last executing test programs: 10.209204789s ago: executing program 3 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x8, 0x401, 0x7}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x5, 0x2, 0xe28c, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfaeccc0edd389ee1}, 0x20040000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 8.593448036s ago: executing program 3 (id=468): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x754}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000002000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 8.543238998s ago: executing program 3 (id=469): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) accept4(r0, 0x0, 0x0, 0x80000) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, 0x0, 0x4000) 7.049164689s ago: executing program 3 (id=475): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c6673796e635f6d6f64653d7374726963742c00200da779e57c52e33a83fdbd563a5b7c6b958cb6e49387a5ba5a89b0887c0292eb888cc8efa81040100d83ba748033542625bc334eaf793332891541000f3c63c0a5f0af254a5bd1f4b81d0c5188ddcadf07eff7b49004e0b243a8a4d93632fbe9ab868d88310829d8e04a3c0572143a3d3d1472cc5da6f72bb097f5f7b95a09e442c0a1463aaa90db7dcbc542dc5bced278eda11583f810469b706968e793db32300c41ec42421e326f0f3d24478d7f472cf86b66accda698e56ae96dc33ced02f8e6601ed0a758a9f6b0712af45bc138adb9217e31e309a3039a15f4f323957b2824eb068440a8e9c31857f52472347e7560aa15cb70c902000000326a7321796b653e49bbde9213cfcd77871a61e6daf5deab0eea", @ANYRES32=0x0], 0x1, 0x105d6, &(0x7f0000010640)="$eJzs3E1rY1UYB/AnU+fVcRxkXnTlBREaMKFpO0VBpOoMOmCH4svClaZJGjKT5JYmfXHWuho/gltBxJ2fwY1fY3AhiAvB3YiSe29lqrNwOmlT298Pbv/nnpz75JxLNie3JIBj62Ly+2+luBBnI2IqIs5HZO1ScWQW83g+Il6MiBMPHaWi/++OUxFxLiIujIrnNUvFSwt/3H/w9Qs3X7/37f1y7edvvprcqoFJezkiemt5e6uXZ9rO83bRX9/sZNmb3ywyf6F3pzhP89xqrWQVtuo74+pZzrXz8enaxmCUq916Y5TtzmrWv9bP33Cw2d6pk11wu76enTdbK1l2BmmW7bv5vLaLvDsY5nWaRb3PsvIxHO5k3t/abuXrWbuTZaM/LPrzummztT3KzSKLt4tG2m1m81jZ820+9N7r9De2k83W+qCT9pNr1dqr1dpCpbaeNlvD1nyl3msuzCfT7e5oWGXYqvcW22na7raqjbRXTqbbjUalVkumr7dWOvV+UqtV56ozlWvlovVK8s6tj5JuM5ke5Vud/saw0x0kq+l6kl9RTmarc6+Vk5dqyQdLy8ny+zduLC1/+Mn1j2+9uXTz7WLQv6aVTM/OzM5WajOV2Vr5cK7/VFF/jOufin1Yf+nJLue48wECeGz2/8Ak2P8/zv4/2fN9PuyOyP7/13vHe/17ZvvGE/EBAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4tn46+f27WeNifv500f9M0fVcRFyNiCsRcTki/nyEqTi1q+aliCgV7UeNP/mPOfxQiqzC6JrTxXEuIhaL48Gz+30XAAAA4Oj67sfPv4iYGjWzP29MekIcpOJLmzPjqpd95fPUuKpdyoptj6na5Z2SY3ElIk5e/GVM1a5GxInzn46p2n8ytSvOPBSlPE4c5GwAAICDsXsnMLbdGwAAAIfOl5OeAJORPa8t/he/eBZ8Oo/igeDZXWcAAADA/1Bp0hMAAAAA9l22//f7fwAAAHC05b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/s3E+uEjEcB/Af4Aj4JxLDn6uwMi5ZcAiP4NID6G3ccQYTwjlw5xEMGDqVAOLmTXlM3vt8kplOJ/Bth4RFWygAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAt/axWi++br9+a5uz2zZR5GgAAAOCabbVapItRXX+d77/Nt95HxCwiphExiYhrY/devDxJ7MQ4nWvXXl9d9OFHREo4vKefj1cR8TEfv9/d/nMAAACAp2qzni8jeofLdPpwvOIZyJM2g1J5acrnRam0cQr7Uiht8jeyiGlEVKNfhdJmEdF98ynX/vv9GxZq7qSRXAxOik5ddAs2BgAAtMT5SKDY6A0AAIDW+XzvDnAfab02/xY/rwX36yIvCA7PagAAAEB7Xf7b/qjzuP0AAAAA7iCN///Z/y/PCjx8/7+w/x8AAAC0SL3/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALe0rVaLzXq+bJqz2zdT5mkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4w/68o0AIhEEY7F3fdxq8/7GkQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDe/+8v/ialxJpl7bSw9jyRrp8bWqbF3bhz9YXz9GgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn/uTiAEgiAM9p3/OS3mH5Y0aAwiVMHCxwzzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX/S7X/5PTI0zydxpY+l4JFm7amxdNfYeNI4ejLd/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdife9uEgTCOw6+dRInbZIT0Fh8z0FAhGIEPCcmSZ2AAFqKhorVYBFYAAQctnSl4nub/0+mKOwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgPZ2e3viIiOzzkXnkw9Xf4XLwFfm6aQbf18w2x339c8vJdjdK+Rvj/yIiisha+A0AQPvK+6ZYLKt5J203bS9tP205ravZKx8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwZucOWqJ4wwCAv7s6699/p44qRNChLrmpWQZeOgjeg6BuoptIa4XuQcWLnyDqtNe+Qt7qK/QFgg4leOjgoaBLEMXuzuq7pKIEM4P7+8Ez8+jCzPvuwrDPPO8sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAuBzvhUjcvhRBGB4/ylo/ftheP279/+Wm0G1/vv7sSH7N1iCSE8GSlXruV4VyKbn1z6+lCvV5bk/RDMpR+7EUZj6SwSXyVKOVzcQIA4EJJ0mh9u/yS7M63/leaDeH3m976/3qUh1Pq//3mSBKaI2P7zZGxXxsfGvG54vp/IrMZFsbQSS9UG6svquubWzdXVheWa8u1Z1NTk9N3pm/fuztZbd8rqbpjAgAAwL+ppBHX/+XZv/v//0d5OL3+H+vGw7nHj+JzDfR3/X+io6Zf3iMBAADob5ev/vh+3OrLUqUSNhYajbWJzvbw78nONoehnttQGnH9PzCb96gAAACALBzslHr6/0tRHs7Y/x9/u70XH3MghDCc9v/HF5/Xl7KbTqFl8Thx3nMEAAAgX8NpxP3/pL3+v3y45KEcQrhxrZOnPwN4pvr/8+sHPQ+tx+v/p7KbYiGVZzrvR3s/E8LgTN4jAgAA4CL7L41Wsb+X7M6v/Xw1V7H+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4w44dozQQRGEA3uxmtRIDVmrlBUQvELEQxMZDiILgCUQQDyC2lt7B0jukVrCxsEzhDeTN7qikCVjsKvk+mLxHGDIvkyb/AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNd0/7uv4mXU9GX73vPH1UnUl5ka3u/XN2NFP+hy6H9nr+8BAAAAWBBVzvdFUbzVj4dRy3HK/3XeE5n/YaXpc56fzf25Pt29buT8f328dfl10Kg5Jz707PzidKezb/j3rc7dMUw3n569VOkHKY9u1qZ1us/B7WRysJTa5S6mBQB+YzvXtsn/h6Lu9jkYAAtj2K7iR/6vxv3OBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCFzwAAAP//9JxdmQ==") getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) munlockall() ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, 0x0) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40) 4.366112723s ago: executing program 4 (id=493): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x8d0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x1000000, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 4.090177594s ago: executing program 3 (id=497): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) 3.780862542s ago: executing program 0 (id=500): socket$packet(0x11, 0x2, 0x300) r0 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/make-it-fail\x00', 0x1, 0x0) write$make_it_fail(r0, &(0x7f0000000180)='Y\x00', 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000240)={'filter\x00', 0x7, "818cdb265bd579"}, &(0x7f0000000140)=0x2f) read$FUSE(0xffffffffffffffff, &(0x7f0000002fc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_pidfd_open(r2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) dup(r3) r4 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r4) keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f0000001040)={r5, 0x0, 0x20e}, 0x0, 0x0, &(0x7f0000002080)=""/4) 3.244689241s ago: executing program 4 (id=502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc02, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc815}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r5, 0x9b}, 0x80, &(0x7f0000000880)=[{&(0x7f00000006c0)='e', 0x1}], 0x1}, 0x4011) 3.130277566s ago: executing program 0 (id=503): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) setreuid(0x0, 0xee01) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r1, 0x400, 0x1) setresuid(0xee01, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x400, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38010000100033062cbd7000000000007f00000100000000000000000000000000000000000000000000000000000000000000050000fffd000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000fffffffd32000000ac1414aa00000000000000000000000001000000000000000300000000d5000009000000000001000000000000000000020000000000000000000000000000000000000000000000fcffffffffffffff000000000000000000000000000000005f000000000000000a00000000000000010000000000ffffffffffffffff00000000000002000000230000000000000048000200656362286369706865725f6e756c6c29"], 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 2.201826612s ago: executing program 1 (id=504): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000271106600000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001e00030e"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)={0x200000, 0x200000}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4e21, 0x0, 0x4e23, 0x0, 0x2, 0xa0, 0x20, 0x29, 0x0, 0xee00}, {0x10, 0xc, 0x2, 0x6, 0x40, 0x6, 0xc, 0x9}, {0x7, 0x77, 0x4}, 0xfffffffd, 0x6e6bbe, 0x1, 0x0, 0x2}, {{@in=@multicast2, 0x4d4, 0xff}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3501, 0x105732d8200d70b1, 0x0, 0x4, 0x2, 0x8000, 0x4}}, 0xe8) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x2d, 0x4, 0x0, {0x1, 0x2, 0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2d) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') 2.201550912s ago: executing program 3 (id=505): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) readv(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x1ff) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000100)="ab", 0x1, 0xe61e284085547095, &(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10) 2.02928138s ago: executing program 4 (id=507): socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r0 = socket(0x400000000010, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) 2.02910368s ago: executing program 0 (id=508): bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32, @ANYRESDEC=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000340)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='blk', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bin', 0x3) close(r1) openat(0xffffffffffffff9c, &(0x7f00000001f0)='./trace/trace_marker\x00', 0x1, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, 0x0, 0x0) 2.012072604s ago: executing program 1 (id=509): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs$namespace(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000010500010006000000050005000200000005000400000000000900020073797a3100000000140007800800064000000003080013400000040511000300686173683a69702c6d61726b"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x7c, 0x44, 0x1, 0x70bd29, 0x25dfdbff, {0x1}, [@nested={0x4, 0x48}, @nested={0x64, 0x1, 0x0, 0x1, [@generic="c78c42412853ec1e921ede6c39658fb028fcee3547aa485e20bea0210f8ffbe4dcf77806dbf6e042b498445afeb5e4a91de8bc7b72377be5fb59ff6b03b640d7bd736308b725e7fa1e2fc71ca09de48d27f4529f315fa1aeab3018edc394863c"]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.947218598s ago: executing program 4 (id=510): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff00", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0xb0, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xf, 0x3}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x54, 0x7, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0x3}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x9, 0x8, 0x1, 0xd6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x9, 0xfff, 0x3, 0x80000000, [{0xfffffffc, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0xe3, 0x8}}]}, 0xb0}}, 0x24040084) 1.869127956s ago: executing program 1 (id=511): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0x51, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mbind(&(0x7f00003f8000/0x4000)=nil, 0x4000, 0x4003, 0x0, 0x8, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000540)={0xaa, 0x310}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs$userns(0x0, &(0x7f0000001240)) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000001000/0x1000)=nil, 0x1000}}) 1.868869816s ago: executing program 2 (id=512): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) 1.868702886s ago: executing program 0 (id=513): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x28}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 877.176005ms ago: executing program 4 (id=514): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 792.953644ms ago: executing program 2 (id=515): r0 = socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r4}, &(0x7f0000000f00), &(0x7f0000000f40)=r1}, 0x20) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, 0x0) recvfrom(r2, 0x0, 0xb, 0x40, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'wg0\x00'}) 705.520173ms ago: executing program 0 (id=516): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1b6) ftruncate(r0, 0xf) r1 = syz_open_dev$loop(0x0, 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r5], 0x5c}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 694.674016ms ago: executing program 2 (id=517): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x4000000, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x4000000) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000400)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x15, 0x3, 'rr\x00', 0x1, 0x3, 0x72}, 0x2c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e1f, 0x3, 'lc\x00', 0x4, 0x81, 0x5}, {@rand_addr=0x64010102, 0x4e26, 0x4, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000380)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x0, 0x60000000, 0xc}, {@rand_addr=0x64010102, 0x4e26, 0x2000, 0x0, 0x8001, 0x1}}, 0x44) 604.030266ms ago: executing program 1 (id=518): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r2, 0x80585414, &(0x7f0000001400)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 586.22599ms ago: executing program 2 (id=519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32=r4, @ANYBLOB="000014000a000100aaaaaaaeaaaa000008000f0001"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) 537.459481ms ago: executing program 4 (id=520): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 401.404171ms ago: executing program 1 (id=521): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8050, &(0x7f0000000000), 0x7, 0x4d4, &(0x7f0000000740)="$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") sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f00000001c0), &(0x7f0000000240)=0x40) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='hybla', 0x5) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000002c0)={@rand_addr, @private, 0x0}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={r1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b5, 0x80, 0x0, 0x1, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x24000000) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) 156.073455ms ago: executing program 0 (id=522): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) setregid(0x0, 0x0) syz_emit_vhci(&(0x7f0000001040)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0xe3, 0xc9}}}, 0x6) 153.391256ms ago: executing program 2 (id=523): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_io_uring_setup(0x3b87, &(0x7f0000000240)={0x0, 0x9b6, 0x40, 0x23, 0x2bc}, 0x0, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x20203, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0xc226}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 57.462847ms ago: executing program 1 (id=524): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) 0s ago: executing program 2 (id=525): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r4, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, &(0x7f0000000980)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.149' (ED25519) to the list of known hosts. [ 28.214306][ T4317] cgroup: Unknown subsys name 'net' [ 28.506467][ T4317] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 28.792709][ T4317] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 29.512341][ T4343] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 29.514642][ T4343] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 29.515989][ T4343] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 29.516565][ T4344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 29.519043][ T4343] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 29.519118][ T4345] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 29.520632][ T4343] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 29.522078][ T4345] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 29.523148][ T4343] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 29.524750][ T4345] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 29.525586][ T4343] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 29.526742][ T4345] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 29.527746][ T4343] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 29.528946][ T4345] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 29.530456][ T4343] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 29.531171][ T4345] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 29.532671][ T4343] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 29.534750][ T4346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 29.535416][ T4343] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 29.537570][ T4346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 29.537590][ T4343] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 29.540376][ T4346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 29.540694][ T4343] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 29.542927][ T4346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 29.545578][ T4343] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 29.550124][ T4343] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 29.551728][ T4343] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 29.554427][ T4341] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 29.573515][ T4343] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 29.575280][ T4343] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 29.701117][ T4332] chnl_net:caif_netlink_parms(): no params data found [ 29.725994][ T4329] chnl_net:caif_netlink_parms(): no params data found [ 29.735380][ T4330] chnl_net:caif_netlink_parms(): no params data found [ 29.756280][ T4332] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.757558][ T4332] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.759119][ T4332] device bridge_slave_0 entered promiscuous mode [ 29.762448][ T4332] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.764202][ T4332] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.765738][ T4332] device bridge_slave_1 entered promiscuous mode [ 29.767563][ T4331] chnl_net:caif_netlink_parms(): no params data found [ 29.789243][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.790531][ T4330] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.792086][ T4330] device bridge_slave_0 entered promiscuous mode [ 29.794142][ T4329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.795439][ T4329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.797018][ T4329] device bridge_slave_0 entered promiscuous mode [ 29.802916][ T4329] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.804329][ T4329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.805840][ T4329] device bridge_slave_1 entered promiscuous mode [ 29.807491][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.808771][ T4330] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.810407][ T4330] device bridge_slave_1 entered promiscuous mode [ 29.811920][ T4339] chnl_net:caif_netlink_parms(): no params data found [ 29.821544][ T4332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.827950][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.829186][ T4331] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.830631][ T4331] device bridge_slave_0 entered promiscuous mode [ 29.841611][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.842837][ T4331] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.845368][ T4331] device bridge_slave_1 entered promiscuous mode [ 29.847646][ T4332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.852342][ T4329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.860142][ T4330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.863036][ T4330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.871285][ T4332] team0: Port device team_slave_0 added [ 29.873070][ T4329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.885108][ T4332] team0: Port device team_slave_1 added [ 29.889108][ T4329] team0: Port device team_slave_0 added [ 29.894832][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.896067][ T4339] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.897557][ T4339] device bridge_slave_0 entered promiscuous mode [ 29.901170][ T4331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.905781][ T4330] team0: Port device team_slave_0 added [ 29.907473][ T4330] team0: Port device team_slave_1 added [ 29.908989][ T4329] team0: Port device team_slave_1 added [ 29.910133][ T4339] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.911345][ T4339] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.912835][ T4339] device bridge_slave_1 entered promiscuous mode [ 29.915235][ T4331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.930930][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.932159][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.936984][ T4332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.939854][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.941041][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.948077][ T4329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.957689][ T4332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.958979][ T4332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.963830][ T4332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.966019][ T4329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.967137][ T4329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.971509][ T4329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.976212][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.977407][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.981411][ T4330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.985163][ T4339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.987603][ T4331] team0: Port device team_slave_0 added [ 29.992538][ T4330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.996120][ T4330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.000493][ T4330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.003098][ T4339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.005579][ T4331] team0: Port device team_slave_1 added [ 30.022197][ T4339] team0: Port device team_slave_0 added [ 30.025999][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.027126][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.032150][ T4331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.074840][ T4329] device hsr_slave_0 entered promiscuous mode [ 30.123469][ T4329] device hsr_slave_1 entered promiscuous mode [ 30.177498][ T4339] team0: Port device team_slave_1 added [ 30.184859][ T4331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.186071][ T4331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.190887][ T4331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.234328][ T4332] device hsr_slave_0 entered promiscuous mode [ 30.273401][ T4332] device hsr_slave_1 entered promiscuous mode [ 30.313641][ T4332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.315013][ T4332] Cannot create hsr debugfs directory [ 30.364368][ T4330] device hsr_slave_0 entered promiscuous mode [ 30.403603][ T4330] device hsr_slave_1 entered promiscuous mode [ 30.443283][ T4330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.444688][ T4330] Cannot create hsr debugfs directory [ 30.448447][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.449654][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.454005][ T4339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.456383][ T4339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.457572][ T4339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.461899][ T4339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.524352][ T4331] device hsr_slave_0 entered promiscuous mode [ 30.563567][ T4331] device hsr_slave_1 entered promiscuous mode [ 30.605549][ T4331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.606796][ T4331] Cannot create hsr debugfs directory [ 30.674586][ T4339] device hsr_slave_0 entered promiscuous mode [ 30.713863][ T4339] device hsr_slave_1 entered promiscuous mode [ 30.763307][ T4339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.764764][ T4339] Cannot create hsr debugfs directory [ 30.867487][ T4329] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.904955][ T4329] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.947650][ T4329] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.995836][ T4329] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.048448][ T4332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.078419][ T4332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.124350][ T4332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.164984][ T4332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.226867][ T4330] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.264406][ T4330] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.304270][ T4330] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.376129][ T4330] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.417810][ T4339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.455177][ T4339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.505793][ T4339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.556590][ T4339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.593873][ T4338] Bluetooth: hci3: command 0x0409 tx timeout [ 31.595039][ T4338] Bluetooth: hci0: command 0x0409 tx timeout [ 31.596096][ T4338] Bluetooth: hci1: command 0x0409 tx timeout [ 31.597092][ T4338] Bluetooth: hci4: command 0x0409 tx timeout [ 31.598142][ T4338] Bluetooth: hci2: command 0x0409 tx timeout [ 31.626994][ T4329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.636232][ T4331] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.665607][ T4331] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.714713][ T4331] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.766760][ T4329] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.772654][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.775019][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.777324][ T4331] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.819558][ T4332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.822824][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.824650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.826399][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.827662][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.832779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.834927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.836420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.838257][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.839552][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.855211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.860097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.861625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.863058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.869470][ T4332] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.871972][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.875571][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.877134][ T631] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.878392][ T631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.881571][ T4330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.890995][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.897743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.899589][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.901253][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.902882][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.905291][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.906649][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.908044][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.915958][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 31.917507][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 31.919242][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 31.920899][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 31.922389][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 31.936647][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.938719][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.940403][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 31.942056][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 31.948085][ T4339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.951271][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.952965][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.955564][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.957140][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.963473][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.965571][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.967221][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.968843][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.970562][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.972448][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.977008][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.980085][ T4332] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 31.985242][ T4330] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.986583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.988112][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.990995][ T4339] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.995683][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.997246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.998701][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.999996][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.007805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.009419][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.011114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.012730][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.014114][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.019370][ T4331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.027141][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.029274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.034371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.038187][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.039558][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.049060][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.051133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.052757][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.054078][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.056388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.058198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.060002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.080001][ T4331] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.081499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.083091][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.085606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.087397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.093000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.096279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.098255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.099922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.101664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.103695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.105397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.107030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.108565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.110189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.111823][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.114892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.116437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.119373][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.128502][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.130139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.131658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.133173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.135323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.136829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.138471][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.139722][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.141198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 32.148190][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.149663][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.151038][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.152395][ T1576] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.156607][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.160075][ T4329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.166737][ T4332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.169498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.171098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.172617][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.173937][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.176734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 32.179684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 32.184134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 32.186334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 32.193521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 32.195123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 32.196812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 32.215992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.217857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.229116][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.230749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.232283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.234936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.239840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.241464][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.245349][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 32.257882][ T4329] device veth0_vlan entered promiscuous mode [ 32.260754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.262093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.264657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.266382][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.268342][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.270303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.273933][ T4339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.284134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.285964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.288175][ T4332] device veth0_vlan entered promiscuous mode [ 32.295313][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.296872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.300562][ T4329] device veth1_vlan entered promiscuous mode [ 32.311216][ T4332] device veth1_vlan entered promiscuous mode [ 32.325504][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.327150][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.328568][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.330171][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.331772][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.336875][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.345449][ T4330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.348729][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.350136][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.351465][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 32.352818][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 32.367778][ T4329] device veth0_macvtap entered promiscuous mode [ 32.369483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.371096][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.372745][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.382213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.385187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.389132][ T4329] device veth1_macvtap entered promiscuous mode [ 32.391696][ T4331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.394934][ T4332] device veth0_macvtap entered promiscuous mode [ 32.397517][ T4330] device veth0_vlan entered promiscuous mode [ 32.399788][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.401371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.402975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.405903][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.407802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.409302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.417750][ T4330] device veth1_vlan entered promiscuous mode [ 32.419812][ T4332] device veth1_macvtap entered promiscuous mode [ 32.427889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.429552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.431199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.432884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.451199][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.452791][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.454772][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.456379][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.458249][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.459775][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.461421][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.462838][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.468218][ T4331] device veth0_vlan entered promiscuous mode [ 32.469607][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.471446][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.474216][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.478643][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.480413][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.481948][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.484374][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.492639][ T4332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.496586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.498339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.501784][ T4329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.505303][ T4329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.507735][ T4329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.509724][ T4332] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.511167][ T4332] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.512507][ T4332] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.514703][ T4332] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.518784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.520628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.522103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.524279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.526394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.527796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.530318][ T4329] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.531795][ T4329] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.534175][ T4329] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.535508][ T4329] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.538316][ T4331] device veth1_vlan entered promiscuous mode [ 32.546250][ T4330] device veth0_macvtap entered promiscuous mode [ 32.551388][ T4339] device veth0_vlan entered promiscuous mode [ 32.552740][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.554869][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.556415][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.558071][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.560726][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.563067][ T4339] device veth1_vlan entered promiscuous mode [ 32.567613][ T4330] device veth1_macvtap entered promiscuous mode [ 32.589441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 32.591080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 32.592551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.595944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.597625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.610254][ T4331] device veth0_macvtap entered promiscuous mode [ 32.619791][ T4331] device veth1_macvtap entered promiscuous mode [ 32.627949][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.629868][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.631428][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.633163][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.636723][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.641859][ T4339] device veth0_macvtap entered promiscuous mode [ 32.646625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.648311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.649834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.651466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.653145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.655482][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.657051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 32.666142][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.666799][ T4339] device veth1_macvtap entered promiscuous mode [ 32.668783][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.670171][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.672583][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.676527][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.678258][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.679772][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.681387][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.684797][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.686800][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.688390][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.690081][ T4330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.691831][ T4330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.695172][ T4330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.698538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.700157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.701739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.704630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.706414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.708095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.721137][ T631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.721350][ T4330] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.722462][ T631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.725826][ T4330] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.727461][ T4330] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.728887][ T4330] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.732845][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.735436][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.737209][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.738839][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.740434][ T4331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.742236][ T4331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.745999][ T4331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.748136][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.749805][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.751559][ T631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.759603][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.761390][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.763070][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.765601][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.767381][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.769254][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.771012][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.772867][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.775659][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.782101][ T631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.783637][ T631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.786193][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.787918][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.790540][ T4331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.792010][ T4331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.795395][ T4331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.796952][ T4331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.807218][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.809162][ T631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.809374][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.810539][ T631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.812208][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.815996][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.817617][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.819247][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.820815][ T4339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.822548][ T4339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.825200][ T4339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.826601][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.828222][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.829812][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.831490][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.852729][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.854307][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.855394][ T4339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.857187][ T4339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.858599][ T4339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.859964][ T4339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.870275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.890908][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.892273][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.895277][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 32.966484][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.967900][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.969211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 32.977033][ T4402] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 32.978564][ T4402] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 32.997348][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 33.007290][ T4402] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.008735][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.010235][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.017613][ T4413] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 33.036334][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 33.040063][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 33.041675][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 33.112476][ T4419] jffs2: notice: (4419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 33.737050][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 33.737086][ T4333] Bluetooth: hci0: command 0x041b tx timeout [ 33.737169][ T4338] Bluetooth: hci4: command 0x041b tx timeout [ 33.737235][ T4341] Bluetooth: hci1: command 0x041b tx timeout [ 33.741559][ T4343] Bluetooth: hci2: command 0x041b tx timeout [ 33.938133][ T4439] device bond_slave_0 entered promiscuous mode [ 33.939499][ T4439] device bond_slave_1 entered promiscuous mode [ 33.941004][ T4439] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 33.975588][ T4439] bond1: (slave macvlan2): making interface the new active one [ 34.020193][ T4439] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 34.041411][ T4442] loop0: detected capacity change from 0 to 2048 [ 34.067689][ T4442] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 34.431776][ T4450] loop3: detected capacity change from 0 to 512 [ 34.436288][ T4450] ======================================================= [ 34.436288][ T4450] WARNING: The mand mount option has been deprecated and [ 34.436288][ T4450] and is ignored by this kernel. Remove the mand [ 34.436288][ T4450] option from the mount to silence this warning. [ 34.436288][ T4450] ======================================================= [ 34.527418][ T4450] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 34.529243][ T4450] EXT4-fs (loop3): failed to open journal device unknown-block(8,1) -6 [ 34.544965][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 34.560862][ T4452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.577681][ T4323] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 34.606141][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13'. [ 34.613675][ T4452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13'. [ 34.802079][ T4452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.873184][ C0] sched: RT throttling activated [ 35.873226][ T4336] Bluetooth: hci3: command 0x040f tx timeout [ 35.873258][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 35.874178][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 35.875237][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 35.876158][ T4336] Bluetooth: hci0: command 0x040f tx timeout [ 35.909715][ T4452] bond1: (slave bond0): making interface the new active one [ 36.041981][ T4452] bond1: (slave bond0): Enslaving as an active interface with an up link [ 36.114532][ T4476] process 'syz.3.17' launched '/dev/fd/5' with NULL argv: empty string added [ 36.966233][ T4462] netlink: 'syz.4.13': attribute type 10 has an invalid length. [ 36.971759][ T4462] device syz_tun entered promiscuous mode [ 37.450454][ T4462] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.452603][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 37.617977][ T4503] capability: warning: `syz.1.27' uses deprecated v2 capabilities in a way that may be insecure [ 37.620656][ T4502] loop2: detected capacity change from 0 to 2048 [ 37.628743][ T4502] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 37.632037][ T4502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 37.712629][ T4508] xt_TPROXY: Can be used only with -p tcp or -p udp [ 37.717505][ T4508] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 37.777651][ T4510] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 37.792760][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.800914][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.809590][ T4510] team0: Port device bridge1 added [ 37.836830][ T4515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.849383][ T4515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 37.913446][ T4336] Bluetooth: hci0: command 0x0419 tx timeout [ 37.923372][ T4336] Bluetooth: hci4: command 0x0419 tx timeout [ 37.924577][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 37.925881][ T4336] Bluetooth: hci2: command 0x0419 tx timeout [ 37.926972][ T4336] Bluetooth: hci3: command 0x0419 tx timeout [ 39.169676][ T4541] loop0: detected capacity change from 0 to 2048 [ 39.649710][ T4541] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 39.776274][ T4541] fs-verity: sha512 using implementation "sha512-ce" [ 40.235314][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 40.334239][ T4560] loop1: detected capacity change from 0 to 764 [ 41.394094][ T4587] Bluetooth: ISO socket layer initialized [ 41.395789][ T4585] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 42.695893][ T4612] sctp: [Deprecated]: syz.0.56 (pid 4612) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.695893][ T4612] Use struct sctp_sack_info instead [ 42.776761][ T4617] device vlan2 entered promiscuous mode [ 42.786348][ T4617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.58'. [ 42.788239][ T4617] device hsr_slave_0 left promiscuous mode [ 43.019332][ T4619] device syzkaller0 entered promiscuous mode [ 43.248969][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.62'. [ 43.513351][ T4336] Bluetooth: hci4: command 0x2044 tx timeout [ 43.513375][ T4343] Bluetooth: hci4: Opcode 0x2044 failed: -110 [ 43.515766][ T4343] Bluetooth: hci4: Unable to create PA: -110 [ 43.653677][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.63'. [ 43.788141][ T4641] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 45.492501][ T4655] loop1: detected capacity change from 0 to 256 [ 45.496312][ T4381] psci: CPU1 killed (polled 0 ms) [ 45.533973][ T0] Detected PIPT I-cache on CPU1 [ 45.534831][ T0] GICv3: CPU1: found redistributor 1 region 0:0x00000000080c0000 [ 45.536275][ T0] CPU1: Booted secondary processor 0x0000000001 [0x410fd4f1] [ 45.803781][ T4665] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 45.803781][ T4665] The task syz.3.70 (4665) triggered the difference, watch for misbehavior. [ 47.876886][ T4677] tipc: Failed to remove unknown binding: 66,0,0/0:2366883778/2366883779 [ 47.960161][ T4677] tipc: Failed to remove unknown binding: 66,0,0/0:2366883778/2366883779 [ 47.962181][ T4682] tipc: Failed to remove unknown binding: 66,0,0/0:3136158877/3136158879 [ 47.964144][ T4686] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 47.977234][ T4684] IPVS: stopping master sync thread 4686 ... [ 48.915386][ T4690] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.040259][ T4690] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.046463][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.79'. [ 49.056697][ T4703] Zero length message leads to an empty skb [ 52.558285][ T4712] loop0: detected capacity change from 0 to 2048 [ 52.586025][ T4690] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.589876][ T4712] loop0: p1 < > p4 [ 52.589876][ T4712] p4: [ 52.592486][ T4712] loop0: p4 size 722688 extends beyond EOD, truncated [ 52.724284][ T4690] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.040937][ T4690] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.044229][ T4690] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.047226][ T4690] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.050682][ T4690] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.437226][ T4810] loop2: detected capacity change from 0 to 512 [ 53.443714][ T4810] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 53.445579][ T4810] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 53.447257][ T4810] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 53.456860][ T4810] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 53.458424][ T4810] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 53.459915][ T4810] EXT4-fs (loop2): failed to initialize system zone (-117) [ 53.461329][ T4810] EXT4-fs (loop2): mount failed [ 53.571820][ T4771] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 53.694140][ T4821] device syzkaller0 entered promiscuous mode [ 54.158348][ T4833] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\" or missing value [ 54.241830][ T4837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.98'. [ 54.555888][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.100'. [ 54.585100][ T27] audit: type=1326 audit(68.577:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4822 comm="syz.1.93" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b779368 code=0x0 [ 55.726364][ T4854] loop1: detected capacity change from 0 to 164 [ 55.970654][ T4857] netlink: 96 bytes leftover after parsing attributes in process `syz.0.103'. [ 58.189109][ T4882] bridge0: port 3(syz_tun) entered blocking state [ 58.198547][ T4882] bridge0: port 3(syz_tun) entered disabled state [ 58.200542][ T4882] device syz_tun entered promiscuous mode [ 58.201795][ T4882] bridge0: port 3(syz_tun) entered blocking state [ 58.203541][ T4882] bridge0: port 3(syz_tun) entered forwarding state [ 58.227134][ T4879] device syzkaller0 entered promiscuous mode [ 58.577345][ T4888] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 58.942035][ T4893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 59.123198][ C1] net_ratelimit: 64 callbacks suppressed [ 59.237348][ T4908] kAFS: No cell specified [ 59.257597][ T4908] netlink: 32 bytes leftover after parsing attributes in process `syz.0.121'. [ 59.464991][ T4914] loop2: detected capacity change from 0 to 256 [ 59.482648][ T4914] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.513483][ T4914] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 59.523393][ T4914] FAT-fs (loop2): Filesystem has been set read-only [ 59.530950][ T4912] device syzkaller0 entered promiscuous mode [ 59.538671][ T4895] ceph: No mds server is up or the cluster is laggy [ 59.583931][ T4914] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 0000fc00) [ 61.305642][ T4942] loop1: detected capacity change from 0 to 256 [ 61.390898][ T4932] raw_sendmsg: syz.3.130 forgot to set AF_INET. Fix it! [ 62.129965][ T4967] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 62.170513][ T4967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.217613][ T4970] bond1: (slave gretap1): making interface the new active one [ 62.225553][ T4970] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 62.227423][ T1753] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 62.338694][ T4974] loop3: detected capacity change from 0 to 2048 [ 62.391708][ T4974] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 62.586652][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 62.601017][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.602733][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.653708][ T4991] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.655166][ T4991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.656777][ T4991] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.658108][ T4991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.760452][ T4991] device bridge0 entered promiscuous mode [ 62.763986][ T4995] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 64.365398][ T5015] loop4: detected capacity change from 0 to 32768 [ 64.543313][ T5013] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 64.544493][ T5013] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 64.546596][ T5013] vhci_hcd vhci_hcd.0: Device attached [ 64.793199][ C1] net_ratelimit: 41 callbacks suppressed [ 64.877417][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.878681][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.115652][ T24] cfg80211: failed to load regulatory.db [ 66.884730][ T5026] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 66.886155][ T5026] IPv6: NLM_F_CREATE should be set when creating new route [ 67.063945][ T5015] read_mapping_page failed! [ 67.064811][ T5015] diRead: diIAGRead returned -5 [ 67.230980][ T5014] vhci_hcd: connection closed [ 67.231340][ T4381] usb 10-1: new low-speed USB device number 2 using vhci_hcd [ 67.234474][ T5016] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 67.238991][ T9] vhci_hcd: stop threads [ 67.240333][ T9] vhci_hcd: release socket [ 67.241385][ T9] vhci_hcd: disconnect device [ 67.414784][ T5035] device syzkaller0 entered promiscuous mode [ 68.052094][ T5047] device bridge0 entered promiscuous mode [ 68.142648][ T5054] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 68.225231][ T5054] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 68.278735][ T5054] netlink: 'syz.3.170': attribute type 4 has an invalid length. [ 68.817314][ T5076] device ip6gre1 entered promiscuous mode [ 69.352521][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 69.358802][ T5089] Core dump to core aborted: cannot preserve file permissions [ 69.463490][ T27] audit: type=1326 audit(83.457:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.467272][ T27] audit: type=1326 audit(83.457:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.472038][ T27] audit: type=1326 audit(83.457:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.482227][ T27] audit: type=1326 audit(83.457:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.486875][ T27] audit: type=1326 audit(83.467:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.490601][ T27] audit: type=1326 audit(83.467:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.496732][ T27] audit: type=1326 audit(83.467:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.557770][ T27] audit: type=1326 audit(83.547:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.561787][ T27] audit: type=1326 audit(83.547:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x7ffc0000 [ 69.566399][ T27] audit: type=1326 audit(83.547:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5097 comm="syz.4.185" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffffbbf5c22c code=0x7ffc0000 [ 69.597269][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 69.922352][ T5083] loop1: detected capacity change from 0 to 32768 [ 69.933838][ T5083] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.180 (5083) [ 69.951379][ T5083] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.956779][ T5083] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm [ 69.993220][ C1] net_ratelimit: 41 callbacks suppressed [ 70.154537][ T5083] BTRFS info (device loop1): force clearing of disk cache [ 70.156195][ T5083] BTRFS info (device loop1): enabling auto defrag [ 70.160737][ T5083] BTRFS info (device loop1): max_inline at 0 [ 70.163613][ T5083] BTRFS error (device loop1): support for check_integrity* not compiled in! [ 70.177240][ T5083] BTRFS error (device loop1): open_ctree failed: -22 [ 70.376892][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.192'. [ 71.757692][ T5123] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 71.764324][ T5123] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 71.769851][ T5128] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 71.863850][ T5143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 72.198793][ T5143] bond2: (slave veth3): Enslaving as an active interface with an up link [ 72.393415][ T4381] vhci_hcd: vhci_device speed not set [ 73.696250][ T5186] netlink: 68 bytes leftover after parsing attributes in process `syz.1.210'. [ 73.789775][ T5190] device syzkaller0 entered promiscuous mode [ 73.797839][ T5190] tipc: Started in network mode [ 73.801053][ T5190] tipc: Node identity 0e28596d96fe, cluster identity 4711 [ 73.805031][ T5190] tipc: Enabled bearer , priority 0 [ 73.811949][ T5189] tipc: Resetting bearer [ 73.914459][ T5189] tipc: Disabling bearer [ 74.283595][ T5201] netlink: 12 bytes leftover after parsing attributes in process `syz.0.216'. [ 74.308411][ T5205] netlink: 156 bytes leftover after parsing attributes in process `syz.3.218'. [ 74.425562][ T5211] Trying to write to read-only block-device nullb0 [ 75.353217][ C1] net_ratelimit: 58 callbacks suppressed [ 75.896592][ T5222] Trying to write to read-only block-device nullb0 [ 75.897855][ T5222] Trying to write to read-only block-device nullb0 [ 75.898998][ T5222] Trying to write to read-only block-device nullb0 [ 75.900152][ T5222] Trying to write to read-only block-device nullb0 [ 75.901277][ T5222] Trying to write to read-only block-device nullb0 [ 75.902376][ T5222] Trying to write to read-only block-device nullb0 [ 76.878885][ T5225] loop4: detected capacity change from 0 to 164 [ 76.895094][ T5222] Trying to write to read-only block-device nullb0 [ 76.906369][ T5222] Trying to write to read-only block-device nullb0 [ 77.877317][ T5222] Trying to write to read-only block-device nullb0 [ 78.127538][ T5229] loop4: detected capacity change from 0 to 32768 [ 78.137046][ T5229] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.224 (5229) [ 78.144385][ T5229] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 78.146186][ T5229] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 78.147461][ T5229] BTRFS info (device loop4): force clearing of disk cache [ 78.148621][ T5229] BTRFS info (device loop4): enabling auto defrag [ 78.149802][ T5229] BTRFS info (device loop4): max_inline at 0 [ 78.150949][ T5229] BTRFS error (device loop4): support for check_integrity* not compiled in! [ 78.153308][ T5229] BTRFS error (device loop4): open_ctree failed: -22 [ 78.182553][ T5232] netlink: 20 bytes leftover after parsing attributes in process `syz.2.225'. [ 78.211711][ T5223] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5223) [ 78.324058][ T5232] device ip6gre1 entered promiscuous mode [ 78.607762][ T5248] netlink: 'syz.2.231': attribute type 1 has an invalid length. [ 78.623863][ T5247] loop4: detected capacity change from 0 to 1024 [ 78.942891][ T5247] hfsplus: invalid length 32517 has been corrected to 255 [ 78.948701][ T5248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.961134][ T5247] Bluetooth: MGMT ver 1.22 [ 78.979389][ T5254] bond1: (slave geneve2): making interface the new active one [ 79.212235][ T5254] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 79.288642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 79.326534][ T5261] usb usb8: usbfs: process 5261 (syz.4.235) did not claim interface 0 before use [ 80.475571][ T9] net_ratelimit: 41 callbacks suppressed [ 84.297583][ T5293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.243'. [ 84.324528][ T5295] device lo entered promiscuous mode [ 84.510226][ T5298] xt_CONNSECMARK: invalid mode: 0 [ 84.591570][ T5301] syz.4.245 sent an empty control message without MSG_MORE. [ 84.606778][ T5295] device tunl0 entered promiscuous mode [ 84.618547][ T5295] device gre0 entered promiscuous mode [ 84.667923][ T5295] device gretap0 entered promiscuous mode [ 84.685817][ T5295] device erspan0 entered promiscuous mode [ 84.689507][ T5295] device ip_vti0 entered promiscuous mode [ 84.746862][ T5295] device ip6_vti0 entered promiscuous mode [ 84.770932][ T5295] device sit0 entered promiscuous mode [ 84.804290][ T5305] loop4: detected capacity change from 0 to 2048 [ 84.806136][ T5295] device ip6tnl0 entered promiscuous mode [ 84.813608][ T5305] UDF-fs: bad mount option "01777777777777777777777ÿÿÿÿ" or missing value [ 84.830581][ T5295] device ip6gre0 entered promiscuous mode [ 84.846345][ T5295] device syz_tun entered promiscuous mode [ 84.863869][ T5295] device ip6gretap0 entered promiscuous mode [ 84.886855][ T5295] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.888381][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.908037][ T5295] device bond0 entered promiscuous mode [ 84.912673][ T5295] device bond_slave_0 entered promiscuous mode [ 84.914111][ T5295] device bond_slave_1 entered promiscuous mode [ 84.937175][ T5295] device team0 entered promiscuous mode [ 84.940817][ T5295] device team_slave_0 entered promiscuous mode [ 84.942224][ T5295] device team_slave_1 entered promiscuous mode [ 84.961383][ T5295] device dummy0 entered promiscuous mode [ 84.978626][ T5295] device nlmon0 entered promiscuous mode [ 84.991020][ T5295] device caif0 entered promiscuous mode [ 84.995949][ T5295] device batadv0 entered promiscuous mode [ 85.013097][ T5295] device vxcan0 entered promiscuous mode [ 85.021646][ T5295] device vxcan1 entered promiscuous mode [ 85.029907][ T5295] device veth0 entered promiscuous mode [ 85.089272][ T5295] device veth1 entered promiscuous mode [ 85.173444][ T5295] device wg0 entered promiscuous mode [ 85.273360][ T5295] device wg1 entered promiscuous mode [ 85.363401][ T5295] device wg2 entered promiscuous mode [ 85.370331][ T5295] device veth0_to_bridge entered promiscuous mode [ 85.394567][ T5295] device veth1_to_bridge entered promiscuous mode [ 85.420436][ T5295] device veth0_to_bond entered promiscuous mode [ 85.441489][ T5295] device veth1_to_bond entered promiscuous mode [ 85.455914][ T5295] device veth0_to_team entered promiscuous mode [ 85.484721][ T5295] device veth1_to_team entered promiscuous mode [ 85.511781][ T5295] device veth0_to_batadv entered promiscuous mode [ 85.514987][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.529281][ T5295] device batadv_slave_0 entered promiscuous mode [ 85.546331][ T5295] device veth1_to_batadv entered promiscuous mode [ 85.549164][ T5295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.563722][ T5295] device batadv_slave_1 entered promiscuous mode [ 85.581159][ T5295] device xfrm0 entered promiscuous mode [ 85.593260][ C1] net_ratelimit: 45 callbacks suppressed [ 85.597618][ T5295] device veth0_to_hsr entered promiscuous mode [ 85.606756][ T5295] device hsr_slave_0 entered promiscuous mode [ 85.619693][ T5295] device veth1_to_hsr entered promiscuous mode [ 85.646712][ T5295] device veth1_virt_wifi entered promiscuous mode [ 85.661461][ T5295] device veth0_virt_wifi entered promiscuous mode [ 85.664473][ T5295] device virt_wifi0 entered promiscuous mode [ 85.700174][ T27] kauditd_printk_skb: 48 callbacks suppressed [ 85.700180][ T27] audit: type=1326 audit(99.687:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5317 comm="syz.4.250" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffbbf79368 code=0x0 [ 85.710045][ T5295] device vlan0 entered promiscuous mode [ 85.711355][ T5295] device vlan1 entered promiscuous mode [ 85.743497][ T5295] device macvlan0 entered promiscuous mode [ 85.804510][ T5295] device macvlan1 entered promiscuous mode [ 85.807122][ T5295] device ipvlan0 entered promiscuous mode [ 85.808251][ T5295] device ipvlan1 entered promiscuous mode [ 85.873431][ T5295] device macvtap0 entered promiscuous mode [ 85.882541][ T5295] device macsec0 entered promiscuous mode [ 85.923515][ T5295] device geneve0 entered promiscuous mode [ 85.933605][ T5295] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.935311][ T5295] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.937329][ T5295] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.939181][ T5295] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.983628][ T5295] device geneve1 entered promiscuous mode [ 85.992493][ T5295] device netdevsim0 entered promiscuous mode [ 86.003616][ T5295] device netdevsim1 entered promiscuous mode [ 86.010240][ T5295] device netdevsim2 entered promiscuous mode [ 86.016742][ T5295] device netdevsim3 entered promiscuous mode [ 86.123556][ T5295] device wlan1 entered promiscuous mode [ 86.129839][ T5295] device gtp0 entered promiscuous mode [ 86.136533][ T5295] device bond1 entered promiscuous mode [ 86.137485][ T5295] device gretap1 entered promiscuous mode [ 86.148220][ T5295] device bond2 entered promiscuous mode [ 86.154185][ T5295] device bridge1 entered promiscuous mode [ 86.313502][ T5328] futex_wake_op: syz.0.254 tries to shift op by 144; fix this program [ 88.273739][ T5342] loop0: detected capacity change from 0 to 256 [ 88.293548][ T5342] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d) [ 89.293769][ T5352] netlink: 'syz.4.262': attribute type 1 has an invalid length. [ 90.332021][ T5358] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.345499][ T5358] bond2: (slave bond3): making interface the new active one [ 90.350708][ T5358] bond2: (slave bond3): Enslaving as an active interface with an up link [ 90.443166][ T5352] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 90.464480][ T5372] loop1: detected capacity change from 0 to 8 [ 90.594134][ T5369] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 [ 91.353290][ C1] net_ratelimit: 38 callbacks suppressed [ 91.488226][ T4343] Bluetooth: hci0: unexpected subevent 0x01 length: 19 > 18 [ 91.489562][ T4343] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 91.513471][ T5352] netlink: 28 bytes leftover after parsing attributes in process `syz.4.262'. [ 91.517589][ T5352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.771197][ T5398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.773000][ T5398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.804591][ T5402] loop1: detected capacity change from 0 to 2048 [ 91.841801][ T5404] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.553324][ T48] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.555349][ T4336] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 93.910736][ T5429] loop0: detected capacity change from 0 to 512 [ 93.920590][ T4343] Bluetooth: Frame is too long (len 12, expected len 8) [ 93.926408][ T4343] Bluetooth: hci3: link tx timeout [ 93.927450][ T4343] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 93.941619][ T5429] EXT4-fs (loop0): orphan cleanup on readonly fs [ 93.944625][ T5429] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.285: corrupted inode contents [ 93.949257][ T5429] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 93.957634][ T5429] EXT4-fs error (device loop0): ext4_do_update_inode:5279: inode #15: comm syz.0.285: corrupted inode contents [ 93.961044][ T5429] EXT4-fs error (device loop0): ext4_evict_inode:329: inode #15: comm syz.0.285: mark_inode_dirty error [ 93.964643][ T5429] EXT4-fs (loop0): 1 orphan inode deleted [ 93.966881][ T5429] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.976021][ T4343] Bluetooth: Frame is too long (len 12, expected len 8) [ 93.991940][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 94.029319][ T4343] Bluetooth: hci3: link tx timeout [ 94.030242][ T4343] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 94.079646][ T4336] Bluetooth: hci3: link tx timeout [ 94.080623][ T4336] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 95.018976][ T3706] Bluetooth: bad checksum in packet [ 95.020333][ T4343] Bluetooth: hci3: link tx timeout [ 95.021154][ T4343] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 95.170830][ T5448] loop3: detected capacity change from 0 to 1024 [ 95.175701][ T5448] EXT4-fs: Ignoring removed bh option [ 95.387977][ T5448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 95.401898][ T5448] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 95.518854][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 95.545400][ T5458] netlink: 'syz.3.293': attribute type 39 has an invalid length. [ 95.935127][ T5467] loop4: detected capacity change from 0 to 1024 [ 95.973560][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 96.003299][ T4343] Bluetooth: hci3: command 0x0406 tx timeout [ 96.042885][ T5469] zram0: detected capacity change from 0 to 8 [ 96.075098][ T4387] wlan1: Trigger new scan to find an IBSS to join [ 96.474752][ C0] net_ratelimit: 38 callbacks suppressed [ 96.580174][ T5480] netlink: 20 bytes leftover after parsing attributes in process `syz.0.301'. [ 96.679626][ T5484] netlink: 156 bytes leftover after parsing attributes in process `syz.2.303'. [ 96.746481][ T4339] EXT4-fs (loop4): unmounting filesystem. [ 96.807451][ T5491] futex_wake_op: syz.4.306 tries to shift op by 144; fix this program [ 97.004852][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 97.309546][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.043902][ T4387] wlan1: Trigger new scan to find an IBSS to join [ 101.593233][ C0] net_ratelimit: 25 callbacks suppressed [ 101.709661][ T5527] syz.0.316 uses obsolete (PF_INET,SOCK_PACKET) [ 102.104095][ T4402] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.105948][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.435481][ T5549] netlink: 'syz.4.325': attribute type 2 has an invalid length. [ 103.923577][ T5577] wireguard: wg0: Could not create IPv6 socket [ 104.127290][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 104.135452][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.140382][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.145989][ T5583] device bridge_slave_0 left promiscuous mode [ 104.149342][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.184673][ T5583] device bridge_slave_1 left promiscuous mode [ 104.186202][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.225402][ T5583] bond0: (slave bond_slave_0): Releasing backup interface [ 104.278678][ T5583] bond0: (slave bond_slave_1): Releasing backup interface [ 104.343879][ T5583] team0: Port device team_slave_0 removed [ 104.405231][ T5583] team0: Port device team_slave_1 removed [ 104.406949][ T5583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.418514][ T5583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.429714][ T5583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.434960][ T5583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.459786][ T5583] bond1: (slave geneve2): Releasing active interface [ 104.478747][ T5592] loop3: detected capacity change from 0 to 1764 [ 104.526380][ T5593] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.565755][ T5591] usb usb9: usbfs: process 5591 (syz.3.337) did not claim interface 0 before use [ 104.568230][ T5591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.570170][ T5591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.828033][ T5604] overlayfs: unrecognized mount option "\']*=°¢°©æ[\1\Ãåý07†ðÿ$Áܲ¹" or missing value [ 105.985643][ T5614] loop1: detected capacity change from 0 to 32768 [ 106.153265][ T5612] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 106.154429][ T5612] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.155886][ T5612] vhci_hcd vhci_hcd.0: Device attached [ 106.886199][ C1] net_ratelimit: 26 callbacks suppressed [ 106.920255][ T5620] loop4: detected capacity change from 0 to 764 [ 108.210633][ T5627] loop3: detected capacity change from 0 to 128 [ 108.220441][ T5627] affs: No valid root block on device loop3 [ 108.884460][ T4336] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 108.884543][ T4336] Bluetooth: hci3: Injecting HCI hardware error event [ 108.888731][ T4343] Bluetooth: hci3: hardware error 0x00 [ 109.889598][ T14] usb 4-1: new low-speed USB device number 2 using vhci_hcd [ 109.996267][ T5613] vhci_hcd: connection reset by peer [ 109.997767][ T1753] vhci_hcd: stop threads [ 109.997782][ T1753] vhci_hcd: release socket [ 109.997888][ T1753] vhci_hcd: disconnect device [ 110.077178][ T5636] device syzkaller0 entered promiscuous mode [ 111.123281][ T4343] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 111.913292][ C0] net_ratelimit: 21 callbacks suppressed [ 112.884374][ T5644] random: crng reseeded on system resumption [ 113.141606][ T5661] overlayfs: failed to clone upperpath [ 113.548351][ T4483] kernel write not supported for file bpf-prog (pid: 4483 comm: kworker/0:6) [ 115.544073][ T14] vhci_hcd: vhci_device speed not set [ 115.824807][ T5709] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 115.957224][ T5714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.145288][ T5714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.857191][ T5726] loop0: detected capacity change from 0 to 131072 [ 116.869938][ T5726] F2FS-fs (loop0): Test dummy encryption mode enabled [ 116.872007][ T5726] F2FS-fs (loop0): invalid crc value [ 116.890849][ T5726] F2FS-fs (loop0): Found nat_bits in checkpoint [ 116.911603][ T5726] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 117.523203][ C1] net_ratelimit: 29 callbacks suppressed [ 117.715427][ T5738] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 117.939761][ T5733] netlink: 28 bytes leftover after parsing attributes in process `syz.1.374'. [ 118.290892][ T5744] device vlan2 entered promiscuous mode [ 118.296166][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 118.663030][ T5747] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 119.032928][ T5761] 8021q: VLANs not supported on vcan0 [ 120.519347][ T5783] Illegal XDP return value 4294967274 on prog (id 58) dev syz_tun, expect packet loss! [ 121.550713][ T5796] loop0: detected capacity change from 0 to 4096 [ 121.767425][ T5796] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 121.890632][ T5822] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 122.043460][ T14] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.223272][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 122.227765][ T14] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.229707][ T14] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.231608][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.233724][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.235605][ T14] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.237579][ T14] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.240175][ T14] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.242018][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.247358][ T14] usb 1-1: config 0 descriptor?? [ 122.624113][ T14] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 122.673987][ T5832] random: crng reseeded on system resumption [ 122.725500][ T5836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.405'. [ 122.759407][ T5836] netlink: 32 bytes leftover after parsing attributes in process `syz.3.405'. [ 122.768426][ T5838] device bridge_slave_0 left promiscuous mode [ 122.775118][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.825188][ T14] usb 1-1: USB disconnect, device number 2 [ 122.832954][ T14] usblp0: removed [ 123.033239][ C1] net_ratelimit: 27 callbacks suppressed [ 124.894393][ T4330] EXT4-fs (loop0): unmounting filesystem. [ 125.890718][ T5849] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 125.924566][ T2065] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926182][ T2065] ieee802154 phy1 wpan1: encryption failed: -22 [ 126.869500][ T5850] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 126.964258][ T5856] loop3: detected capacity change from 0 to 1024 [ 127.764259][ T5866] netlink: 59 bytes leftover after parsing attributes in process `syz.4.413'. [ 127.859127][ T5811] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.910212][ T4343] Bluetooth: hci0: unexpected event for opcode 0x0c12 [ 128.004408][ T5870] device syzkaller0 entered promiscuous mode [ 128.473209][ C1] net_ratelimit: 29 callbacks suppressed [ 128.502970][ T5877] jffs2: notice: (5877) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 130.290071][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 131.381726][ T5916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 131.529659][ T5916] bond2: (slave veth3): Enslaving as an active interface with an up link [ 131.617823][ T5907] loop3: detected capacity change from 0 to 32768 [ 131.630102][ T5907] (syz.3.426,5907,0):ocfs2_parse_options:1446 ERROR: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ" or missing value [ 131.639951][ T5907] (syz.3.426,5907,0):ocfs2_fill_super:1176 ERROR: status = -22 [ 131.923292][ T4343] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 131.925247][ T4343] Bluetooth: hci0: Injecting HCI hardware error event [ 131.927878][ T4336] Bluetooth: hci0: hardware error 0x00 [ 131.997380][ T5929] jffs2: notice: (5929) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.513222][ C1] net_ratelimit: 27 callbacks suppressed [ 133.720368][ T5964] loop0: detected capacity change from 0 to 8 [ 133.844344][ T5966] tipc: Enabling of bearer rejected, failed to enable media [ 133.867612][ T5974] loop4: detected capacity change from 0 to 256 [ 133.869837][ T5974] exfat: Deprecated parameter 'utf8' [ 133.887805][ T5974] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 134.153268][ T4336] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 134.234285][ T4773] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 135.012368][ T5984] loop3: detected capacity change from 0 to 1024 [ 135.027981][ T5984] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.116259][ T5984] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.395179][ T5999] jffs2: notice: (5999) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.413959][ T5984] FAULT_INJECTION: forcing a failure. [ 135.413959][ T5984] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 135.419867][ T5984] CPU: 0 PID: 5984 Comm: syz.3.452 Not tainted syzkaller #0 [ 135.421088][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 135.423086][ T5984] Call trace: [ 135.423758][ T5984] dump_backtrace+0x1c4/0x1f0 [ 135.424712][ T5984] show_stack+0x2c/0x3c [ 135.425637][ T5984] __dump_stack+0x30/0x40 [ 135.426417][ T5984] dump_stack_lvl+0xf4/0x15c [ 135.427246][ T5984] dump_stack+0x1c/0x5c [ 135.428116][ T5984] should_fail_ex+0x3cc/0x524 [ 135.429021][ T5984] should_fail_alloc_page+0x74/0xb8 [ 135.430059][ T5984] prepare_alloc_pages+0x1b8/0x4f0 [ 135.431082][ T5984] __alloc_pages+0x134/0x544 [ 135.431972][ T5984] __folio_alloc+0x1c/0x44 [ 135.432809][ T5984] vma_alloc_folio+0x37c/0x8ac [ 135.433662][ T5984] alloc_zeroed_user_highpage_movable+0x78/0x8c [ 135.434864][ T5984] wp_page_copy+0x1a8/0x1774 [ 135.435760][ T5984] do_wp_page+0xaf8/0xed4 [ 135.436607][ T5984] handle_mm_fault+0x1520/0x3018 [ 135.437509][ T5984] do_page_fault+0x310/0x99c [ 135.438386][ T5984] do_mem_abort+0x70/0x198 [ 135.439220][ T5984] el0_da+0x70/0x144 [ 135.439961][ T5984] el0t_64_sync_handler+0x90/0xf0 [ 135.440897][ T5984] el0t_64_sync+0x18c/0x190 [ 135.668008][ T6005] loop4: detected capacity change from 0 to 256 [ 135.670029][ T6005] exfat: Bad value for 'fmask' [ 135.672531][ T5984] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 135.707981][ T5923] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.717577][ T4329] EXT4-fs (loop3): unmounting filesystem. [ 135.847392][ T6009] loop1: detected capacity change from 0 to 2048 [ 136.136292][ T6009] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.445184][ T6027] loop1: detected capacity change from 2048 to 1 [ 136.447023][ T6030] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=1409, location=97 [ 136.460281][ T6009] syz.1.457: attempt to access beyond end of device [ 136.460281][ T6009] loop1: rw=0, sector=1351, nr_sectors = 1 limit=1 [ 136.472955][ T6009] Buffer I/O error on dev loop1, logical block 1351, async page read [ 136.476032][ T6030] UDF-fs: error (device loop1): udf_read_inode: (ino 1409) failed !bh [ 136.531554][ T4331] syz-executor: attempt to access beyond end of device [ 136.531554][ T4331] loop1: rw=2049, sector=128, nr_sectors = 1 limit=1 [ 136.537646][ T4331] Buffer I/O error on dev loop1, logical block 128, lost sync page write [ 136.663521][ T6044] device syzkaller0 entered promiscuous mode [ 137.597930][ T6053] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 138.238668][ T6059] loop1: detected capacity change from 0 to 736 [ 138.713337][ C1] net_ratelimit: 28 callbacks suppressed [ 138.764954][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.469'. [ 138.847008][ T27] audit: type=1326 audit(152.837:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6064 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=9 arch=c00000b7 syscall=98 compat=0 ip=0xffff9b779368 code=0x0 [ 140.108339][ T6082] loop3: detected capacity change from 0 to 131072 [ 140.117763][ T6082] F2FS-fs (loop3): Test dummy encryption mode enabled [ 140.119656][ T6082] F2FS-fs (loop3): invalid crc value [ 140.140431][ T6082] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.158562][ T6082] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 140.502868][ T6094] device syzkaller0 entered promiscuous mode [ 140.529521][ T6094] tipc: Started in network mode [ 140.530570][ T6094] tipc: Node identity 22da83fce03, cluster identity 4711 [ 140.541746][ T6094] tipc: Enabled bearer , priority 0 [ 140.552524][ T6093] tipc: Resetting bearer [ 140.664346][ T6093] tipc: Disabling bearer [ 140.678338][ T6106] netlink: 84 bytes leftover after parsing attributes in process `syz.4.479'. [ 142.070234][ T6124] netlink: 'syz.2.483': attribute type 12 has an invalid length. [ 142.088146][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 142.089716][ T6124] bond0: option primary_reselect: invalid value (113) [ 142.285525][ T6134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.488'. [ 142.404559][ T6134] bridge3: port 1(veth7) entered blocking state [ 142.415687][ T6134] bridge3: port 1(veth7) entered disabled state [ 142.417635][ T6134] device veth7 entered promiscuous mode [ 142.512368][ T6134] bridge3: port 2(veth0_to_bond) entered blocking state [ 142.519436][ T6134] bridge3: port 2(veth0_to_bond) entered disabled state [ 142.521391][ T6134] device veth0_to_bond entered promiscuous mode [ 142.606026][ T6134] bridge3: port 3(veth9) entered blocking state [ 142.611598][ T6134] bridge3: port 3(veth9) entered disabled state [ 142.616772][ T6134] device veth9 entered promiscuous mode [ 142.689756][ T6150] device syzkaller0 entered promiscuous mode [ 142.768076][ T6152] device syzkaller0 entered promiscuous mode [ 143.691435][ T6168] device syzkaller0 entered promiscuous mode [ 143.913249][ C1] net_ratelimit: 29 callbacks suppressed [ 144.716491][ T6177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'. [ 144.719795][ T6181] netlink: 24 bytes leftover after parsing attributes in process `syz.1.504'. [ 144.849623][ T6186] netlink: 550 bytes leftover after parsing attributes in process `syz.4.507'. [ 144.950880][ T6194] netlink: 4 bytes leftover after parsing attributes in process `syz.4.510'. [ 144.964656][ T6194] netlink: 8 bytes leftover after parsing attributes in process `syz.4.510'. [ 146.132435][ T6210] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 146.239746][ T6214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.302684][ T6217] binder: 6216:6217 ioctl c0306201 20000080 returned -14 [ 146.304675][ T6214] bond3: (slave bond4): making interface the new active one [ 146.317828][ T6217] binder: 6216:6217 tried to acquire reference to desc 0, got 1 instead [ 146.328701][ T6214] bond3: (slave bond4): Enslaving as an active interface with an up link [ 146.330289][ T6219] netlink: 'syz.2.519': attribute type 1 has an invalid length. [ 146.332767][ T6217] binder: 6216:6217 got transaction with invalid data ptr [ 146.344914][ T6217] binder: 6216:6217 transaction call to 6216:0 failed 7/29201/-14, size 112-4280 line 3350 [ 146.361864][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 146.375879][ T6210] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 146.392531][ T6223] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.412465][ T6223] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.446498][ T6223] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.448095][ T6223] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 146.451180][ T6226] loop1: detected capacity change from 0 to 512 [ 146.561340][ T6223] bond3: (slave geneve3): making interface the new active one [ 146.569061][ T6223] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 146.581503][ T6219] netlink: 28 bytes leftover after parsing attributes in process `syz.2.519'. [ 146.585942][ T6226] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.521: bg 0: block 5: invalid block bitmap [ 146.590256][ T6226] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 146.597099][ T6226] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.521: invalid indirect mapped block 393216 (level 0) [ 146.600247][ T6226] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.521: invalid indirect mapped block 3 (level 2) [ 146.606113][ T6226] EXT4-fs (loop1): 1 orphan inode deleted [ 146.611050][ T6226] EXT4-fs (loop1): 1 truncate cleaned up [ 146.612384][ T6219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.618136][ T6226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 146.630655][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.516'. [ 146.632978][ T6210] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.803922][ T4331] EXT4-fs (loop1): unmounting filesystem. [ 147.691955][ T4336] [ 147.692404][ T4336] ====================================================== [ 147.693537][ T6221] kcov: kcov_task_exit: t = ffff000102ed5400, kcov->t = ffff000102ed5400 [ 147.693749][ T4336] WARNING: possible circular locking dependency detected [ 147.695512][ T6224] kcov: kcov_task_exit: t = ffff0000d798b800, kcov->t = ffff0000d798b800 [ 147.696426][ T4336] syzkaller #0 Not tainted [ 147.698097][ T6227] kcov: kcov_task_exit: t = ffff0000d7989c00, kcov->t = ffff0000d7989c00 [ 147.698696][ T4336] ------------------------------------------------------ [ 147.701390][ T4336] kworker/u5:2/4336 is trying to acquire lock: [ 147.702488][ T4336] ffff800017bb6ac8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x9c/0x674 [ 147.704151][ T4336] [ 147.704151][ T4336] but task is already holding lock: [ 147.705471][ T4336] ffff800017b94328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x280/0xa68 [ 147.707297][ T4336] [ 147.707297][ T4336] which lock already depends on the new lock. [ 147.707297][ T4336] [ 147.709208][ T4336] [ 147.709208][ T4336] the existing dependency chain (in reverse order) is: [ 147.710781][ T4336] [ 147.710781][ T4336] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 147.712142][ T4336] __mutex_lock_common+0x1a0/0x1f3c [ 147.713182][ T4336] mutex_lock_nested+0x38/0x44 [ 147.714155][ T4336] hci_remote_features_evt+0x410/0x840 [ 147.714884][ C0] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:000000003621f34b is addr:fe80::28e5:55ff:fecc:ab62 for cmd:0 at entry:0000000013c6d9a8 [ 147.715257][ T4336] hci_event_packet+0x698/0xe60 [ 147.718355][ C0] nf_conntrack: new packet for 000000001cbee824 [ 147.719106][ T4336] hci_rx_work+0x310/0xa70 [ 147.720261][ C0] nf_nat: get_unique_tuple: Found current src map [ 147.721074][ T4336] process_one_work+0x7e4/0x13bc [ 147.722257][ C0] nf_conntrack: Altering reply tuple of 000000001cbee824 to [ 147.723177][ T4336] worker_thread+0x8cc/0xfe8 [ 147.723199][ T4336] kthread+0x254/0x2e0 [ 147.723210][ T4336] ret_from_fork+0x10/0x20 [ 147.724511][ C0] nf_conntrack: Confirming conntrack 000000001cbee824 [ 147.725344][ T4336] [ 147.725344][ T4336] -> #1 (&hdev->lock [ 147.726272][ C0] tcp_conntracks: [ 147.726980][ T4336] ){+.+.}-{3:3} [ 147.728186][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 147.729247][ T4336] : [ 147.729253][ T4336] __mutex_lock_common+0x1a0/0x1f3c [ 147.729973][ C0] tcp_conntracks: [ 147.730531][ T4336] mutex_lock_nested+0x38/0x44 [ 147.731525][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 147.731936][ T4336] l2cap_chan_connect+0xd0/0xba0 [ 147.732985][ C0] tcp_conntracks: [ 147.733604][ T4336] l2cap_sock_connect+0x414/0x600 [ 147.733625][ T4336] kernel_connect+0x124/0x190 [ 147.734504][ C0] syn=0 ack=1 fin=0 rst=0 old=3 new=3 [ 147.735399][ T4336] rfcomm_dlc_open+0x4f4/0xcf4 [ 147.736324][ C0] tcp_conntracks: [ 147.736939][ T4336] rfcomm_sock_connect+0x25c/0x57c [ 147.737885][ C0] syn=0 ack=1 fin=1 rst=0 old=3 new=4 [ 147.738775][ T4336] __sys_connect+0x28c/0x2b4 [ 147.739731][ C0] nf_conntrack: normal packet for 00000000a16da681 [ 147.740576][ T4336] __arm64_sys_connect+0x7c/0x94 [ 147.741277][ C0] tcp_conntracks: [ 147.742240][ T4336] invoke_syscall+0x98/0x290 [ 147.743263][ C0] syn=0 ack=1 fin=0 rst=0 old=4 new=5 [ 147.744104][ T4336] el0_svc_common+0x13c/0x258 [ 147.745353][ C0] nf_conntrack: normal packet for 00000000a16da681 [ 147.746284][ T4336] do_el0_svc+0x5c/0x134 [ 147.746963][ C0] tcp_conntracks: [ 147.747916][ T4336] el0_svc+0x58/0x128 [ 147.748900][ C0] syn=0 ack=1 fin=0 rst=0 old=5 new=5 [ 147.749823][ T4336] el0t_64_sync_handler+0x84/0xf0 [ 147.751104][ C0] nf_conntrack: normal packet for 00000000a16da681 [ 147.751917][ T4336] el0t_64_sync+0x18c/0x190 [ 147.752610][ C0] tcp_conntracks: [ 147.753402][ T4336] [ 147.753402][ T4336] -> #0 (rfcomm_mutex){+.+.}-{3:3} [ 147.754374][ C0] syn=0 ack=1 fin=0 rst=0 old=5 new=5 [ 147.755380][ T4336] : [ 147.755386][ T4336] __lock_acquire+0x2808/0x6634 [ 147.757257][ T4483] nf_conntrack: new packet for 00000000e2cdc315 [ 147.757425][ T4336] lock_acquire+0x20c/0x638 [ 147.758054][ T4483] nf_conntrack: Altering reply tuple of 00000000e2cdc315 to [ 147.759326][ T4336] __mutex_lock_common+0x1a0/0x1f3c [ 147.760256][ T4483] nf_conntrack: Confirming conntrack 00000000e2cdc315 [ 147.760642][ T4336] mutex_lock_nested+0x38/0x44 [ 147.762732][ T4483] nf_conntrack: new packet for 0000000063ba8012 [ 147.763403][ T4336] rfcomm_security_cfm+0x9c/0x674 [ 147.763427][ T4336] hci_auth_complete_evt+0x2e4/0xa68 [ 147.764913][ T4483] nf_nat: Already setup manip DST for ct 0000000063ba8012 (status bits 0x198) [ 147.765873][ T4336] hci_event_packet+0x698/0xe60 [ 147.767063][ T4483] nf_nat: Already setup manip SRC for ct 0000000063ba8012 (status bits 0x198) [ 147.767891][ T4336] hci_rx_work+0x310/0xa70 [ 147.771154][ T6200] kcov: kcov_task_exit: t = ffff0000db589c00, kcov->t = ffff0000db589c00 [ 147.772294][ T4336] process_one_work+0x7e4/0x13bc [ 147.773581][ T4381] nf_conntrack: normal packet for 000000001ef5483f [ 147.774795][ T4336] worker_thread+0x8cc/0xfe8 [ 147.777627][ T6242] kcov: kcov_start: t = ffff0000d4b81c00, size = 524288, area = ffff800028bda000 [ 147.777942][ T4336] kthread+0x254/0x2e0 [ 147.779892][ T6243] kcov: kcov_start: t = ffff0000ca7b9c00, size = 524288, area = ffff8000229ba000 [ 147.780015][ T4336] ret_from_fork+0x10/0x20 [ 147.785166][ T4336] [ 147.785166][ T4336] other info that might help us debug this: [ 147.785166][ T4336] [ 147.786975][ T4336] Chain exists of: [ 147.786975][ T4336] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 147.786975][ T4336] [ 147.789229][ T4336] Possible unsafe locking scenario: [ 147.789229][ T4336] [ 147.790476][ T4336] CPU0 CPU1 [ 147.791344][ T4336] ---- ---- [ 147.792253][ T4336] lock(hci_cb_list_lock); [ 147.793034][ T4336] lock(&hdev->lock); [ 147.794180][ T4336] lock(hci_cb_list_lock); [ 147.795393][ T4336] lock(rfcomm_mutex); [ 147.796132][ T4336] [ 147.796132][ T4336] *** DEADLOCK *** [ 147.796132][ T4336] [ 147.797532][ T4336] 4 locks held by kworker/u5:2/4336: [ 147.798459][ T4336] #0: ffff0000d4a09138 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x69c/0x13bc [ 147.800326][ T4336] #1: ffff800020af7c40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x6e8/0x13bc [ 147.802414][ T4336] #2: ffff0000d0620428 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x94/0xa68 [ 147.804190][ T4336] #3: ffff800017b94328 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x280/0xa68 [ 147.806087][ T4336] [ 147.806087][ T4336] stack backtrace: [ 147.807153][ T4336] CPU: 1 PID: 4336 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 147.808528][ T4336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 147.810272][ T4336] Workqueue: hci1 hci_rx_work [ 147.811131][ T4336] dump_backtrace(regs = 0000000000000000 tsk = 0000000000000000) [ 147.812515][ T4336] Call trace: [ 147.813083][ T4336] dump_backtrace+0x1c4/0x1f0 [ 147.813902][ T4336] show_stack+0x2c/0x3c [ 147.814648][ T4336] __dump_stack+0x30/0x40 [ 147.815409][ T4336] dump_stack_lvl+0xf4/0x15c [ 147.816212][ T4336] dump_stack+0x1c/0x5c [ 147.816946][ T4336] print_circular_bug+0x148/0x1b0 [ 147.817815][ T4336] check_noncircular+0x264/0x2f8 [ 147.818739][ T4336] __lock_acquire+0x2808/0x6634 [ 147.819617][ T4336] lock_acquire+0x20c/0x638 [ 147.820372][ T4336] __mutex_lock_common+0x1a0/0x1f3c [ 147.821335][ T4336] mutex_lock_nested+0x38/0x44 [ 147.822242][ T4336] rfcomm_security_cfm+0x9c/0x674 [ 147.823146][ T4336] hci_auth_complete_evt+0x2e4/0xa68 [ 147.824157][ T4336] hci_event_packet+0x698/0xe60 [ 147.825041][ T4336] hci_rx_work+0x310/0xa70 [ 147.825874][ T4336] process_one_work+0x7e4/0x13bc [ 147.826810][ T4336] worker_thread+0x8cc/0xfe8 [ 147.827670][ T4336] kthread+0x254/0x2e0 [ 147.828453][ T4336] ret_from_fork+0x10/0x20 [ 147.830081][ T4317] nf_conntrack: normal packet for 00000000a16da681 [ 147.831217][ T4317] tcp_conntracks: [ 147.831235][ T4317] syn=0 ack=1 fin=0 rst=0 old=5 new=5 [ 147.834585][ T4531] bond4: bond_netdev_event received NETDEV_CHANGE [ 147.835757][ T4531] bond4: bond_master_netdev_event called [ 147.836666][ T4531] bond3: (slave bond4): bond_slave_netdev_event called [ 147.836678][ T6245] kcov: kcov_start: t = ffff0000ceaf0000, size = 524288, area = ffff80002abe2000 [ 147.839226][ T4531] net bond4: siw: event 4 [ 147.840183][ T4531] bond3: bond_netdev_event received NETDEV_CHANGE [ 147.841206][ T4531] bond3: bond_master_netdev_event called [ 147.842055][ T4531] net bond3: siw: event 4 [ 147.842775][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 147.844713][ T6239] kcov: kcov_task_exit: t = ffff0000db211c00, kcov->t = ffff0000db211c00 [ 147.846456][ T6243] kcov: kcov_task_exit: t = ffff0000ca7b9c00, kcov->t = ffff0000ca7b9c00 [ 147.847675][ T4336] hcon 00000000a2a859fb orig refcnt 0 [ 147.848703][ T4336] hcon 00000000a2a859fb orig refcnt 1 [ 147.849557][ T4336] kcov: kcov_move_area: ffff80002ebf1000 1048576 <= ffff800032bfd000 1048575 [ 147.853821][ T1753] nf_conntrack: normal packet for 000000001b788aa5 [ 147.854807][ T6176] kcov: kcov_task_exit: t = ffff0000ffdb5400, kcov->t = ffff0000ffdb5400 [ 147.857342][ T4531] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::e4c3:11ff:febd:adc3 in wq:00000000baccbab7 [ 147.860573][ T4531] bond3: bond_netdev_event received NETDEV_CHANGE [ 147.861689][ T4531] bond3: bond_master_netdev_event called [ 147.862568][ T4531] net bond3: siw: event 4 [ 147.863932][ T6245] syzkaller0 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 147.865536][ T6245] (null): siw: event 17 [ 147.866321][ T6245] device: 'syzkaller0': device_add [ 147.867280][ T6245] kobject: 'syzkaller0' (00000000b213671d): kobject_add_internal: parent: 'net', set: 'devices' [ 147.869095][ T6245] net syzkaller0: No ACPI support [ 147.870155][ T6245] PM: Adding info for No Bus:syzkaller0 [ 147.871117][ T6245] kobject: 'syzkaller0' (00000000b213671d): kobject_uevent_env [ 147.873289][ T6176] sctp: sctp_close: sk:000000005f8f3927, timeout:0 [ 147.874553][ T6176] sctp: sctp_do_sm[pre-fn]: ep:00000000609e69c2, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:00000000e6425218[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 147.877757][ T6245] kobject: 'syzkaller0' (00000000b213671d): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 147.879549][ T6245] kobject: 'queues' (00000000481d4dee): kobject_add_internal: parent: 'syzkaller0', set: '' [ 147.881187][ T6245] kobject: 'queues' (00000000481d4dee): kobject_uevent_env [ 147.882303][ T6245] kobject: 'queues' (00000000481d4dee): kobject_uevent_env: filter function caused the event to drop! [ 147.884229][ T6176] sctp: sctp_do_sm[post-fn]: asoc:00000000e6425218, status:DISPOSITION_DELETE_TCB [ 147.885788][ T6176] sctp: sctp_cmd_new_state: asoc:00000000e6425218[STATE_CLOSED] [ 147.887340][ T6176] sctp: sctp_packet_free: packet:000000006c718f02 [ 147.888578][ T6176] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 147.890020][ T6176] sctp: sctp_do_sm[pre-fn]: ep:00000000609e69c2, EVENT_T_PRIMITIVE, PRIMITIVE_SHUTDOWN, asoc:00000000b18b2ea3[STATE_COOKIE_WAIT], sctp_sf_cookie_wait_prm_shutdown [ 147.893334][ T6245] kobject: 'rx-0' (000000006cea8bbe): kobject_add_internal: parent: 'queues', set: 'queues' [ 147.893410][ T24] nf_conntrack: new packet for 0000000063ba8012 [ 147.895386][ T6246] kcov: kcov_start: t = ffff0000ceaf1c00, size = 524288, area = ffff80002b7e5000 [ 147.896337][ T24] nf_nat: Already setup manip DST for ct 0000000063ba8012 (status bits 0x198) [ 147.898186][ T6245] kobject: 'rx-0' (000000006cea8bbe): kobject_uevent_env [ 147.899391][ T24] nf_nat: Already setup manip SRC for ct 0000000063ba8012 (status bits 0x198) [ 147.900612][ T6245] kobject: 'rx-0' (000000006cea8bbe): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 147.903960][ T6176] sctp: sctp_do_sm[post-fn]: asoc:00000000b18b2ea3, status:DISPOSITION_DELETE_TCB [ 147.905629][ T6176] sctp: sctp_cmd_new_state: asoc:00000000b18b2ea3[STATE_CLOSED] [ 147.907201][ T6176] sctp: sctp_packet_free: packet:0000000010d3fd19 [ 147.908579][ C0] tcp_conntracks: [ 147.908590][ C0] syn=0 ack=0 fin=0 rst=1 old=5 new=8 [ 147.911171][ T6176] sctp: sctp_do_sm[post-sfx]: error:0, asoc:0000000000000000[STATE_CLOSED] [ 147.912834][ T6176] sctp: sctp_destroy_sock: sk:000000005f8f3927 [ 147.916822][ T6247] kcov: kcov_start: t = ffff0000ceaf5400, size = 524288, area = ffff8000293dc000 [ 147.920025][ T6245] kobject: 'tx-0' (0000000060adf7e3): kobject_add_internal: parent: 'queues', set: 'queues' [ 147.921840][ T6245] kobject: 'tx-0' (0000000060adf7e3): kobject_uevent_env [ 147.923112][ T6245] kobject: 'tx-0' (0000000060adf7e3): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 147.937444][ T6247] kcov: kcov_task_exit: t = ffff0000ceaf5400, kcov->t = ffff0000ceaf5400 [ 147.939303][ T6242] kcov: kcov_task_exit: t = ffff0000d4b81c00, kcov->t = ffff0000d4b81c00 [ 147.944079][ T6245] syzkaller0: Features changed: 0x00002000001558c9 -> 0x00002000000058c1 [ 147.945665][ T6245] Registering net sysctl (net 000000001bab7bc0): net/ipv4/neigh/syzkaller0 [ 147.947229][ T6245] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000005f08ff68 [ 147.958175][ T6245] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000ac3c9499 [ 147.960487][ T6248] kcov: kcov_start: t = ffff0000d8a9d400, size = 524288, area = ffff80002cbe9000 [ 147.962088][ T6248] sctp: sctp_init_sock: sk:00000000d90c07e1 [ 147.965033][ T6245] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000d63f1975 [ 147.966930][ T6245] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000002ee4c6c9 [ 147.969079][ T6245] procname=retrans_time mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000a069d224 [ 147.971008][ T6245] procname=base_reachable_time mode=644 proc_handler=neigh_proc_base_reachable_time data=000000004ea889f3 [ 147.974273][ T6245] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=000000000d6d8d7c [ 147.976260][ T6245] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=00000000e44a0f70 [ 147.978245][ T6245] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=0000000005d4ad5e [ 147.980350][ T6245] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000003ccb3b1b [ 147.982457][ T6245] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000bfa49ac6 [ 147.985586][ T6245] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000ff861a4e [ 147.987718][ T6245] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=0000000058e67c7f [ 147.989638][ T6245] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000f0868cd9 [ 147.991492][ T6245] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=000000003ccb3b1b [ 147.993925][ T6245] procname=retrans_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies data=00000000a069d224 [ 147.995722][ T6245] procname=base_reachable_time_ms mode=644 proc_handler=neigh_proc_base_reachable_time data=000000004ea889f3 [ 147.997721][ T6245] Registering net sysctl (net 000000001bab7bc0): net/ipv4/conf/syzkaller0 [ 147.999069][ T6245] procname=forwarding mode=644 proc_handler=devinet_sysctl_forward data=0000000097d5d7f3 [ 148.000678][ T6245] procname=mc_forwarding mode=444 proc_handler=devinet_conf_proc data=00000000ebcc4ba6 [ 148.002406][ T6245] Not writable by anyone [ 148.003257][ T6245] procname=bc_forwarding mode=644 proc_handler=devinet_conf_proc data=000000003dc9edf7 [ 148.005109][ T6245] procname=accept_redirects mode=644 proc_handler=devinet_conf_proc data=00000000de0f3856 [ 148.006750][ T6245] procname=secure_redirects mode=644 proc_handler=devinet_conf_proc data=0000000071eeeabf [ 148.008330][ T6245] procname=shared_media mode=644 proc_handler=devinet_conf_proc data=000000003ee86b53 [ 148.009910][ T6245] procname=rp_filter mode=644 proc_handler=devinet_conf_proc data=00000000aa8687de [ 148.011518][ T6245] procname=send_redirects mode=644 proc_handler=devinet_conf_proc data=00000000d680670d [ 148.013968][ T6245] procname=accept_source_route mode=644 proc_handler=devinet_conf_proc data=0000000073d44d9c [ 148.017226][ T6245] procname=accept_local mode=644 proc_handler=devinet_conf_proc data=000000001406f2c3 [ 148.018957][ T6245] procname=src_valid_mark mode=644 proc_handler=devinet_conf_proc data=00000000dc5778be [ 148.020723][ T6245] procname=proxy_arp mode=644 proc_handler=devinet_conf_proc data=00000000dd22e02c [ 148.022437][ T6245] procname=medium_id mode=644 proc_handler=devinet_conf_proc data=00000000de7eb423 [ 148.024363][ T6249] kcov: kcov_start: t = ffff0000c4a8b800, size = 524288, area = ffff80002cfea000 [ 148.026318][ T6245] procname=bootp_relay mode=644 proc_handler=devinet_conf_proc data=000000009273e0a2 [ 148.028109][ T6245] procname=log_martians mode=644 proc_handler=devinet_conf_proc data=000000009bd101ce [ 148.029936][ T6245] procname=tag mode=644 proc_handler=devinet_conf_proc data=00000000136cdd48 [ 148.031502][ T6245] procname=arp_filter mode=644 proc_handler=devinet_conf_proc data=00000000884afc5d [ 148.033267][ T6245] procname=arp_announce mode=644 proc_handler=devinet_conf_proc data=000000006440260a [ 148.035057][ T6245] procname=arp_ignore mode=644 proc_handler=devinet_conf_proc data=0000000031064639 [ 148.036760][ T6245] procname=arp_accept mode=644 proc_handler=devinet_conf_proc data=0000000057b1c5a7 [ 148.038284][ T6245] procname=arp_notify mode=644 proc_handler=devinet_conf_proc data=0000000017068e5e [ 148.039873][ T6245] procname=arp_evict_nocarrier mode=644 proc_handler=devinet_conf_proc data=000000006371d38d [ 148.041446][ T6245] procname=proxy_arp_pvlan mode=644 proc_handler=devinet_conf_proc data=0000000095ba3bac [ 148.042970][ T6245] procname=force_igmp_version mode=644 proc_handler=devinet_conf_proc data=000000000cb18e74 [ 148.044796][ T6245] procname=igmpv2_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=00000000533e495f [ 148.044998][ T4531] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 148.046916][ T6245] procname=igmpv3_unsolicited_report_interval mode=644 proc_handler=devinet_conf_proc data=00000000a2fdd44e [ 148.050175][ T6245] procname=ignore_routes_with_linkdown mode=644 proc_handler=devinet_conf_proc data=00000000363b6fdb [ 148.051868][ T6245] procname=drop_gratuitous_arp mode=644 proc_handler=devinet_conf_proc data=00000000387fc55c [ 148.053558][ T6245] procname=disable_xfrm mode=644 proc_handler=ipv4_doint_and_flush data=000000008d69012a [ 148.055184][ T6245] procname=disable_policy mode=644 proc_handler=ipv4_doint_and_flush data=000000000bf8b9fe [ 148.056802][ T6245] procname=promote_secondaries mode=644 proc_handler=ipv4_doint_and_flush data=000000009a74f086 [ 148.058814][ T6245] procname=route_localnet mode=644 proc_handler=ipv4_doint_and_flush data=000000005a8da505 [ 148.060456][ T6245] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=ipv4_doint_and_flush data=000000009f015d5e [ 148.062315][ T6245] syzkaller0: bond_netdev_event received NETDEV_REGISTER [ 148.064813][ T6245] net syzkaller0: siw: event 5 [ 148.065791][ T6245] Registering net sysctl (net 000000001bab7bc0): net/ipv6/neigh/syzkaller0 [ 148.067310][ T6245] procname=mcast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000000f3cb8d7 [ 148.069365][ T6245] procname=ucast_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000d165e8a9 [ 148.071222][ T6245] procname=app_solicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000009c01c3ff [ 148.073088][ T6245] procname=mcast_resolicit mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=000000002c9f7b68 [ 148.075599][ T6245] procname=retrans_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=000000001b5453a8 [ 148.080016][ T6245] procname=base_reachable_time mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=000000007c96d719 [ 148.081637][ T6245] procname=delay_first_probe_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=000000005ac33feb [ 148.083532][ T6245] procname=interval_probe_time_ms mode=644 proc_handler=neigh_proc_dointvec_ms_jiffies_positive data=0000000071be6be2 [ 148.085424][ T6245] procname=gc_stale_time mode=644 proc_handler=neigh_proc_dointvec_jiffies data=00000000ab87cb77 [ 148.087055][ T6245] procname=unres_qlen_bytes mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=00000000ba9250c2 [ 148.088800][ T6245] procname=proxy_qlen mode=644 proc_handler=neigh_proc_dointvec_zero_intmax data=0000000076e3604b [ 148.090778][ T6250] kcov: kcov_start: t = ffff000102505400, size = 524288, area = ffff8000303f5000 [ 148.092527][ T6245] procname=anycast_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000bffc16b4 [ 148.094600][ T6245] procname=proxy_delay mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000f64cad71 [ 148.096457][ T6245] procname=locktime mode=644 proc_handler=neigh_proc_dointvec_userhz_jiffies data=00000000cd4800a2 [ 148.098277][ T6245] procname=unres_qlen mode=644 proc_handler=neigh_proc_dointvec_unres_qlen data=00000000ba9250c2 [ 148.100094][ T6245] procname=retrans_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=000000001b5453a8 [ 148.102138][ T6245] procname=base_reachable_time_ms mode=644 proc_handler=ndisc_ifinfo_sysctl_change data=000000007c96d719 [ 148.104411][ T6245] Registering net sysctl (net 000000001bab7bc0): net/ipv6/conf/syzkaller0 [ 148.105915][ T6245] procname=forwarding mode=644 proc_handler=addrconf_sysctl_forward data=000000009c997a43 [ 148.107665][ T6245] procname=hop_limit mode=644 proc_handler=proc_dointvec_minmax data=0000000091b2af07 [ 148.109343][ T6245] procname=mtu mode=644 proc_handler=addrconf_sysctl_mtu data=00000000f009ddab [ 148.110815][ T6245] procname=accept_ra mode=644 proc_handler=proc_dointvec data=00000000a9b777ab [ 148.112452][ T6245] procname=accept_redirects mode=644 proc_handler=proc_dointvec data=00000000180228d4 [ 148.114459][ T6245] procname=autoconf mode=644 proc_handler=proc_dointvec data=00000000af91e0a1 [ 148.115967][ T6245] procname=dad_transmits mode=644 proc_handler=proc_dointvec data=000000004eb7ebb5 [ 148.117452][ T6245] procname=router_solicitations mode=644 proc_handler=proc_dointvec_minmax data=0000000009cf076d [ 148.119144][ T6245] procname=router_solicitation_interval mode=644 proc_handler=proc_dointvec_jiffies data=000000007dc7882e [ 148.120943][ T6245] procname=router_solicitation_max_interval mode=644 proc_handler=proc_dointvec_jiffies data=0000000098068156 [ 148.122960][ T6245] procname=router_solicitation_delay mode=644 proc_handler=proc_dointvec_jiffies data=00000000a6ad4a80 [ 148.124886][ T6245] procname=force_mld_version mode=644 proc_handler=proc_dointvec data=0000000044694117 [ 148.126460][ T6245] procname=mldv1_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=0000000038442f3a [ 148.128343][ T6245] procname=mldv2_unsolicited_report_interval mode=644 proc_handler=proc_dointvec_ms_jiffies data=00000000adea8ed7 [ 148.131873][ T6245] procname=use_tempaddr mode=644 proc_handler=proc_dointvec data=0000000071df3566 [ 148.133806][ T6245] procname=temp_valid_lft mode=644 proc_handler=proc_dointvec data=00000000c7d6de2a [ 148.135514][ T6245] procname=temp_prefered_lft mode=644 proc_handler=proc_dointvec data=0000000006f24bb1 [ 148.137114][ T6245] procname=regen_max_retry mode=644 proc_handler=proc_dointvec data=000000006e2a572e [ 148.138724][ T6245] procname=max_desync_factor mode=644 proc_handler=proc_dointvec data=00000000414fe793 [ 148.140396][ T6245] procname=max_addresses mode=644 proc_handler=proc_dointvec data=0000000059f32b65 [ 148.141930][ T6245] procname=accept_ra_defrtr mode=644 proc_handler=proc_dointvec data=000000005cecbbdb [ 148.143619][ T6251] kcov: kcov_start: t = ffff000102503800, size = 524288, area = ffff800030bf7000 [ 148.145887][ T6245] procname=ra_defrtr_metric mode=644 proc_handler=proc_douintvec_minmax data=00000000c14ff24a [ 148.147713][ T6245] procname=accept_ra_min_hop_limit mode=644 proc_handler=proc_dointvec data=00000000883934d6 [ 148.149545][ T6245] procname=accept_ra_min_lft mode=644 proc_handler=proc_dointvec data=00000000e12c45b4 [ 148.151206][ T6245] procname=accept_ra_pinfo mode=644 proc_handler=proc_dointvec data=00000000d734a819 [ 148.152820][ T6245] procname=accept_ra_rtr_pref mode=644 proc_handler=proc_dointvec data=00000000664f29f2 [ 148.154664][ T6245] procname=router_probe_interval mode=644 proc_handler=proc_dointvec_jiffies data=00000000a28fa8b3 [ 148.156691][ T6245] procname=accept_ra_rt_info_min_plen mode=644 proc_handler=proc_dointvec data=00000000c0519b0e [ 148.158487][ T6245] procname=accept_ra_rt_info_max_plen mode=644 proc_handler=proc_dointvec data=000000001b0fba3c [ 148.160335][ T6245] procname=proxy_ndp mode=644 proc_handler=addrconf_sysctl_proxy_ndp data=000000000381a418 [ 148.162047][ T6245] procname=accept_source_route mode=644 proc_handler=proc_dointvec data=00000000ee4e51cc [ 148.163720][ T6245] procname=optimistic_dad mode=644 proc_handler=proc_dointvec data=000000000e225a17 [ 148.165399][ T6245] procname=use_optimistic mode=644 proc_handler=proc_dointvec data=00000000da3944da [ 148.167167][ T6245] procname=mc_forwarding mode=444 proc_handler=proc_dointvec data=000000006443dbab [ 148.168780][ T6245] Not writable by anyone [ 148.169494][ T6245] procname=disable_ipv6 mode=644 proc_handler=addrconf_sysctl_disable data=0000000069e250b6 [ 148.171426][ T6245] procname=accept_dad mode=644 proc_handler=proc_dointvec data=0000000075eda92b [ 148.172940][ T6245] procname=force_tllao mode=644 proc_handler=proc_dointvec data=00000000fc5097a4 [ 148.174706][ T6245] procname=ndisc_notify mode=644 proc_handler=proc_dointvec data=000000001c741564 [ 148.176548][ T6245] procname=suppress_frag_ndisc mode=644 proc_handler=proc_dointvec data=000000009f2790e7 [ 148.178642][ T6245] procname=accept_ra_from_local mode=644 proc_handler=proc_dointvec data=0000000078a329d2 [ 148.180594][ T6245] procname=accept_ra_mtu mode=644 proc_handler=proc_dointvec data=00000000cfa78ee9 [ 148.182177][ T6245] procname=stable_secret mode=600 proc_handler=addrconf_sysctl_stable_secret data=00000000591a2979 [ 148.184205][ T6245] procname=use_oif_addrs_only mode=644 proc_handler=proc_dointvec data=0000000072b3f9f1 [ 148.185946][ T6245] procname=ignore_routes_with_linkdown mode=644 proc_handler=addrconf_sysctl_ignore_routes_with_linkdown data=000000002449462f [ 148.188156][ T6245] procname=drop_unicast_in_l2_multicast mode=644 proc_handler=proc_dointvec data=0000000099e1a7dc [ 148.190276][ T6245] procname=drop_unsolicited_na mode=644 proc_handler=proc_dointvec data=00000000a1566de3 [ 148.192293][ T6245] procname=keep_addr_on_down mode=644 proc_handler=proc_dointvec data=0000000084e4503e [ 148.194135][ T6245] procname=seg6_enabled mode=644 proc_handler=proc_dointvec data=00000000a081d0f2 [ 148.195754][ T6245] procname=seg6_require_hmac mode=644 proc_handler=proc_dointvec data=0000000042f818d5 [ 148.197513][ T6245] procname=enhanced_dad mode=644 proc_handler=proc_dointvec data=00000000d04eeb30 [ 148.199200][ T6245] procname=addr_gen_mode mode=644 proc_handler=addrconf_sysctl_addr_gen_mode data=00000000933e0aa0 [ 148.201171][ T6245] procname=disable_policy mode=644 proc_handler=addrconf_sysctl_disable_policy data=00000000c159f5dc [ 148.203277][ T6245] procname=ndisc_tclass mode=644 proc_handler=proc_dointvec_minmax data=000000007f378a59 [ 148.205108][ T6245] procname=rpl_seg_enabled mode=644 proc_handler=proc_dointvec_minmax data=0000000025cf1110 [ 148.206911][ T6245] procname=ioam6_enabled mode=644 proc_handler=proc_dou8vec_minmax data=00000000d9cb2105 [ 148.208743][ T6245] procname=ioam6_id mode=644 proc_handler=proc_douintvec_minmax data=00000000465d7407 [ 148.210378][ T6245] procname=ioam6_id_wide mode=644 proc_handler=proc_douintvec data=00000000eaae7c9a [ 148.212138][ T6245] procname=ndisc_evict_nocarrier mode=644 proc_handler=proc_dou8vec_minmax data=00000000ddec0415 [ 148.214128][ T6245] procname=accept_untracked_na mode=644 proc_handler=proc_dointvec_minmax data=0000000080cfe6b3 [ 148.216084][ T6245] Registering net sysctl (net 000000001bab7bc0): net/mpls/conf/syzkaller0 [ 148.217441][ T6245] procname=input mode=644 proc_handler=mpls_conf_proc data=000000008288f1ee [ 148.219130][ T6248] syzkaller0: bond_netdev_event received NETDEV_PRE_UP [ 148.220347][ T6248] net syzkaller0: siw: event 14 [ 148.221171][ T6248] device syzkaller0 entered promiscuous mode [ 148.228696][ T6248] syzkaller0: bond_netdev_event received NETDEV_UP [ 148.230003][ T6248] net syzkaller0: siw: event 1 [ 148.231022][ T6248] sctp: sctp_addr_wq_mgmt: add new entry for cmd:0, addr:fe80::bc65:6358:a32:5c18 in wq:00000000aca38774 [ 148.233418][ T6248] syzkaller0: bond_netdev_event received NETDEV_CHANGE [ 148.234538][ T6248] net syzkaller0: siw: event 4 [ 148.313494][ T6244] sctp: sctp_close: sk:00000000d90c07e1, timeout:0 [ 148.314937][ T6244] sctp: sctp_destroy_sock: sk:00000000d90c07e1 [ 148.316099][ T6244] syzkaller0: bond_netdev_event received NETDEV_GOING_DOWN [ 148.317339][ T6244] net syzkaller0: siw: event 10 [ 148.318465][ T6244] syzkaller0: bond_netdev_event received NETDEV_DOWN [ 148.319682][ T6244] net syzkaller0: siw: event 2 [ 148.322729][ T6244] sctp: sctp_addr_wq_mgmt: offsets existing entry for 0, addr:fe80::bc65:6358:a32:5c18 in wq:00000000aca38774 [ 148.335607][ T6235] kcov: kcov_task_exit: t = ffff0000c72fd400, kcov->t = ffff0000c72fd400 [ 148.337428][ T6240] kcov: kcov_task_exit: t = ffff000102fe1c00, kcov->t = ffff000102fe1c00 [ 148.373220][ C1] sctp: sctp_addr_wq_timeout_handler: the first ent in wq:00000000baccbab7 is addr:fe80::e4c3:11ff:febd:adc3 for cmd:0 at entry:00000000f033b6c2 [ 148.413423][ T6244] syzkaller0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 148.414936][ T6244] net syzkaller0: siw: event 6 [ 148.416360][ T6244] kobject: 'rx-0' (000000006cea8bbe): kobject_cleanup, parent 00000000481d4dee [ 148.417843][ T6244] kobject: 'rx-0' (000000006cea8bbe): auto cleanup kobject_del [ 148.419245][ T6244] kernfs rps_cpus: removing [ 148.420195][ T6244] kernfs rps_flow_cnt: removing [ 148.421026][ T6244] kobject: 'rx-0' (000000006cea8bbe): auto cleanup 'remove' event [ 148.422332][ T6244] kobject: 'rx-0' (000000006cea8bbe): kobject_uevent_env [ 148.423593][ T6244] kobject: 'rx-0' (000000006cea8bbe): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/rx-0' [ 148.425876][ T6244] kernfs rx-0: removing [ 148.426566][ T6244] kobject: 'rx-0' (000000006cea8bbe): calling ktype release [ 148.427830][ T6244] kobject: 'rx-0': free name [ 148.428618][ T6244] kernfs limit: removing [ 148.429270][ T6244] kernfs limit_max: removing [ 148.430093][ T6244] kernfs limit_min: removing [ 148.430803][ T6244] kernfs hold_time: removing [ 148.431534][ T6244] kernfs inflight: removing [ 148.432267][ T6244] kernfs byte_queue_limits: removing [ 148.433115][ T6244] kobject: 'tx-0' (0000000060adf7e3): kobject_cleanup, parent 00000000481d4dee [ 148.434764][ T6244] kobject: 'tx-0' (0000000060adf7e3): auto cleanup kobject_del [ 148.436144][ T6244] kernfs tx_timeout: removing [ 148.436974][ T6244] kernfs traffic_class: removing [ 148.437801][ T6244] kernfs xps_cpus: removing [ 148.438633][ T6244] kernfs xps_rxqs: removing [ 148.439456][ T6244] kernfs tx_maxrate: removing [ 148.440264][ T6244] kobject: 'tx-0' (0000000060adf7e3): auto cleanup 'remove' event [ 148.441531][ T6244] kobject: 'tx-0' (0000000060adf7e3): kobject_uevent_env [ 148.442691][ T6244] kobject: 'tx-0' (0000000060adf7e3): fill_kobj_path: path = '/devices/virtual/net/syzkaller0/queues/tx-0' [ 148.444973][ T6244] kernfs tx-0: removing [ 148.445750][ T6244] kobject: 'tx-0' (0000000060adf7e3): calling ktype release [ 148.447031][ T6244] kobject: 'tx-0': free name [ 148.447816][ T6244] kernfs queues: removing [ 148.448570][ T6244] kobject: 'queues' (00000000481d4dee): kobject_cleanup, parent 0000000000000000 [ 148.450182][ T6244] kobject: 'queues' (00000000481d4dee): calling ktype release [ 148.451636][ T6244] kobject: 'queues' (00000000481d4dee): kset_release [ 148.452751][ T6244] kobject: 'queues': free name [ 148.453896][ T6244] kernfs runtime_status: removing [ 148.454841][ T6244] kernfs control: removing [ 148.455671][ T6244] kernfs runtime_suspended_time: removing [ 148.456594][ T6244] kernfs runtime_active_time: removing [ 148.457539][ T6244] kernfs autosuspend_delay_ms: removing [ 148.458480][ T6244] kernfs power: removing [ 148.459180][ T6244] kernfs subsystem: removing [ 148.459902][ T6244] kernfs syzkaller0: removing [ 148.460771][ T6244] kernfs uevent: removing [ 148.461539][ T6244] kernfs tun_flags: removing [ 148.462301][ T6244] kernfs owner: removing [ 148.462988][ T6244] kernfs group: removing [ 148.464011][ T6244] kernfs rx_packets: removing [ 148.464859][ T6244] kernfs tx_packets: removing [ 148.465721][ T6244] kernfs rx_bytes: removing [ 148.466461][ T6244] kernfs tx_bytes: removing [ 148.467218][ T6244] kernfs rx_errors: removing [ 148.468006][ T6244] kernfs tx_errors: removing [ 148.468737][ T6244] kernfs rx_dropped: removing [ 148.469495][ T6244] kernfs tx_dropped: removing [ 148.470275][ T6244] kernfs multicast: removing [ 148.471152][ T6244] kernfs collisions: removing [ 148.471977][ T6244] kernfs rx_length_errors: removing [ 148.472856][ T6244] kernfs rx_over_errors: removing [ 148.473916][ T6244] kernfs rx_crc_errors: removing [ 148.474900][ T6244] kernfs rx_frame_errors: removing [ 148.475825][ T6244] kernfs rx_fifo_errors: removing [ 148.476726][ T6244] kernfs rx_missed_errors: removing [ 148.477643][ T6244] kernfs tx_aborted_errors: removing [ 148.478549][ T6244] kernfs tx_carrier_errors: removing [ 148.479432][ T6244] kernfs tx_fifo_errors: removing [ 148.480231][ T6244] kernfs tx_heartbeat_errors: removing [ 148.481099][ T6244] kernfs tx_window_errors: removing [ 148.482103][ T6244] kernfs rx_compressed: removing [ 148.482950][ T6244] kernfs tx_compressed: removing [ 148.484350][ T6244] kernfs rx_nohandler: removing [ 148.485244][ T6244] kernfs statistics: removing [ 148.486133][ T6244] kernfs netdev_group: removing [ 148.487079][ T6244] kernfs type: removing [ 148.487870][ T6244] kernfs dev_id: removing [ 148.488713][ T6244] kernfs dev_port: removing [ 148.489613][ T6244] kernfs iflink: removing [ 148.490474][ T6244] kernfs ifindex: removing [ 148.491272][ T6244] kernfs name_assign_type: removing [ 148.492373][ T6244] kernfs addr_assign_type: removing [ 148.493395][ T6244] kernfs addr_len: removing [ 148.494395][ T6244] kernfs link_mode: removing [ 148.495203][ T6244] kernfs address: removing [ 148.496002][ T6244] kernfs broadcast: removing [ 148.496826][ T6244] kernfs speed: removing [ 148.497595][ T6244] kernfs duplex: removing [ 148.498332][ T6244] kernfs dormant: removing [ 148.499079][ T6244] kernfs testing: removing [ 148.499808][ T6244] kernfs operstate: removing [ 148.500610][ T6244] kernfs carrier_changes: removing [ 148.501458][ T6244] kernfs ifalias: removing [ 148.502175][ T6244] kernfs carrier: removing [ 148.503027][ T6244] kernfs mtu: removing [ 148.503854][ T6244] kernfs flags: removing [ 148.504738][ T6244] kernfs tx_queue_len: removing [ 148.505559][ T6244] kernfs gro_flush_timeout: removing [ 148.506409][ T6244] kernfs napi_defer_hard_irqs: removing [ 148.507297][ T6244] kernfs phys_port_id: removing [ 148.508095][ T6244] kernfs phys_port_name: removing [ 148.508889][ T6244] kernfs phys_switch_id: removing [ 148.509707][ T6244] kernfs proto_down: removing [ 148.510433][ T6244] kernfs carrier_up_count: removing [ 148.511256][ T6244] kernfs carrier_down_count: removing [ 148.512325][ T6244] kernfs threaded: removing [ 148.513681][ T6244] PM: Removing info for No Bus:syzkaller0 [ 148.514609][ T6244] kobject: 'syzkaller0' (00000000b213671d): kobject_uevent_env [ 148.516289][ T6244] kobject: 'syzkaller0' (00000000b213671d): fill_kobj_path: path = '/devices/virtual/net/syzkaller0' [ 148.517991][ T6244] kernfs syzkaller0: removing [ 148.553431][ T6244] kobject: 'syzkaller0' (00000000b213671d): kobject_cleanup, parent 0000000000000000 [ 148.555272][ T6244] kobject: 'syzkaller0' (00000000b213671d): calling ktype release [ 148.556664][ T6244] kobject: 'syzkaller0': free name [ 148.557649][ T6245] kcov: kcov_task_exit: t = ffff0000ceaf0000, kcov->t = ffff0000ceaf0000 [ 148.559155][ T6246] kcov: kcov_task_exit: t = ffff0000ceaf1c00, kcov->t = ffff0000ceaf1c00 [ 148.560636][ T6248] kcov: kcov_task_exit: t = ffff0000d8a9d400, kcov->t = ffff0000d8a9d400 [ 148.562187][ T6249] kcov: kcov_task_exit: t = ffff0000c4a8b800, kcov->t = ffff0000c4a8b800 [ 148.563906][ T6250] kcov: kcov_task_exit: t = ffff000102505400, kcov->t = ffff000102505400 [ 148.565513][ T6251] kcov: kcov_task_exit: t = ffff000102503800, kcov->t = ffff000102503800 [ 148.643347][ T113] nf_conntrack: new packet for 0000000063ba8012 [ 148.644609][ T113] nf_nat: Already setup manip DST for ct 0000000063ba8012 (status bits 0x198) [ 148.646083][ T113] nf_nat: Already setup manip SRC for ct 0000000063ba8012 (status bits 0x198) [ 148.793290][ C0] nf_conntrack: new packet for 000000000e10b2ea [ 148.794508][ C0] nf_nat: Already setup manip DST for ct 000000000e10b2ea (status bits 0x198) [ 148.795965][ C0] nf_nat: Already setup manip SRC for ct 000000000e10b2ea (status bits 0x198) [ 148.797676][ T4483] nf_conntrack: new packet for 00000000168c1c8f [ 148.798758][ T4483] nf_conntrack: Altering reply tuple of 00000000168c1c8f to [ 148.798787][ T4483] nf_conntrack: Confirming conntrack 00000000168c1c8f [ 148.801250][ T4483] nf_conntrack: new packet for 000000003651ec95 [ 148.802319][ T4483] nf_conntrack: Altering reply tuple of 000000003651ec95 to [ 148.802342][ T4483] nf_conntrack: Confirming conntrack 000000003651ec95 [ 148.833262][ T4773] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 148.834859][ T4773] nf_conntrack: new packet for 0000000052618d9a [ 148.835925][ T4773] nf_nat: Already setup manip DST for ct 0000000052618d9a (status bits 0x198) [ 148.837405][ T4773] nf_nat: Already setup manip SRC for ct 0000000052618d9a (status bits 0x198) [ 148.953206][ C1] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 7) [ 148.955439][ T4531] net_ratelimit: 26 callbacks suppressed [ 148.955436][ C1] wireguard: wg0: Handshake for peer 18 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 8) [ 148.955450][ T4531] wireguard: wg2: Sending handshake initiation to peer 12 (127.0.0.1:20002) [ 148.956447][ T1753] wireguard: wg0: Sending handshake initiation to peer 18 ([::1]:20003/0%0) [ 148.961384][ T1753] nf_conntrack: normal packet for 000000004066f345 [ 148.963491][ T4483] nf_conntrack: new packet for 00000000168c1c8f [ 148.964604][ T4483] nf_nat: Already setup manip DST for ct 00000000168c1c8f (status bits 0x198) [ 148.966075][ T4483] nf_nat: Already setup manip SRC for ct 00000000168c1c8f (status bits 0x198) [ 149.113200][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 149.116147][ C0] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 149.173238][ T1753] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 149.593194][ C1] wireguard: wg1: Sending keepalive packet to peer 21 ([::1]:20001/0%0) [ 149.594741][ T24] nf_conntrack: normal packet for 000000002ddaa583 [ 149.753208][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 149.923237][ C1] wireguard: wg0: Sending keepalive packet to peer 17 ([::1]:20002/0%0) [ 149.943269][ T4773] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 149.944867][ T4773] nf_conntrack: new packet for 000000006399682f [ 149.946151][ T4773] nf_nat: Already setup manip DST for ct 000000006399682f (status bits 0x198) [ 149.947709][ T4773] nf_nat: Already setup manip SRC for ct 000000006399682f (status bits 0x198) [ 150.153201][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 150.154662][ C1] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 14) [ 150.156604][ T1753] wireguard: wg2: Sending handshake initiation to peer 6 (127.0.0.1:20002) [ 150.158290][ C1] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 150.283242][ T4773] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 150.793482][ T4483] nf_conntrack: normal packet for 000000001ef5483f [ 150.873398][ T4483] nf_conntrack: normal packet for 000000001b788aa5 [ 151.063251][ T9] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 151.064812][ T9] nf_conntrack: new packet for 0000000052618d9a [ 151.065806][ T9] nf_nat: Already setup manip DST for ct 0000000052618d9a (status bits 0x198) [ 151.067223][ T9] nf_nat: Already setup manip SRC for ct 0000000052618d9a (status bits 0x198) [ 151.403429][ T9] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 151.514792][ C0] nf_conntrack: new packet for 0000000040aea7fa [ 151.516007][ C0] nf_conntrack: Altering reply tuple of 0000000040aea7fa to [ 151.516027][ C0] nf_conntrack: Confirming conntrack 0000000040aea7fa [ 151.519277][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 151.520570][ T4336] hcon 0000000026ef8088 state BT_CONNECTED [ 151.521437][ T4483] nf_conntrack: normal packet for 000000001ef5483f [ 151.521705][ T4336] hcon 0000000026ef8088 [ 151.523518][ T4336] hci2 opcode 0x0406 plen 3 [ 151.524372][ T4336] hci2: skb len 6 [ 151.525082][ T4336] hcon 0000000001bb91cb state BT_CONNECTED [ 151.526097][ T4336] hcon 0000000001bb91cb [ 151.526845][ T4336] hci1 opcode 0x0406 plen 3 [ 151.527670][ T4336] hci1: skb len 6 [ 151.528295][ T4336] hci2 cmd_cnt 1 cmd queued 1 [ 151.529059][ T4336] hci2: skb 00000000bcce0a10 [ 151.529835][ T4336] hci2 type 1 len 6 [ 151.530469][ T4336] hci1 cmd_cnt 1 cmd queued 1 [ 151.531335][ T4336] hci1: skb 000000002c32d656 [ 151.532155][ T4336] hci1 type 1 len 6 [ 151.923201][ T4343] hcon 00000000a2a859fb state BT_CONNECTED [ 151.924271][ T4343] hcon 00000000a2a859fb [ 151.925027][ T4343] hci1 opcode 0x0406 plen 3 [ 151.925870][ T4343] hci1: skb len 6 [ 151.926482][ T4343] hci1 cmd_cnt 0 cmd queued 1 [ 152.003314][ T14] nf_conntrack: normal packet for 000000004066f345 [ 152.073200][ C1] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 15) [ 152.153194][ C1] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 8) [ 152.153323][ T4483] nf_conntrack: normal packet for 000000002b2fbfb3 [ 152.155447][ C1] wireguard: wg1: Handshake for peer 22 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8) [ 152.158582][ T113] nf_conntrack: new packet for 000000009f327869 [ 152.158646][ T4773] nf_conntrack: normal packet for 000000008c38f09a [ 152.159600][ T113] nf_nat: Already setup manip DST for ct 000000009f327869 (status bits 0x188) [ 152.162187][ T113] nf_nat: Already setup manip SRC for ct 000000009f327869 (status bits 0x188) [ 152.163845][ T113] nf_conntrack: normal packet for 00000000a05bb5e1 [ 152.193241][ T4773] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 152.194867][ T4773] nf_conntrack: new packet for 0000000052618d9a [ 152.196018][ T4773] nf_nat: Already setup manip DST for ct 0000000052618d9a (status bits 0x198) [ 152.197639][ T4773] nf_nat: Already setup manip SRC for ct 0000000052618d9a (status bits 0x198) [ 152.513228][ T4773] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 153.193339][ C0] nf_conntrack: new packet for 000000003651ec95 [ 153.194621][ C0] nf_nat: Already setup manip DST for ct 000000003651ec95 (status bits 0x198) [ 153.196147][ C0] nf_nat: Already setup manip SRC for ct 000000003651ec95 (status bits 0x198) [ 153.303232][ T4531] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 153.305065][ T4531] nf_conntrack: new packet for 0000000052618d9a [ 153.306102][ T4531] nf_nat: Already setup manip DST for ct 0000000052618d9a (status bits 0x198) [ 153.307542][ T4531] nf_nat: Already setup manip SRC for ct 0000000052618d9a (status bits 0x198) [ 153.433201][ C1] wireguard: wg0: Handshake for peer 8 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 10) [ 153.435210][ C1] wireguard: wg1: Handshake for peer 10 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 8) [ 153.437295][ T4771] nf_conntrack: normal packet for 000000001b788aa5 [ 153.437457][ T4531] nf_conntrack: normal packet for 000000003356e306 [ 153.593238][ T4343] Bluetooth: hci1: command 0x0406 tx timeout [ 153.594377][ T4343] hci1: err 0x6e [ 153.594967][ T4343] Bluetooth: hci2: command 0x0406 tx timeout [ 153.595981][ T4343] hci2: err 0x6e [ 153.596616][ T4343] hci1 cmd_cnt 1 cmd queued 1 [ 153.597482][ T4343] hci1: skb 000000009657f2c3 [ 153.598609][ T4343] hci1 type 1 len 6 [ 153.599256][ T4343] hci2 cmd_cnt 1 cmd queued 0 [ 153.663258][ T4531] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 153.713281][ C1] nf_conntrack: new packet for 000000001cbee824 [ 153.714441][ C1] nf_nat: Already setup manip DST for ct 000000001cbee824 (status bits 0x198) [ 153.715879][ C1] nf_nat: Already setup manip SRC for ct 000000001cbee824 (status bits 0x198) [ 153.993216][ C0] wireguard: wg2: Handshake for peer 12 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 8) [ 153.995688][ T4773] net_ratelimit: 29 callbacks suppressed [ 153.995698][ T4773] wireguard: wg2: Sending handshake initiation to peer 12 (127.0.0.1:20002) [ 154.073232][ C1] wireguard: wg0: Sending keepalive packet to peer 17 ([::1]:20002/0%0) [ 154.074609][ C1] wireguard: wg0: Handshake for peer 18 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 9) [ 154.076447][ T1753] wireguard: wg0: Sending handshake initiation to peer 18 ([::1]:20003/0%0) [ 154.078154][ T1753] nf_conntrack: normal packet for 000000004066f345 [ 154.313199][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 154.314841][ C1] wireguard: wg1: Receiving keepalive packet from peer 27 ([::1]:20001/0%0) [ 154.423243][ T9] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 154.424860][ T9] nf_conntrack: new packet for 0000000052618d9a [ 154.425971][ T9] nf_nat: Already setup manip DST for ct 0000000052618d9a (status bits 0x198) [ 154.427443][ T9] nf_nat: Already setup manip SRC for ct 0000000052618d9a (status bits 0x198) [ 154.553207][ C0] wireguard: wg0: Sending keepalive packet to peer 26 ([::1]:20003/0%0) [ 154.554768][ T4483] nf_conntrack: normal packet for 000000001ef5483f [ 154.558200][ C1] wireguard: wg2: Receiving keepalive packet from peer 29 ([::1]:20001/0%0) [ 154.773435][ T9] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 154.793278][ C1] nf_conntrack: new packet for 000000001cbee824 [ 154.794436][ C1] nf_nat: Already setup manip DST for ct 000000001cbee824 (status bits 0x198) [ 154.796025][ C1] nf_nat: Already setup manip SRC for ct 000000001cbee824 (status bits 0x198) [ 154.953196][ C1] wireguard: wg0: Sending keepalive packet to peer 7 ([::1]:20002/0%0) [ 155.113211][ C1] wireguard: wg0: Sending keepalive packet to peer 17 ([::1]:20002/0%0) [ 155.363197][ C1] wireguard: wg0: Sending keepalive packet to peer 25 ([::1]:20002/0%0) [ 155.533246][ T9] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 155.534827][ T9] nf_conntrack: new packet for 0000000052618d9a [ 155.535826][ T9] nf_nat: Already setup manip DST for ct 0000000052618d9a (status bits 0x198) [ 155.537338][ T9] nf_nat: Already setup manip SRC for ct 0000000052618d9a (status bits 0x198) [ 155.673214][ T4336] Bluetooth: hci1: command 0x0406 tx timeout [ 155.674337][ T4336] hci1: err 0x6e [ 155.674928][ T4336] hci1 cmd_cnt 1 cmd queued 0 [ 155.843307][ C1] nf_conntrack: new packet for 000000001cbee824 [ 155.844391][ C1] nf_nat: Already setup manip DST for ct 000000001cbee824 (status bits 0x198) [ 155.845756][ C1] nf_nat: Already setup manip SRC for ct 000000001cbee824 (status bits 0x198) [ 155.883227][ T4773] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 155.993190][ C0] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 15) [ 155.995263][ T24] nf_conntrack: new packet for 000000003a5e8885 [ 155.996522][ T24] nf_nat: Already setup manip DST for ct 000000003a5e8885 (status bits 0x188) [ 155.998061][ T24] nf_nat: Already setup manip SRC for ct 000000003a5e8885 (status bits 0x188) [ 155.999892][ T9] nf_conntrack: new packet for 000000003a5e8885 [ 156.000944][ T9] nf_nat: Already setup manip DST for ct 000000003a5e8885 (status bits 0x188) [ 156.002305][ T9] nf_nat: Already setup manip SRC for ct 000000003a5e8885 (status bits 0x188) [ 156.473296][ T14] nf_conntrack: normal packet for 000000001b788aa5 [ 156.634437][ C0] nf_conntrack: new packet for 000000000a022fe7 [ 156.635515][ C0] nf_conntrack: Altering reply tuple of 000000000a022fe7 to [ 156.635546][ C0] nf_conntrack: Confirming conntrack 000000000a022fe7 [ 156.638295][ T113] nf_conntrack: normal packet for 000000002ddaa583 [ 156.638394][ T14] IPv6: now = 4294952960, schedule = 4294965000, rounded schedule = 4294965100 => 4294965000 [ 156.641647][ C0] nf_nat: Already setup manip DST for ct 000000000a022fe7 (status bits 0x198) [ 156.643252][ C0] nf_nat: Already setup manip SRC for ct 000000000a022fe7 (status bits 0x198) [ 156.645579][ T24] nf_conntrack: normal packet for 000000002b2fbfb3 [ 156.647104][ T4531] nf_conntrack: normal packet for 000000002ddaa583 [ 156.653227][ T4531] bond3: (slave geneve3): Send learning packet: mac 2a:e5:55:cc:ab:62 vlan 0 [ 156.654863][ T4531] nf_conntrack: new packet for 0000000052618d9a [ 156.656015][ T4531] nf_nat: Already setup manip DST for ct 0000000052618d9a (status bits 0x198) [ 156.657518][ T4531] nf_nat: Already setup manip SRC for ct 0000000052618d9a (status bits 0x198) [ 157.003307][ T4771] bond1: (slave bond0): Send learning packet: mac aa:aa:aa:aa:aa:17 vlan 0 [ 157.113378][ T4483] nf_conntrack: normal packet for 000000004066f345 [ 157.193242][ C0] wireguard: wg2: Handshake for peer 24 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 9) [ 157.273192][ C0] wireguard: wg1: Handshake for peer 4 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 16) [ 157.593267][ T14] nf_conntrack: normal packet for 000000001ef5483f