last executing test programs: 5.064074894s ago: executing program 0 (id=1): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$RTC_IRQP_READ(r3, 0x8008700b, &(0x7f00000070c0)) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x4c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "1e1c"}]}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ac70"}]}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004001}, 0x8000) syz_emit_ethernet(0x56, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tipc={{0x7, 0x4, 0x0, 0x3c, 0x48, 0x65, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@cipso={0x86, 0x8, 0x2, [{0x5, 0x2}]}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e23}, 0x1}, 0x1}, 0x2000001}}}}}}}, 0x0) 5.034325716s ago: executing program 2 (id=3): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r4, &(0x7f0000000680), 0x4924924924925c6, 0x0) 4.744285092s ago: executing program 0 (id=5): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, &(0x7f0000000200)) 3.17464535s ago: executing program 2 (id=6): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, 0x0, 0x8041) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="08005700ba0200008402330080200900ffffffffffff0802110000005050505050505f08ffffffffffffffff6400001000060101010101010107b0"], 0x2a8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.924481572s ago: executing program 0 (id=7): syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r2, &(0x7f0000000980), 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xc}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x24, r6, 0x201, 0x3ffffd, 0x800000, {{}, {}, {0x8, 0x11, 0x84e}}}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x20040010) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 2.332853354s ago: executing program 2 (id=8): socket(0x1e, 0x4, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 2.000478553s ago: executing program 1 (id=2): syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x69b, 0x7c, 0xbd, 0xb4, 0x20, 0xb48, 0x300d, 0x16c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x8, 0xe8, 0xe, [{{0x9, 0x4, 0x88, 0xb, 0x0, 0xc3, 0x51, 0x2, 0x9}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x60, 0x0, 0x64}) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000240)={&(0x7f0000000340)=[{0xb219, 0x800, 0x0, 0x0}, {0x1000, 0x14201, 0x0, 0x0}], 0x2}) syz_usb_connect$cdc_ncm(0x3, 0x7e, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0xf2, 0x10, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c62705dd"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9a61, 0xb506, 0x91}, {0x6, 0x24, 0x1a, 0xa3, 0xa}, [@mbim={0xc, 0x24, 0x1b, 0xd, 0x7ff, 0xff, 0x4, 0x9, 0x67}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x1, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x6, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x1, 0x6, 0xc}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x370, 0x8, 0xe, 0x0, 0x10, 0x9}, 0x5a, &(0x7f0000000100)={0x5, 0xf, 0x5a, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x8e, "b1e9f99e9aaf365602037fe47cc259b0"}, @ss_container_id={0x14, 0x10, 0x4, 0x81, "5b28aa1d64730ddc8467fa42752bf387"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6f, 0xa, 0xf}, @ssp_cap={0xc, 0x10, 0xa, 0xcd, 0x0, 0x40, 0xf00, 0x5}, @ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0x21b, 0xf000, 0x7fff, [0x180, 0xcf]}]}, 0x6, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc1a}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x40e}}, {0xbc, &(0x7f0000000380)=@string={0xbc, 0x3, "6e50f9c5c3ce772943c1528d53be885a00ec8f3b7eb69dab1743ad10dd8fa270040ffc0a0db53a73feb58ccae43450913667128cc0365a040e635f35fe231bde4dc498592dd31d5fb584178dbb0b31d22c5ff4a22d3599ffe9bfe975289b1ae96d32b3f0518c0b10844cb25a550a95f813f79ad9ef7dd17a3e01c66630bd2a2c655545bdb39d701d6e21dc13863a2ff1aefb4846eb6de8bdbe709294fba2124fe2d99e7e49980d30cf4563dce2040aa940483c1e5604b6870764"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x41f}}, {0x2, &(0x7f0000000440)=@string={0x2}}]}) 1.858330796s ago: executing program 3 (id=4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$unix(0x1, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOMMU_TEST_OP_MD_CHECK_REFS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x4, 0x0, 0x0, 0xeb, &(0x7f0000000040)="aa5aca275c2aba539c8b5cf15d93b0d980dd0eec35c33241d11266f0bdedc3416f81666b33f5eac0e259be1d14a7f5d8262e26f9653d670e55f8f26f3ac74c8f65a915b8d94b09245aa75482a959d997d33b8435d42d4e3170e29b50d4fd0c3cdd03df050a51779b317674fdeed653814b321e28022e016ad213caf3e5cf814abdc7cd6d3da2a9cf17c5eaad09d346007bb21cc33ad15b1e8cd9ed88cff4be25a3e09e3983518ecd79cc30ee0f2d1d14552a6e986f4d51a5a3fdc5e96ddc02a32f72c2117868ae5f584097cf0693cc35ca8f2918d55f97e8f8406845b454b45c9fffe201a73ea9fb40de69", 0x6}) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x100) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000003c0)={0x2, 0x0, @pic={0x0, 0x7e, 0x7, 0x0, 0xd, 0x9, 0x9, 0x1, 0xb, 0xf8, 0x2, 0x6, 0x2, 0x6, 0x4, 0xf}}) 832.373946ms ago: executing program 0 (id=9): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f00000002c0)='./file1\x00', 0x8c0, &(0x7f0000000340)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYBLOB="2d81167ce471c0ae99b4f078ccbec85d44f5f66d8256815bc9a0e02b4b1d31ee59ea9d8cdbbaf25b00ff37cd9445027bc0a305f4d989c5758e0b8ee488f581da6ba9b38fa615955cb56b9d4eb6954e931ad460a2afe3c17aa3eb8737be3915cc778b2e6943a6faf4fb1eb9c82cd5", @ANYRESHEX], 0x1, 0x4421, &(0x7f0000004500)="$eJzs3c9PHGUfAPBnBt63UNsKtYeamLiJTTRqCPSk0kRKaSm0WFNtY7xsF9i26MI2sBgPPeCtiScTD8ZDo4k3Tg0Hr/VP8OKxnpvowYuJSSNmd2eBGXbDSliwzeeTlNl5fu9+d5595jB94kTl9txSbm4pV1jIlWduLp3OfVYuLc8XQ7xPDrp/2tOJOIn9wbly7sIH10+H8NPsL4/X19fXQ1V3aGpoy+s//7g7s/XYEGfqVNtt3tpe+TiEcGLbuKq6Qggf/RhCFEI4m6SNJsfeEMKxUM+7fvfLG7k9Gs2DR8Uz+SdT99aGT02u3l9r/d6jEL4tvfjmrfnfXuka/vX1PeoeAAAAAAAAAAAAAAAAAICn3PjVK9feHxwKD6PQvRptf153PDm2ej52fc+83Pk3CwAAAAAAAAAAAAAAAAAAAP9Rm8//56LjTZ7/H0uOIy3qr7/b+THSORPvXRk7PziU7P8ebct/K0n6/WxX6G+y73t2//ezmfrN93/f3s9uNcbX6LcvRPFA6jyOBwZC+D7Z+P1kdDgulZcqb9wsLy/M7tkwnlrp+Nd3709FJ9nQv934j2ba7/z+/y9s+zZVz2/s3VfsmZaOf1fLcj98EbUV/3OZevsRf3YvHf/uWlrv1gIj9QmgGv+vuneO/1im/U7F/1gIIRdVx5pLzQDVNUw1vdV6hbR0/P9XS0tNnckH2er6/ysT//OZ9g9q/l/J/hDRVDr+/6+l9aRKbF7//fHO1/+FTPsHEf/q+Ff8/rclHf9D9cTuVJHaJ9nu/D+eab9T8b8WJ+M8FqW+AatRPb3V/1dHWjr+PdvyN+//4rbWfxcz9ffr/q/Rb+P+rzH9vxbV7/9oLh3/3pbl2r3+JzL1Oj3/j9TWf+xWOv6Ha2nptXNf7W+78Z/MtN+p+NdWJT2N+G/OJ38fqqd/Z/3XlnT8n6snxltLrNT+1tZ/0c7r/0uZ9g9i/Vcd/0rc2V6fFen4H2lZrhr/n9v4/b+cqdf5+IcwaK2/a+n4H21Zrnb99+wc/6lMvU7H/9VONg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwFBhNjn0higdS53E8MBDCueT8ZDgcTRdm89Ol8synSyGMJem5cDy6VSpPF0r5uYXybDFfKJXKMyGcT/JPhJ5oqVSu5OcLdy5stNUb3S4WFivTxUIlhDCepL8Ujjbamp6rzBfuhBAubuQ9H5cX79wuLORn5xbfGRwcHAwTG2Poj4qfV4oLlXrv9dwQJjfq9kVbBlfLvrQxliPRJ+XlxYVCqZZ+eUudUnmmUNpSZyrJ+zr0R5XF5YWZQqWYL5VvNfo7SCPJcWzi6odXLw9ty78R1Y+j+zssAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6lh8NvfxNC6K6fxSGEXJS8iJJ/KQ8eFc/kn0zdWxs+Nbl6f+1xszIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/7ADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFXfpHaSCI4gD8Ziy09BhWy25nu6KIFq4InkCP4WH0KF7CO1ikSJsiBJJZCPsHtkmq72sezI+Z92AeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyz2+de+vdROR4mp7GfH7+fd/nD+X+n03ff/iDDNyOk8v3f1D3ZR/T6P8thyt2rxPN+uvj5iovZ/Bngz36WDcZ2hu3+bm6/teR8pVRLQlv0k5V9WytwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHTtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgWMBAAAAAGH+1lH0bQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPArAAD//z8QH1I=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1e3842, 0x101) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5406, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x105042, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f00000000c0)={{r2}, 0x0, 0x0, 0x100000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfea7) copy_file_range(r3, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) open(0x0, 0x14927e, 0x0) 735.320905ms ago: executing program 3 (id=10): unshare(0x24020400) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) readv(r0, 0x0, 0x0) 659.655322ms ago: executing program 2 (id=11): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x10040, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESOCT, @ANYRES8, @ANYRES64, @ANYRES16], 0x1, 0x273, &(0x7f0000000b80)="$eJzs3U9rE0EYx/HfbNIabalrWxHEg1QLnsTWi3gRpO/AiydRmwjFUEErqBerZ/EFePctePAleBLPQm6e9J5bZP7EbNJsNo2Jk8TvBxI2yTw7z2RnOzO7lAjAf+v2TuPj9R/2YaSSSpJuSomkilSWdFbnKs/3D/YO6rXqoB2VXIR9GPlIc6TM7n6tX6iNcxFBal+VtZx9D5NR+R47A0wDd/Z7v7LvJ9KJcHa6zytRshu/w9gJRGaaauqFVmLnAQCIK4z/SRjnl8P8PUmkzTDsd4//Mz6ANmMnEFlm/HerrJaxx/e0+6iz3jN+9meFVeIodS3K96xSVwJFq0qXS3Ly0V69dnX3Sb2a6K1uBZli6+656rtuWyOT7Zuju97oszYdoDFy25dcGxZsG7Zz8l8bb43FzBfz1dwzqT6o+mf+V24Ze5jckUp7jpTP/1r+Hl0rU18qp5VnXCXnQw3BwFaW1JNG1mLYZ9cFgrQoTxe12hPlW7dVELXWN2q7IGq9N6rTm/MjJ828N3fNhn7qk3Yy8//EftubGubMtGVcydAzBran7EqmbjwxF91bhxf6lkxGbhKO750e6oZWnr189fhBvV57ysYIG6/Dlzkt+Qy70e4E05LP3G7YLzlK7eW/7plR/irhH+sc9GMGcm9mXth5l/Hrv/Z65fNCuH1nn9IB8/RW0c4zK6CtnLXBqns+lb+C62LcpYclmbxbEcOuuS5dkS4PU6OXhjznhNnRN93n+j8AAAAAAAAAAAAAAAAAAMCsGd+/HFSU91HsNgIAAAAAAAAAAAAAAAAAAAAAMOum7vd/78i/4vd/gYn7HQAA//8NSnOZ") openat(0xffffffffffffff9c, 0x0, 0x193042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 492.511396ms ago: executing program 3 (id=12): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newnexthop={0x28, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_FDB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 326.161521ms ago: executing program 3 (id=13): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x3000812, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="0bffd5ece651e2a4648f9b08ce06626a8efcc3bee3ccef03f1e2279d8dc44bc4bd6a5d445b3f4f75b30ef3cc0a9d3c338a26ff996b57afbe65c46e61b66cf778b449292592952663ac34eb94f6fd4cfbda2af6c85c6e135955ca064c546ab638c56d2432e45e6d333181ee921f9f26a8ef"], 0x11, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./file1\x00', 0x183042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) truncate(&(0x7f0000000100)='./file1\x00', 0x81) 0s ago: executing program 2 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback=0x7f000000}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000700)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r2, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.75' (ED25519) to the list of known hosts. [ 63.920428][ T5757] cgroup: Unknown subsys name 'net' [ 64.060029][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.429178][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.080325][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.087977][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.095858][ T5778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.104640][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.105508][ T5778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.119356][ T5778] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.125743][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.126663][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.141028][ T5778] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.149290][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.157718][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.165364][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.170582][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.173334][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.181435][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.188185][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.193812][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.202037][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.208292][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.215044][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.229028][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.229369][ T5781] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.245069][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.253220][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.588097][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 67.678309][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 67.712802][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.720566][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.728246][ T5770] bridge_slave_0: entered allmulticast mode [ 67.735749][ T5770] bridge_slave_0: entered promiscuous mode [ 67.786303][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.793390][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.800743][ T5770] bridge_slave_1: entered allmulticast mode [ 67.808083][ T5770] bridge_slave_1: entered promiscuous mode [ 67.908491][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 67.933226][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.940949][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.948285][ T5768] bridge_slave_0: entered allmulticast mode [ 67.954988][ T5768] bridge_slave_0: entered promiscuous mode [ 67.965411][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.986868][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.995440][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.002623][ T5768] bridge_slave_1: entered allmulticast mode [ 68.012735][ T5768] bridge_slave_1: entered promiscuous mode [ 68.035132][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.098034][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.110796][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.121108][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 68.132910][ T5770] team0: Port device team_slave_0 added [ 68.156297][ T5770] team0: Port device team_slave_1 added [ 68.231819][ T5768] team0: Port device team_slave_0 added [ 68.244964][ T5768] team0: Port device team_slave_1 added [ 68.251567][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.258565][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.284981][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.296775][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.304474][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.311611][ T5767] bridge_slave_0: entered allmulticast mode [ 68.318561][ T5767] bridge_slave_0: entered promiscuous mode [ 68.339785][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.346815][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.372779][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.390089][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.397399][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.405219][ T5767] bridge_slave_1: entered allmulticast mode [ 68.411820][ T5767] bridge_slave_1: entered promiscuous mode [ 68.432475][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.439615][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.465567][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.507640][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.514855][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.521941][ T5769] bridge_slave_0: entered allmulticast mode [ 68.528869][ T5769] bridge_slave_0: entered promiscuous mode [ 68.538307][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.545363][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.571731][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.607616][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.614918][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.622140][ T5769] bridge_slave_1: entered allmulticast mode [ 68.629043][ T5769] bridge_slave_1: entered promiscuous mode [ 68.654688][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.666681][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.733425][ T5770] hsr_slave_0: entered promiscuous mode [ 68.739826][ T5770] hsr_slave_1: entered promiscuous mode [ 68.750567][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.770479][ T5767] team0: Port device team_slave_0 added [ 68.779267][ T5767] team0: Port device team_slave_1 added [ 68.787662][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.810452][ T5768] hsr_slave_0: entered promiscuous mode [ 68.816679][ T5768] hsr_slave_1: entered promiscuous mode [ 68.822633][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.832170][ T5768] Cannot create hsr debugfs directory [ 68.881972][ T5769] team0: Port device team_slave_0 added [ 68.899605][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.906608][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.933027][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.955167][ T5769] team0: Port device team_slave_1 added [ 68.976519][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.983464][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.009845][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.072836][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.080086][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.106437][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.137473][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.144704][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.170709][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.237577][ T5767] hsr_slave_0: entered promiscuous mode [ 69.243973][ T5767] hsr_slave_1: entered promiscuous mode [ 69.249975][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.258638][ T5767] Cannot create hsr debugfs directory [ 69.274759][ T5085] Bluetooth: hci2: command tx timeout [ 69.280538][ T5085] Bluetooth: hci1: command tx timeout [ 69.286884][ T5773] Bluetooth: hci3: command tx timeout [ 69.286975][ T5781] Bluetooth: hci0: command tx timeout [ 69.351014][ T5769] hsr_slave_0: entered promiscuous mode [ 69.357568][ T5769] hsr_slave_1: entered promiscuous mode [ 69.363589][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.371221][ T5769] Cannot create hsr debugfs directory [ 69.517493][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.529039][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.556614][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.566462][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.662112][ T5768] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.678855][ T5768] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.705822][ T5768] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.716662][ T5768] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.796911][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.808603][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.839824][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.849787][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.883153][ T5769] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.903926][ T5769] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.925132][ T5769] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.936815][ T5769] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.044524][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.059703][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.087050][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.098055][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.136618][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.144141][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.164898][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.171980][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.194948][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.202059][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.211651][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.218753][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.341164][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.366225][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.387960][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.441382][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.448603][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.486265][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.511950][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.519125][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.569065][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.576255][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.632290][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.639488][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.753003][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.799536][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.912128][ T5770] veth0_vlan: entered promiscuous mode [ 70.958625][ T5768] veth0_vlan: entered promiscuous mode [ 70.981266][ T5770] veth1_vlan: entered promiscuous mode [ 70.998646][ T5768] veth1_vlan: entered promiscuous mode [ 71.078768][ T5770] veth0_macvtap: entered promiscuous mode [ 71.102622][ T5768] veth0_macvtap: entered promiscuous mode [ 71.132395][ T5768] veth1_macvtap: entered promiscuous mode [ 71.147931][ T5770] veth1_macvtap: entered promiscuous mode [ 71.180370][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.202619][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.220330][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.238091][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.247623][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.258086][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.267980][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.281886][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.293536][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.305681][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.334569][ T5768] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.346952][ T5768] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.354203][ T5781] Bluetooth: hci0: command tx timeout [ 71.361499][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.362610][ T5773] Bluetooth: hci3: command tx timeout [ 71.369480][ T51] Bluetooth: hci2: command tx timeout [ 71.380994][ T5085] Bluetooth: hci1: command tx timeout [ 71.389557][ T5768] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.398357][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.407375][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.416181][ T5768] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.442723][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.534620][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.542681][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.599881][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.616621][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.627222][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.631576][ T5767] veth0_vlan: entered promiscuous mode [ 71.642788][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.646441][ T5769] veth0_vlan: entered promiscuous mode [ 71.680957][ T5767] veth1_vlan: entered promiscuous mode [ 71.721507][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.730960][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.732016][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.753228][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.780499][ T5769] veth1_vlan: entered promiscuous mode [ 71.848798][ T5767] veth0_macvtap: entered promiscuous mode [ 71.880723][ T5767] veth1_macvtap: entered promiscuous mode [ 71.920369][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.953985][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.970479][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.982024][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.998868][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.062947][ T5769] veth0_macvtap: entered promiscuous mode [ 72.679966][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.689049][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.785045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.785967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.793249][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.854715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 73.733739][ T5773] Bluetooth: hci3: command tx timeout [ 73.734071][ T5085] Bluetooth: hci0: command tx timeout [ 73.739601][ T5773] Bluetooth: hci1: command tx timeout [ 73.744760][ T5085] Bluetooth: hci2: command tx timeout [ 73.781196][ T5769] veth1_macvtap: entered promiscuous mode [ 73.831313][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.851243][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.863429][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.885580][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.901676][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.938319][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.970502][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.983719][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.992443][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.042035][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.053391][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.072880][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.088453][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.098648][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.114701][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.130026][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.176665][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.212249][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.233329][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.264637][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.279270][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.306812][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.329763][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.368760][ T5871] tipc: Started in network mode [ 74.440620][ T5871] tipc: Node identity 84e, cluster identity 4711 [ 74.451077][ T5871] tipc: Node number set to 2126 [ 74.467432][ T5769] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.479307][ T5769] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.498834][ T5769] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.507892][ T5769] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.578615][ T3428] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.592070][ T3428] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.697367][ T3428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.720109][ T3428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.792027][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.827182][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.960968][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.001667][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.168980][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.346191][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.804362][ T51] Bluetooth: hci3: command tx timeout [ 75.810024][ T5773] Bluetooth: hci0: command tx timeout [ 75.815700][ T5085] Bluetooth: hci1: command tx timeout [ 75.834075][ T5085] Bluetooth: hci2: command tx timeout [ 76.125079][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 76.147314][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 76.167462][ T23] usb 2-1: config 4 has an invalid interface number: 136 but max is 0 [ 76.186849][ T5889] syz.0.9[5889]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 76.202504][ T23] usb 2-1: config 4 has no interface number 0 [ 76.252491][ T23] usb 2-1: config 4 interface 136 has no altsetting 0 [ 76.290212][ T23] usb 2-1: string descriptor 0 read error: -22 [ 76.303056][ T23] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=16.c8 [ 76.319728][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.386713][ T23] dvb-usb: found a 'Technotrend TT-connect CT-3650' in warm state. [ 76.394194][ T5893] loop2: detected capacity change from 0 to 64 [ 76.406087][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 76.415617][ T5893] ======================================================= [ 76.415617][ T5893] WARNING: The mand mount option has been deprecated and [ 76.415617][ T5893] and is ignored by this kernel. Remove the mand [ 76.415617][ T5893] option from the mount to silence this warning. [ 76.415617][ T5893] ======================================================= [ 76.464058][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 76.506170][ T23] dvb-usb: bulk message failed: -22 (5/0) [ 76.511951][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 76.549513][ T5893] hfs: request for non-existent node 237 in B*Tree [ 76.552515][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.584126][ T23] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 76.591826][ T5893] hfs: request for non-existent node 237 in B*Tree [ 76.611073][ T5880] dvb-usb: bulk message failed: -22 (7/0) [ 76.615644][ T23] dvbdev: DVB: registering new adapter (Technotrend TT-connect CT-3650) [ 76.626109][ T5880] ttusb2: there might have been an error during control message transfer. (rlen = 3, was 0) [ 76.626438][ T5893] hfs: request for non-existent node 237 in B*Tree [ 76.665545][ T5897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.674022][ T5893] hfs: request for non-existent node 237 in B*Tree [ 76.675719][ T5897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.684378][ T23] usb 2-1: media controller created [ 76.703336][ T5880] ttusb2: i2c transfer failed. [ 76.718353][ T5893] hfs: request for non-existent node 237 in B*Tree [ 76.720765][ T5898] loop3: detected capacity change from 0 to 64 [ 76.761193][ T5898] syz.3.13: attempt to access beyond end of device [ 76.761193][ T5898] loop3: rw=2049, sector=161, nr_sectors = 1 limit=64 [ 76.766205][ T5893] hfs: request for non-existent node 237 in B*Tree [ 76.784744][ T5898] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 76.814540][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 76.849154][ T5898] syz.3.13: attempt to access beyond end of device [ 76.849154][ T5898] loop3: rw=2049, sector=162, nr_sectors = 1 limit=64 [ 76.863930][ T5898] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 76.889976][ T23] ttusb2: set interface to alts=3 failed [ 76.900182][ T5898] syz.3.13: attempt to access beyond end of device [ 76.900182][ T5898] loop3: rw=2049, sector=163, nr_sectors = 1 limit=64 [ 76.932958][ T5898] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 76.962968][ T3477] ------------[ cut here ]------------ [ 76.969036][ T3477] kernel BUG at fs/hfs/inode.c:449! [ 76.983869][ T5898] syz.3.13: attempt to access beyond end of device [ 76.983869][ T5898] loop3: rw=2049, sector=167, nr_sectors = 1 limit=64 [ 77.013748][ T3477] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 77.019860][ T3477] CPU: 0 PID: 3477 Comm: kworker/u4:9 Not tainted syzkaller #0 [ 77.027411][ T3477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.037471][ T3477] Workqueue: writeback wb_workfn (flush-7:2) [ 77.037772][ T5898] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 77.043492][ T3477] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 77.057511][ T3477] Code: c7 c1 00 e3 ed 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 e3 ed 96 e8 d6 b0 85 ff e9 6c fe ff ff e8 fc 42 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 77.073894][ T23] DVB: Unable to find symbol tda10023_attach() [ 77.077103][ T3477] RSP: 0018:ffffc9000d36f360 EFLAGS: 00010293 [ 77.089312][ T3477] RAX: ffffffff82574dc4 RBX: ffff888025608ea8 RCX: ffff88802d8b1e00 [ 77.093791][ T23] dvb-usb: no frontend was attached by 'Technotrend TT-connect CT-3650' [ 77.097271][ T3477] RDX: 0000000000000000 RSI: ffffffff8cf37380 RDI: 0000000000000000 [ 77.097282][ T3477] RBP: ffffc9000d36f4f0 R08: ffff88802d8b1e00 R09: 0000000000000003 [ 77.097293][ T3477] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 77.106288][ T5898] syz.3.13: attempt to access beyond end of device [ 77.106288][ T5898] loop3: rw=2049, sector=169, nr_sectors = 1 limit=64 [ 77.113538][ T3477] R13: 1ffff92001a6de70 R14: ffff888025608e58 R15: 0000000000000000 [ 77.150536][ T3477] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 77.159473][ T3477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.166059][ T3477] CR2: 00007f4f8adb5000 CR3: 000000005d3ab000 CR4: 00000000003506f0 [ 77.173724][ T5898] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 77.174023][ T3477] Call Trace: [ 77.185781][ T3477] [ 77.188717][ T3477] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 77.194103][ T3477] ? __rwlock_init+0x150/0x150 [ 77.198881][ T3477] __writeback_single_inode+0x705/0xee0 [ 77.204447][ T3477] writeback_sb_inodes+0x77c/0xef0 [ 77.209579][ T3477] ? queue_io+0x560/0x560 [ 77.212259][ T5898] syz.3.13: attempt to access beyond end of device [ 77.212259][ T5898] loop3: rw=2049, sector=171, nr_sectors = 1 limit=64 [ 77.213905][ T3477] ? rcu_is_watching+0x15/0xb0 [ 77.213930][ T3477] wb_writeback+0x450/0xba0 [ 77.213952][ T3477] ? queue_io+0x341/0x560 [ 77.228136][ T5898] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 77.231855][ T3477] ? percpu_ref_tryget+0x250/0x250 [ 77.236596][ T23] rc_core: IR keymap rc-tt-1500 not found [ 77.240636][ T3477] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 77.240660][ T3477] ? rcu_read_lock_sched_held+0x8a/0x100 [ 77.249204][ T23] Registered IR keymap rc-empty [ 77.254207][ T3477] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.254229][ T3477] wb_workfn+0x3ff/0xe20 [ 77.254250][ T3477] ? inode_wait_for_writeback+0x200/0x200 [ 77.254271][ T3477] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 77.262622][ T23] rc rc0: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 77.265915][ T3477] ? read_lock_is_recursive+0x20/0x20 [ 77.265936][ T3477] ? _raw_spin_unlock_irq+0x23/0x50 [ 77.265953][ T3477] ? process_scheduled_works+0x957/0x15b0 [ 77.272054][ T5898] syz.3.13: attempt to access beyond end of device [ 77.272054][ T5898] loop3: rw=2049, sector=172, nr_sectors = 1 limit=64 [ 77.276386][ T3477] ? process_scheduled_works+0x957/0x15b0 [ 77.276407][ T3477] process_scheduled_works+0xa45/0x15b0 [ 77.276433][ T3477] ? assign_work+0x400/0x400 [ 77.276451][ T3477] ? assign_work+0x39e/0x400 [ 77.276468][ T3477] worker_thread+0xa55/0xfc0 [ 77.276495][ T3477] kthread+0x2fa/0x390 [ 77.276508][ T3477] ? pr_cont_work+0x560/0x560 [ 77.285135][ T23] input: Technotrend TT-connect CT-3650 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5 [ 77.285900][ T3477] ? kthread_blkcg+0xd0/0xd0 [ 77.294536][ T5898] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 77.297546][ T3477] ret_from_fork+0x48/0x80 [ 77.309945][ T5899] hfs_btree_del_level [ 77.312748][ T3477] ? kthread_blkcg+0xd0/0xd0 [ 77.406991][ T3477] ret_from_fork_asm+0x11/0x20 [ 77.411753][ T3477] [ 77.414767][ T3477] Modules linked in: [ 77.425933][ T5889] loop0: detected capacity change from 0 to 32768 [ 77.442292][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 77.450197][ T3477] ---[ end trace 0000000000000000 ]--- [ 77.456386][ T3477] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 77.462384][ T3477] Code: c7 c1 00 e3 ed 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 e3 ed 96 e8 d6 b0 85 ff e9 6c fe ff ff e8 fc 42 2e ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 77.482717][ T3477] RSP: 0018:ffffc9000d36f360 EFLAGS: 00010293 [ 77.487069][ T23] dvb-usb: bulk message failed: -22 (4/0) [ 77.489056][ T3477] RAX: ffffffff82574dc4 RBX: ffff888025608ea8 RCX: ffff88802d8b1e00 [ 77.503231][ T3477] RDX: 0000000000000000 RSI: ffffffff8cf37380 RDI: 0000000000000000 [ 77.511343][ T3477] RBP: ffffc9000d36f4f0 R08: ffff88802d8b1e00 R09: 0000000000000003 [ 77.519529][ T3477] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 77.519699][ T23] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 77.527648][ T3477] R13: 1ffff92001a6de70 R14: ffff888025608e58 R15: 0000000000000000 [ 77.527662][ T3477] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 77.527681][ T3477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.527693][ T3477] CR2: 000000110c3e65ca CR3: 000000007dc5c000 CR4: 00000000003506f0 [ 77.527708][ T3477] Kernel panic - not syncing: Fatal exception [ 77.528103][ T3477] Kernel Offset: disabled