last executing test programs:

13.150186275s ago: executing program 4 (id=206):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000"], 0x0, 0x28}, 0x28)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

11.111802227s ago: executing program 3 (id=209):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff)
madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x3, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x2000001}}, {0x0, 0x14}}}, 0xa0)
syz_clone3(&(0x7f0000000300)={0x100000400, &(0x7f0000000040), 0x0, 0x0, {0x11}, &(0x7f00000005c0)=""/199, 0xc7, &(0x7f00000006c0)=""/235, &(0x7f0000000240)=[0x0], 0x1, {r2}}, 0x58)

11.008614759s ago: executing program 4 (id=210):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x6048800)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
userfaultfd(0x801)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)

10.156817808s ago: executing program 3 (id=212):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000240)={&(0x7f0000000180)="484a1e9f0a296a1edda568735b175adba4a3682cabf4e8373bb7e7daf0dce87850ec769df0796230b08ed89fce6abe202dec401a3a8e7b87d7eaa3fda0984550f74589859ef7a5f516a584fa15cfcb2e45c1bb2c33905d9b03fec894fdb285c03c99a80e1e8f4a0401b76c6328d378f237ee3370dd0d60ffabbca116eb882e12e042b371f637108a6b2bbb5fd7e8464ed528b333bf1d959d3b92511f72de2f6990a0e22652b82e3d17a4bbe4fa89a8e783fe4ceec3d0bb", &(0x7f0000000300)=""/137, &(0x7f00000003c0), 0x0, 0x1, r0}, 0x38)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014004000000035c1f61c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cee0090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc5", 0xb2}], 0x1}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000700)="ef16", 0x0}, 0x50)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="00022cbd7000fddbdf25080000000c00028005000d0001"], 0x20}, 0x1, 0x0, 0x0, 0x10805}, 0x44049)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

8.955986029s ago: executing program 4 (id=214):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x4000c474, 0x1, @qam={0xffffffff, 0x14, 0x13}})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)

7.898824983s ago: executing program 4 (id=217):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1}, 0x0)

7.692780498s ago: executing program 4 (id=218):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x5c, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x8, 0x95, 0x0, 0x8, 0x8e, 0x5}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.324350957s ago: executing program 3 (id=221):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

5.41519013s ago: executing program 0 (id=224):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10)
sendmmsg$inet6(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)='l', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000001f40)="88", 0x1}], 0x1}}], 0x2, 0x4001015)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045)
io_uring_setup(0x1b7e, 0x0)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, 0x0, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

5.335386387s ago: executing program 2 (id=225):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x6048800)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x3)
dup(r1)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socket$phonet_pipe(0x23, 0x5, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, &(0x7f0000000380), 0x4)
setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040)={{}, 0x6e}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00009ef000/0x4000)=nil, 0x4000, 0x9)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
userfaultfd(0x801)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0)
syz_open_dev$vbi(0x0, 0x0, 0x2)

5.324483935s ago: executing program 1 (id=226):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r0, 0x0, 0x0, 0x2}, 0x20)

5.068220432s ago: executing program 1 (id=227):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x44004)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r3)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]})
close_range(r2, 0xffffffffffffffff, 0x0)

4.828685333s ago: executing program 0 (id=228):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/unix\x00')
pread64(r1, &(0x7f0000002180)=""/4105, 0x137, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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")

4.385708459s ago: executing program 2 (id=229):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000)
openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2})

3.719916538s ago: executing program 0 (id=230):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x1}, 0x0)

3.655929748s ago: executing program 4 (id=231):
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x10, 0x0, 0x1, 0x0, 0x0, 0x20004090}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x5, 0x8, 0x8005, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0x6}, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00')
mknodat$loop(r2, &(0x7f0000000000)='./file0\x00', 0x4, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x26c)

3.633467424s ago: executing program 1 (id=232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x4000c474, 0x1, @qam={0xffffffff, 0x14, 0x13}})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r4, 0xc0046d00, &(0x7f00000000c0)=0x8)
socket$inet6_sctp(0xa, 0x1, 0x84)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7)
kcmp(r1, r5, 0x2bec7f44dd5c01a, r3, r2)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x2001, 0x4)

3.574669444s ago: executing program 3 (id=233):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet(0x2b, 0x801, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
utimensat(r2, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={{}, {0x0, 0xea60}}, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/sysvipc/sem\x00', 0x0, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x140d, 0xd2b5594142800135}, 0x10}}, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000540)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0), &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000100), 0x0, 0x2, 0x7})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x400)
r7 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002)
ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0)

3.36806772s ago: executing program 0 (id=234):
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @vbi={0x6, 0x2, 0xc7a, 0x38414762, [0x3, 0x7], [0x2, 0x6], 0x2}})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000fbff0000"], 0x0, 0x28}, 0x28)
r2 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet(r2, &(0x7f0000006d40)=[{{&(0x7f0000000100)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}, {{&(0x7f0000000840)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002a00)=[{&(0x7f0000000880)='*', 0x1}], 0x1}}], 0x2, 0x48000)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000380), &(0x7f00000003c0)=0x4)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a00000609000200"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}}, 0x4084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840)

2.674944175s ago: executing program 1 (id=235):
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000e00)=[@timestamping={{0x14, 0x1, 0x25, 0x10}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0xfffffff8}}, @mark={{0x14, 0x1, 0x24, 0x7fffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x8000000000000000}}], 0xd8}}], 0x1, 0x48090)
syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYRESDEC=0x0, @ANYRES64, @ANYRESOCT=0x0, @ANYRESDEC], 0x101)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x140}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.666344043s ago: executing program 2 (id=236):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000071000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = syz_open_dev$evdev(0x0, 0x40002, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r3], 0x0, 0x4a}, 0x28)
io_uring_setup(0x2f00, &(0x7f0000000700)={0x0, 0xe8e2, 0x2, 0x20001, 0x2d6})
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, 0x0, 0x0)
r4 = socket$kcm(0x2, 0x200000000000001, 0x106)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_ro(r5, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
socket$kcm(0x10, 0x2, 0x4)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB], 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x4008080)

2.218313369s ago: executing program 0 (id=237):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x6, &(0x7f0000000280)=[{0x6, 0x80, 0x2, 0xb}, {0x7, 0x1, 0x0, 0x7}, {0x1000, 0xc, 0x60, 0x7bf}, {0x3, 0xb7, 0x81}, {0x0, 0x8, 0x7}, {0x2, 0x2, 0xe, 0x1000}]})
r3 = syz_io_uring_setup(0x47a8, &(0x7f0000000740)={0x0, 0x46b4, 0x800, 0x80000, 0x200}, &(0x7f0000000180), &(0x7f0000000700))
syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e8, 0x2, 0x3, 0x10f, 0x0, r3}, 0x0, 0x0)
syz_io_uring_setup(0x10278e, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x0, 0x200004}, &(0x7f0000000200), &(0x7f00000000c0))
io_uring_enter(r3, 0x87, 0x0, 0x1, 0x0, 0x0)

1.484556227s ago: executing program 2 (id=238):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
ioctl$sock_SIOCSPGRP(r1, 0x8902, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749})
ppoll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x540}, {r3, 0x1400}, {r2, 0x400}, {0xffffffffffffffff, 0x8}, {0xffffffffffffffff, 0xc0}], 0x5, &(0x7f0000000400)={0x77359400}, 0x0, 0x0)
syz_io_uring_setup(0x7676, &(0x7f0000000100)={0x0, 0x22e8, 0x2, 0x3, 0x10f}, 0x0, 0x0)

1.364415837s ago: executing program 3 (id=239):
openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_1\x00'})
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x4040041}, 0x4000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x6f67}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r3 = fsopen(&(0x7f0000000bc0)='binder\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r3, 0x0, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
fsmount(r3, 0x0, 0x1)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0)

884.358467ms ago: executing program 2 (id=240):
openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0xef, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r4, 0x301, 0x70bd25, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006)

882.846897ms ago: executing program 1 (id=241):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0)
syz_emit_ethernet(0x5c, 0x0, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
io_uring_enter(0xffffffffffffffff, 0x3516, 0x0, 0x0, 0x0, 0x0)
bind$rxrpc(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040))
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x8, 0x95, 0x0, 0x8, 0x8e, 0x5}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)

275.838556ms ago: executing program 3 (id=242):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=<r0=>0x0)
r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/unix\x00')
pread64(r1, &(0x7f0000002180)=""/4105, 0x137, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
setsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f0000000000)=0x8, 0x4)
syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2)
r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$802154_raw(r4, &(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14)
socket$inet6_udp(0xa, 0x2, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r5, 0x0)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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")

211.465115ms ago: executing program 1 (id=243):
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x44004)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r3)
r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[<r5=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000680)={r6, 0x1ff, 0x0, 0x1, 0x3, [<r7=>0x0, 0x0, 0x0, <r8=>0x0], [0x800020], [0x0, 0x1001000, 0x1], [0x0, 0x0, 0xfffffffffefffffc, 0x9]})
ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r7, 0x0, 0x0, r8], [0x2b8]})
close_range(r2, 0xffffffffffffffff, 0x0)

638.45µs ago: executing program 0 (id=244):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2)
sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
r5 = socket(0x10, 0x3, 0x0)
close(r4)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x635e, 0x5, 0xffffffff, 0x10000}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x4008810)
sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000)
ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})

0s ago: executing program 2 (id=245):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002)
ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x4000c474, 0x1, @qam={0xffffffff, 0x14, 0x13}})
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r4, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x9}, 0x1c)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.32' (ED25519) to the list of known hosts.
[   48.832657][ T4171] cgroup: Unknown subsys name 'net'
[   48.969151][ T4171] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.136272][ T4171] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   51.990244][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   52.016471][ T4186] chnl_net:caif_netlink_parms(): no params data found
[   52.051100][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   52.146149][ T4185] chnl_net:caif_netlink_parms(): no params data found
[   52.174225][ T4193] chnl_net:caif_netlink_parms(): no params data found
[   52.184834][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.192492][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.200535][ T4186] device bridge_slave_0 entered promiscuous mode
[   52.213489][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.220606][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.228827][ T4186] device bridge_slave_1 entered promiscuous mode
[   52.269607][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.276791][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.285363][ T4187] device bridge_slave_0 entered promiscuous mode
[   52.312758][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.323116][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.330307][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.338278][ T4187] device bridge_slave_1 entered promiscuous mode
[   52.363113][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.372788][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.380032][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.388437][ T4184] device bridge_slave_0 entered promiscuous mode
[   52.414521][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.421638][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.430065][ T4184] device bridge_slave_1 entered promiscuous mode
[   52.438415][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.473345][ T4186] team0: Port device team_slave_0 added
[   52.480800][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.501160][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.508492][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.516348][ T4185] device bridge_slave_0 entered promiscuous mode
[   52.532089][ T4186] team0: Port device team_slave_1 added
[   52.550356][ T4187] team0: Port device team_slave_0 added
[   52.558336][ T4187] team0: Port device team_slave_1 added
[   52.564317][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.571414][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.579851][ T4185] device bridge_slave_1 entered promiscuous mode
[   52.588742][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.605038][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.620153][ T4193] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.627361][ T4193] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.634983][ T4193] device bridge_slave_0 entered promiscuous mode
[   52.648235][ T4193] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.655439][ T4193] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.663311][ T4193] device bridge_slave_1 entered promiscuous mode
[   52.711073][ T4193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.721019][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.728472][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.754563][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.766589][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   52.773538][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.800220][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   52.812788][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.824545][ T4184] team0: Port device team_slave_0 added
[   52.832006][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.842685][ T4193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   52.858804][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.865954][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.892658][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.908644][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   52.915664][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   52.941821][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   52.953803][ T4184] team0: Port device team_slave_1 added
[   52.977829][ T4193] team0: Port device team_slave_0 added
[   53.009486][ T4193] team0: Port device team_slave_1 added
[   53.046386][ T4185] team0: Port device team_slave_0 added
[   53.056899][ T4187] device hsr_slave_0 entered promiscuous mode
[   53.064556][ T4187] device hsr_slave_1 entered promiscuous mode
[   53.078103][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.085193][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.111161][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.123531][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.130630][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.156901][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.170173][ T4186] device hsr_slave_0 entered promiscuous mode
[   53.177129][ T4186] device hsr_slave_1 entered promiscuous mode
[   53.183574][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.194024][ T4186] Cannot create hsr debugfs directory
[   53.200641][ T4185] team0: Port device team_slave_1 added
[   53.218832][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.226281][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.252725][ T4193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.275498][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.282557][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.308774][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.321280][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.328621][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.355418][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.371899][ T4193] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.378949][ T4193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.405306][ T4193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.458016][ T4184] device hsr_slave_0 entered promiscuous mode
[   53.465107][ T4184] device hsr_slave_1 entered promiscuous mode
[   53.471589][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.479211][ T4184] Cannot create hsr debugfs directory
[   53.535503][ T4185] device hsr_slave_0 entered promiscuous mode
[   53.542053][ T4185] device hsr_slave_1 entered promiscuous mode
[   53.549177][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.556882][ T4185] Cannot create hsr debugfs directory
[   53.580576][ T4193] device hsr_slave_0 entered promiscuous mode
[   53.587461][ T4193] device hsr_slave_1 entered promiscuous mode
[   53.594813][ T4193] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.602370][ T4193] Cannot create hsr debugfs directory
[   53.754585][ T1324] Bluetooth: hci4: command 0x0409 tx timeout
[   53.754584][ T3520] Bluetooth: hci3: command 0x0409 tx timeout
[   53.755071][ T3520] Bluetooth: hci2: command 0x0409 tx timeout
[   53.760930][ T1324] Bluetooth: hci0: command 0x0409 tx timeout
[   53.781783][ T1324] Bluetooth: hci1: command 0x0409 tx timeout
[   53.870606][ T4187] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   53.882981][ T4187] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   53.893093][ T4187] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   53.903659][ T4187] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   53.936144][ T4193] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   53.957433][ T4193] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   53.972462][ T4193] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   53.981997][ T4193] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   54.051724][ T4184] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   54.065074][ T4184] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   54.077031][ T4184] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   54.096097][ T4184] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   54.144266][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   54.165698][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.184544][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   54.198498][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   54.210141][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   54.227828][ T4193] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.238214][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.248282][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.284878][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   54.301568][ T4185] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   54.319051][ T4193] 8021q: adding VLAN 0 to HW filter on device team0
[   54.326423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.336003][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.345382][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.352753][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.361320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.369466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.379161][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.395335][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.404752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.413288][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.420453][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.429028][ T4185] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   54.438888][ T4185] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   54.460570][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.469824][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.480041][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.487141][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.496284][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.507059][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.516033][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.524866][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.531924][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.539716][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.549322][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.558116][ T4185] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   54.570288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.580615][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.604804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.614653][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.627618][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.640018][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.650440][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.669705][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.678338][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.686572][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.699045][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.708377][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.717500][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.739318][ T4187] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.749995][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.767491][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   54.774643][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.783054][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.792596][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.801500][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.811278][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.820036][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.829182][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.843343][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.857282][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.871771][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.890922][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.900551][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.910451][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.917590][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.927348][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.936191][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.944829][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.951905][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.965517][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.977585][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.986376][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.010287][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.022939][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.033683][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.051537][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.060837][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.071656][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.080301][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.089082][ T4186] 8021q: adding VLAN 0 to HW filter on device team0
[   55.119953][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.129942][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.138952][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.148683][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.159609][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.171555][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.183682][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.190833][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.205372][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.222427][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.255215][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.262802][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.273031][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.284450][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.293572][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.300719][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.308670][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.318074][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.340735][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0
[   55.349736][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.359008][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.368098][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.378175][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.392797][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.401913][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   55.411419][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   55.421011][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.442935][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   55.452758][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   55.462004][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   55.470806][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   55.482912][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.491184][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.512141][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   55.523632][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   55.542059][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   55.553373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   55.570187][ T4187] device veth0_vlan entered promiscuous mode
[   55.583611][ T4185] 8021q: adding VLAN 0 to HW filter on device team0
[   55.592494][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   55.602578][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   55.611376][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   55.621867][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   55.630774][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   55.678050][ T4193] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.686348][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   55.697256][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   55.714572][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.721669][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[   55.731382][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   55.749709][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   55.760339][  T144] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.767473][  T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[   55.775535][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   55.785001][ T4187] device veth1_vlan entered promiscuous mode
[   55.806285][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   55.815840][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   55.824996][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   55.833524][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   55.844604][ T4236] Bluetooth: hci2: command 0x041b tx timeout
[   55.851704][ T4236] Bluetooth: hci1: command 0x041b tx timeout
[   55.868679][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   55.876638][ T4236] Bluetooth: hci0: command 0x041b tx timeout
[   55.884168][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.894216][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   55.902469][ T4236] Bluetooth: hci4: command 0x041b tx timeout
[   55.917847][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   55.921388][ T4236] Bluetooth: hci3: command 0x041b tx timeout
[   55.951113][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   55.973605][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   55.991623][ T4187] device veth0_macvtap entered promiscuous mode
[   55.999767][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   56.015309][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   56.026002][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.036049][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.064790][ T4187] device veth1_macvtap entered promiscuous mode
[   56.079775][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.090921][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   56.099299][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   56.108028][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   56.116710][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   56.125418][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   56.133566][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.142373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.165054][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.175933][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   56.192481][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.201899][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.220981][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.252242][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   56.262221][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   56.274541][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.283318][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.314936][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.323279][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.337992][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.349906][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.361846][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.370696][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.380730][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.389267][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   56.398601][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   56.409160][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.417134][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.426204][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.434160][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.442095][ T4184] device veth0_vlan entered promiscuous mode
[   56.457075][ T4193] device veth0_vlan entered promiscuous mode
[   56.478079][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   56.487605][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   56.497470][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   56.505749][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   56.513215][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   56.521516][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   56.534731][ T4184] device veth1_vlan entered promiscuous mode
[   56.542763][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.551902][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.560936][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.570026][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.580117][ T4186] device veth0_vlan entered promiscuous mode
[   56.599046][ T4193] device veth1_vlan entered promiscuous mode
[   56.611722][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.646170][ T4186] device veth1_vlan entered promiscuous mode
[   56.666053][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.674533][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.682875][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.691366][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.704870][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   56.712796][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   56.724609][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.733208][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.760281][ T4193] device veth0_macvtap entered promiscuous mode
[   56.814095][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   56.822181][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   56.832126][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   56.841158][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.850266][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.859629][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   56.868716][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   56.879828][ T4193] device veth1_macvtap entered promiscuous mode
[   56.895373][ T4186] device veth0_macvtap entered promiscuous mode
[   56.910487][ T4184] device veth0_macvtap entered promiscuous mode
[   56.926160][ T4184] device veth1_macvtap entered promiscuous mode
[   56.928974][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.950346][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   56.955867][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.972507][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   56.985455][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.999907][ T4185] device veth0_vlan entered promiscuous mode
[   57.016315][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.029452][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.038757][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   57.047287][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   57.055652][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   57.063370][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.073940][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.082730][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   57.091780][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   57.100526][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   57.108775][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   57.117158][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.128538][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.138645][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.149433][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.160598][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.168462][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.180393][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.191849][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.219180][ T4186] device veth1_macvtap entered promiscuous mode
[   57.232365][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.241539][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.250673][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.259549][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.269857][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.282965][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.293144][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.304776][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.315955][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.325577][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.334949][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.343649][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.352546][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.376922][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.385729][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.400077][ T4193] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.409292][ T4193] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.418238][ T4193] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.426989][ T4193] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.446473][ T4185] device veth1_vlan entered promiscuous mode
[   57.457518][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.460513][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.476089][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.481578][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.493960][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.505930][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.516082][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.527892][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.540032][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.568134][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   57.576471][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   57.590239][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   57.601982][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.613116][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.624863][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.635543][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.645661][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   57.656872][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.667847][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.706943][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   57.725711][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   57.741762][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.753521][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.763387][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.772363][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.793308][ T4185] device veth0_macvtap entered promiscuous mode
[   57.835422][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   57.853689][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   57.889878][ T4185] device veth1_macvtap entered promiscuous mode
[   57.914808][ T4236] Bluetooth: hci0: command 0x040f tx timeout
[   57.920932][ T4236] Bluetooth: hci1: command 0x040f tx timeout
[   57.928145][ T4236] Bluetooth: hci2: command 0x040f tx timeout
[   57.934514][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.946667][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   57.962317][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.980973][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   57.994662][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.002290][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.017332][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.027967][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.037842][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   58.049177][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.051465][ T4236] Bluetooth: hci3: command 0x040f tx timeout
[   58.060552][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.072991][ T4236] Bluetooth: hci4: command 0x040f tx timeout
[   58.086931][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   58.095728][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   58.104927][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   58.112695][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   58.126473][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   58.269911][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.371945][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.426024][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.483062][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.536101][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.587725][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.637561][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   58.653520][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   58.667546][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.696995][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   58.706067][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   58.723167][ T4185] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.732665][ T4185] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.747304][ T4185] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.758096][ T4185] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.831882][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.843858][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.859563][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.865996][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.285138][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   59.294728][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   59.303618][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   59.312491][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   59.321363][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   59.330240][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   59.377976][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   59.386984][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   59.395995][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   59.404963][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!!
[   60.194256][   T13] Bluetooth: hci2: command 0x0419 tx timeout
[   60.201024][   T13] Bluetooth: hci1: command 0x0419 tx timeout
[   60.207121][   T13] Bluetooth: hci0: command 0x0419 tx timeout
[   60.213646][   T13] Bluetooth: hci3: command 0x0419 tx timeout
[   60.262788][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.270750][   T13] Bluetooth: hci4: command 0x0419 tx timeout
[   60.280993][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.377833][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.395390][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.413179][ T4278] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   60.440199][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.454865][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.485096][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.492702][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.529721][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.569890][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.575316][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.592504][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.603008][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   60.612258][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.655209][ T4274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.686716][ T4282] comedi comedi3: no devices specified
[   60.688748][ T4274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   60.742947][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   60.901398][ T4289] netlink: 'syz.3.10': attribute type 1 has an invalid length.
[   60.955721][ T4290] netlink: 'syz.4.9': attribute type 12 has an invalid length.
[   61.907935][ T4296] device macvlan2 entered promiscuous mode
[   62.135858][ T4280] loop1: detected capacity change from 0 to 32768
[   62.244294][ T4280] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by syz.1.8 (4280)
[   63.051846][ T4308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12'.
[   63.138441][ T4303] loop0: detected capacity change from 0 to 32768
[   63.185925][ T4280] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   63.214262][ T4280] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   63.691547][ T4280] BTRFS info (device loop1): use zstd compression, level 3
[   63.721026][ T4303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.11 (4303)
[   63.890800][ T4280] BTRFS info (device loop1): using free space tree
[   63.897432][ T4280] BTRFS info (device loop1): has skinny extents
[   63.980230][ T4303] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[   64.034021][ T4303] BTRFS info (device loop0): setting nodatacow, compression disabled
[   64.042567][ T4303] BTRFS info (device loop0): setting datasum, datacow enabled
[   64.096152][ T4303] BTRFS info (device loop0): force clearing of disk cache
[   64.151548][ T4280] BTRFS error (device loop1): open_ctree failed: -12
[   64.165590][ T4303] BTRFS info (device loop0): enabling ssd optimizations
[   64.214936][ T4303] BTRFS info (device loop0): using spread ssd allocation scheme
[   64.225307][ T4303] BTRFS info (device loop0): turning on sync discard
[   64.243955][ T4303] BTRFS info (device loop0): turning off barriers
[   64.257563][ T4303] BTRFS info (device loop0): enabling auto defrag
[   64.276044][ T4303] BTRFS info (device loop0): not using ssd optimizations
[   64.355481][ T4351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'.
[   64.364798][ T4351] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'.
[   64.445179][ T4303] BTRFS info (device loop0): not using spread ssd allocation scheme
[   64.614389][ T4303] BTRFS info (device loop0): using free space tree
[   64.806191][ T4303] BTRFS info (device loop0): has skinny extents
[   65.119493][ T4303] BTRFS error (device loop0): open_ctree failed: -12
[   66.236165][ T4388] loop1: detected capacity change from 0 to 32768
[   66.343351][ T4388] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.23 (4388)
[   66.427639][ T4388] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   66.436463][ T4388] BTRFS info (device loop1): using free space tree
[   66.442988][ T4388] BTRFS info (device loop1): has skinny extents
[   66.663635][ T4405] loop3: detected capacity change from 0 to 8
[   66.785634][ T4405] =======================================================
[   66.785634][ T4405] WARNING: The mand mount option has been deprecated and
[   66.785634][ T4405]          and is ignored by this kernel. Remove the mand
[   66.785634][ T4405]          option from the mount to silence this warning.
[   66.785634][ T4405] =======================================================
[   66.820733][    C0] vkms_vblank_simulate: vblank timer overrun
[   67.737199][ T4388] BTRFS info (device loop1): enabling ssd optimizations
[   68.711913][ T4417] netlink: 144 bytes leftover after parsing attributes in process `syz.3.25'.
[   68.764077][   T26] audit: type=1326 audit(1772092084.025:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954063c629 code=0x7ffc0000
[   69.450780][   T26] audit: type=1326 audit(1772092084.095:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954063c629 code=0x7ffc0000
[   69.475909][   T26] audit: type=1326 audit(1772092084.515:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f954063c629 code=0x7ffc0000
[   69.520502][   T26] audit: type=1326 audit(1772092084.775:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4416 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f954063c629 code=0x7ffc0000
[   69.542463][    C0] vkms_vblank_simulate: vblank timer overrun
[   69.578476][   T26] audit: type=1326 audit(1772092084.845:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f95405fcece code=0x7ffc0000
[   69.741834][   T26] audit: type=1326 audit(1772092085.005:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4437 comm="syz.3.25" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f954063c629 code=0x7ffc0000
[   69.763661][    C0] vkms_vblank_simulate: vblank timer overrun
[   71.282640][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.289296][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.764188][ T4352] wlan1: Trigger new scan to find an IBSS to join
[   72.365350][ T4481] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   72.468291][ T4486] loop0: detected capacity change from 0 to 512
[   73.298693][ T4486] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.44: inode has both inline data and extents flags
[   73.523884][ T4486] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.44: couldn't read orphan inode 15 (err -117)
[   73.550988][ T4486] EXT4-fs (loop0): mounted filesystem without journal. Opts: prjquota,delalloc,,errors=continue. Quota mode: writeback.
[   74.033486][ T4486] IPv6: Can't replace route, no match found
[   74.117370][ T4471] loop4: detected capacity change from 0 to 32768
[   74.472061][ T4471] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[   74.511529][ T4471] JBD2: Ignoring recovery information on journal
[   75.226885][ T4471] JBD2: recovery failed
[   75.231191][ T4471] (syz.4.39,4471,1):ocfs2_journal_load:1105 ERROR: Failed to load journal!
[   75.242222][ T4471] (syz.4.39,4471,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5
[   75.251599][ T4471] (syz.4.39,4471,1):ocfs2_check_volume:2493 ERROR: status = -5
[   75.259300][ T4471] (syz.4.39,4471,1):ocfs2_mount_volume:1824 ERROR: status = -5
[   75.336454][ T4471] (syz.4.39,4471,0):ocfs2_fill_super:1177 ERROR: status = -5
[   76.941060][   T21] cfg80211: failed to load regulatory.db
[   76.975002][    T9] wlan1: Trigger new scan to find an IBSS to join
[   77.155303][ T4523] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.379197][ T4533] netlink: 32 bytes leftover after parsing attributes in process `syz.3.55'.
[   77.940530][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'.
[   78.540159][ T4246] wlan1: Creating new IBSS network, BSSID ce:d8:52:f3:94:f9
[   78.814076][   T21] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   79.762493][ T4559] loop2: detected capacity change from 0 to 512
[   80.627790][ T4565] loop3: detected capacity change from 0 to 1024
[   80.653858][   T21] usb 2-1: Using ep0 maxpacket: 16
[   80.666635][ T4559] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[   80.773926][ T4559] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.784865][   T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   80.807697][   T21] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   80.903881][   T21] usb 2-1: string descriptor 0 read error: -71
[   80.912383][   T21] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   80.930628][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.166657][   T21] usb 2-1: can't set config #1, error -71
[   81.503455][   T21] usb 2-1: USB disconnect, device number 2
[   83.048936][ T4581] netlink: 32 bytes leftover after parsing attributes in process `syz.1.69'.
[   83.172346][ T4580] hfsplus: b-tree write err: -5, ino 4
[   84.754932][ T4594] device syzkaller0 entered promiscuous mode
[   85.017594][ T4606] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size
[   85.896515][ T4173] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   86.414903][ T4173] usb 1-1: Using ep0 maxpacket: 8
[   86.420086][ T4228] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   86.658888][ T4173] usb 1-1: device descriptor read/all, error -71
[   86.738266][ T4621] device syzkaller0 entered promiscuous mode
[   86.913892][ T4321] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   87.154312][ T4321] usb 2-1: Using ep0 maxpacket: 16
[   87.275694][ T4321] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.402745][ T4321] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   87.663932][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.709606][ T4228] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.735963][ T4646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.85'.
[   87.814413][ T4228] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.880259][ T4650] loop0: detected capacity change from 0 to 64
[   87.917018][ T4228] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.963706][ T4228] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.056901][ T4655] device syzkaller0 entered promiscuous mode
[   88.060549][ T4228] usb 5-1: config 0 descriptor??
[   88.084142][ T4321] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   88.111738][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.120054][ T4321] usb 2-1: Product: syz
[   88.125175][ T4321] usb 2-1: Manufacturer: syz
[   88.129865][ T4321] usb 2-1: SerialNumber: syz
[   89.955692][ T4321] usb 2-1: 0:2 : does not exist
[   89.988911][ T4675] Zero length message leads to an empty skb
[   89.994090][ T4228] usbhid 5-1:0.0: can't add hid device: -71
[   90.001086][ T4228] usbhid: probe of 5-1:0.0 failed with error -71
[   90.033901][ T4228] usb 5-1: USB disconnect, device number 2
[   90.094454][ T4675] device syzkaller0 entered promiscuous mode
[   90.148342][ T4687] netlink: 32 bytes leftover after parsing attributes in process `syz.4.98'.
[   90.213961][   T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   90.283566][ T4688] netlink: 24 bytes leftover after parsing attributes in process `syz.4.98'.
[   90.388697][ T4321] usb 2-1: USB disconnect, device number 3
[   90.758459][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   91.159440][   T21] usb 3-1: Using ep0 maxpacket: 8
[   91.263872][ T4697] loop4: detected capacity change from 0 to 4096
[   91.350773][ T4705] netlink: 32 bytes leftover after parsing attributes in process `syz.1.104'.
[   92.165179][   T21] usb 3-1: string descriptor 0 read error: -71
[   92.178960][   T21] usb 3-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[   92.332963][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.349558][   T21] usb 3-1: config 0 descriptor??
[   92.384072][   T21] usb 3-1: can't set config #0, error -71
[   92.521993][   T21] usb 3-1: USB disconnect, device number 2
[   94.177480][ T4267] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   94.635826][ T4733] netlink: 32 bytes leftover after parsing attributes in process `syz.2.113'.
[   94.732411][ T4734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.113'.
[   94.813861][ T4267] usb 2-1: Using ep0 maxpacket: 16
[   94.943232][ T4267] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   94.954893][ T4267] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.274814][ T4267] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   96.383999][ T4321] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.586289][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.613808][ T4267] usb 2-1: Product: syz
[   96.628296][ T4267] usb 2-1: Manufacturer: syz
[   96.632917][ T4267] usb 2-1: SerialNumber: syz
[   97.372698][ T4755] loop3: detected capacity change from 0 to 131072
[   97.422215][ T4758] loop1: detected capacity change from 0 to 131072
[   97.553946][ T4267] usb 2-1: can't set config #1, error -71
[   97.572104][ T4755] F2FS-fs (loop3): invalid crc value
[   97.572637][ T4758] F2FS-fs (loop1): invalid crc value
[   97.578387][ T4321] usb 3-1: Using ep0 maxpacket: 8
[   97.590004][ T4267] usb 2-1: USB disconnect, device number 4
[   97.597880][ T4758] F2FS-fs (loop1): Found nat_bits in checkpoint
[   97.634261][ T4755] F2FS-fs (loop3): Found nat_bits in checkpoint
[   97.866235][ T4755] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[   97.922325][ T4755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[   97.941171][ T4758] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   98.532769][ T4758] F2FS-fs (loop1): access invalid blkaddr:67123201
[   98.539669][ T4758] CPU: 1 PID: 4758 Comm: syz.1.121 Not tainted syzkaller #0
[   98.546965][ T4758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   98.557031][ T4758] Call Trace:
[   98.560318][ T4758]  <TASK>
[   98.563247][ T4758]  dump_stack_lvl+0x188/0x250
[   98.567948][ T4758]  ? show_regs_print_info+0x20/0x20
[   98.573153][ T4758]  ? f2fs_get_next_page_offset+0x6a0/0x6a0
[   98.578979][ T4758]  ? unlock_page+0x17c/0x1f0
[   98.583577][ T4758]  f2fs_is_valid_blkaddr+0xc7e/0x1250
[   98.588959][ T4758]  f2fs_get_read_data_page+0x2c4/0x580
[   98.594434][ T4758]  ? f2fs_get_block+0x2a0/0x2a0
[   98.599306][ T4758]  f2fs_find_data_page+0x1c2/0x5d0
[   98.604421][ T4758]  __f2fs_find_entry+0x57e/0xd60
[   98.609393][ T4758]  f2fs_lookup+0x22e/0x970
[   98.613811][ T4758]  ? f2fs_encrypted_symlink_getattr+0x50/0x50
[   98.619878][ T4758]  ? __rwlock_init+0x140/0x140
[   98.624650][ T4758]  ? _raw_spin_unlock+0x24/0x40
[   98.629504][ T4758]  ? d_alloc+0x1e7/0x250
[   98.633759][ T4758]  lookup_one_qstr_excl+0x10e/0x240
[   98.638963][ T4758]  filename_create+0x23a/0x470
[   98.643732][ T4758]  ? kern_path_create+0x190/0x190
[   98.648769][ T4758]  ? __virt_addr_valid+0x3c6/0x470
[   98.653899][ T4758]  do_mkdirat+0xa5/0x5b0
[   98.658149][ T4758]  ? vfs_mkdir+0x570/0x570
[   98.662570][ T4758]  ? getname_flags+0x1fe/0x500
[   98.667350][ T4758]  __x64_sys_mkdirat+0x85/0x90
[   98.672134][ T4758]  do_syscall_64+0x4c/0xa0
[   98.676564][ T4758]  ? clear_bhb_loop+0x30/0x80
[   98.681258][ T4758]  ? clear_bhb_loop+0x30/0x80
[   98.685941][ T4758]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[   98.691937][ T4758] RIP: 0033:0x7f5878ca4507
[   98.696496][ T4758] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   98.716117][ T4758] RSP: 002b:00007f5876efee58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[   98.724551][ T4758] RAX: ffffffffffffffda RBX: 00007f5876efeee0 RCX: 00007f5878ca4507
[   98.732530][ T4758] RDX: 00000000000001ff RSI: 0000200000000280 RDI: 00000000ffffff9c
[   98.740510][ T4758] RBP: 0000200000000300 R08: 00002000000000c0 R09: 0000000000000000
[   98.748515][ T4758] R10: 0000200000000300 R11: 0000000000000246 R12: 0000200000000280
[   98.756500][ T4758] R13: 00007f5876efeea0 R14: 0000000000000000 R15: 0000000000000000
[   98.763913][ T4321] usb 3-1: device descriptor read/all, error -71
[   98.764474][ T4758]  </TASK>
[   99.051552][ T4779] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[   99.917891][ T4790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.127'.
[   99.929804][ T4790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'.
[   99.940279][ T4790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'.
[  102.477462][ T4823] netlink: 32 bytes leftover after parsing attributes in process `syz.0.136'.
[  103.890770][ T4839] netlink: 32 bytes leftover after parsing attributes in process `syz.2.141'.
[  103.943208][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'.
[  103.953989][ T4840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.141'.
[  104.999600][ T4267] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  105.013399][ T4852] loop0: detected capacity change from 0 to 1024
[  105.194404][ T4852] EXT4-fs (loop0): Ignoring removed bh option
[  105.207998][ T4852] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  105.353905][ T4173] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  105.703850][ T4173] usb 3-1: Using ep0 maxpacket: 16
[  105.786456][ T4852] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,bh,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nouid32,quota,user_xattr,stripe=0x0000000000000009,dioread_nolock,,errors=continue. Quota mode: writeback.
[  105.874069][ T4173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.890362][ T4173] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.934033][ T4267] usb 2-1: config 0 has an invalid interface number: 133 but max is 0
[  105.942226][ T4267] usb 2-1: config 0 has no interface number 0
[  106.104142][ T4173] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  106.123503][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.123994][ T4267] usb 2-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  106.155442][ T4173] usb 3-1: Product: syz
[  106.169366][ T4173] usb 3-1: Manufacturer: syz
[  106.173915][ T4267] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.179470][ T4173] usb 3-1: SerialNumber: syz
[  106.181952][ T4267] usb 2-1: Product: syz
[  106.213847][ T4267] usb 2-1: Manufacturer: syz
[  106.218476][ T4267] usb 2-1: SerialNumber: syz
[  106.265541][ T4267] usb 2-1: config 0 descriptor??
[  106.525475][ T4267] keyspan 2-1:0.133: Keyspan 1 port adapter converter detected
[  106.560232][ T4267] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 81
[  106.712835][ T4173] usb 3-1: 0:2 : does not exist
[  107.272492][ T4173] usb 3-1: USB disconnect, device number 5
[  107.315061][ T4267] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 1
[  107.326703][ T4267] keyspan 2-1:0.133: found no endpoint descriptor for endpoint 2
[  107.348521][ T4864] loop4: detected capacity change from 0 to 32768
[  107.372516][ T4267] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  107.520166][ T1108] usb 2-1: USB disconnect, device number 5
[  107.557084][ T1108] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  107.613800][ T4864] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.148 (4864)
[  107.930450][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  108.199594][ T1108] keyspan 2-1:0.133: device disconnected
[  108.283996][ T4864] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  108.292745][ T4864] BTRFS info (device loop4): setting nodatasum
[  108.299111][ T4864] BTRFS info (device loop4): force zlib compression, level 3
[  108.306778][ T4864] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  108.353853][ T4864] BTRFS info (device loop4): use lzo compression, level 0
[  108.507090][ T4885] loop3: detected capacity change from 0 to 40427
[  108.525620][ T4864] BTRFS info (device loop4): turning on flush-on-commit
[  108.532588][ T4864] BTRFS info (device loop4): enabling auto defrag
[  108.539684][ T4864] BTRFS info (device loop4): max_inline at 4096
[  108.546169][ T4864] BTRFS info (device loop4): using free space tree
[  108.558862][ T4864] BTRFS info (device loop4): has skinny extents
[  108.608697][ T4298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  108.701713][ T4885] F2FS-fs (loop3): invalid crc value
[  108.749797][ T4885] F2FS-fs (loop3): Found nat_bits in checkpoint
[  108.777345][ T4885] F2FS-fs (loop3): Start checkpoint disabled!
[  108.801279][ T4885] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  108.801461][ T4897] tipc: Started in network mode
[  108.839079][ T4864] BTRFS info (device loop4): enabling ssd optimizations
[  108.852259][   T26] audit: type=1800 audit(1772092124.115:8): pid=4885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.152" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  109.175306][ T4897] tipc: Node identity 2ad649cd29db, cluster identity 4711
[  109.182569][ T4897] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  109.192470][ T4897] device syzkaller0 entered promiscuous mode
[  109.204463][   T26] audit: type=1800 audit(1772092124.235:9): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.152" name="bus" dev="loop3" ino=10 res=0 errno=0
[  109.308562][ T4896] tipc: Resetting bearer <eth:syzkaller0>
[  109.342041][ T4896] tipc: Disabling bearer <eth:syzkaller0>
[  109.614183][ T4246] attempt to access beyond end of device
[  109.614183][ T4246] loop3: rw=2049, want=40976, limit=40427
[  112.264337][ T4321] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  112.764681][ T4321] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.774879][ T4321] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  113.050701][ T4969] loop0: detected capacity change from 0 to 40427
[  113.413480][ T4973] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  113.481788][ T4974] device syzkaller0 entered promiscuous mode
[  113.568771][ T4969] F2FS-fs (loop0): invalid crc value
[  113.572587][ T4973] tipc: Resetting bearer <eth:syzkaller0>
[  113.589910][ T4970] tipc: Resetting bearer <eth:syzkaller0>
[  113.599216][ T4969] F2FS-fs (loop0): Found nat_bits in checkpoint
[  113.636236][ T4969] F2FS-fs (loop0): Start checkpoint disabled!
[  113.650158][ T4969] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  113.655422][ T4321] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  113.684061][ T4321] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.692090][ T4321] usb 4-1: Product: syz
[  113.713620][ T4321] usb 4-1: Manufacturer: syz
[  113.728879][ T4321] usb 4-1: SerialNumber: syz
[  113.799667][   T26] audit: type=1800 audit(1772092129.015:10): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.166" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  113.836292][ T4970] tipc: Disabling bearer <eth:syzkaller0>
[  113.853165][   T26] audit: type=1800 audit(1772092129.085:11): pid=4979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.166" name="bus" dev="loop0" ino=10 res=0 errno=0
[  114.104042][ T4321] usb 4-1: 0:2 : does not exist
[  114.854305][ T4233] attempt to access beyond end of device
[  114.854305][ T4233] loop0: rw=2049, want=40976, limit=40427
[  114.925146][ T4321] usb 4-1: USB disconnect, device number 2
[  115.134771][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  116.823732][    C1] sched: RT throttling activated
[  118.310596][ T5027] loop0: detected capacity change from 0 to 40427
[  118.643671][ T5027] F2FS-fs (loop0): invalid crc value
[  118.664583][ T5027] F2FS-fs (loop0): Found nat_bits in checkpoint
[  118.698744][ T5027] F2FS-fs (loop0): Start checkpoint disabled!
[  118.719547][ T5027] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  118.767069][   T26] audit: type=1800 audit(1772092134.035:12): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.181" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  119.210391][   T26] audit: type=1800 audit(1772092134.335:13): pid=5036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="bus" dev="loop0" ino=10 res=0 errno=0
[  120.382993][ T5037] attempt to access beyond end of device
[  120.382993][ T5037] loop0: rw=2049, want=40976, limit=40427
[  121.019264][ T5052] loop1: detected capacity change from 0 to 2048
[  121.091453][ T5054] tipc: Started in network mode
[  121.096440][ T5054] tipc: Node identity 6e65d661a259, cluster identity 4711
[  121.104587][ T5054] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  121.112496][ T5054] device syzkaller0 entered promiscuous mode
[  121.122489][ T5052] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  121.175322][ T5054] tipc: Resetting bearer <eth:syzkaller0>
[  121.321656][ T5053] tipc: Resetting bearer <eth:syzkaller0>
[  121.450794][ T5053] tipc: Disabling bearer <eth:syzkaller0>
[  123.098996][ T5077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'.
[  123.984409][ T5079] loop1: detected capacity change from 0 to 40427
[  123.991166][ T4321] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  124.018524][ T5080] loop2: detected capacity change from 0 to 8
[  124.120794][ T5079] F2FS-fs (loop1): invalid crc value
[  124.234033][ T4321] usb 1-1: Using ep0 maxpacket: 16
[  124.282270][ T5079] F2FS-fs (loop1): Found nat_bits in checkpoint
[  124.306127][ T5079] F2FS-fs (loop1): Start checkpoint disabled!
[  124.321827][ T5079] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  124.354054][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  124.371247][ T4321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  124.447863][   T26] audit: type=1800 audit(1772092139.715:14): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.193" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[  125.358995][   T26] audit: type=1800 audit(1772092140.435:15): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.193" name="bus" dev="loop1" ino=10 res=0 errno=0
[  125.393995][ T4321] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  125.447118][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.456275][ T4321] usb 1-1: Product: syz
[  125.460566][ T4321] usb 1-1: Manufacturer: syz
[  125.465622][ T4321] usb 1-1: SerialNumber: syz
[  126.475560][ T4556] attempt to access beyond end of device
[  126.475560][ T4556] loop1: rw=2049, want=40976, limit=40427
[  126.487206][ T4321] usb 1-1: 0:2 : does not exist
[  126.530009][ T4321] usb 1-1: USB disconnect, device number 4
[  127.492536][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.629408][ T4321] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  128.893905][ T4321] usb 2-1: Using ep0 maxpacket: 8
[  128.963227][ T5133] netlink: 32 bytes leftover after parsing attributes in process `syz.4.206'.
[  130.093957][ T4321] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64
[  130.169123][ T4321] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.177435][ T4321] usb 2-1: Product: syz
[  130.181739][ T4321] usb 2-1: Manufacturer: syz
[  130.187176][ T4321] usb 2-1: SerialNumber: syz
[  130.201153][ T4321] usb 2-1: config 0 descriptor??
[  130.734423][ T4321] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state.
[  130.813857][ T4321] pctv452e: pctv452e_power_ctrl: 1
[  130.813857][ T4321] 
[  130.821210][ T4321] usb 2-1: selecting invalid altsetting 3
[  130.827458][ T4321] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22
[  130.827458][ T4321] 
[  130.838875][ T4321] dvb-usb: bulk message failed: -22 (5/0)
[  130.855280][ T4321] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  130.884319][ T4321] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600)
[  130.884892][ T5142] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  130.893053][ T4321] usb 2-1: media controller created
[  130.908851][ T4321] dvb-usb: bulk message failed: -22 (8/0)
[  130.914935][ T4321] pctv452e: I2C error -22; AA 01  A0 01 14 -> aa 01 31 04 a0 01 14
[  130.923162][ T4321] dvb-usb: MAC address reading failed.
[  131.006994][ T5142] tipc: Resetting bearer <eth:syzkaller0>
[  131.060760][ T5145] loop3: detected capacity change from 0 to 40427
[  131.108754][ T5141] tipc: Disabling bearer <eth:syzkaller0>
[  131.130079][ T5145] F2FS-fs (loop3): invalid crc value
[  131.156267][ T5145] F2FS-fs (loop3): Found nat_bits in checkpoint
[  131.179701][ T5145] F2FS-fs (loop3): Start checkpoint disabled!
[  131.200875][ T5145] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  131.299407][   T26] audit: type=1800 audit(1772092146.565:16): pid=5145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.209" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[  131.723775][   T26] audit: type=1800 audit(1772092146.655:17): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.209" name="bus" dev="loop3" ino=10 res=0 errno=0
[  132.874120][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.874227][ T4321] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  132.880537][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.064842][ T4374] attempt to access beyond end of device
[  133.064842][ T4374] loop3: rw=2049, want=40976, limit=40427
[  133.128809][ T4321] DVB: Unable to find symbol stb0899_attach()
[  133.135247][ T4321] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600'
[  134.343923][ T4321] rc_core: IR keymap rc-tt-1500 not found
[  134.349687][ T4321] Registered IR keymap rc-empty
[  134.395521][ T4321] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0
[  134.447606][ T4321] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input5
[  134.499320][ T4321] dvb-usb: schedule remote query interval to 100 msecs.
[  134.518898][ T4321] pctv452e: pctv452e_power_ctrl: 0
[  134.518898][ T4321] 
[  134.630692][ T4321] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected.
[  134.646641][ T5192] tipc: Started in network mode
[  134.727747][ T5192] tipc: Node identity d2b996746a92, cluster identity 4711
[  134.739049][ T5192] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  134.836108][ T5192] tipc: Resetting bearer <eth:syzkaller0>
[  135.359251][ T5194] device syzkaller0 entered promiscuous mode
[  135.392121][ T5194] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  135.502601][ T5191] tipc: Resetting bearer <eth:syzkaller0>
[  135.530287][ T4321] usb 2-1: USB disconnect, device number 6
[  135.706413][ T5191] tipc: Disabling bearer <eth:syzkaller0>
[  137.487234][ T4321] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected.
[  137.688022][ T5221] loop0: detected capacity change from 0 to 8
[  138.230803][   T21] tipc: Node number set to 3089864308
[  139.386753][ T5241] netlink: 32 bytes leftover after parsing attributes in process `syz.0.234'.
[  140.396643][ T4298] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  141.933159][ T5279] loop3: detected capacity change from 0 to 8
[  142.584962][ T4233] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  143.129785][ T5276] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4)
[  143.224095][ T5284] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  143.268308][ T5284] device syzkaller0 entered promiscuous mode
[  143.274618][ T5282] ==================================================================
[  143.282876][ T5282] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370
[  143.290063][ T5282] Read of size 8 at addr ffff888028f51e18 by task syz.2.245/5282
[  143.297761][ T5282] 
[  143.300069][ T5282] CPU: 0 PID: 5282 Comm: syz.2.245 Not tainted syzkaller #0
[  143.307326][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  143.317364][ T5282] Call Trace:
[  143.320624][ T5282]  <TASK>
[  143.323534][ T5282]  dump_stack_lvl+0x188/0x250
[  143.328195][ T5282]  ? show_regs_print_info+0x20/0x20
[  143.333371][ T5282]  ? _printk+0xda/0x130
[  143.337502][ T5282]  ? dvb_device_open+0xc6/0x370
[  143.342342][ T5282]  ? load_image+0x400/0x400
[  143.346821][ T5282]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  143.352266][ T5282]  print_address_description+0x60/0x2d0
[  143.357789][ T5282]  ? dvb_device_open+0xc6/0x370
[  143.362620][ T5282]  kasan_report+0xdf/0x130
[  143.367015][ T5282]  ? dvb_device_open+0xc6/0x370
[  143.371843][ T5282]  dvb_device_open+0xc6/0x370
[  143.376494][ T5282]  ? do_raw_spin_unlock+0x11d/0x230
[  143.381674][ T5282]  chrdev_open+0x5c5/0x6a0
[  143.386072][ T5282]  ? cd_forget+0x160/0x160
[  143.390560][ T5282]  ? fsnotify_perm+0x3a7/0x560
[  143.395397][ T5282]  ? cd_forget+0x160/0x160
[  143.399927][ T5282]  do_dentry_open+0x7ff/0xf80
[  143.404596][ T5282]  path_openat+0x26f5/0x2fa0
[  143.409182][ T5282]  ? verify_lock_unused+0x140/0x140
[  143.414362][ T5282]  ? slab_post_alloc_hook+0x4c/0x380
[  143.419626][ T5282]  ? do_filp_open+0x410/0x410
[  143.424292][ T5282]  do_filp_open+0x1e2/0x410
[  143.428781][ T5282]  ? vfs_tmpfile+0x300/0x300
[  143.433357][ T5282]  ? _raw_spin_unlock+0x24/0x40
[  143.438231][ T5282]  ? alloc_fd+0x598/0x630
[  143.442541][ T5282]  do_sys_openat2+0x150/0x4b0
[  143.447195][ T5282]  ? __lock_acquire+0x7d10/0x7d10
[  143.452203][ T5282]  ? do_sys_open+0xe0/0xe0
[  143.456597][ T5282]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  143.462557][ T5282]  ? lock_chain_count+0x20/0x20
[  143.467384][ T5282]  ? vtime_user_exit+0x2c8/0x3e0
[  143.472300][ T5282]  __x64_sys_openat+0x135/0x160
[  143.477136][ T5282]  do_syscall_64+0x4c/0xa0
[  143.481568][ T5282]  ? clear_bhb_loop+0x30/0x80
[  143.486661][ T5282]  ? clear_bhb_loop+0x30/0x80
[  143.491340][ T5282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.497211][ T5282] RIP: 0033:0x7f84c607bece
[  143.501869][ T5282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  143.521461][ T5282] RSP: 002b:00007f84c4314b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  143.529857][ T5282] RAX: ffffffffffffffda RBX: 00007f84c43156c0 RCX: 00007f84c607bece
[  143.537810][ T5282] RDX: 0000000000040002 RSI: 00007f84c4314c00 RDI: ffffffffffffff9c
[  143.545760][ T5282] RBP: 00007f84c4314c00 R08: 0000000000000000 R09: 0000000000000000
[  143.553718][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  143.561690][ T5282] R13: 00007f84c6335038 R14: 00007f84c6334fa0 R15: 00007ffd2696c118
[  143.569653][ T5282]  </TASK>
[  143.572652][ T5282] 
[  143.574954][ T5282] Allocated by task 1:
[  143.578991][ T5282]  __kasan_kmalloc+0xb5/0xf0
[  143.583561][ T5282]  dvb_register_device+0x311/0x2170
[  143.588733][ T5282]  dvb_register_frontend+0x645/0x920
[  143.593993][ T5282]  vidtv_bridge_probe+0x9a1/0xf70
[  143.598991][ T5282]  platform_probe+0x137/0x1c0
[  143.603649][ T5282]  really_probe+0x284/0xc80
[  143.608132][ T5282]  __driver_probe_device+0x18c/0x330
[  143.613424][ T5282]  driver_probe_device+0x4f/0x420
[  143.618424][ T5282]  __driver_attach+0x46b/0x670
[  143.623162][ T5282]  bus_for_each_dev+0x182/0x1f0
[  143.627989][ T5282]  bus_add_driver+0x30a/0x5a0
[  143.632654][ T5282]  driver_register+0x32d/0x430
[  143.637407][ T5282]  vidtv_bridge_init+0x39/0x70
[  143.642156][ T5282]  do_one_initcall+0x272/0x730
[  143.646929][ T5282]  do_initcall_level+0x137/0x1f0
[  143.651848][ T5282]  do_initcalls+0x4b/0x90
[  143.656155][ T5282]  kernel_init_freeable+0x3e9/0x570
[  143.661331][ T5282]  kernel_init+0x19/0x1b0
[  143.665637][ T5282]  ret_from_fork+0x1f/0x30
[  143.670031][ T5282] 
[  143.672334][ T5282] Freed by task 5276:
[  143.676286][ T5282]  kasan_set_track+0x4b/0x70
[  143.680850][ T5282]  kasan_set_free_info+0x1f/0x40
[  143.685767][ T5282]  ____kasan_slab_free+0xd5/0x110
[  143.690770][ T5282]  slab_free_freelist_hook+0xea/0x170
[  143.696119][ T5282]  kfree+0xef/0x2a0
[  143.699901][ T5282]  dvb_device_open+0x2e7/0x370
[  143.704643][ T5282]  chrdev_open+0x5c5/0x6a0
[  143.709039][ T5282]  do_dentry_open+0x7ff/0xf80
[  143.713695][ T5282]  path_openat+0x26f5/0x2fa0
[  143.718273][ T5282]  do_filp_open+0x1e2/0x410
[  143.722752][ T5282]  do_sys_openat2+0x150/0x4b0
[  143.727404][ T5282]  __x64_sys_openat+0x135/0x160
[  143.732248][ T5282]  do_syscall_64+0x4c/0xa0
[  143.736642][ T5282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  143.742512][ T5282] 
[  143.744812][ T5282] The buggy address belongs to the object at ffff888028f51e00
[  143.744812][ T5282]  which belongs to the cache kmalloc-256 of size 256
[  143.758839][ T5282] The buggy address is located 24 bytes inside of
[  143.758839][ T5282]  256-byte region [ffff888028f51e00, ffff888028f51f00)
[  143.772003][ T5282] The buggy address belongs to the page:
[  143.777708][ T5282] page:ffffea0000a3d400 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888028f50e00 pfn:0x28f50
[  143.789135][ T5282] head:ffffea0000a3d400 order:1 compound_mapcount:0
[  143.795701][ T5282] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  143.803671][ T5282] raw: 00fff00000010200 ffffea00017e5388 ffffea0000af8588 ffff888016c41b40
[  143.812274][ T5282] raw: ffff888028f50e00 000000000010000f 00000001ffffffff 0000000000000000
[  143.820863][ T5282] page dumped because: kasan: bad access detected
[  143.827287][ T5282] page_owner tracks the page as allocated
[  143.832983][ T5282] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2789, ts 9660854315, free_ts 0
[  143.851115][ T5282]  get_page_from_freelist+0x1bbd/0x1ca0
[  143.856661][ T5282]  __alloc_pages+0x1ee/0x480
[  143.861236][ T5282]  new_slab+0xc0/0x4b0
[  143.865298][ T5282]  ___slab_alloc+0x80a/0xdd0
[  143.869866][ T5282]  kmem_cache_alloc_trace+0x1a5/0x2a0
[  143.875215][ T5282]  kthread+0x10b/0x520
[  143.879347][ T5282]  ret_from_fork+0x1f/0x30
[  143.883748][ T5282] page_owner free stack trace missing
[  143.889101][ T5282] 
[  143.891405][ T5282] Memory state around the buggy address:
[  143.897009][ T5282]  ffff888028f51d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  143.905046][ T5282]  ffff888028f51d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  143.913085][ T5282] >ffff888028f51e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.921122][ T5282]                             ^
[  143.925947][ T5282]  ffff888028f51e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  143.933996][ T5282]  ffff888028f51f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  143.942029][ T5282] ==================================================================
[  143.950070][ T5282] Disabling lock debugging due to kernel taint
[  143.956326][    C0] vkms_vblank_simulate: vblank timer overrun
[  143.963206][ T5282] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  143.970407][ T5282] CPU: 0 PID: 5282 Comm: syz.2.245 Tainted: G    B             syzkaller #0
[  143.979063][ T5282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  143.989098][ T5282] Call Trace:
[  143.992367][ T5282]  <TASK>
[  143.995276][ T5282]  dump_stack_lvl+0x188/0x250
[  143.999936][ T5282]  ? show_regs_print_info+0x20/0x20
[  144.005112][ T5282]  ? load_image+0x400/0x400
[  144.009601][ T5282]  panic+0x2e5/0x810
[  144.013476][ T5282]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  144.019609][ T5282]  ? bpf_jit_dump+0xd0/0xd0
[  144.024096][ T5282]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  144.029967][ T5282]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  144.035836][ T5282]  ? _raw_spin_unlock+0x40/0x40
[  144.040662][ T5282]  ? dvb_device_open+0xc6/0x370
[  144.045489][ T5282]  check_panic_on_warn+0x80/0xa0
[  144.050427][ T5282]  ? dvb_device_open+0xc6/0x370
[  144.055256][ T5282]  end_report+0x6d/0xf0
[  144.059395][ T5282]  kasan_report+0x102/0x130
[  144.063874][ T5282]  ? dvb_device_open+0xc6/0x370
[  144.068707][ T5282]  dvb_device_open+0xc6/0x370
[  144.073370][ T5282]  ? do_raw_spin_unlock+0x11d/0x230
[  144.078562][ T5282]  chrdev_open+0x5c5/0x6a0
[  144.082966][ T5282]  ? cd_forget+0x160/0x160
[  144.087361][ T5282]  ? fsnotify_perm+0x3a7/0x560
[  144.092105][ T5282]  ? cd_forget+0x160/0x160
[  144.096495][ T5282]  do_dentry_open+0x7ff/0xf80
[  144.101151][ T5282]  path_openat+0x26f5/0x2fa0
[  144.105726][ T5282]  ? verify_lock_unused+0x140/0x140
[  144.110904][ T5282]  ? slab_post_alloc_hook+0x4c/0x380
[  144.116222][ T5282]  ? do_filp_open+0x410/0x410
[  144.120886][ T5282]  do_filp_open+0x1e2/0x410
[  144.125365][ T5282]  ? vfs_tmpfile+0x300/0x300
[  144.129932][ T5282]  ? _raw_spin_unlock+0x24/0x40
[  144.134757][ T5282]  ? alloc_fd+0x598/0x630
[  144.139073][ T5282]  do_sys_openat2+0x150/0x4b0
[  144.143821][ T5282]  ? __lock_acquire+0x7d10/0x7d10
[  144.148831][ T5282]  ? do_sys_open+0xe0/0xe0
[  144.153221][ T5282]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  144.159177][ T5282]  ? lock_chain_count+0x20/0x20
[  144.164011][ T5282]  ? vtime_user_exit+0x2c8/0x3e0
[  144.168929][ T5282]  __x64_sys_openat+0x135/0x160
[  144.173760][ T5282]  do_syscall_64+0x4c/0xa0
[  144.178152][ T5282]  ? clear_bhb_loop+0x30/0x80
[  144.182807][ T5282]  ? clear_bhb_loop+0x30/0x80
[  144.187456][ T5282]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  144.193323][ T5282] RIP: 0033:0x7f84c607bece
[  144.197715][ T5282] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  144.217395][ T5282] RSP: 002b:00007f84c4314b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  144.225786][ T5282] RAX: ffffffffffffffda RBX: 00007f84c43156c0 RCX: 00007f84c607bece
[  144.233747][ T5282] RDX: 0000000000040002 RSI: 00007f84c4314c00 RDI: ffffffffffffff9c
[  144.241805][ T5282] RBP: 00007f84c4314c00 R08: 0000000000000000 R09: 0000000000000000
[  144.249762][ T5282] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd
[  144.257718][ T5282] R13: 00007f84c6335038 R14: 00007f84c6334fa0 R15: 00007ffd2696c118
[  144.265671][ T5282]  </TASK>
[  144.268772][ T5282] Kernel Offset: disabled
[  144.273088][ T5282] Rebooting in 86400 seconds..