156.343405][ T4267] device: 'ttyUSB0': device_add [ 156.356596][ C1] dummy_hcd dummy_hcd.3: no ep configured for urb ffff88801f2a6f00 [ 156.356639][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 156.356658][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 262144, area = ffffc900021c9000 [ 156.356701][ C1] kcov: kcov_start: t = ffff888029609dc0, size = 1048576, area = ffffc90013adb000 [ 156.356720][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc900021c9000 16 [ 156.416786][ T4267] kobject: 'tty' (ffff88805e380f00): kobject_add_internal: parent: 'ttyUSB0', set: '(null)' [ 156.436027][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:ffffffff974d9858 is addr:169.254.185.103 for cmd:2 at entry:ffff888023100080 [ 156.454974][ T4572] kernfs uevent: removing [ 156.457973][ T6505] debugfs: creating file 'nmi_injections' [ 156.459690][ T4572] kernfs bLength: removing [ 156.465337][ T6505] debugfs: creating file 'req_event' [ 156.475957][ T6505] debugfs: creating file 'nested_run' [ 156.481673][ T6505] debugfs: creating file 'directed_yield_attempted' [ 156.486387][ T4267] kobject: 'ttyUSB0' (ffff88805fc48000): kobject_add_internal: parent: 'tty', set: 'devices' [ 156.489319][ T6505] debugfs: creating file 'directed_yield_successful' [ 156.506138][ T4267] tty ttyUSB0: No ACPI support [ 156.511216][ T4267] PM: Adding info for No Bus:ttyUSB0 [ 156.513850][ T13] device: 'ep_00': device_add [ 156.516759][ T4572] kernfs bEndpointAddress: removing [ 156.521428][ T6505] debugfs: creating file 'preemption_reported' [ 156.526490][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 156.526530][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 156.526542][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 156.536219][ T4572] kernfs bmAttributes: removing [ 156.542010][ T13] kobject: 'ep_00' (ffff888020505010): kobject_add_internal: parent: '1-1', set: 'devices' [ 156.571150][ T4573] nf_conntrack: normal packet for ffff88805b35cc00 [ 156.578043][ T4233] nf_conntrack: new packet for ffff88802a389800 [ 156.584761][ T4233] nf_nat: Already setup manip DST for ct ffff88802a389800 (status bits 0x188) [ 156.593682][ T4233] nf_nat: Already setup manip SRC for ct ffff88802a389800 (status bits 0x188) [ 156.602908][ T4231] nf_conntrack: new packet for ffff88801fac4780 [ 156.609228][ T4231] nf_nat: Already setup manip DST for ct ffff88801fac4780 (status bits 0x188) [ 156.616304][ T6505] debugfs: creating file 'preemption_other' [ 156.618194][ T4231] nf_nat: Already setup manip SRC for ct ffff88801fac4780 (status bits 0x188) [ 156.624129][ T6505] debugfs: creating file 'guest_mode' [ 156.633635][ T4230] proto(17) != IPPROTO_TCP or too short (len = 40) [ 156.645107][ T4568] nf_conntrack: normal packet for ffff88801c391980 [ 156.651693][ T4568] proto(17) != IPPROTO_TCP or too short (len = 40) [ 156.652345][ T13] ep_00: No ACPI support [ 156.665941][ T13] PM: Adding info for No Bus:ep_00 [ 156.666414][ T4267] kobject: 'ttyUSB0' (ffff88805fc48000): kobject_uevent_env [ 156.679042][ T4572] kernfs bInterval: removing [ 156.679104][ T13] kobject: 'ep_00' (ffff888020505010): kobject_uevent_env [ 156.683695][ T4572] kernfs wMaxPacketSize: removing [ 156.697835][ T6505] debugfs: creating file 'mmu_rmaps_stat' [ 156.699897][ T4267] kobject: 'ttyUSB0' (ffff88805fc48000): kobject_uevent_env: uevent_suppress caused the event to drop! [ 156.703845][ T6505] kobject: 'kvm' (ffff88801cbda000): kobject_uevent_env [ 156.714818][ T4267] kobject: 'ttyUSB0' (ffff88805fc48000): kobject_uevent_env [ 156.729335][ T4572] kernfs interval: removing [ 156.733888][ T4572] kernfs type: removing [ 156.737419][ T13] kobject: 'ep_00' (ffff888020505010): kobject_uevent_env: filter function caused the event to drop! [ 156.738326][ T4572] kernfs direction: removing [ 156.753608][ T4267] kobject: 'ttyUSB0' (ffff88805fc48000): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/ttyUSB0/tty/ttyUSB0' [ 156.758738][ T13] kcov: kcov_move_area: ffffc900106d4000 1048576 <= ffffc9001798c000 1048575 [ 156.775588][ T4572] PM: Removing info for No Bus:ep_00 [ 156.781539][ T4572] kobject: 'ep_00' (ffff88805fc49010): kobject_uevent_env [ 156.788998][ T4267] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 156.794647][ T6505] kobject: 'kvm' (ffff88801cbda000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 156.797073][ T4572] kobject: 'ep_00' (ffff88805fc49010): kobject_uevent_env: filter function caused the event to drop! [ 156.818617][ T6505] kcov: kcov_task_exit: t = ffff88802c638000, kcov->t = ffff88802c638000 [ 156.825609][ T4267] driver: 'garmin_gps': driver_bound: bound to device 'ttyUSB0' [ 156.832464][ T13] kcov: kcov_remote_start: handle = 100000000000001, context: task [ 156.834847][ T4267] kobject: 'ttyUSB0' (ffff888051b26538): kobject_uevent_env [ 156.842690][ T13] kcov: kcov_start: t = ffff88813fea0000, size = 1048576, area = ffffc9001798c000 [ 156.844675][ T13] hub 1-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 156.866080][ T4572] kernfs ep_00: removing [ 156.870390][ T4572] kobject: 'ep_00' (ffff88805fc49010): kobject_cleanup, parent 0000000000000000 [ 156.870624][ T13] dummy_hcd dummy_hcd.0: port status 0x00010100 has changes [ 156.890131][ C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 156.896244][ T4267] kobject: 'ttyUSB0' (ffff888051b26538): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/ttyUSB0' [ 156.898334][ C0] kcov: kcov_start: t = ffff88813fea1dc0, size = 262144, area = ffffc900021c9000 [ 156.911149][ T4572] kobject: 'ep_00' (ffff88805fc49010): calling ktype release [ 156.920092][ C0] kcov: kcov_move_area: ffffc900106d4000 1048576 <= ffffc900021c9000 117 [ 156.934201][ T4267] bus: 'usb-serial': really_probe: bound device ttyUSB0 to driver garmin_gps [ 156.938216][ T1323] Added buffer head 0 to ffff88801f593b00 [ 156.950463][ C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 156.950487][ C0] kcov: kcov_start: t = ffff8880232ad940, size = 262144, area = ffffc900021c9000 [ 156.950518][ C0] kcov: kcov_move_area: ffffc900106d4000 1048576 <= ffffc900021c9000 22 [ 156.950680][ T4572] kobject: 'ep_00': free name [ 156.958940][ C1] nf_conntrack: new packet for ffff88802a388900 [ 156.958965][ C1] nf_nat: Already setup manip DST for ct ffff88802a388900 (status bits 0x188) [ 156.958991][ C1] nf_nat: Already setup manip SRC for ct ffff88802a388900 (status bits 0x188) [ 156.965572][ C0] kcov: kcov_remote_start: handle = 100000000000001, context: softirq [ 157.013471][ C0] kcov: kcov_start: t = ffff8880232ad940, size = 262144, area = ffffc900021c9000 [ 157.018776][ T4267] usbserial: registering the USB serial console. [ 157.022689][ C0] kcov: kcov_move_area: ffffc900106d4000 1048576 <= ffffc900021c9000 38 [ 157.029114][ T4267] driver: 'garmin_gps': driver_bound: bound to device '4-1:1.0' [ 157.043216][ T13] usb usb1-port1: status 0100, change 0001, 12 Mb/s [ 157.045283][ T4572] kernfs autosuspend: removing [ 157.051758][ T13] usb 1-1: USB disconnect, device number 7 [ 157.051779][ T13] usb 1-1: unregistering device [ 157.056985][ T4267] kobject: '4-1:1.0' (ffff88802bea1030): kobject_uevent_env [ 157.062398][ T13] usb 1-1: unregistering interface 1-1:16.0 [ 157.067356][ T4572] kernfs level: removing [ 157.076769][ T13] device: 'ep_05': device_unregister [ 157.082325][ T4267] kobject: '4-1:1.0' (ffff88802bea1030): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0' [ 157.102261][ T4572] kernfs connected_duration: removing [ 157.113886][ T4572] kernfs active_duration: removing [ 157.120752][ T1323] nf_conntrack: normal packet for ffff888025677200 [ 157.127327][ T4267] bus: 'usb': really_probe: bound device 4-1:1.0 to driver garmin_gps [ 157.127933][ T13] kernfs runtime_status: removing [ 157.135715][ T4267] device: 'ep_81': device_add [ 157.146085][ T4267] kobject: 'ep_81' (ffff88805fc4b010): kobject_add_internal: parent: '4-1:1.0', set: 'devices' [ 157.154792][ T6505] kobject: 'kvm' (ffff88801cbda000): kobject_uevent_env [ 157.165569][ T13] kernfs control: removing [ 157.170174][ T4572] kernfs persist: removing [ 157.174655][ T4572] kernfs descriptors: removing [ 157.176138][ T6505] kobject: 'kvm' (ffff88801cbda000): fill_kobj_path: path = '/devices/virtual/misc/kvm' [ 157.180646][ T4572] kernfs runtime_status: removing [ 157.199259][ T6505] udc dummy_udc.3: unregistering UDC driver [USB Raw Gadget] [ 157.206928][ T13] kernfs runtime_suspended_time: removing [ 157.212696][ T13] kernfs runtime_active_time: removing [ 157.217460][ T4568] nf_conntrack: normal packet for ffff88802a388180 [ 157.224068][ T4173] nf_conntrack: normal packet for ffff88801c390480 [ 157.225523][ T6519] hci1 hcon ffff888058d12000 handle 201 [ 157.231247][ T6505] dummy_hcd dummy_hcd.3: port status 0x00010100 has changes [ 157.231365][ C0] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 157.236889][ C1] dummy_hcd dummy_hcd.3: no ep configured for urb ffff888025be4900 [ 157.244147][ C0] kcov: kcov_start: t = ffff88813fea1dc0, size = 262144, area = ffffc900021c9000 [ 157.252357][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 157.260248][ C0] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc900021c9000 51 [ 157.269300][ C1] kcov: kcov_start: t = ffff88802c63bb80, size = 262144, area = ffffc90001f59000 [ 157.277638][ T6505] kobject: 'dummy_udc.3' (ffff888025881018): kobject_uevent_env [ 157.285793][ C1] usb 4-1: garmin_read_int_callback - nonzero urb status received: -71 [ 157.306085][ T4173] tcp_in_window: START [ 157.310775][ C1] kcov: kcov_start: t = ffff88802c63bb80, size = 524288, area = ffffc900156e1000 [ 157.314852][ T4173] tcp_in_window: [ 157.314862][ T4173] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 157.323958][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc90001f59000 59106 [ 157.336294][ T4231] nf_conntrack: new packet for ffff88801fac4480 [ 157.336809][ T4173] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 [ 157.345397][ T4231] nf_nat: Already setup manip DST for ct ffff88801fac4480 (status bits 0x188) [ 157.351677][ T4173] tcp_in_window: [ 157.351687][ T4173] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 157.366383][ T4231] nf_nat: Already setup manip SRC for ct ffff88801fac4480 (status bits 0x188) [ 157.375219][ T4173] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 [ 157.380890][ T6519] hcon ffff888058d12000 [ 157.388004][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1 [ 157.388023][ T4173] tcp_in_window: res=1 sender end=1558279958 maxend=1561424534 maxwin=3144832 receiver end=1487972049 maxend=1491116881 maxwin=3144576 [ 157.406388][ T6505] kobject: 'dummy_udc.3' (ffff888025881018): fill_kobj_path: path = '/devices/platform/dummy_udc.3/udc/dummy_udc.3' [ 157.411647][ T4173] tcp_conntracks: [ 157.416889][ T6505] dummy_udc dummy_udc.3: disabled ep1in-bulk [ 157.421104][ T4173] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 157.452181][ T4267] ep_81: No ACPI support [ 157.456884][ T13] kernfs autosuspend_delay_ms: removing [ 157.466968][ T4173] No more buffers in queue [ 157.472257][ T13] kernfs power: removing [ 157.476558][ T4173] eth0: xmit ffff88805881b000 42:01:0a:80:00:01 [ 157.481881][ T13] kernfs uevent: removing [ 157.487101][ T4173] Added buffer head 6 to ffff8880236df100 [ 157.487173][ C1] virtqueue callback for ffff8880236df100 (ffffffff854980c0) [ 157.492433][ T13] kernfs bLength: removing [ 157.497288][ C1] Sent skb ffff88805881b000 [ 157.513532][ C1] No more buffers in queue [ 157.515240][ T13] kernfs bEndpointAddress: removing [ 157.523223][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 157.523263][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 157.523275][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 157.544312][ T6519] hci1: conn ffff888058d12000 [ 157.549721][ T1108] nf_conntrack: normal packet for ffff88801c391b00 [ 157.554172][ T4572] kernfs control: removing [ 157.556632][ T4232] Added buffer head 0 to ffff88801f593b00 [ 157.566551][ T6519] kobject: 'hci1:201' (ffff888058d12420): kobject_cleanup, parent 0000000000000000 [ 157.573157][ T4267] PM: Adding info for No Bus:ep_81 [ 157.575864][ T6519] kobject: 'hci1:201' (ffff888058d12420): calling ktype release [ 157.588791][ T4572] kernfs runtime_suspended_time: removing [ 157.589191][ T4173] nf_conntrack: normal packet for ffff88801c390480 [ 157.598045][ T4267] kobject: 'ep_81' (ffff88805fc4b010): kobject_uevent_env [ 157.605162][ T1108] nf_conntrack: new packet for ffff88802a389980 [ 157.614912][ T1108] nf_nat: Already setup manip DST for ct ffff88802a389980 (status bits 0x188) [ 157.617140][ T6519] kobject: 'hci1:201': free name [ 157.623861][ T1108] nf_nat: Already setup manip SRC for ct ffff88802a389980 (status bits 0x188) [ 157.638159][ T4173] tcp_in_window: START [ 157.642279][ T4173] tcp_in_window: [ 157.642293][ T4173] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 157.655105][ T4173] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 [ 157.669828][ T4173] tcp_in_window: [ 157.669846][ T4173] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 157.671951][ T6519] hci1 orig refcnt 13 [ 157.673510][ T4173] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 [ 157.684097][ T3520] sd 0:0:1:0: cmd ffff8880246b0928 CDB: 0x2a [ 157.686651][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1 [ 157.686669][ T4173] tcp_in_window: res=1 sender end=1558279958 maxend=1561424534 maxwin=3144832 receiver end=1487972049 maxend=1491116881 maxwin=3144576 [ 157.702203][ T3520] Added buffer head 170 to ffff888147bff000 [ 157.707389][ T4173] tcp_conntracks: [ 157.714520][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 157.726499][ T4173] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 157.732343][ C1] sd 0:0:1:0: cmd ffff8880246b0928 response 0 status 0x0 sense_len 0 [ 157.743614][ T1323] nf_conntrack: normal packet for ffff88805b35c480 [ 157.748815][ C1] No more buffers in queue [ 157.757669][ T4267] kobject: 'ep_81' (ffff88805fc4b010): kobject_uevent_env: filter function caused the event to drop! [ 157.764575][ T13] kernfs bmAttributes: removing [ 157.768029][ T4267] device: 'ep_02': device_add [ 157.780538][ T6519] hcon ffff88801b1f4000 reason 22 [ 157.783715][ T4267] kobject: 'ep_02' (ffff88805fc4c010): kobject_add_internal: parent: '4-1:1.0', set: 'devices' [ 157.792691][ T6519] hcon ffff88801b1f4000 conn ffff88807db74000, err 103 [ 157.793653][ T4231] nf_conntrack: normal packet for ffff88805b35cc00 [ 157.811798][ T13] kernfs bInterval: removing [ 157.818301][ T4233] nf_conntrack: new packet for ffff88802a389800 [ 157.828103][ T4233] nf_nat: Already setup manip DST for ct ffff88802a389800 (status bits 0x188) [ 157.833619][ T13] kernfs wMaxPacketSize: removing [ 157.837019][ T4233] nf_nat: Already setup manip SRC for ct ffff88802a389800 (status bits 0x188) [ 157.846437][ T6519] hci1 hcon ffff88801b1f4000 chan ffff88802352e100 [ 157.857923][ T4568] proto(17) != IPPROTO_TCP or too short (len = 40) [ 157.864603][ T4572] kernfs runtime_active_time: removing [ 157.870209][ T4572] kernfs autosuspend_delay_ms: removing [ 157.875834][ T4572] kernfs power: removing [ 157.876228][ T1108] nf_conntrack: normal packet for ffff88801c391800 [ 157.880793][ T150] sd 0:0:1:0: cmd ffff888022034128 CDB: 0x35 [ 157.886643][ T1108] proto(17) != IPPROTO_TCP or too short (len = 40) [ 157.891280][ T4232] nf_conntrack: normal packet for ffff888025677080 [ 157.892646][ T150] Added buffer head 170 to ffff888147bff000 [ 157.911975][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 157.919404][ C1] sd 0:0:1:0: cmd ffff888022034128 response 0 status 0x0 sense_len 0 [ 157.927505][ C1] No more buffers in queue [ 157.932252][ T150] sd 0:0:1:0: cmd ffff8880246b0d28 CDB: 0x2a [ 157.938298][ T150] Added buffer head 170 to ffff888147bff000 [ 157.944299][ T4267] ep_02: No ACPI support [ 157.944299][ T13] kernfs interval: removing [ 157.944371][ T13] kernfs type: removing [ 157.958379][ T13] kernfs direction: removing [ 157.958665][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 157.963031][ T13] PM: Removing info for No Bus:ep_05 [ 157.970504][ C1] sd 0:0:1:0: cmd ffff8880246b0d28 response 0 status 0x0 sense_len 0 [ 157.970532][ C1] No more buffers in queue [ 157.970998][ T150] sd 0:0:1:0: cmd ffff888022034128 CDB: 0x35 [ 157.977219][ T13] kobject: 'ep_05' (ffff888020501010): kobject_uevent_env [ 157.984194][ T150] Added buffer head 170 to ffff888147bff000 [ 157.989737][ T13] kobject: 'ep_05' (ffff888020501010): kobject_uevent_env: filter function caused the event to drop! [ 157.994522][ C1] virtqueue callback for ffff888147bff000 (ffffffff8506e140) [ 158.002317][ T4173] No more buffers in queue [ 158.007348][ C1] sd 0:0:1:0: cmd ffff888022034128 response 0 status 0x0 sense_len 0 [ 158.018243][ T4173] eth0: xmit ffff88805fa02280 42:01:0a:80:00:01 [ 158.025587][ C1] No more buffers in queue [ 158.030094][ T4173] Added buffer head 2 to ffff88802319ef00 [ 158.030151][ C0] virtqueue callback for ffff88802319ef00 (ffffffff854980c0) [ 158.061377][ T4572] kernfs 189:520: removing [ 158.066357][ C0] Sent skb ffff88805fa02280 [ 158.070903][ C0] No more buffers in queue [ 158.075324][ T4267] PM: Adding info for No Bus:ep_02 [ 158.080609][ T4267] kobject: 'ep_02' (ffff88805fc4c010): kobject_uevent_env [ 158.087822][ T4572] kernfs dev: removing [ 158.091934][ T4572] kernfs uevent: removing [ 158.096324][ T4267] kobject: 'ep_02' (ffff88805fc4c010): kobject_uevent_env: filter function caused the event to drop! [ 158.107592][ T4572] kernfs removable: removing [ 158.112263][ T13] kernfs ep_05: removing [ 158.116171][ T4267] driver: 'usb': driver_bound: bound to device '4-1' [ 158.118839][ T13] kobject: 'ep_05' (ffff888020501010): kobject_cleanup, parent 0000000000000000 [ 158.123234][ T4572] kernfs configuration: removing [ 158.137376][ T4267] kobject: '4-1' (ffff8880606c80a8): kobject_uevent_env [ 158.144365][ T4267] kobject: '4-1' (ffff8880606c80a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.3/usb4/4-1' [ 158.155325][ T4572] kernfs bNumInterfaces: removing [ 158.156079][ T13] kobject: 'ep_05' (ffff888020501010): calling ktype release [ 158.160639][ T4572] kernfs bConfigurationValue: removing [ 158.173741][ T4267] bus: 'usb': really_probe: bound device 4-1 to driver usb [ 158.181057][ T4572] kernfs bmAttributes: removing [ 158.185955][ T4572] kernfs bMaxPower: removing [ 158.190654][ T4572] kernfs urbnum: removing [ 158.195030][ T4572] kernfs idVendor: removing [ 158.196117][ T13] kobject: 'ep_05': free name [ 158.204263][ T13] device: 'ep_8b': device_unregister [ 158.206488][ T4267] device: 'ep_00': device_add [ 158.214712][ T4267] kobject: 'ep_00' (ffff888058c6f010): kobject_add_internal: parent: '4-1', set: 'devices' [ 158.232439][ T13] kernfs runtime_status: removing [ 158.238763][ T6519] hci1 hcon ffff88801b1f4000 handle 201 [ 158.244366][ T6519] hcon ffff88801b1f4000 [ 158.250964][ T4173] nf_conntrack: normal packet for ffff88801c390480 [ 158.257649][ T13] kernfs control: removing [ 158.262089][ T4572] kernfs idProduct: removing [ 158.267126][ T4173] tcp_in_window: START [ 158.271223][ T4173] tcp_in_window: [ 158.271236][ T4173] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 158.284047][ T4173] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 [ 158.286115][ T4267] ep_00: No ACPI support [ 158.298775][ T4173] tcp_in_window: [ 158.303115][ T4173] seq=1558279958 ack=1487972049+(0) sack=1487972049+(0) win=24569 end=1558279958 [ 158.303133][ T4572] kernfs bcdDevice: removing [ 158.303152][ T4572] kernfs bDeviceClass: removing [ 158.306812][ T4173] tcp_in_window: sender end=1558279958 maxend=1561424534 maxwin=3144832 scale=7 receiver end=1487972049 maxend=1491116881 maxwin=3144576 scale=7 [ 158.306841][ T4173] tcp_in_window: I=1 II=1 III=1 IV=1 [ 158.336572][ T4267] PM: Adding info for No Bus:ep_00 [ 158.340168][ T4173] tcp_in_window: res=1 sender end=1558279958 maxend=1561424534 maxwin=3144832 receiver end=1487972049 maxend=1491116881 maxwin=3144576 [ 158.345420][ T4267] kobject: 'ep_00' (ffff888058c6f010): kobject_uevent_env [ 158.350542][ T4173] tcp_conntracks: [ 158.350552][ T4173] syn=0 ack=1 fin=0 rst=0 old=7 new=7 [ 158.362211][ T13] kernfs runtime_suspended_time: removing [ 158.378116][ T4267] kobject: 'ep_00' (ffff888058c6f010): kobject_uevent_env: filter function caused the event to drop! [ 158.398141][ T4572] kernfs bDeviceSubClass: removing [ 158.398153][ T4232] nf_conntrack: normal packet for ffff88805b35c600 [ 158.403332][ T4572] kernfs bDeviceProtocol: removing [ 158.415870][ T4173] No more buffers in queue [ 158.420333][ T4173] eth0: xmit ffff88805f49e140 42:01:0a:80:00:01 [ 158.426616][ T4173] Added buffer head 2 to ffff88802319ef00 [ 158.427209][ T4267] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc90013adb000 1048575 [ 158.432363][ C0] virtqueue callback for ffff88802319ef00 (ffffffff854980c0) [ 158.445339][ T4267] kcov: kcov_remote_start: handle = 100000000000004, context: task [ 158.448921][ C0] Sent skb ffff88805f49e140 [ 158.456426][ T4267] kcov: kcov_start: t = ffff888029609dc0, size = 1048576, area = ffffc90013adb000 [ 158.463555][ T4267] hub 4-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 158.470227][ C0] No more buffers in queue [ 158.481186][ T6519] hci1: conn ffff88801b1f4000 [ 158.485901][ T6519] device: 'hci1:201': device_unregister [ 158.491539][ T13] kernfs runtime_active_time: removing [ 158.497117][ T13] kernfs autosuspend_delay_ms: removing [ 158.502723][ T4572] kernfs bNumConfigurations: removing [ 158.508512][ T6519] kernfs runtime_status: removing [ 158.508511][ T4267] dummy_hcd dummy_hcd.3: port status 0x00010100 has changes [ 158.508580][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 158.513638][ T6519] kernfs control: removing [ 158.520863][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90001f59000 [ 158.520935][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc90001f59000 117 [ 158.521880][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 158.529584][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 158.533946][ C1] kcov: kcov_start: t = ffff88802b723b80, size = 262144, area = ffffc90001f59000 [ 158.543137][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 158.551674][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc90001f59000 30 [ 158.559847][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 158.585419][ C1] kcov: kcov_remote_start: handle = 100000000000004, context: softirq [ 158.606746][ C1] kcov: kcov_start: t = ffff888077d3bb80, size = 262144, area = ffffc90001f59000 [ 158.615941][ C1] kcov: kcov_move_area: ffffc90011ad7000 1048576 <= ffffc90001f59000 38 [ 158.624361][ T1108] Added buffer head 0 to ffff88801f593b00 [ 158.626816][ T4267] usb usb4-port1: status 0100, change 0001, 12 Mb/s [ 158.634832][ T13] kernfs power: removing [ 158.636754][ T4267] usb 4-1: USB disconnect, device number 6 [ 158.636775][ T4267] usb 4-1: unregistering device [ 158.636789][ T4267] usb 4-1: unregistering interface 4-1:1.0 [ 158.641110][ T13] kernfs uevent: removing [ 158.646880][ T4267] device: 'ep_81': device_unregister [ 158.651869][ T13] kernfs bLength: removing [ 158.676890][ T6519] kernfs runtime_suspended_time: removing [ 158.682834][ T6519] kernfs runtime_active_time: removing [ 158.690710][ T13] kernfs bEndpointAddress: removing [ 158.696178][ T13] kernfs bmAttributes: removing [ 158.701090][ T6519] kernfs autosuspend_delay_ms: removing [ 158.707064][ T4572] kernfs bMaxPacketSize0: removing [ 158.712524][ T13] kernfs bInterval: removing [ 158.719267][ T4267] kernfs runtime_status: removing [ 158.724711][ T4267] kernfs control: removing [ 158.730301][ T13] kernfs wMaxPacketSize: removing [ 158.735393][ T13] kernfs interval: removing [ 158.742457][ T4572] kernfs speed: removing [ 158.750230][ T6519] kernfs power: removing [ 158.754588][ T6519] kernfs device: removing [ 158.761318][ T13] kernfs type: removing [ 158.765559][ T13] kernfs direction: removing [ 158.770559][ T13] PM: Removing info for No Bus:ep_8b [ 158.774755][ T4267] kernfs runtime_suspended_time: removing [ 158.775889][ T13] kobject: 'ep_8b' (ffff888020507010): kobject_uevent_env [ 158.782314][ T4572] kernfs rx_lanes: removing [ 158.794065][ T6519] kernfs subsystem: removing [ 158.800802][ T4233] nf_conntrack: normal packet for ffff88805b35cc00 [ 158.801167][ T13] kobject: 'ep_8b' (ffff888020507010): kobject_uevent_env: filter function caused the event to drop! [ 158.818450][ T6519] kernfs hci1:201: removing [ 158.823337][ T4267] kernfs runtime_active_time: removing [ 158.838204][ T4572] kernfs tx_lanes: removing [ 158.842790][ T4572] kernfs busnum: removing [ 158.847236][ T4572] kernfs devnum: removing [ 158.851629][ T6519] kernfs uevent: removing [ 158.856260][ T6519] PM: Removing info for No Bus:hci1:201 [ 158.861912][ T6519] kobject: 'hci1:201' (ffff88801b1f4420): kobject_uevent_env [ 158.867396][ T13] kernfs ep_8b: removing [ 158.869852][ T6519] kobject: 'hci1:201' (ffff88801b1f4420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 158.885432][ C1] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 158.885814][ C1] net_ratelimit: 32 callbacks suppressed [ 158.885829][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 158.885886][ C1] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 158.885947][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 158.886032][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 158.886911][ T1108] nf_conntrack: normal packet for ffff88805b35c480 [ 158.893798][ T4572] kernfs devpath: removing [ 158.945233][ T4572] kernfs version: removing [ 158.945260][ T13] kobject: 'ep_8b' (ffff888020507010): kobject_cleanup, parent 0000000000000000 [ 158.950401][ T4572] kernfs maxchild: removing [ 158.964647][ T4233] nf_conntrack: new packet for ffff88802a389800 [ 158.968538][ T6519] kernfs hci1:201: removing [ 158.971056][ T4233] nf_nat: Already setup manip DST for ct ffff88802a389800 (status bits 0x188) [ 158.975463][ T6519] kobject: 'hci1:201' (ffff88801b1f4420): kobject_cleanup, parent 0000000000000000 [ 158.984304][ T4233] nf_nat: Already setup manip SRC for ct ffff88802a389800 (status bits 0x188) [ 158.989993][ T4231] proto(17) != IPPROTO_TCP or too short (len = 40) [ 159.004557][ T13] kobject: 'ep_8b' (ffff888020507010): calling ktype release [ 159.010035][ T4267] kernfs autosuspend_delay_ms: removing [ 159.022492][ T4572] kernfs quirks: removing [ 159.027454][ T4572] kernfs avoid_reset_quirk: removing [ 159.032898][ T4267] kernfs power: removing [ 159.036133][ T13] kobject: 'ep_8b': free name [ 159.038302][ T4267] kernfs uevent: removing [ 159.046492][ T4572] kernfs authorized: removing [ 159.051267][ T4572] kernfs remove: removing [ 159.055730][ T4267] kernfs bLength: removing [ 159.056100][ T6519] kobject: 'hci1:201' (ffff88801b1f4420): calling ktype release [ 159.061465][ T4267] kernfs bEndpointAddress: removing [ 159.073333][ T4572] kernfs ltm_capable: removing [ 159.077225][ C0] wireguard: wg1: Receiving keepalive packet from peer 9 ([::1]:20001/0%0) [ 159.081665][ T4572] kernfs devspec: removing [ 159.092410][ T6519] kobject: 'hci1:201': free name [ 159.099182][ T13] kernfs power: removing [ 159.099823][ T6519] hci1 orig refcnt 10 [ 159.103499][ T13] kernfs uevent: removing [ 159.111914][ T6519] hcon ffff88801b5f2000 reason 22 [ 159.117102][ T6519] hcon ffff88801b5f2000 conn ffff88807db73800, err 103 [ 159.124117][ T6519] hci1 hcon ffff88801b5f2000 chan ffff88802352e200 [ 159.133353][ T4267] kernfs bmAttributes: removing [ 159.138396][ T4572] kernfs manufacturer: removing [ 159.143337][ T4572] kernfs product: removing [ 159.143518][ T6519] hci1 hcon ffff88801b5f2000 handle 200 [ 159.153210][ T4572] kernfs serial: removing [ 159.156202][ T6519] hcon ffff88801b5f2000 [ 159.162003][ T4267] kernfs bInterval: removing [ 159.166855][ T6519] hci1: conn ffff88801b5f2000 [ 159.171612][ T6519] device: 'hci1:200': device_unregister [ 159.171827][ T4267] kernfs wMaxPacketSize: removing [ 159.182793][ T4267] kernfs interval: removing [ 159.189617][ T4572] kernfs subsystem: removing [ 159.194376][ T4572] kernfs 5-1: removing [ 159.198743][ T4572] bus: 'usb': remove device 5-1 [ 159.203402][ T13] kernfs bInterfaceNumber: removing [ 159.209195][ T13] kernfs bAlternateSetting: removing [ 159.214540][ T13] kernfs bNumEndpoints: removing [ 159.219579][ T4267] kernfs type: removing [ 159.223790][ T13] kernfs bInterfaceClass: removing [ 159.229179][ T6519] kernfs runtime_status: removing [ 159.235064][ T4572] kernfs 5-1: removing [ 159.241266][ T4267] kernfs direction: removing [ 159.246152][ T4267] PM: Removing info for No Bus:ep_81 [ 159.246712][ T13] kernfs bInterfaceSubClass: removing [ 159.254320][ T4267] kobject: 'ep_81' (ffff88805fc4b010): kobject_uevent_env [ 159.257313][ T13] kernfs bInterfaceProtocol: removing [ 159.271776][ T4572] kernfs driver: removing [ 159.277093][ T4267] kobject: 'ep_81' (ffff88805fc4b010): kobject_uevent_env: filter function caused the event to drop! [ 159.288212][ T6519] kernfs control: removing [ 159.288222][ T4572] kobject: '5-1' (ffff8880606ca0a8): kobject_uevent_env [ 159.292873][ T13] kernfs modalias: removing [ 159.304380][ T4572] kobject: '5-1' (ffff8880606ca0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1' [ 159.311234][ T13] kernfs supports_autosuspend: removing [ 159.316333][ T4572] PM: Removing info for usb:5-1 [ 159.325966][ T4572] kobject: '5-1' (ffff8880606ca0a8): kobject_uevent_env [ 159.333140][ T4572] kobject: '5-1' (ffff8880606ca0a8): fill_kobj_path: path = '/devices/platform/dummy_hcd.4/usb5/5-1' [ 159.340933][ T13] kernfs authorized: removing [ 159.351522][ T4267] kernfs ep_81: removing [ 159.355902][ T4267] kobject: 'ep_81' (ffff88805fc4b010): kobject_cleanup, parent 0000000000000000 [ 159.368837][ T4572] kernfs 5-1: removing [ 159.373052][ T4572] kobject: '5-1' (ffff8880606ca0a8): kobject_cleanup, parent 0000000000000000 [ 159.373101][ T13] kernfs subsystem: removing [ 159.382064][ T4267] kobject: 'ep_81' (ffff88805fc4b010): calling ktype release [ 159.394115][ T4267] kobject: 'ep_81': free name [ 159.398909][ T4572] kobject: '5-1' (ffff8880606ca0a8): calling ktype release [ 159.400376][ T6519] kernfs runtime_suspended_time: removing [ 159.407592][ T4267] device: 'ep_02': device_unregister [ 159.418171][ T4572] kobject: '5-1': free name [ 159.421241][ T13] kernfs 1-1:16.0: removing [ 159.423036][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 159.435387][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90001f59000 [ 159.438163][ T6519] kernfs runtime_active_time: removing [ 159.444675][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc90001f59000 26 [ 159.460711][ T13] bus: 'usb': remove device 1-1:16.0 [ 159.460790][ T4267] kernfs runtime_status: removing [ 159.472304][ T4267] kernfs control: removing [ 159.479058][ T4267] kernfs runtime_suspended_time: removing [ 159.484858][ T4267] kernfs runtime_active_time: removing [ 159.490511][ T6519] kernfs autosuspend_delay_ms: removing [ 159.496205][ T6519] kernfs power: removing [ 159.500501][ T6519] kernfs device: removing [ 159.504859][ T13] kernfs 1-1:16.0: removing [ 159.506381][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 159.517560][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90001f59000 [ 159.520946][ T13] kernfs driver: removing [ 159.526800][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 159.526781][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc90001f59000 38 [ 159.526841][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 159.526854][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 159.537022][ C1] wireguard: wg2: Sending keepalive packet to peer 29 ([::1]:20001/0%0) [ 159.552761][ T1108] Added buffer head 0 to ffff88801f593b00 [ 159.555082][ T4267] kernfs autosuspend_delay_ms: removing [ 159.581637][ T6519] kernfs subsystem: removing [ 159.586390][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 159.594589][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90001f59000 [ 159.603807][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc90001f59000 38 [ 159.612320][ T6519] kernfs hci1:200: removing [ 159.616972][ T4231] proto(17) != IPPROTO_TCP or too short (len = 40) [ 159.625393][ T13] kernfs interface_capabilities: removing [ 159.631471][ T13] kernfs device_capabilities: removing [ 159.639036][ T13] kernfs usb488_interface_capabilities: removing [ 159.645764][ T13] kernfs usb488_device_capabilities: removing [ 159.652154][ T13] usbtmc 1-1:16.0: removing 0 minor [ 159.652291][ T6519] kernfs uevent: removing [ 159.658551][ T13] device: 'usbtmc0': device_unregister [ 159.662104][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 159.668680][ T6519] PM: Removing info for No Bus:hci1:200 [ 159.675581][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90001f59000 [ 159.681868][ T6519] kobject: 'hci1:200' (ffff88801b5f2420): kobject_uevent_env [ 159.690282][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc90001f59000 34 [ 159.707693][ T13] kernfs runtime_status: removing [ 159.712847][ T6519] kobject: 'hci1:200' (ffff88801b5f2420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:200' [ 159.725631][ T6519] kernfs hci1:200: removing [ 159.734107][ T6519] kobject: 'hci1:200' (ffff88801b5f2420): kobject_cleanup, parent 0000000000000000 [ 159.743799][ T4267] kernfs power: removing [ 159.748452][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 159.756657][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90001f59000 [ 159.765845][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc90001f59000 30 [ 159.774620][ T4572] usb usb5-port1: debounce total 100ms stable 100ms status 0x100 [ 159.782444][ T13] kernfs control: removing [ 159.786759][ T4572] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900122d8000 1048575 [ 159.787459][ T13] kernfs runtime_suspended_time: removing [ 159.797328][ T6519] kobject: 'hci1:200' (ffff88801b5f2420): calling ktype release [ 159.809267][ T4572] kcov: kcov_remote_start: handle = 100000000000005, context: task [ 159.813514][ T13] kernfs runtime_active_time: removing [ 159.817192][ T4572] kcov: kcov_start: t = ffff88807b168000, size = 1048576, area = ffffc900122d8000 [ 159.826923][ T4572] hub 5-0:1.0: state 7 ports 1 chg 0000 evt 0002 [ 159.836102][ T6519] kobject: 'hci1:200': free name [ 159.838521][ C1] wireguard: wg0: Sending keepalive packet to peer 37 (127.0.0.1:20002) [ 159.843291][ T6519] hci1 orig refcnt 7 [ 159.852612][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 159.864183][ C1] kcov: kcov_start: t = ffff88802b723b80, size = 262144, area = ffffc90001f59000 [ 159.870001][ T6519] hdev hci1 event 4 [ 159.873397][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc90001f59000 38 [ 159.886543][ T6519] hdev 0000000000000000 len 8 [ 159.891297][ T4267] kernfs uevent: removing [ 159.891687][ T6519] hdev hci1 event 8 [ 159.896878][ T4572] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc900122d8000 31682 [ 159.906349][ T13] kernfs autosuspend_delay_ms: removing [ 159.913838][ T4267] kernfs bLength: removing [ 159.920539][ T4267] kernfs bEndpointAddress: removing [ 159.923128][ T6519] hci1 orig refcnt 6 [ 159.925809][ T4267] kernfs bmAttributes: removing [ 159.935081][ T4267] kernfs bInterval: removing [ 159.938209][ T6519] kobject: 'rfkill6' (ffff888147d52108): kobject_uevent_env [ 159.945722][ T4267] kernfs wMaxPacketSize: removing [ 159.952852][ T4267] kernfs interval: removing [ 159.959680][ T4267] kernfs type: removing [ 159.962897][ T6519] kobject: 'rfkill6' (ffff888147d52108): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill6' [ 159.963899][ T4267] kernfs direction: removing [ 159.982215][ T4267] PM: Removing info for No Bus:ep_02 [ 159.982219][ T13] kernfs power: removing [ 159.982243][ T4267] kobject: 'ep_02' (ffff88805fc4c010): kobject_uevent_env [ 159.999002][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 159.999097][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 159.999149][ C1] wireguard: wg0: Sending keepalive packet to peer 13 ([::1]:20002/0%0) [ 160.002317][ T6519] ffff888078e1c000 name hci2 blocked 1 [ 160.020121][ T4267] kobject: 'ep_02' (ffff88805fc4c010): kobject_uevent_env: filter function caused the event to drop! [ 160.026298][ T13] kernfs 180:0: removing [ 160.045212][ T6519] hci2 ffff888078e1c000 [ 160.049263][ T4233] hub 5-0:1.0: hub_suspend [ 160.049616][ T6519] hci2: err 0x13 [ 160.054206][ C1] kcov: kcov_remote_start: handle = 100000000000005, context: softirq [ 160.054226][ C1] kcov: kcov_start: t = ffff88813fe60000, size = 262144, area = ffffc90001f59000 [ 160.058120][ T6519] hci2: cancelling interleave scan [ 160.065966][ C1] kcov: kcov_move_area: ffffc90012ad9000 1048576 <= ffffc90001f59000 19 [ 160.075287][ T6519] hci2 state 0 -> 0 [ 160.083171][ T4572] nf_conntrack: normal packet for ffff88805b35cc00 [ 160.099046][ T4233] usb usb5: bus auto-suspend, wakeup 1 [ 160.104573][ T4233] usb usb5: dummy_bus_suspend [ 160.109589][ T4267] kernfs ep_02: removing [ 160.113914][ T4267] kobject: 'ep_02' (ffff88805fc4c010): kobject_cleanup, parent 0000000000000000 [ 160.113920][ T13] kernfs dev: removing [ 160.114042][ T13] kernfs device: removing [ 160.129121][ T4267] kobject: 'ep_02' (ffff88805fc4c010): calling ktype release [ 160.131955][ T6519] All LE pending actions cleared [ 160.142345][ T4267] kobject: 'ep_02': free name [ 160.148040][ T6519] hdev hci2 [ 160.148753][ C1] virtqueue callback for ffff8880236df000 (ffffffff85497fd0) [ 160.151976][ T13] kernfs subsystem: removing [ 160.159226][ C1] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 3) [ 160.159464][ C1] wireguard: wg1: Handshake for peer 16 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 12) [ 160.165634][ T155] nf_conntrack: new packet for ffff88802a389980 [ 160.193900][ T155] nf_nat: Already setup manip DST for ct ffff88802a389980 (status bits 0x188) [ 160.196766][ T6519] hcon ffff88807d3d4000 reason 22 [ 160.202840][ T155] nf_nat: Already setup manip SRC for ct ffff88802a389980 (status bits 0x188) [ 160.214851][ T6519] hcon ffff88807d3d4000 conn ffff88807d360800, err 103 [ 160.217150][ C1] No more buffers in queue [ 160.225319][ T6519] hci2 hcon ffff88807d3d4000 chan ffff88802352ed00 [ 160.228079][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 160.234757][ T13] kernfs usbtmc0: removing [ 160.240382][ C1] No more buffers in queue [ 160.240491][ C1] No more buffers in queue [ 160.240502][ C1] eth0: xmit ffff8880235d1500 42:01:0a:80:00:01 [ 160.240524][ C1] Added buffer head 6 to ffff8880236df100 [ 160.240569][ C1] virtqueue callback for ffff8880236df100 (ffffffff854980c0) [ 160.242061][ C1] Sent skb ffff8880235d1500 [ 160.252709][ T13] kernfs uevent: removing [ 160.254065][ C1] No more buffers in queue [ 160.281354][ T13] PM: Removing info for No Bus:usbtmc0 [ 160.285956][ T4267] kernfs power: removing [ 160.298437][ T4267] kernfs uevent: removing [ 160.304038][ T4267] kernfs bInterfaceNumber: removing [ 160.312332][ T4267] kernfs bAlternateSetting: removing [ 160.315065][ T13] kobject: 'usbtmc0' (ffff888020502000): kobject_uevent_env [ 160.325921][ T4267] kernfs bNumEndpoints: removing [ 160.331127][ T4267] kernfs bInterfaceClass: removing [ 160.331485][ T13] kobject: 'usbtmc0' (ffff888020502000): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.0/usbmisc/usbtmc0' [ 160.342317][ T4267] kernfs bInterfaceSubClass: removing [ 160.355388][ T4267] kernfs bInterfaceProtocol: removing [ 160.366286][ T4267] kernfs modalias: removing [ 160.370862][ T4267] kernfs supports_autosuspend: removing [ 160.382234][ T6519] hci2 hcon ffff88807d3d4000 handle 201 [ 160.387960][ T6519] hcon ffff88807d3d4000 [ 160.388137][ T4267] kernfs authorized: removing [ 160.400552][ T13] kernfs usbtmc0: removing [ 160.405096][ T4572] proto(17) != IPPROTO_TCP or too short (len = 40) [ 160.413729][ T4233] nf_conntrack: new packet for ffff88802a389800 [ 160.420045][ T4233] nf_nat: Already setup manip DST for ct ffff88802a389800 (status bits 0x188) [ 160.428951][ T4233] nf_nat: Already setup manip SRC for ct ffff88802a389800 (status bits 0x188) [ 160.441700][ T6519] hci2: conn ffff88807d3d4000 [ 160.445540][ T4267] kernfs subsystem: removing [ 160.451254][ T6519] device: 'hci2:201': device_unregister [ 160.464936][ T4267] kernfs 4-1:1.0: removing [ 160.473283][ T13] kernfs usbmisc: removing [ 160.473281][ T4267] bus: 'usb': remove device 4-1:1.0 [ 160.490207][ T13] kobject: 'usbmisc' (ffff8880755ac280): kobject_cleanup, parent 0000000000000000 [ 160.490487][ T4267] kernfs 4-1:1.0: removing [ 160.508038][ T4267] kernfs driver: removing [ 160.512469][ T6519] kernfs runtime_status: removing [ 160.521339][ C0] virtqueue callback for ffff88801f593b00 (ffffffff84450960) [ 160.528476][ T6519] kernfs control: removing [ 160.528826][ C0] virtqueue interrupt with no work for ffff88801f593a00 [ 160.533280][ T6519] kernfs runtime_suspended_time: removing [ 160.540162][ C0] virtqueue interrupt with no work for ffff88801f593900 [ 160.553047][ T13] kobject: 'usbmisc' (ffff8880755ac280): calling ktype release [ 160.567279][ T4267] kernfs runtime_status: removing [ 160.571603][ T13] kobject: 'usbmisc': free name [ 160.572403][ T4267] kernfs control: removing [ 160.584111][ T6519] kernfs runtime_active_time: removing [ 160.588436][ T13] kobject: 'usbtmc0' (ffff888020502000): kobject_cleanup, parent 0000000000000000 [ 160.594105][ T6519] kernfs autosuspend_delay_ms: removing [ 160.608467][ T4267] kernfs runtime_suspended_time: removing [ 160.612489][ T13] kobject: 'usbtmc0' (ffff888020502000): calling ktype release [ 160.614256][ T4267] kernfs runtime_active_time: removing [ 160.621877][ T13] device: 'usbtmc0': device_create_release [ 160.621942][ T13] kobject: 'usbtmc0': free name [ 160.637635][ T6519] kernfs power: removing [ 160.642373][ T6519] kernfs device: removing [ 160.650151][ T13] device class 'usbmisc': unregistering [ 160.655945][ T13] kobject: 'usbmisc' (ffff88802376e850): auto cleanup 'remove' event [ 160.656717][ T4267] kernfs autosuspend_delay_ms: removing [ 160.664248][ T13] kobject: 'usbmisc' (ffff88802376e850): kobject_uevent_env [ 160.677639][ T13] kobject: 'usbmisc' (ffff88802376e850): fill_kobj_path: path = '/class/usbmisc' [ 160.686462][ T6519] kernfs subsystem: removing [ 160.692297][ T6519] kernfs hci2:201: removing [ 160.697101][ T6519] kernfs uevent: removing [ 160.701488][ T6519] PM: Removing info for No Bus:hci2:201 [ 160.702579][ T13] kernfs usbmisc: removing [ 160.707805][ T6519] kobject: 'hci2:201' (ffff88807d3d4420): kobject_uevent_env [ 160.719310][ T6519] kobject: 'hci2:201' (ffff88807d3d4420): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 160.727719][ T1323] Added buffer head 0 to ffff88801f593b00 [ 160.732689][ T4267] kernfs power: removing [ 160.742130][ T1323] nf_conntrack: normal packet for ffff88802a388d80 [ 160.752359][ T13] kobject: 'usbmisc' (ffff88802376e850): kobject_cleanup, parent 0000000000000000 [ 160.757012][ T4267] kernfs uevent: removing [ 160.766328][ T13] kobject: 'usbmisc' (ffff88802376e850): calling ktype release [ 160.769124][ T6519] kernfs hci2:201: removing [ 160.777670][ T13] class 'usbmisc': release. [ 160.783492][ T13] class_create_release called for usbmisc [ 160.789458][ T4267] kernfs port_number: removing [ 160.794317][ T4267] kernfs subsystem: removing [ 160.794780][ T13] kobject: 'usbmisc': free name [ 160.798970][ C1] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 10) [ 160.803598][ T6519] kobject: 'hci2:201' (ffff88807d3d4420): kobject_cleanup, parent 0000000000000000 [ 160.806969][ T13] kobject: '1-1:16.0' (ffff888060b38030): kobject_uevent_env [ 160.816986][ T4267] kernfs ttyUSB0: removing [ 160.830630][ T6519] kobject: 'hci2:201' (ffff88807d3d4420): calling ktype release [ 160.846623][ T6519] kobject: 'hci2:201': free name [ 160.848236][ T4267] bus: 'usb-serial': remove device ttyUSB0 [ 160.851621][ T6519] hci2 orig refcnt 10 [ 160.861764][ T13] kobject: '1-1:16.0' (ffff888060b38030): fill_kobj_path: path = '/devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.0' [ 160.865704][ T4267] kernfs ttyUSB0: removing [ 160.880043][ T6519] hcon ffff888079130000 reason 22 [ 160.885114][ T6519] hcon ffff888079130000 conn ffff88807db76000, err 103 [ 160.892611][ T4267] kernfs driver: removing