last executing test programs: 9m2.184140257s ago: executing program 2 (id=3): syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x800, 0x0, 0x1, 0x0, 0x0) mount$afs(0x0, &(0x7f00000008c0)='./file0/../file0\x00', &(0x7f0000000900), 0x1, &(0x7f0000000080)={[{@dyn}]}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) 9m1.388949257s ago: executing program 1 (id=2): bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xe, 0x0, @void}, 0x10) 9m1.069815492s ago: executing program 2 (id=7): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b +'], 0xa) 9m0.292761828s ago: executing program 1 (id=9): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000600)=ANY=[@ANYBLOB='iocharset=iso8859-1,noadinicb,uid=forget,anchor=00000000000000000145,iocharset=cp949,dmode=00000000000000000000001,undelete,partition=00000000000000000001,unhide,mode=00000000000004000000006,gid=', @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',context=user_u,appraise,euid=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c666f5f9f276ec9776e65723cf4f35fe4113026aea579cf39a0f0c29957f53b57c3b489eb054980f991fd7da326951341daebf88b7573ead7344e8185d60a1644469d91bcb8587f93f34db553c02bca476f5744f1aa69e5accfbfd06c024c0950225000dca631a828ab74affc80a0160784", @ANYRESDEC=0x0, @ANYBLOB=',\x00'], 0x1, 0xc4f, &(0x7f00000026c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) 9m0.036259263s ago: executing program 2 (id=10): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 8m56.103376945s ago: executing program 2 (id=13): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) getresgid(&(0x7f0000000000), 0x0, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x4, 0xc8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8m53.857079291s ago: executing program 1 (id=15): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$eJzs3V2P21gZB/D/STJJJoWqAlStqm7ndMpKUzGkTmabKipIGOckY0jiyPbAjIS0KnRmNWqmQFskmpt2bniRli/A3d5wwYdYiQuu9lvAFUgrEBJiBUJGPrbzMnEyk07abtn/bwRx7MfnPD72+tQz9jGIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiIgIwmoYRkWgbXd3duVsVsN1OsmXLKaWR6Wt4GY0cXNenSthvYAI/4diEW9Fs9/6yijkcvh/67gafbuKYvhRxODC5Ut3v5zLJOvPSfhFYNECHz8dPLjX7+8/OkNsFgsX/zohc4agluranmN3zJaStufIeq1m3NpuerJpt5W35/mqIy1XZXzHlRvWTVmp17ekKu85O91Ww2yrZOadr1cNoya/U4h2NICyZ23b7bbdbemYcHEYc0d+8IMoQJkdKQ8O+/tbY/k8S2vjMKiSknxmPDgMqp62uVWjWq1UqtVK7Xb99h3DyE3NMELCGMJUxNIPWnrDLPcETnQOGavxH+NPAmijiC52sAuZ+mOhARcOOjOWx5L+/51bam694/1/0suvjBZfge7/r0Xfrs3q/2fkIiH1CmlLxIz5i/2s6IwkHuMpBniAe+ijj308WkLZEnLt3CXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyHiORB011GDgPWyjCQ8STdhoQ8HDHjz4UOERlQ8zVTDhw4ELiQ1YuAmJCuqoYwsSCmXswcEOumihARP/CoLgAIe63bfifJ6nbDWSoMqMjSgglxx3+6jO2dpZ/f8Pn0Vrx/2/wf7/8yo6DgrRx8fzYog+A4L4+n9Bay8nGyIiIiIiIiJ6GYT+7bvQf5V/G0CApt1WxkRM4bVlR0RERERERETLIBAUcBUiuisfb0NMX/8TERERERER0ZtN6GfsBICSvqlfjB6XOssvAbKvIEUiIiIiIiIiOif95P+1PBDou/zXIBa6/iciIiIiIiKiN8CvxsbYz2XjMXaD5M/6GQBrfy6Ij/5WgLsijnu7XxVHZrjEPIpjpu4A8JtXxMV4oF79kQegv1nqqohrk8A/k98+hD45SB/r/3kQEUK4JxLIZ8cLmJGACGuu5eJv+ADXo1Wux+PM3x9koJdEIwqXmnZblS2nfbcC07yY8dWu/7OHhz8H3OF2Hhz298s/+nH/vs7lOJx1fBQW+mwinUx6Y4xyeaLHW9DPXKSNbryKZlLlr7udktD1Gsn2Z2EeZcYrmrcDaqtAtJW/wHq0z9aDKLY0GI64L4A1PfhDpax32cTWuytilEXl5Jan7YgZW17UWdyIYm5s3Ig+kjYJy8mI4teyQLU8vQ8msqiOZ3F6W4i/n2j/+VlAFMO22Aqz+ENY0Iksvv9RtPJWbzcZHuMsWUwdBUREr8vBqBfSg5hPjbGfdA/JSe3s/Q5yQHyWm9G7j2oJ4v4j6d2f/DaIeqgskIv/NpFeS9KvIDyjbwhdTj4a0D13JeWMbpQ/DYLAvFjE+Bn9v/G/M4Z97Nl6t+MgCE6e0X8/egdSnPZUFv8OguBuRfckvznRq34YrvDhzHq9djUbNuGtJ0c/0QPgh97ff3//YbW6VTPeNYzbVazofyrEH1mw7yEioimnv2NHR2TmRIh3cT0q4/r9v74TTU30eF+KbynQbgF93Mdm8gqBtfRSSzjAN/8R3YawGV21Auul6LM0kJcv3Q2vaoexhyKn3/CyOfOqTvelUay+vaE6jE3eO3TyCnAUu/WS9wIREdGrtT6jHwYm+n9M9v/Fif5/ExtRxMaV1Ovu0tgthZvJ1fHwkn5w4Tg1tnJ68t9acmMQERF9Tij3E1Hyfylc1+69V6nXK6a/raTrWN+Vrt1oKWl3feVa22a3pWTPdXzHctqy56JgrypPeju9nuP6sum4sud49q5+87uMX/3uqY7Z9W3L67WV6SlpOV3ftHzZsD1L9na+3ba9beXqlb2esuymbZm+7XSl5+y4lipL6Sk1Fmg3VNe3m3Y42ZU91+6Y7p78ntPe6SjZUJ7l2j3fiQpM6rK7Tcft6GLLCBZ+0SEREdH/o8dPBw/u9fv7j05OrIaX5tGcY8yImZ7IpxTIMYKIiIg+Y0bd9QIrFV9iQkRERERERERERERERERERERERERERERENOX0R/oWnFhJe1gQGM756cV4Dp5j9IjhVDkC583nU/ePemC/F1k9s2ilySMRgwcfzwleHc5Jmn885niRSnEJeOH2+csXgAt6DqI5uSUeANPPjy79GEub+MZB1KKzYvTC1EWF4b7ILf8/h3Di4e+mF4mw5YMgCOavXphsw/zZj+ccgEf5c+yCV30mIqJX7X8BAAD//6KXQek=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x120081a, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000780)=""/106, 0x6a) 8m50.095467523s ago: executing program 1 (id=16): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x80, 0x6}]}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 8m46.082611977s ago: executing program 1 (id=21): r0 = creat(&(0x7f00000002c0)='./file0/file0\x00', 0x2) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000040)="1d", 0x1}], 0x1, 0xffffffff, 0x0, 0x2) 8m44.915369363s ago: executing program 1 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x500) 8m40.072676154s ago: executing program 32 (id=13): sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) getresgid(&(0x7f0000000000), 0x0, &(0x7f00000000c0)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x24, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x4, 0xc8}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 8m29.156538918s ago: executing program 33 (id=25): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r4, 0x9, 0x500) 7m49.188136042s ago: executing program 3 (id=96): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x0, 0x2, 0xffffffff}}, 0x30) 7m46.725193617s ago: executing program 3 (id=100): r0 = creat(0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) io_setup(0x202, 0x0) io_uring_setup(0x3eae, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4041000) lseek(0xffffffffffffffff, 0x7, 0x1) syz_mount_image$nilfs2(&(0x7f0000000180), &(0x7f0000000040)='./file2\x00', 0x2080c2, &(0x7f0000001340)=ANY=[], 0x1, 0xb03, &(0x7f00000017c0)="$eJzs3V2MXFXhAPBzZ3e22+723yn/Vra0lFY04Ae7bGkVrNASmqgxqU18MKG+1FJq06UaS4gQEloSjYkhkBD65EMxvPgC8RN4MZUHQ0xAYzQkPiHxtUYSHxojjNmZe2ZnTme4M/s1szu/X3L2zL3n3nvOnb1z58695yMAQ6tU+7t//3gI4YXXnz9y84tvPjs/51BjiUrt72jTVDmEkOXTo8n23h2pxx+8/+TJdnEW9tX+xulw9Gpj3YkQwoWwJ1wJlfDM8Uuj77x69O2Xw9nHjh1567WV2fsF2UpnAAAAA+DYlYP7t//9Tzu3/ueV3YfDhsb8eH1eyacn8+v+w/mFcrxeLoXW6awpNBtLlhvNQylZbqTNcs35lJPlRjvkP5Zst9xhuQ0F+Y80zWu337CWxeO4ErLSdMt0qTQ9Xf9NHmq/68ey6XNn5h4+36eCAsvu37eEEPYIwxl27u1/GYR+huqWfp+BAOrS54XXubC8T+oaWxvtLv+r95far9+kvKwlZBj8+Ac7vhb6cPyn+pT/8d/0N/+GQc//pYtqKrB81uHR9JfNTfsVP0eT+XT6HCGtv9Tr5z9uL30e0e01QKfnCGvl+UKnco6scjkWq1P50+Nivbo3j+P7cF+Snn8Oao/T0v/pWvkfA+1dWyv3/8MAlEFYuVAegDL0HDa3TO/I+l2e3kO1z+cfYHCl9eaquZie1utL0zcUpI8XpG8sSN9UkB66TIdh9MtHnw3PZQv3u9Lf9L3eD5tMNvF/PZYnvR/Za/5pvd/ulZcl/7Q+MQy0id9fuvuhB/9cr/+fNY7/D/PjfU8+Xck/W1fyBeL9wvS+eqPuf6U1m1KH5W5IirO5zfK119tal8u2LWwnNJ1nrivHVFyjfkd3S6fldrVuv5IstzEP40l50+uTTcl6sf50PClOtpRmYX/LTfvxr80L57FYjnhe2ZrHaTlgMeLx2Fr/f/7oq9X/bzzGmgrl7OEzc6fuzKfj5+3NkfKG+fmzq11wYMm6bf8zFVrb/0w25pdLzeeFLQvzs+bzQiWZv6/D/Lvy6fg99+2RjbX50ye/M/dQS8nzH/JPLc/7AMPo/ONPnD0xN3fqeyv5Yj6jFc5ivb2Y/0FxIYR+F2MJL+IRNijl8aKbF/G/dmKuX2ckYLXMPPrId2fOP/7EHWceOXH61OlT52YPzN59z4HZ2c/dM1O7rp9pvrpfj9WFYXgtfPv3uyQAAAAAAAAAAABAt06/N3P5r298/m/19v8L7f9i+/9Y8ze2//9R0v4/aebfqCAc2wHGdnzXtbdPOlgdS5Yr5+H/k+1vS/LZnqz3sTxujOOXt/+P2dXj8Zbyzocbk3zS/nvjclPJ/LS/lLGkD5Is/HBTc/k+nsdP/7feBdFPA/RRtrH97Dwu6t86Huuxf4rO/VJc0+vWAIv/t3g0xH5MJvJDIbb3jv2VxP4f4vl/6+oUk2W2Gu0K+72PQHv/HMD+v2vfRcuxrXgRMwD7JAi9hGyVjttq1SgewGDo9/if8b5njM/99ivj8yEudvX+1vNl2n8pLMXgjT/5x2/1Jf+JsCr7f7FT/gPz/rd66WK2rMMLN8a/6/r8l4yYlz4A6tLBp7/6j6Zsw03d5p+Ofxr7gd7WW/5fzPOPe3Nb6C7/6otJ/ukDoS7dm+S/qcv8r9v/XYvL/748//i23X5rt/nXS5yVWsuR3jeOz//ifeNvJPkfSvY/9u3Z8/4vcqDGw3n+MMzWyjizvVor4/92ktbDOJBPxxNhrOcwFn61dynlj/Ur4vfA9mT7WcH320eO/7sGBiloU/7qU9XqT4ZlHJcv5HHR52Ey/5/G47HSZrrUNF1u896u13MNrFXvDuDzv6WG2jlsAMoxwKH+c63/5SgOGwegDEsPo9e93/HL8KPW+93Kl61arfa1T18dCvfXot7/3cuXf7+fPvc7/0E//tPxf9Nr+HT83zQ9Hf/360n6eL5Kp/XT8fXS9HT83/T9nGif3vhlemOy3XR84KmC9B0F6TcVpO8sSN9VkH5zQfregvTdBem3FKTfUJB+a/hyaJamf6Jg/U92Tr/WvGin9W8v2P6nCtLXu9geZVj3H4ZZ2j6v4+d/WZ86A4MgPv/p9PnfVpAOrF2XXpl94MFffLNSb/8/1rgfEp/jHc6ny/lv5+/n0+lz79A0PZ/2Rj79XpI+6Pc7YJik/Wek3++3FaQDa1es5+XzDUMoa19JM33e1ui3Ko9jv1WdrvNZWz6dx5/J48/m8R15PJ3HM3k8m8f7Vql8rIwHfv7rg89lC7/3tyTp3dYnT9sDpf1E3dVledL7A73WZ0/78evVUvNfZHMwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvinV/u7fP5WF8MLrzx+5/Icv/Wx+zqHGEpXa39GmqXJjvRDuzOORPL6cv/jg/SdPNscf5nEW9oUsZI354ejVRk4TIYQLYU+4EirhmeOXRt959ejbL4ezjx078tZrK/cO1GUrnQEAAAD00f8CAAD//5AqGwk=") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xf8) 7m42.923187246s ago: executing program 3 (id=103): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 7m40.651909614s ago: executing program 3 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019a00000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) listen(r4, 0x20000005) socket$inet6(0xa, 0x6, 0x0) accept4(r4, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r8}, 0x10) epoll_create(0xfe) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00'}) close_range(r3, 0xffffffffffffffff, 0x0) 7m37.480609552s ago: executing program 3 (id=110): r0 = syz_clone(0x0, 0x0, 0xfffffffffffffead, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x8, r0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x700000000000000) socket$inet_tcp(0x2, 0x1, 0x0) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@random={'os2.', '\x00'}, &(0x7f0000000240)='exfat\x00', 0x6, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x80) fanotify_mark(0xffffffffffffffff, 0x1, 0x8001011, r2, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$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") r3 = creat(&(0x7f0000000040)='./file2\x00', 0x71283578ac7c5cd) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfd14) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x385a00, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r5, 0x0, 0x20000004) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x40044160, 0x3) fanotify_mark(0xffffffffffffffff, 0x2, 0x1013, 0xffffffffffffffff, 0x0) 7m33.209011693s ago: executing program 3 (id=115): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 7m17.575691272s ago: executing program 34 (id=115): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) 5m19.572786485s ago: executing program 7 (id=128): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x310) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0xa, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000400)=ANY=[], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014ffff00b5020000000000008500000083000000bc0900000000000055090100000700009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0xf, 0x1004, &(0x7f0000001c00)=""/4100, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="040005000000fbdbdf250b00000008000200000000000c00068008000300ffffffff0800030003000000080004000e000000"], 0x38}, 0x1, 0x0, 0x0, 0x401}, 0x40010) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000030801030000000000000000592d444914000480080005400000800108000640020000000500030006000000"], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r5, 0x10c, 0x3, &(0x7f0000000380), &(0x7f0000001880)=0x4) close(0xffffffffffffffff) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000700)=ANY=[], 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r6}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x10000, 0x1, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x0, 0x7, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private}, 0x2, 0x33}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0xb7}}, 0xe8) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000400), &(0x7f0000000440)=0x30) 5m18.243504144s ago: executing program 7 (id=266): r0 = getpid() syz_open_procfs(r0, &(0x7f0000000080)='personality\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) signalfd(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000040)={@random="9f355906ab80", @link_local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x2000, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 5m0.942876742s ago: executing program 35 (id=266): r0 = getpid() syz_open_procfs(r0, &(0x7f0000000080)='personality\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) signalfd(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x2}, 0x4) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000040)={@random="9f355906ab80", @link_local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x2000, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 21.965404443s ago: executing program 0 (id=550): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xfffff000}) 19.7283731s ago: executing program 0 (id=552): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone3(&(0x7f0000000880)={0x2080200, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340), {0x3c}, &(0x7f0000000640)=""/146, 0x92, &(0x7f00000004c0)=""/32, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x120081a, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x19d) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000780)=""/106, 0x6a) 17.806714462s ago: executing program 4 (id=553): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00000, &(0x7f0000000000)={[{@lastblock={'lastblock', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@utf8}, {@unhide}, {@adinicb}, {@shortad}, {@volume={'volume', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@dmode={'dmode', 0x3d, 0x4}}]}, 0x1, 0xc43, &(0x7f00000010c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x1, 0x2) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r1], 0x20}}, 0x0) 16.311951863s ago: executing program 0 (id=555): r0 = inotify_init() syz_read_part_table(0x5e2, &(0x7f0000000b00)="$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") r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f00000000c0)) dup3(r1, r1, 0x80000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x0, 0xfffd}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200, 0x0, 0x0, 0x20000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socket(0x200000000000011, 0x2, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) inotify_add_watch(r0, &(0x7f0000000280)='.\x00', 0x25000001) 15.436398708s ago: executing program 4 (id=556): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4004880}, 0x810) 13.651241533s ago: executing program 4 (id=557): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file2\x00', 0x2210010, &(0x7f0000000000)=ANY=[@ANYBLOB="d436807cd26c9528ca7db2a9347653834b9cd629afe832f8d562dc80d5a4844aa3bb25106b43698af88e9ae4a9bb6e20c791553117ffffffffe69e356a67f1444fecd8c22d47", @ANYRES32=0x0], 0xff, 0x5a59, &(0x7f0000000700)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8, 0x444, 0x529}, 0x25, [0xf5, 0x8, 0x80000001, 0x2, 0x200, 0x3, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0x71c, 0x200038, 0xffffff7f, 0xac, 0x5, 0x3ff, 0x0, 0xea7, 0x1, 0x9be4bf38, 0x0, 0x20002, 0xc, 0x0, 0x8, 0x6, 0x84, 0x8, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x5f85, 0xfffffffe, 0xc1e, 0x9da, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x7f, 0xd2, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x2, 0x6, 0xffffff80, 0x9, 0x6, 0xd2, 0x3ff, 0x5, 0x52, 0x1], [0x5, 0x2, 0xd91, 0x8, 0x401, 0xfffffff8, 0xb, 0x5, 0xfffffffe, 0xa89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0x0, 0x8, 0x8, 0x0, 0x405, 0x2, 0x9, 0x5, 0x9, 0xd, 0x9, 0x206, 0x8, 0x8, 0x5, 0xf, 0xb2d1, 0x1, 0x200, 0x10000000, 0x9, 0xe22, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x80000000, 0x3, 0x801, 0x4, 0x3, 0x29e3, 0x7fc, 0xb4e5, 0x20000, 0x200, 0x6e99, 0x4, 0xff, 0x9, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0x7fff], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x7fff, 0xc, 0x9, 0xcb06, 0xfffeffff, 0x5, 0x37, 0x5, 0x80003, 0xc8, 0x8, 0x8000, 0x2, 0xdf9e, 0x40005, 0x8, 0xf9f, 0x3, 0x7, 0x401, 0x5, 0x2, 0x2, 0x3, 0x2, 0x1, 0x0, 0x10000004, 0x911, 0x6, 0x8000, 0x5, 0x8, 0xb, 0x4, 0x2, 0x1f85, 0x9, 0x3, 0x2, 0x8, 0x7, 0x402, 0x9, 0x10001, 0x40, 0x80000000, 0x1, 0xa, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0xfffffdad], [0x27b, 0x5, 0x6, 0x10, 0x7, 0x8, 0x8, 0x6, 0x7fffffff, 0xe00e, 0xfffffff8, 0x8, 0xffff7bfb, 0x0, 0x401, 0x100, 0x401, 0x0, 0xa, 0x8, 0x3, 0x5, 0xfffffc00, 0x4, 0x9, 0x4, 0x2, 0x2, 0xa, 0x27, 0x400, 0x70, 0x2, 0xffc, 0x400002, 0xc, 0xffffffff, 0x49, 0x80088, 0x10, 0xfff, 0x9a2, 0x81, 0xf011, 0x400, 0x4, 0x8, 0x5, 0x0, 0x0, 0xb, 0x1, 0xc3, 0x9, 0x807ff, 0x1, 0x3, 0xfffffbff, 0x4, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) 12.114150206s ago: executing program 0 (id=559): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x4000) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000000c0)={[{@compress_force}, {@treelog}, {@nodatasum}, {@nossd}, {@commit={'commit', 0x3d, 0x2}}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}]}, 0x0, 0x51ab, &(0x7f000000a440)="$eJzs3V9oVFceB/Az+aPxDyY+xV32wX1YWcUFWRF2UdggGF2Whdn1YVnYrFlZxT+7JUgDwb5YS2lBxGCgthSKD33pS0mlUFqqBAsthYogVloUW0teWiiESsGXlpK590xmzvVmxlQbq5+PJHfO/d1z7pnhPsx3zLkTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIIRwcM3Kv+xaPb2urD7dP3bq6LLt507vP3ljaGjLlRAqtf2VvL5n+66/79+95689scPw37JtX1/ZkFnXz7PGkqads/2af/4TQuhOBujMtzs6G/pW0hOEI8UB53XgZv/o5u7BaxN3zmy8eP3QhuJTZ1bPYk9gseTX1fTctTRQ+92RHFFvN1x6laZLNOufXnA/yZMAAO7JpmptU387mr/FrbePpfWkPZC0x5N2fIcw3thYiGzcJWXzXJvWF2meA1lUWFo6z6Sev/71djXtn7STqHEP82w+NI80PWXzHEnqizVPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfJqx9euvTcy+u3ldWn+8dOHV22/dzp/SdvDA1tuRJCX21/JStXlv+q8w+fLtt57fiRN36zr+ftk515v7jtajg4fBIf/LE3hL0Nlek47JerQqg2F2rN8FKxcLD24M+xAAAAwKPkF7XfHfV2Fge7m9qVWpqs1P5FWVg8cLN/dHP34LWJO2c2Xrx+aMPCx6uWjDdw1/Hq7b65n0pDMI7xNx1vrh4PPVIYZ37piGme/2zmyVsXJn7777L+hfzfN3/+j6+c/A8AAMCPIf+n48yvVf6/+s7zT3UN7n2vrH8h/69tOmUh/8cZx/zfERaW/wEAAOBh9qDz/0BhnPm1yv/fnZ86f/nb46+U9S/k/03t5f+uxmnHnR/FCR/uDWFTq6kDAAAAJeL/u899tBDzevbJQZrXO2ZGe6d6blwtG6+Q/wfay//d9/2ZAQAAAAv1v7F/Hb8wNn6zrF7I/9X28v/SBz5zAAAAoF37Tvz/3PoNIyvL6oX8P9xe/l+eb/OVD1mn9+NfIUz0htAz+2AkK3wQxv9ULwAAAAD3SczpX41u/f7jwel3y44r5P+R+e//H+90ENf/N93/r7D+v6GQ3fVvqxsDAAAA8DgqruePt8fPvrmg7Pv3213/f+uXO3b9d+c/vig7fyH/H2sv/3c2bu/n9/8BAADAAvzcvv/vn4Vx5tfq/v/fDN36et3hZwfL+hfy/3h7+T9uVzQ+van4+jzTG8Ka2Qf53QRfi6c7nBQmuxsK2Quf9Ngde+SFyaUNhZqRpMfve0P49eyDY0lhdSyMJ4WZVXnhbFK4HAv59VAvvJ4UpuKV9sKqfLpp4a1YyBdYTMYVFCvqSyKSHrfLeswW7trjev3kAAAAj5UYnvMs293cDGmUnay0OmB5qwM6Wh3Q2eqAruSA9MCy/WG4uRD3v7jtd7evPPHm06FEIf+fbS//x5diSbYpW/8f4vr//HsN6+v/h2OhLylMxkI1vWNANZ4jC7sn4jn6qnmPmTX1AgAAADzS4ucCnYs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5g7/6D7KrqA4Cf/f0jm91FHAFJNYqA6ZDNJjFKK1MC1UFxpi4OdZw60UR2g9ssJCZhICnthEA7U5hUVKa1o0NDHUdpkUY6jlK1pEyBcaRTm7ZMxWhl/EFtaxnGSodSm87be8/d+87dm/dCdiFLP58/9p33vufnfT/2nXvvOxcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/h38ZWPMb+1f89Py6+PfPuOHDewcuve+jWw8c3bRpw5EQJmYf78jCHYMrui785sBlj+3f+flzp/rvP9Cbl8vjYVnjT2d+55ai1uUhfLEjhO40sHooC/Tk94difSuGQjgtzAWKElODWYm04fDQQAgHw1ygqOr+gRCGSoErjzz4wIFG4o6BEM4NIfSlbXy7L2tjIA2c15sFBtPA9u4s8F/HMkXgS51ZAE5afDMUL/pDE80ZRucvV/P661mwjr240uF1xcRofb4fX7LInSrpTR+YOKmnrVIdi6Ly9jjs3bYE3m2V7Xy7p638RSr/hnJsLtQXOientm65bmZ3fKQzjI111dW0SM/z40/feNWJpJfM6zB2YHRBXofP3vme68+afMuNt24/54m177vg6Ml2s27zLra+kL/mlszzGG30ebIE3n6Vb0krfekKIfzcB7tv6vrtI5+qi1fm/6PHn//Hl3O87WzKHWt9bjibm8dHhmLiqeFsbg4AAABLxlLYa/qjs1/xe6s61zxeV19l/r+yveP/8ZB/PpnPRns4hI2ziZtHQjhz9vEscHds7gMjIbxmNjXRHLgkCRwO4azZxKqiqqREfyyxMgk8OZwHNiaBh2NgIgl8OgZuTwK3xMChJHBVDBxOApfGQJhuHsfPD+fjaDswEAObs414KJ6F8JPh2Fqyrb5VVAUAALBA8tlhT/Pd0rkOJ5shTi8PDbTKEM/Ars3Ql9SQzmCLaVVtDd2tauhsVUMx7n3HH36l5o5WNVdOw+hoznDpK/7w/BVfu+ELoUZl/j9+/Pl/3zwd6agc/w/hitm/MXdnHpkp4psnmjIAAAAAJ2HtG2a+9idnv+nNdfHK/H9je+f/x30iXaXM4dG4G2LbSAjjzYGs2jdXA9lR72V5AAAAAJaC4nh8cSx8Or/NTtFO59PV/BMnmD8e+N84b/5fCpOnb/vBUxvq+luZ/0+0d/7/YPNt1omHYy8+NhJCfynwSOxlIzBrZQx89+LmQD7+h+MGuC1WlZ+YUFR1WyyxOQbGk8DBuhLfKEqc2RzIn6yi8ZuLcUznJUoBAAAAeMHF3QHxuHw8///Ctd/70KaP7/1cXbnK/H/ziZ3/PzsPrpzeP7MshDXdIXSlPwx4dDBbGDAGhjryxFcHs7q60qpuGgzhosbA0qqeyNf/707XGDwykFUVA2e+9rNPn9dIfGoghDXlwGPvvWt2x8juJFA0/qsDIby6Mdq08S/0Z433pI3/QX8IryoFiqo+0B9Co7HetKoH+/LrGKRV/VlfCKeXAkVVb+wLYU8AYImK/0onyw/u2rN325aZmamdi5iI+/AHwtbpmamxq7bPTPbV9Gky6XPTMkY3VcfU2ebYj+ZLFN1z+dhIO+nid4Lj5b7k+/ErJw7m9+N3oZ7Zca7rabq7Ph3y68+pNpEO6cUY8mC5krknsVJ/zN8bloX+63ZN7Ry7Ycvu3TvXZn/bzb4u+xsPM2Xbam26rQbn61sbL492F0N/vtuq6TJXa3Zfs2PNrj17V09fs+Xqqaunrn3D+LrxdevHN7zpwjWNUY1nf1sM9fz5qk6Geuyu6hDavQbU8x3qK7tLlbwQnxoSEhJLLbHl4q/+5b1nfWJZ3cdPZf6/4/jz//ipEz/58/UZ6o7/j8bD/Nnjc4f5N8fAwXaP/4/WHc0vTgxYmQT2xcA+h/kBAAB4aYi7G+PezLhXuuem1WN//MlHnqwrV5n/72vv9/8LtP5/sXT95XXL/K+KJcbr1v9Pl/kv1v/fV7f+f7rMf7H+/8EXYf3/64pAskl+Yv1/AADgpeCFW/+/5fL+6QUCKhlaLu+fXiCgkqHlMv7tXiDghNf/f/tzr+u55iOvviXUqMz/b29v/m/hfgAAADh13HVkQ8eD//o/D9XFK/P/g+3N/1/49f9C3fn/K+sCE3ULA1r/DwAAgCWqbv2/9a/78ebP/WzFD+vKVeb/h9qb/8fTLjqbcsdanxvO1rQL6Zp2Tw0XPxkAAACApaEzjI21u6Jp08qolzz/Nh/PlwI9Xrrsr758zT8+8tb39tfVV5n/H25v/t/0u4xn73zP9WdNvuXG527dfs4Ta993wdG54/8AAADA4ml3vwQAAAAAAAAAAAAAAPDie3rv5Lv++ew7P1MXr/z+P1wx+3jd7//jdf/i7wte3pQ71tp6/b/8/pXvuHfP7JKFjw6HcE45sG3/ttNCfm3+88uBBzatOqOR2J+W+Mp3Lv1BI/H+NPC21S97ppG4KAlsjosknpUG4lUVn1meBOLyin+fBuL2OJQGevPA7y7PxtGRbqsfDWXbqiPdVo8PhTBSChTb6otDWRsd6QDvSALFAD+UBuIAfyUPdKa9undZ1qsYGIpF/2hZ1isAAE5Z8VtgT9g6PTM1Hr/Cx9tXdjffRk1Llt1UrbajzeaP5kuT3XP52Eg76a70u+jctcZ7Ql9jCGsrX1fLWTpmR7kwtbTYdC+vGXKr1d7a/XX2iW663voRDWQjGrtq+8xkT8uBr2+dZV13yyxrK5OdcpbO2U3aRi1t9KWNEbW5bdrocrzfGcbGupJcvxiDo6HJQr0iyuv81b0Kynn2Tb7xb75x7Nihuvoq8//R9ub/feVxPZNfDGBfvLLezSMhnNnmiAAAAIB2fevL/7Ru+yd+55709ort1956weCPLq4rV5n/r2xv/h93jOWHgrO9HYfj9f+L+f9oFrg7NveBkRBeM5uaiCWyC+pfHkuMZ4G74w6TVbHE5onmqvpj4FASeHI4DxxOAg/HQL6X4rMh35XzkeEQNsymrmgusSOWGE0C74yBlUlgLAbGk8DyGNiYBP59eR6YSAJfj4Ew3byt/ny5vSsAAMDzkM+zeprvhnSed6i7VYaOVhkGW2XobJWhr1WGulHE+/fFDD3JySsdpUw9aa0DSS2VDPFi+Cfcr0qG8I3mnGnBStPx/IPifIOO5gz/dtnrv33erlXtX/9/vL35/2Dzbdb6w3H+P3f9vyzwSOzex+Kp4ytj4LsXNwfyHQMPx8nubUVVE3mJfNJ+WyyxMQZWJoEdMbAxCWy+Ig8cPKM5kM+0i8ZvLhqfzkuUAgAAAPCCizsI4m6aOP//0/+++3MH/uHav64rV5n/b2xv/h/bW1Zu7Jai1uUhfLFjrjdFYPVQFoj7MYbiz+NXDIVwWmkHR1FiajAr0Zs0HB4ayH6h3ptWdf9AtsZAvH/lkQcfONBI3DEQwrmlvS9FG9/uy9oYSAPn9WaBwTSwvTsLxD0/ReBLnVkATlqxVzC+oPJTXQqj85eref29VK4Jmg6vsg90nnzz/eZqsfSlD+T7VAsn9rRVqmNRVN4eh73bluK7bdS7rfxFKv+Gcmwu1Bc6J6e2brluZnd8pPxL1opFep7Lv1JtJ70Ar8N9z7+3rfWlHRhPPj7G5y83/+uwI1b37J3vuf6sybfceOv2c55Y+74LjrbdjRrxh8Lv/uTLRsubd7H1hfw1t+Q+TyZ8nizFfwMrPW2NGexTv//V//jp4z+ri1fm/xPtzf+7k9tZz8aNuWskhNeXNu6jcfP/8kj2OVgKZJ+Sp1cD2SH37w3XfnICAADAQit2dxT7C6bz2+yE8HSeXM0/cYL54/6KjfPmb7ffW29+aP8P/+6Or9TFK/P/zcef//cn3XT83/F/Fonj//M61XdF96cP7DupXdGV6lgUjv/P61R/tzn+Py/H/x3/n4/j/y04/j+vU/1pq3xL2uFLVwjh6++/8+33bP+18+rilfn/jvbm/9b/m3/RvmL9v8116//tqFv/b5/1/wAAgEVVs9BcOs+rrN5XyZCu3lfJ0HKBwJZLDFr/74TX/3vrO//3+mOvuGRnqFGZ/+9rb/4fXw7Lyq0vlfX/Vl5RU9XtMbDDwoAAAACciup2EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDievcvPLl8029eOF0X//4ZN3x478Cl931064GjmzZtOBJClrUjC3cMrui68JsDlz22f+fnz53qv/9AX16uJ789uyl3rPW54RAOlh4Ziomnhht35gJXvuPePd2NxKPDIZxTDmzbv+20RuLTwyGcXw48sGnVGY3E/rTEV75z6Q8aifengbetftkzjcRFeaAj7e4nl2fd7Ui7e2B5CCOlQNHdX1/eXFXRxmV5oDNt4zNDWRsxMBSLfnwoayMGZmKJ6f4Q1nSH0JVW9bW+rKqutKq/6Muq6kqr+q2+EC4KIXSnVX2nN6uqOx353/ZmVcXAma/97NPnNRIHe0NYUw489t67NjQSH0oCRePv6g3h1Y2XTNr4fT1Z4z1p43f0hPCqEEJvWuI/u7MSvWmJJ7pDOL0UKBr/YHcIewIvCfHDZ7L84K49e7dtmZmZ2rmIid68rYGwdXpmauyq7TOTfUmf6nSU0sduOn78eI4+feNVjdt7Lh8baSfdnZfrme3yup6mu+sXqvftOtHex34NliuZez4q9cf8vWFZ6L9u19TOsRu27N69c232t93s67K/XXk021ZrF2pbdbYoHz3fbXV+uZI1u6/ZsWbXnr2rp6/ZcvXU1VPXvmF83fi69eMb3nThmsaoxrO/CzHUu44fX4yhvrK7VMkL8QEgISGx1BKdTZ9u46f6P73KF/25jvaEvtkP6Mq0opylY3aUCzHoS6rxrkUadGVKUhnR2srEoZJlXess6yuTibksA1mW2e91lclhuabO2U0a73eGsbHazTLafLe8eX88z+Zt1+P5pms3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/B87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAsAAAAACPO3DqNnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBSAAAA//+3Rsqd") 11.772741048s ago: executing program 5 (id=560): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, 0x0, 0x40000) 10.381407211s ago: executing program 5 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x10000}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) 9.588576785s ago: executing program 0 (id=562): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000280)=0x4) 8.395639299s ago: executing program 4 (id=563): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = syz_clone3(&(0x7f0000000880)={0x2080200, &(0x7f0000000040), &(0x7f0000000300), &(0x7f0000000340), {0x3c}, &(0x7f0000000640)=""/146, 0x92, &(0x7f00000004c0)=""/32, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r0}}, 0x58) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x14806, &(0x7f0000000b00)=ANY=[], 0x0, 0x6fe, &(0x7f0000001340)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup\x00', 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x120081a, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000400)='./file1\x00', 0x19d) lsetxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file1/file0\x00', &(0x7f0000000140), &(0x7f0000000240)='./file0\x00', 0x8, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000780)=""/106, 0x6a) 6.050241422s ago: executing program 4 (id=564): bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r0, 0x0, 0xee01) 5.90548284s ago: executing program 5 (id=565): syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4004880}, 0x810) 4.812315052s ago: executing program 5 (id=566): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063019a00000000009500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r3, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) epoll_create(0xfe) 1.476372479s ago: executing program 4 (id=567): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=r1], 0xff, 0x5a0f, &(0x7f0000000700)="$eJzs3WuQXNV9IPBzu3s0rRk9RgIHGcxokFFCcGyNeJUfqVjJJnYKHEoupxyLlQ0DGhHZklDpEUAmQWTBiwpw4RSpBCcfiAuzi1FcVMHGKJQJj5VYG1vFxkttYWrtXewP3iIsqgBayuX1bM30PT3dt/vO7enp0QN+v5Lm9j19+n/Ovfd09/2fvjMdAAAAeEc4fNuuY5ef+Xvf/fPxN2/+/X/cdksYLE+VV2OFoXR5w4nqIcdTf2XF1DI7Ln7ti9/46cg1v/Odhwe+/tahTeds/uHvnnbN45+/9OC9f/PUG4sf/eXLRXHjeDp/ej15NQmh+u2jf/mlQ8+dMVmWLJn8WdoXwrJk+VPLkkyI0Z+HEDalKysydz7y5oWbJ5e33NHfVL40U894f2ebPM6TA2vvsevfF3702xtu/f7Kb/5934FX9k1XSaoN4ymEJVc1Pr4vhLAw/T8pjrY4HuOgXR9CGGh43AcL+vXeDvu/Jmf9rHS5IF0OFsSJ96/KrJcy9bLrUV9mOVDQ3lzl9aPbekUWZdazL0ZzldfPWL4sXX4rXZ4/y/jldBvKSSgloVLv/tZkeoyEhuOWhGTqWFbr66X6sQ3p9mfWk8x6KbNe7sts11S76UArJ0lzeayXKY8vx5W0/JzG1+o2PpVT/u50WU2fqG/F9ZC9UTPYcqO+XVNiv47O0JfjodTwGtSuvH7g04MxmJYNJstbHjPRRrzv0IY7V5c3Pn14KKcfycNJGj/pKv7e7y1b9LmH9u/Jvq/X419VSuOXuor/48uOvHbF/q99NTf+3TF+uav4Fzwx8Oplz9y2Knf/HI37p9JV/LGXn71r5elXH8jt/30xfrWr+OsOHulffOyJJ3P7Pxr3z8Ku4r/0kY/95MEXHnslN36I8Qe6ir/x4I4v9w8fOy83/pNx/wx2N35eP3DJi8PDPxvJi/98jL+4q/gP7Lv3w/cvvePS3OO7Pu6foa7if+Lcx29ddOyxs/NeO5P7evXOCfDOdFp6jnV7ut5tnjlXDfnCX49Uaud8i9L/i3vZUObkc7KdJb2MDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhHe97798/H99eujVSrren954qVRbxvIFISQLQwi7do/t3L1l+7Ujn79uz87tY1tHxnaPjG/fvfPGkYt+Y2Tn+I6tYzdO3jv6/gtrj1sektoyObul7f6JiYnSUHNZbO/fnHvgR6s/+L//JYTRd/1guJLb/zX3brv/9DY/M5J1Ex/dtufyH1z8d+l2DaX9GmrTr4mJiYmQ06//85lf3P8XR396XgijvzJTv5596bf+qalDUwXTcVKl/lDrUH8y0LYf9V6n/Yn7q7J5y9bx0Zn37+Tjyznb8W+/+MrPN9/wlV/U9m81dzs63L8L101sLf3Vhk/8v7+6qVZQ1K8TddyL9nfciti/uP+q6f5ekm7XkpztquRs123ff/KFb5+5/419YbTy+srWtou2qy8dAH3JuztqN7YwkCxrKq+m9au1m9Pt7t62Y82uG/e+f8u2sWvHrx3f/qG1F629ZPTiSy5eM7Xla3q8/bHxX+1w+4/PeFr6J/u+FX92Np6a+7Vg1vtjsl/F+6OxR3nPv4FPfemeD937zOW1gqJxHmvXX0/S5cDkcV4bGsZb675qt11FxyeEMNJuP7z2xqXhjP++5dai16HGI9P4MyNZN/Hcqn/9uw/+7YrfrBUcl9f5xg51+Tpf7/VQ/aFT+6uaHo+Jk3T/9odyul2Dbfu19rln+u48/C9/Wu/fggXhhrHdu3eurf1clPZ0UXJW235lS+N2rZz6WQ7pbgn1YdpmvE7qC7X+ZV8/Y/XsXh1M7xtMlrfdrqx436ENd64ub3z6cN6eTh6utbgwLK4tk/fk1NyaeWC53uF27Z+sz7+i8TH88b999NOP/sNFLePjgtrPou1Kcrbrmy88cM/Xv/Lv/6F32/Xx3zoy9K//449X1wpO+teVcq0j9V6n/UkaX1cuCKHo+bcytN+O3Odfqf32FD3/su1M128fbySzPhjKXT1fL3hi4NXLnrltVe7z9ehMz9fGjb2p6XHlgufryTJ+ss+vpNLcj/l7fjUNlGTdxHduP23fUzevP7NWUPR+Wa/dblxf2EH+kbNd/3TFi8PXjfy7/9a7141v/MYjV/5wbN2f1QpmOu5P39DazvRxj33pzXGvpvu3mrN/672OeWfj/v3ANddt3VQrL9rPJ+78N13m5z/R1HbtunHvF8a2bh3fuauz7er0/TS2k93L3b6fxle35QXbVWrZrvm70cn+6vT5Fvu/qev91fx8GwxJV+8Le7+3bNHnHtq/Z6jlUWlDV5XS+KWu4v/4siOvXbH/a1/NjX93jF/pKv7Yy8/etfL0qw/kxr8vSeNXZxO//oa97uCR/sXHnngyN/5o7P/Crvr/0kc+9pMHX3jsldz4IcYf7G7/v37gkheHh3+WG//5JG1n8hwphEfevHBzbT0JfWF68mSyH31N/QrZ9SSzXsqslxvXS3EWIW2gnCTN5bFeWn5OyEzkZPxRTnk8C6uuqC3fiushe2Pm8pNNqeG1v1150XkqAMDbXfz8P56Dxs//x9MTpfyZBpg21zxsRU7cmIdNz+c0f8a6Io0fHx/nAYc/EEYnl7eM1E70Z/s5Qnw+ZOc5Yzvnvbc5RuE858RU+y3znEXz76sy67FftfnySkMemmrNayqhg/n31nZmnn/PbH7x51kjt7d0a6Rh3ip7/PrSGbN21ztk+luZjJA3PrLzYvF6juElYf1Uex2Oj+x1NPE4ZK+jie2cmXnh7PY6mrzxMdS6H5r6FcdHrDfD+JjqcvHnka3HL8ywf6ePX/to2eM3i+Ndnaw/35/P9mDesO1L2vGbN5zfz8NOsnnJevyTZV7yZJ83jOVxOyodzid+Oqe8V/OJ8eUi9uvoDH05HswnAm9XMf+P7xGT+f/kCfj/zdQrylOyZ40xXu51QuX2/SnKO1qv0xvo6n1848EdX+4fPnZe7nnOk51ep7ejaW2g4Lqfov24OrNeuB9zJmiK8r1sO0X7PXtdxmBY3NV+f2DfvR++f+kdl+bu9/W1N9Li/X5P09rigv1+CuQL7ePLF06BfGFfSyvxvuN1HUPR/NkJy0fSC5/mKx/5w5zy2eYjAy036ts15eTNR6bfSJvykb7j2y8A4NQR8//652dp/v8/Y4X0PKIobz0/sx7j5eatOecneXnrH6TL7K9IDKa/UTHb8+ZPnPv4rYuOPXZ2bt5yX6d56H9sWhsqzEPnljfn5hHre3O9eG4eUc+z5pYn5va/nifOLU/P+Zi2IU+fWx6du3/qeXTzPMA9RzqLH+cBcuPX5wF6mOf+crpSLz4XW9iQJ7X0v57nFszXZRqLq53O152QPHpJ83bOSx6d/vrsfOXRn8opn20ePdhyo75dU07ePLq5vM37VLvqAACnnJj/x9O4mP8/k6k318/Zc/OCHp23Z/8eSD3+8/OSV07H79Hnv8V533znrfOd18/3vMSpfb3o/M8LDU39Ac/5mic7YZ8vnyx5cdroOzAvBgDgFBLz/4Xpen7+P/v8JGnIT1ryt77aKeR0fnLq5eeN9eTnOfHfNvn5qT7/Nb/Xybzj8/+4nq5OyP8BADgJxfw//tpj/Pt//zldz/7d+lMxTw8+R5ennzJ5+tyuA8g9vo3XAZgHOL7Xxy+crm8eAACAE6FvKlNq/T37z6bL7O/Z5/1e/hU59TtVSU+Pr969c3z8yj07No3tHr9y+3Wbxnddef3OLbt3j2+v1Ztr3pibt6R5Y1+opPujfb1s3rY0/XsIS3P+HkK2fgx71tSN1r+HkG12YcHfEZg+fp31N+/4lWao32585B3vvPh/lFM/qh//a/74gis377pyy/Ytu7eMbd2yd7y53mTWOjCL70tN0v+z+r7UzI8Wpdl/7288PHPrR6mlH33p/sj7fvYk049laU+W5X3/QU6/v/tf/+JPzp34xYMhjL6r/J457b9k3cR/+sz4H+w+/IMdk/0vzdj/es20X0XfV5qtH7ensvW6Xbvft/m6Pduz3yjZnTifUaqvz9N8Rvr0L3c4P7Exp3y2v79fbrlxcup4fgIAgCbx8/94Phs/P/xKegIVyzvP0+f2+XFunj7aWZ6e/V6yojw9Wz9ub6d5enWOeXq2/aI8vV39dnl6Xt6dF/8Pc+rPVufjpIvrPGL6+dD+Pbnj5KrOxkn2+wyKxkm2/mzHSTLHcZJtv2ictKvfbpzkHfe8+J/MqZ+naDxU6uNhbtfl5I6HuzsbD7+eWS8aD9n6sx0PpTmOh2z7ReOhXf124yHv+ObFvzynfqeax8fkwJgaF+NXXn/dzi801Jvv778IrZdkdNK/BdOPnd/v/+hW5/t3fq/7mnv/Q1g3VZLX//m9rmzu/S/a/7O4rmxJaLmuLLf/z89tJqzz/s/v97tk5FVvffzxmq9NXwmKrj8rmsfdkFM+23ncBS03Tk7mceHEifl//Lgn5v93pMtefwx06n9P2tv5e8zmfp401+vji85j3nHv59mP3L2fAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwt9FdWTC0P37br2OVn/t53/3z8zZt//x+33fJrX/zGT0eu+Z3vPDzw9bcObTpn8w9/97RrHv/8pQfv/Zun3lj86C9fLgw8NPWzcn66Wg0heTUJofrto3/5pUPPnTFZloQQysnQvhCWJcufWpZkIoz+PISwqd7P5jsfefPCzZPLW+7obypfmgmS3a4wWI79aexnCDcUbhGnoGo6zvYeu/594Ue/veHW76/85t/3HXhl33SVpNownkJYclXj4/tCCAvT/5PiaFsRH5wu14cQBhoe98GCfr23w/6vyVk/K10uSJeDBXHi/asy66VMvex61JdZDhS0N1d5/ei2XpFFmfXsi9Fc5fUzli9Ll99Kl+fPMn45/k9CKQmVeve3JtNjJDQctyQkU8eyWl8v1Y9tSLc/s55k1kuZ9XJfZrum2k0HWjlJmstjvUx5fDmupOXnNL5Wt/GpnPJ3p8tq+kR9K66H7I2awZYb9e2aEvt1dIa+pP5DcZXulRpeg9qV1w98ejAG07LBZHnLYybaiPcd2nDn6vLGpw8P5fQjeThJ4yddxd/7vWWLPvfQ/j0r8uJfVUrjl7qK/+PLjrx2xf6vfTU3/t0xfrmr+Bc8MfDqZc/ctip3/xyN+6fSVfyxl5+9a+XpVx/I7f99MX61q/jrDh7pX3zsiSdz+z8a98/CruK/9JGP/eTBFx57JTd+iPEHuoq/8eCOL/cPHzsvN/6Tcf8Mdjd+Xj9wyYvDwz8byYv/fIy/uKv4D+y798P3L73j0tzjuz7un6Gu4n/i3MdvXXTssbPzXjuT+3r1zgnwznRaeo51e7rebZ45Vw35wl+PVGrnfIvS/4t72VDGZDtL5jE+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvT/9800Wf/cxHP7mhkoSQ5NSZaCPeV16wbt1IF+2OvfzsXStPv/pAY9mKLuIAAAAAxWIeXqqXVMOKcH2yMJzVtn6cIzgrriXN5dk5hBgnO0fQbZxSmzilLuKUe9SfSo/i9PUozoIexenvUZxqQZxq6CzOwhniVCZHQIf9GZixP53HGexRnEU9irO4R3GW9CjO0h7FGZoxTufjcFmP4izvUZzTehTn9B7FeVeP4vxKj+Kc0aM42Tnl2Y7DxWnNM/PiTN0oF8apJOX6He3m089I2zl7ju0MFrSzuOj9uMN2FnbYznszjyvNsp1qh+386hzbSTps59fn2E6poJ04bm/I9i+2E9c6HP839ijO3h7F+WKP4tzUozh/2qM4f9ajODfPMQ5Ap2L+P53vDYX+ym+GgfQVJzsLEPPdlVM/W9/v8l6QYrz3ZMoXFMXLJuqZeCtn27/sBEIm3qpMeV9TvEo9H5khXrUx3urMnTNt70fWte9bY7zzM+X9M8Rr2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA7++aaLPvuZj35yQ0jC5L+2JtqI95UXrFs30kW7hzbcubq88enDjWX9lS4CAQAAAIViHt5XL6mG/sra0J8saKpXTecBqul6eai2HF4S1k8uk5HS1PpAsmzGx1XSx63ZvW3Hml037n3/lm1j145fO779Q2svWnvJ6MWXXLxm85at46O1nyH0F8QLIUxNP+y6ce8XxrZuHd+5q1aY7f+K9HEr0vUkfdzwB8Lo5PKWtP/LC9ortbQ3fzeKjx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8f3btLkSus3wA+HtmZmem2+bf+dOvaWg2Qz5K1KpJ3EqqpXtAsNB8kKUgs9W1BJtgcdOENimxjm3AtiYoQksgRHJhJBZbizf9sEXsB4FIjQbcGKQtmgu9UFqtpCUXkjKyM3NmZ2ZnOutQkjT+fhfn43mf933Oey4WnrMDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBuTVdGJ8tj4xPDUQhRj5xqF8lYOhvHpQHqfuXF7T/IjZxZ0VildsxlBtoCAAAA0EfShw81I/mQy6RDOlxbu1sSWgbCbN8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD875mujE6Wx8YnLo1CiHrkVLtIxtLZOC4NUPfUu09/9vWRkb+1xooDrAMAAAD0l/ThqWYkH4phaRiKrp3p/JvR5NvAwo759bxZyTqL5pnX+e2gV97SeeZdP8+8j/XJ29A47woAAADw0Zf0/5lmpBBymQVz+uGk/+/X1yd5izvy0o3z/H8rkJ13JgAAAPDBkv4/14wUQy5TbPbr8+33l3TkJfP7/d8+mb+8x/x+/89f3zj7Pz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfHRMV0Yny2PjE+kohKhHTrWLZCydjePSAHVXvzT8j7VHHlnSGstlBlgIAAAA6Cvpw2db73zIZYbDULi01veP3Hrw2S89+/xoCKHe5mezYdemHTvuXV0/Jnmrjh0Z+v7Rt789J29V/XjeNggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxopiujk+Wx8YlLohCiHjnVLpKxdDaOSwPUffPzX/zLkydfeKs1VhxgHQAAAKC/pA+f7f3zoRiyIRuurt219vozUh3ze30zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4e933zgW9smprafK+L83NRTYdwATyGCxftF+f7LxMAAPBhWxyiUP0vXbPxfD81AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwIZiujE6Wx8Yn8lEIUY+cahfJWDobx6UB6sYvHs8tOPPSK62x4gDrAAAAAP0lffhs758PxTAUhsJVtbtu3wRq/X/hHD4kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcEGZroxOlsfGJxZEIUQ9cqpdJGPpbByXBqj7xO4Dnzt8+fdua43lMgMsBAAAAPSV9OHZZiQfcpmPh1y4rnE/1T4hSjfO3b8LzM7b3jZteN7zKm3z0vOet6djZ5nGburz8sl6hfq5Oa80Oy/VmFdqmVcMzfKl5rzay9rXVm1Bn+ec++YBAADg3En6/1wzUgi5TK6l//9pW35BnwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9DBdGZ0sj41PRFEIUY+cahfJWDobx6UB6j7w2/+/7Ks/27uzNVYcYB0AAACgv6QPn+3986EYFoX/C4tqfX8otOcnef8snz38+L/+uiKElVefGMl0Lvuj5OLXb97ycuchhFR7diqEyxv1oh71fvP7x+9fVj37ZAgrr0pfN6de+OB67UvG1efKm9fvOHpie5+XAwAAABeJpP8fakYKIZe5p2f/n3Teffr/ploDfvn9u39xZePY6Mg7ZqQKjXqpHvW+sOzpPy9f8/e3Z/r/ufU+2bz69IGth69sK1iPdIji6tjWnRtO3Hgoley6Xj/dUT95L1/+1lv/3rLrsbP1+vmQb8QXdjxKvdrcY0f5EFenUvsn1r2/v9JeP9Nj/4/87pWTv1q4972Z+u8uHm7Wvz50q1/feaZn/XBJXB2+/dF9Nx04sqG9fgih1K3+O+/dFq75490Pd+5/uGPh1jffeux8AXH12JLTh9YcLN7cXj/qqJ+8/5+ffGLfTx777vNJ/eS3IiuWzrd+qqP+a3uu2P3qQxsXttdP9dj/y3e8PrKt9J0/dO7/rrZVMz2fYu7+n7rhmTvf2BQ/2DkEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwcZmujE6Wx8YnUlEIUY+cahfJWDobx6UB6p5ae/ydO/b++IetseIA6wAAAAD9JX34bO+fD8WQDdkwXOv7nytvXr/j6IntoVAfjRrnzNS2+3Z8Ysu2nffcdZ6eHAAAAJivU2ujWv+faUYKIZdZFoYa/f/Y1p0bTtx4KJX0/6mZcxRC2HL31OaVoZn32p4rdr/60MaFze8EIdR+FpCfyfvMbN6ttxwvnP7T15d3zVs9m3dsyelDaw4Wb07yQmveqtD8PvHUDc/c+cam+MHm87Xmfepr26YanyeSdYdvf3TfTQeObEgl3zEa5+HGukneVGr/xLr391dShZCbGU838vKNfQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAc01XRifLY+MTIR1C1COn2qoRSMbS2TguDVB33bJfPnzZmRcWtcZymQEWAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYb9+QuMo+ziAP89u8maTTdqkfcGomKZVUeqhRUFELyoq0ooUPFWKVFt7EAVBRKkHU2nFUhUvgtVLERXUKIUKNhZLq6Tiv+LFgwoK1YNQigFNKB5UsvvMZjPdcdNNFdTPB5Ynv2dmvvObmSeTLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP0pP13BtPLbroZnbL7j5kyfunX781vce2HHZY2/8MLrlxo/39716enLrym1f37R8y6H71k3sfenoLwPv/HaibfCj9WF1KishxFMxhMr7U88/OfnpebNzMYRQjoNjIQzFZUeHYi5h7a8hhK2NPudvPDB91bbZcceennnzS3Mh+esK1XLWT93g/H75d6mkdbZ95pErwrc3bNz5+Yq33+oePzk2t0uc3aec1lMISzY3H98dQuhNn1nZahvODk7jhhBCX9Nx17Tp6+IF9r+moL4wjf9LY7VNTrZ9Va4u5fbL15nu3NjX5nyLVdRHp/u105+r8y+jxWr0uab1/FAa303j6rPML2efGEoxdDXavz/OrZHQ9NxiiLVnWWnUpcazDen6c3XM1aVcXe7OXVftvGmhlWOcP5/tl5vPXsddaX5l87u6hTsK5s9PYyX9op7O6pD/oa56xg+N66rJ+pr6k17+DqWmd1Cr+caDTw+jmuaqcdkZx/zeJKuybZMbn760vOmDY4MFfcT9MeXHBeXPnadu+2dD/Xe9ufvh4aL8zaWUX+oo/7v1x3+6c/fLLxbmP5fllzvKv/Jw36n1H+5aVXh/prL707Wg/JjqbNvdJz56ZsX/7xlv9axr+fuy/EpH/V8/cbxnYObwkcL+12b3p7ej/G+uu+X71788eLIwP2T5fR3lb5p48NmekZnLC/OP1H8VqrUV2sH6+Xn86q9GRn4cLcr/Irv/Ay3yY9v818b2XvvK0j3rCtfnhuz+DKb83rPq/7ZLDu3snzl4UdG7M+47V385Af6blqf/sZ5KdbvvmQemSy2/Zy5W0/eFF0a76n+B+tNn4FyeKGf2PEv+wnwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3bggAQAAABA0P/X7QgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACeCgAA//9A+xwG") r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x8c, r1, 0x1, 0x70bd25, 0x0, {}, [@TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffa, @empty, 0x7}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'pim6reg\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x8c}}, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000007000000000000000000000b00000000001cc45662aab048dd00000000000000020000"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) 1.251225843s ago: executing program 5 (id=568): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) write$vga_arbiter(r0, 0x0, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) write$vga_arbiter(r0, &(0x7f0000000200)=@unlock_all, 0xb) 198.696065ms ago: executing program 0 (id=569): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000007c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) 0s ago: executing program 5 (id=570): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): ] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.364128][ T7123] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.373995][ T7123] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.383603][ T7123] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.416832][ T7361] fuse: Bad value for 'fd' [ 566.619641][ T5785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 566.638436][ T5785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 566.661167][ T5785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 566.694232][ T5785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 566.720092][ T5785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 566.737004][ T5785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 568.460206][ T7231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.878922][ T5785] Bluetooth: hci6: command tx timeout [ 569.805322][ T5839] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 569.886189][ T7363] chnl_net:caif_netlink_parms(): no params data found [ 570.000745][ T5839] usb 1-1: device descriptor read/64, error -71 [ 570.299443][ T5839] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 570.494981][ T5839] usb 1-1: device descriptor read/64, error -71 [ 570.569924][ T7396] loop4: detected capacity change from 0 to 2048 [ 570.609979][ T5839] usb usb1-port1: attempt power cycle [ 570.842185][ T7396] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 570.915185][ T5785] Bluetooth: hci6: command tx timeout [ 570.953021][ T6332] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.051148][ T5839] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 571.179869][ T5839] usb 1-1: device descriptor read/8, error -71 [ 571.215421][ T6332] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.470024][ T5839] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 571.513636][ T6332] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.557105][ T5839] usb 1-1: device descriptor read/8, error -71 [ 571.700569][ T5839] usb usb1-port1: unable to enumerate USB device [ 571.727577][ T6332] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.966060][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.735496][ T6332] bridge_slave_1: left allmulticast mode [ 572.741622][ T6332] bridge_slave_1: left promiscuous mode [ 572.754269][ T6332] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.929191][ T6332] bridge_slave_0: left allmulticast mode [ 572.935197][ T6332] bridge_slave_0: left promiscuous mode [ 572.942371][ T6332] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.993029][ T5785] Bluetooth: hci6: command tx timeout [ 574.229134][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.275416][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.299027][ T6332] bond0 (unregistering): Released all slaves [ 574.811767][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.819937][ T7363] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.827950][ T7363] bridge_slave_0: entered allmulticast mode [ 574.838256][ T7363] bridge_slave_0: entered promiscuous mode [ 574.955488][ T6332] hsr_slave_0: left promiscuous mode [ 574.994858][ T6332] hsr_slave_1: left promiscuous mode [ 575.009158][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.017051][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.083763][ T5785] Bluetooth: hci6: command tx timeout [ 575.122333][ T6332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.130492][ T6332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 575.172872][ T6332] veth1_macvtap: left promiscuous mode [ 575.179792][ T6332] veth0_macvtap: left promiscuous mode [ 575.185791][ T6332] veth1_vlan: left promiscuous mode [ 575.191654][ T6332] veth0_vlan: left promiscuous mode [ 576.409745][ T7431] loop0: detected capacity change from 0 to 8 [ 576.662617][ T6449] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 577.470666][ T6449] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 577.488748][ T6449] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 577.491509][ T6332] team0 (unregistering): Port device team_slave_1 removed [ 577.612721][ T7440] SQUASHFS error: xz decompression failed, data probably corrupt [ 577.621498][ T7440] SQUASHFS error: Failed to read block 0xa8: -5 [ 577.674040][ T7440] SQUASHFS error: xz decompression failed, data probably corrupt [ 577.682480][ T7440] SQUASHFS error: Failed to read block 0xa8: -5 [ 578.483919][ T6332] team0 (unregistering): Port device team_slave_0 removed [ 579.456915][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.465018][ T7363] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.473188][ T7363] bridge_slave_1: entered allmulticast mode [ 579.483531][ T7363] bridge_slave_1: entered promiscuous mode [ 579.533224][ T30] audit: type=1800 audit(1742959337.595:16): pid=7440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.319" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 579.665596][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 579.685579][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 579.695460][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 580.460622][ T7231] veth0_vlan: entered promiscuous mode [ 580.488621][ T7363] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 580.691230][ T7363] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.760019][ T7442] loop4: detected capacity change from 0 to 4096 [ 580.765869][ T7231] veth1_vlan: entered promiscuous mode [ 580.808680][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 580.824575][ T7442] ntfs3: Unknown parameter ' °°š|discPrd' [ 580.998502][ T24] usb 1-1: device descriptor read/64, error -71 [ 581.279734][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 581.329650][ T7363] team0: Port device team_slave_0 added [ 581.387247][ T7363] team0: Port device team_slave_1 added [ 581.516111][ T24] usb 1-1: device descriptor read/64, error -71 [ 581.788738][ T5785] Bluetooth: hci3: command tx timeout [ 583.374613][ T24] usb usb1-port1: attempt power cycle [ 583.919109][ T5785] Bluetooth: hci3: command tx timeout [ 585.041487][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.049065][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.077034][ T7363] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.253356][ T7231] veth0_macvtap: entered promiscuous mode [ 585.271035][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 585.324365][ T7363] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.332345][ T7363] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.363584][ T7363] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.388241][ T7231] veth1_macvtap: entered promiscuous mode [ 585.468709][ T7451] netlink: 124 bytes leftover after parsing attributes in process `syz.4.323'. [ 585.610264][ T24] usb 1-1: device descriptor read/8, error -71 [ 585.914899][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.927354][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.938179][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.949385][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.961689][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.972905][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 585.983201][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 585.993977][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 586.007707][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 586.018878][ T5785] Bluetooth: hci3: command tx timeout [ 586.069818][ T7451] loop4: detected capacity change from 0 to 1024 [ 586.272497][ T7451] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 586.283616][ T7451] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 586.294065][ T7451] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.323: Failed to acquire dquot type 0 [ 586.323673][ T7254] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.510069][ T7451] EXT4-fs (loop4): 1 truncate cleaned up [ 586.517496][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.781096][ T7254] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.102067][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.113881][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.130279][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.141127][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.151355][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.162024][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.172271][ T7231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 587.185570][ T7231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 587.200413][ T7231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.246925][ T7363] hsr_slave_0: entered promiscuous mode [ 587.260759][ T7363] hsr_slave_1: entered promiscuous mode [ 587.270331][ T7363] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 587.278678][ T7363] Cannot create hsr debugfs directory [ 587.376475][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.382104][ T7254] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.434988][ T7231] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.444669][ T7231] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.454069][ T7231] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.463284][ T7231] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.575416][ T7254] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.034174][ T5783] Bluetooth: hci3: command tx timeout [ 588.244242][ T7434] chnl_net:caif_netlink_parms(): no params data found [ 589.151463][ T7254] bridge_slave_1: left allmulticast mode [ 589.157449][ T7254] bridge_slave_1: left promiscuous mode [ 589.164785][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.333079][ T7254] bridge_slave_0: left allmulticast mode [ 589.345050][ T7254] bridge_slave_0: left promiscuous mode [ 589.354225][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.032038][ T5783] Bluetooth: hci2: command 0x0406 tx timeout [ 590.192940][ T7477] loop0: detected capacity change from 0 to 8 [ 591.324588][ T7254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.351370][ T7483] SQUASHFS error: xz decompression failed, data probably corrupt [ 591.359787][ T7483] SQUASHFS error: Failed to read block 0xa8: -5 [ 591.411191][ T7483] SQUASHFS error: xz decompression failed, data probably corrupt [ 591.419645][ T7483] SQUASHFS error: Failed to read block 0xa8: -5 [ 591.427766][ T30] audit: type=1800 audit(1742959351.325:17): pid=7483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.329" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 591.830639][ T7254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.924903][ T7254] bond0 (unregistering): Released all slaves [ 592.695386][ T7254] hsr_slave_0: left promiscuous mode [ 592.753963][ T7254] hsr_slave_1: left promiscuous mode [ 592.762709][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 592.770725][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 592.838974][ T5836] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 592.871729][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 592.879941][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 593.045562][ T7254] veth1_macvtap: left promiscuous mode [ 593.053358][ T7254] veth0_macvtap: left promiscuous mode [ 593.059635][ T7254] veth1_vlan: left promiscuous mode [ 593.065307][ T7254] veth0_vlan: left promiscuous mode [ 593.158732][ T5836] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 593.169668][ T5836] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 593.180020][ T5836] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 593.189897][ T5836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.786309][ T5836] usb 1-1: config 0 descriptor?? [ 594.248908][ T5860] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 594.468704][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 594.520204][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7 [ 594.531782][ T5860] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024 [ 594.667579][ T5860] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 594.677424][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.685920][ T5860] usb 5-1: Product: syz [ 594.690370][ T5860] usb 5-1: Manufacturer: syz [ 594.695227][ T5860] usb 5-1: SerialNumber: syz [ 594.830849][ T5860] usb 5-1: config 0 descriptor?? [ 594.964598][ T5860] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 595.084845][ T5860] usb 5-1: USB disconnect, device number 5 [ 595.091804][ T3461] usb 5-1: Failed to submit usb control message: -71 [ 595.099330][ T3461] usb 5-1: unable to send the bmi data to the device: -71 [ 595.106853][ T3461] usb 5-1: unable to get target info from device [ 595.113851][ T3461] usb 5-1: could not get target info (-71) [ 595.120209][ T3461] usb 5-1: could not probe fw (-71) [ 595.496333][ T7254] team0 (unregistering): Port device team_slave_1 removed [ 595.539968][ T7254] team0 (unregistering): Port device team_slave_0 removed [ 596.036329][ T5836] usb 1-1: USB disconnect, device number 15 [ 597.769221][ T7434] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.777108][ T7434] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.779963][ T7511] loop0: detected capacity change from 0 to 4096 [ 597.785487][ T7434] bridge_slave_0: entered allmulticast mode [ 597.802555][ T7434] bridge_slave_0: entered promiscuous mode [ 598.034203][ T7254] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.123526][ T7434] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.131526][ T7434] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.139499][ T7434] bridge_slave_1: entered allmulticast mode [ 598.151271][ T7434] bridge_slave_1: entered promiscuous mode [ 598.290202][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 598.296985][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 598.599253][ T7254] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.021885][ T7363] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 599.134654][ T7254] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.226509][ T7434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 599.238991][ T7363] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 599.363949][ T7254] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.461161][ T7434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 599.479665][ T7363] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 600.101993][ T7363] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 600.319104][ T7434] team0: Port device team_slave_0 added [ 600.419452][ T7528] loop0: detected capacity change from 0 to 8 [ 601.143099][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 601.153567][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 601.166862][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 601.230118][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 601.269360][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 601.288927][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 601.395565][ T7434] team0: Port device team_slave_1 added [ 601.473978][ T7528] SQUASHFS error: xz decompression failed, data probably corrupt [ 601.482507][ T7528] SQUASHFS error: Failed to read block 0xa8: -5 [ 601.533877][ T7528] SQUASHFS error: xz decompression failed, data probably corrupt [ 601.542143][ T7528] SQUASHFS error: Failed to read block 0xa8: -5 [ 601.550739][ T30] audit: type=1800 audit(1742959361.455:18): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.338" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 602.192090][ T7254] bridge_slave_1: left allmulticast mode [ 602.198595][ T7254] bridge_slave_1: left promiscuous mode [ 602.205498][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.319544][ T7254] bridge_slave_0: left allmulticast mode [ 602.325530][ T7254] bridge_slave_0: left promiscuous mode [ 602.332625][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.969168][ T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 603.187965][ T7254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 603.240686][ T7254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 603.259173][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 603.274363][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 603.285281][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.286811][ T7254] bond0 (unregistering): Released all slaves [ 603.296845][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.388948][ T5785] Bluetooth: hci2: command tx timeout [ 603.471488][ T24] usb 1-1: config 0 descriptor?? [ 603.598680][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 603.606158][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.634689][ T7434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.011379][ T7434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.019171][ T7434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 604.046623][ T7434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.453591][ T7254] hsr_slave_0: left promiscuous mode [ 604.498766][ T7254] hsr_slave_1: left promiscuous mode [ 604.507199][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.517407][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.585984][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.598680][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.731096][ T7254] veth1_macvtap: left promiscuous mode [ 604.737090][ T7254] veth0_macvtap: left promiscuous mode [ 604.743465][ T7254] veth1_vlan: left promiscuous mode [ 604.749534][ T7254] veth0_vlan: left promiscuous mode [ 605.532811][ T5785] Bluetooth: hci2: command tx timeout [ 605.807723][ T7254] team0 (unregistering): Port device team_slave_1 removed [ 605.875571][ T24] usb 1-1: USB disconnect, device number 16 [ 605.909851][ T7254] team0 (unregistering): Port device team_slave_0 removed [ 607.128420][ T7434] hsr_slave_0: entered promiscuous mode [ 607.139604][ T7434] hsr_slave_1: entered promiscuous mode [ 607.573035][ T5785] Bluetooth: hci2: command tx timeout [ 608.111365][ T7254] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.366430][ T7254] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.564571][ T7254] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.707761][ T7363] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.791859][ T7254] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.193460][ T7533] chnl_net:caif_netlink_parms(): no params data found [ 609.547352][ T7575] loop0: detected capacity change from 0 to 8 [ 609.635245][ T7363] 8021q: adding VLAN 0 to HW filter on device team0 [ 609.643954][ T5785] Bluetooth: hci2: command tx timeout [ 609.754757][ T7254] bridge_slave_1: left allmulticast mode [ 609.761441][ T7254] bridge_slave_1: left promiscuous mode [ 609.768629][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.931962][ T7254] bridge_slave_0: left allmulticast mode [ 609.937960][ T7254] bridge_slave_0: left promiscuous mode [ 609.945301][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.638554][ T7575] SQUASHFS error: xz decompression failed, data probably corrupt [ 610.646719][ T7575] SQUASHFS error: Failed to read block 0xa8: -5 [ 610.692185][ T7575] SQUASHFS error: xz decompression failed, data probably corrupt [ 610.700452][ T7575] SQUASHFS error: Failed to read block 0xa8: -5 [ 610.710407][ T30] audit: type=1800 audit(1742959370.605:19): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.348" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 611.559186][ T7254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.633895][ T7254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.664674][ T7254] bond0 (unregistering): Released all slaves [ 611.785893][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.793870][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 612.421071][ T7254] hsr_slave_0: left promiscuous mode [ 612.500705][ T7254] hsr_slave_1: left promiscuous mode [ 612.510026][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.517785][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.691361][ T7254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.699858][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.952989][ T7254] veth1_macvtap: left promiscuous mode [ 612.959792][ T7254] veth0_macvtap: left promiscuous mode [ 612.966253][ T7254] veth1_vlan: left promiscuous mode [ 612.972458][ T7254] veth0_vlan: left promiscuous mode [ 614.446681][ T7254] team0 (unregistering): Port device team_slave_1 removed [ 614.489287][ T7254] team0 (unregistering): Port device team_slave_0 removed [ 614.560296][ T5828] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 614.770714][ T5828] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.781679][ T5828] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 614.791316][ T5828] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 614.800889][ T5828] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.927837][ T5828] usb 5-1: config 0 descriptor?? [ 615.444995][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.453053][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 616.722270][ T7533] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.731177][ T7533] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.740069][ T7533] bridge_slave_0: entered allmulticast mode [ 616.752505][ T7533] bridge_slave_0: entered promiscuous mode [ 616.803942][ T7434] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 616.923564][ T7533] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.932732][ T7533] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.941863][ T7533] bridge_slave_1: entered allmulticast mode [ 616.953331][ T7533] bridge_slave_1: entered promiscuous mode [ 616.974632][ T7434] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 617.364175][ T7434] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 617.563865][ T7434] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.617058][ T7533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.760408][ T7533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.838539][ T5839] usb 5-1: USB disconnect, device number 6 [ 618.266347][ T7533] team0: Port device team_slave_0 added [ 618.451828][ T7533] team0: Port device team_slave_1 added [ 619.462484][ T7609] loop4: detected capacity change from 0 to 40427 [ 619.589270][ T7609] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288) [ 619.668766][ T7609] F2FS-fs (loop4): invalid crc value [ 619.736424][ T7609] F2FS-fs (loop4): Found nat_bits in checkpoint [ 620.024922][ T7609] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 620.129903][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.137185][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.167747][ T7533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.296352][ T5791] syz-executor: attempt to access beyond end of device [ 620.296352][ T5791] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 620.311710][ T5791] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 620.459099][ T7533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.469725][ T7533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.497658][ T7533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.535570][ T7533] hsr_slave_0: entered promiscuous mode [ 621.546828][ T7533] hsr_slave_1: entered promiscuous mode [ 621.557021][ T7533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 621.565022][ T7533] Cannot create hsr debugfs directory [ 621.801503][ T7363] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.877506][ T7434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.754008][ T7434] 8021q: adding VLAN 0 to HW filter on device team0 [ 622.946560][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.954478][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.089508][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.097344][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.315502][ T7533] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 625.434208][ T7533] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 625.455634][ T7637] loop0: detected capacity change from 0 to 8 [ 625.617976][ T7533] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 625.756952][ T7533] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 626.521000][ T7641] SQUASHFS error: xz decompression failed, data probably corrupt [ 626.529361][ T7641] SQUASHFS error: Failed to read block 0xa8: -5 [ 626.577624][ T7641] SQUASHFS error: xz decompression failed, data probably corrupt [ 626.585893][ T7641] SQUASHFS error: Failed to read block 0xa8: -5 [ 626.594329][ T30] audit: type=1800 audit(1742959386.495:20): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.357" name="file0" dev="loop0" ino=3 res=0 errno=0 [ 626.771901][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 626.821199][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 626.852085][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 626.882871][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 626.896111][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 626.906513][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 628.151468][ T7434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.210456][ T7533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 628.991566][ T5785] Bluetooth: hci1: command tx timeout [ 630.407878][ T7533] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.607161][ T5837] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 630.866544][ T5837] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.877791][ T5837] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 630.891656][ T5837] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.901244][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.028141][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.036093][ T7254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.110451][ T5785] Bluetooth: hci1: command tx timeout [ 631.137729][ T5837] usb 1-1: config 0 descriptor?? [ 631.153203][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.161397][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.301563][ T5837] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 631.759972][ T7642] chnl_net:caif_netlink_parms(): no params data found [ 633.159476][ T5785] Bluetooth: hci1: command tx timeout [ 633.624332][ T5837] usb 1-1: USB disconnect, device number 17 [ 634.071414][ T7434] veth0_vlan: entered promiscuous mode [ 634.334793][ T7533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.464244][ T7642] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.475258][ T7642] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.483445][ T7642] bridge_slave_0: entered allmulticast mode [ 634.497950][ T7642] bridge_slave_0: entered promiscuous mode [ 634.590476][ T7434] veth1_vlan: entered promiscuous mode [ 634.760131][ T7642] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.771525][ T7642] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.779698][ T7642] bridge_slave_1: entered allmulticast mode [ 634.789720][ T7642] bridge_slave_1: entered promiscuous mode [ 634.969276][ T3518] bridge_slave_1: left allmulticast mode [ 634.975471][ T3518] bridge_slave_1: left promiscuous mode [ 634.984267][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.184305][ T3518] bridge_slave_0: left allmulticast mode [ 635.190504][ T3518] bridge_slave_0: left promiscuous mode [ 635.197334][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.231153][ T5785] Bluetooth: hci1: command tx timeout [ 635.960358][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.993832][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.064240][ T3518] bond0 (unregistering): Released all slaves [ 636.570803][ T7642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.768895][ T3518] hsr_slave_0: left promiscuous mode [ 636.807828][ T3518] hsr_slave_1: left promiscuous mode [ 636.816628][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.879329][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 636.982232][ T7703] loop0: detected capacity change from 0 to 128 [ 636.995909][ T7703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 637.014971][ T7703] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 637.475178][ T7706] syz.0.365 uses obsolete (PF_INET,SOCK_PACKET) [ 637.667276][ T7706] capability: warning: `syz.0.365' uses deprecated v2 capabilities in a way that may be insecure [ 639.187299][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 639.220086][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 639.449950][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 639.461406][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 639.471611][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 639.487873][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 639.501432][ T5783] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 639.512852][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 639.651917][ T7642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.892938][ T7642] team0: Port device team_slave_0 added [ 641.034777][ T7642] team0: Port device team_slave_1 added [ 641.788811][ T5783] Bluetooth: hci5: command tx timeout [ 641.922733][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.930179][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.957533][ T7642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 642.207799][ T7642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 642.215539][ T7642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.242362][ T7642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 643.877388][ T7642] hsr_slave_0: entered promiscuous mode [ 643.888602][ T7642] hsr_slave_1: entered promiscuous mode [ 643.897941][ T7642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.906120][ T7642] Cannot create hsr debugfs directory [ 644.028250][ T5783] Bluetooth: hci5: command tx timeout [ 645.186206][ T7533] veth0_vlan: entered promiscuous mode [ 645.442185][ T7533] veth1_vlan: entered promiscuous mode [ 645.982299][ T7709] chnl_net:caif_netlink_parms(): no params data found [ 646.008280][ T7729] netlink: 'syz.0.369': attribute type 10 has an invalid length. [ 646.228720][ T5783] Bluetooth: hci5: command tx timeout [ 646.667971][ T7533] veth0_macvtap: entered promiscuous mode [ 646.801872][ T7733] program syz.4.370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 647.126357][ T7533] veth1_macvtap: entered promiscuous mode [ 647.714380][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.725608][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.735890][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.747149][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.763074][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.176866][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.187892][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.198417][ T7533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 648.209347][ T7533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.227319][ T7533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.289190][ T5783] Bluetooth: hci5: command tx timeout [ 648.333482][ T7642] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 648.371081][ T7642] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 648.424436][ T7642] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 648.493279][ T7642] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 648.916562][ T7533] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.926196][ T7533] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.936836][ T7533] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.946466][ T7533] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.079767][ T7750] loop4: detected capacity change from 0 to 8 [ 649.350580][ T7753] loop0: detected capacity change from 0 to 64 [ 649.456205][ T7753] hfs: unable to locate alternate MDB [ 649.462047][ T7753] hfs: continuing without an alternate MDB [ 649.626060][ T7709] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.635630][ T7709] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.644083][ T7709] bridge_slave_0: entered allmulticast mode [ 649.659139][ T7709] bridge_slave_0: entered promiscuous mode [ 649.942935][ T7709] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.951409][ T7709] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.961080][ T7709] bridge_slave_1: entered allmulticast mode [ 649.971183][ T7709] bridge_slave_1: entered promiscuous mode [ 650.086467][ T7254] bridge_slave_1: left allmulticast mode [ 650.092877][ T7254] bridge_slave_1: left promiscuous mode [ 650.102236][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.191915][ T7254] bridge_slave_0: left allmulticast mode [ 650.197957][ T7254] bridge_slave_0: left promiscuous mode [ 650.205202][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.050764][ T7254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.107367][ T7254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.140068][ T7254] bond0 (unregistering): Released all slaves [ 651.662276][ T7254] hsr_slave_0: left promiscuous mode [ 651.711062][ T7254] hsr_slave_1: left promiscuous mode [ 651.719739][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.807159][ T7254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.975566][ T7254] veth1_vlan: left promiscuous mode [ 651.981871][ T7254] veth0_vlan: left promiscuous mode [ 652.096437][ T7767] netlink: 'syz.0.378': attribute type 10 has an invalid length. [ 653.031234][ T7254] team0 (unregistering): Port device team_slave_1 removed [ 653.077329][ T7254] team0 (unregistering): Port device team_slave_0 removed [ 653.446445][ T7709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 653.701471][ T7709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.347458][ T7709] team0: Port device team_slave_0 added [ 654.421912][ T7709] team0: Port device team_slave_1 added [ 654.538847][ T5783] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 654.729653][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.736910][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.763872][ T7709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.847681][ T7642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.036396][ T7709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 655.045467][ T7709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 655.075392][ T7709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.145071][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 655.235798][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.243894][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.370294][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.378298][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.888600][ T7709] hsr_slave_0: entered promiscuous mode [ 655.901273][ T7709] hsr_slave_1: entered promiscuous mode [ 657.590898][ T7812] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 657.659268][ T7812] team0: Port device macvlan0 added [ 658.896590][ T5783] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 659.037682][ T7709] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 659.175058][ T7709] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 659.290944][ T7709] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 659.369394][ T7642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 659.417439][ T7709] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 659.667372][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 659.674569][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 661.498821][ T7709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.770845][ T7709] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.845161][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 661.855002][ T5785] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 661.881380][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.889402][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.929811][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 661.979126][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 662.015031][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 662.026234][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 662.150376][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.158466][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.175623][ T7642] veth0_vlan: entered promiscuous mode [ 664.190598][ T5785] Bluetooth: hci3: command tx timeout [ 664.295298][ T7852] netlink: 'syz.0.397': attribute type 10 has an invalid length. [ 664.370246][ T7642] veth1_vlan: entered promiscuous mode [ 664.950901][ T7642] veth0_macvtap: entered promiscuous mode [ 665.144924][ T7642] veth1_macvtap: entered promiscuous mode [ 665.994410][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.006235][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.017191][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.029737][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.041550][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 666.053415][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 666.073925][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.270539][ T5785] Bluetooth: hci3: command tx timeout [ 666.887664][ T7838] chnl_net:caif_netlink_parms(): no params data found [ 667.014612][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.026028][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.037024][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.048539][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.061143][ T7642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 667.072651][ T7642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 667.091026][ T7642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 667.697415][ T7642] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.707425][ T7642] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.719314][ T7642] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.729043][ T7642] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.353977][ T5785] Bluetooth: hci3: command tx timeout [ 668.793747][ T3518] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.030050][ T7709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.128790][ T3518] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.363306][ T3518] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.460930][ T5785] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 669.775109][ T3518] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.469785][ T5785] Bluetooth: hci3: command tx timeout [ 670.503189][ T3518] bridge_slave_1: left allmulticast mode [ 670.509714][ T3518] bridge_slave_1: left promiscuous mode [ 670.516584][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.565059][ T3518] bridge_slave_0: left allmulticast mode [ 670.571823][ T3518] bridge_slave_0: left promiscuous mode [ 670.580537][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.377631][ T3518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.446063][ T3518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.477186][ T3518] bond0 (unregistering): Released all slaves [ 672.002046][ T3518] hsr_slave_0: left promiscuous mode [ 672.021406][ T3518] hsr_slave_1: left promiscuous mode [ 672.030189][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.038790][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 672.067495][ T3518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 672.077289][ T3518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 672.162753][ T7881] loop4: detected capacity change from 0 to 2048 [ 672.172491][ T3518] veth1_macvtap: left promiscuous mode [ 672.179736][ T3518] veth0_macvtap: left promiscuous mode [ 672.185745][ T3518] veth1_vlan: left promiscuous mode [ 672.194042][ T3518] veth0_vlan: left promiscuous mode [ 672.760602][ T7881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 673.143718][ T3518] team0 (unregistering): Port device team_slave_1 removed [ 673.222315][ T3518] team0 (unregistering): Port device team_slave_0 removed [ 673.224687][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.607563][ T7838] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.617487][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.625565][ T7838] bridge_slave_0: entered allmulticast mode [ 673.635350][ T7838] bridge_slave_0: entered promiscuous mode [ 673.794300][ T7838] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.802649][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.810893][ T7838] bridge_slave_1: entered allmulticast mode [ 673.822553][ T7838] bridge_slave_1: entered promiscuous mode [ 674.384265][ T7893] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 674.434253][ T7838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.582984][ T7838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.943196][ T7838] team0: Port device team_slave_0 added [ 675.062468][ T7838] team0: Port device team_slave_1 added [ 675.313305][ T7901] loop0: detected capacity change from 0 to 256 [ 675.365424][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.373259][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.373743][ T5836] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 675.399899][ T7838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.675019][ T7838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.682466][ T7838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.699669][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 675.709188][ T7838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.769515][ T5836] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 675.780300][ T7709] veth0_vlan: entered promiscuous mode [ 675.782472][ T5836] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 675.847135][ T5836] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 675.857672][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.869460][ T5836] usb 5-1: Product: syz [ 675.874073][ T5836] usb 5-1: Manufacturer: syz [ 675.880368][ T5836] usb 5-1: SerialNumber: syz [ 675.980815][ T5836] usb 5-1: config 0 descriptor?? [ 675.984860][ T7709] veth1_vlan: entered promiscuous mode [ 676.061699][ T5836] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 676.075805][ T5836] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 676.342234][ T7838] hsr_slave_0: entered promiscuous mode [ 676.356824][ T7838] hsr_slave_1: entered promiscuous mode [ 676.368907][ T7838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.380574][ T7838] Cannot create hsr debugfs directory [ 676.672515][ T5785] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 676.708903][ T5836] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 676.739469][ T5836] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 677.181125][ T7709] veth0_macvtap: entered promiscuous mode [ 677.341658][ T7709] veth1_macvtap: entered promiscuous mode [ 677.364700][ T5836] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 677.409494][ T5836] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 677.629327][ T5836] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 677.646337][ T5836] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 677.676393][ T5836] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 677.692518][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.703622][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.718640][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.730756][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.741433][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 677.752361][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 677.768863][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 677.797216][ T5836] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 677.868665][ T5836] usb 5-1: USB disconnect, device number 7 [ 677.975954][ T7909] loop0: detected capacity change from 0 to 2048 [ 678.070479][ T7909] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 678.202807][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.214463][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.228562][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.240513][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.250965][ T7709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 678.262018][ T7709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 678.277823][ T7709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 678.322771][ T7909] syz.0.409: attempt to access beyond end of device [ 678.322771][ T7909] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 678.322809][ T7912] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 678.703425][ T7709] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.712884][ T7709] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.722198][ T7709] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 678.735365][ T7709] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.463674][ T7838] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 679.510364][ T7838] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 679.545290][ T7838] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 679.666642][ T7838] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 680.033373][ T7918] loop0: detected capacity change from 0 to 2048 [ 680.203030][ T7918] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 680.783871][ T7928] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 681.111714][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.749642][ T7838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.053678][ T3518] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.062543][ T3518] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.197814][ T6332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.206400][ T6332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.264656][ T7838] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.322741][ T7940] netlink: 'syz.0.414': attribute type 10 has an invalid length. [ 682.445237][ T6648] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.453196][ T6648] bridge0: port 1(bridge_slave_0) entered forwarding state [ 682.641288][ T6648] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.649756][ T6648] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.461962][ T5785] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 684.476339][ T1710] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 684.682388][ T1710] usb 5-1: Using ep0 maxpacket: 16 [ 684.710892][ T1710] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 684.720005][ T1710] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 684.728975][ T1710] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 684.737465][ T1710] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 684.746275][ T1710] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 684.755732][ T1710] usb 5-1: config 0 has no interface number 0 [ 684.762404][ T1710] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 684.778803][ T1710] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 684.790532][ T1710] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 684.801186][ T1710] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 684.814938][ T1710] usb 5-1: config 0 interface 125 has no altsetting 0 [ 684.822217][ T1710] usb 5-1: config 0 interface 125 has no altsetting 2 [ 685.908966][ T1710] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 685.918746][ T1710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.927086][ T1710] usb 5-1: Product: syz [ 685.931784][ T1710] usb 5-1: Manufacturer: syz [ 685.936719][ T1710] usb 5-1: SerialNumber: syz [ 686.162580][ T1710] usb 5-1: config 0 descriptor?? [ 686.238458][ T1710] usb 5-1: selecting invalid altsetting 2 [ 687.519726][ T7936] usb 5-1: USB disconnect, device number 8 [ 688.121369][ T7838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.016006][ T7984] loop0: detected capacity change from 0 to 2048 [ 689.220590][ T7984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 689.249702][ T7990] netlink: 'syz.4.423': attribute type 10 has an invalid length. [ 689.916413][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.261307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 693.272459][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.994577][ T7838] veth0_vlan: entered promiscuous mode [ 694.140478][ T6332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.149046][ T6332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.377330][ T7838] veth1_vlan: entered promiscuous mode [ 695.052433][ T7838] veth0_macvtap: entered promiscuous mode [ 695.150275][ T7838] veth1_macvtap: entered promiscuous mode [ 695.340072][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.351752][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.362674][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.373583][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.384021][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.395560][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.405916][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 695.416794][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.440475][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 695.702330][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.714358][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.724746][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.740311][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.751915][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.763037][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.773540][ T7838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 695.784371][ T7838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 695.800142][ T7838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 696.430267][ T7838] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.439701][ T7838] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.459130][ T7838] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 696.469163][ T7838] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 700.970037][ T5783] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 700.994468][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 701.005541][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 701.035058][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 701.101714][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 701.132768][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 701.175149][ T8053] netlink: 'syz.0.434': attribute type 10 has an invalid length. [ 701.338569][ T1710] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 702.056330][ T1710] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 702.065254][ T1710] usb 6-1: config 0 has no interface number 0 [ 702.071888][ T1710] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 702.087473][ T1710] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 702.103548][ T1710] usb 6-1: config 0 interface 255 has no altsetting 0 [ 702.111385][ T1710] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 702.120946][ T1710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.551980][ T1710] usb 6-1: config 0 descriptor?? [ 702.582222][ T1710] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 703.190573][ T5860] usb 6-1: USB disconnect, device number 2 [ 703.240273][ T5783] Bluetooth: hci2: command tx timeout [ 705.308863][ T5783] Bluetooth: hci2: command tx timeout [ 705.903168][ T8049] chnl_net:caif_netlink_parms(): no params data found [ 706.837906][ T8078] netlink: 124 bytes leftover after parsing attributes in process `syz.0.439'. [ 707.388863][ T5783] Bluetooth: hci2: command tx timeout [ 707.744116][ T8078] loop0: detected capacity change from 0 to 1024 [ 708.380546][ T8078] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 708.392726][ T8078] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 708.403704][ T8078] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.439: Failed to acquire dquot type 0 [ 708.811249][ T8078] EXT4-fs (loop0): 1 truncate cleaned up [ 708.822185][ T8078] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 709.469180][ T5783] Bluetooth: hci2: command tx timeout [ 709.966062][ T5860] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 710.234012][ T5860] usb 5-1: device descriptor read/64, error -71 [ 710.317699][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 710.540594][ T5860] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 710.567883][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.763756][ T5860] usb 5-1: device descriptor read/64, error -71 [ 710.897524][ T5860] usb usb5-port1: attempt power cycle [ 710.997093][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.343072][ T5860] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 711.463186][ T5860] usb 5-1: device descriptor read/8, error -71 [ 711.716430][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.768889][ T5860] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 711.859881][ T8049] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.868555][ T8049] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.877160][ T8049] bridge_slave_0: entered allmulticast mode [ 711.889339][ T8049] bridge_slave_0: entered promiscuous mode [ 712.027432][ T5860] usb 5-1: device descriptor read/8, error -71 [ 712.033277][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.142048][ T5860] usb usb5-port1: unable to enumerate USB device [ 712.268922][ T8049] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.277538][ T8049] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.285980][ T8049] bridge_slave_1: entered allmulticast mode [ 712.296921][ T8049] bridge_slave_1: entered promiscuous mode [ 713.645661][ T8049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.703410][ T12] bridge_slave_1: left allmulticast mode [ 713.710470][ T12] bridge_slave_1: left promiscuous mode [ 713.717403][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.910142][ T12] bridge_slave_0: left allmulticast mode [ 713.916432][ T12] bridge_slave_0: left promiscuous mode [ 713.923719][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.605421][ T8106] netlink: 'syz.4.443': attribute type 10 has an invalid length. [ 715.494432][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 715.560152][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 715.626814][ T12] bond0 (unregistering): Released all slaves [ 715.744051][ T8049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.423797][ T8049] team0: Port device team_slave_0 added [ 716.529713][ T8049] team0: Port device team_slave_1 added [ 717.225698][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.237002][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.266031][ T8049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 717.401942][ T12] hsr_slave_0: left promiscuous mode [ 717.461207][ T12] hsr_slave_1: left promiscuous mode [ 717.469987][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 717.478323][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 717.562360][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 717.570714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 717.605157][ T8130] loop0: detected capacity change from 0 to 1024 [ 717.650408][ T12] veth1_macvtap: left promiscuous mode [ 717.656274][ T12] veth0_macvtap: left promiscuous mode [ 717.663049][ T12] veth1_vlan: left promiscuous mode [ 717.668913][ T12] veth0_vlan: left promiscuous mode [ 718.330686][ T8130] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 718.342165][ T8130] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 718.352334][ T8130] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.449: Failed to acquire dquot type 0 [ 718.479379][ T8130] EXT4-fs (loop0): 1 truncate cleaned up [ 718.487475][ T8130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.859300][ T5860] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 719.048629][ T5860] usb 5-1: device descriptor read/64, error -71 [ 719.294439][ T12] team0 (unregistering): Port device team_slave_1 removed [ 719.337375][ T12] team0 (unregistering): Port device team_slave_0 removed [ 719.368261][ T5860] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 719.608591][ T5860] usb 5-1: device descriptor read/64, error -71 [ 719.691330][ T8128] netlink: 124 bytes leftover after parsing attributes in process `syz.0.449'. [ 719.710845][ T8049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.718422][ T8049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.744671][ C0] vkms_vblank_simulate: vblank timer overrun [ 719.751480][ T8049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.797319][ T5860] usb usb5-port1: attempt power cycle [ 720.160515][ T7254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 720.168945][ T7254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.281494][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.328517][ T5860] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 720.361855][ T5860] usb 5-1: device descriptor read/8, error -71 [ 720.619840][ T8049] hsr_slave_0: entered promiscuous mode [ 720.633525][ T8049] hsr_slave_1: entered promiscuous mode [ 720.658892][ T5860] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 720.702657][ T5860] usb 5-1: device descriptor read/8, error -71 [ 720.836470][ T5860] usb usb5-port1: unable to enumerate USB device [ 721.095842][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 721.103996][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 721.269898][ T8149] netlink: 'syz.5.455': attribute type 10 has an invalid length. [ 721.461779][ T8149] team0: Port device macvlan0 added [ 722.951610][ T5785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 722.961928][ T5785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 723.011969][ T5785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 723.030749][ T5785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 723.098575][ T5785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 723.156741][ T5785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 725.249974][ T5785] Bluetooth: hci5: command tx timeout [ 727.308900][ T5785] Bluetooth: hci5: command tx timeout [ 728.422455][ T8049] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 728.532824][ T8189] netlink: 124 bytes leftover after parsing attributes in process `syz.5.462'. [ 728.570522][ T8049] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 728.680483][ T8049] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 728.826438][ T8190] loop5: detected capacity change from 0 to 1024 [ 728.859561][ T8049] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 729.115124][ T8190] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 729.126529][ T8190] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 729.136612][ T8190] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.462: Failed to acquire dquot type 0 [ 729.342076][ T8190] EXT4-fs (loop5): 1 truncate cleaned up [ 729.352906][ T8190] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 729.390091][ T5785] Bluetooth: hci5: command tx timeout [ 729.469170][ T8197] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 729.795282][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 730.532482][ T4805] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.709789][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.905544][ T4805] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.313312][ T4805] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.471918][ T5785] Bluetooth: hci5: command tx timeout [ 731.721785][ T4805] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.810492][ T5832] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 732.029084][ T5832] usb 1-1: device descriptor read/64, error -71 [ 732.275391][ T5832] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 732.609701][ T5832] usb 1-1: device descriptor read/64, error -71 [ 732.752837][ T5832] usb usb1-port1: attempt power cycle [ 733.218792][ T5832] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 733.294867][ T5832] usb 1-1: device descriptor read/8, error -71 [ 733.376591][ T4805] bridge_slave_1: left allmulticast mode [ 733.382867][ T4805] bridge_slave_1: left promiscuous mode [ 733.390351][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.586245][ T4805] bridge_slave_0: left allmulticast mode [ 733.592548][ T4805] bridge_slave_0: left promiscuous mode [ 733.599761][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.620349][ T5832] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 733.704565][ T5832] usb 1-1: device descriptor read/8, error -71 [ 734.069291][ T5832] usb usb1-port1: unable to enumerate USB device [ 734.372491][ T4805] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 734.483729][ T4805] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 734.560188][ T4805] bond0 (unregistering): Released all slaves [ 734.830970][ T5832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 734.992304][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.000364][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.009259][ T8155] bridge_slave_0: entered allmulticast mode [ 735.019163][ T8155] bridge_slave_0: entered promiscuous mode [ 735.166734][ T5832] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 735.175457][ T5832] usb 6-1: config 0 has no interface number 0 [ 735.182108][ T5832] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 735.193823][ T5832] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 735.207761][ T5832] usb 6-1: config 0 interface 255 has no altsetting 0 [ 735.215057][ T5832] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 735.225439][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.304664][ T5832] usb 6-1: config 0 descriptor?? [ 735.424613][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.433454][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.442056][ T8155] bridge_slave_1: entered allmulticast mode [ 735.455122][ T8155] bridge_slave_1: entered promiscuous mode [ 735.626565][ T5832] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 736.041975][ T5832] usb 6-1: USB disconnect, device number 3 [ 736.515162][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.571093][ T4805] hsr_slave_0: left promiscuous mode [ 736.711216][ T4805] hsr_slave_1: left promiscuous mode [ 736.720768][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.729019][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.759104][ T4805] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.766952][ T4805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.917389][ T4805] veth1_macvtap: left promiscuous mode [ 736.923761][ T4805] veth0_macvtap: left promiscuous mode [ 736.930325][ T4805] veth1_vlan: left promiscuous mode [ 736.936239][ T4805] veth0_vlan: left promiscuous mode [ 737.973597][ T8224] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 738.556050][ T4805] team0 (unregistering): Port device team_slave_1 removed [ 738.877757][ T4805] team0 (unregistering): Port device team_slave_0 removed [ 739.387417][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.486205][ T8049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.933357][ T8237] fuse: Unknown parameter '0x0000000000000009' [ 739.960631][ T5860] Process accounting resumed [ 740.260091][ T8235] netlink: 'syz.0.473': attribute type 10 has an invalid length. [ 740.857263][ T8233] Process accounting resumed [ 740.870730][ T8155] team0: Port device team_slave_0 added [ 740.895608][ T8155] team0: Port device team_slave_1 added [ 741.214526][ T8049] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.245849][ T8243] netlink: 124 bytes leftover after parsing attributes in process `syz.4.474'. [ 741.260115][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.267566][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.294372][ T8155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.434466][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.442398][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.577108][ T8244] loop4: detected capacity change from 0 to 1024 [ 741.618307][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.626141][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.650699][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.658201][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 741.685256][ T8155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.120854][ T5832] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 742.200524][ T8244] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 742.212972][ T8244] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 742.228629][ T8244] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.474: Failed to acquire dquot type 0 [ 742.252090][ T8244] EXT4-fs (loop4): 1 truncate cleaned up [ 742.260726][ T8244] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 742.358528][ T5832] usb 1-1: device descriptor read/64, error -71 [ 742.644877][ T5832] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 742.717111][ T8155] hsr_slave_0: entered promiscuous mode [ 742.732691][ T8155] hsr_slave_1: entered promiscuous mode [ 742.743530][ T8155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 742.751611][ T8155] Cannot create hsr debugfs directory [ 742.838903][ T5832] usb 1-1: device descriptor read/64, error -71 [ 742.874240][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 742.900753][ T1710] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 742.951508][ T5832] usb usb1-port1: attempt power cycle [ 743.114810][ T1710] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 743.125769][ T1710] usb 6-1: config 0 has no interface number 0 [ 743.132604][ T1710] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 743.149630][ T1710] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 743.163827][ T1710] usb 6-1: config 0 interface 255 has no altsetting 0 [ 743.171131][ T1710] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 743.180959][ T1710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.391329][ T5832] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 743.461964][ T1710] usb 6-1: config 0 descriptor?? [ 743.482714][ T5832] usb 1-1: device descriptor read/8, error -71 [ 743.513845][ T1710] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 743.751242][ T5832] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 743.766310][ T1710] usb 6-1: USB disconnect, device number 4 [ 743.892879][ T5832] usb 1-1: device descriptor read/8, error -71 [ 744.030763][ T5832] usb usb1-port1: unable to enumerate USB device [ 745.132603][ T1710] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 745.348618][ T1710] usb 5-1: Using ep0 maxpacket: 16 [ 745.530780][ T8049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 745.560876][ T1710] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 745.570801][ T1710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 745.579861][ T1710] usb 5-1: Product: syz [ 745.584337][ T1710] usb 5-1: Manufacturer: syz [ 745.589510][ T1710] usb 5-1: SerialNumber: syz [ 745.806934][ T1710] r8152-cfgselector 5-1: Unknown version 0x0000 [ 745.814098][ T1710] r8152-cfgselector 5-1: config 0 descriptor?? [ 745.888986][ T30] audit: type=1326 audit(1742959505.755:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 745.916286][ T30] audit: type=1326 audit(1742959505.755:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 745.940022][ T30] audit: type=1326 audit(1742959505.755:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 745.963059][ T30] audit: type=1326 audit(1742959505.755:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 745.986793][ T30] audit: type=1326 audit(1742959505.755:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 746.011521][ T30] audit: type=1326 audit(1742959505.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 746.035969][ T30] audit: type=1326 audit(1742959505.755:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 746.058867][ T30] audit: type=1326 audit(1742959505.755:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8268 comm="syz.5.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad3498d169 code=0x7fc00000 [ 746.100728][ T1710] r8152-cfgselector 5-1: Unknown version 0x0000 [ 746.114100][ T1710] r8152-cfgselector 5-1: bad CDC descriptors [ 746.118210][ T8155] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 746.238585][ T8155] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 746.280665][ T1710] r8152-cfgselector 5-1: USB disconnect, device number 17 [ 746.398574][ T8155] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 746.440289][ T8155] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 747.210729][ T8285] netlink: 36 bytes leftover after parsing attributes in process `syz.5.483'. [ 747.640517][ T8290] netlink: 'syz.4.484': attribute type 10 has an invalid length. [ 748.596068][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.743785][ T8155] 8021q: adding VLAN 0 to HW filter on device team0 [ 748.941464][ T4413] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.949519][ T4413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.066230][ T4413] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.074203][ T4413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.269093][ T5828] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 749.528728][ T5828] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 749.537292][ T5828] usb 1-1: config 0 has no interface number 0 [ 749.544570][ T5828] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 749.556550][ T5828] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 749.570666][ T5828] usb 1-1: config 0 interface 255 has no altsetting 0 [ 749.577829][ T5828] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 749.588979][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.667553][ T8049] veth0_vlan: entered promiscuous mode [ 749.884891][ T8049] veth1_vlan: entered promiscuous mode [ 750.025926][ T5828] usb 1-1: config 0 descriptor?? [ 750.110561][ T5828] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 750.401433][ T8049] veth0_macvtap: entered promiscuous mode [ 750.447873][ T5828] usb 1-1: USB disconnect, device number 26 [ 750.562839][ T8049] veth1_macvtap: entered promiscuous mode [ 750.836869][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.848221][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.858741][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.869873][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.880174][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 750.891082][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 750.907062][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 750.977457][ T5860] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 751.179165][ T5860] usb 6-1: device descriptor read/64, error -71 [ 751.219754][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.235487][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.247366][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.258426][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.268887][ T8049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 751.280377][ T8049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 751.296164][ T8049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 751.507586][ T5860] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 751.698747][ T5860] usb 6-1: device descriptor read/64, error -71 [ 751.705649][ T8049] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.715506][ T8049] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.724926][ T8049] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.734287][ T8049] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 751.865412][ T5860] usb usb6-port1: attempt power cycle [ 752.359103][ T5860] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 752.403586][ T5860] usb 6-1: device descriptor read/8, error -71 [ 752.685591][ T5860] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 752.762719][ T5860] usb 6-1: device descriptor read/8, error -71 [ 752.881238][ T5860] usb usb6-port1: unable to enumerate USB device [ 753.114910][ T8155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.714263][ T5860] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 753.868396][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 753.948897][ T5860] usb 1-1: Using ep0 maxpacket: 16 [ 754.088913][ T5860] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 754.100556][ T5860] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.110350][ T5860] usb 1-1: Product: syz [ 754.114901][ T5860] usb 1-1: Manufacturer: syz [ 754.119902][ T5860] usb 1-1: SerialNumber: syz [ 754.332269][ T5860] r8152-cfgselector 1-1: Unknown version 0x0000 [ 754.339264][ T5860] r8152-cfgselector 1-1: config 0 descriptor?? [ 754.657708][ T5860] r8152-cfgselector 1-1: Unknown version 0x0000 [ 754.666395][ T5860] r8152-cfgselector 1-1: bad CDC descriptors [ 754.764172][ T5860] r8152-cfgselector 1-1: USB disconnect, device number 27 [ 755.414027][ T8345] loop4: detected capacity change from 0 to 32768 [ 755.490335][ T8345] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.494 (8345) [ 755.519166][ T8345] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 755.533782][ T8345] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 755.543556][ T8345] BTRFS info (device loop4): using free-space-tree [ 755.797873][ T8363] netlink: 'syz.5.495': attribute type 10 has an invalid length. [ 759.792703][ T8155] veth0_vlan: entered promiscuous mode [ 759.909365][ T8155] veth1_vlan: entered promiscuous mode [ 763.482108][ T8155] veth0_macvtap: entered promiscuous mode [ 763.969196][ T8155] veth1_macvtap: entered promiscuous mode [ 764.563285][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.574380][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.584717][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.600631][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.613147][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.624398][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.634939][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 764.650461][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 764.668599][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.001658][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.013485][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.024743][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.035668][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.045918][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.058207][ T5860] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 765.071344][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.081892][ T8155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 765.092928][ T8155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 765.108915][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.239249][ T8155] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.248621][ T8155] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.263268][ T8155] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.274140][ T8155] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.454120][ T5860] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 765.455508][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 765.465402][ T5860] usb 6-1: config 0 has no interface number 0 [ 765.465547][ T5860] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 765.465733][ T5860] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 765.465987][ T5860] usb 6-1: config 0 interface 255 has no altsetting 0 [ 765.466183][ T5860] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 765.466345][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.577135][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 765.611967][ T5783] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 765.658751][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 765.681676][ T5860] usb 6-1: config 0 descriptor?? [ 766.009028][ T5783] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 766.021517][ T5783] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 766.134437][ T5860] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 766.515051][ T5791] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 766.630913][ T5860] usb 6-1: USB disconnect, device number 9 [ 767.950483][ T8405] mmap: syz.5.502 (8405) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 768.141357][ T5832] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 768.309651][ T5783] Bluetooth: hci3: command tx timeout [ 768.338178][ T5832] usb 1-1: device descriptor read/64, error -71 [ 768.630430][ T5832] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 768.852637][ T5832] usb 1-1: device descriptor read/64, error -71 [ 769.002134][ T5832] usb usb1-port1: attempt power cycle [ 769.038885][ T8389] chnl_net:caif_netlink_parms(): no params data found [ 769.437493][ T5832] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 769.639371][ T5832] usb 1-1: device descriptor read/8, error -71 [ 769.879943][ T5832] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 769.933413][ T5832] usb 1-1: device descriptor read/8, error -71 [ 770.080201][ T5832] usb usb1-port1: unable to enumerate USB device [ 770.260218][ T5836] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 770.353428][ T5783] Bluetooth: hci3: command tx timeout [ 770.518412][ T5836] usb 5-1: Using ep0 maxpacket: 16 [ 770.642362][ T5836] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 770.652248][ T5836] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.661009][ T5836] usb 5-1: Product: syz [ 770.665499][ T5836] usb 5-1: Manufacturer: syz [ 770.670770][ T5836] usb 5-1: SerialNumber: syz [ 770.885886][ T6648] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.950192][ T5836] r8152-cfgselector 5-1: Unknown version 0x0000 [ 770.956812][ T5836] r8152-cfgselector 5-1: config 0 descriptor?? [ 771.161590][ T6648] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.318584][ T5836] r8152-cfgselector 5-1: Unknown version 0x0000 [ 771.325429][ T5836] r8152-cfgselector 5-1: bad CDC descriptors [ 771.457169][ T5836] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 771.508874][ T6648] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.025599][ T6648] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.386343][ T8389] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.394470][ T8389] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.402940][ T8389] bridge_slave_0: entered allmulticast mode [ 772.412889][ T8389] bridge_slave_0: entered promiscuous mode [ 772.428387][ T5783] Bluetooth: hci3: command tx timeout [ 772.860444][ T8389] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.868674][ T8389] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.877413][ T8389] bridge_slave_1: entered allmulticast mode [ 772.887779][ T8389] bridge_slave_1: entered promiscuous mode [ 773.387388][ T6648] bridge_slave_1: left allmulticast mode [ 773.395092][ T6648] bridge_slave_1: left promiscuous mode [ 773.401788][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.476294][ T6648] bridge_slave_0: left allmulticast mode [ 773.483287][ T6648] bridge_slave_0: left promiscuous mode [ 773.490654][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.819393][ T5839] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 774.122939][ T5839] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 774.132693][ T5839] usb 1-1: config 0 has no interface number 0 [ 774.139760][ T5839] usb 1-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 774.151499][ T5839] usb 1-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 774.167526][ T5839] usb 1-1: config 0 interface 255 has no altsetting 0 [ 774.175409][ T5839] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 774.185136][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.549235][ T5783] Bluetooth: hci3: command tx timeout [ 774.571609][ T5839] usb 1-1: config 0 descriptor?? [ 774.606472][ T5839] ums-realtek 1-1:0.255: USB Mass Storage device detected [ 775.176836][ T5839] usb 1-1: USB disconnect, device number 32 [ 775.187287][ T6648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.245035][ T6648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.345547][ T6648] bond0 (unregistering): Released all slaves [ 775.732187][ T8389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.928183][ T6648] hsr_slave_0: left promiscuous mode [ 775.990535][ T6648] hsr_slave_1: left promiscuous mode [ 775.999439][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.007721][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.136854][ T6648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.148927][ T6648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.308946][ T6648] veth1_macvtap: left promiscuous mode [ 776.315165][ T6648] veth0_macvtap: left promiscuous mode [ 776.326222][ T6648] veth1_vlan: left promiscuous mode [ 776.332196][ T6648] veth0_vlan: left promiscuous mode [ 777.309026][ T5836] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 777.555239][ T5836] usb 5-1: no configurations [ 777.560450][ T5836] usb 5-1: can't read configurations, error -22 [ 777.703611][ T5832] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 777.772660][ T5836] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 777.846477][ T6648] team0 (unregistering): Port device team_slave_1 removed [ 777.903715][ T5832] usb 6-1: Using ep0 maxpacket: 16 [ 777.966121][ T5836] usb 5-1: no configurations [ 777.971665][ T5836] usb 5-1: can't read configurations, error -22 [ 777.979933][ T5836] usb usb5-port1: attempt power cycle [ 778.009965][ T5832] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 778.019756][ T5832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.034808][ T5832] usb 6-1: Product: syz [ 778.041685][ T5832] usb 6-1: Manufacturer: syz [ 778.046659][ T5832] usb 6-1: SerialNumber: syz [ 778.067880][ T6648] team0 (unregistering): Port device team_slave_0 removed [ 778.438838][ T5832] r8152-cfgselector 6-1: Unknown version 0x0000 [ 778.447485][ T5832] r8152-cfgselector 6-1: config 0 descriptor?? [ 778.505254][ T8389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.749214][ T5836] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 778.802257][ T5836] usb 5-1: no configurations [ 778.807541][ T5836] usb 5-1: can't read configurations, error -22 [ 778.915316][ T5832] r8152-cfgselector 6-1: Unknown version 0x0000 [ 778.922456][ T5832] r8152-cfgselector 6-1: bad CDC descriptors [ 778.986996][ T5836] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 779.020098][ T5832] r8152-cfgselector 6-1: USB disconnect, device number 10 [ 779.056631][ T5836] usb 5-1: no configurations [ 779.061890][ T5836] usb 5-1: can't read configurations, error -22 [ 779.124300][ T8389] team0: Port device team_slave_0 added [ 779.148571][ T5836] usb usb5-port1: unable to enumerate USB device [ 779.260342][ T8389] team0: Port device team_slave_1 added [ 779.533085][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.540618][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.567593][ T8389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.679239][ T8389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.686770][ T8389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 779.719411][ T8389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.591998][ T8389] hsr_slave_0: entered promiscuous mode [ 780.603054][ T8389] hsr_slave_1: entered promiscuous mode [ 781.403956][ T5836] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 781.698519][ T5836] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 781.707079][ T5836] usb 6-1: config 0 has no interface number 0 [ 781.713967][ T5836] usb 6-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 781.727175][ T5836] usb 6-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 781.741279][ T5836] usb 6-1: config 0 interface 255 has no altsetting 0 [ 781.752677][ T5836] usb 6-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 781.763678][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.022216][ T5836] usb 6-1: config 0 descriptor?? [ 782.063130][ T5836] ums-realtek 6-1:0.255: USB Mass Storage device detected [ 782.303532][ T5836] usb 6-1: USB disconnect, device number 11 [ 782.549114][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 782.556122][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 783.897264][ T8389] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 784.007182][ T8389] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 784.062714][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 784.072985][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 784.090514][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 784.107493][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 784.120348][ T5785] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 784.133339][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 784.248672][ T8389] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 784.499266][ T8389] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 786.272119][ T5785] Bluetooth: hci2: command tx timeout [ 786.977152][ T3451] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.486016][ T3451] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.877791][ T3451] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.052786][ T8514] chnl_net:caif_netlink_parms(): no params data found [ 788.244567][ T3451] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.360471][ T5785] Bluetooth: hci2: command tx timeout [ 788.775729][ T8389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.881176][ T5860] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 789.148856][ T5860] usb 1-1: no configurations [ 789.153901][ T5860] usb 1-1: can't read configurations, error -22 [ 789.396988][ T5860] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 789.697391][ T5860] usb 1-1: no configurations [ 789.702569][ T5860] usb 1-1: can't read configurations, error -22 [ 789.711246][ T5860] usb usb1-port1: attempt power cycle [ 790.056064][ T3451] bridge_slave_1: left allmulticast mode [ 790.063102][ T3451] bridge_slave_1: left promiscuous mode [ 790.071304][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.172317][ T3451] bridge_slave_0: left allmulticast mode [ 790.179198][ T3451] bridge_slave_0: left promiscuous mode [ 790.187591][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.410788][ T5860] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 790.431557][ T5785] Bluetooth: hci2: command tx timeout [ 790.492400][ T5860] usb 1-1: no configurations [ 790.497503][ T5860] usb 1-1: can't read configurations, error -22 [ 790.668967][ T5860] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 791.227341][ T5860] usb 1-1: no configurations [ 791.233323][ T5860] usb 1-1: can't read configurations, error -22 [ 791.315307][ T5860] usb usb1-port1: unable to enumerate USB device [ 791.693610][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.822633][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.874697][ T3451] bond0 (unregistering): Released all slaves [ 792.140938][ T8389] 8021q: adding VLAN 0 to HW filter on device team0 [ 792.343823][ T1142] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.352151][ T1142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 792.526110][ T5785] Bluetooth: hci2: command tx timeout [ 792.736292][ T3451] hsr_slave_0: left promiscuous mode [ 792.809573][ T3451] hsr_slave_1: left promiscuous mode [ 792.820285][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.828992][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.017752][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.026026][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.259016][ T3451] veth1_macvtap: left promiscuous mode [ 793.265124][ T3451] veth0_macvtap: left promiscuous mode [ 793.271518][ T3451] veth1_vlan: left promiscuous mode [ 793.277460][ T3451] veth0_vlan: left promiscuous mode [ 793.682362][ T8553] netlink: 'syz.4.534': attribute type 10 has an invalid length. [ 795.445686][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 795.509153][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 795.943382][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.952055][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.020383][ T8566] gfs2: gfs2 mount does not exist [ 796.313065][ T8566] loop5: detected capacity change from 0 to 64 [ 799.061189][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.069428][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.077630][ T8514] bridge_slave_0: entered allmulticast mode [ 799.090293][ T8514] bridge_slave_0: entered promiscuous mode [ 799.496512][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.505797][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.514048][ T8514] bridge_slave_1: entered allmulticast mode [ 799.524101][ T8514] bridge_slave_1: entered promiscuous mode [ 800.704061][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 801.004291][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 801.470369][ T8514] team0: Port device team_slave_0 added [ 801.503596][ T8514] team0: Port device team_slave_1 added [ 801.979877][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 801.987612][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.014636][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.682730][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.690277][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 802.717560][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.172818][ T8389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.307272][ T8514] hsr_slave_0: entered promiscuous mode [ 804.321858][ T8514] hsr_slave_1: entered promiscuous mode [ 804.338256][ T8514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 804.346543][ T8514] Cannot create hsr debugfs directory [ 804.847653][ T8603] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 804.854661][ T8603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 804.863780][ T8603] vhci_hcd vhci_hcd.0: Device attached [ 804.911345][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 805.158476][ T5832] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 805.340420][ T8605] vhci_hcd: cannot find the pending unlink 3 [ 805.410330][ T8605] vhci_hcd: connection reset by peer [ 805.424408][ T3451] vhci_hcd: stop threads [ 805.429637][ T24] usb 1-1: no configurations [ 805.429749][ T24] usb 1-1: can't read configurations, error -22 [ 805.434442][ T3451] vhci_hcd: release socket [ 805.445930][ T3451] vhci_hcd: disconnect device [ 805.730389][ T24] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 806.024446][ T24] usb 1-1: no configurations [ 806.030985][ T24] usb 1-1: can't read configurations, error -22 [ 806.154155][ T24] usb usb1-port1: attempt power cycle [ 806.619682][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 806.854955][ T24] usb 1-1: no configurations [ 806.860447][ T24] usb 1-1: can't read configurations, error -22 [ 807.066607][ T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 807.178672][ T24] usb 1-1: no configurations [ 807.183609][ T24] usb 1-1: can't read configurations, error -22 [ 807.217138][ T24] usb usb1-port1: unable to enumerate USB device [ 809.545553][ T8616] loop5: detected capacity change from 0 to 1024 [ 809.792301][ T8514] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 809.843073][ T8514] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 809.953091][ T8616] __quota_error: 1 callbacks suppressed [ 809.953185][ T8616] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 809.970582][ T8616] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 809.981319][ T8616] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.543: Failed to acquire dquot type 0 [ 810.070816][ T8514] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 810.106224][ T8616] EXT4-fs (loop5): 1 truncate cleaned up [ 810.120554][ T8616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.157777][ T8514] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 810.308865][ T5832] vhci_hcd: vhci_device speed not set [ 810.754874][ T8623] loop0: detected capacity change from 0 to 128 [ 811.443468][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.494992][ T8389] veth0_vlan: entered promiscuous mode [ 811.726784][ T8389] veth1_vlan: entered promiscuous mode [ 812.215024][ T8628] loop4: detected capacity change from 0 to 512 [ 812.384705][ T8389] veth0_macvtap: entered promiscuous mode [ 812.416933][ T8628] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 812.427155][ T8628] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 812.517421][ T8389] veth1_macvtap: entered promiscuous mode [ 812.598179][ T8628] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 812.629714][ T8628] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 812.640945][ T8628] System zones: 0-2, 18-18, 34-34 [ 812.656786][ T8628] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 812.759248][ T8628] EXT4-fs (loop4): 1 truncate cleaned up [ 812.767639][ T8628] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 812.941495][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.000266][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.012669][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.023708][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.035098][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.045405][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 813.056572][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.083290][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.553607][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.735176][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.744370][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.932368][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.940382][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 814.004276][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.016125][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.029223][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.040258][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.050613][ T8389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 814.061610][ T8389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 814.078636][ T8389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.701079][ T8514] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 814.712046][ T8514] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 815.010715][ T8389] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.021285][ T8389] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.036035][ T8389] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.045790][ T8389] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.343039][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.702744][ T8658] loop5: detected capacity change from 0 to 4096 [ 820.981173][ T8667] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 821.465589][ T5791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 821.763352][ T8671] loop0: detected capacity change from 0 to 164 [ 821.859007][ T8671] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 821.993096][ T8671] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 822.027188][ T8671] rock: directory entry would overflow storage [ 822.035237][ T8671] rock: sig=0x4f50, size=4, remaining=3 [ 822.041304][ T8671] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 822.071694][ T8671] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 822.081891][ T8671] rock: directory entry would overflow storage [ 822.094466][ T8671] rock: sig=0x4f50, size=4, remaining=3 [ 822.100521][ T8671] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 822.692226][ T8676] loop4: detected capacity change from 0 to 2048 [ 822.998601][ T8676] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 823.850432][ T5783] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 823.893534][ T5783] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 823.907839][ T5783] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 823.959052][ T5783] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 823.973516][ T5783] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 823.983730][ T5783] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 824.252440][ T8690] input: syz0 as /devices/virtual/input/input11 [ 824.266466][ T8687] loop5: detected capacity change from 0 to 1024 [ 824.441893][ T8683] loop0: detected capacity change from 0 to 2048 [ 824.553651][ T8683] loop0: p2 p3 < > p4 < p5 > [ 824.559308][ T8683] loop0: partition table partially beyond EOD, truncated [ 824.679794][ T8683] loop0: p3 start 4284289 is beyond EOD, truncated [ 824.680392][ T8687] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 824.698258][ T8687] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 824.708127][ T8687] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.554: Failed to acquire dquot type 0 [ 824.911643][ T8687] EXT4-fs (loop5): 1 truncate cleaned up [ 824.921520][ T8687] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 825.485826][ T8514] veth0_vlan: entered promiscuous mode [ 825.726640][ T8514] veth1_vlan: entered promiscuous mode [ 826.007570][ T7642] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 826.109760][ T5785] Bluetooth: hci5: command tx timeout [ 826.502888][ T8514] veth0_macvtap: entered promiscuous mode [ 826.677342][ T8514] veth1_macvtap: entered promiscuous mode [ 827.011229][ T8707] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 827.101901][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.118257][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.130210][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.141958][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.152445][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.165995][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.176478][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.192392][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.225094][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 827.430454][ T3451] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.573746][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 827.732824][ T3451] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.874487][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.885882][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.896469][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.908954][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.919167][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.932425][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.943365][ T8514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 827.958212][ T8514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.977847][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.213062][ T5785] Bluetooth: hci5: command tx timeout [ 828.225650][ T3451] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.516232][ T3451] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.800808][ T8712] loop0: detected capacity change from 0 to 32768 [ 828.812995][ T8712] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.559 (8712) [ 828.844565][ T8712] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 828.860887][ T8712] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 828.872312][ T8712] BTRFS info (device loop0): using free-space-tree [ 828.978516][ T8514] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.987680][ T8514] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.997111][ T8514] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.006570][ T8514] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 829.650423][ T5778] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 829.989950][ T3451] bridge_slave_1: left allmulticast mode [ 829.996075][ T3451] bridge_slave_1: left promiscuous mode [ 830.003226][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.174960][ T3451] bridge_slave_0: left allmulticast mode [ 830.184931][ T3451] bridge_slave_0: left promiscuous mode [ 830.192370][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.275446][ T5785] Bluetooth: hci5: command tx timeout [ 831.941635][ T8740] loop4: detected capacity change from 0 to 164 [ 832.033009][ T8740] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 832.263436][ T8740] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 832.301342][ T8740] rock: directory entry would overflow storage [ 832.307842][ T8740] rock: sig=0x4f50, size=4, remaining=3 [ 832.314065][ T8740] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 832.358560][ T5785] Bluetooth: hci5: command tx timeout [ 832.382786][ T8740] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 832.392364][ T8740] rock: directory entry would overflow storage [ 832.398988][ T8740] rock: sig=0x4f50, size=4, remaining=3 [ 832.404804][ T8740] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 832.631567][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.471802][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 833.524757][ T3451] bond0 (unregistering): Released all slaves [ 834.120806][ T3451] hsr_slave_0: left promiscuous mode [ 834.136917][ T3451] hsr_slave_1: left promiscuous mode [ 834.146076][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 834.154278][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.307204][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 834.315314][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 834.458772][ T3451] veth1_macvtap: left promiscuous mode [ 834.464663][ T3451] veth0_macvtap: left promiscuous mode [ 834.472653][ T3451] veth1_vlan: left promiscuous mode [ 834.478479][ T3451] veth0_vlan: left promiscuous mode [ 838.180647][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 838.508456][ T5785] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 838.593268][ T8767] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 839.179745][ T8765] loop4: detected capacity change from 0 to 32768 [ 839.197324][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 839.509662][ T8765] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 839.527711][ T8765] bcachefs (loop4): initializing new filesystem [ 839.542296][ T8765] bcachefs (loop4): going read-write [ 839.551776][ T8765] bcachefs (loop4): marking superblocks [ 839.626810][ T8765] bcachefs (loop4): initializing freespace [ 839.633250][ T8765] ===================================================== [ 839.640710][ T8765] BUG: KMSAN: uninit-value in bch2_dev_freespace_init+0x1044/0x1eb0 [ 839.649195][ T8765] bch2_dev_freespace_init+0x1044/0x1eb0 [ 839.655277][ T8765] bch2_fs_freespace_init+0x599/0xb30 [ 839.661161][ T8765] bch2_fs_initialize+0x1a74/0x2f90 [ 839.666775][ T8765] bch2_fs_start+0x792/0xc20 [ 839.671872][ T8765] bch2_fs_get_tree+0x1564/0x24e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 839.677276][ T8765] vfs_get_tree+0xb1/0x5a0 [ 839.682143][ T8765] do_new_mount+0x71f/0x15e0 [ 839.687013][ T8765] path_mount+0x742/0x1f10 [ 839.691980][ T8765] __se_sys_mount+0x71f/0x800 [ 839.696962][ T8765] __x64_sys_mount+0xe4/0x150 [ 839.705003][ T8765] x64_sys_call+0xed5/0x3c80 [ 839.710062][ T8765] do_syscall_64+0xcd/0x1e0 [ 839.714915][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.721310][ T8765] [ 839.723850][ T8765] Uninit was created at: [ 839.728705][ T8765] ___kmalloc_large_node+0x365/0x420 [ 839.734254][ T8765] __kmalloc_large_node_noprof+0x3f/0x1e0 [ 839.740420][ T8765] __kvmalloc_node_noprof+0xa2/0x13d0 [ 839.746161][ T8765] __bch2_btree_node_mem_alloc+0x2be/0xa80 [ 839.752444][ T8765] bch2_fs_btree_cache_init+0x4f0/0xb60 [ 839.758402][ T8765] bch2_fs_open+0x4d8a/0x5bb0 [ 839.763637][ T8765] bch2_fs_get_tree+0x98a/0x24e0 [ 839.769235][ T8765] vfs_get_tree+0xb1/0x5a0 [ 839.773926][ T8765] do_new_mount+0x71f/0x15e0 [ 839.778909][ T8765] path_mount+0x742/0x1f10 [ 839.783630][ T8765] __se_sys_mount+0x71f/0x800 [ 839.788765][ T8765] __x64_sys_mount+0xe4/0x150 [ 839.793668][ T8765] x64_sys_call+0xed5/0x3c80 [ 839.798754][ T8765] do_syscall_64+0xcd/0x1e0 [ 839.806239][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.813352][ T8765] [ 839.815938][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.4.567 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(undef) [ 839.828184][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 839.838637][ T8765] ===================================================== [ 839.845920][ T8765] Disabling lock debugging due to kernel taint [ 839.852602][ T8765] Kernel panic - not syncing: kmsan.panic set ... [ 839.859330][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.4.567 Tainted: G B 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(undef) [ 839.873714][ T8765] Tainted: [B]=BAD_PAGE [ 839.878024][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 839.888293][ T8765] Call Trace: [ 839.891737][ T8765] [ 839.894829][ T8765] dump_stack_lvl+0x216/0x2d0 [ 839.899783][ T8765] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 839.905917][ T8765] dump_stack+0x1e/0x24 [ 839.910339][ T8765] panic+0x4e5/0xcf0 [ 839.914503][ T8765] ? kmsan_save_stack_with_flags+0x50/0x60 [ 839.920640][ T8765] kmsan_report+0x2ca/0x2d0 [ 839.925512][ T8765] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 839.931653][ T8765] ? __msan_warning+0x95/0x120 [ 839.936714][ T8765] ? bch2_dev_freespace_init+0x1044/0x1eb0 [ 839.942803][ T8765] ? bch2_fs_freespace_init+0x599/0xb30 [ 839.948610][ T8765] ? bch2_fs_initialize+0x1a74/0x2f90 [ 839.954254][ T8765] ? bch2_fs_start+0x792/0xc20 [ 839.959384][ T8765] ? bch2_fs_get_tree+0x1564/0x24e0 [ 839.964873][ T8765] ? vfs_get_tree+0xb1/0x5a0 [ 839.969764][ T8765] ? do_new_mount+0x71f/0x15e0 [ 839.974830][ T8765] ? path_mount+0x742/0x1f10 [ 839.979705][ T8765] ? __se_sys_mount+0x71f/0x800 [ 839.984787][ T8765] ? __x64_sys_mount+0xe4/0x150 [ 839.989970][ T8765] ? x64_sys_call+0xed5/0x3c80 [ 839.995019][ T8765] ? do_syscall_64+0xcd/0x1e0 [ 839.999956][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.006505][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.012299][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.017827][ T8765] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 840.024478][ T8765] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 840.030950][ T8765] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 840.037178][ T8765] ? stack_depot_save_flags+0x6db/0x750 [ 840.042997][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.048567][ T8765] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 840.055349][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.060823][ T8765] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 840.066926][ T8765] __msan_warning+0x95/0x120 [ 840.071866][ T8765] bch2_dev_freespace_init+0x1044/0x1eb0 [ 840.077828][ T8765] ? bch2_dev_freespace_init+0x3d2/0x1eb0 [ 840.083865][ T8765] bch2_fs_freespace_init+0x599/0xb30 [ 840.089521][ T8765] bch2_fs_initialize+0x1a74/0x2f90 [ 840.094941][ T8765] ? kmsan_internal_poison_memory+0x7d/0x90 [ 840.101129][ T8765] ? kmsan_internal_poison_memory+0x49/0x90 [ 840.107456][ T8765] ? kmsan_slab_free+0xd0/0x140 [ 840.112652][ T8765] ? kfree+0x24c/0xdd0 [ 840.116943][ T8765] ? bch2_printbuf_exit+0x9b/0xd0 [ 840.122215][ T8765] ? print_mount_opts+0x4ca/0x4f0 [ 840.127497][ T8765] ? bch2_fs_start+0x55/0xc20 [ 840.132429][ T8765] ? bch2_fs_get_tree+0x1564/0x24e0 [ 840.137888][ T8765] ? vfs_get_tree+0xb1/0x5a0 [ 840.142751][ T8765] ? do_new_mount+0x71f/0x15e0 [ 840.147795][ T8765] ? path_mount+0x742/0x1f10 [ 840.152657][ T8765] ? __se_sys_mount+0x71f/0x800 [ 840.157980][ T8765] ? __x64_sys_mount+0xe4/0x150 [ 840.163388][ T8765] ? x64_sys_call+0xed5/0x3c80 [ 840.168413][ T8765] ? do_syscall_64+0xcd/0x1e0 [ 840.173338][ T8765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.179650][ T8765] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 840.186331][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.191894][ T8765] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 840.198040][ T8765] ? kfree+0x1b0/0xdd0 [ 840.202419][ T8765] ? filter_irq_stacks+0x60/0x1b0 [ 840.207716][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.213202][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.218865][ T8765] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 840.225848][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.231377][ T8765] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 840.237482][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.243049][ T8765] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 840.249142][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.254633][ T8765] ? kmsan_internal_set_shadow_origin+0x6c/0x100 [ 840.261266][ T8765] ? llist_reverse_order+0x102/0x130 [ 840.266777][ T8765] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 840.273195][ T8765] bch2_fs_start+0x792/0xc20 [ 840.278159][ T8765] bch2_fs_get_tree+0x1564/0x24e0 [ 840.283563][ T8765] vfs_get_tree+0xb1/0x5a0 [ 840.288249][ T8765] ? mount_capable+0x97/0x120 [ 840.293189][ T8765] do_new_mount+0x71f/0x15e0 [ 840.298080][ T8765] ? kmsan_get_metadata+0x13e/0x1c0 [ 840.303606][ T8765] path_mount+0x742/0x1f10 [ 840.308486][ T8765] ? user_path_at+0x321/0x410 [ 840.313527][ T8765] __se_sys_mount+0x71f/0x800 [ 840.318472][ T8765] __x64_sys_mount+0xe4/0x150 [ 840.323382][ T8765] x64_sys_call+0xed5/0x3c80 [ 840.328247][ T8765] do_syscall_64+0xcd/0x1e0 [ 840.333063][ T8765] ? clear_bhb_loop+0x25/0x80 [ 840.338062][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.344331][ T8765] RIP: 0033:0x7fd55eb8e90a [ 840.349113][ T8765] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 840.369699][ T8765] RSP: 002b:00007fd55fa82e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 840.378361][ T8765] RAX: ffffffffffffffda RBX: 00007fd55fa82ef0 RCX: 00007fd55eb8e90a [ 840.386542][ T8765] RDX: 00002000000000c0 RSI: 0000200000000180 RDI: 00007fd55fa82eb0 [ 840.394803][ T8765] RBP: 00002000000000c0 R08: 00007fd55fa82ef0 R09: 0000000000000010 [ 840.402965][ T8765] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000180 [ 840.411119][ T8765] R13: 00007fd55fa82eb0 R14: 0000000000005a0f R15: 0000200000000080 [ 840.419320][ T8765] [ 840.423060][ T8765] Kernel Offset: disabled [ 840.427578][ T8765] Rebooting in 86400 seconds..