last executing test programs:

49.117915707s ago: executing program 0 (id=56):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="ea6576681159", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

48.601735244s ago: executing program 0 (id=60):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x80, 0x7e, 0xa}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4040000)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000002000000000000000000008406010000"], 0x0, 0x4a, 0x0, 0x8, 0x4}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, <r3=>0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r5=>0x0})
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r6, r5, 0x25, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c)
syz_emit_ethernet(0xbc1, &(0x7f0000000f00)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x3d, 0xbb3, 0x66, 0x0, 0x7b, 0x2, 0x0, @multicast1, @multicast1}, {0x22, 0xff, 0x0, @remote, "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"}}}}}, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20)

48.145808727s ago: executing program 0 (id=64):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
sendto$packet(r0, &(0x7f0000000580)="44c394f305916c4516999da20800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14)

47.706920309s ago: executing program 0 (id=70):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00')
read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020)
mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', 0x0, 0x22008d0, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203)

47.021751665s ago: executing program 0 (id=74):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0)
shutdown(0xffffffffffffffff, 0x1)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, 0x1, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASTER={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x45, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x5e2d6d5161ffdb78}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x20049804}, 0x200000c4)
getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000002740)=""/4069, &(0x7f00000004c0)=0xfe5)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
symlink(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./bus/file0\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, 0x0}, 0x68)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/profiling', 0x101581, 0x100)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
mq_open(&(0x7f0000000240)='\x00', 0x800, 0x162, &(0x7f0000000280)={0x82e, 0x8, 0xfffffffffffffff7, 0x1})
setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x340, 0xffffffff, 0x1a0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@remote, @mcast1, [], [0xff000000], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xa, 0x5, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0)
write$FUSE_NOTIFY_DELETE(r2, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r3], 0x3b)
r4 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x4003cb1, 0x1c080, 0xa, 0x30e})
io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0)

45.810454617s ago: executing program 0 (id=83):
move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0)
mlockall(0x2)
syz_emit_ethernet(0xbe, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

30.115233567s ago: executing program 32 (id=83):
move_pages(0x0, 0x90249c01dd736e4b, &(0x7f0000000000)=[&(0x7f0000ffd000/0x3000)=nil], 0x0, &(0x7f0000000040), 0x0)
mlockall(0x2)
syz_emit_ethernet(0xbe, 0x0, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0)

11.901935296s ago: executing program 3 (id=213):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)

11.499535107s ago: executing program 3 (id=217):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040))
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x58)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x10}}, 0x10)
ptrace$setregs(0xd, 0x0, 0x8c, &(0x7f00000002c0)="e44c9117")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

11.05552897s ago: executing program 3 (id=220):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700010400000000000400020006"], 0x58)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10.628113321s ago: executing program 3 (id=223):
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@netfilter={0xa, 0x0, 0x8, 0x1}}, 0x20)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)
ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0)

10.183221974s ago: executing program 3 (id=228):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24000011}, 0x20000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0)
r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r8)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r9 = socket$kcm(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00@', 0x5dc}], 0x1}, 0x4)

6.544536842s ago: executing program 2 (id=246):
syz_clone(0x2004011, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$SCSI_IOCTL_PROBE_HOST(0xffffffffffffffff, 0x5385, &(0x7f0000000000)={0x8d, ""/141})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
syz_open_procfs(0xffffffffffffffff, 0x0)
getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3)
memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2)
ioprio_set$pid(0x2, 0x0, 0x2000)

5.745691693s ago: executing program 1 (id=250):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202})
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

5.485868716s ago: executing program 2 (id=251):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0, 0x0, 0x4008, r2}, 0x18)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,')

5.179816772s ago: executing program 1 (id=252):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="64697361626c655f726f6c6c5f666f72776172642c6c617a7974696d652c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c64697361626c655f6578745f6964656e746966792c6e6f657874656e745f63616368652c6e6f657874656e745f63616368652c7768696e745f6d6f64653d66732d62617365642c636865636b706f696e743d64697361626c652c6a71666d743d76667376302c6a71666d743d7666736f6c642c6261636b67726f756e645f67633d6f66662c6e6f61636c2c646174615f666c7573682c009155f76df4d07ad6534d3588c19362f06435c912cf73b02e9946cfefd7b578c7029ce8c93b87feddd9bb7bb8924e6211c8b54dffa2d339edb64a6434663023894c1ae07c9ce2b93d95fbac8d5dbd8afb838537dbe757fdc7bf5cf39436f951f8f451e754a4bcb17e69c41e94995a3ae74e9dac87ec351b0f1e4f23af9301"], 0xfd, 0x5519, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmy6H+ht1V38wF3KqgdPmiZpyG6SKU2a1p48eBQP/iei4Mmjf4MHz97Eg+JNUDLvVLe6gtC0sdvfDybPzDtvnnneUArPTEgAJ9Zi9uvPlbgU5yJiPiIuRhT7lXIr3E7hhYi4HBFzj22VcvzPgdMRcT4iLk2Sp5yV8tTnV8dXbv701i/ffHfm1IUvvv5+dqsGZu3FiOhvpP3tfop5J8WH5Xhj3C1i/8a4jOlE72w638/T+HZ7rciw3dib1yji9U6an29sDSdxvddoTmKnu16MbwzSBYfjzl6e4g0PG5vFcau9VsTuMC9iZzddd2c3/W/bHY5SnlaZ76MifYxGezGNt3faaT0bj4rYHIzK8ZQ3b7V3JnFcxvJy0cx7raKOtQN80P9zb3cHWzvZuL057OaD7Gat/lKtfqta38xb7VH7RrXRb926kS11epNp1VG70b/dyfNOr11r5v3lbKnTbFbr9WzpTnut2xhk9Xrteu1a9eZyuXc1e/3+e1mvlS1N4qvdwdao2xtm6/lmlt6xnK3Urr+8nF2pZ+/cW81WH9y9e2/13Q/uvH//lXtvvlZO+kdZ2dLKtZWVav1adaW+fILW/0lZ9BTXDwdSmXUBAMeP/h+YhYP0//1H5fET+//NBxGH3/+H/n8qjlX/e9L7/0NYPxyI/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4MT6YeHLN4qdxXR8oRx/phx6rjyuRMRcRPz+BPNxel/O+TLPwr/MX/hbDd9WosgwucaZcjsfEbfL7bdnD/tTAAAAgKfXVx9f/ix16+llcdYFcZTSTZu5ix9OKV8lIhYWf5xStrnJy/NTSlb8fZ+KnSllK25gnZ1SsnTL7dS0sv0n8/vC2cdCJYW5Iy0HAAA4Evs7gaPtQgAAADhKn866AGajEnuPMveeBRffvP/rgeC5fUcAAADAMVSZdQEAAADAoSv6f7//BwAAAE+39Pt/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8wc793CYORHEAfjZ4Yf9p0Wrv28reoIwtIcccIwpIExSQAzWkAWogt5QQQYTHIRBxiOSxrUTfJzmTscyPNwgOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJceqnUVN39v2+bs9u3kGQ0AAABwybZaL+p/Zqn/vbn/s7n1u+kXEVFGxKW5+yi+nGWOmpzq9fm70+erNzXcR9QJh/eYNNe3iPjXXE+/uv4UAAAA4PPaLFfzNFtPf2ZDF0Sf0qJN+eN/prwiIqrZY6a08pD3J1NY/f0ex3WmtHoBa5opLC25jXOlvUv9cz+u2k1PmiI15cWXHYvMNnYAAKBHo7Om31kIAAAAfboaugCGUcTLVuZxK3CSmmZ77+tZDwAAAPiAiqELAAAAADpXz/97Ov9v7/w/AAAAGEY6/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAubav1YrNczdvm7Pbt5BkNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP7M87CoRAGITB3vWdydz/sNKgqalJFQgff2MwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxPy8pEAJBEAVzxv9O+v6HlQQ9gwgR0PCoohYNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCxcz8vclNxAMBfksnUVsVxlTmsiIIHvdjptLb2Jh6UxYN/grBsp3Xt1B/tHmwp4l68yZ57ET2KCMp66//Qcwu91FsPc6ggHkeSSWbSdtFZwSTd/Xzg5X0TQt73JbDsNy+7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCavLuIk2zTm8Vxcez2g+sbWX/nkT5zc+fuatayOKoz6SfDy9WdqN9cIgAAABweSVnfhxDupbtrWR/38vo/Lc/Jav7vn53FZT3/aN1f9mXtn7Xffr3/4nyg3myc7KLnN8ejE4+n0vn/Ztluz/3rGZ38zufvXpL8gcQfbL8wSfP7GX1769Z73Tw8Uke2AMB/cbzsi6D8fSjrh00mBsCh0akU3mX9n/SazQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgDpPt8HQZRyGE1c4iztx5cH1jr/7mzt3Vsp25cWMnfL24ZnaJNIRwfnM8OlHrbNrtytVrF9fH49Hl+oNXQghNjf5OMf2LHy1xcgiN3J/9B3+1I422BXHxsNuSz5MRNPhDCQCAAyktWlbX30t317Jj0UoI0x8erv9fr8Rhyfr//sdnblfHqtb/w9pm2H6DrUufD65cvfbm5qX1C6MLo0/fOjl8e3jq7OnTZwf5u5KBNyYAAADs23Q6nc53ukWr1v/xyuPr/8cqcViy/v/iu+FX1YET9f+eFot+TWcCAABwuD3/6p9/RHscj7rd8OX61tbl4Ww73z852zaQ6r4dKVq1/k9Wms4KAAAAqMNkO3po/f9cJQ5Lrv8/8+NLP1evmYQQjhbr/8c3Phufq286rVbHnxM3PUcAAACadbRo1fX/NP/+P55/8hCHEN54bRYX/wbwH+v/tKj/k/e/+ak6VvX7/1P1TbGV4v7sfuR9P4ROv+mMAAAAOMieKlpW7P+e7q598suxD7u+/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACo298BAAD//y5wQIQ=")
openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1ab341, 0x114)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2)

4.368862224s ago: executing program 2 (id=253):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="4011d1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="201006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000200)={0x20, 0x14}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x4}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)

3.076279761s ago: executing program 3 (id=255):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$netlink(0x10, 0x3, 0x12)
r0 = getpid()
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0xa003, 0x0)
close(0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
capset(0x0, &(0x7f0000000400)={0x1, 0x3, 0x7fffffff, 0x1, 0x1, 0x514})
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r5, 0x4b45, 0x4)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0x4)
write$binfmt_misc(0xffffffffffffffff, 0x0, 0xfffffecc)
close$binfmt(0xffffffffffffffff)
vmsplice(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000100)="ad", 0x1}], 0x1, 0xd)
r6 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r6, &(0x7f0000001c00), 0x12)
getpeername$unix(r2, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, 0x0, 0x20000820)

2.6924914s ago: executing program 5 (id=150):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='A'], 0x20}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000810)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000004c0)={0x1, 0x0, [{0x40000070, 0x0, 0x80000006}]})

2.349798608s ago: executing program 4 (id=258):
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@netfilter={0xa, 0x0, 0x8, 0x1}}, 0x20)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

2.214531245s ago: executing program 5 (id=259):
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0x1, @private2, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, 0x0}, 0x7ff}], 0x1, 0x10340, 0x0)

2.175896837s ago: executing program 4 (id=260):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46040700010400000000000400020006"], 0x58)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r0, 0xae9a)
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200})
ioctl$KVM_RUN(r0, 0xae80, 0x0)

1.92978821s ago: executing program 5 (id=261):
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]})
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xeeee0000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0xffff1000, 0x200000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7}, {0x2000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x0, 0x3, 0xf6, 0x0, 0xfc}, {0x3000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0xfc}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2, 0x83}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x42, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0xeeef0000, 0xd, 0xfe, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x4}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x26}, {0x80a0000, 0x7}, {0x7000}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1, 0x40]})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.92949704s ago: executing program 4 (id=262):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={0x0, 0x0, 0x4008, r2}, 0x18)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0)
sendmsg$inet6(r4, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x30}, 0x0)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10)
mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x2008440, &(0x7f0000000300)='trans=rdma,')

1.710782821s ago: executing program 1 (id=263):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
mkdirat(0xffffffffffffff9c, 0x0, 0x2c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x1, 0x0, 0xfffffffc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0x3}, 0x2, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0xffffffffffffffff, 0x400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)

876.806334ms ago: executing program 1 (id=264):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
socket$packet(0x11, 0x3, 0x300)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

799.383608ms ago: executing program 2 (id=265):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00'})
ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000000c0)=0x4)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x88440, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@setlink={0x20, 0x13, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x2024, 0x1920}}, 0x20}, 0x1, 0x0, 0x0, 0x2c0400c0}, 0x40008c0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0x1, 0x9, 0xfffffffffffffffd, 0x77, 0x2, 0x3, 0x4002004c4, 0x4000001004, 0x0, 0xa, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0xd31], 0xeeee8000, 0x3003d3})
ioctl$KVM_RUN(r1, 0xae80, 0x0)
ioctl$KVM_RUN(r1, 0xae80, 0x0)

741.972541ms ago: executing program 4 (id=266):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000000c0)="525cfc80ae17ce55a8dd0aacc55c4b86faa82835f9dfd5cf8aa6220e6e33dee8286f6c78f904f531292b21041f8f49d95e4f", 0x32)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x8001)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0)
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

573.28292ms ago: executing program 2 (id=267):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040))
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x58)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x10}}, 0x10)
ptrace$setregs(0xd, 0x0, 0x8c, &(0x7f00000002c0)="e44c9117")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x4000, 0x200})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

439.587427ms ago: executing program 4 (id=268):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000001a80)={0x0, [{0x3, 0x0, 0xfff, 0x0}, {0x3, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x10, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x4be, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x8, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0xfff, 0x0}, {0x3, 0x0, 0x10, 0x0}, {0x2, 0x0, 0xf3, 0x0}, {0x1, 0x0, 0x5000000, 0x0}, {0x3, 0x0, 0x1, 0x0}]})

301.959214ms ago: executing program 5 (id=269):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

294.468034ms ago: executing program 1 (id=270):
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @val=@netfilter={0xa, 0x0, 0x8, 0x1}}, 0x20)
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x100000001, 0x2, 0x3, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x4000000000000000, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x4], 0xeeee8000, 0x2010d3})
ioctl$KVM_RUN(r0, 0xae80, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)
ioctl$KVM_RUN(r0, 0xae80, 0x0)

211.737289ms ago: executing program 4 (id=271):
r0 = inotify_init1(0x800)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f00000040c0)={0x2020}, 0x2020)

21.471408ms ago: executing program 2 (id=272):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2)
r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000})
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000f, 0x11, r2, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0xfffffd0a}, 0x10)
io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39d})

0s ago: executing program 1 (id=273):
ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000280)=0x7})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000f36d666666440f38826b410f786b42d1d107b8010000000f01d98fe9d89afd", 0x3d}], 0x1, 0x21, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts.
[   64.900876][ T4255] cgroup: Unknown subsys name 'net'
[   65.036205][ T4255] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   66.596530][ T4255] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   68.023415][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   68.031697][ T4273] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   68.044994][ T4275] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   68.053567][ T4275] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   68.061403][ T4275] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   68.070103][ T4279] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   68.079263][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   68.087415][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   68.097096][ T4282] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   68.105992][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   68.114779][ T4282] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   68.116215][ T4284] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   68.123095][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   68.129817][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   68.137163][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   68.143707][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   68.150902][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   68.165677][ T4284] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   68.165814][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   68.174172][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   68.181026][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   68.187469][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   68.194711][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   68.202247][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   68.217079][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   68.261965][ T4275] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   68.273357][ T4275] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   68.287473][ T4282] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   68.305678][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   68.313896][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   68.687227][ T4270] chnl_net:caif_netlink_parms(): no params data found
[   68.713853][ T4269] chnl_net:caif_netlink_parms(): no params data found
[   68.826431][ T4276] chnl_net:caif_netlink_parms(): no params data found
[   68.837497][ T4277] chnl_net:caif_netlink_parms(): no params data found
[   68.873190][ T4281] chnl_net:caif_netlink_parms(): no params data found
[   68.968464][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.975686][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state
[   68.987268][ T4270] device bridge_slave_0 entered promiscuous mode
[   68.995859][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.003120][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.011133][ T4269] device bridge_slave_0 entered promiscuous mode
[   69.035266][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.042963][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.052063][ T4270] device bridge_slave_1 entered promiscuous mode
[   69.060091][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.067187][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.075350][ T4269] device bridge_slave_1 entered promiscuous mode
[   69.135544][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.158489][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.165695][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.177128][ T4276] device bridge_slave_0 entered promiscuous mode
[   69.193447][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.212337][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.222091][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.229787][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.237684][ T4276] device bridge_slave_1 entered promiscuous mode
[   69.245639][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.256095][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.264278][ T4277] device bridge_slave_0 entered promiscuous mode
[   69.281039][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.291325][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.299399][ T4281] device bridge_slave_0 entered promiscuous mode
[   69.309070][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.323976][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.331417][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.339924][ T4277] device bridge_slave_1 entered promiscuous mode
[   69.352518][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.359787][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.367526][ T4281] device bridge_slave_1 entered promiscuous mode
[   69.406405][ T4269] team0: Port device team_slave_0 added
[   69.420785][ T4270] team0: Port device team_slave_0 added
[   69.437153][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.455825][ T4269] team0: Port device team_slave_1 added
[   69.463576][ T4270] team0: Port device team_slave_1 added
[   69.471095][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.482457][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.493364][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   69.518026][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.544460][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   69.574498][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.584900][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.614468][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.626918][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.635102][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.661304][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.696243][ T4276] team0: Port device team_slave_0 added
[   69.704759][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.714530][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.740847][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.761984][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1
[   69.769242][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.795984][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   69.811065][ T4281] team0: Port device team_slave_0 added
[   69.826209][ T4277] team0: Port device team_slave_0 added
[   69.833966][ T4276] team0: Port device team_slave_1 added
[   69.847164][ T4281] team0: Port device team_slave_1 added
[   69.854605][ T4277] team0: Port device team_slave_1 added
[   69.904889][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.912022][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   69.938186][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   69.976061][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0
[   69.983400][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.009800][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.021858][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.029212][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.055560][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.071988][ T4269] device hsr_slave_0 entered promiscuous mode
[   70.079265][ T4269] device hsr_slave_1 entered promiscuous mode
[   70.086530][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.095803][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.125392][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.141309][ T4270] device hsr_slave_0 entered promiscuous mode
[   70.148567][ T4270] device hsr_slave_1 entered promiscuous mode
[   70.155236][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.163513][ T4270] Cannot create hsr debugfs directory
[   70.169486][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.176528][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.202699][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.219885][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.226878][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.253432][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.339461][ T4275] Bluetooth: hci4: command 0x0409 tx timeout
[   70.345959][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[   70.346012][ T4273] Bluetooth: hci3: command 0x0409 tx timeout
[   70.352475][ T4279] Bluetooth: hci2: command 0x0409 tx timeout
[   70.358569][ T4282] Bluetooth: hci1: command 0x0409 tx timeout
[   70.372613][ T4276] device hsr_slave_0 entered promiscuous mode
[   70.380072][ T4276] device hsr_slave_1 entered promiscuous mode
[   70.386767][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.394449][ T4276] Cannot create hsr debugfs directory
[   70.429477][ T4281] device hsr_slave_0 entered promiscuous mode
[   70.436547][ T4281] device hsr_slave_1 entered promiscuous mode
[   70.443573][ T4281] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.452101][ T4281] Cannot create hsr debugfs directory
[   70.478979][ T4277] device hsr_slave_0 entered promiscuous mode
[   70.485687][ T4277] device hsr_slave_1 entered promiscuous mode
[   70.492511][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   70.500345][ T4277] Cannot create hsr debugfs directory
[   70.821709][ T4269] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   70.839426][ T4269] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   70.849269][ T4269] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   70.866580][ T4269] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   70.922987][ T4276] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   70.935342][ T4276] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   70.953713][ T4276] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   70.964733][ T4276] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   71.012750][ T4270] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.022990][ T4270] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.033573][ T4270] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.044960][ T4270] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.121738][ T4281] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.135466][ T4281] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.149372][ T4281] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   71.171632][ T4281] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   71.241485][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.292306][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.302882][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.323288][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   71.354815][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.369386][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.378593][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.386052][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.397966][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.445313][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.455629][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.465114][ T2947] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.472320][ T2947] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.482187][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   71.491858][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   71.501940][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   71.518817][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.531907][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.540326][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   71.554082][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   71.564575][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   71.588241][ T4270] 8021q: adding VLAN 0 to HW filter on device team0
[   71.596425][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   71.609166][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   71.621732][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[   71.628427][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[   71.639447][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   71.647666][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.657744][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.665730][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.675041][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.687563][ T4276] 8021q: adding VLAN 0 to HW filter on device team0
[   71.711196][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.721139][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.730084][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.737178][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.746644][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   71.755449][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   71.764546][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   71.773399][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   71.782247][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.789458][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[   71.797479][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.805993][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   71.823015][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0
[   71.855466][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   71.867769][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   71.880905][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.891950][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.901443][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.908640][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.916857][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   71.926094][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   71.934309][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   71.944779][   T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   71.954118][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.961296][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   71.975906][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   71.987297][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   71.997404][ T4281] 8021q: adding VLAN 0 to HW filter on device team0
[   72.010386][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.024287][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.054456][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.064222][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.073317][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   72.085927][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   72.094975][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.102181][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.110547][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   72.120670][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   72.129328][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.136522][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.144435][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.153289][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.162161][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   72.170395][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.187552][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.198869][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.212319][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.246905][ T4270] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.258091][ T4270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.273079][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.282852][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   72.292134][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.301463][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.310526][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.319618][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.327911][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.337875][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.347136][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.356170][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.365343][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.374216][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.385736][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.403688][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.415608][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.422997][ T4282] Bluetooth: hci3: command 0x041b tx timeout
[   72.423036][ T4282] Bluetooth: hci2: command 0x041b tx timeout
[   72.435378][ T4275] Bluetooth: hci0: command 0x041b tx timeout
[   72.435440][ T4273] Bluetooth: hci1: command 0x041b tx timeout
[   72.441971][ T4282] Bluetooth: hci4: command 0x041b tx timeout
[   72.462497][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   72.476264][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.514818][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.575742][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   72.605688][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   72.634641][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   72.662679][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   72.677880][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   72.701254][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   72.733532][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.759548][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   72.782043][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   72.791535][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   72.801321][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   72.860171][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.932495][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   72.949004][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   72.990991][ T4277] 8021q: adding VLAN 0 to HW filter on device team0
[   73.042289][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   73.062370][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   73.079418][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.086633][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.143153][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   73.171931][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   73.189494][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   73.205914][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.213290][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.237610][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   73.254473][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   73.288960][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   73.308527][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   73.317452][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   73.327361][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   73.338035][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.346033][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.373944][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.403559][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.420738][ T4277] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   73.433008][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   73.445508][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   73.454582][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   73.465617][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   73.474833][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   73.483791][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   73.493248][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.501122][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.510684][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.518297][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.528789][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   73.546221][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.577335][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   73.585889][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   73.616357][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.642787][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.670753][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.685489][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.695528][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.756377][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.766491][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.776572][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   73.792010][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   73.801808][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.810210][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.836529][ T4270] device veth0_vlan entered promiscuous mode
[   73.865261][ T4269] device veth0_vlan entered promiscuous mode
[   73.876487][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.889347][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.899564][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   73.908627][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   73.925766][ T4270] device veth1_vlan entered promiscuous mode
[   73.941334][ T4276] device veth0_vlan entered promiscuous mode
[   73.963587][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.972004][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   73.986556][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   73.995618][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.004015][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   74.014239][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   74.047857][ T4269] device veth1_vlan entered promiscuous mode
[   74.062027][ T4276] device veth1_vlan entered promiscuous mode
[   74.075998][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   74.084979][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   74.116485][ T4281] device veth0_vlan entered promiscuous mode
[   74.127095][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   74.141342][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   74.151010][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   74.158887][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.174175][ T4281] device veth1_vlan entered promiscuous mode
[   74.221993][ T4269] device veth0_macvtap entered promiscuous mode
[   74.230983][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   74.240166][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   74.248917][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.257495][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.266825][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.275702][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.285589][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.299974][ T4276] device veth0_macvtap entered promiscuous mode
[   74.314900][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.327344][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.337715][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.349284][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.364840][ T4270] device veth0_macvtap entered promiscuous mode
[   74.374666][ T4269] device veth1_macvtap entered promiscuous mode
[   74.392481][ T4276] device veth1_macvtap entered promiscuous mode
[   74.403376][ T4270] device veth1_macvtap entered promiscuous mode
[   74.470231][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.486590][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.495259][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.502974][ T4282] Bluetooth: hci0: command 0x040f tx timeout
[   74.503033][ T4282] Bluetooth: hci1: command 0x040f tx timeout
[   74.503059][ T4282] Bluetooth: hci2: command 0x040f tx timeout
[   74.503086][ T4282] Bluetooth: hci3: command 0x040f tx timeout
[   74.508688][ T4282] Bluetooth: hci4: command 0x040f tx timeout
[   74.516513][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.542905][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.552771][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.563733][ T4281] device veth0_macvtap entered promiscuous mode
[   74.576464][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.590685][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.604211][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.613531][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.622964][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.631912][ T4269] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.643388][ T4281] device veth1_macvtap entered promiscuous mode
[   74.651624][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.669154][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.677693][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.686979][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.703739][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.714122][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.729619][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.741955][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.754286][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.767392][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.778534][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.794335][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.805352][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.817633][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.836367][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.848020][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.858448][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.869041][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.879042][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.889868][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.901926][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.917781][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.939475][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.949035][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.957953][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.974736][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.986828][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.009855][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.027189][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.044355][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.055220][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.075225][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.085471][ T4270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.096191][ T4270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.109292][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.120472][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.132163][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.143371][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.156891][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.167244][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.178415][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.191072][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.198956][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.211335][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.221192][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.230705][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.240227][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.249302][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.263237][ T4276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.272340][ T4276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.281792][ T4276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.290815][ T4276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.307636][ T4270] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.316607][ T4270] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.325749][ T4270] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.334559][ T4270] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.351166][ T4281] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.363745][ T4281] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.374384][ T4281] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.383998][ T4281] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.447385][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.475147][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.570650][ T4277] device veth0_vlan entered promiscuous mode
[   75.587279][ T4277] device veth1_vlan entered promiscuous mode
[   75.618617][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.627057][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.639557][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.647921][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.660600][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.730850][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.746836][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.751786][ T4334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.782836][ T4334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.794778][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.807099][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.815822][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.824284][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.833883][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.851410][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.855653][ T4277] device veth0_macvtap entered promiscuous mode
[   75.866138][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.898665][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.913117][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   75.918301][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.934322][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.942799][ T1160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.955823][ T4277] device veth1_macvtap entered promiscuous mode
[   75.995501][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.003286][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.015673][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.033496][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.038524][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.044905][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.062374][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.073356][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.083644][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.096945][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.116947][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.126360][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.141213][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.149222][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.154488][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.166060][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.177472][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.189302][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.200832][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.211660][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.222610][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.233246][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.243846][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.254609][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.267061][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.285046][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.296274][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.299875][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.313629][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.314049][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.347495][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.370073][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.381462][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.391012][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.402654][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.476632][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.500682][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.527940][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.588393][ T4275] Bluetooth: hci4: command 0x0419 tx timeout
[   76.589542][ T4282] Bluetooth: hci3: command 0x0419 tx timeout
[   76.594474][ T4275] Bluetooth: hci2: command 0x0419 tx timeout
[   76.600523][ T4282] Bluetooth: hci1: command 0x0419 tx timeout
[   76.600560][ T4282] Bluetooth: hci0: command 0x0419 tx timeout
[   76.678038][ T4352] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   76.706343][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.719199][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.751534][ T4355] syz.2.3 (4355): /proc/4353/oom_adj is deprecated, please use /proc/4353/oom_score_adj instead.
[   76.776422][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   76.810737][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.854078][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.894429][ T2947] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   77.603574][ T4380] device syzkaller0 entered promiscuous mode
[   78.329025][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   78.599248][ T4315] usb 4-1: Using ep0 maxpacket: 16
[   78.858183][ T4315] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[   79.102437][ T4315] usb 4-1: config 0 has no interface number 0
[   79.123768][ T4315] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   79.156700][ T4397] sctp: failed to load transform for md5: -2
[   79.179457][ T4315] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   79.214311][ T4315] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   79.256492][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.278422][ T4315] usb 4-1: Product: syz
[   79.282827][ T4315] usb 4-1: Manufacturer: syz
[   79.287494][ T4315] usb 4-1: SerialNumber: syz
[   79.371099][ T4315] usb 4-1: config 0 descriptor??
[   79.379752][ T4393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   79.387636][ T4393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   79.493742][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'.
[   79.650274][ T4393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   79.657699][ T4393] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   79.670531][ T4434] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   79.838834][ T4440] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'.
[   79.900859][ T4315] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   80.101311][ T4315] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[   80.128921][ T4315] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3
[   80.159290][ T4315] asix: probe of 4-1:0.34 failed with error -61
[   80.255961][ T4455] loop1: detected capacity change from 0 to 16
[   80.345078][ T4455] erofs: (device loop1): mounted with root inode @ nid 36.
[   80.460484][ T4455] overlayfs: upper fs does not support file handles, falling back to index=off.
[   80.545875][ T4455] overlayfs: failed to resolve './file0': -2
[   80.910098][ T4475] netlink: 8 bytes leftover after parsing attributes in process `syz.2.35'.
[   81.381624][ T4487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.37'.
[   81.557146][ T4349] usb 4-1: USB disconnect, device number 2
[   83.156928][ T4515] loop3: detected capacity change from 0 to 16
[   83.189348][ T4515] =======================================================
[   83.189348][ T4515] WARNING: The mand mount option has been deprecated and
[   83.189348][ T4515]          and is ignored by this kernel. Remove the mand
[   83.189348][ T4515]          option from the mount to silence this warning.
[   83.189348][ T4515] =======================================================
[   83.326938][ T4515] erofs: (device loop3): erofs_read_inode: unsupported chunk format ffff of nid 36
[   83.591982][ T4522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.48'.
[   83.783964][ T4527] loop3: detected capacity change from 0 to 256
[   83.847582][ T4528] loop0: detected capacity change from 0 to 164
[   83.939222][ T4527] FAT-fs (loop3): Directory bread(block 64) failed
[   83.946132][ T4527] FAT-fs (loop3): Directory bread(block 65) failed
[   83.981502][ T4530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'.
[   84.018294][ T4527] FAT-fs (loop3): Directory bread(block 66) failed
[   84.025004][ T4527] FAT-fs (loop3): Directory bread(block 67) failed
[   84.098406][ T4527] FAT-fs (loop3): Directory bread(block 68) failed
[   84.105204][ T4527] FAT-fs (loop3): Directory bread(block 69) failed
[   84.168306][ T4527] FAT-fs (loop3): Directory bread(block 70) failed
[   84.175098][ T4527] FAT-fs (loop3): Directory bread(block 71) failed
[   84.218474][ T4527] FAT-fs (loop3): Directory bread(block 72) failed
[   84.225092][ T4527] FAT-fs (loop3): Directory bread(block 73) failed
[   84.296864][ T4538] netlink: 'syz.2.54': attribute type 1 has an invalid length.
[   84.345849][ T4527] process 'syz.3.51' launched './file1' with NULL argv: empty string added
[   84.378384][ T4527] syz.3.51: attempt to access beyond end of device
[   84.378384][ T4527] loop3: rw=524288, sector=1192, nr_sectors = 32 limit=256
[   84.467224][ T4527] syz.3.51: attempt to access beyond end of device
[   84.467224][ T4527] loop3: rw=0, sector=1192, nr_sectors = 8 limit=256
[   85.277141][ T4559] loop4: detected capacity change from 0 to 128
[   85.302691][ T4558] Illegal XDP return value 82923576 on prog  (id 4) dev syz_tun, expect packet loss!
[   85.362516][ T4561] loop3: detected capacity change from 0 to 16
[   85.446326][ T4561] erofs: (device loop3): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 146300)
[   85.619491][ T4563] Zero length message leads to an empty skb
[   85.658600][ T4563] netlink: 8 bytes leftover after parsing attributes in process `syz.1.62'.
[   85.800497][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.64'.
[   85.896306][ T4572] netlink: 16 bytes leftover after parsing attributes in process `syz.3.66'.
[   85.903327][ T4564] syz.4.59 (4564) used greatest stack depth: 20752 bytes left
[   86.107255][ T4577] loop2: detected capacity change from 0 to 256
[   86.165388][ T4578] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'.
[   86.258255][ T4581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.68'.
[   86.650473][ T4595] netlink: 'syz.2.73': attribute type 1 has an invalid length.
[   86.922036][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   86.960578][ T4603] device syzkaller0 entered promiscuous mode
[   86.966748][ T4598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.74'.
[   86.984489][ T3045] cfg80211: failed to load regulatory.db
[   87.016294][ T4603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'.
[   87.085556][ T4603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.76'.
[   87.117010][ T4598] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   87.157861][ T4598] kernel profiling enabled (shift: 5)
[   87.525212][ T4610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'.
[   88.475851][ T4637] loop3: detected capacity change from 0 to 128
[   90.365329][ T4663] loop1: detected capacity change from 0 to 512
[   90.478357][ T4663] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   90.626286][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.91: iget: bad extra_isize 58 (inode size 256)
[   90.692441][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.91: error while reading EA inode 11 err=-117
[   90.740140][ T4663] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   90.805794][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.91: iget: bad extra_isize 58 (inode size 256)
[   90.933653][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.91: error while reading EA inode 11 err=-117
[   90.996674][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.91: iget: bad extra_isize 58 (inode size 256)
[   91.037017][ T4669] netlink: 'syz.4.92': attribute type 1 has an invalid length.
[   91.059406][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.91: error while reading EA inode 18 err=-117
[   91.129013][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.91: iget: bad extra_isize 58 (inode size 256)
[   91.234419][ T4663] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.91: error while reading EA inode 18 err=-117
[   91.279370][ T4663] EXT4-fs (loop1): 1 orphan inode deleted
[   91.285193][ T4663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[   95.866415][ T4733] netlink: 'syz.2.111': attribute type 1 has an invalid length.
[   95.989916][ T4733] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   96.031541][ T4733] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   96.187955][ T4735] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   97.462263][ T4763] device syzkaller0 entered promiscuous mode
[   97.495864][ T4763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'.
[   97.518328][ T4763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.118'.
[   98.385124][ T4761] loop3: detected capacity change from 0 to 40427
[   98.412254][ T4761] F2FS-fs (loop3): Unrecognized mount option "whint_mode=fs-based" or missing value
[   99.307502][ T4784] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   99.769799][ T4801] netlink: 'syz.3.128': attribute type 1 has an invalid length.
[  100.042006][ T4805] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  100.107029][ T4805] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  100.180854][ T4281] EXT4-fs (loop1): unmounting filesystem.
[  100.300242][ T4806] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  101.171150][ T4831] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  101.350640][ T4835] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  101.703365][ T4845] loop2: detected capacity change from 0 to 512
[  101.762263][ T4845] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  101.950400][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.141: iget: bad extra_isize 58 (inode size 256)
[  101.979094][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.141: error while reading EA inode 11 err=-117
[  101.993582][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.141: iget: bad extra_isize 58 (inode size 256)
[  102.039835][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.141: error while reading EA inode 11 err=-117
[  102.084168][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.141: iget: bad extra_isize 58 (inode size 256)
[  102.306191][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.141: error while reading EA inode 18 err=-117
[  102.348748][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.141: iget: bad extra_isize 58 (inode size 256)
[  102.439053][ T4845] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.141: error while reading EA inode 18 err=-117
[  102.495304][ T4845] EXT4-fs (loop2): 1 orphan inode deleted
[  102.556948][ T4845] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  102.824205][ T4865] netlink: 'syz.1.149': attribute type 1 has an invalid length.
[  102.958293][ T4317] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  103.178316][ T4317] usb 4-1: Using ep0 maxpacket: 16
[  103.216480][ T4317] usb 4-1: config 0 has an invalid interface number: 34 but max is 0
[  103.379401][ T4317] usb 4-1: config 0 has no interface number 0
[  103.494907][ T4317] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  103.578435][ T4317] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  103.623976][ T4869] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  103.652581][ T4317] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  103.678687][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.695302][ T4869] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  103.703470][ T4317] usb 4-1: Product: syz
[  103.707929][ T4317] usb 4-1: Manufacturer: syz
[  103.718198][ T4317] usb 4-1: SerialNumber: syz
[  103.739486][ T4317] usb 4-1: config 0 descriptor??
[  103.746562][ T4862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  103.757100][ T4862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  103.961626][ T4870] bond1: (slave bridge1): Enslaving as an active interface with a down link
[  103.997315][ T4862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  104.027626][ T4862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  104.268255][ T4317] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  104.384391][ T4273] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  104.394205][ T4273] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  104.403777][ T4273] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  104.416774][ T4273] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  104.425284][ T4273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  104.433578][ T4273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  104.689273][ T4317] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  104.710687][ T4317] asix: probe of 4-1:0.34 failed with error -32
[  104.790645][ T4879] chnl_net:caif_netlink_parms(): no params data found
[  105.090701][ T4879] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.125952][ T4879] bridge0: port 1(bridge_slave_0) entered disabled state
[  105.194942][ T4879] device bridge_slave_0 entered promiscuous mode
[  105.221299][ T4879] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.263544][ T4879] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.296479][ T4879] device bridge_slave_1 entered promiscuous mode
[  105.428892][ T4879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  105.461194][ T4879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  105.572977][ T4879] team0: Port device team_slave_0 added
[  105.603443][ T4879] team0: Port device team_slave_1 added
[  105.687444][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_0
[  105.728184][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.792070][ T4879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  105.803367][ T3045] usb 4-1: USB disconnect, device number 3
[  105.901358][ T4879] batman_adv: batadv0: Adding interface: batadv_slave_1
[  105.928298][ T4879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  105.995622][ T4879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  106.242584][ T4879] device hsr_slave_0 entered promiscuous mode
[  106.276052][ T4879] device hsr_slave_1 entered promiscuous mode
[  106.307349][ T4879] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  106.336342][ T4879] Cannot create hsr debugfs directory
[  106.498312][ T4273] Bluetooth: hci5: command 0x0409 tx timeout
[  106.752148][ T1160] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.928938][ T1160] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.940220][ T4912] capability: warning: `syz.1.158' uses deprecated v2 capabilities in a way that may be insecure
[  107.087027][ T1160] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.255808][ T1160] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.454305][ T4879] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  107.583640][ T4879] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  107.646273][ T4879] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  107.797269][ T4879] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  108.546384][ T4923] netlink: 12 bytes leftover after parsing attributes in process `syz.4.161'.
[  108.578917][ T4273] Bluetooth: hci5: command 0x041b tx timeout
[  109.165635][ T4936] netlink: 'syz.4.164': attribute type 1 has an invalid length.
[  109.369066][ T4879] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.393249][ T4941] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  109.474413][ T4941] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  109.639334][ T4945] bond1: (slave bridge2): Enslaving as an active interface with a down link
[  109.688828][ T4318] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  109.817188][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  109.836063][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.878244][ T4318] usb 2-1: Using ep0 maxpacket: 16
[  109.885328][ T4318] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  109.910158][ T4318] usb 2-1: config 0 has no interface number 0
[  109.917161][ T4318] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  109.948262][ T4318] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  109.970670][ T4318] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  109.998302][ T4318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.006477][ T4318] usb 2-1: Product: syz
[  110.028293][ T4318] usb 2-1: Manufacturer: syz
[  110.033001][ T4318] usb 2-1: SerialNumber: syz
[  110.078388][ T4318] usb 2-1: config 0 descriptor??
[  110.092226][ T4948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  110.108388][ T4948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  110.235727][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  110.343316][ T4948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  110.359997][ T4948] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  110.383949][ T4963] fuse: Bad value for 'fd'
[  110.573088][ T4967] Disabled LAPIC found during irq injection
[  110.580887][ T4318] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  110.658271][ T4273] Bluetooth: hci5: command 0x040f tx timeout
[  111.110947][ T4318] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  111.215089][ T4318] asix: probe of 2-1:0.34 failed with error -32
[  112.470462][   T26] usb 2-1: USB disconnect, device number 2
[  112.561215][ T4988] loop1: detected capacity change from 0 to 2048
[  112.632780][ T4988]  loop1: p1 < > p4 < >
[  112.738687][ T4273] Bluetooth: hci5: command 0x0419 tx timeout
[  112.933605][ T4364] udevd[4364]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  112.938565][ T4361] udevd[4361]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  113.558025][ T4879] 8021q: adding VLAN 0 to HW filter on device team0
[  113.638272][ T4984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.173'.
[  113.782065][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  113.822948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  113.865015][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.872279][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  113.906342][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  113.965857][ T5005] netlink: 'syz.3.177': attribute type 1 has an invalid length.
[  114.097062][ T5008] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address
[  114.196758][ T5008] bond2: (slave vxcan3): Error -95 calling set_mac_address
[  114.237074][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  114.246565][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  114.257113][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.264317][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  114.303019][ T5009] bond2: (slave bridge2): Enslaving as an active interface with a down link
[  114.420980][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  114.458265][ T4315] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  114.638191][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  114.647406][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  114.667179][ T4315] usb 2-1: Using ep0 maxpacket: 16
[  114.677834][ T4315] usb 2-1: config 0 has an invalid interface number: 34 but max is 0
[  114.678792][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  114.706588][ T4315] usb 2-1: config 0 has no interface number 0
[  114.739339][ T4315] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  114.784732][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  114.789629][ T4315] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  114.798956][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  114.836435][ T4315] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  114.859348][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  114.888637][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.889629][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  114.927516][ T4315] usb 2-1: Product: syz
[  114.935137][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  114.937650][ T4315] usb 2-1: Manufacturer: syz
[  114.969843][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  114.980237][ T4315] usb 2-1: SerialNumber: syz
[  114.989281][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  115.006446][ T4315] usb 2-1: config 0 descriptor??
[  115.018934][ T4879] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  115.022128][ T5021] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.048430][ T5021] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.332662][ T5021] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.382412][ T5021] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  115.611126][ T1160] device hsr_slave_0 left promiscuous mode
[  115.629505][ T4315] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  115.644751][ T1160] device hsr_slave_1 left promiscuous mode
[  115.709047][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.735231][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.782936][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.828362][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.888929][ T1160] device bridge_slave_1 left promiscuous mode
[  115.898414][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.955903][ T1160] device bridge_slave_0 left promiscuous mode
[  115.973408][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.041142][ T4315] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  116.077032][ T4315] asix: probe of 2-1:0.34 failed with error -32
[  116.089596][ T1160] device veth1_macvtap left promiscuous mode
[  116.096256][ T1160] device veth0_macvtap left promiscuous mode
[  116.122796][ T1160] device veth1_vlan left promiscuous mode
[  116.144068][ T1160] device veth0_vlan left promiscuous mode
[  117.246769][ T4317] usb 2-1: USB disconnect, device number 3
[  117.518811][ T1160] team0 (unregistering): Port device team_slave_1 removed
[  117.570186][ T1160] team0 (unregistering): Port device team_slave_0 removed
[  117.621567][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.665493][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.069537][ T1160] bond0 (unregistering): Released all slaves
[  120.428404][ T5085] netlink: 'syz.3.196': attribute type 1 has an invalid length.
[  120.646122][ T5114] device veth0 entered promiscuous mode
[  120.963800][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.972993][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.106074][ T4879] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.191824][ T5111] device veth0 left promiscuous mode
[  122.686611][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.729134][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.783724][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.857057][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.897440][ T4879] device veth0_vlan entered promiscuous mode
[  122.913951][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.929734][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.946119][ T4879] device veth1_vlan entered promiscuous mode
[  123.063474][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.118683][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.169307][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.219232][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.280340][ T4879] device veth0_macvtap entered promiscuous mode
[  123.302457][ T4879] device veth1_macvtap entered promiscuous mode
[  123.424078][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.465703][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.532776][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.552794][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.564844][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.585742][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.596069][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.607028][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.626567][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.640751][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  123.650339][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  123.659079][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  123.670554][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  123.687399][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.709354][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.736276][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.767458][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.787915][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.804296][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.836792][ T4879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.857931][ T4879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.877997][ T4879] batman_adv: batadv0: Interface activated: batadv_slave_1
[  123.938015][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  123.955100][ T4980] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  123.990151][ T4879] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.011287][ T4879] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.027122][ T4879] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.064288][ T4879] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.175841][ T5225] loop2: detected capacity change from 0 to 512
[  124.189033][ T5225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  124.301745][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.231: iget: bad extra_isize 58 (inode size 256)
[  124.320013][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.231: error while reading EA inode 11 err=-117
[  124.336718][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #11: comm syz.2.231: iget: bad extra_isize 58 (inode size 256)
[  124.354482][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.231: error while reading EA inode 11 err=-117
[  124.367458][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.231: iget: bad extra_isize 58 (inode size 256)
[  124.381880][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.231: error while reading EA inode 18 err=-117
[  124.395033][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #18: comm syz.2.231: iget: bad extra_isize 58 (inode size 256)
[  124.409993][ T5225] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.231: error while reading EA inode 18 err=-117
[  124.425332][ T5225] EXT4-fs (loop2): 1 orphan inode deleted
[  124.431432][ T5225] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  124.479261][ T4270] EXT4-fs (loop2): unmounting filesystem.
[  124.805215][ T5211] loop1: detected capacity change from 0 to 40427
[  124.891780][ T5211] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value
[  125.520204][ T5253] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  129.622204][ T5304] loop1: detected capacity change from 0 to 40427
[  129.654467][ T5304] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value
[  129.680550][   T26] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  129.998615][   T26] usb 3-1: Using ep0 maxpacket: 16
[  130.010081][   T26] usb 3-1: config 0 has an invalid interface number: 34 but max is 0
[  130.034996][   T26] usb 3-1: config 0 has no interface number 0
[  130.044060][   T26] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  130.063815][   T26] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  130.078999][   T26] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  130.099796][   T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.116217][   T26] usb 3-1: Product: syz
[  130.141819][   T26] usb 3-1: Manufacturer: syz
[  130.147067][   T26] usb 3-1: SerialNumber: syz
[  130.194658][   T26] usb 3-1: config 0 descriptor??
[  130.225905][ T5306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.234409][ T5306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.457091][ T5306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.484569][ T5306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  130.678581][ T4324] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.702144][ T4324] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.757398][   T26] asix 3-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  130.771629][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.796794][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.832781][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.860304][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  131.159682][   T26] asix 3-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61
[  131.189401][   T26] asix: probe of 3-1:0.34 failed with error -61
[  132.892142][   T26] usb 3-1: USB disconnect, device number 2
[  132.980092][ T5354] netlink: 'syz.1.264': attribute type 1 has an invalid length.
[  133.052805][ T5354] device bond2 entered promiscuous mode
[  133.063528][ T5354] 8021q: adding VLAN 0 to HW filter on device bond2
[  133.072941][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  133.079408][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.101319][ T5360] bond2: (slave erspan1): making interface the new active one
[  133.109131][ T5360] device erspan1 entered promiscuous mode
[  133.117664][ T5360] bond2: (slave erspan1): Enslaving as an active interface with an up link
[  133.126876][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  133.224200][ T5360] syz.1.264 (5360) used greatest stack depth: 20536 bytes left
[  133.612523][ T5378] overlayfs: failed to clone upperpath
[  133.782035][ T5381] page:ffffea000144ec40 refcount:4 mapcount:1 mapping:ffff888076d248d8 index:0x0 pfn:0x513b1
[  133.793225][ T5381] memcg:ffff888054374000
[  133.797537][ T5381] aops:shmem_aops ino:41a
[  133.801943][ T5381] flags: 0xfff60000080015(locked|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff)
[  133.811824][ T5381] raw: 00fff60000080015 ffff888054376248 ffffea000145ecc8 ffff888076d248d8
[  133.820779][ T5381] raw: 0000000000000000 0000000000000000 0000000400000000 ffff888054374000
[  133.829419][ T5381] page dumped because: VM_BUG_ON_FOLIO(folio_mapped(folio))
[  133.836749][ T5381] page_owner tracks the page as allocated
[  133.843326][ T5381] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 5382, tgid 5381 (syz.2.272), ts 133743200185, free_ts 133673551171
[  133.862150][ T5381]  post_alloc_hook+0x173/0x1a0
[  133.867064][ T5381]  get_page_from_freelist+0x1a1e/0x1ab0
[  133.872775][ T5381]  __alloc_pages+0x1ec/0x4f0
[  133.877414][ T5381]  __folio_alloc+0xe/0x30
[  133.881771][ T5381]  vma_alloc_folio+0x4a3/0x900
[  133.886740][ T5381]  shmem_alloc_and_acct_folio+0x463/0xbc0
[  133.892581][ T5381]  shmem_get_folio_gfp+0x1361/0x3400
[  133.897903][ T5381]  shmem_read_mapping_page_gfp+0x99/0x2b0
[  133.903832][ T5381]  udmabuf_create+0x99b/0xfc0
[  133.908624][ T5381]  udmabuf_ioctl+0x1f3/0x300
[  133.913500][ T5381]  __se_sys_ioctl+0xfa/0x170
[  133.918126][ T5381]  do_syscall_64+0x4c/0xa0
[  133.922945][ T5381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.928864][ T5381] page last free stack trace:
[  133.933552][ T5381]  free_unref_page_prepare+0x8b4/0x9a0
[  133.939036][ T5381]  free_unref_page_list+0xbb/0x8e0
[  133.944179][ T5381]  release_pages+0x1fa6/0x2220
[  133.949069][ T5381]  tlb_flush_mmu+0x105/0x220
[  133.953710][ T5381]  tlb_finish_mmu+0xf5/0x220
[  133.958326][ T5381]  exit_mmap+0x384/0x960
[  133.962939][ T5381]  __mmput+0x118/0x3c0
[  133.967028][ T5381]  exit_mm+0x1fe/0x2d0
[  133.971126][ T5381]  do_exit+0x905/0x2480
[  133.975306][ T5381]  do_group_exit+0x217/0x2d0
[  133.979923][ T5381]  __x64_sys_exit_group+0x3b/0x40
[  133.984982][ T5381]  do_syscall_64+0x4c/0xa0
[  133.989443][ T5381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  133.995463][ T5381] ------------[ cut here ]------------
[  134.000942][ T5381] kernel BUG at mm/filemap.c:153!
[  134.006004][ T5381] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  134.012090][ T5381] CPU: 1 PID: 5381 Comm: syz.2.272 Not tainted syzkaller #0
[  134.019467][ T5381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  134.029549][ T5381] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80
[  134.035935][ T5381] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 20 f7 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 80 fc 94 8a e8 fb 0c 12 00
[  134.055578][ T5381] RSP: 0018:ffffc90003b8f618 EFLAGS: 00010046
[  134.061755][ T5381] RAX: 46d403661ef39f00 RBX: ffffea000144ec40 RCX: 46d403661ef39f00
[  134.069766][ T5381] RDX: 0000000000000002 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf13a0
[  134.077850][ T5381] RBP: ffffc90003b8f778 R08: ffffffff8e1ff42f R09: 1ffffffff1c3fe85
[  134.085854][ T5381] R10: dffffc0000000000 R11: fffffbfff1c3fe86 R12: dffffc0000000000
[  134.093877][ T5381] R13: dffffc0000000000 R14: ffff888076d248d8 R15: 1ffff92000771ed4
[  134.101879][ T5381] FS:  000055557e18a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  134.110833][ T5381] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.117438][ T5381] CR2: 0000200000000080 CR3: 0000000027d7c000 CR4: 00000000003526e0
[  134.125440][ T5381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  134.133433][ T5381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  134.141424][ T5381] Call Trace:
[  134.144718][ T5381]  <TASK>
[  134.147673][ T5381]  __filemap_remove_folio+0xbc/0x8a0
[  134.153069][ T5381]  ? __rwlock_init+0x140/0x140
[  134.157934][ T5381]  ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30
[  134.164982][ T5381]  ? _raw_spin_lock_irq+0xb7/0xf0
[  134.170026][ T5381]  ? _raw_spin_lock_irqsave+0x100/0x100
[  134.175600][ T5381]  ? __folio_cancel_dirty+0xc0/0x580
[  134.180996][ T5381]  filemap_remove_folio+0xed/0x2c0
[  134.186151][ T5381]  truncate_inode_folio+0x59/0x70
[  134.191218][ T5381]  shmem_undo_range+0x533/0x20c0
[  134.196195][ T5381]  ? shmem_truncate_range+0xb0/0xb0
[  134.201427][ T5381]  ? do_raw_spin_lock+0x128/0x2f0
[  134.206551][ T5381]  ? __rwlock_init+0x140/0x140
[  134.211522][ T5381]  shmem_evict_inode+0x25b/0xa80
[  134.216491][ T5381]  ? inode_wait_for_writeback+0x1df/0x220
[  134.222416][ T5381]  ? shmem_free_in_core_inode+0xb0/0xb0
[  134.228070][ T5381]  ? do_raw_spin_lock+0x128/0x2f0
[  134.233139][ T5381]  ? bit_waitqueue+0x30/0x30
[  134.237859][ T5381]  ? do_raw_spin_unlock+0x11d/0x230
[  134.243074][ T5381]  ? shmem_free_in_core_inode+0xb0/0xb0
[  134.248646][ T5381]  evict+0x4c9/0x8d0
[  134.252572][ T5381]  ? proc_nr_inodes+0x2f0/0x2f0
[  134.257445][ T5381]  ? do_raw_spin_unlock+0x11d/0x230
[  134.262958][ T5381]  ? _raw_spin_unlock+0x24/0x40
[  134.267826][ T5381]  ? iput+0x768/0x980
[  134.271835][ T5381]  __dentry_kill+0x431/0x650
[  134.276540][ T5381]  dentry_kill+0xb8/0x290
[  134.280896][ T5381]  ? dput+0x37/0x1d0
[  134.284814][ T5381]  dput+0xfa/0x1d0
[  134.288558][ T5381]  __fput+0x5e0/0x920
[  134.292739][ T5381]  task_work_run+0x1d0/0x260
[  134.297439][ T5381]  ? task_work_cancel+0x220/0x220
[  134.302488][ T5381]  ? exit_to_user_mode_loop+0x3b/0x110
[  134.308235][ T5381]  exit_to_user_mode_loop+0xe6/0x110
[  134.313551][ T5381]  exit_to_user_mode_prepare+0xee/0x180
[  134.319226][ T5381]  syscall_exit_to_user_mode+0x16/0x40
[  134.324798][ T5381]  do_syscall_64+0x58/0xa0
[  134.329593][ T5381]  ? clear_bhb_loop+0x60/0xb0
[  134.334638][ T5381]  ? clear_bhb_loop+0x60/0xb0
[  134.339426][ T5381]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  134.345389][ T5381] RIP: 0033:0x7fe12819c819
[  134.349822][ T5381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  134.369722][ T5381] RSP: 002b:00007ffdecd8bb48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  134.378166][ T5381] RAX: 0000000000000000 RBX: 00007ffdecd8bc30 RCX: 00007fe12819c819
[  134.386175][ T5381] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  134.394170][ T5381] RBP: 0000000000020a17 R08: 0000000000000001 R09: 0000000000000000
[  134.402169][ T5381] R10: 0000001b2ea20000 R11: 0000000000000246 R12: 00007ffdecd8bc70
[  134.410171][ T5381] R13: 00007fe128415fac R14: 0000000000020a97 R15: 00007fe128415fa0
[  134.418264][ T5381]  </TASK>
[  134.421321][ T5381] Modules linked in:
[  134.425253][ T5381] ---[ end trace 0000000000000000 ]---
[  134.430998][ T5381] RIP: 0010:filemap_unaccount_folio+0x5cf/0xa80
[  134.437285][ T5381] Code: 07 38 c1 0f 8c 19 fe ff ff 4c 89 e7 e8 ca f9 27 00 e9 0c fe ff ff e8 b0 ed d6 ff 48 89 df 48 c7 c6 20 f7 94 8a e8 11 0d 12 00 <0f> 0b e8 9a ed d6 ff 48 89 df 48 c7 c6 80 fc 94 8a e8 fb 0c 12 00
[  134.457108][ T5381] RSP: 0018:ffffc90003b8f618 EFLAGS: 00010046
[  134.463293][ T5381] RAX: 46d403661ef39f00 RBX: ffffea000144ec40 RCX: 46d403661ef39f00
[  134.471385][ T5381] RDX: 0000000000000002 RSI: ffffffff8a8c22a0 RDI: ffffffff8adf13a0
[  134.479470][ T5381] RBP: ffffc90003b8f778 R08: ffffffff8e1ff42f R09: 1ffffffff1c3fe85
[  134.487465][ T5381] R10: dffffc0000000000 R11: fffffbfff1c3fe86 R12: dffffc0000000000
[  134.495492][ T5381] R13: dffffc0000000000 R14: ffff888076d248d8 R15: 1ffff92000771ed4
[  134.503735][ T5381] FS:  000055557e18a500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  134.512956][ T5381] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  134.519566][ T5381] CR2: 0000200000000080 CR3: 0000000027d7c000 CR4: 00000000003526e0
[  134.527567][ T5381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  134.535569][ T5381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  134.543563][ T5381] Kernel panic - not syncing: Fatal exception
[  134.549979][ T5381] Kernel Offset: disabled
[  134.554333][ T5381] Rebooting in 86400 seconds..