last executing test programs: 4.35223855s ago: executing program 0 (id=129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4}]}, 0x18}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$sock_proto_private(0xffffffffffffffff, 0x8b2b, &(0x7f0000000080)) 3.470328189s ago: executing program 0 (id=133): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280), &(0x7f0000001540)=""/145}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 3.459505123s ago: executing program 0 (id=134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 3.368770834s ago: executing program 0 (id=136): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000200)='V', 0x1) syz_usb_disconnect(r0) 1.965702614s ago: executing program 4 (id=162): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.773202031s ago: executing program 4 (id=163): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0xe20, 0x0, @empty}, 0x1c) 1.659960247s ago: executing program 0 (id=166): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000003c0)='mptcp_subflow_get_send\x00', r1}, 0x18) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x5ec0, @empty}, 0x1c) listen(r0, 0x9) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) syz_80211_inject_frame(&(0x7f0000000300), 0x0, 0x0) r3 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001500)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x14000801}, 0x40000) 1.659480923s ago: executing program 4 (id=167): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280), &(0x7f0000001540)=""/145}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 1.590542962s ago: executing program 4 (id=168): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev}, {0x0, 0x6558, 0x12, 0x0, @opaque="8c55309da635093188a8"}}}}}}, 0x38) 1.534467322s ago: executing program 2 (id=169): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000002340)='./file0\x00', 0x0, 0x0) 1.319738784s ago: executing program 4 (id=172): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) 958.757246ms ago: executing program 2 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000001900)={0x1c, r1, 0x1, 0x8, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) 870.540397ms ago: executing program 2 (id=177): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)='V', 0x1) syz_usb_disconnect(0xffffffffffffffff) 841.886358ms ago: executing program 3 (id=178): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0xe20, 0x0, @empty}, 0x1c) 792.443456ms ago: executing program 3 (id=179): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280), &(0x7f0000001540)=""/145}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 750.618595ms ago: executing program 3 (id=180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002140)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r1, @ANYBLOB="1000000000000000000011000000300001802c0004001400010002000000ac1414aa00000000000000001400020002000000ac14140b000000000000000004000380100004800900010073797a3000000000040001809800028034000380080002000500000008000100610500000800010000100000080002000700000008000100320d000008000100ffffffff080002000700000024000380080002000000000008000200ffffff7f0800010007000000080001001f00000008000200700d000008000200020000002400038008000200e7000000080002000500000008000200010000000800020000000000500004802c000780080003000000000008000400001000000800030001010000080003000100000008000300050000000900010073797a30000000001300010062726f6164636173742d6c696e6b0000980002803c000380080001002000000008000100ffffff7f0800010001000000080002007f640000080001009f00000008000200ff0700000800020008000000080001003d0700000400040004000400240003800800020003000000080002000900000008000100040000000800020004000000080002003f00000008000100018000001400038008000100f15100000800020000000000e4000580070001006962000008000100657468004400028008000200ffff000008000400d30b00000800040000000100080004000300000008000400000200000800030006000000080004000000000008000200010000008000028008000100160000000800040000000000080001001d0000002400028008000300ff030000080003004301000011e4010010000000080004000700000008000100657468002c0002800800040008000000080004003d1f00000800010007000000080001000e0000000800010016000000080001006574680007000100696200000800010065746800d4ac9015eb0a88c2aeb7b2afa45143c1a60ecbf6d8e3e23d1ad3227ad2254955fcd5f0d0e7bfceebbdd2818c6845c2f5db09b695df6ce3c607a7f028d4e879eb7eb90ef1be98e8504c5fa165ecc3c9bd7b99"], 0x2c0}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_unix(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x1080, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) 667.201487ms ago: executing program 3 (id=181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="000302"], 0x0, 0x0, 0x0}, 0x0) 406.36276ms ago: executing program 1 (id=182): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCSCLOCKID(r0, 0x40084504, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2000080) syz_open_dev$audion(0x0, 0x3, 0x24ef02) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x200) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000, 0xfffffffe}}]}]}}}]}, 0x68}}, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) 405.445659ms ago: executing program 4 (id=183): syz_mount_image$bcachefs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@errors_continue}]}, 0x0, 0x59ec, &(0x7f0000000200)="$eJzs3X+QHFW9KPDumdnd2d382ASQCLJZAiiCmg2/Cn+URJ+/CpAXC0sJLwoL2WA0CXlJEAgowQc+KMBCS0tB6xVaSD00UlTBVSIl8uMmXEUprl7qFlJXvOgf3kIuKYFcylL31u70mZ3pmd6enZ0NSfh8KtmePtPzPd8+faanz5nZnQgAAIDXhF3Xbt5z1mHv//kXRl++6kM/Xn911F+cKC+HDQaS5WWvVobsTT2lRRPLdL940xXf+8PQhe/92d19331l5+oj1/zmfQddeP+nT99xyzcfemnuvX9/Ni9u6E/HTa7Hz8dRVP7J7q99cedjh46XxVEUFeOBbVG0IF740II4FWL4L1EUra7mWX/nPS+fuGZ8efUNPXXl81NB9PfXtnLSz7buufT46LfvWXnNLxff9YOu7c9tm9wkLtf0pyiad37t47uiKOpN/o8LvW1ReHCyXBFFUV/N407NyeuoFvNfmrF+eLLsTpb9OXH6k+fPktT2hdR26fWgK7Xsy6lvprLyaHe7PHNS6+mT0Uxl5RnKFyTLHyXL4/JD1qVYDP/jqBBHpep96+LJPjLu72NjY5UHxxPHslwNVmgI3lW/HqfWC6n1YnW9p7JfE/UmHa0Yx9X9rc2nkCoPp+NSUn5k7bm6UfnsjDteHzZInqivhPUofaOiv+FGdb8mhLx2Z+eyVxRqzkHNyqsHPjkY/UlZf7yw4TFjTYT7dq688Zjiqod3DWTkEd8dJ/HjtuJv/cWCOZ/8/vWXLMqKf34hiV9oK/4zZzz+wrnXf+fWzPg3h/jFtuKf8EDf82c8cu2SzPbZHdqn1Fb8kWcfvWnxwRdsz8z/thC/3Fb85Tse75m754EHM/MfDu3T21b8p9/5gd/f+eR9z2XGr5xvbv3fbfbPVTs2fqlncM+xmfEfDO3T317/eXH7KU8NDv5xKCv+EyH+3Lbi37HtlnfcPv+G0zOP74rQ/gNtxT/z6PuvmbPnviOyzp3xbZmvnJ16SQU4oB2UXGNdl6y3O86cqZrxwjeGSpXX1DnJ/7mdrChlvJ55sxgfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNemQ47/pw/++8cGni8l6z3JjacLlWUo746iuDeKos1bRjZtWbvhoqFPX3zJpg0j64ZGtgyNbtiy6fKhk94ytGl047qRy8fvHX7riZXHLYziyjI+oqHusbGxscJAfVmo738cvf23x5z6H3+KouFDfj1Yysx/6S3rbz+4yc+UePnYaesvOevXJ3872a+BJK+BjLyijLz+85y/3v6V3X84NoqGXzdVXo8+/e6f1iU0UTAZJ1HoiSoJ9cR9TfOoZp3kE9qrtGbtutHh/PYtZuzH/7riub+suezLf620bzlzP1ps397lY+sKX1955t++fmWlYF897nntHfYi5Bfar5y097xkv+Zl7FcpY7+u/eWDT/7ksOtf2hYNl15c3Fh33n51JR2gK359+iFNGynU0BcvqCsvJ3mGIx7yXbpl/calmy/f+ta160cuGr1odMPbl5207JThk085eenEni/t8P6H+t84mdaU+793+tP8z277UfjZWn/KyyuvPcbzatIeTfOa+vnXd/YXv/r2Wx45q1KQ18/D1tXzSbLsGz/Oy6Ka/tbYVs32q6Yd/jZ++kxvH0XRULN2eOGl06ND/3XtNXnnodojU/szJV4+9tiSP3/71G8tetdEI+yd83xtQm2e56tZT+Yz0V7l5Hjk9bNXpX0nmriY7Fd/07yWPfZI1427/vS5an7d3dFlI1u2bFpW+TknyXROfHjTvNKlYb8WT/wsRkmzRNVu2qS/juuKKvlNnD/HeqL05ulW7U/u648XNt2vtHDfzpU3HlNc9fCurJaO767U2BvNrSzjN2RsuS71wGI14Wb176/9Y/CD37r3Y/f+8KSG/nFC5WfefsUZ+3XXk3d89btf/r8/7Nx+ffDdjw/8+d8+dUylYH85r1SzTvKJa88rJ0RR3vNvcdR8PzKff4Xm+1P3/KsRZ9QzuX3zeEOp9f6o2Nbz9YQH+p4/45Frl2Q+X7tafb5eWbdWzHm+1vSfH3Y3yXdv9Z/Zfn7FUdbzq66jxMvHfnbdQdseumrFYZWCvH5d3bpZvz6xhfFHxn799NynBi8e+j//0rnzxvfecs95vxlZ/vlKQcvnjaH+urw6fdzLSfuWM9q3mnUYd9a279suvHjd6kr5vnv9myxzxj/hVLL58q2fGVm3bnTT5tb2q9XX01BPupXbfT0NZ7eFOftVaNivmd4IZ6nGu1ppr/rnW2/1Vvr5FvJf3XZ71T/f+qO4rdeFrb9YMOeT37/+koGGRyUVnV9I4hemFT9OXs+eOePxF869/ju3Zsa/OcQvtZX/yLOP3rT44Au2Z8a/LU7il9uKv3zH4z1z9zzwYGb84ZB/b1vxn37nB35/55P3PZcZPwrx+9uK/8yL2095anDwj5nxn4iTesavkaLonpdPXFNZj6OumgmL8Ty66vKK0utxar2QWi/Wrhcqc63VCopJh6mWh+2S8iNrJ0+a+HhGebgKKy+qLF8J61H6xtTlr55tTUsL4dzf3bw87zoVAOBAF97/D9eg4f3/0eRCKXumASbNdBy2KCNuGIdNzufUX9gvSuKHx4d5wMG3RcPjy6uHKhf6053nDM+H9DxnqOfYo+pjZM9PTD3PmTf/viS1HvKqzJeXasahicZxTSlqYf69sZ6p599Tu58/Pz50XUNaQzXzVunj15XMmDX5vEM639J4hKz+kZ4XC5/nGJwXrZior8X+kf4cTTgO6c/RhHoOS5042/0czUz7R0h7iv4xkXL++xuNxy+aon0nj1/zaOnjN43jXR7ffrbfn93X5g3Dfa3PG87S+2G7Q/t0Zl4y3R0PlHnJfX3eMJSH/Si1OJ/4sYzyTs0nhtNFyGv3FLnsDYWaa49m5eYTgf1VGP+H14jx8f/4Bfh/pbbLuw5NXzWGeJmfEyo2zydv3NH4Ob2+tl7HV+3Y+KWewT3HZl7nPNjq53421q315XzuJ68dj0mt57ZjxgRN3ngvXU9eu6c/l9EfzW2r3e/Ydss7bp9/w+mVdm980YxXVMry2/2rNbfv+nz1SiKj3V/j44XB92TF38/GCw3xD5DxwmzPn71q45Hkg0+zNR75aEb5dMcjfQ03qvs1Yb8bj3Tt3bwAgP1HGP9X3z9Lxv+/S22XN249LrUe4mWOWzOuT7LGrR9Olpeltu9PfqNiutfNZx59/zVz9tx3ROa45bZWx6H/v25tIGf8P9Nxc+Y4YkVnPi+eOY6ojrNmNk7MzL86TpzZOD0zfnWcPrP33TLbpzqOntk8QGb86jzAvjnOfVd/k3FuzXN8cpw7u/N1B+w4Ovn12dkaR5+dUT7dcXR/w43qfk0wjgYAeHWF8X+4jAvj/0dS2830uj1z3NGh6/b03wOpxn9ilseVv/ufSfxpjPu6ozbGfS2PW3vHi6rt0/K4dbbH9bM9L7Fvjotbf/93tueFGubJiq3Eb3WezLg4WY/SNyoaxsX/r/5+42IAAPaGMP4Pf5Ete/w/s/FJ5vitOj5pa3w+dlVl2cL7vrP9vuxsv69sfN40/l4bn+/v81+z+zkZ4/9kPUrfqPC+OAAA+4Iw/g+/9hj+/t8/Juvpv1s/+5/PNk5vGt84/TUyTp/teTbzAOYB8pkHAAA4sHRNjJQaf8/+E8ky/Xv2Wb+Xf27G9q0qJd8Gd8GWTaOj512ycfXIltHzNly8enTzeZduWrtly+iGynYzHTdmjluScWNXVErao/l2ybitGmZ+8vcQ5mf8PYT0OC+EPXziRuPfQ0hX25vzdwQmj9+U+VZlHb/CFNs36x9Zxzsr/scztg+qx//CT51w3prN563dsHbL2pF1a7eO1m83Pmrtm8b37YZmqfvezLk535uZ+tGgMP3v/W2aR973dzbkUWjIoytpj6zvZ49TeSxIMlmQ9f0HGXn//J+/8tmjx/56ZxQNH1J8w4zaL14+9g/njH54y65fbxzPvzBl/tUtk7zyvq80vX3Yn9K6izdvOX7NxZdsSH+jZHvCfEahuj5L8xnJ07/Y4vzEqozy6c5PFBtu7Jtanp8AAKBOeP8/XM+G9w+/HNf/hfbWx+kze/+4fOVpTfMM7x/njdPT30uWN05Pbx/2t9VxenmG4/R0/Xnj9GbbNxunZ427s+J/NGP76Wq9n8zscx6Z8znnt9ZP0t9nkNdP0ttPq5+M3z3DfpKuP6+fNNu+WT/JOu5Z8T+SsX2W1vvDzD6Xk9kfbm6tP7w5tZ7XH9LbT/e8UZhhf0jXn9cfmm3frD9kHd+s+Gcl8x2dmf8d7xgT/WL0vEsv3vSZmu1m+/vyZp7f7H7/R7vq8++dIv/Z/dxXZ/Kfqv1n93Nls5//zD5Xlpn/EzObCWs9/1Y/l1gpCfe1+v0u7dpr87XJh83yPn+WN4+7MqN8uvO43Q039k3mceHVE8b/4e2eMP6/IVl2+m2glq6TSlHb10mz/73KvsesafwOfY9Z3nXMa+L1vMfrOQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCBrqe0aGK569rNe8467P0//8Loy1d96Mfrr37TFd/7w9CF7/3Z3X3ffWXn6iPX/OZ9B114/6dP33HLNx96ae69f382N/BAZXFcslqOovj5OIrKP9n9tS/ufOzQ8bI4iqJiPLAtihbECx9aEKciDP8liqLV1Tzr77zn5RPXjC+vvqGnrnx+Kkh6v6L+YsinLs/ostw9Yj9UTvrZ1j2XHh/99j0rr/nl4rt+0LX9uW2Tm8Tlmv4URfPOr318VxRFvcn/caG3LQoPTpYroijqq3ncqTl5HdVi/ksz1g9Plt3Jsj8nTrh/SWq9kNouvR50pZZ9OfXNVFYe7W6XZ05qPX0ymqmsPEP5gmT5o2R53DTjF8P/OCrEUama/rp4so9ENcctjuKJY1murheqxzZK9j+1HqfWC6n1YldqvybqTTpaMY7ry8N2qfJwOi4l5UfWnqubODuj/PXJspw8UV8J61H6RkV/w43qfk0Iee2eIpeoZ6o7O6OQUU0orx745GD0J2X98cKGx4w1Ee7bufLG7uKqh3cNZOQR3x0n8eO24m/9xYI5n/z+9Zcsyop/fiGJX2gr/jNnPP7Cudd/59bM+DeH+MW24p/wQN/zZzxy7ZLM9tkd2qfUVvyRZx+9afHBF2zPzP+2EL/cVvzlOx7vmbvngQcz8x8O7dPbEH+shfhPv/MDv7/zyfuey4wfhfh9beW/asfGL/UM7jk2M/6DoX362+s/L24/5anBwT8OZcV/IsSf21b8O7bd8o7b599weubxXRHaZ6Ct+Gceff81c/bcd0TWuTO+rVOvnACvTQcl11jXJeu148wobn2cOVM144VvDJUq13xzkv9zO1lRyng982YxPgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB6ZfXXnSJ8457SMrS3EUxRnbjDUR7it2L18+1Ea9I88+etPigy/YXlu2qI04AAAAQL4wDi9US8rRoujSuDc6vOn2YY7g8LAW15en5xB6J7fsSJxCh+IUOxSn1KE4XTOOM39i2d2hfHo6FKecE6cctRand8o4hZbz6ZtunK7mcfqnF6c7K585HdqvuR2KM69DceZ3KM7AlHFa74cLOhRnYYfiHNShOAd3KM4hHYrzug7Emd8dRYd2KJ/0nPJ0++HcZMvDsuJM3ChGUVyeMk4prn/FSc+nh3qOyK1n6nz7Qz1x83n7UE96zn669fS2WM9RqccVpllPucV63jjDeuIW63nzDOsp5NQT+u1l6fxCPWGtxf5/eYfibO1QnCs6FOfKDsX5XIfifL5Dca6aYRyAVoXx/+R4byDqKb0r6kvOOOlZgDDeXTzxs/H1LuuEFOK9IVXenRcvPVBPxVs83fzSEwipeEtS5V118UrV8cgU8cq18Y5J3Zm7v+kJhVR+x6Uq7MmLl55YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBZ9KsrT/rEOad9ZGUUR+P/mhprItxX7F6+fKiNeneuvPGY4qqHd9WW9ZTaCAQAAADkCuPwrmpJOeopLYt64u667crJPEA5WS8OVJaD86IV48t4qDCx3hcvmPJxpeRxS7es37h08+Vb37p2/chFoxeNbnj7spOWnTJ88iknL12zdt3ocOVnFPXkxIuiaGL6YfPlWz8zsm7d6KbNlcJ0/ouSxy1K1uPkcYNvi4bHl1cn+S/Mqa/QUN/s3cg/egAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDf7NpfiFxXHQfwc2dmZ6bbxqz03zQ0myF/StSiSdxKqqV7QbDQJiFLQWarawk2weKmCW0SYh3bgG1NUISWQIjkJRJLW4s+9I8tYv8QiNRowI1B2qJ90Ael1Upa8iApI9mdOzszmZvZDE02iZ/Pw70z5/zO+d2zLYHv3QUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOL8mqkNjleGR0f4ohCilptZBMpfNx3G5h75ff3nzjwuDJ5Y2jxVyPWwEAAAAdJXk8L7GSDEUctmQDddNflsYmibCdO4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/0xUh8YqwyOjl0chRCk1tQ6SuWw+jss99H3ng2e/8Obg4D+S7309PT0AAAAwE0kOzzRGiqEUFoW+6LqWuuTdQKZtfXtdMj9/hnXt7w7S6hbNsO6GGdZ9qkvdmvp9ewAAAICLX5L/c42RgVDIzUnN/91yfVK3oK0uW7+XOw0CAAAA51AmhHr+LzTGSuGppoqZ5v2FbXVJtG/+vf0vOzxBsn5Jyvpuv89fXb/7PT0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXDwmqkNjleGR0WwUQpRSU+sgmcvm47jcQ98Vr/T/646Djy5sHivketgIAAAA6CrJ4dPRuxgKuf7QFy6fzP2Dt+17/qvPvzgUQpiK+fl82L5uy5b7V0xdk7rlhw/2/ejQe987rW751HXWDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxsJqpDY5XhkdHLohCilJpaB8lcNh/H5R76vv2lr/zt6WMvvds8VuphHwAAAKC7JIdPZ/9iKIV8yIdrJr81Z/1TMm3r094ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJeOB77z4LfXjY+vv/98f8jNRlMfzuuHfP1/snPRor++94Vx0ovyQ18IIb1mFv9RAgAAzokFIQq1s3Tt2tl+agAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EIwUR0aqwyPjBajEKKUmloHyVw2H8flHvrGLx8pzDnxymvNY6Ue9gEAAAC6S3L4dPYvhlLoC33h6slvnd4JTOb/gfP4kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAFZaI6NFYZHhmdE4UQpdTUOkjmsvk4LvfQ98kde794YO4Pb28eK+R62AgAAADoKsnh+cZIMRRynw6FcH39+3jrgihbv3d+LzC9bnPLsv4Zr6u2rMvOeN3OtpPl6qeZWldM9huYujfWlU9fV25aVwqN9uWWdWF3y6o5XZ4zAAAAwCxK8n+hMTIQCrlCU859qqV+QM4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFJMVIfGKsMjo1EUQpRSU+sgmcvm47jcQ98Hf//JK77x811bm8dKPewDAAAAdJfk8CT7Z+v3T4T5k7k/DLTWJ3X/rpw88MR//r40hGXXHB3Mpe7/27dvfbX9EkKmtSgTwtx6vyil3+/++MS2xbWTT4ew7Ors9Wfbr3XLuPZCZf3qLYeObk7dBgAAAC4pSf7va4wMhELuvtT8nyTvs8r/c7ft+NVV9Ws9kbetyAzU+2VS+n158bN/XbLyn++dyv9n6ve5vRsPXNXScGqkTRTXhjduXXP0pv2Z5NRT/bNt/ZOfy9e+++5/N2x//ORU/2Io1sfn5Tr1P/3a5rK4Np7ZM7rqoz3V1v65lPM/+ofXjv1m3q4PT/X/YEF/o/8NZzj/mfv33/nY7pv3HlzT2j+EUO7U//0Pbw/X/vneR9rP39+28dxtO+aEEJp+/lPXNlFcO7zw+P6V+0q3tPaP2vonP/9fHHty988e/8GLSf/kb0WWLjqtf1vnpH+mrf8bO6/c8frDa+e19s+knP/Vu94c3FT+/p/az3/P6edP6d9+/mdufO7ut9bFD7VPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXFomqkNjleGR0UwUQpRSU+sgmcvm47jcQ9937jjy/l27fvqT5rFSD/sAAAAA3SU5fDr7F0Mp5EM+9E/m/hcq61dvOXR0cxiYmo3q99z4pge2fGbDpq333TNLTw4AAADMVJL/c42RgVDILQ599fw/vHHrmqM37c8k+T+T5P8N946vXxYadW/svHLH6w+vndd4TxDC5J8FFE/VfX667rZbjwwc/8u3lnSsWzFdd3jh8f0r95VuSepCc93y0Hg/8cyNz9391rr4ocbzNdd99pubxuuvJ5J9++98bPfNew+uaZyjfu+v75vUjWf2jK76aE81qcvW78X6uVvlP67/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUZuoDo1VhkdGQzaEKKWm1kEyl83HcbmHvqsW//qRK068NL95rJDrYSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYb9+QuOo4jiAv9nNms1u0iatYFRM06oo9WBRENGLioq0IgVPkSLV1h5EQRBR6sFUWrFUxYtg8VJEBTWWgoKNxdIqqfivePGggoXqQSjFgHYpHqxkd952d5Jp7KSK2M8Hwtv3ZuY7v5k387ILAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/319pz/29gw320PbHm/cc8kdXzz70Iln7vro0S1XPf3Oz6Mbbvt8T+3Nk1Mbl2/6/valG/Y9vHpy52sHfx/44M+jXXmnwgWzzvFUq1mZdqshJMeTEKofT7/y3NSXF82MJSGEcjI4HsJQsuTgUJJJWPVHCGFju87uje+fuH7TTLtlR2/X+OJMSPa6Qr0c62kZ7K6X/5dq+pxtbjx5Tfjx1rGtXy/b/V5l4tj46V2SasfzFMKi9Z3HV9LXJb4y8Wkbjgen7doQQq3juBvnqevyv1n/tTn9S9M2vnj1eXLi9hWZfimzX7YfVTJtbZ7zLVReHUX3m09/pp9djBYqr844PpS2H6btyrPML8e/JJSS0NMu/5EkdC3Ocd6SkDTnstrul9pzG9Lrz/STTL+U6Zcrmetqnjd90MpJ0j0e98uMx+W4Jx1f3rlWz+HenPGL07aavqgnYz9kP7TUZ31oX1dTrGv6DLX8G0oda9Bc4+2JTyejLx2rJ0tmHXNqDnHb1NgLV5bXfXJoMKeOZE/rTPXmk3T2+Zu/Guq//93tTwzn5a8vpfmlM+dXwpz5R9Yc/vW+7a/vHsvLfznmlwvVf93+2vE1n25bkXt/puP96SmU/8DRz15cduGDE7n3Z1fMrxbKv2XycO9AY/+B3PpXxfvTVyj/h5vv/Ontb/cey80PMb9WKH/d5GMv9Y40rs7NPxDvT71Q/pHfJm74bmTkl9G8/G9i/kCh/LfGd970xuIdq3Pnd228P4OF8u++Yt/W/sbey/LWzmTXufrPCXB+Wpp+ZXw+7Rf9nblQHb8XXh3taX3n60//Bs7liTJmzrPoH8wHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAvduCABAAAAEDQ/9ftCBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqQAAAP//3mYeDg==") 365.313866ms ago: executing program 1 (id=184): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 321.618791ms ago: executing program 1 (id=185): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000200)='V', 0x1) 273.899419ms ago: executing program 1 (id=186): r0 = eventfd2(0x2, 0x80800) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) 210.469139ms ago: executing program 0 (id=187): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101}, 0x20}}, 0x0) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) 200.472912ms ago: executing program 1 (id=188): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000240)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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") 173.685746ms ago: executing program 2 (id=189): socket$inet6(0xa, 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0xe20, 0x0, @empty}, 0x1c) 90.878676ms ago: executing program 3 (id=190): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280), &(0x7f0000001540)=""/145}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) 89.724781ms ago: executing program 2 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002140)=ANY=[@ANYBLOB="c0020000", @ANYRES16=r1, @ANYBLOB="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"], 0x2c0}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_open_dev$tty20(0xc, 0x4, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_unix(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x1080, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000c80)={'syz0\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [], [0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) 78.718174ms ago: executing program 3 (id=192): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 54.458619ms ago: executing program 1 (id=193): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents64(r3, &(0x7f0000002f40)=""/4098, 0x1002) 0s ago: executing program 2 (id=194): syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x10, &(0x7f0000000480)=ANY=[@ANYRES32=0x0], 0xff, 0x5975, &(0x7f000000bfc0)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 30.701621][ T6403] cgroup: Unknown subsys name 'net' [ 30.949170][ T6403] cgroup: Unknown subsys name 'cpuset' [ 30.952778][ T6403] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 31.238539][ T6403] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 32.654562][ T6419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 32.657551][ T6419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 32.659428][ T6419] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 32.663382][ T6423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 32.665535][ T6419] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 32.674273][ T6423] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 32.679270][ T6423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 32.684765][ T6423] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 32.686608][ T6423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 32.689715][ T6423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 32.693873][ T5987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 32.694267][ T6426] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 32.695906][ T5987] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 32.701941][ T6426] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 32.703816][ T6426] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 32.705904][ T6426] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 32.707676][ T5987] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 32.708138][ T6432] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 32.709798][ T5987] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 32.711109][ T6432] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 32.712923][ T5987] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 32.714504][ T6432] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 32.716076][ T5987] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 32.718287][ T6432] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 32.719410][ T5987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 32.722018][ T5987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 32.723839][ T5987] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 32.724458][ T6432] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 32.725842][ T5987] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 32.729397][ T6419] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 32.997679][ T6427] chnl_net:caif_netlink_parms(): no params data found [ 33.019545][ T6420] chnl_net:caif_netlink_parms(): no params data found [ 33.028634][ T6417] chnl_net:caif_netlink_parms(): no params data found [ 33.082860][ T6430] chnl_net:caif_netlink_parms(): no params data found [ 33.086489][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.088188][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.089902][ T6427] bridge_slave_0: entered allmulticast mode [ 33.091766][ T6427] bridge_slave_0: entered promiscuous mode [ 33.109794][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.111531][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.113102][ T6427] bridge_slave_1: entered allmulticast mode [ 33.115192][ T6427] bridge_slave_1: entered promiscuous mode [ 33.145243][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.177315][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.191479][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.193105][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.194628][ T6417] bridge_slave_0: entered allmulticast mode [ 33.196345][ T6417] bridge_slave_0: entered promiscuous mode [ 33.200487][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.201926][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.203578][ T6417] bridge_slave_1: entered allmulticast mode [ 33.205625][ T6417] bridge_slave_1: entered promiscuous mode [ 33.213257][ T6430] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.214869][ T6430] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.216361][ T6430] bridge_slave_0: entered allmulticast mode [ 33.221413][ T6430] bridge_slave_0: entered promiscuous mode [ 33.232447][ T6420] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.233971][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.235576][ T6420] bridge_slave_0: entered allmulticast mode [ 33.238001][ T6420] bridge_slave_0: entered promiscuous mode [ 33.259580][ T6430] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.261207][ T6430] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.262743][ T6430] bridge_slave_1: entered allmulticast mode [ 33.264575][ T6430] bridge_slave_1: entered promiscuous mode [ 33.271601][ T6427] team0: Port device team_slave_0 added [ 33.273137][ T6420] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.274606][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.276176][ T6420] bridge_slave_1: entered allmulticast mode [ 33.278409][ T6420] bridge_slave_1: entered promiscuous mode [ 33.301755][ T6427] team0: Port device team_slave_1 added [ 33.313962][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.317538][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.330277][ T6430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.353136][ T6430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.361954][ T6420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.364184][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.365674][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.371219][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.380738][ T6417] team0: Port device team_slave_0 added [ 33.387674][ T6420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.389639][ T6424] chnl_net:caif_netlink_parms(): no params data found [ 33.397654][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.399111][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.404502][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.408716][ T6417] team0: Port device team_slave_1 added [ 33.433906][ T6430] team0: Port device team_slave_0 added [ 33.439498][ T6420] team0: Port device team_slave_0 added [ 33.441951][ T6420] team0: Port device team_slave_1 added [ 33.444191][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.445591][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.451541][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.456136][ T6430] team0: Port device team_slave_1 added [ 33.478410][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.479894][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.485109][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.525988][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.527682][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.532761][ T6420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.538579][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.540108][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.545361][ T6430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.557405][ T6420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.558883][ T6420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.564190][ T6420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.571534][ T6430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.573012][ T6430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.582273][ T6430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.648946][ T6427] hsr_slave_0: entered promiscuous mode [ 33.687221][ T6427] hsr_slave_1: entered promiscuous mode [ 33.784960][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.786369][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.788445][ T6424] bridge_slave_0: entered allmulticast mode [ 33.790916][ T6424] bridge_slave_0: entered promiscuous mode [ 33.828734][ T6417] hsr_slave_0: entered promiscuous mode [ 33.867300][ T6417] hsr_slave_1: entered promiscuous mode [ 33.917250][ T6417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.918980][ T6417] Cannot create hsr debugfs directory [ 33.920851][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.922351][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.923955][ T6424] bridge_slave_1: entered allmulticast mode [ 33.926558][ T6424] bridge_slave_1: entered promiscuous mode [ 34.008610][ T6420] hsr_slave_0: entered promiscuous mode [ 34.047196][ T6420] hsr_slave_1: entered promiscuous mode [ 34.087072][ T6420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.088681][ T6420] Cannot create hsr debugfs directory [ 34.128557][ T6430] hsr_slave_0: entered promiscuous mode [ 34.157838][ T6430] hsr_slave_1: entered promiscuous mode [ 34.197023][ T6430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.198620][ T6430] Cannot create hsr debugfs directory [ 34.201961][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.242937][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.294974][ T6424] team0: Port device team_slave_0 added [ 34.314912][ T6424] team0: Port device team_slave_1 added [ 34.353268][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.357123][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.362416][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.380049][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.381536][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.386748][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.468692][ T6424] hsr_slave_0: entered promiscuous mode [ 34.497153][ T6424] hsr_slave_1: entered promiscuous mode [ 34.537022][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.538770][ T6424] Cannot create hsr debugfs directory [ 34.540032][ T6427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.543870][ T6427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.548236][ T6427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.560550][ T6427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.594095][ T6430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.606129][ T6430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.615462][ T6430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.627697][ T6430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.655387][ T6417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.678156][ T6417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.695978][ T6417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.700493][ T6417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.717572][ T6423] Bluetooth: hci0: command tx timeout [ 34.720180][ T6420] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.735636][ T6420] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.739158][ T6420] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.744623][ T6420] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.768728][ T6427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.782894][ T6424] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.794639][ T6427] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.797187][ T6423] Bluetooth: hci2: command tx timeout [ 34.797443][ T5987] Bluetooth: hci3: command tx timeout [ 34.798401][ T6432] Bluetooth: hci4: command tx timeout [ 34.799593][ T6419] Bluetooth: hci1: command tx timeout [ 34.803311][ T6424] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.818905][ T6430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.823261][ T6424] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.845882][ T6427] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.853711][ T6427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.861704][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.863230][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.866070][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.867603][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.876202][ T6424] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.905202][ T6430] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.924290][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.927224][ T4574] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.928631][ T4574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.930993][ T4574] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.932488][ T4574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.961549][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.968234][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.969730][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.972223][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.973583][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.005371][ T6430] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.032485][ T6420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.043354][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.051551][ T6427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.071211][ T6420] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.077920][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.079428][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.081698][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.083233][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.103923][ T6424] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.110477][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.111962][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.124922][ T6430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.153511][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.155059][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.165307][ T6427] veth0_vlan: entered promiscuous mode [ 35.179156][ T6427] veth1_vlan: entered promiscuous mode [ 35.224121][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.231121][ T6427] veth0_macvtap: entered promiscuous mode [ 35.260949][ T6427] veth1_macvtap: entered promiscuous mode [ 35.264846][ T6430] veth0_vlan: entered promiscuous mode [ 35.274012][ T6430] veth1_vlan: entered promiscuous mode [ 35.333182][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.336358][ T6417] veth0_vlan: entered promiscuous mode [ 35.346151][ T6427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.351761][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.361745][ T6417] veth1_vlan: entered promiscuous mode [ 35.372142][ T6420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.374744][ T6427] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.377052][ T6427] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.378929][ T6427] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.380843][ T6427] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.411090][ T6430] veth0_macvtap: entered promiscuous mode [ 35.442553][ T6430] veth1_macvtap: entered promiscuous mode [ 35.466016][ T6417] veth0_macvtap: entered promiscuous mode [ 35.470628][ T6417] veth1_macvtap: entered promiscuous mode [ 35.483011][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.485319][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.488743][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.510096][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.512306][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.514311][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.516567][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.520477][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.523666][ T6417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.525884][ T6417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.529318][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.531434][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.533473][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.535539][ T6430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.538546][ T6430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.541074][ T6430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.544159][ T6430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.546066][ T6430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.548496][ T6430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.550227][ T6430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.555398][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.559524][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.569103][ T6417] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.570874][ T6417] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.572653][ T6417] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.574551][ T6417] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.592441][ T6420] veth0_vlan: entered promiscuous mode [ 35.625933][ T6420] veth1_vlan: entered promiscuous mode [ 35.644998][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.646622][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.694042][ T4577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.695727][ T4577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.706600][ T6424] veth0_vlan: entered promiscuous mode [ 35.712633][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.714296][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.722679][ T6420] veth0_macvtap: entered promiscuous mode [ 35.732998][ T4662] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.733477][ T6427] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.734743][ T4662] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.742051][ T6420] veth1_macvtap: entered promiscuous mode [ 35.764577][ T6424] veth1_vlan: entered promiscuous mode [ 35.791209][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.793385][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.795340][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.802252][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.804413][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.806409][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.810068][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.812353][ T4574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 35.814133][ T4574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 35.820925][ T6424] veth0_macvtap: entered promiscuous mode [ 35.823800][ T6424] veth1_macvtap: entered promiscuous mode [ 35.867702][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.869868][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.871841][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.874002][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.876012][ T6420] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.886605][ T6420] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.889823][ T6420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.896526][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.916970][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.921996][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.924043][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.926111][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.935535][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.946805][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 35.950725][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.956725][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.963787][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.965881][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.968685][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.971032][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.977104][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.979246][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.981389][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.997359][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 36.005709][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.009972][ T6424] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.011762][ T6424] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.013572][ T6424] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.015407][ T6424] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.019572][ T6420] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.021423][ T6420] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.023196][ T6420] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.024876][ T6420] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.106544][ T531] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.112141][ T531] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.165545][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.174168][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.187300][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.192701][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.201129][ T531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.202813][ T531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.326580][ T6514] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.347440][ T6514] netlink: 'syz.4.5': attribute type 12 has an invalid length. [ 36.349150][ T6514] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 36.354768][ T6514] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.356581][ T6514] netlink: 'syz.4.5': attribute type 1 has an invalid length. [ 36.366985][ T6514] netlink: 'syz.4.5': attribute type 2 has an invalid length. [ 36.368712][ T6514] netlink: 39 bytes leftover after parsing attributes in process `syz.4.5'. [ 36.422449][ T6518] gretap1: entered allmulticast mode [ 36.527528][ T6522] netlink: 'syz.4.10': attribute type 10 has an invalid length. [ 36.548550][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.551128][ T6522] team0: Port device batadv0 added [ 36.575394][ T6524] binder: 6523:6524 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.580625][ T6524] binder: 6523:6524 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 36.587105][ T6524] binder: 6523:6524 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 36.665575][ T6528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.687082][ T6528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.764630][ T6501] loop3: detected capacity change from 0 to 65536 [ 36.805537][ T5987] Bluetooth: hci0: command tx timeout [ 36.840585][ T6501] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 36.862210][ T6501] XFS (loop3): Ending clean mount [ 36.865644][ T6501] XFS (loop3): Quotacheck needed: Please wait. [ 36.867461][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.871440][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.878405][ T5987] Bluetooth: hci2: command tx timeout [ 36.879650][ T5987] Bluetooth: hci4: command tx timeout [ 36.880777][ T5987] Bluetooth: hci3: command tx timeout [ 36.881905][ T5987] Bluetooth: hci1: command tx timeout [ 36.893034][ T6473] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 36.897199][ T6473] XFS (loop3): Unmount and run xfs_repair [ 36.898704][ T6473] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 36.900320][ T6473] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 36.902143][ T6473] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 36.904017][ T6473] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 36.905689][ T6473] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 36.907676][ T6473] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 36.909420][ T6473] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 36.911322][ T6473] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 36.913300][ T6473] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 36.916379][ T11] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x6 len 2 error 74 [ 36.920986][ T6501] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 36.946135][ T6427] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 36.975267][ T6427] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 37.002157][ T6548] netlink: 'syz.0.20': attribute type 12 has an invalid length. [ 37.003787][ T6548] netlink: 'syz.0.20': attribute type 29 has an invalid length. [ 37.005357][ T6548] netlink: 148 bytes leftover after parsing attributes in process `syz.0.20'. [ 37.009344][ T6548] netlink: 'syz.0.20': attribute type 1 has an invalid length. [ 37.010919][ T6548] netlink: 'syz.0.20': attribute type 2 has an invalid length. [ 37.023160][ T6548] netlink: 39 bytes leftover after parsing attributes in process `syz.0.20'. [ 37.184315][ T6557] gretap1: entered allmulticast mode [ 37.229738][ T6559] binder: 6558:6559 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 37.231311][ T6559] binder: 6558:6559 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 37.232822][ T6559] binder: 6558:6559 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 37.510742][ T6574] netlink: 'syz.4.32': attribute type 12 has an invalid length. [ 37.512540][ T6574] netlink: 148 bytes leftover after parsing attributes in process `syz.4.32'. [ 37.514241][ T6574] netlink: 39 bytes leftover after parsing attributes in process `syz.4.32'. [ 37.745907][ T6591] gretap1: entered allmulticast mode [ 37.760462][ T6591] syz.4.37 uses obsolete (PF_INET,SOCK_PACKET) [ 37.855405][ T6596] binder: 6594:6596 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 37.859473][ T6596] binder: 6594:6596 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 37.861020][ T6596] binder: 6594:6596 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 37.930438][ T6600] loop1: detected capacity change from 0 to 128 [ 37.942159][ T6600] vfat: Unknown parameter 'ÿÿÿÿ' [ 38.361097][ T6572] loop0: detected capacity change from 0 to 65536 [ 38.442612][ T6572] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 38.471805][ T6572] XFS (loop0): Ending clean mount [ 38.473888][ T6572] XFS (loop0): Quotacheck needed: Please wait. [ 38.480377][ T6468] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 [ 38.480994][ T6646] loop4: detected capacity change from 0 to 128 [ 38.482705][ T6468] XFS (loop0): Unmount and run xfs_repair [ 38.482723][ T6468] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 38.482737][ T6468] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 38.482748][ T6468] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 38.484741][ T6646] vfat: Unknown parameter 'ÿÿÿÿ' [ 38.485352][ T6468] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 38.501216][ T6468] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 38.506907][ T6468] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 38.508721][ T6468] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 38.511052][ T6468] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 38.512907][ T6468] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 38.520909][ T4662] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x6 len 2 error 74 [ 38.527125][ T6572] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 38.729368][ T6430] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 38.732219][ T6430] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 38.957011][ T6419] Bluetooth: hci1: command tx timeout [ 38.957398][ T5987] Bluetooth: hci3: command tx timeout [ 38.958303][ T6419] Bluetooth: hci4: command tx timeout [ 39.069673][ T6667] loop2: detected capacity change from 0 to 32768 [ 39.085565][ T6667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.66 (6667) [ 39.104754][ T6667] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 39.107257][ T6667] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm [ 39.163524][ T6667] BTRFS info (device loop2): rebuilding free space tree [ 39.185579][ T6667] BTRFS info (device loop2): disabling free space tree [ 39.188795][ T6667] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 39.190852][ T6667] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 39.449943][ T6665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.498136][ T6667] btrfs: Deprecated parameter 'usebackuproot' [ 39.499886][ T6667] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 39.504325][ T6667] BTRFS info (device loop2 state M): resize thread pool 8 -> 32767 [ 39.512641][ T6667] workqueue: max_active 32767 requested for btrfs-endio is out of range, clamping between 1 and 2048 [ 39.515667][ T6667] workqueue: max_active 32767 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048 [ 39.519309][ T6665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.519454][ T6667] BTRFS info (device loop2 state M): setting nodatasum [ 39.522835][ T6667] BTRFS info (device loop2 state M): setting nodatasum [ 39.524491][ T6667] BTRFS info (device loop2 state M): turning on sync discard [ 39.526144][ T6667] BTRFS info (device loop2 state M): enabling disk space caching [ 39.528616][ T6667] BTRFS info (device loop2 state M): force clearing of disk cache [ 39.530461][ T6667] BTRFS info (device loop2 state M): trying to use backup root at mount time [ 39.532378][ T6667] BTRFS info (device loop2 state M): use no compression [ 39.553082][ T6665] bond0 (unregistering): Released all slaves [ 39.562260][ T6673] warning: `syz.1.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 39.583086][ T6420] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 39.602420][ T6419] Bluetooth: hci0: command tx timeout [ 39.684181][ T6698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 39.740532][ T6701] loop3: detected capacity change from 0 to 128 [ 39.749741][ T6701] vfat: Unknown parameter 'ÿÿÿÿ' [ 39.964163][ T6712] gretap1: entered allmulticast mode [ 40.047947][ T6717] loop0: detected capacity change from 0 to 2048 [ 40.065123][ T6717] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 40.076384][ T6717] UDF-fs: Scanning with blocksize 512 failed [ 40.078170][ T6419] Bluetooth: hci2: command tx timeout [ 40.132649][ T6717] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 40.241286][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.79'. [ 40.249484][ T6727] netlink: 16 bytes leftover after parsing attributes in process `syz.0.79'. [ 40.258714][ T6727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.79'. [ 40.962336][ T6726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.001542][ T6726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.022770][ T6737] loop0: detected capacity change from 0 to 128 [ 41.032543][ T6737] vfat: Unknown parameter 'ÿÿÿÿ' [ 41.038073][ T6419] Bluetooth: hci3: command tx timeout [ 41.038106][ T6423] Bluetooth: hci1: command tx timeout [ 41.039310][ T6419] Bluetooth: hci4: command tx timeout [ 41.043467][ T6726] bond0 (unregistering): Released all slaves [ 41.062299][ T6737] overlayfs: failed to resolve './file2': -2 [ 41.224383][ T6739] input: syz0 as /devices/virtual/input/input3 [ 41.501787][ T6754] loop1: detected capacity change from 0 to 512 [ 41.507437][ T6754] ======================================================= [ 41.507437][ T6754] WARNING: The mand mount option has been deprecated and [ 41.507437][ T6754] and is ignored by this kernel. Remove the mand [ 41.507437][ T6754] option from the mount to silence this warning. [ 41.507437][ T6754] ======================================================= [ 41.525238][ T6754] EXT4-fs (loop1): blocks per group (8192) and clusters per group (2304) inconsistent [ 42.437236][ T6239] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 42.473735][ T6765] loop1: detected capacity change from 0 to 128 [ 42.475731][ T6765] vfat: Unknown parameter 'ÿÿÿÿ' [ 42.502118][ T6765] overlayfs: failed to resolve './file2': -2 [ 42.516240][ T6755] loop3: detected capacity change from 0 to 32768 [ 42.537914][ T6755] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.94 (6755) [ 42.546197][ T6755] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 42.552280][ T6755] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm [ 42.554089][ T6755] BTRFS info (device loop3): using free-space-tree [ 42.588424][ T6239] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 42.592856][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.594972][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.597745][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.600001][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.602071][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.604228][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.606900][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.608784][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.611238][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.614212][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.616330][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.621370][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.624067][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.625781][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.636919][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.640103][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.642022][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.645306][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.652949][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.654970][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.657584][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.660361][ T6239] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 42.662337][ T6239] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 42.664652][ T6239] usb 1-1: config 0 interface 0 has no altsetting 0 [ 42.669103][ T6239] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 42.671291][ T6239] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 42.676211][ T6239] usb 1-1: Product: syz [ 42.677283][ T6239] usb 1-1: Manufacturer: syz [ 42.678471][ T6239] usb 1-1: SerialNumber: syz [ 42.683035][ T6239] usb 1-1: config 0 descriptor?? [ 42.697530][ T6239] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 42.900336][ T6239] usb 1-1: USB disconnect, device number 2 [ 42.904900][ T6239] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 43.095065][ T6790] loop1: detected capacity change from 0 to 32768 [ 43.105318][ T6427] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 43.134760][ T6790] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 43.196719][ T6790] XFS (loop1): Ending clean mount [ 43.520962][ T6810] input: syz0 as /devices/virtual/input/input4 [ 43.693863][ T6815] loop0: detected capacity change from 0 to 512 [ 43.715703][ T6815] EXT4-fs (loop0): blocks per group (8192) and clusters per group (2304) inconsistent [ 43.763559][ T6818] loop4: detected capacity change from 0 to 128 [ 43.765373][ T6818] vfat: Unknown parameter 'ÿÿÿÿ' [ 43.817578][ T6818] overlayfs: failed to resolve './file2': -2 [ 44.858515][ T6417] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 45.117014][ T3827] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.296919][ T3827] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 45.303907][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.307257][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.312537][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.323247][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.326346][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.329552][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.357809][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.359958][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.362063][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.370391][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.372286][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.374501][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.406469][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.408532][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.410951][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.413361][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.415318][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.415516][ T6825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 45.417600][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.422009][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.424068][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.426301][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.431947][ T3827] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 45.433960][ T3827] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 45.436357][ T3827] usb 1-1: config 0 interface 0 has no altsetting 0 [ 45.440595][ T3827] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 45.442423][ T3827] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 45.444234][ T3827] usb 1-1: Product: syz [ 45.445220][ T3827] usb 1-1: Manufacturer: syz [ 45.454575][ T3827] usb 1-1: SerialNumber: syz [ 45.459674][ T3827] usb 1-1: config 0 descriptor?? [ 45.468164][ T3827] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 45.481141][ T6825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 45.524984][ T6825] bond0 (unregistering): Released all slaves [ 45.595501][ T6851] loop1: detected capacity change from 0 to 128 [ 45.602560][ T6851] vfat: Unknown parameter 'ÿÿÿÿ' [ 45.682654][ T6854] loop4: detected capacity change from 0 to 512 [ 45.691183][ T25] usb 1-1: USB disconnect, device number 3 [ 45.694567][ T25] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 45.705458][ T6854] EXT4-fs (loop4): blocks per group (8192) and clusters per group (2304) inconsistent [ 45.876373][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.878866][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.773836][ T6863] loop1: detected capacity change from 0 to 32768 [ 46.780801][ T6863] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 46.832397][ T6863] XFS (loop1): Ending clean mount [ 46.855270][ T6417] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 46.971077][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.976751][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.191160][ T6857] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.193360][ T6857] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.195192][ T6857] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.198661][ T6857] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.463240][ T6868] __nla_validate_parse: 1 callbacks suppressed [ 47.463256][ T6868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.127'. [ 47.571623][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.131'. [ 47.573613][ T6895] netlink: 16 bytes leftover after parsing attributes in process `syz.2.131'. [ 47.576661][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.131'. [ 47.589776][ T6895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.131'. [ 47.727154][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.2.135'. [ 47.872132][ T6899] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 47.891925][ T6906] bridge0: port 3(syz_tun) entered blocking state [ 47.893710][ T6906] bridge0: port 3(syz_tun) entered disabled state [ 47.895626][ T6906] syz_tun: entered allmulticast mode [ 47.902897][ T6906] syz_tun: entered promiscuous mode [ 47.904610][ T6906] bridge0: port 3(syz_tun) entered blocking state [ 47.906182][ T6906] bridge0: port 3(syz_tun) entered forwarding state [ 47.991155][ T6915] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 47.997677][ T6468] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.032873][ T6917] bridge_slave_1: left allmulticast mode [ 48.034140][ T6917] bridge_slave_1: left promiscuous mode [ 48.035435][ T6917] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.125734][ T6925] 9pnet_fd: Insufficient options for proto=fd [ 48.170929][ T6468] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 48.189203][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.191162][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.193340][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.200575][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.202443][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.204647][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.207008][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.208890][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.213511][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.215799][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.221105][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.223325][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.225460][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.236310][ T6933] loop2: detected capacity change from 0 to 2048 [ 48.236845][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.240130][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.242584][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.244374][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.252069][ T6933] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.270364][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.302609][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.304607][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.307265][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.319142][ T6468] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 48.319167][ T6468] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 48.319186][ T6468] usb 1-1: config 0 interface 0 has no altsetting 0 [ 48.379384][ T6468] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 48.381446][ T6468] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 48.385063][ T6468] usb 1-1: Product: syz [ 48.385992][ T6468] usb 1-1: Manufacturer: syz [ 48.387421][ T6468] usb 1-1: SerialNumber: syz [ 48.393070][ T6935] input: syz0 as /devices/virtual/input/input5 [ 48.401568][ T6468] usb 1-1: config 0 descriptor?? [ 48.406522][ T6468] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 48.412776][ T6933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.473153][ T6945] netlink: 20 bytes leftover after parsing attributes in process `syz.3.153'. [ 48.516297][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.518359][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.533887][ T6420] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.613867][ T6468] usb 1-1: USB disconnect, device number 4 [ 48.616003][ T6468] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 48.756148][ T6955] 9pnet_fd: Insufficient options for proto=fd [ 48.800042][ T6957] validate_nla: 3 callbacks suppressed [ 48.800058][ T6957] netlink: 'syz.3.159': attribute type 33 has an invalid length. [ 48.803064][ T6957] netlink: 152 bytes leftover after parsing attributes in process `syz.3.159'. [ 49.353138][ T6953] loop2: detected capacity change from 0 to 131072 [ 49.367530][ T6953] F2FS-fs (loop2): Wrong CP boundary, start(512) end(198144) blocks(1024) [ 49.369546][ T6953] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 49.373347][ T6953] F2FS-fs (loop2): invalid crc value [ 49.386755][ T6975] input: syz0 as /devices/virtual/input/input6 [ 49.411553][ T6953] F2FS-fs (loop2): Found nat_bits in checkpoint [ 49.448870][ T6953] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 49.450655][ T6953] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 49.451480][ T6983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 49.560377][ T6990] netlink: 'syz.1.170': attribute type 33 has an invalid length. [ 49.565515][ T6990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.170'. [ 49.576378][ T6990] netlink: 'syz.1.170': attribute type 10 has an invalid length. [ 49.596735][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.602364][ T6990] team0: Port device batadv0 added [ 49.861726][ T7001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.865674][ T7001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.904882][ T6985] loop3: detected capacity change from 0 to 32768 [ 49.925298][ T6985] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 49.985760][ T6985] XFS (loop3): Ending clean mount [ 49.995928][ T6985] XFS (loop3): Quotacheck needed: Please wait. [ 50.035167][ T6985] XFS (loop3): Quotacheck: Done. [ 50.065191][ T7012] 9pnet_fd: Insufficient options for proto=fd [ 50.065521][ T6427] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 50.312605][ T7024] input: syz0 as /devices/virtual/input/input7 [ 50.386565][ T7026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.390835][ T7026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.874343][ T7040] loop1: detected capacity change from 0 to 2048 [ 50.876232][ T7040] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.922016][ T7030] loop4: detected capacity change from 0 to 32768 [ 50.935110][ T7040] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.974029][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.975924][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.993130][ T6417] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.057299][ T7030] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 51.068070][ T7030] invalid journal entry, version=1.7: mi_btree_bitmap type=btree_keys in superblock: k->u64s 0, fixing [ 51.070547][ T7030] invalid journal entry, version=1.7: mi_btree_bitmap type=btree_root in superblock: invalid btree root journal entry: wrong number of keys, fixing [ 51.092607][ T7030] bcachefs (loop4): recovering from clean shutdown, journal seq 4294967294 [ 51.094842][ T7030] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.13: inode_has_child_snapshots [ 51.094842][ T7030] running recovery passes: check_allocations,check_inodes [ 51.135362][ T7030] invalid btree root extents, fixing [ 51.136669][ T7030] bcachefs (loop4): will run btree node scan [ 51.143041][ T7030] bcachefs (loop4): flagging btree extents lost data [ 51.163633][ T7030] bcachefs (loop4): error validating btree node on loop4 at btree inodes level 0/0 [ 51.163654][ T7030] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0 [ 51.163665][ T7030] node offset 8/24 bset u64s 0: unknown checksum type 3, fixing [ 51.181063][ T7030] Unable to handle kernel paging request at virtual address dfff800000000004 [ 51.182856][ T7030] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 51.184558][ T7030] Mem abort info: [ 51.185267][ T7030] ESR = 0x0000000096000005 [ 51.189539][ T7030] EC = 0x25: DABT (current EL), IL = 32 bits [ 51.192108][ T7030] SET = 0, FnV = 0 [ 51.192921][ T7030] EA = 0, S1PTW = 0 [ 51.196090][ T7030] FSC = 0x05: level 1 translation fault [ 51.198923][ T7030] Data abort info: [ 51.201183][ T7030] ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [ 51.203607][ T7030] CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [ 51.206109][ T7030] GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [ 51.209895][ T7030] [dfff800000000004] address between user and kernel address ranges [ 51.214187][ T7030] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [ 51.215747][ T7030] Modules linked in: [ 51.216546][ T7030] CPU: 1 UID: 0 PID: 7030 Comm: syz.4.183 Not tainted 6.13.0-rc7-syzkaller-g1950a0af2d55 #0 [ 51.218739][ T7030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.220814][ T7030] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 51.222366][ T7030] pc : crypto_skcipher_encrypt+0x48/0x124 [ 51.223576][ T7030] lr : crypto_skcipher_encrypt+0x24/0x124 [ 51.224723][ T7030] sp : ffff8000a20558f0 [ 51.225560][ T7030] x29: ffff8000a20558f0 x28: ffff8000a20560e0 x27: ffff8000a20560e8 [ 51.227242][ T7030] x26: 0000000000000020 x25: ffff70001440ab3c x24: 0c11cc7a00001000 [ 51.228922][ T7030] x23: 0000000000000008 x22: ffff8000a20560e8 x21: dfff800000000000 [ 51.230621][ T7030] x20: 0000000000000008 x19: ffff8000a2055a20 x18: ffff8000a2055c60 [ 51.230910][ T7061] loop2: detected capacity change from 0 to 32768 [ 51.232344][ T7030] x17: 0000000000000000 x16: ffff80008b60aec8 x15: 0000000000000002 [ 51.235330][ T7030] x14: 1ffff0001440ab4a x13: 0000000000000000 x12: 0000000000000000 [ 51.237000][ T7030] x11: 0000000000080000 x10: 000000000007ffff x9 : ffff8000a79c4000 [ 51.238709][ T7030] x8 : 0000000000000004 x7 : 0000000000000000 x6 : 000000000000003f [ 51.240561][ T7030] x5 : 0000000000000040 x4 : 0000000000000000 x3 : 0000000000000010 [ 51.242379][ T7030] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000020 [ 51.244079][ T7030] Call trace: [ 51.244788][ T7030] crypto_skcipher_encrypt+0x48/0x124 (P) [ 51.245996][ T7030] do_encrypt+0x8d8/0xa80 [ 51.246805][ T7030] bch2_checksum+0x1c0/0x784 [ 51.247720][ T7030] bch2_btree_node_read_done+0xe10/0x4b78 [ 51.248821][ T7030] btree_node_read_work+0x50c/0xe08 [ 51.250047][ T7030] bch2_btree_node_read+0x1f3c/0x27ec [ 51.251182][ T7030] bch2_btree_root_read+0x2b0/0x40c [ 51.252215][ T7030] read_btree_roots+0x24c/0x794 [ 51.253100][ T7030] bch2_fs_recovery+0x328c/0x55dc [ 51.254240][ T7030] bch2_fs_start+0x30c/0x53c [ 51.255288][ T7030] bch2_fs_get_tree+0x938/0x1030 [ 51.256331][ T7030] vfs_get_tree+0x90/0x28c [ 51.257300][ T7030] do_new_mount+0x278/0x900 [ 51.258325][ T7030] path_mount+0x590/0xe04 [ 51.259232][ T7030] __arm64_sys_mount+0x4d4/0x5ac [ 51.260161][ T7030] invoke_syscall+0x98/0x2b8 [ 51.261073][ T7030] el0_svc_common+0x130/0x23c [ 51.262035][ T7030] do_el0_svc+0x48/0x58 [ 51.262918][ T7030] el0_svc+0x54/0x168 [ 51.263776][ T7030] el0t_64_sync_handler+0x84/0x108 [ 51.264869][ T7030] el0t_64_sync+0x198/0x19c [ 51.265966][ T7030] Code: 977414ef f9400294 91006280 d343fc08 (38756908) [ 51.267442][ T7030] ---[ end trace 0000000000000000 ]--- [ 51.693804][ T7030] Kernel panic - not syncing: Oops: Fatal exception [ 51.695241][ T7030] SMP: stopping secondary CPUs [ 51.696298][ T7030] Kernel Offset: disabled [ 51.697270][ T7030] CPU features: 0x100,00002070,00800250,82017203 [ 51.698531][ T7030] Memory Limit: none [ 52.086313][ T7030] Rebooting in 86400 seconds..