last executing test programs:

17.855781113s ago: executing program 2 (id=160):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002a00), r0)
sendmsg$NFC_CMD_ACTIVATE_TARGET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r1, 0x1, 0xf0bd28, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x884)

17.246249221s ago: executing program 2 (id=161):
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket(0x2, 0x80805, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x13, &(0x7f0000000200)=0x1, 0x4)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x8c, 0x30, 0x80d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x800}, @TCA_CT_LABELS_MASK={0x14, 0x8, "37a55358cbfec0e9d412939d8317fcdc"}, @TCA_CT_PARMS={0x18, 0x1, {0x2, 0x8, 0xffffffffffffffff, 0x4, 0x8}}, @TCA_CT_LABELS={0x14, 0x7, "a31a5744c98714e0c10894427408df27"}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0)
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x4004885)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000004c00)=""/102392, 0x18ff8)
socket(0x2b, 0xd, 0x4)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x4000001, 0x24e, 0x20, 0x2f, &(0x7f0000000e40)})
socket$netlink(0x10, 0x3, 0x4)
pwrite64(r0, &(0x7f00000011c0), 0x0, 0x7)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4044004)

15.651029455s ago: executing program 4 (id=164):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300090000000000840000000a000000000000000c2ac27f884e5c3066ec0212305e95ea558f8685d5d97f4817dc2195046e9eb9079aaa29f7121859ea6afd19832815f6487c50ee06c95f34fd3dff8533bb8499ac9dafa6d4fbde16cd35f5b20ca2cdc4360dd99630044c3a9111cc435767feab6d568ed66bf2120beed88408010f67c8ee27321a8a03f623fa510e64e1b87dc9ae1ed017076fab8d04f319d51b619c8eb349bb475f96f483e9a5ff957cfaaf", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50)
creat(&(0x7f0000000000)='./file0\x00', 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$loop(0x0, 0xd78, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ae8000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r5, 0xe66ee000)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000017c0)=ANY=[@ANYRESHEX=r6], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x8081)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
madvise(&(0x7f0000477000/0x3000)=nil, 0x3000, 0x15)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f8, 0x508, 0x508, 0x438, 0x0, 0x438, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x1, 0x5}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [0x0, 0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0x0, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x2c, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x8], 0xa, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758)

15.511552267s ago: executing program 2 (id=167):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000180), 0xc06620, 0x4)
r1 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r1, 0x0, 0x0)

11.371715747s ago: executing program 4 (id=175):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
r1 = getpid()
r2 = syz_open_procfs(r1, &(0x7f00000001c0)='net/fib_triestat\x00')
read$FUSE(r2, &(0x7f0000004480)={0x2020}, 0x2020)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38)

10.182485824s ago: executing program 0 (id=177):
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='stat\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = syz_open_dev$vbi(0x0, 0x1, 0x2)
ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x20, 0x13, 0x5, 0x2, 0x0, {0x7, 0x0, 0x0, 0x0, 0x24000}}, 0x20}}, 0x0)
ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x141083, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_GET_INTERFACE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40008d0)
r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00010002030300000000000000"], 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318)

8.621068836s ago: executing program 4 (id=180):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

8.593151786s ago: executing program 0 (id=181):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, &(0x7f0000000180))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044)
sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f00000003c0)={0x4, 0x1, 0xdb96, {0x77359400}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "c40bfd856b4f9355"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8044004)

8.35375456s ago: executing program 4 (id=183):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./file0\x00', 0xa00010, &(0x7f0000000840)=ANY=[@ANYBLOB='nodecompose,decompose,nobarrier,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6c733d69736f383835392d310000000072726965722c00bcd0f0b5c4e2957974ff5d7ea3c3dcee087e4983684e8a4c4e4e87b134e30ce77162b12885b964b3506ff3eae0f3599447b17861d19be78079e5dd7bdc7f1eb36e31ac14de48349767164f5f6431bbdeaef96a4f2bce64b5cfa76ce3a2c4302374bc5535d7e2eb8dfb2e5d58a37b7e37836597c21f51bcdf6df4cad825cfd9ef5ee9e89e04b15cd3cea9e152d67b9a7eedc5dfe6d85a3ce7c342da8cc969b552197cb8bcc4a1009f38f4a85b7c742101ba5bc03115feca2b994c699812"], 0x6, 0x635, &(0x7f0000000c80)="$eJzs3c1rHOcdB/DvrFZryQVHSezELYGKGNJSUVsvKK16iVtK0SGUkB56FrYcC6+VIClFCaWo79BTD/kD0oNuPRV6N6Tn9parjoFCLznppjKzs9LaWil6s1ZqPx/z7PM888w888xvZ2Zndi0mwP+t+Yk0n6TI/MTb62V9a3OmvbU5c6Vubicpy42k2clSLCfFZ8nddFK+Xk6s5y8OWs8nS3Pvfv7l1hedWrNO1fyNw5Y7mo06ZTzJUJ0/o/Wn4/Q33CmU/dzr398xFLtbWAbsVjdwMGg7+2wcZ/FTHrfARVB0Pjf3GUuuJhmprwNSnx0a5zu6s3essxwAAABcUi9sZzvruTbocQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBlUj//v6hTo1seT9F9/n+rnpa6fKk9GfQAAAAAAAAAAOAMfHM721nPtW59p6h+83+9qlyvXr+WD7OaxazkdtazkLWsZSVTScZ6OmqtL6ytrUwdYcnpvktOn8/2AgAAAAAAAMD/qN9kfu/3fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGKShOi86xaJO17vlsTSaSUaStMr5NpJ/dcuXRNFv4pPzHwcAAACcysgJlnlhO9tZz7Vufaeo7vlfqe6XR/JhlrOWpaylncXcr++hy7v+xtbmTHtrc+Zxmfb3+8P/HGsYVY+7X0P0W/PNao7RPMhSNeV27lWDuZ9GtWTpZnc8/cf163JMxVu1I47sfp2XK/vzQd8iDMRYFZHh3YhM1mMro/Hi4ZH4yneneeiaptLY/ebn+nOI+dU6L7fnDxcz5o1UkZju2fteOTwSybf+/tefP2wvP3r4YHXi4mzSCT27T8z0ROLVSx2J5jHnn6wicWO3Pp+f5GeZyHjeyUqW8ossZC2L2anbF+r9uXwdOzxSd5+qvfNVI2nV70vnLHqUMY3nx1VpIa9Xy17LUoq8n/tZzJvVv+lM5XuZzWzmet7hGweOu9q26qhvHO+ov/XtujCa5I91Pmidj9Qyri/2xLX3nDtWtfVO2YvSS2d/bmx+oy6U6/htnV8Mz0ZiqicSLx8eib9Ux8Zqe/nRysOFDw7of+OZ+ht1Xu5xv79QnxLl/vJSRuozydN7R9n28u5Z5ul4tepfXDptjX1tN6q2ougeqT898Eht1ddw+3uartpe7ds2U7Xd7Gl76nor76e9ez0EwAV29TtXW6P/Hv3n6Kejvxt9OPr2yI+ufP/Ka60M/2P4B83JoTcarxV/y6f51d79PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHKrH338aKHdXlzpX2gc3HS2haJ+kM95rEth0IXuQwRP3eHdC7E5l7owlKRfU/0WneThosClcGft8Qd3Vj/6+LtLjxfeW3xvcXl4dnZucm72zZk7D5bai5Od10GPEnge9j70+7cXF+oBmwAAAAAAAAAAAECO9vc2O/X//zvxXxoMehsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy21+Is0nKTI1eXuyrG9tzrTL1C3vzdlM0mgkxS+T4rPkbjopYz3dFW8dsJ5Plube/fzLrS/2+mpW85ed1vkpbNQp40mG6vys+rt36v6K3S0sA3arGzgYtP8GAAD//+IHAOM=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000040), 0x3, 0x4a6, &(0x7f0000000a40)="$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")
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000080)={0x1})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
ioperm(0x2, 0x3, 0x7)
statx(0xffffffffffffffff, 0x0, 0x4000, 0x12, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
getdents64(r4, &(0x7f0000002f40)=""/4098, 0x1002)

8.325218641s ago: executing program 0 (id=185):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0300090000000000840000000a000000000000000c2ac27f884e5c3066ec0212305e95ea558f8685d5d97f4817dc2195046e9eb9079aaa29f7121859ea6afd19832815f6487c50ee06c95f34fd3dff8533bb8499ac9dafa6d4fbde16cd35f5b20ca2cdc4360dd99630044c3a9111cc435767feab6d568ed66bf2120beed88408010f67c8ee27321a8a03f623fa510e64e1b87dc9ae1ed017076fab8d04f319d51b619c8eb349bb475f96f483e9a5ff957cfaaf", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB='\x00'/28], 0x50)
creat(&(0x7f0000000000)='./file0\x00', 0x50)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0), 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_dev$loop(0x0, 0xd78, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x8, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000ae8000/0x4000)=nil, 0x4000, 0x1000002, 0x40010, r5, 0xe66ee000)
r6 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000017c0)=ANY=[@ANYRESHEX=r6], 0x38}, 0x1, 0x0, 0x0, 0x20854}, 0x8081)
bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0)
madvise(&(0x7f0000477000/0x3000)=nil, 0x3000, 0x15)
r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x6f8, 0x508, 0x508, 0x438, 0x0, 0x438, 0x650, 0x650, 0x650, 0x650, 0x650, 0x6, 0x0, {[{{@ipv6={@private2, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff000000], [0xff000000, 0xffffff00, 0x0, 0xffffff00], 'vlan1\x00', 'veth1\x00', {0xff}, {0xff}, 0x6, 0x3, 0x3, 0x14}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x1, 0x5}}}, {{@ipv6={@remote, @local, [0x0, 0xffffffff], [0x0, 0xff000000], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x4}, 0x0, 0x198, 0x1d8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv6=@remote, [], @ipv6=@private1, [0x0, 0xff000000, 0xffffffff], @ipv4=@multicast2, [0x0, 0xffffffff, 0xffffffff, 0xffffffff], @ipv4=@empty, [0x0, 0x0, 0xff000000, 0xff], 0x0, 0x0, 0x42, 0x4e22, 0x4e24, 0x4e20, 0x4e24, 0x0, 0x23ccf3e9fd2b5143}, 0x0, 0x80, 0x0, 0x4e20, 0x4e24, 0x4e23}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@empty, @ipv6=@private2, 0x2c, 0xfe}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xc}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x3, 0x8], 0xa, 0x0, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758)

7.233749496s ago: executing program 1 (id=187):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003040)=[{{&(0x7f0000000680)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000280)="b3fe10", 0x3}], 0x1}}], 0x2, 0xc044)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
write$binfmt_misc(r0, &(0x7f0000000300), 0x5b0)

6.866028171s ago: executing program 4 (id=188):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000100)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc2, 0xf8, 0xecaa, 0x5886, 0x9, 0x0, 0x10000008, 'syz1\x00'})
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r7 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r7, 0x84, 0x4, 0x0, &(0x7f0000000140))
bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6)
io_setup(0x8, &(0x7f00000002c0)=<r8=>0x0)
io_submit(r8, 0x1, &(0x7f0000000a80)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0300ffff0000", 0x6}])

6.776283813s ago: executing program 3 (id=189):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'dummy0\x00', @local})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180))
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002cbd70000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r5, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0)

6.591817435s ago: executing program 0 (id=190):
r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb)
bind$ax25(r0, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = syz_open_dev$media(&(0x7f0000000080), 0x10001, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, 0x0)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$xdp(0x2c, 0x3, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

5.760360117s ago: executing program 3 (id=191):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00')
read$FUSE(r1, &(0x7f0000004480)={0x2020}, 0x2020)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38)

5.515915551s ago: executing program 2 (id=192):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{}, {0x0, 0x3938700}}, 0x0)
r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0)
sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)={0x1c8, 0x1, 0xa, 0x101, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x5}, [@generic="843f756aea4f47da2981474e578dcd5f532374a17d1c67c7fcf5503f8878ebaea7613f2f4df4e04774c11c87de3f431e89a7bb3d0f4171d290f9413c8038345fe620b88a1be0499b08dc6203c4cee0ef800756b649a3b694a40d70ea83f198f8466eaac522e65cf017170dbf074b4ac266611df291a010477e09ea57c35d9bf2dd1ac5b08b6db4ac249dae46cdadc67ecf4650e2bd384881643682e99fe3348d3c09fc72e421a1a0a1e540f3c8a0ee033710bd0f3039a2b56ed05a66a19386a4211d854552c4005427ebe570f5c20f532bd1ac631a7051cc", @typed={0x14, 0x128, 0x0, 0x0, @ipv6=@private1}, @typed={0x14, 0x108, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="b3078d156bc33eda6a516b295496a6dd779bfc604285f54bf2e9fa9f06b932c451120de9847ffb004d7dc19f46bef93e61aa102e1c5292d19c0a2594de788952d2d2ae02b160568ec5b8a81202d49eded568e37cb16fad04bac275b777d12aff6ca413338c31cf3bef34aa346c67bede7a7abdd3d50209fc88ce5da3c6db53d416b27e76003a703620b21b611cf7a990baa41b1e6271ac9cbe698d053490206a508bcfb2fca0ed9d7a158781fb7ecd3b97"]}, 0x1c8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0xffffffffffffffda, 0x0, {0xfd}}, 0x18)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001380)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x40000)
sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0)
write(r4, &(0x7f0000004200)='t', 0x1)
sendfile(r4, r0, 0x0, 0x40001)

4.952247729s ago: executing program 0 (id=193):
socket$kcm(0x10, 0x2, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b75000905832270"], 0x0)

4.421478446s ago: executing program 3 (id=194):
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000)
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000080)=0x7)

4.208285249s ago: executing program 1 (id=195):
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
getsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, 0x0, &(0x7f0000000180))
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, 0x0, {0x1}, {0x9, 0xc}, {0xfff2, 0x6}}}, 0x24}}, 0x40044)
sendmsg$can_bcm(r0, &(0x7f0000000500)={&(0x7f0000000140)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f00000003c0)={0x4, 0x1, 0xdb96, {0x77359400}, {}, {0x1, 0x0, 0x0, 0x1}, 0x1, @can={{0x4, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "c40bfd856b4f9355"}}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x8044004)

4.208036149s ago: executing program 3 (id=196):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd000000100001000c0808004149014006040800", 0x58}], 0x1)

3.673221947s ago: executing program 3 (id=197):
socket$inet_udp(0x2, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$set_reqkey_keyring(0xf, 0xfffffffb)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r3, &(0x7f0000000280)=[{}], 0x1)

3.47732588s ago: executing program 2 (id=198):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x814818, &(0x7f0000000100)={[{@quota}, {@bsdgroups}, {@nobh}, {@nodelalloc}, {@abort}]}, 0x4, 0x756, &(0x7f00000002c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r0, 0x0, 0x3, 0x800000)
chdir(&(0x7f0000000240)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

3.46992915s ago: executing program 1 (id=199):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2)
r1 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000140)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000300)={r3, 0x0, 0x9, 0xfffffffd, 0x2, [<r4=>0x0], [0x9, 0x0, 0x0, 0x10000], [0x3, 0xa2, 0x100, 0x3], [0x1000020000000, 0x2, 0x5, 0x200]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4})
syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x101121)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.715682801s ago: executing program 3 (id=200):
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[], [], 0x2f})
mkdir(0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340))
chdir(0x0)
remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x10000)

2.640216163s ago: executing program 0 (id=201):
r0 = syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@nobarrier}, {@gc_merge}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45)
openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="08000000020003000b"], 0x80100)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, 0x0, 0x22403)
r2 = openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = dup3(r2, r1, 0x80000)
ioctl$FIONREAD(r3, 0x541b, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x101b)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000020c0)='./file2\x00', 0x2, 0x4)
renameat2(r4, &(0x7f0000002100)='./file0\x00', r0, &(0x7f0000002140)='./file1\x00', 0x7)

1.919825993s ago: executing program 1 (id=202):
writev(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt(0xffffffffffffffff, 0x8, 0x4, 0x0, 0x0)
pipe(&(0x7f0000000400)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
r3 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8)
bind$inet(r3, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0)

1.294181452s ago: executing program 1 (id=203):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x401c5820, &(0x7f0000000080)={'dummy0\x00', @local})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000180))
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000640)='asymmetric\x00', &(0x7f00000003c0)=@chain)
sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002cbd70000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r5, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0)

1.232421383s ago: executing program 2 (id=204):
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
add_key(&(0x7f0000000000)='big_key\x00', 0x0, &(0x7f00000002c0), 0x0, 0xfffffffffffffffe)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=0xffffffffffffffff, 0x4)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/fib_triestat\x00')
read$FUSE(r1, &(0x7f0000004480)={0x2020}, 0x2020)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}, 0x38)

13.99603ms ago: executing program 4 (id=205):
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lsetxattr$trusted_overlay_opaque(&(0x7f00000029c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x3)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x3, 0x3c)
setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18)
connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet6_int(r2, 0x29, 0x10, &(0x7f0000000000), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000b40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x15a, &(0x7f0000003180)="$eJzs2rFK81AUB/DzwYdKwcXRqVCpgjZJE62rjuLm7lBqbhq8MSURpH0BcRIUroMvIfgEPoFkEjddivgSkdtcNI0Wsthb4f9b+ofTJicn9E6nEYVBk8UNoo3e1cFwKQqDasvZ7rAma1Nmj4iqMiRpemPQNy+f9SQl44cv6LXynn3W1jyxf8F87tq6WwIAAAAAAAAAAAAAAAAAAAAAgJLqFRUqXRGcM5+7zVw17g+O25y7UUy0oKlDvepVtcNFTPBbOR9nbBTrMu/I5IvdSNat8d9fq7DaFfy1OF/zNOiZcX/Q8IO253ruiW07LWvTsrZsc3Qts3jF+p3qiZL03sqtkxmPh46s5/bNnsvsm6n3/3/ZF5dnxbt9vX+EKQaiCaV/9Ds3fdP+yH8pPM1l/45Z6UdDWCx5fM6+0fk3JKJ5p/Ygzz+jE/IjVZzGOPU+PgBM8hEAAP//oTc3XQ==")
quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x400, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4)
sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)={0x14, r5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}}, 0x14}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x24000090)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r3, 0xc040564a, &(0x7f0000000040)={0x0, 0x0, 0x3001, 0x101, 0x20000000, 0x400, 0x800})

0s ago: executing program 1 (id=206):
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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")
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10)
sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)})
syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="150008d5a36a44", @ANYRES32, @ANYBLOB="04000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00'}, 0x7b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r6, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syz_tun\x00', 0x2})
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.33' (ED25519) to the list of known hosts.
[   52.045265][ T4238] cgroup: Unknown subsys name 'net'
[   52.188362][ T4238] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   53.455955][ T4238] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   54.738752][ T4260] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.749066][ T4266] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.753729][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.759278][ T4266] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.764331][ T4262] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   54.771046][ T4266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   54.778502][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.786834][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.792657][ T4262] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.800167][ T4266] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   54.807514][ T4262] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   54.815624][ T4266] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.822941][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.830964][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   54.837560][ T4262] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   54.852504][ T4262] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.853064][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.859871][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.867556][ T4266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   54.874332][ T4262] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   54.882300][ T4266] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   54.888122][ T4262] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   54.895607][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   54.901609][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   54.908865][ T4266] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.922310][ T4268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   54.923058][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.929363][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.936827][ T4266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   54.984845][ T4252] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   55.399453][ T4250] chnl_net:caif_netlink_parms(): no params data found
[   55.421195][ T4255] chnl_net:caif_netlink_parms(): no params data found
[   55.463233][ T4261] chnl_net:caif_netlink_parms(): no params data found
[   55.554157][ T4254] chnl_net:caif_netlink_parms(): no params data found
[   55.583349][ T4255] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.590454][ T4255] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.598878][ T4255] device bridge_slave_0 entered promiscuous mode
[   55.611579][ T4251] chnl_net:caif_netlink_parms(): no params data found
[   55.631232][ T4255] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.638475][ T4255] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.646793][ T4255] device bridge_slave_1 entered promiscuous mode
[   55.672314][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.679409][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.687657][ T4250] device bridge_slave_0 entered promiscuous mode
[   55.727538][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.734758][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.744196][ T4250] device bridge_slave_1 entered promiscuous mode
[   55.755478][ T4255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.772032][ T4261] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.779240][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.788254][ T4261] device bridge_slave_0 entered promiscuous mode
[   55.809059][ T4255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.821357][ T4261] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.828971][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.837161][ T4261] device bridge_slave_1 entered promiscuous mode
[   55.880436][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.915894][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.925308][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.932826][ T4254] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.940501][ T4254] device bridge_slave_0 entered promiscuous mode
[   55.950612][ T4255] team0: Port device team_slave_0 added
[   55.966911][ T4261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.978376][ T4261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.993781][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.000867][ T4254] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.009382][ T4254] device bridge_slave_1 entered promiscuous mode
[   56.017787][ T4255] team0: Port device team_slave_1 added
[   56.058156][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.065550][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.073709][ T4251] device bridge_slave_0 entered promiscuous mode
[   56.092967][ T4250] team0: Port device team_slave_0 added
[   56.100603][ T4261] team0: Port device team_slave_0 added
[   56.121500][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.128862][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.136801][ T4251] device bridge_slave_1 entered promiscuous mode
[   56.145405][ T4261] team0: Port device team_slave_1 added
[   56.158325][ T4250] team0: Port device team_slave_1 added
[   56.173166][ T4254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.185104][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.192286][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.218644][ T4255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.253625][ T4254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.264025][ T4255] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.270999][ T4255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.297586][ T4255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.325019][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.334666][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.341623][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.367821][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.391555][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.398595][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.425053][ T4261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.437599][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.447178][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.454205][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.480953][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.504496][ T4254] team0: Port device team_slave_0 added
[   56.512512][ T4254] team0: Port device team_slave_1 added
[   56.518769][ T4261] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.525851][ T4261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.552986][ T4261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.598240][ T4251] team0: Port device team_slave_0 added
[   56.626086][ T4251] team0: Port device team_slave_1 added
[   56.635705][ T4255] device hsr_slave_0 entered promiscuous mode
[   56.642811][ T4255] device hsr_slave_1 entered promiscuous mode
[   56.649982][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.657362][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.683409][ T4254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.724780][ T4254] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.731756][ T4254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.757868][ T4254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.779667][ T4250] device hsr_slave_0 entered promiscuous mode
[   56.786449][ T4250] device hsr_slave_1 entered promiscuous mode
[   56.793542][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.801322][ T4250] Cannot create hsr debugfs directory
[   56.807632][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.815263][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.841331][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.859406][ T4261] device hsr_slave_0 entered promiscuous mode
[   56.866058][ T4261] device hsr_slave_1 entered promiscuous mode
[   56.872964][ T4261] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.880534][ T4261] Cannot create hsr debugfs directory
[   56.908363][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.915553][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.941643][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.014749][ T4254] device hsr_slave_0 entered promiscuous mode
[   57.021506][ T4254] device hsr_slave_1 entered promiscuous mode
[   57.023528][ T4260] Bluetooth: hci2: command 0x0409 tx timeout
[   57.028015][ T4265] Bluetooth: hci4: command 0x0409 tx timeout
[   57.033833][ T4260] Bluetooth: hci3: command 0x0409 tx timeout
[   57.039816][ T4265] Bluetooth: hci1: command 0x0409 tx timeout
[   57.046286][ T4260] Bluetooth: hci0: command 0x0409 tx timeout
[   57.058283][ T4254] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.066965][ T4254] Cannot create hsr debugfs directory
[   57.100188][ T4251] device hsr_slave_0 entered promiscuous mode
[   57.107200][ T4251] device hsr_slave_1 entered promiscuous mode
[   57.114198][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   57.121739][ T4251] Cannot create hsr debugfs directory
[   57.379700][ T4255] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.407946][ T4255] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.422217][ T4255] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.431980][ T4255] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.467046][ T4250] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   57.476384][ T4250] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   57.489862][ T4250] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   57.510606][ T4250] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   57.567314][ T4261] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.597930][ T4261] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.623337][ T4261] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.631994][ T4261] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.657668][ T4255] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.697522][ T4255] 8021q: adding VLAN 0 to HW filter on device team0
[   57.714099][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.724978][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   57.734916][ T4254] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   57.749616][ T4254] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   57.758806][ T4254] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   57.780379][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.787481][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   57.797878][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   57.807746][   T34] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.814985][   T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.824849][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   57.833766][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   57.842119][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.849176][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.856937][ T4254] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   57.886449][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   57.896787][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   57.940349][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.958407][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   57.968636][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   57.978123][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   57.987692][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   57.996507][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.004473][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.013806][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.025998][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.038808][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.050127][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.064670][ T4250] 8021q: adding VLAN 0 to HW filter on device team0
[   58.083366][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.095695][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.104835][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.114018][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.121081][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.128913][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.137917][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.149687][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.164585][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.173560][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.181877][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.188981][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.218446][ T4261] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.231910][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.241254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.250456][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.283164][ T4255] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.291169][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.301803][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.312532][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.328449][ T4261] 8021q: adding VLAN 0 to HW filter on device team0
[   58.341671][ T4254] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.350493][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.359271][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.368046][   T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.385727][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.396045][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.405326][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.412445][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.420659][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.430673][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.463130][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.471691][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.489214][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.500464][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.508818][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.523729][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.536441][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.547642][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.562827][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.577535][ T4254] 8021q: adding VLAN 0 to HW filter on device team0
[   58.589458][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.605611][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.613948][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.622047][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.633158][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.685388][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   58.697290][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   58.723608][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   58.736712][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   58.746553][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.753746][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.764068][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   58.777564][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   58.789279][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   58.804549][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   58.818869][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.826041][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.835598][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   58.844345][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   58.853090][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   58.864229][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   58.872257][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   58.885021][ T4261] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   58.896632][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   58.913280][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   58.921839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   58.937683][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.969211][ T4255] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.981392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   58.995705][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.005716][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.016788][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.031078][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.042648][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.051927][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.089728][ T4251] 8021q: adding VLAN 0 to HW filter on device team0
[   59.102912][ T4260] Bluetooth: hci1: command 0x041b tx timeout
[   59.108961][ T4260] Bluetooth: hci3: command 0x041b tx timeout
[   59.112871][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.115634][ T4266] Bluetooth: hci0: command 0x041b tx timeout
[   59.122308][ T4265] Bluetooth: hci4: command 0x041b tx timeout
[   59.134459][ T4252] Bluetooth: hci2: command 0x041b tx timeout
[   59.155219][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.170514][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.179732][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.189569][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.198640][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.207718][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.218247][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.233160][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.241875][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.286378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.302450][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.311952][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.319301][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.334491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.368488][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.384634][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.425813][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.445155][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.452326][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.480670][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.494205][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.501723][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.517309][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   59.551134][ T4255] device veth0_vlan entered promiscuous mode
[   59.560349][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   59.574828][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   59.590168][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.606794][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.616761][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.630833][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.670668][ T4255] device veth1_vlan entered promiscuous mode
[   59.680704][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.706151][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.719827][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.728968][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.738161][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.747075][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.756589][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.765673][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.773572][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.783301][ T4261] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.791393][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.857852][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   59.869128][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   59.948444][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   59.963768][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   59.983473][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   59.994163][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.003344][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.011108][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.024024][ T4254] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.035464][ T4261] device veth0_vlan entered promiscuous mode
[   60.051363][ T4261] device veth1_vlan entered promiscuous mode
[   60.081228][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.091114][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   60.099855][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.108525][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.150455][ T4255] device veth0_macvtap entered promiscuous mode
[   60.159012][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.168894][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.178136][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.187427][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.199474][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.211208][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.220296][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.246268][ T4255] device veth1_macvtap entered promiscuous mode
[   60.257566][ T4261] device veth0_macvtap entered promiscuous mode
[   60.265537][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.274551][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.284878][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.294212][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.307355][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.315203][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.323676][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.331894][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.348908][ T4254] device veth0_vlan entered promiscuous mode
[   60.358626][ T4261] device veth1_macvtap entered promiscuous mode
[   60.371199][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   60.380043][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.388607][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.410837][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.421085][ T4250] device veth0_vlan entered promiscuous mode
[   60.429802][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.437936][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.446306][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.455293][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.470024][ T4254] device veth1_vlan entered promiscuous mode
[   60.483639][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.497934][ T4255] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.510555][ T4250] device veth1_vlan entered promiscuous mode
[   60.521801][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.530902][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.554865][ T4255] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.564400][ T4255] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.575199][ T4255] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.584506][ T4255] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.597185][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.606598][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.636348][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   60.647402][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.660162][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0
[   60.670138][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   60.680909][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   60.692251][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1
[   60.727718][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   60.736540][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   60.746641][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   60.755713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   60.764839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.773529][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.791220][ T4261] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   60.801091][ T4261] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   60.810503][ T4261] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   60.819414][ T4261] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   60.833215][ T4254] device veth0_macvtap entered promiscuous mode
[   60.840392][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   60.853766][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.862356][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.876604][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.884956][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.893244][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.903595][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.914613][ T4251] device veth0_vlan entered promiscuous mode
[   60.975970][ T4250] device veth0_macvtap entered promiscuous mode
[   60.978229][ T4349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   60.984052][ T4251] device veth1_vlan entered promiscuous mode
[   61.000657][ T4349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.002877][ T4254] device veth1_macvtap entered promiscuous mode
[   61.020495][ T4250] device veth1_macvtap entered promiscuous mode
[   61.031877][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.041796][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.050241][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.058490][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.069610][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.100714][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.116625][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.126811][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.138296][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.149902][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.179559][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.187919][ T4265] Bluetooth: hci3: command 0x040f tx timeout
[   61.194059][ T4265] Bluetooth: hci0: command 0x040f tx timeout
[   61.200082][ T4265] Bluetooth: hci1: command 0x040f tx timeout
[   61.201868][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.206312][ T4252] Bluetooth: hci4: command 0x040f tx timeout
[   61.219758][ T4260] Bluetooth: hci2: command 0x040f tx timeout
[   61.221903][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.238020][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.247975][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.258430][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.268939][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.279769][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.290860][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.298889][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.307260][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.315888][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.330012][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.338172][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.348112][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.357827][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.368384][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.378370][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.389052][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.400157][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.427244][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.437879][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.448703][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.459546][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.469661][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.480437][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.494188][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.505354][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.514435][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.523733][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.533964][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.545680][ T4254] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.555795][ T4254] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.565165][ T4254] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.574124][ T4254] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.600955][ T4250] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.610914][ T4250] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.619982][ T4250] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.628918][ T4250] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.662455][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.670620][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.716137][ T4251] device veth0_macvtap entered promiscuous mode
[   61.745040][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   61.750910][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   61.761148][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.776208][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   61.780581][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.797625][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   61.819500][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.870711][ T4251] device veth1_macvtap entered promiscuous mode
[   61.980661][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.017917][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.043130][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.154798][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   62.163048][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   62.171217][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   62.179405][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   62.187588][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   62.195775][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   62.203950][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   62.212143][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   62.220572][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   62.228758][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   62.539091][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.552383][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.563217][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.598600][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.647994][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.671950][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.696670][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.711470][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.723719][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.754882][ T4336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.756493][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.774166][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.774227][ T4336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.809227][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.820729][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.842113][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.856771][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.870234][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.880856][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.897313][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.909408][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.924567][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.960447][ T4349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.003913][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.013481][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.024155][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.033708][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.080071][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.110851][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.156837][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.165006][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.195897][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.207526][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.224216][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.234497][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.246580][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.262720][ T4260] Bluetooth: hci2: command 0x0419 tx timeout
[   63.269786][ T4266] Bluetooth: hci1: command 0x0419 tx timeout
[   63.269830][ T4265] Bluetooth: hci4: command 0x0419 tx timeout
[   63.276802][ T4260] Bluetooth: hci0: command 0x0419 tx timeout
[   63.281877][ T4265] Bluetooth: hci3: command 0x0419 tx timeout
[   63.393502][   T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.401538][   T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.402256][ T4257] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   63.425232][ T4349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.485345][ T4349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.497434][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.806546][ T4257] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   64.064778][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.150696][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   64.236424][ T4257] usb 3-1: Product: syz
[   64.254048][ T4257] usb 3-1: Manufacturer: syz
[   64.259060][ T4257] usb 3-1: SerialNumber: syz
[   64.294926][ T4257] usb 3-1: config 0 descriptor??
[   64.312368][ T4257] ch341 3-1:0.0: ch341-uart converter detected
[   64.525727][ T4260] Bluetooth: hci4: unexpected cc 0x0402 length: 4 > 1
[   64.534038][ T4257] usb 3-1: failed to receive control message: -71
[   64.541388][ T4257] ch341-uart: probe of ttyUSB0 failed with error -71
[   64.554215][ T4257] usb 3-1: USB disconnect, device number 2
[   64.564159][ T4257] ch341 3-1:0.0: device disconnected
[   64.830603][ T4386] loop3: detected capacity change from 0 to 32768
[   64.848609][ T4386] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.8 (4386)
[   64.868302][ T4386] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   64.878628][ T4386] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   64.887329][ T4386] BTRFS info (device loop3): setting nodatacow, compression disabled
[   64.895485][ T4386] BTRFS info (device loop3): force clearing of disk cache
[   64.902647][ T4386] BTRFS info (device loop3): setting datacow
[   64.909115][ T4386] BTRFS info (device loop3): doing ref verification
[   64.915764][ T4386] BTRFS info (device loop3): turning on flush-on-commit
[   64.922747][ T4386] BTRFS info (device loop3): disabling free space tree
[   64.929829][ T4386] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   64.939415][ T4386] BTRFS info (device loop3): use zstd compression, level 3
[   64.947030][ T4386] BTRFS info (device loop3): enabling ssd optimizations
[   64.954084][ T4386] BTRFS info (device loop3): using spread ssd allocation scheme
[   64.961722][ T4386] BTRFS info (device loop3): not using ssd optimizations
[   64.968796][ T4386] BTRFS info (device loop3): not using spread ssd allocation scheme
[   64.987111][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7'.
[   65.849982][ T4404] loop2: detected capacity change from 0 to 4096
[   67.622383][ T4386] BTRFS error (device loop3): open_ctree failed: -22
[   67.643738][ T4428] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12'.
[   67.659925][ T4428] ax25_connect(): syz.0.12 uses autobind, please contact jreuter@yaina.de
[   69.513204][ T4444] loop0: detected capacity change from 0 to 1024
[   70.404728][ T4452] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.267037][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[   71.274897][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[   74.082560][ T4479] loop0: detected capacity change from 0 to 32768
[   74.495836][ T4479] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 0 transid 8 /dev/loop0 scanned by syz.0.26 (4479)
[   75.762994][ T4488] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[   77.580123][   T22] cfg80211: failed to load regulatory.db
[   77.610425][ T4500] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[   77.959698][ T4244] udevd[4244]: incorrect btrfs checksum on /dev/loop0
[   78.252568][ T4260] Bluetooth: hci3: Invalid handle: 0x864b > 0x0eff
[   78.260143][ T4509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   79.125925][ T4518] loop4: detected capacity change from 0 to 1024
[   79.143064][ T4518] =======================================================
[   79.143064][ T4518] WARNING: The mand mount option has been deprecated and
[   79.143064][ T4518]          and is ignored by this kernel. Remove the mand
[   79.143064][ T4518]          option from the mount to silence this warning.
[   79.143064][ T4518] =======================================================
[   79.254402][ T4518] EXT4-fs: Ignoring removed oldalloc option
[   79.300746][ T4518] EXT4-fs: Ignoring removed bh option
[   79.446750][ T4518] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   79.993626][ T4518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   80.140461][ T4524] random: crng reseeded on system resumption
[   80.199676][   T26] audit: type=1804 audit(1751546769.427:2): pid=4525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.35" name="/newroot/4/file1/bus" dev="loop4" ino=18 res=1 errno=0
[   80.603296][ T4515] loop2: detected capacity change from 0 to 40427
[   80.659076][ T4515] F2FS-fs (loop2): invalid crc value
[   80.705218][ T4515] F2FS-fs (loop2): Found nat_bits in checkpoint
[   80.921736][ T4515] F2FS-fs (loop2): Start checkpoint disabled!
[   80.980315][ T4515] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   81.159208][ T4250] EXT4-fs (loop4): unmounting filesystem.
[   81.363729][ T4481] kworker/u4:9: attempt to access beyond end of device
[   81.363729][ T4481] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[   83.909341][ T4561] loop4: detected capacity change from 0 to 1024
[   83.967742][ T4561] EXT4-fs: Ignoring removed oldalloc option
[   84.028773][ T4561] EXT4-fs: Ignoring removed bh option
[   85.001979][ T4557] sched: RT throttling activated
[   85.052872][ T4561] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   85.198820][ T4561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   85.212417][ T4564] Bluetooth: MGMT ver 1.22
[   85.262692][ T4554] sctp: failed to load transform for md5: -2
[   85.453170][ T4575] random: crng reseeded on system resumption
[   85.511407][   T26] audit: type=1804 audit(1751546774.737:3): pid=4576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.46" name="/newroot/7/file1/bus" dev="loop4" ino=18 res=1 errno=0
[   86.959702][ T4586] loop3: detected capacity change from 0 to 1024
[   86.969915][ T4586] EXT4-fs: Ignoring removed oldalloc option
[   86.976108][ T4586] EXT4-fs: Ignoring removed bh option
[   86.988781][ T4586] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   87.081597][ T4586] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   87.235633][ T4598] random: crng reseeded on system resumption
[   87.294385][   T26] audit: type=1804 audit(1751546776.527:4): pid=4599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.51" name="/newroot/8/file1/bus" dev="loop3" ino=18 res=1 errno=0
[   87.402236][ T4241] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   87.756402][ T4250] EXT4-fs (loop4): unmounting filesystem.
[   87.963777][ T4241] usb 3-1: config 15 has an invalid interface number: 207 but max is 0
[   87.982136][ T4241] usb 3-1: config 15 has no interface number 0
[   88.041537][ T4241] usb 3-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=2f.e5
[   88.107505][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.155819][ T4241] usb 3-1: Product: syz
[   88.194493][ T4241] usb 3-1: Manufacturer: syz
[   88.202270][ T4241] usb 3-1: SerialNumber: syz
[   88.440392][ T4241] usb 3-1: invalid MIDI EP
[   88.460590][ T4241] usb 3-1: snd-bcd2000: error during probing
[   88.494700][ T4241] snd-bcd2000: probe of 3-1:15.207 failed with error -22
[   88.547637][ T4241] usb 3-1: USB disconnect, device number 3
[   88.548481][ T4254] EXT4-fs (loop3): unmounting filesystem.
[   88.644241][ T4597] loop1: detected capacity change from 0 to 32768
[   88.707368][   T26] audit: type=1800 audit(1751546777.937:5): pid=4597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.54" name="file1" dev="loop1" ino=4 res=0 errno=0
[   88.882281][ T4429] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   89.072256][ T4429] usb 5-1: Using ep0 maxpacket: 8
[   89.081687][ T4429] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   89.116190][ T4429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.144518][ T4429] usb 5-1: Product: syz
[   89.148726][ T4429] usb 5-1: Manufacturer: syz
[   89.340115][ T4429] usb 5-1: SerialNumber: syz
[   89.357060][ T4429] usb 5-1: config 0 descriptor??
[   90.778628][ T4429] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   92.133305][ T4429] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[   92.549354][ T4643] No such timeout policy "syz0"
[   93.754205][ T4649] loop0: detected capacity change from 0 to 24
[   94.205683][ T4241] usb 5-1: USB disconnect, device number 2
[   94.903180][ T4649] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   94.921745][ T4649] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   95.017590][ T4648] VFS: Lookup of 'file0' in romfs loop0 would have caused loop
[   95.028638][ T4654] binder_alloc: 4653: pid 4653 spamming oneway? 2 buffers allocated for a total size of 5120
[   95.059354][ T4654] binder_alloc: 4653: pid 4653 spamming oneway? 3 buffers allocated for a total size of 5128
[   96.340869][    T7] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   96.650063][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   97.192227][ T4241] usb 5-1: Using ep0 maxpacket: 8
[   97.202395][    T7] usb 1-1: Using ep0 maxpacket: 8
[   97.293701][ T4241] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   97.307363][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.311124][    T7] usb 1-1: config 0 has too many interfaces: 201, using maximum allowed: 32
[   97.322728][ T4241] usb 5-1: Product: syz
[   97.333799][ T4241] usb 5-1: Manufacturer: syz
[   97.338511][ T4241] usb 5-1: SerialNumber: syz
[   97.339396][    T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 201
[   97.351307][ T4241] usb 5-1: config 0 descriptor??
[   97.980901][ T4241] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   98.183714][    T7] usb 1-1: New USB device found, idVendor=04cb, idProduct=011d, bcdDevice=5c.2f
[   98.207844][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.226421][    T7] usb 1-1: Product: syz
[   98.227478][ T4690] loop3: detected capacity change from 0 to 1024
[   98.230688][    T7] usb 1-1: Manufacturer: syz
[   98.230705][    T7] usb 1-1: SerialNumber: syz
[   98.248510][    T7] usb 1-1: config 0 descriptor??
[   98.303498][ T4690] EXT4-fs: Ignoring removed oldalloc option
[   98.393015][ T4693] No such timeout policy "syz0"
[   98.423872][ T4690] EXT4-fs: Ignoring removed bh option
[   98.567517][ T4690] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   98.595080][ T4241] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32
[   98.937847][ T4241] usb 1-1: USB disconnect, device number 2
[   98.981324][ T4690] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[   99.306338][   T26] audit: type=1804 audit(1751546788.537:6): pid=4703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.83" name="/newroot/17/file1/bus" dev="loop3" ino=18 res=1 errno=0
[   99.607687][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  100.608530][ T4716] ax25_connect(): syz.0.90 uses autobind, please contact jreuter@yaina.de
[  100.665737][ T4295] usb 5-1: USB disconnect, device number 3
[  101.355535][ T4737] Zero length message leads to an empty skb
[  102.021524][ T4739] No such timeout policy "syz0"
[  102.978321][ T4430] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  103.902295][ T4430] usb 3-1: Using ep0 maxpacket: 8
[  103.988250][ T4430] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  104.114112][ T4430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.160293][ T4430] usb 3-1: Product: syz
[  104.171745][ T4430] usb 3-1: Manufacturer: syz
[  104.357843][ T4430] usb 3-1: SerialNumber: syz
[  104.405441][ T4430] usb 3-1: config 0 descriptor??
[  104.621744][ T4430] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  105.012669][ T4778] No such timeout policy "syz0"
[  105.263929][ T4773] loop1: detected capacity change from 0 to 32768
[  105.846047][ T4430] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -32
[  107.115080][ T4324] usb 3-1: USB disconnect, device number 4
[  109.128247][ T4819] No such timeout policy "syz0"
[  109.968512][ T4822] No such timeout policy "syz0"
[  111.384524][ T4835] loop0: detected capacity change from 0 to 24
[  111.472580][ T4835] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  111.507773][ T4841] loop3: detected capacity change from 0 to 1024
[  111.515128][ T4841] EXT4-fs: Ignoring removed oldalloc option
[  111.517753][ T4835] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  111.522548][ T4841] EXT4-fs: Ignoring removed bh option
[  111.545900][ T4841] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  111.618749][ T4835] VFS: Lookup of 'file0' in romfs loop0 would have caused loop
[  111.643037][ T4841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  111.732980][ T4257] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  111.879372][   T26] audit: type=1804 audit(1751546801.107:7): pid=4848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.131" name="/newroot/25/file1/bus" dev="loop3" ino=18 res=1 errno=0
[  111.922274][ T4257] usb 2-1: Using ep0 maxpacket: 8
[  112.379004][ T4257] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  112.404674][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.432204][ T4257] usb 2-1: Product: syz
[  112.436421][ T4257] usb 2-1: Manufacturer: syz
[  112.461692][ T4257] usb 2-1: SerialNumber: syz
[  112.541402][ T4257] usb 2-1: config 0 descriptor??
[  112.672647][ T4254] EXT4-fs (loop3): unmounting filesystem.
[  112.782770][ T4257] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  113.323648][ T4827] loop2: detected capacity change from 0 to 40427
[  113.584539][ T4861] No such timeout policy "syz0"
[  113.602253][ T4429] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  113.818516][ T4429] usb 4-1: config index 0 descriptor too short (expected 1307, got 27)
[  114.351576][ T4429] usb 4-1: config 0 has an invalid interface number: 0 but max is -1
[  114.448908][ T4257] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  114.562171][ T4429] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0
[  114.621979][ T4429] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  114.790810][ T4429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  114.831546][ T4429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  115.534420][ T4872] tty tty28: ldisc open failed (-12), clearing slot 27
[  115.719967][ T4429] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  115.810972][ T4876] program syz.2.140 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.849473][ T4295] usb 2-1: USB disconnect, device number 2
[  115.862494][ T4877] program syz.2.140 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  115.880520][ T4877] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  115.928993][ T4429] usb 4-1: string descriptor 0 read error: -22
[  115.942209][ T4429] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  115.965615][ T4429] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.024360][ T4429] usb 4-1: config 0 descriptor??
[  116.063067][ T4429] hub 4-1:0.0: bad descriptor, ignoring hub
[  116.102785][ T4429] hub: probe of 4-1:0.0 failed with error -5
[  116.171148][ T4429] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5
[  116.518469][ T4890] loop3: detected capacity change from 0 to 128
[  116.528547][ T4890] befs: (loop3): No write support. Marking filesystem read-only
[  117.546730][ T4890] befs: (loop3): invalid magic header
[  118.151576][ T4893] loop4: detected capacity change from 0 to 24
[  118.703219][ T4893] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  118.704185][ T4429] input: failed to attach handler mousedev to device input5, error: -5
[  118.707181][ T4893] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  118.722627][ T4429] usb 4-1: USB disconnect, device number 2
[  118.741295][ T4887] VFS: Lookup of 'file0' in romfs loop4 would have caused loop
[  121.222263][ T4327] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  121.247427][ T4926] netlink: 1021 bytes leftover after parsing attributes in process `syz.2.153'.
[  121.432893][ T4327] usb 2-1: Using ep0 maxpacket: 8
[  121.558282][ T4327] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  121.567473][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.608687][ T4327] usb 2-1: Product: syz
[  121.662900][ T4327] usb 2-1: Manufacturer: syz
[  121.672348][ T4327] usb 2-1: SerialNumber: syz
[  121.692027][ T4327] usb 2-1: config 0 descriptor??
[  121.935421][ T4327] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  122.007802][ T4935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.156'.
[  122.019867][ T4935] ax25_connect(): syz.0.156 uses autobind, please contact jreuter@yaina.de
[  123.896720][ T4327] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32
[  124.504866][ T4959] No such timeout policy "syz0"
[  125.419589][ T4260] Bluetooth: hci1: Unknown advertising packet type: 0x3000
[  125.419650][ T4260] Bluetooth: hci1: Malformed LE Event: 0x0d
[  125.444458][  T125] usb 2-1: USB disconnect, device number 3
[  126.633529][ T4980] capability: warning: `syz.1.170' uses 32-bit capabilities (legacy support in use)
[  127.344302][ T4983] loop1: detected capacity change from 0 to 1024
[  128.357584][ T4975] loop3: detected capacity change from 0 to 32768
[  128.399693][ T4975] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 0 transid 8 /dev/loop3 scanned by syz.3.169 (4975)
[  129.236802][ T4269] udevd[4269]: incorrect btrfs checksum on /dev/loop3
[  130.371259][ T4997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.174'.
[  131.507217][ T5009] No such timeout policy "syz0"
[  132.430174][ T5013] loop3: detected capacity change from 0 to 4096
[  132.533184][ T5021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[  132.592356][ T4260] Bluetooth: hci1: Invalid handle: 0x20c9 > 0x0eff
[  132.705869][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  132.712266][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  132.939700][ T5025] loop4: detected capacity change from 0 to 1024
[  136.342440][ T4430] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  136.534930][ T5056] loop2: detected capacity change from 0 to 1024
[  136.582198][ T4430] usb 1-1: Using ep0 maxpacket: 16
[  136.583111][ T5056] EXT4-fs: Ignoring removed oldalloc option
[  136.602884][ T4430] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 112
[  136.612900][ T5056] EXT4-fs: Ignoring removed bh option
[  136.636107][ T5056] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  136.646430][ T4430] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  136.672150][ T4430] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.698937][ T4430] usb 1-1: Product: syz
[  136.704040][ T4430] usb 1-1: Manufacturer: syz
[  136.709112][ T4430] usb 1-1: SerialNumber: syz
[  136.720842][ T4430] usb 1-1: config 0 descriptor??
[  136.727633][ T5053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  136.762476][ T4430] hub 1-1:0.0: bad descriptor, ignoring hub
[  136.768441][ T4430] hub: probe of 1-1:0.0 failed with error -5
[  136.771910][ T5056] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  136.868855][ T4430] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[  136.907010][   T26] audit: type=1804 audit(1751546826.137:8): pid=5067 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.192" name="/newroot/31/file1/bus" dev="loop2" ino=18 res=1 errno=0
[  137.249601][ T5068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'.
[  137.271971][ T4430] usb 1-1: USB disconnect, device number 3
[  137.277889][    C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  137.505850][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  138.966007][ T5080] loop2: detected capacity change from 0 to 2048
[  138.973310][ T5080] EXT4-fs: Ignoring removed nobh option
[  139.078924][ T5080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  139.130801][ T5080] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.705127][ T4261] EXT4-fs (loop2): unmounting filesystem.
[  139.915560][ T5078] mmap: syz.3.200 (5078) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  140.921925][ T5078] 
[  140.924306][ T5078] ======================================================
[  140.928208][ T5082] loop0: detected capacity change from 0 to 40427
[  140.931307][ T5078] WARNING: possible circular locking dependency detected
[  140.931327][ T5078] 6.1.142-syzkaller #0 Not tainted
[  140.949944][ T5078] ------------------------------------------------------
[  140.956971][ T5078] syz.3.200/5078 is trying to acquire lock:
[  140.962876][ T5078] ffff8880557dc1b0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10
[  140.973625][ T5078] 
[  140.973625][ T5078] but task is already holding lock:
[  140.980997][ T5078] ffff8880290cdb58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770
[  140.991030][ T5078] 
[  140.991030][ T5078] which lock already depends on the new lock.
[  140.991030][ T5078] 
[  141.001445][ T5078] 
[  141.001445][ T5078] the existing dependency chain (in reverse order) is:
[  141.005354][ T5098] loop1: detected capacity change from 0 to 512
[  141.010451][ T5078] 
[  141.010451][ T5078] -> #1 (&mm->mmap_lock){++++}-{3:3}:
[  141.010482][ T5078]        down_read_killable+0x4c/0x340
[  141.030148][ T5078]        mmap_read_lock_killable+0x1d/0x60
[  141.036143][ T5078]        lock_mm_and_find_vma+0x2b1/0x2f0
[  141.041860][ T5078]        do_user_addr_fault+0x2db/0xb10
[  141.047405][ T5078]        exc_page_fault+0x60/0x100
[  141.052502][ T5078]        asm_exc_page_fault+0x22/0x30
[  141.057858][ T5078]        fault_in_readable+0x13e/0x1f0
[  141.063314][ T5078]        fault_in_iov_iter_readable+0xbb/0x2e0
[  141.069463][ T5078]        generic_perform_write+0x1d2/0x560
[  141.075259][ T5078]        __generic_file_write_iter+0x172/0x430
[  141.081403][ T5078]        generic_file_write_iter+0xab/0x2e0
[  141.087286][ T5078]        vfs_write+0x44c/0x960
[  141.092031][ T5078]        ksys_write+0x143/0x240
[  141.096867][ T5078]        do_syscall_64+0x4c/0xa0
[  141.101793][ T5078]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.108223][ T5078] 
[  141.108223][ T5078] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}:
[  141.116930][ T5078]        __lock_acquire+0x2cf8/0x7c50
[  141.122300][ T5078]        lock_acquire+0x1b4/0x490
[  141.127316][ T5078]        down_write+0x36/0x60
[  141.131981][ T5078]        process_measurement+0x33c/0x1a10
[  141.137693][ T5078]        ima_file_mmap+0x104/0x150
[  141.142788][ T5078]        __se_sys_remap_file_pages+0x53e/0x770
[  141.148933][ T5078]        do_syscall_64+0x4c/0xa0
[  141.153858][ T5078]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.160263][ T5078] 
[  141.160263][ T5078] other info that might help us debug this:
[  141.160263][ T5078] 
[  141.170474][ T5078]  Possible unsafe locking scenario:
[  141.170474][ T5078] 
[  141.177928][ T5078]        CPU0                    CPU1
[  141.183274][ T5078]        ----                    ----
[  141.188647][ T5078]   lock(&mm->mmap_lock);
[  141.192962][ T5078]                                lock(&sb->s_type->i_mutex_key#12);
[  141.200930][ T5078]                                lock(&mm->mmap_lock);
[  141.207765][ T5078]   lock(&sb->s_type->i_mutex_key#12);
[  141.213214][ T5078] 
[  141.213214][ T5078]  *** DEADLOCK ***
[  141.213214][ T5078] 
[  141.221359][ T5078] 1 lock held by syz.3.200/5078:
[  141.226284][ T5078]  #0: ffff8880290cdb58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770
[  141.236720][ T5078] 
[  141.236720][ T5078] stack backtrace:
[  141.242607][ T5078] CPU: 1 PID: 5078 Comm: syz.3.200 Not tainted 6.1.142-syzkaller #0
[  141.250572][ T5078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  141.260705][ T5078] Call Trace:
[  141.263976][ T5078]  <TASK>
[  141.266904][ T5078]  dump_stack_lvl+0x168/0x22e
[  141.271574][ T5078]  ? load_image+0x3b0/0x3b0
[  141.276064][ T5078]  ? show_regs_print_info+0x12/0x12
[  141.281259][ T5078]  ? print_circular_bug+0x12b/0x1a0
[  141.286447][ T5078]  check_noncircular+0x274/0x310
[  141.291406][ T5078]  ? add_chain_block+0x940/0x940
[  141.296331][ T5078]  ? lockdep_lock+0xdc/0x1e0
[  141.300909][ T5078]  ? mark_lock+0x94/0x320
[  141.305228][ T5078]  ? _find_first_zero_bit+0xcf/0x100
[  141.310497][ T5078]  __lock_acquire+0x2cf8/0x7c50
[  141.315340][ T5078]  ? ima_match_policy+0x104/0x2100
[  141.320438][ T5078]  ? verify_lock_unused+0x140/0x140
[  141.325628][ T5078]  ? ima_match_policy+0x207a/0x2100
[  141.330813][ T5078]  lock_acquire+0x1b4/0x490
[  141.335305][ T5078]  ? process_measurement+0x33c/0x1a10
[  141.340660][ T5078]  ? __might_sleep+0xd0/0xd0
[  141.345238][ T5078]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  141.351208][ T5078]  ? read_lock_is_recursive+0x10/0x10
[  141.356566][ T5078]  ? ima_get_action+0x71/0xa0
[  141.361229][ T5078]  down_write+0x36/0x60
[  141.365375][ T5078]  ? process_measurement+0x33c/0x1a10
[  141.370730][ T5078]  process_measurement+0x33c/0x1a10
[  141.375916][ T5078]  ? __schedule+0x10f1/0x40d0
[  141.380580][ T5078]  ? ima_file_mmap+0x150/0x150
[  141.385334][ T5078]  ? lock_chain_count+0x20/0x20
[  141.390174][ T5078]  ? aa_get_current_label+0x110/0x1d0
[  141.395615][ T5078]  ? apparmor_current_getsecid_subj+0xb1/0x110
[  141.401754][ T5078]  ima_file_mmap+0x104/0x150
[  141.406337][ T5078]  ? ima_file_free+0x3e0/0x3e0
[  141.411089][ T5078]  ? security_mmap_file+0x10f/0x180
[  141.416277][ T5078]  ? bpf_lsm_mmap_file+0x5/0x10
[  141.421110][ T5078]  ? security_mmap_file+0x11b/0x180
[  141.426297][ T5078]  __se_sys_remap_file_pages+0x53e/0x770
[  141.431964][ T5078]  ? __se_sys_futex+0x14a/0x440
[  141.436848][ T5078]  ? __x64_sys_remap_file_pages+0xc0/0xc0
[  141.442659][ T5078]  ? lock_chain_count+0x20/0x20
[  141.447507][ T5078]  ? lockdep_hardirqs_on+0x94/0x140
[  141.452696][ T5078]  ? __x64_sys_remap_file_pages+0x1c/0xc0
[  141.458412][ T5078]  do_syscall_64+0x4c/0xa0
[  141.462887][ T5078]  ? clear_bhb_loop+0x60/0xb0
[  141.467550][ T5078]  ? clear_bhb_loop+0x60/0xb0
[  141.472213][ T5078]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  141.478103][ T5078] RIP: 0033:0x7fba1f18e929
[  141.482518][ T5078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.502125][ T5078] RSP: 002b:00007fba1efff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8
[  141.510635][ T5078] RAX: ffffffffffffffda RBX: 00007fba1f3b5fa0 RCX: 00007fba1f18e929
[  141.518605][ T5078] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000006ca000
[  141.526574][ T5078] RBP: 00007fba1f210b39 R08: 0000000000010000 R09: 0000000000000000
[  141.534534][ T5078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.543009][ T5078] R13: 0000000000000000 R14: 00007fba1f3b5fa0 R15: 00007ffd196c52e8
[  141.550977][ T5078]  </TASK>
[  141.554036][    C1] vkms_vblank_simulate: vblank timer overrun
[  141.768161][ T5102] loop4: detected capacity change from 0 to 24
[  141.780027][ T5102] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  141.793594][ T5102] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  141.807613][ T5102] VFS: Lookup of 'file0' in romfs loop4 would have caused loop
[  141.841298][ T5098] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.206: casefold flag without casefold feature
[  141.893360][ T5082] F2FS-fs (loop0): Found nat_bits in checkpoint
[  141.992011][ T5098] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.206: couldn't read orphan inode 15 (err -117)
[  142.010693][ T5098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  142.168881][ T5082] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  142.566355][ T4255] EXT4-fs (loop1): unmounting filesystem.