last executing test programs: 10.418812649s ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='vivid.0\x00', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/vimc/unbind\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='vimc.0\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/vim2m/unbind\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='vim2m.0\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/vicodec/unbind\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='vicodec.0\x00', 0xa) syz_usb_connect(0x0, 0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="12010002ffffff40450580800a03010203010902200001010080320904000002ffffff000705810140000107050202400000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r4 = syz_open_dev$video(&(0x7f0000000500), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000600)={0x1, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r4, 0x40045612, &(0x7f0000000700)=0x1) 8.895715637s ago: executing program 3 (id=12): r0 = syz_usb_connect(0x0, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902370001010080fa0904000000ffffff000904000104ffffff0007058102000200070501020002000705820200020007050602000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000200)={0x0, 0x5000000}, 0x0) syz_usb_ep_write(r0, 0x81, 0x18, &(0x7f0000000100)="010000000001010101010101010100"/24) nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 7.831871013s ago: executing program 2 (id=15): r0 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/queues/rx-0/rps_cpus\x00', 0x2, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f00000003c0)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000480)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000540)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 7.759267766s ago: executing program 2 (id=16): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") 5.568297041s ago: executing program 3 (id=19): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x38, 0x1403, 0x1, 0x400, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x1000000, 0x0, 0x80c9}, 0x20000040) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0x0}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x17, 0x88, 0xfa00, {0x0, 0x10, 0x0, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0x14}}}}, 0x90) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {0x0, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000310)={0x0}, 0x2, 0x8}}, 0x20) write(r1, &(0x7f00000001c0)="140000001001000001000000e8030000100010000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e20ac14141400"/261, 0x118) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0x1, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000340)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x1}}, 0x120) 5.372003415s ago: executing program 0 (id=21): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x3, [@enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x1}]}, @struct={0x1, 0x0, 0x0, 0x4, 0x0, 0x8}]}, {0x0, [0x61]}}, &(0x7f0000000100), 0x3b}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="010000000200000000000000"], 0x40) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000400)='\x00\x00\x00\x00', &(0x7f0000000500)=@tcp=r2}, 0x20) 5.335157556s ago: executing program 0 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='/\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='mydomain / 2147483647 24576 0 0 0\n\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1,port=2049\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) 4.570504325s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/firmware/f2255usb.bin/loading\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/firmware/f2255usb.bin/data\x00', 0x2, 0x0) nanosleep(&(0x7f0000000280)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='mem', 0x3) 4.039997009s ago: executing program 3 (id=27): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180)={[{@subvol={'subvol', 0x3d, '/,compress-force=zstd:15'}}]}, 0x1, 0x50ed, &(0x7f00000051c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/test\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000500), 0x100) fsync(r0) 3.729044596s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/printk/parameters/console_suspend\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='N\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/hibernate/parameters/pm_test_delay\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='core\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/sys/kernel/printk\x00', 0x2, 0x0) write(r3, &(0x7f0000000380)='1 1 1 1\n', 0x8) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/state\x00', 0x2, 0x0) 1.936910492s ago: executing program 2 (id=29): r0 = syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9slPUdB/DnWlqwsP5gIwLbHBoNVF2smjkY22hKiY51cNLhCjTCiEdYUNoQ94NOTMEsboHEGpU6Ngtz/kLN0gkMcMOQjtGxlRkyRzS6QESymGULAw3GZG7p3T3H3XO0PZmzKq8XaZ/73uf5fp/vPXn+uPfR73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEEw7ej8x4587I1XvnDo9ukTrt/Z0fKD2SvvWPyJ3fe+0vbmL1t2farz0rLlm6bM6uxuWPbMnVXrTgZBLNkvlu6/uO6GecsaF39tVDjgkhtT28rKgQ6Z6no01SjNebK/X+7PN4MgKIkMUJzezirOaseiBwhW5Q84qJbNS7seWjs30XXZwaPHF/WszH/p9Bs13BMYLunr6rUz11Jt8ndRZI9MO+vSi+Vcoqn+0QvufXkRAMC7UhNPbjJvR9NvcTPt9mg90q6NtDsi7fAdQkd241ykxi0daJ6TovVhmmdtKiqMHHCekXr6/Gfa8Wj/SDsSNd7FPHN3TUeaUQPNszVSH655AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHyQTPndhdeO69g1cd6Vn+u9aM7t+3549c0Ltz7w5RmzH73g+Ovb2051Xlq2fNOUWZ3dDcueubNq3ckgqEz2i6W6xxY+3dJ826S5/3m67h9PPfzt2hPF6XHD7YisnYMXwwfTKoJgaVbltXDY18uDIJ5bSDaDH+cXvpV88JWwAAAAwEfJhOTvokw7FQdLctqxZJqMJf+FUmGxZfPSrofWzk10XXbw6PFFPSvPfbz4AOPVnnW8TLvyzE8sKxiH8Tc63pl6uOuqvHEGFx0xmud7Lpradkl5T/XSePupW0vuTvx2zeJ9P1mzvudw3/jrvt8350Be/q8cPP+HZ07+BwAA4H8h/0fHGdxQ+X/v1V86+cXWJz++4Yrdcxpv+dV33qpOTFhzz4V7Ht/06/rDu2Pb8/L/pJxD5uX/cMZh/i8Kzi3/AwAAwAfZ/zv/1+aNM7ih8v+BRauaH11eNaHn57PvPT71kdPjHmzcdt+bUw/O/EPTgaceeSuRl/9rCsv/I7KnHT7ZF054RUUQ1BR+UgEAAIAc4f+7n/loIczrqU8Oonl99eXHJo9ZXT264cGNF08puvynf7nuxf1vn17Qd2rG2ET96msezsv/tYXl/5L35+UCAAAABdj/3Ng5z7fFmnqfm9+0oOH69U07/rV9c+3Ppm/b9dW/Pfa9eYfz8n+8sPw/cnheDgAAAHAWf25p+uOYlTvH9h77a2td9bFvXJV458nPXPLswb4rN9/zzu9Xl+fl/yWF5f+y9Da98iHVaX/4Vwj3VQTBqP4HralCb9AxI1MAAAAA3iOZO/Ft39r8xqvPdj5xw55bjrxQ3n53380vzB/dduI3X19x099rD5fm5f/Wwe//H97pIFz/n3P/v7z1/1mF1F3/prsxAAAAAOej/PX84e3xU99cMND37xe6/v+mjVfUrwh+tGXhVTtq6ks/e6hr4Scnjtk3+bt1Ux9fW7Pun3vz8n97Yfm/OHv7Xn7/HwAAAJyDD9v3/y3IG2dwQ93///SWWdM33L+ruWFbb9lLxZ8/tKqusbXrtj01T1xwa+XMqsSNefm/o7D8H25HZ7+8veH5uasiCMb3P0jfTXBrON0VkUJ3SVYhdeIjPRrDHulC98isQlJrpMc1FUFwcf+D9kihKix0RAonytOFLZHC82EhfT1kCr+IFPaGV9rG8vR0o4WdYSG9wKI7XEExOrMkItLj1EA9+gtn7fFy5uAAAADnlTA8p7NsSW4ziEbZ7thQO5QNtUPRUDsUD7XDiMgO0R0Hej5YklsIn6+569U7HugeF6+eeGjb3PunJf707w3X1jfvSByZ/Om3X5r5clle/t9SWP4PT0VpajPQ+v8gXP+f/l7DzPr/JWGhMlLoDgvx6B0D4uExUmF3fXiMyni6x4nxmQIAAAB8pIWfCxQP8zwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7J373FSVXeCwE83/abpbkIS1DXaaoLiLE2DqOOEmSATo5MYaTLZfDYaI69Gemh5kxEmHwaRGBPf0YzK7BrQdUXjRxGzKo4uyKxkIcyqTMYnIq7PcdfxMQqOzoT9dN86RdWtLrsQUNr9fv/oOlW/87z16Dr33joXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/9B68Rf7ffOl2p3XHbHwvWfmDL2j/83PfyG8ee8PN73W8r1lf/7+s9d+sW7asmNOuXbV6VNXLxq45O0Q2rrLlSXFy868feb3zmset+v2sa//8sb5Y96sytSbiYf+XX/KM3eWxlZfHBDCvWUhVKQDw+qTQGXmfn2s79D6EAaG3YFsifa6pES64fBwbQjLw+5Atqo1tSHU5wS+vWX92su6EtfUhvClEEJ1uo1nq5M2atOBIVVJoC4dmFmRBHbuSmQD95UnAdhr8c2QfdGvasvP0NRzuSKvv8p91rFPVnp4/WKiqXi+10/ez53KUZV+oG2vnraC6tgvCt4e67zb+sC7rWA7X+lpy/0ilfmGsmt3qDqUT2mfOnF+57z4SHloaelXrKb99Dw/9dYPJ+9Jus+8DmMHmvbJ63Bb6+otL4w67Z0fjb9s/jk1Sxv2tptP5mzS3PT+Vh0yr7k+8zxGY3ye9IG3X8G3pGZfukIIf/QPV/3dJYv/5Nlnhm7eevjFtz391E3LLjr+52O+c/sFNx353v/59zML5v9NHz7/jy/neFuelzu2+kFDMjePj9THxBsNydwcAAAA+oy+sNf0W9d9bufBnasGvTzht2Orzm9aNuK9ry74/rsPHNn+vYbPv7p19JqC+X9zacf/4yH/+tzRrgthTHfiwsYQDup+PAncGrszqTGEI7pTbfmBk1OBdSEc3J0Ymq0qVaImlmhOBV5pyATGpAIbYqAtFbg5Bq5MBZbGwKpUYHIMrEsFxsZA6Mgfx7ENmXGUHKiNgQnJRlwVz0L45+xO4NS2eiZbFQAAwD6SmR1W5t/NOddhbzPE6eWq2t4yxDOwi2aoTtWQnsFmp1VFa6jorYby3mrIjnvxhw+/oOay3mouOA2jLD/Dg/eMOGhmZdOfzH7ob2dNXFz/zC+e+NlJjwy+4skZsy4d9r+e+uONBfP/1g+f/1f30JGyguP/IYzv/htzl2cindn4hLa8DAAAAMBeuH7SHzZOu+W6VzY+ccQRb/yXu2dMe2NI1aAVA75VXjW/+Y1Dtl9eMP8fU9r5/3GfSL+czGFz3A0xvTGE1vxAUu2XCwPJUe/+mQAAAAD0Bdnj8dlj4R2Z2+QU7fR8ujB/2x7mjwf+x/SYf0PVna/t+vlrP938rRuqFh218bCnv/s/zn7o/f/a/2s/e252zT0bLyyY/7eVdv5/Xf5t0okNsRdXN4ZQkxP4dexlV6Bbcwxs/0p+IDP+DXEDXBKrypyYkK3qklhiQgy0pgLLi5V4NFvioPxA5snKNn5hdhwdmRI5AQAAAPjYxd0B8bh8PP9/9lFTRlWM+8LJTz2x5T+2nbVqy4iNNZu+9s3fzdm25eGn1v7dr3YWzP8n7Nn5/93z4ILT+zv7hzC8IoR+6R8GbK5LFgaMgfqyTOLBuqSufumqLqgLYXTXwNJVPZ9Z/78ivcbgltqkqhg46MiVbw3pStxUG8Lw3MDjZ604visxLxXINv4fakM4vGu06cb/W03SeGW68WtrQjgsJ5CtalJNCF2NVaWrWl+duY5Buqo7q0MYlBPIVnVCdQgLAgB9VPxXOiX3wbkLFk6f2NnZPmc/JuI+/NowtaOzvWXyzM4p1UX6NCXV57xljC4oHFOpV77ZGpcoOntlYynp7O8EW3PbyuzHLzhxMHM/fheq7B7nyMq8u8elh3zMUYVNhJxvUsWGXL6fh1yXW8nuJ7Gg/pi/KvQPNfPnts9pOX/ivHlzRiR/S80+MvkbDzMl22pEelvV9dS3El4eRVfLSvmo2+ro3EqGzztv1vC5CxYO6zhv4rnt57bPGDXyxBNPGHHCqJEjhneNqjX528tQj+6p6tRQd60ocVz7cKiHVORU8nF8akhISPS1xFWX/9Poih/91dfHnfHTJ9YcOnrjYxfduPWuYYt+/diQe4Y8vGbtywXz/1kfPv+Pnzrxkz+zPkOx4/9N8TB/8vjuw/wTYmB5qcf/m4odzc+eGNCcCiyOgcUO8wMAAPDpEHdHxr2Zca/01c989cyD+938/WsahjUef+q4237/uXGffe+8izZUnv/Z+2av+87kgvn/4tJ+/7+P1v/PLl3/9WLL/A+NJVqLrf+fXuY/u/7/4mLr/6eX+c+u/7/8E1j/f342kNok/2z9fwAA4NPg41v/v9fl/dMXCCjI0Ovy/ukLBBRk6HUZ/1IvELDH6//P+NOv/GDepS+eVFb/pd8NvrhhTdtfDtjcPPF/DvqLlcPf23H/DRMK5v9Xljb/t3A/AAAAHDi+XP1Hb55x2Kn/umT59T+9Z8NJD+58/6aJ3xh3RcWrm752w8srT/+ngvn/8tLm/x//+n+h2Pn/zcUCbcUWBrT+HwAAAH1UsfX/Fj268epRE0deevhbx8768Z0jT3rkmd98fskZfzlz1uw115+2aXt1wfx/VWnz/3jaRXle7tibDxqSNe1Cek27NxqyPxkAAACAvqE8tLRUlpg3b2XUkz96m0/FpUA/JJ1rzbUDX7zwqNvOvvWhbe/ddUzHuPuefn3TMdMn3f9vf3j5jLcm/duVBfP/daXN//N+l7GtdfWWF0ad9s4HPxp/2fxzapY27D7+DwAAAOw/pe6XAAAAAAAAAAAAAAAAPnlDZ6x+9oMjh3Xc+ONr71y588kzf3DFzEuWbZp7y6CNE3/v3PdPOKXg9/9hfHe5Yr//j9f9i78v+Gxe7thq7+v/Ze5/+xt3LOhesnBzQwhH5QamL5k+MGSuzX90bmDt2UMHdyWWpEs8sG3sS12Jc9KB04Z9ZkdXYnQqMCEuknhwOhCvqrhjQCoQl1f8+3Qgbo9V6UBVJvCTAck4ytLb6h/rk21Vlt5WT9eH0JgTyG6re+uTNsrSA7wmFcgOcHY6EAd4RiZQnu7VHf2TXsVAfSz6i/5JrwAAOGDFb4GVYWpHZ3tr/Aofbw+pyL+N8pYsu6Cw2rISm98alyY7e2VjKel+6e+iu681Xhmqu4YwouDram6Wsu5R7ptaetl0ny0y5N5WeysvUi5tTzddVfER1SYjapk8s3NKZa8DP673LCMres0yomCyk5ulvHuTllBLCX0pYUQlbpsSuhzvl4eWln6pXH8Qg00hT2+viFJ/r5+7zl+xV0FunnNP/YebD19x+vh/aX1oxvaX7rrr9Mtve3DZjVNn3Nty16Nz1ocLCub/TaXN/6tzx7UjczGAxfHKel9uDGFCiSMCAACAT79pM7b97OK/veqV7W1DXpo5/Kq1Ty64bmFFw61LT3n6gR+8e9bl5+xt/Oh1M8PVPz6r7L22nVVXhlOPHPY3P1l/0fkP1J4xesyzv9j69ryC+X9zafP/uAcrcyg42duxLl7//8LGELovrd+UBG6Nw53UGMIR3am2WCK5oP7XY4nWJHBr3GEyNJaY0JZfVU0MrEoFXmnIBNalAhtiILOXYmXI7Mq5qiGE47tT4/NLzIolmlKBcTHQnAq0xEBrKjAgBsakAv93QCbQlgr8JgZCR/62untAZlsBAADsicw8qzL/bkjP81ZV9JahrLcMdb1lKO8tQ3VvGYqNIt5fHTNUpk5eKcvJVJmutTZVS0GGeDH8Pe5XQYbwaH7OdMGCpuP5B9nzDcryMzTtOHbFq4PfeXLCP077zXf/86PPbmx68J675/980uM7Xhu16OWtowvm/62lzf/r8m+T1jfE+f/u6/8lgV/H7l0dTx1vjoHtX8kPZHYMbIiT3UuyVbVlSmQm7ZfEEmNioDkVmBUDY1KBCeMzgeWD8wOZmXa28QuzjXdkSuQEAAAA4GMXdxDE3TRx/v/lpYd85w8uPnRq3dGPr15/zK5ND0766ufeveWmb2zf/Bf1v79g8OcL5v9jSpv/x/b65za2NPbmxQEh3Fu2uzfZwLD6JBD3Y9THn8cfWh/CwJwdHNkS7XVJiapUw+Hh2uQX6lXpqtbUJmsMxPvf3rJ+7WVdiWtqQ/hSzt6XbBvPVidt1KYDQ6qSQF06MLMiCcQ9P9nAfeVJAPZadq9gfEFlTnXJauq5XJHX36flmqDp4RXsA+0hX0+/udpfqtMPZPapZu3Z01ZQHftFwdtjnXdbX3y3NXm35X6RynxD2bU7VB3Kp7RPnTi/c158JPeXrAX20/Oc+yvVUtL74HW4+KP3tnfV6Q60pj4+Wnsu1/PrsCxWt6119ZYXRp32zo/GXzb/nJqlDSV3o4j4Q+FjL/3MwCdzNu/+Vh0yr7k+93nS5vOkL/4baPa0hRAe+8zgY//s71/53Oyh/3tJ+byOG7Z+4bDntu/Ycf6rW/76lC1ffPP5gvl/W2nz/4rUbbd/iRtzbmMIx+Rs3M1x8/9xY/I5mBNIPiUHFQaSQ+4vNBT95AQAAIB9Lbu7I7u/oCNzm5wQnp4nF+Zv28P8cX/FmB7zl9rv77676daHfj74S1/45fH/etJppy5rPOn3hkxbcVHrzmGDVvz55X/zZMH8f8KHz/9rUt10/N/xf/YTx/97dKDviq5JP7B4r3ZFF1THfuH4f48O9Heb4/89cvzf8f+eOP7fC8f/e3SgP20F35Jm+dIVQnj1lDN+98ilbe9+8/VDa2bedufn7v3+o4dO+e3dr534/trq7aOveKBg/j+rtPm/9f96XrQvu/7fhGLr/80qtv7fYuv/AQAA+1WRhebS87yC1fsKMqRX7yvI0OsCgb0uMWj9vz1e/2/yY2f+6aRN03+7/jtv9d/4k8WvXnnBDQv/6o6f/arjr++f9NPrq54rmP8vLm3+H18O/XNb7yvr/zWPL1LVlTEwy8KAAAAAHIiK7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk3Xcr94+aOEtk054fNn6J/77ieHgW8du3HjVT7ZeMbZu8HObF+24/dov1k1bdswp1646ferqRQOXvB1CR3e5sqR42Zm3z/zeec3jdt0+9vVf3jh/zJvVmXorM7f/Li93bPWDhhCW5zxSHxNvNHTd2R349jfuWFDRldjcEMJRuYHpS6YP7Erc3BDC0bmBtWcPHdyVWJIu8cC2sS91Jc5JB04b9pkdXYnRmUBZurv/aUDS3bJ0dy8bEEJjTiDb3T8bkF9Vto1TM4HydBu31CdtxEB9LHpdfdJGDHTGEh01IQyvCKFfuqqN1UlV/dJV3V+dVNUvXdWi6hBGhxAq0lVtq0qqqkiP/JGqpKoYOOjIlW8N6UosrwpheG7g8bNWHN+VmJ0KZBv/VlUIh3e9ZNKNr65MGq9MN35NZQiHhRCq0iXeqUhKVKVLPF8RwqCcQLbxaRUhLAh8KsQPnym5D85dsHD6xM7O9jn7MVGVaas2TO3obG+ZPLNzSnWqT8WU5aR3XfDRx771rR9O7k6cvbKxlHRFplxld5dHVubdPe5A733sV11uJbufj4L6Y/6q0D/UzJ/bPqfl/Inz5s0ZkfwtNfvI5G+/TDTZViP6yrY6OreS4fPOmzV87oKFwzrOm3hu+7ntM0aNPPHEE0acMGrkiOFdo2pN/u6Loa74+Id6SEVOJR/HB4CEhERfS5Tnfbq1Hugf5AVf9Hd3tDJUd39AF0wrcrOUdY9yXwz65I8w2ow9/p7S64hGFEwcCrKM7D3LcQWTid1ZapMs3d/rCiaHuTWVd2/SeL88tLT0K7YdmvLv5m7e1/di8z4VN12JaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+HztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87cOo2cDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAA///Y7fKw") r1 = openat(r0, &(0x7f0000000080)='test\x00', 0x42, 0x1ff) write(r1, &(0x7f00000000c0)='A', 0x1) fsync(r1) close(r1) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) r3 = memfd_create(&(0x7f0000000140)='test2\x00', 0x0) sendfile(r3, r2, 0x0, 0x8000000) close(r0) umount2(&(0x7f0000005600)='./file0\x00', 0x0) r4 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./loop1\x00', 0x61c0, 0x701) mount(&(0x7f0000000200)=@filename='./loop1\x00', &(0x7f00000001c0)='./file1\x00', &(0x7f00000055c0)='btrfs\x00', 0x0, 0x0) 1.868023153s ago: executing program 0 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/acpi/parameters/debug_level\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0xffffffff\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/acpi/parameters/debug_layer\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0xffffffff\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='freeze\n', 0x7) 1.698050698s ago: executing program 0 (id=31): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ftruncate(r0, 0x100000000) 1.526948242s ago: executing program 3 (id=33): r0 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/queues/rx-0/rps_cpus\x00', 0x2, 0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000340)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r5, 0x0, &(0x7f00000003c0)=""/16, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 1.457579593s ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./mnt\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./nullb1\x00', 0x8000, 0xfa01) mount(&(0x7f0000000800)=@filename='./nullb1\x00', &(0x7f0000000700)='./mnt\x00', &(0x7f0000000900)='zonefs\x00', 0x0, 0x0) 1.363681376s ago: executing program 0 (id=35): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x0, "00ff"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_012={0x1, 0x0, 0xa, "01"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0346") 1.109681462s ago: executing program 1 (id=36): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x1d0, 0x2a0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x1234, 0x1235]}}]}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 955.964516ms ago: executing program 3 (id=37): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x2) 943.994356ms ago: executing program 1 (id=38): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x0, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000d00)={0x0, 0x1dcd6500}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000600)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x1234, 0x0, @empty}, r2}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000700)={0x7, 0x8, 0xfa00, {r2, 0x10}}, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900)={0x0}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000a00)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @empty}, {0xa, 0x1234, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}}, r3, 0x3e8}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000b00)={0x4, 0x8, 0xfa00, {r3, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000c00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r3}}, 0x120) 505.355537ms ago: executing program 2 (id=39): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000290001010203010902200001010080fa0904000002ffffff000705010200020007058102000200"], 0x0) syz_usb_ep_write(r0, 0x0, 0x1, &(0x7f0000000100)="01") nanosleep(&(0x7f0000000300)={0x2}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x0) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r3 = syz_open_dev$I2C(&(0x7f0000000180), 0x2, 0x0) ioctl$I2C_RDWR(r3, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r4 = syz_open_dev$I2C(&(0x7f0000000180), 0x3, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r5 = syz_open_dev$I2C(&(0x7f0000000180), 0x4, 0x0) ioctl$I2C_RDWR(r5, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) r6 = syz_open_dev$I2C(&(0x7f0000000180), 0x5, 0x0) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000200)={&(0x7f0000000240)=[{0x0, 0x0, 0x1, &(0x7f0000000280)='\x00'}], 0x1}) 291.971693ms ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='vfio-pci\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/vfio-pci/bind\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='0000:00:02.0\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/iommu\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/vfio/devices/vfio0\x00', 0x2, 0x0) 200.442885ms ago: executing program 1 (id=41): r0 = memfd_create(&(0x7f0000000000)='test\x00', 0x0) fallocate(r0, 0x0, 0x0, 0xd09dc300) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/ptp/ptp0/max_vclocks\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='1048576\x00', 0x8) 120.792317ms ago: executing program 1 (id=42): r0 = syz_io_uring_setup(0x80, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syz_tun\x00', 0x101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./sys\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/syz_tun/queues/rx-0/rps_cpus\x00', 0x2, 0x0) io_uring_enter(r0, 0x6, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='0\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='processors\n', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='mem\n', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts. [ 78.957792][ T5766] cgroup: Unknown subsys name 'net' [ 79.096098][ T5766] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.806175][ T5766] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.518766][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.538537][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.546645][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.551144][ T5791] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.561743][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.569934][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.577595][ T5791] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.585547][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.594330][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 82.598799][ T5791] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.608675][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.617428][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.617428][ T5782] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.633108][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.640539][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.670484][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.678429][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.685558][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.694947][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.702932][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.703202][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 82.717656][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.726058][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 82.733619][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.205908][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 83.293033][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 83.316661][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 83.432342][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.440423][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.447695][ T5785] bridge_slave_0: entered allmulticast mode [ 83.455397][ T5785] bridge_slave_0: entered promiscuous mode [ 83.464099][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 83.498435][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.507665][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.514924][ T5785] bridge_slave_1: entered allmulticast mode [ 83.523008][ T5785] bridge_slave_1: entered promiscuous mode [ 83.594068][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.616054][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.626123][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.633650][ T5777] bridge_slave_0: entered allmulticast mode [ 83.641282][ T5777] bridge_slave_0: entered promiscuous mode [ 83.650858][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.701252][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.708498][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.715678][ T5777] bridge_slave_1: entered allmulticast mode [ 83.722976][ T5777] bridge_slave_1: entered promiscuous mode [ 83.761509][ T5785] team0: Port device team_slave_0 added [ 83.767777][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.775041][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.783307][ T5783] bridge_slave_0: entered allmulticast mode [ 83.790830][ T5783] bridge_slave_0: entered promiscuous mode [ 83.812966][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.829659][ T5785] team0: Port device team_slave_1 added [ 83.846530][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.856050][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.863843][ T5783] bridge_slave_1: entered allmulticast mode [ 83.871431][ T5783] bridge_slave_1: entered promiscuous mode [ 83.879755][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.968070][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.979455][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.986445][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.012449][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.026267][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.033311][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.059364][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.075461][ T5777] team0: Port device team_slave_0 added [ 84.084219][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.093641][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.101973][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.109626][ T5778] bridge_slave_0: entered allmulticast mode [ 84.116628][ T5778] bridge_slave_0: entered promiscuous mode [ 84.135370][ T5777] team0: Port device team_slave_1 added [ 84.163595][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.171052][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.178680][ T5778] bridge_slave_1: entered allmulticast mode [ 84.185707][ T5778] bridge_slave_1: entered promiscuous mode [ 84.231041][ T5783] team0: Port device team_slave_0 added [ 84.269332][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.279233][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.286223][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.315268][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.328675][ T5783] team0: Port device team_slave_1 added [ 84.364000][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.377018][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.384046][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.410181][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.434644][ T5785] hsr_slave_0: entered promiscuous mode [ 84.443904][ T5785] hsr_slave_1: entered promiscuous mode [ 84.463238][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.470338][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.496703][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.544245][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.554296][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.580844][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.602023][ T5778] team0: Port device team_slave_0 added [ 84.656326][ T5778] team0: Port device team_slave_1 added [ 84.684016][ T5777] hsr_slave_0: entered promiscuous mode [ 84.690543][ T5777] hsr_slave_1: entered promiscuous mode [ 84.696744][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.705549][ T5777] Cannot create hsr debugfs directory [ 84.739112][ T5790] Bluetooth: hci0: command tx timeout [ 84.739131][ T5782] Bluetooth: hci2: command tx timeout [ 84.774222][ T5783] hsr_slave_0: entered promiscuous mode [ 84.781606][ T5783] hsr_slave_1: entered promiscuous mode [ 84.787739][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.795436][ T5783] Cannot create hsr debugfs directory [ 84.814156][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.821476][ T5790] Bluetooth: hci3: command tx timeout [ 84.821499][ T5782] Bluetooth: hci1: command tx timeout [ 84.835490][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.862047][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.893933][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.902807][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.931819][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.095798][ T5778] hsr_slave_0: entered promiscuous mode [ 85.103034][ T5778] hsr_slave_1: entered promiscuous mode [ 85.109971][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.117572][ T5778] Cannot create hsr debugfs directory [ 85.344898][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.370307][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.381460][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.408230][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.480224][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.503813][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.522052][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.546190][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.617337][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.636537][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.675879][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.686694][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.771805][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.781885][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.799322][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.831240][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.867414][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.934382][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.978251][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.985793][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.025007][ T1142] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.032335][ T1142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.044950][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.155654][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.174658][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.231975][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.251138][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.258392][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.281353][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.288577][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.320343][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.327543][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.338077][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.345317][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.396893][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.425994][ T5783] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.512504][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.563002][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.570279][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.612274][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.619506][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.721153][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.768059][ T5778] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.822781][ T5790] Bluetooth: hci0: command tx timeout [ 86.828972][ T5782] Bluetooth: hci2: command tx timeout [ 86.908404][ T5782] Bluetooth: hci3: command tx timeout [ 86.913881][ T5782] Bluetooth: hci1: command tx timeout [ 86.925456][ T5785] veth0_vlan: entered promiscuous mode [ 86.963777][ T5785] veth1_vlan: entered promiscuous mode [ 87.045832][ T5785] veth0_macvtap: entered promiscuous mode [ 87.059732][ T5785] veth1_macvtap: entered promiscuous mode [ 87.107670][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.144364][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.207150][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.229032][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.237801][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.268252][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.310710][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.346260][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.455073][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.577242][ T5777] veth0_vlan: entered promiscuous mode [ 87.655386][ T2947] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.676077][ T2947] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.690054][ T5777] veth1_vlan: entered promiscuous mode [ 87.735417][ T5778] veth0_vlan: entered promiscuous mode [ 87.755344][ T5783] veth0_vlan: entered promiscuous mode [ 87.883316][ T5783] veth1_vlan: entered promiscuous mode [ 87.906203][ T5778] veth1_vlan: entered promiscuous mode [ 87.907081][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.929779][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.942829][ T5777] veth0_macvtap: entered promiscuous mode [ 87.956154][ T5777] veth1_macvtap: entered promiscuous mode [ 88.047180][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.060165][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.076509][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.094112][ T5783] veth0_macvtap: entered promiscuous mode [ 88.106731][ T5778] veth0_macvtap: entered promiscuous mode [ 88.120617][ T5783] veth1_macvtap: entered promiscuous mode [ 88.129330][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.140911][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.153667][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.192705][ T5778] veth1_macvtap: entered promiscuous mode [ 88.217800][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.233257][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.242144][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.253482][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.291700][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.305332][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.316888][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.327856][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.342139][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.364102][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.376437][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.387192][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.399610][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.411836][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.423829][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.436888][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.449807][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.462918][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.475879][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.487000][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.512500][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.528857][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 88.542309][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.556304][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.566538][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.581149][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.595711][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.607143][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.617262][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.629586][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.639515][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.650434][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.663134][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.723616][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.735459][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.747179][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.757221][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.775329][ T5840] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice= 0.00 [ 88.792575][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.799921][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.814881][ T5840] usb 2-1: Product: syz [ 88.822190][ T5840] usb 2-1: Manufacturer: syz [ 88.827462][ T5840] usb 2-1: SerialNumber: syz [ 88.829251][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.899663][ T5782] Bluetooth: hci2: command tx timeout [ 88.908480][ T5782] Bluetooth: hci0: command tx timeout [ 88.941216][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.951132][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.980526][ T5782] Bluetooth: hci3: command tx timeout [ 88.982631][ T5790] Bluetooth: hci1: command tx timeout [ 89.155622][ T56] hid-generic 0003:046D:1234.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 89.239339][ T5840] r8152-cfgselector 2-1: reset high-speed USB device number 2 using dummy_hcd [ 89.428448][ T5840] r8152-cfgselector 2-1: device descriptor read/64, error -32 [ 89.710003][ T5840] r8152-cfgselector 2-1: reset high-speed USB device number 2 using dummy_hcd [ 89.868538][ T5840] r8152-cfgselector 2-1: device descriptor read/64, error -32 [ 90.139834][ T5840] r8152-cfgselector 2-1: reset high-speed USB device number 2 using dummy_hcd [ 90.179927][ T5840] r8152-cfgselector 2-1: device descriptor read/8, error -32 [ 90.318336][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.468352][ T5840] r8152-cfgselector 2-1: reset high-speed USB device number 2 using dummy_hcd [ 90.511032][ T23] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 90.512822][ T5840] r8152-cfgselector 2-1: device descriptor read/8, error -32 [ 90.529835][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.542861][ T23] usb 1-1: config 0 descriptor?? [ 90.641003][ T5840] r8152 2-1:1.0: USB reset failed, errno=-19 [ 90.652155][ T5840] r8152-cfgselector 2-1: Unknown version 0x0000 [ 90.660970][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.677698][ T5840] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 90.705286][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.792373][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.820961][ T23] corsair-psu 0003:1B1C:1C03.0002: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.0-1/input0 [ 90.835621][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.879481][ T5840] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.905549][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.930188][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.942460][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.979145][ T5790] Bluetooth: hci0: command tx timeout [ 90.983078][ T5782] Bluetooth: hci2: command tx timeout [ 90.994897][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.060481][ T5782] Bluetooth: hci1: command tx timeout [ 91.064166][ T5790] Bluetooth: hci3: command tx timeout [ 91.071640][ T5840] usb 2-1: device descriptor read/64, error -32 [ 91.127753][ C1] usb 1-1: input irq status -75 received [ 91.198766][ T23] corsair-psu 0003:1B1C:1C03.0002: unable to initialize device (-110) [ 91.240029][ T23] corsair-psu: probe of 0003:1B1C:1C03.0002 failed with error -110 [ 91.358288][ T5840] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 91.508474][ T5822] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 91.558453][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.700695][ T5822] usb 3-1: not running at top speed; connect to a high speed hub [ 91.713266][ T5822] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x81 has invalid maxpacket 1024, setting to 1023 [ 91.724493][ T5822] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 91.733956][ T5822] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.756366][ T23] usb 4-1: New USB device found, idVendor=3344, idProduct=1122, bcdDevice= 0.00 [ 91.765639][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.774818][ T23] usb 4-1: Manufacturer: LME2510C WARM [ 91.786854][ T5822] gspca_main: spca501-2.14.0 probing 0000:0000 [ 92.038487][ T5822] gspca_spca501: reg write: error -71 [ 92.043954][ T5822] spca501 3-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 92.054457][ T5822] spca501: probe of 3-1:1.0 failed with error -22 [ 92.066144][ T5822] usb 3-1: Found UVC 1.00 device (0000:0000) [ 92.074786][ T5822] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 92.085937][ T5822] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 92.095204][ T5822] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 92.107911][ T175] cfg80211: failed to load regulatory.db [ 92.128419][ T5822] usb 3-1: USB disconnect, device number 2 [ 92.998248][ T5840] usb 2-1: device descriptor read/64, error -71 [ 93.086947][ T5846] usb 1-1: USB disconnect, device number 2 [ 93.120565][ T5840] usb usb2-port1: attempt power cycle [ 93.182185][ T5877] syz.0.8[5877]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.205182][ T5877] loop0: detected capacity change from 0 to 1024 [ 93.234724][ T23] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 93.234858][ T23] dvb_usb_lmedm04: probe of 4-1:1.0 failed with error -22 [ 93.254273][ T23] usb 4-1: USB disconnect, device number 2 [ 93.275994][ T5877] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.390072][ T5877] loop1: detected capacity change from 0 to 512 [ 93.405737][ T5877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.449470][ T5877] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 93.549086][ T5840] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 93.612106][ T5840] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 93.626170][ T5840] usb 2-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 93.652115][ T5840] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.00 [ 93.666888][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.675209][ T5840] usb 2-1: Product: syz [ 93.679767][ T5840] usb 2-1: Manufacturer: syz [ 93.684415][ T5840] usb 2-1: SerialNumber: syz [ 93.888568][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.948326][ T5823] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.078812][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 94.089731][ T23] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 94.099222][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.109574][ T5840] ath6kl: Unsupported hardware version: 0x0 [ 94.122693][ T23] i2c-tiny-usb 1-1:1.0: version 1.00 found at bus 001 address 003 [ 94.159735][ T5840] ath6kl: Failed to init ath6kl core: -22 [ 94.162654][ T5823] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 94.186073][ T5823] usb 3-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.0a [ 94.195956][ T5823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.204235][ T5823] usb 3-1: Product: syz [ 94.208776][ T5823] usb 3-1: Manufacturer: syz [ 94.213454][ T5823] usb 3-1: SerialNumber: syz [ 94.216007][ T5840] ath6kl_usb: probe of 2-1:1.0 failed with error -22 [ 94.241684][ T5883] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 94.262822][ T5823] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 94.282670][ T5823] input: xirlink-cit as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 94.434320][ T5886] loop3: detected capacity change from 0 to 32768 [ 94.483665][ T5886] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.11 (5886) [ 94.608416][ T5886] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 94.628683][ T5886] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 94.647903][ T5886] BTRFS info (device loop3): using free space tree [ 94.750123][ T5886] BTRFS info (device loop3): enabling ssd optimizations [ 94.759197][ T5886] BTRFS info (device loop3): auto enabling async discard [ 94.841184][ T23] (null): failure reading functionality [ 94.869283][ T23] i2c i2c-1: failure reading functionality [ 94.884811][ T23] i2c i2c-1: connected i2c-tiny-usb device [ 94.919224][ T23] usb 1-1: USB disconnect, device number 3 [ 94.947277][ T5886] BTRFS info (device loop3): disk added /dev/loop1 [ 95.050892][ T5783] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.513143][ T5848] usb 3-1: USB disconnect, device number 3 [ 95.608401][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 95.630490][ T5840] usb 2-1: USB disconnect, device number 5 [ 95.813394][ T23] usb 4-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 95.826379][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.835686][ T23] usb 4-1: Product: syz [ 95.842274][ T23] usb 4-1: Manufacturer: syz [ 95.846924][ T23] usb 4-1: SerialNumber: syz [ 95.935074][ T5914] loop0: detected capacity change from 0 to 32768 [ 95.948615][ T5914] BTRFS: device fsid 28302361-d975-4c41-bd4c-c547b14b74a1 devid 1 transid 8 /dev/loop0 scanned by syz.0.13 (5914) [ 95.980224][ T5914] BTRFS info (device loop0): first mount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 95.990781][ T5914] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 96.001438][ T5914] BTRFS info (device loop0): using free space tree [ 96.044007][ T5914] BTRFS info (device loop0): enabling ssd optimizations [ 96.051741][ T5914] BTRFS info (device loop0): auto enabling async discard [ 96.118648][ T5840] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 96.278686][ C1] usb 4-1: received EP1 urb->status = -2 [ 96.284530][ T23] usb 4-1: unable to init card! (ret=-110) [ 96.295557][ T23] snd-usb-caiaq: probe of 4-1:1.0 failed with error -110 [ 96.344936][ T5840] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00 [ 96.366121][ T5840] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.389411][ T5840] usbtest 2-1:1.0: Linux gadget zero [ 96.400542][ T5840] usbtest 2-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 96.470284][ T5777] BTRFS info (device loop0): last unmount of filesystem 28302361-d975-4c41-bd4c-c547b14b74a1 [ 96.668767][ T5846] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.892677][ T5846] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 96.902040][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.913725][ T5846] usb 3-1: config 0 descriptor?? [ 97.146774][ T5846] corsair-psu 0003:1B1C:1C03.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.2-1/input0 [ 97.437557][ C0] usb 3-1: input irq status -75 received [ 97.498320][ T5846] corsair-psu 0003:1B1C:1C03.0003: unable to initialize device (-110) [ 97.528353][ T5846] corsair-psu: probe of 0003:1B1C:1C03.0003 failed with error -110 [ 97.556502][ T5951] ubi0: attaching mtd0 [ 97.565991][ T5951] ubi0: scanning is finished [ 97.576520][ T5951] ubi0: empty MTD device detected [ 97.605869][ T5951] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 97.617914][ T5951] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 97.626593][ T5951] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 97.636565][ T5951] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 97.646579][ T5951] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 97.661917][ T5951] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 97.670345][ T5951] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1128815922 [ 97.682041][ T5951] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 97.693502][ T5952] ubi0: background thread "ubi_bgt0d" started, PID 5952 [ 98.345260][ T5823] usb 4-1: USB disconnect, device number 3 [ 98.494634][ T5956] (null): rxe_set_mtu: Set mtu to 1024 [ 98.806857][ T5956] infiniband syz0: set active [ 98.814033][ T5956] infiniband syz0: added veth0 [ 98.894021][ T5956] RDS/IB: syz0: added [ 98.912582][ T5956] smc: adding ib device syz0 with port count 1 [ 98.919722][ T5956] smc: ib device syz0 port 1 has pnetid [ 99.000718][ T5848] usb 2-1: USB disconnect, device number 6 [ 99.393531][ T5822] usb 3-1: USB disconnect, device number 4 [ 99.568662][ T5846] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 99.576304][ T5976] PM: suspend entry (deep) [ 99.787377][ T5846] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 99.808201][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.816271][ T5846] usb 2-1: Product: syz [ 99.820804][ T5846] usb 2-1: Manufacturer: syz [ 99.825450][ T5846] usb 2-1: SerialNumber: syz [ 99.877665][ T5976] Filesystems sync: 0.286 seconds [ 100.042906][ T5964] NFSD: attempt to initialize umh client tracking in a container ignored. [ 100.052784][ T5964] NFSD: attempt to initialize legacy client tracking in a container ignored. [ 100.061836][ T5964] NFSD: Unable to initialize client recovery tracking! (-22) [ 100.073916][ T5964] NFSD: starting 90-second grace period (net f000045d) [ 100.095619][ T5846] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 100.109906][ T5846] usb 2-1: unable to init card! (ret=-5) [ 100.116119][ T5846] snd-usb-caiaq: probe of 2-1:1.0 failed with error -5 [ 100.126239][ T5846] usb 2-1: USB disconnect, device number 7 [ 100.294334][ T5976] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.327398][ T5976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.363703][ T5976] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 100.374682][ T5976] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.381223][ T5976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.389304][ T5976] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.397224][ T5976] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 100.404919][ T5976] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.130411][ T2325] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 109.131715][ T2325] CPU: 1 PID: 2325 Comm: pvrusb2-context Not tainted syzkaller #0 [ 109.133106][ T2325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.134706][ T2325] Call Trace: [ 109.135279][ T2325] [ 109.135856][ T2325] dump_stack_lvl+0x18c/0x250 [ 109.136659][ T2325] ? show_regs_print_info+0x20/0x20 [ 109.138197][ T2325] ? load_image+0x420/0x420 [ 109.139073][ T2325] panic+0x2ca/0x720 [ 109.139798][ T2325] ? bpf_jit_dump+0xd0/0xd0 [ 109.140562][ T2325] ? ret_from_fork_asm+0x11/0x20 [ 109.141438][ T2325] __warn+0x2e0/0x470 [ 109.142131][ T2325] ? firmware_fallback_sysfs+0x722/0x950 [ 109.143076][ T2325] ? firmware_fallback_sysfs+0x722/0x950 [ 109.143955][ T2325] report_bug+0x2be/0x4f0 [ 109.144699][ T2325] ? firmware_fallback_sysfs+0x722/0x950 [ 109.145663][ T2325] ? firmware_fallback_sysfs+0x722/0x950 [ 109.146564][ T2325] ? firmware_fallback_sysfs+0x724/0x950 [ 109.147498][ T2325] handle_bug+0xcf/0x120 [ 109.148163][ T2325] exc_invalid_op+0x1a/0x50 [ 109.148838][ T2325] asm_exc_invalid_op+0x1a/0x20 [ 109.149530][ T2325] RIP: 0010:firmware_fallback_sysfs+0x722/0x950 [ 109.150478][ T2325] Code: df e8 c2 3c f9 ff 45 89 e7 eb bc e8 f8 61 33 fc c6 05 76 f1 22 09 01 48 c7 c7 a0 8b 42 8b e8 e5 53 2d 05 eb a7 e8 de 61 33 fc <0f> 0b 4c 89 f7 48 c7 c6 80 8c 42 8b 4c 89 e2 e8 ba 93 31 05 eb 8c [ 109.153223][ T2325] RSP: 0018:ffffc90005187740 EFLAGS: 00010293 [ 109.154115][ T2325] RAX: ffffffff85540fa2 RBX: dffffc0000000000 RCX: ffff8880271f3c00 [ 109.155244][ T2325] RDX: 0000000000000000 RSI: 00000000fffffff5 RDI: 0000000000000000 [ 109.156398][ T2325] RBP: 0000000000000001 R08: ffffffff911eb637 R09: 1ffffffff223d6c6 [ 109.157755][ T2325] R10: dffffc0000000000 R11: fffffbfff223d6c7 R12: ffffffff8b99d120 [ 109.159192][ T2325] R13: 0000000000001770 R14: ffff888147a700a8 R15: 00000000fffffff5 [ 109.160435][ T2325] ? firmware_fallback_sysfs+0x722/0x950 [ 109.161412][ T2325] ? kmem_cache_free+0xf8/0x290 [ 109.162300][ T2325] _request_firmware+0xf29/0x1520 [ 109.163182][ T2325] ? request_firmware+0x50/0x50 [ 109.164003][ T2325] ? pvr2_hdw_initialize+0x349/0x3c30 [ 109.164872][ T2325] ? __lock_acquire+0x7d80/0x7d80 [ 109.165727][ T2325] request_firmware+0x36/0x50 [ 109.166504][ T2325] pvr2_locate_firmware+0xb3/0x500 [ 109.167383][ T2325] pvr2_upload_firmware1+0x1be/0x940 [ 109.168265][ T2325] ? pvr2_hdw_set_input_allowed+0x5a0/0x5a0 [ 109.169259][ T2325] ? verify_lock_unused+0x140/0x140 [ 109.170198][ T2325] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 109.171087][ T2325] ? verify_lock_unused+0x140/0x140 [ 109.171952][ T2325] pvr2_hdw_initialize+0x426/0x3c30 [ 109.172858][ T2325] ? pvr2_hdw_set_stream_type+0x420/0x420 [ 109.173664][ T2325] ? pvr2_context_thread_func+0x279/0xbd0 [ 109.174543][ T2325] ? __lock_acquire+0x7d80/0x7d80 [ 109.175340][ T2325] ? rcu_is_watching+0x15/0xb0 [ 109.176239][ T2325] ? trace_contention_end+0x39/0xe0 [ 109.177093][ T2325] ? __mutex_lock+0x30d/0xc80 [ 109.177896][ T2325] ? __lock_acquire+0x7d80/0x7d80 [ 109.178711][ T2325] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 109.179595][ T2325] ? mutex_unlock+0x10/0x10 [ 109.180320][ T2325] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 109.181256][ T2325] ? _raw_spin_unlock+0x40/0x40 [ 109.182071][ T2325] ? finish_wait+0xca/0x1d0 [ 109.182838][ T2325] pvr2_context_thread_func+0x4fc/0xbd0 [ 109.183653][ T2325] ? pvr2_context_global_init+0x60/0x60 [ 109.184432][ T2325] ? wake_bit_function+0x200/0x200 [ 109.185246][ T2325] ? _raw_spin_unlock+0x40/0x40 [ 109.186039][ T2325] ? _raw_spin_unlock+0x40/0x40 [ 109.186777][ T2325] ? __kthread_parkme+0x71/0x1c0 [ 109.187532][ T2325] ? __kthread_parkme+0x15b/0x1c0 [ 109.188299][ T2325] kthread+0x2fa/0x390 [ 109.188920][ T2325] ? pvr2_context_global_init+0x60/0x60 [ 109.189751][ T2325] ? kthread_blkcg+0xd0/0xd0 [ 109.190409][ T2325] ret_from_fork+0x48/0x80 [ 109.191079][ T2325] ? kthread_blkcg+0xd0/0xd0 [ 109.191797][ T2325] ret_from_fork_asm+0x11/0x20 [ 109.192577][ T2325] [ 109.193707][ T2325] Kernel Offset: disabled [ 109.194419][ T2325] Rebooting in 86400 seconds..