last executing test programs:

12m50.946917866s ago: executing program 4 (id=488):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054)
writev(r1, &(0x7f0000006280)=[{0x0}, {&(0x7f00000041c0)="d2cf43efec", 0x5}], 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

12m48.104102867s ago: executing program 4 (id=496):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {0x2}, 0xfd}, 0x18)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
mq_open(0x0, 0xc0, 0x11b, 0x0)
open(0x0, 0x109240, 0x145)
creat(0x0, 0x0)
openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
close(r1)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x2)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xe)
ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0)

12m46.114583875s ago: executing program 4 (id=502):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="2d000000010001", 0x7)
r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000001)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040)="05000000010000", 0x7)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r4=>0x0})
bind$xdp(r3, &(0x7f0000000240)={0x2c, 0x1, r4}, 0x10)
r5 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0)
landlock_restrict_self(r5, 0xe)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r6, 0xffffffffffffffff, 0x3f00000000000000)
ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000003c0)={'pcl816\x00', [0x140, 0x2, 0x3, 0x2, 0xff, 0x10000, 0x7ffd, 0x6, 0x3, 0xc72d, 0x4, 0x10, 0xf8, 0x8, 0x4ce, 0x9e9c, 0x104, 0x401, 0x6, 0x8, 0x4, 0x0, 0xa, 0x9, 0xff9, 0x200000, 0xaf, 0x0, 0x7, 0x0, 0x4]})

12m42.666741453s ago: executing program 4 (id=508):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)
r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000500)=r0, 0x4)
syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2)
ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0))
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[], 0x1c}}, 0x4008054)
writev(r1, &(0x7f0000006280)=[{0x0}, {&(0x7f00000041c0)="d2cf43efec", 0x5}], 0x2)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)

12m41.043206763s ago: executing program 4 (id=512):
mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1ff)
mkdir(&(0x7f0000000600)='./my_dev\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff)
write(0xffffffffffffffff, &(0x7f0000000b00)='cluster1\x00', 0x9)
mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0)
write(r0, &(0x7f0000000f00), 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000001100)="0200"/128, 0x80)
r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write(r2, &(0x7f0000001300)='1\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./my_configfs/dlm/cluster1/scan_secs\x00', 0x2, 0x0)
write(r3, &(0x7f0000001500), 0x0)
mkdir(&(0x7f0000001700)='./my_configfs/dlm/cluster1/spaces/ls1\x00', 0x1ff)
mkdir(&(0x7f0000001900)='./my_configfs/dlm/cluster1/spaces/ls1/nodes/1\x00', 0x1ff)

12m39.751325823s ago: executing program 4 (id=515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

12m22.986201555s ago: executing program 32 (id=515):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

34.525531286s ago: executing program 2 (id=4107):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00')
write(r0, &(0x7f0000000140)="ee57", 0x2)

34.279973694s ago: executing program 2 (id=4108):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x7fff)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}}, 0x10004000)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000000100)="f257a8ea7bc273dfaeab968586dd", 0xe, 0x80, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)

33.226497308s ago: executing program 2 (id=4113):
mkdir(0x0, 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff090045000000000000000000000008001c00"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x1f, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x9, 0x25dfdbff, {0x25, 0x0, 0x700}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x24004804)

32.261833387s ago: executing program 2 (id=4114):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000180)='./file0\x00', 0x200010, &(0x7f00000008c0)=ANY=[], 0x1, 0xf43, &(0x7f0000002140)="$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")
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f00000092c0)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x5}, {0x20, 0x4}}, 0x24, 0x2)

31.095347256s ago: executing program 2 (id=4117):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

27.807540959s ago: executing program 2 (id=4131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20)

27.100787344s ago: executing program 33 (id=4131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r2 = socket(0x2, 0x80805, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, 0x0, 0x0)
socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r3 = socket(0x2b, 0x1, 0x1)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x600}, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20)

13.182640116s ago: executing program 6 (id=4183):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000009000080850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x5, 0x1100, 0x0, 0x0, 0x0, 0x149c, 0x503, 0xffffff81, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x7)
r2 = socket$pppoe(0x18, 0x1, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x1411, 0x1, 0x70bd29, 0x20003}, 0x10}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r3, 0x0, 0x0}, 0x10)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, 0x0, 0x7}, 0x80, 0x0}, 0x4000011)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x40050)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
r7 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001400050126bc70006bdbdf2511000d000100c80e4501a254722eaea6d93916f8d66cffe8ef"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x54840)
connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

12.664695476s ago: executing program 6 (id=4187):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@loopback, @in=@loopback, 0x4e20, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}}, 0xe8)
sendto$inet(r0, &(0x7f0000000600)="1234", 0x2, 0x0, 0x0, 0x0)

11.707163001s ago: executing program 5 (id=4193):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x80}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94)

11.545443882s ago: executing program 6 (id=4194):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000040), 0x100)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0x2, 0x2, 0x3c, 0x3, 0x8})
r3 = creat(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2e)
signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
r5 = syz_usb_connect(0x5, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000100009058aff"], 0x0)
syz_usb_control_io$cdc_ecm(r5, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f00000021c0)={<r7=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000002180)={r7, 0x2, r0, 0x80, 0x80000})
r8 = dup(r6)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
clock_nanosleep(0x9, 0x1, &(0x7f0000000200)={0x0, 0x989680}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r8, 0x0)
mmap$panthor(&(0x7f0000b4d000/0x1000)=nil, 0x1000, 0x2000000, 0x11, r8, 0x5)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
r9 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r9, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4)
connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e22, 0x8401, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c)
sendmsg$NL80211_CMD_FLUSH_PMKSA(r8, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002240)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6d}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000001}, 0x4004)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17)
file_setattr(r3, &(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000020c0)={0x110, 0x2, 0x264e, 0x9, 0x1}, 0x18, 0x800)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000002140)=[@in6={0xa, 0x4e20, 0x5, @loopback, 0x400}, @in={0x2, 0x4e23, @loopback}], 0x2c)

11.431662841s ago: executing program 5 (id=4195):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0))
openat$panthor(0xffffff9c, &(0x7f0000000040), 0x2, 0x0)
listen(0xffffffffffffffff, 0x0)
r1 = syz_usbip_server_init(0x1)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x20000402, r2}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x20)
write$usbip_server(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x35)
r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', 0x0, &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/rfkill/rfkill0/state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000180)='0', 0x1)
syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040e80308000000010203010902270001010080fa0904000003ffffff00070581020002000705020200020007058303400001"], 0x0)
nanosleep(&(0x7f0000000300)={0x1, 0x1dcd6500}, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/firmware/kaweth!new_code.bin/loading\x00', 0x2, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x40000)

10.451778769s ago: executing program 6 (id=4200):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0xc201})
ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x4)

10.243224906s ago: executing program 6 (id=4201):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x4}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000780850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

9.999354056s ago: executing program 6 (id=4205):
setsockopt(0xffffffffffffffff, 0x94, 0x85, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48)
preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000500)=""/84, 0x54}], 0x1, 0x4, 0x8008)

6.996064274s ago: executing program 5 (id=4222):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13)
close(0xffffffffffffffff)

5.740120022s ago: executing program 7 (id=4230):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, 0x0, 0x0)
recvfrom(r0, &(0x7f00000012c0)=""/4088, 0xff8, 0x102, 0x0, 0xfd34)
sendto(r0, &(0x7f0000000380)="8d", 0x1, 0x4000811, 0x0, 0x0)

5.451903623s ago: executing program 7 (id=4232):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newtaction={0x18, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e, 0x0, 0x1}, 0x8d0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

4.706717949s ago: executing program 7 (id=4236):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
ioctl$SIOCSIFHWADDR(r1, 0x541b, &(0x7f0000000180)={'ip_vti0\x00', @random="1365d939d6db"})

4.398247319s ago: executing program 7 (id=4240):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.1071345s ago: executing program 7 (id=4243):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x405, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x7, 0x115c, 0x115c, @in=@loopback}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x80, "1122334455667788990011223344556611223344"}}]}, 0x16c}}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x6)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000900)=ANY=[@ANYBLOB="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"/716, @ANYRES8, @ANYRES64, @ANYRES16], 0x5, 0x5593, &(0x7f00000061c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbaTFBAhoEgEoSJ1gIWmbmnpihAoYuBPQIpSpwRcCm0GWkWULGwoC0sXBCNCSKCw5X/o3EhdytYhQ5CYGILufJeeY5dEBc6m+f2kd+/z+Xrve+dTlc/vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2HkrviniJN1Mp5uJqOf77u6uLaX99oE+tbVxby5taVyrOvHx93L5xcnZ0SUCAADA8ZEU9X1E3G9uLqR9fTqr/5vFMWnN/90zvbio5w/W/du7a5P5W3NF/f/rLw9e2B9oOsnGSU+6vNLtnBlMpfEfTXHsPXvoEY3symffvSTZB1J/b/35nWZ2PWtf37nzTisLJ6rIFgB4HKeLPg+Kv4fSvj3KxAA4Nhqlwruo/5Pp0eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIWd9XiqiGsRMdd4GKe2d9eWhvVfbtyb28rbhdu3N8rnTE/RjIjllW7nTIVzGV/F1bz58WK327l2/UbVwcmIGPLWraP98yRP/5HHtCKib8+pF4ec54MjjHXgPANBfntGtddwKp3foQfX+vbUBi7423s9o7gBqgrq+eczLvkMBpOPvo0PCYp7799PrOL/jgAAeOI185ZWovebmwvpvtpMxN73/fX/q6U4+ur+vVu9Pb3XW6X6/8GHF+6WxyrX/+2K5vd/ML965dP56zduvr5yZfFy53LnkzfOtt9sn7t4/vzF+ey7kvnlqPvGBAAAgH+glbdy/V+fGVz/P1GK42/W/8v1/2fftr8oj5Wo/4d6uOg36kwAAACOo9Z+9Nwrf/xeG3JErdWKzxdXV6+1e9v912d720rTfUwTeSvX/8nMqLMCAAAAqrCzXutb/79UiuOI6/9P//DST+VzJhExFXE1Ijqnl652L1U3nbFWxc+bs4Fao54pAAAAozKVt/L6fzN7/r++/8hDPSJeOxXxZ/4b/jhi/Z+8+9WP5bHKz/+fq3SW46c+27seWT8b0ZgddUYAAAA8ySbzlhb7vzU3Fz76+cT7Lc//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//VDwyJg==")
bind$inet(r1, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
listen(r1, 0x5)
r2 = socket$inet_tcp(0x2, 0x1, 0x6)
connect$inet(r2, &(0x7f0000000200)={0x2, 0x115c, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000600)="1234", 0x2, 0x0, 0x0, 0x0)

3.798002437s ago: executing program 1 (id=4245):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x300, 0x1}, 0x50)

3.439381131s ago: executing program 1 (id=4247):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newtaction={0x18, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e, 0x0, 0x1}, 0x8d0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

3.179640456s ago: executing program 0 (id=4248):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x10, &(0x7f0000001480)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9f}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50)

2.921798369s ago: executing program 5 (id=4249):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff})
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000003c0)={0x44, r4, 0xb97534d5fe9704cf, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x4040004)

2.735217306s ago: executing program 1 (id=4250):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17f, &(0x7f0000000500)="$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")
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x40000)
syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00')
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
listen(r1, 0xfffffffc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r5, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)
sendmsg$nl_route(r0, 0x0, 0x0)

2.559231429s ago: executing program 0 (id=4251):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000070000000200000004"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
close(0x3)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000500)="7964b4976de7309dc4e60544b713fcdef032c4762e8929f06a49f3d5af1491766ad3020d4b7b2c86e8df094760e6a0f359ceadfa4a144fc9ae957eb77129a6b6a09b54c63b478503f16f526479e57717616673071125ec1c36a415ae15af0de6c4426235af9ab27ea46708564160fadeb5e70a528f6e6684a427883e427ab9d32bd4139c32f7658ebc76b6214183c79be4c8313d01955d2dbd000e5f62b88049cbb71cdec35942606667f7605a", 0x1003, r2}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4)
sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2.517147903s ago: executing program 3 (id=4252):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)

2.287140561s ago: executing program 3 (id=4253):
syz_genetlink_get_family_id$ipvs(&(0x7f0000000ac0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@local, @random="86082b9827c1", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7fa727", 0x8, 0x2c, 0x0, @private2, @local, {[@fragment={0x3a, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68}]}}}}}, 0x0)

2.263396048s ago: executing program 0 (id=4254):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.126987033s ago: executing program 3 (id=4255):
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_1\x00', @random="0163000030d9"})

1.971295039s ago: executing program 0 (id=4256):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x2b, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0050000000000000677fbacfe1416e000030a83079f03b18000440c", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0xfffffffffffffdab, &(0x7f0000000100)="b9ff03316844268cb89e14f008004c6ce6b18987f7c57ee005000000000002", 0x0, 0xfffffffd, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.815075224s ago: executing program 1 (id=4257):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c)
listen(r1, 0x6)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10)
accept(r0, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0)

1.797314971s ago: executing program 5 (id=4258):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x1, 0x8, 0xb}, 0x50)

1.623030859s ago: executing program 3 (id=4259):
r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.423369293s ago: executing program 5 (id=4260):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0xfffffff7)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x2008800, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0xfffffffe, 0x30024404, 0x0, 0xfffe, 0x9, 0xfffffffe, 0x0, 0x0, 0x10, 0x4}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x13)
close(0xffffffffffffffff)

1.163073596s ago: executing program 3 (id=4261):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d80)=@newtaction={0x18, 0x1e, 0x109, 0x0, 0x25dfdbfe, {}, [{0x4}]}, 0x18}, 0x1, 0x2b1e, 0x0, 0x1}, 0x8d0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

489.917869ms ago: executing program 0 (id=4262):
r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@o_path={0x0, 0xffffffffffffffff, 0x4000, r1}, 0x18)

463.404592ms ago: executing program 3 (id=4263):
sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c00000074fa46d5fc867486086e8ef7e33120b3a9a3c7bd99", @ANYBLOB="05001000000000000000060000000800050002000000"], 0x1c}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x880}, 0x0)
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f0000d06000)=0x1, 0x4)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
connect$inet(r0, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000008c0)=0x80000000, 0x4)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000280)={'veth0_to_bond\x00', {0x2, 0x4e5f, @empty}})
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0), 0x4)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, 0x0, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x339)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r2=>0x0}, 0x0)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xe, 0x0, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000740)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000640)=0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300), 0x4)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000ca48186a0000000000", @ANYRES32, @ANYBLOB='!\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000780), &(0x7f0000000880)=0x4)
recvmsg$kcm(r1, 0x0, 0x40000003)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x12e6, 0x0, 0x0)
recvmmsg$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400})
setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000003c0)={r2, 0xcb}, 0x8)
nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f0000000480))

422.903977ms ago: executing program 1 (id=4264):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}]}}, 0x0, 0x26}, 0x28)

107.240659ms ago: executing program 0 (id=4265):
pipe(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00'], 0x30}, 0x1, 0x0, 0x0, 0x20004044}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0)

107.001661ms ago: executing program 1 (id=4266):
r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x1461, &(0x7f0000002a00)=ANY=[], 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0)
syz_emit_ethernet(0x101, &(0x7f00000004c0)={@local, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x0, 0x1}}, {@ipv4={0x800, @udp={{0x15, 0x4, 0x0, 0x37, 0xeb, 0x65, 0x0, 0x1, 0x11, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x20, 0x59, 0x0, 0x7, [0x1, 0xffff, 0x5, 0x3d, 0x6, 0x10, 0x45a6]}, @generic={0x88, 0xf, "0028ac72e7ec1a84bca9d2a72e"}, @rr={0x7, 0xf, 0x4b, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}]}]}}, {0x4e20, 0x4e23, 0x97, 0x0, @gue={{0x1, 0x0, 0x1, 0x1, 0x100, @void}, "d9f0f547763a648753f7b749e28ced3d5e3da67c7f02bafe218dee15e047736cc09d8ce61d40dfc97a7b7ebe3e5311b6a2e2670445a40c86a4b57576677697026a6784b4eefe7c5a8d933ff58715ec2c33e2ff2715a62aa574c32e004beea2c13cf81be11a636b31344baac09019ec9d7a0b7c53dc950498c765f4f653078ba5e6a6c1094f30a53ec5a52d"}}}}}}, 0x0)

0s ago: executing program 7 (id=4267):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000400)=@raw=[@generic={0xb7, 0x2, 0x0, 0x0, 0x2}, @generic={0x73, 0xa, 0x2, 0xffc0}, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r0, 0x0, 0x23, 0x0, &(0x7f00000005c0)="001122334455001122334456080045000028000000004006f8ce0a0000010a00000200", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

eam-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.442751][   T31] audit: type=1326 audit(1785525377.151:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.469399][  T186] cxacru 2-1:1.0: submit of read urb for cm 0x90 failed (-90)
[  629.476171][ T5787] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  629.489289][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  629.498029][  T186] cxacru 2-1:1.0: usbatm_usb_probe: invalid endpoint 02!
[  629.516904][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  629.529648][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10
[  629.533001][  T186] cxacru 2-1:1.0: probe with driver cxacru failed with error -22
[  629.548725][ T5949] usb 37-1: new low-speed USB device number 4 using vhci_hcd
[  629.556821][ T1014] vhci_hcd vhci_hcd.2: release socket
[  629.570096][   T31] audit: type=1326 audit(1785525377.151:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.599780][ T1014] vhci_hcd vhci_hcd.2: disconnect device
[  629.611378][   T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[  629.653922][   T29] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  629.666626][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.674975][   T31] audit: type=1326 audit(1785525377.151:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.711323][   T29] usb 6-1: Product: syz
[  629.712493][  T186] usb 2-1: USB disconnect, device number 17
[  629.717352][ T5787] usb 3-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00
[  629.735255][   T29] usb 6-1: Manufacturer: syz
[  629.740016][   T29] usb 6-1: SerialNumber: syz
[  629.746450][ T5787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.760370][ T5787] usb 3-1: Product: syz
[  629.767455][   T31] audit: type=1326 audit(1785525377.151:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.797066][   T29] usb 6-1: config 0 descriptor??
[  629.802080][ T5787] usb 3-1: Manufacturer: syz
[  629.807657][ T5787] usb 3-1: SerialNumber: syz
[  629.816939][   T31] audit: type=1326 audit(1785525377.151:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.877133][   T31] audit: type=1326 audit(1785525377.151:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.907420][   T31] audit: type=1326 audit(1785525377.151:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12735 comm="syz.0.2266" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6772b9e019 code=0x7ffc0000
[  629.914430][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2269'.
[  629.986055][T12742] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2269'.
[  630.025689][   T29] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  630.127036][T12745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2271'.
[  630.152703][T12746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  630.216089][T12750] fuse: Bad value for 'fd'
[  630.234153][T12750] fuse: Bad value for 'fd'
[  630.253589][T12746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  630.392509][  T186] usb 6-1: USB disconnect, device number 13
[  630.611439][T12759] io-wq is not configured for unbound workers
[  630.756113][T12762] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check.
[  630.893100][T12765] netlink: 'syz.1.2279': attribute type 4 has an invalid length.
[  631.838680][ T5787] kaweth 3-1:1.0: Downloading firmware...
[  631.845675][ T5787] usb 3-1: Direct firmware load for kaweth/new_code.bin failed with error -2
[  631.895367][ T5787] usb 3-1: Falling back to sysfs fallback for: kaweth/new_code.bin
[  632.630399][T12785] siw: device registration error -23
[  633.584056][T12787] fuse: Bad value for 'fd'
[  634.022701][T12802] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  634.097681][ T7371] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  634.143493][T12807] netlink: 'syz.0.2295': attribute type 4 has an invalid length.
[  634.465977][ T7371] usb 2-1: Using ep0 maxpacket: 32
[  634.479749][ T7371] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  634.479799][ T7371] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.479838][ T7371] usb 2-1: Product: syz
[  634.479867][ T7371] usb 2-1: Manufacturer: syz
[  634.479896][ T7371] usb 2-1: SerialNumber: syz
[  634.484858][ T7371] usb 2-1: config 0 descriptor??
[  635.285985][ T5949] vhci_hcd vhci_hcd.2: vhci_device speed not set
[  635.367055][ T7371] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate
[  635.367105][ T7371] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71
[  635.369864][ T7371] usb 2-1: USB disconnect, device number 18
[  635.598978][T12822] siw: device registration error -23
[  635.749181][T12825] siw: device registration error -23
[  636.508698][T12844] netlink: 'syz.0.2310': attribute type 4 has an invalid length.
[  636.628069][T12848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2312'.
[  636.835260][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  637.623842][T12861] siw: device registration error -23
[  638.312870][T12869] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2319'.
[  638.313086][T12869] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2319'.
[  638.553988][T12867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.772774][T12867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  638.820022][T12880] netlink: 'syz.6.2325': attribute type 4 has an invalid length.
[  639.061901][T12867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  639.987455][T12867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  640.438483][T12901] netlink: 'syz.3.2334': attribute type 33 has an invalid length.
[  640.488813][T12901] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2334'.
[  640.555995][T12901] `: renamed from team0 (while UP)
[  640.696849][ T6546] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.751249][ T6546] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.907025][ T6546] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.932901][ T6546] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  642.718614][T12950] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.836750][T12950] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.951220][T12950] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.077308][T12950] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.381474][ T8542] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  644.581819][ T8542] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  644.600425][ T8542] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  644.708739][ T6206] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  644.824669][T12985] fuse: Bad value for 'fd'
[  646.043266][ T6206] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  647.782522][T13034] fuse: Bad value for 'fd'
[  647.872995][T12988] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  648.410994][T13048] netlink: 'syz.0.2390': attribute type 4 has an invalid length.
[  648.502733][T13053] netlink: 'syz.0.2390': attribute type 4 has an invalid length.
[  649.791877][T13097] netlink: 'syz.3.2409': attribute type 4 has an invalid length.
[  649.817515][T13097] netlink: 'syz.3.2409': attribute type 4 has an invalid length.
[  650.122262][T13108] fuse: fd is not a fuse device
[  650.939615][   T31] kauditd_printk_skb: 21 callbacks suppressed
[  650.939642][   T31] audit: type=1326 audit(1785525398.701:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.036090][   T31] audit: type=1326 audit(1785525398.701:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.100238][   T31] audit: type=1326 audit(1785525398.731:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.155555][   T31] audit: type=1326 audit(1785525398.741:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.181950][   T31] audit: type=1326 audit(1785525398.741:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.224233][T13132] netlink: 'syz.5.2423': attribute type 4 has an invalid length.
[  651.250164][   T31] audit: type=1326 audit(1785525398.741:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.274189][T13133] netlink: 'syz.5.2423': attribute type 4 has an invalid length.
[  651.279791][   T31] audit: type=1326 audit(1785525398.751:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.320987][   T31] audit: type=1326 audit(1785525398.751:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.349118][   T31] audit: type=1326 audit(1785525398.751:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13122 comm="syz.5.2421" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdef859e019 code=0x7ffc0000
[  651.763744][T13145] fuse: fd is not a fuse device
[  653.689524][T13179] fuse: fd is not a fuse device
[  653.985011][T13189] netlink: 'syz.5.2445': attribute type 4 has an invalid length.
[  654.197619][T13189] netlink: 'syz.5.2445': attribute type 4 has an invalid length.
[  655.982610][ T5749] IPVS: starting estimator thread 0...
[  656.010564][T13210] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  656.108065][T13212] IPVS: using max 22 ests per chain, 52800 per kthread
[  657.001271][T13231] fuse: fd is not a fuse device
[  658.806171][   T29] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  658.980917][   T29] usb 6-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00
[  659.028085][   T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  659.046044][   T29] usb 6-1: Product: syz
[  659.057039][   T29] usb 6-1: Manufacturer: syz
[  659.069740][   T29] usb 6-1: SerialNumber: syz
[  660.752353][T13299] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2493'.
[  660.923558][   T29] kaweth 6-1:1.0: Downloading firmware...
[  661.440379][   T31] audit: type=1326 audit(1785525409.201:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.1.2503" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee19e019 code=0x7ffc0000
[  661.555239][   T31] audit: type=1326 audit(1785525409.201:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.1.2503" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee19e019 code=0x7ffc0000
[  661.650153][   T31] audit: type=1326 audit(1785525409.301:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.1.2503" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f1bee19e019 code=0x7ffc0000
[  661.751890][   T31] audit: type=1326 audit(1785525409.301:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.1.2503" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee19e019 code=0x7ffc0000
[  661.851533][   T31] audit: type=1326 audit(1785525409.311:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.1.2503" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f1bee19e019 code=0x7ffc0000
[  661.998198][   T31] audit: type=1326 audit(1785525409.311:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.1.2503" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bee19e019 code=0x7ffc0000
[  664.882719][T13343] fuse: fd is not a fuse device
[  666.154732][T13383] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  666.370661][T13389] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2533'.
[  666.734130][T13401] netlink: 'syz.6.2539': attribute type 4 has an invalid length.
[  666.784617][T13404] pim6reg: entered allmulticast mode
[  666.798607][T13404] pim6reg: left allmulticast mode
[  666.859781][T13406] fuse: fd is not a fuse device
[  667.966869][T13418] syz.0.2544 (13418) used greatest stack depth: 18472 bytes left
[  668.626927][T13436] siw: device registration error -23
[  669.390965][T13443] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  671.140642][T13444] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  671.818651][T13444] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.071237][T13444] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.566629][   T58] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  672.736503][   T58] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  672.761325][   T58] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  672.800820][   T58] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.044090][T13571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2600'.
[  676.548801][T13611] fuse: Bad value for 'fd'
[  677.578215][T13645] fuse: Bad value for 'fd'
[  677.966756][T13419] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  678.140372][T13419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  678.168742][T13419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  678.195490][T13419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 97, changing to 10
[  678.217765][T13419] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 24929, setting to 1024
[  678.271329][T13419] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  678.293476][T13419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  678.331242][T13419] usb 2-1: Product: syz
[  678.352185][T13419] usb 2-1: Manufacturer: syz
[  678.381224][T13419] usb 2-1: SerialNumber: syz
[  678.424996][T13419] usb 2-1: config 0 descriptor??
[  678.657473][T13419] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0
[  679.126330][T13419] usb 2-1: USB disconnect, device number 19
[  679.394610][T13668] fuse: fd is not a fuse device
[  679.665597][T13675] fuse: Bad value for 'fd'
[  680.031968][T13688] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  680.038517][T13688] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  680.078567][T13688] vhci_hcd vhci_hcd.0: Device attached
[  680.241749][T13689] usbip_core: unknown command
[  680.252335][T13689] vhci_hcd: unknown pdu 100663296
[  680.268614][T13689] usbip_core: unknown command
[  680.295314][   T58] vhci_hcd vhci_hcd.5: stop threads
[  680.303355][   T58] vhci_hcd vhci_hcd.5: release socket
[  680.316924][ T7371] usb 43-1: new low-speed USB device number 8 using vhci_hcd
[  680.332960][   T58] vhci_hcd vhci_hcd.5: disconnect device
[  682.573460][T13729] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2667'.
[  682.717783][T13739] netlink: 'syz.3.2671': attribute type 4 has an invalid length.
[  683.912594][T13750] fuse: Bad value for 'fd'
[  684.871354][T13776] netlink: 'syz.2.2688': attribute type 4 has an invalid length.
[  685.027851][T13783] fuse: Bad value for 'fd'
[  685.150403][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  685.157066][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  685.456150][ T7371] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  686.232232][T13820] netlink: 'syz.2.2706': attribute type 4 has an invalid length.
[  687.757041][T13833] fuse: fd is not a fuse device
[  687.816221][T13833] fuse: Bad value for 'fd'
[  688.647898][T13854] netlink: 'syz.1.2719': attribute type 4 has an invalid length.
[  690.532069][T13878] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2729'.
[  690.554229][T13878] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2729'.
[  691.419386][T13905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2739'.
[  691.445574][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2739'.
[  693.371979][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2755'.
[  693.448681][T13946] gretap0: entered promiscuous mode
[  693.545333][T13948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2757'.
[  693.571245][T13948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2757'.
[  695.393862][   T29] kaweth 6-1:1.0: Firmware request failed
[  695.405290][ T5787] kaweth 3-1:1.0: Firmware request failed
[  695.421739][   T29] kaweth 6-1:1.0: Error downloading firmware (-2)
[  695.436728][ T5787] kaweth 3-1:1.0: Error downloading firmware (-110)
[  695.457021][   T29] kaweth 6-1:1.0: probe with driver kaweth failed with error -5
[  695.478551][ T5787] kaweth 3-1:1.0: probe with driver kaweth failed with error -5
[  695.560903][   T29] usb 6-1: USB disconnect, device number 14
[  695.588593][ T5787] usb 3-1: USB disconnect, device number 20
[  707.468206][   T31] audit: type=1326 audit(1785525455.121:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14128 comm="syz.5.2824" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdef859e019 code=0x0
[  707.535352][T14132] netlink: 'syz.3.2822': attribute type 4 has an invalid length.
[  709.384746][T14172] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[  709.411653][T14174] siw: device registration error -23
[  710.223317][T14180] netlink: 'syz.3.2842': attribute type 4 has an invalid length.
[  711.371129][T14212] fuse: Bad value for 'fd'
[  711.392147][T14213] netlink: 'syz.5.2858': attribute type 4 has an invalid length.
[  711.445982][T14210] siw: device registration error -23
[  714.092074][T14263] netlink: 'syz.1.2875': attribute type 4 has an invalid length.
[  714.141814][T14271] siw: device registration error -23
[  715.601886][T14316] netlink: 'syz.0.2892': attribute type 4 has an invalid length.
[  716.758482][T14324] siw: device registration error -23
[  717.224930][T14342] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2904'.
[  717.628560][T14360] netlink: 'syz.6.2911': attribute type 4 has an invalid length.
[  719.324186][T14383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2923'.
[  719.371310][T14385] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2924'.
[  719.882984][T14404] netlink: 'syz.6.2930': attribute type 4 has an invalid length.
[  720.313970][T14415] siw: device registration error -23
[  720.492835][T14423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2940'.
[  720.644039][T14428] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2943'.
[  721.702854][T14442] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2949'.
[  721.738801][T14442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2949'.
[  721.842112][T14445] netlink: 'syz.3.2950': attribute type 4 has an invalid length.
[  722.422274][T14459] siw: device registration error -23
[  722.911689][   T31] audit: type=1326 audit(1785525470.671:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.3.2963" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  723.036970][   T31] audit: type=1326 audit(1785525470.671:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.3.2963" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  723.089085][T14478] netlink: 'syz.2.2966': attribute type 4 has an invalid length.
[  723.196656][   T31] audit: type=1326 audit(1785525470.741:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.3.2963" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  723.315230][   T29] lo speed is unknown, defaulting to 1000
[  723.421716][   T29] syz2: Port: 1 Link DOWN
[  723.428117][   T31] audit: type=1326 audit(1785525470.741:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.3.2963" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  723.454023][   T31] audit: type=1326 audit(1785525470.741:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14471 comm="syz.3.2963" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  724.038447][T14502] siw: device registration error -23
[  724.595452][T14517] netlink: 'syz.0.2983': attribute type 4 has an invalid length.
[  724.764373][T14519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2984'.
[  727.281017][T14543] siw: device registration error -23
[  727.532620][   T31] audit: type=1326 audit(1785525475.291:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14551 comm="syz.3.2997" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  727.660381][   T31] audit: type=1326 audit(1785525475.291:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14551 comm="syz.3.2997" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  727.928337][T14558] netlink: 'syz.0.3000': attribute type 4 has an invalid length.
[  727.951430][   T31] audit: type=1326 audit(1785525475.291:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14551 comm="syz.3.2997" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  727.982511][   T31] audit: type=1326 audit(1785525475.291:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14551 comm="syz.3.2997" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  728.082652][   T31] audit: type=1326 audit(1785525475.291:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14551 comm="syz.3.2997" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f630e79e019 code=0x7ffc0000
[  730.697467][T14591] siw: device registration error -23
[  731.117949][T14607] netlink: 'syz.1.3019': attribute type 4 has an invalid length.
[  734.142631][T14644] siw: device registration error -23
[  734.156136][T14643] siw: device registration error -23
[  734.472544][T14650] netlink: 'syz.2.3035': attribute type 4 has an invalid length.
[  735.994102][T14666] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3043'.
[  736.925667][T14681] siw: device registration error -23
[  737.322514][T14684] siw: device registration error -23
[  738.359843][T14695] netlink: 'syz.3.3051': attribute type 4 has an invalid length.
[  739.587539][T14712] netlink: 'syz.3.3059': attribute type 11 has an invalid length.
[  739.914438][T14719] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3060'.
[  740.036972][T14732] siw: device registration error -23
[  740.264987][T14743] netlink: 'syz.6.3071': attribute type 4 has an invalid length.
[  741.371706][T14760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3079'.
[  741.410161][T14763] netlink: 'syz.5.3077': attribute type 11 has an invalid length.
[  741.799306][T14775] siw: device registration error -23
[  742.114227][T14787] netlink: 'syz.3.3090': attribute type 4 has an invalid length.
[  742.301422][T14788] overlayfs: missing 'lowerdir'
[  744.126743][T14788] netlink: 'syz.5.3089': attribute type 2 has an invalid length.
[  744.146922][T14788] : entered promiscuous mode
[  746.045361][T14821] siw: device registration error -23
[  746.062033][T14823] netlink: 'syz.0.3101': attribute type 11 has an invalid length.
[  746.687353][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  746.693923][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  747.792415][T14849] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  749.032598][  T186] lo speed is unknown, defaulting to 1000
[  749.055288][  T186] syz2: Port: 1 Link ACTIVE
[  750.887612][T14906] netlink: 'syz.2.3132': attribute type 4 has an invalid length.
[  750.989458][ T5764] lo speed is unknown, defaulting to 1000
[  750.999311][ T5764] syz2: Port: 1 Link DOWN
[  751.213691][T14908] siw: device registration error -23
[  753.355611][T14950] siw: device registration error -23
[  755.193729][T14981] overlay: ./file0 is not a directory
[  755.425380][T14985] siw: device registration error -23
[  755.479522][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'.
[  757.413184][T15025] siw: device registration error -23
[  759.166735][T15059] siw: device registration error -23
[  759.536099][T15063] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3198'.
[  760.718396][T15084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  761.243570][ T5626] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  761.256924][ T5626] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  761.280177][ T5626] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  761.298025][ T5626] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  761.319800][T15124] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  762.233985][ T1014] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.386403][ T5630] Bluetooth: hci1: command tx timeout
[  763.401641][ T1014] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.585633][ T1014] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  763.783095][ T1014] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  764.013143][T15118] lo speed is unknown, defaulting to 1000
[  765.526115][ T5630] Bluetooth: hci1: command tx timeout
[  765.742455][T15198] program syz.1.3248 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  765.857912][ T1014] bridge_slave_1: left allmulticast mode
[  765.877876][ T1014] bridge_slave_1: left promiscuous mode
[  765.893964][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state
[  765.932323][ T1014] bridge_slave_0: left allmulticast mode
[  765.945989][ T1014] bridge_slave_0: left promiscuous mode
[  765.954994][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state
[  766.677699][T15223] netlink: 'syz.1.3255': attribute type 11 has an invalid length.
[  766.750178][ T1014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  766.763855][ T1014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  766.786326][ T1014] bond0 (unregistering): Released all slaves
[  767.102762][ T1014] tipc: Disabling bearer <eth:syzkaller0>
[  767.152550][ T1014] tipc: Left network mode
[  767.553301][ T5630] Bluetooth: hci1: command tx timeout
[  767.723618][T15261] netlink: 'syz.3.3264': attribute type 4 has an invalid length.
[  768.886897][T15271] siw: device registration error -23
[  769.171087][T15280] netlink: 'syz.2.3272': attribute type 11 has an invalid length.
[  769.233612][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  769.628767][ T5630] Bluetooth: hci1: command tx timeout
[  769.733608][ T1014] hsr_slave_0: left promiscuous mode
[  769.765440][ T1014] hsr_slave_1: left promiscuous mode
[  769.788603][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  769.812643][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_0
[  769.833697][ T1014] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  769.849726][ T1014] batman_adv: batadv0: Removing interface: batadv_slave_1
[  769.895474][ T1014] veth1_macvtap: left promiscuous mode
[  769.905694][ T1014] veth0_macvtap: left promiscuous mode
[  770.131441][ T1014] veth1_vlan: left promiscuous mode
[  770.137372][ T1014] veth0_vlan: left promiscuous mode
[  771.376486][T15321] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.3288'.
[  771.759968][ T1014] team0 (unregistering): Port device team_slave_1 removed
[  771.784954][ T1014] team0 (unregistering): Port device team_slave_0 removed
[  772.030151][T15118] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.041649][T15118] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.059235][T15118] bridge_slave_0: entered allmulticast mode
[  772.082907][T15118] bridge_slave_0: entered promiscuous mode
[  772.111237][T15118] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.130364][T15118] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.147093][T15118] bridge_slave_1: entered allmulticast mode
[  772.155404][T15118] bridge_slave_1: entered promiscuous mode
[  772.179474][T15335] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.358800][T15335] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.366696][T15324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  772.439199][T15344] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  772.454662][T15118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  772.491186][T15118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  772.564010][T15335] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.687237][T15118] team0: Port device team_slave_0 added
[  772.713160][T15118] team0: Port device team_slave_1 added
[  772.851413][T15335] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.896361][T15118] batman_adv: batadv0: Adding interface: batadv_slave_0
[  772.915704][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  772.977345][T15118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  773.028501][T15118] batman_adv: batadv0: Adding interface: batadv_slave_1
[  773.048283][T15118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  773.160768][T15118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  773.392257][T15118] hsr_slave_0: entered promiscuous mode
[  773.415306][T15118] hsr_slave_1: entered promiscuous mode
[  773.429349][T15118] debugfs: 'hsr0' already exists in 'hsr'
[  773.445320][T15118] Cannot create hsr debugfs directory
[  773.646782][   T58] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  773.836072][ T8535] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  773.884489][ T8535] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.053246][ T1014] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  774.810728][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  775.250618][T15405] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  776.398664][T15394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  776.592033][T15417] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  776.601829][T15417] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  776.612933][T15417] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  779.318771][T15468] mac80211_hwsim hwsim14 syzkaller0: left promiscuous mode
[  779.326320][T15468] mac80211_hwsim hwsim14 syzkaller0: left allmulticast mode
[  779.333775][T15468] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  782.327905][T15483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  783.226952][T15118] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  783.301213][T15118] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  783.309594][T15118] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  783.336242][T15118] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  783.369314][T15118] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  783.418194][T15118] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  783.445748][T15118] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  783.524019][T15118] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  783.560240][T15521] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  783.889630][T15118] 8021q: adding VLAN 0 to HW filter on device bond0
[  783.931709][T15118] 8021q: adding VLAN 0 to HW filter on device team0
[  783.993434][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state
[  784.001637][ T6545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  784.083428][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state
[  784.090780][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  784.321932][T15550] netlink: 'syz.2.3353': attribute type 4 has an invalid length.
[  786.464754][T15593] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  788.309280][T15579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  788.660719][T15118] 8021q: adding VLAN 0 to HW filter on device batadv0
[  789.113920][T15118] veth0_vlan: entered promiscuous mode
[  789.183730][T15118] veth1_vlan: entered promiscuous mode
[  789.357944][T15118] veth0_macvtap: entered promiscuous mode
[  789.418222][T15118] veth1_macvtap: entered promiscuous mode
[  789.555110][T15118] batman_adv: batadv0: Interface activated: batadv_slave_0
[  790.534587][T15118] batman_adv: batadv0: Interface activated: batadv_slave_1
[  790.776565][ T1014] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  790.876969][ T1014] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  790.899948][ T1014] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  791.012365][ T8535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.041347][ T8535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.085956][   T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  791.234483][ T6545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  791.266162][ T6545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  791.817768][T15672] fuse: Bad value for 'rootmode'
[  792.628914][T15679] fuse: Bad value for 'fd'
[  792.645592][T15659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  795.630239][T15724] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  795.650055][T15722] fuse: Bad value for 'rootmode'
[  795.824507][T15731] fuse: Bad value for 'fd'
[  797.870099][T15750] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3409'.
[  797.921945][T15750] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  797.929457][T15750] IPv6: NLM_F_CREATE should be set when creating new route
[  798.313821][T15766] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.325220][T15746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  799.677623][T15766] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  799.870815][T15766] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  800.628422][T15789] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  800.665286][T15791] fuse: Bad value for 'fd'
[  800.716800][T15791] fuse: Bad value for 'fd'
[  800.851329][T15766] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  801.359127][   T58] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  801.455977][  T969] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  801.545345][T15807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3426'.
[  801.576141][  T135] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  801.577028][T15807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  801.593850][T15807] IPv6: NLM_F_CREATE should be set when creating new route
[  801.618493][  T135] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  803.468125][T15842] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  803.652249][T15848] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  803.726289][T15848] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  803.807673][T15848] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  803.837899][T15854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3445'.
[  803.847380][T15854] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  803.854857][T15854] IPv6: NLM_F_CREATE should be set when creating new route
[  803.880753][T15848] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  804.031773][ T8542] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  804.316377][ T1014] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  804.828635][   T58] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  804.845012][   T58] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  806.370602][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3458'.
[  806.388893][T15887] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  806.701354][T15891] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  806.832115][T15895] bridge1: entered promiscuous mode
[  806.841834][T15895] bridge1: entered allmulticast mode
[  806.854095][T15895] team0: Device bridge1 is of different type
[  807.133844][T15908] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.350951][T15908] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  807.687662][T15908] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  808.028740][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  808.035166][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  808.324643][T15908] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  809.374669][T15936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3478'.
[  809.398467][   T58] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  809.486209][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3478'.
[  809.676808][  T969] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  810.080369][   T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  810.196156][   T58] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  810.224236][T15951] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  812.132925][T15978] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3492'.
[  812.213114][T15978] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  812.475097][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'.
[  812.914951][T15994] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  814.482355][T16017] CIFS: Attempting to mount //127.0.0.1/share
[  814.548706][T16019] netlink: 'syz.1.3510': attribute type 4 has an invalid length.
[  814.627598][T16019] netlink: 'syz.1.3510': attribute type 4 has an invalid length.
[  815.294312][T16017] CIFS: VFS: cifs_mount failed w/return code = -512
[  815.637259][T16038] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.764270][T16038] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.891191][T16038] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  815.971494][T16042] netlink: 'syz.6.3518': attribute type 11 has an invalid length.
[  816.239112][T16038] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  817.347626][T16054] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  818.336817][ T8542] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  818.936533][   T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  818.979202][   T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  819.076603][T16068] netlink: 'syz.2.3526': attribute type 4 has an invalid length.
[  819.086819][   T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  819.120094][T16068] netlink: 'syz.2.3526': attribute type 4 has an invalid length.
[  819.187962][T13419] lo speed is unknown, defaulting to 1000
[  819.215517][T13419] syz2: Port: 1 Link ACTIVE
[  819.508074][T15124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  819.521674][T15124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  819.531825][T15124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  819.548298][T15124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  819.621540][T15124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  821.800723][ T5630] Bluetooth: hci5: command tx timeout
[  823.662941][ T6206] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  823.870662][ T5630] Bluetooth: hci5: command tx timeout
[  824.101303][T16119] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  824.555291][ T6206] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.711745][T16131] overlayfs: failed to clone upperpath
[  824.713551][ T6206] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  824.838121][ T6206] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  825.946980][ T5630] Bluetooth: hci5: command tx timeout
[  826.532439][T16073] lo speed is unknown, defaulting to 1000
[  826.837152][ T6206] bridge_slave_1: left allmulticast mode
[  826.865901][ T6206] bridge_slave_1: left promiscuous mode
[  826.874917][ T6206] bridge0: port 2(bridge_slave_1) entered disabled state
[  826.959888][ T6206] bridge_slave_0: left allmulticast mode
[  826.983888][ T6206] bridge_slave_0: left promiscuous mode
[  827.008252][ T6206] bridge0: port 1(bridge_slave_0) entered disabled state
[  828.027424][ T5630] Bluetooth: hci5: command tx timeout
[  828.351709][T16187] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  828.694011][ T6206] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  828.735266][ T6206] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  828.776530][ T6206] bond0 (unregistering): Released all slaves
[  828.810436][ T6206] bond1 (unregistering): Released all slaves
[  828.839631][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3566'.
[  828.870557][T16197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  828.898932][T16197] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3566'.
[  828.950599][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3566'.
[  828.987464][T16197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  829.023182][T16200] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  829.043578][ T6206] tipc: Disabling bearer <eth:syzkaller0>
[  829.117747][ T6206] tipc: Left network mode
[  829.172172][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  830.649743][T16235] team0: No ports can be present during mode change
[  831.160321][T16242] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  831.310635][ T6206] hsr_slave_0: left promiscuous mode
[  831.319353][ T6206] hsr_slave_1: left promiscuous mode
[  831.326973][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  831.334651][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_0
[  831.351523][ T6206] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  831.640024][ T6206] batman_adv: batadv0: Removing interface: batadv_slave_1
[  831.668541][ T6206] veth1_macvtap: left promiscuous mode
[  831.674424][ T6206] veth0_macvtap: left promiscuous mode
[  831.681548][ T6206] veth1_vlan: left promiscuous mode
[  832.636100][ T6206] veth0_vlan: left promiscuous mode
[  834.748376][ T6206] ` (unregistering): Port device team_slave_1 removed
[  834.790450][ T6206] ` (unregistering): Port device team_slave_0 removed
[  835.260514][T16241] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3578'.
[  835.282847][T16271] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  835.292297][T16271] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  835.301983][T16271] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  835.368341][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  835.620655][T16073] bridge0: port 1(bridge_slave_0) entered blocking state
[  835.663514][T16073] bridge0: port 1(bridge_slave_0) entered disabled state
[  835.688125][T16073] bridge_slave_0: entered allmulticast mode
[  835.721356][T16073] bridge_slave_0: entered promiscuous mode
[  835.752984][T16073] bridge0: port 2(bridge_slave_1) entered blocking state
[  835.769080][T16073] bridge0: port 2(bridge_slave_1) entered disabled state
[  835.795025][T16073] bridge_slave_1: entered allmulticast mode
[  835.828350][T16073] bridge_slave_1: entered promiscuous mode
[  836.002575][T16073] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  836.260472][T16304] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  836.278901][T16073] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  836.583089][ T6206] IPVS: stop unused estimator thread 0...
[  836.594259][T16073] team0: Port device team_slave_0 added
[  836.630079][T16073] team0: Port device team_slave_1 added
[  836.690614][T16319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'.
[  836.734579][T16319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  836.747513][T16320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'.
[  836.775681][T16320] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  836.779303][T16073] batman_adv: batadv0: Adding interface: batadv_slave_0
[  836.804952][T16319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3598'.
[  836.821385][T16319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  836.823539][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  836.921510][T16073] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  836.965691][T16073] batman_adv: batadv0: Adding interface: batadv_slave_1
[  836.987751][T16073] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  837.071419][T16073] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  838.178189][T16330] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4
[  838.188704][T16330] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4
[  838.198372][T16330] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  838.353729][T16073] hsr_slave_0: entered promiscuous mode
[  838.379265][T16073] hsr_slave_1: entered promiscuous mode
[  838.404530][T16073] debugfs: 'hsr0' already exists in 'hsr'
[  838.429330][T16073] Cannot create hsr debugfs directory
[  838.743286][T16334] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3601'.
[  839.170785][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7
[  840.550176][T16367] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  840.963056][T16366] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.212055][T16366] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.376277][T16366] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  841.452041][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3618'.
[  841.472032][T16384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  841.492672][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3618'.
[  841.520918][T16384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  841.540769][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3618'.
[  841.566666][T16384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  841.633685][T16366] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  842.240753][ T1014] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  844.058871][ T6206] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  844.118187][ T6206] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  844.236780][ T6206] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  844.273362][T16073] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  844.329689][T16073] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  844.367244][T16073] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  844.427824][T16073] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  844.459905][T16073] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  844.554093][T16073] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  844.586685][T16073] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  844.628990][T16073] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  845.104851][T16073] 8021q: adding VLAN 0 to HW filter on device bond0
[  845.219629][T16073] 8021q: adding VLAN 0 to HW filter on device team0
[  845.301290][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state
[  845.308601][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  845.384852][T16434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  845.399878][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state
[  845.407070][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  845.685443][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3632'.
[  845.716918][T16441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  845.759813][T16441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3632'.
[  845.793577][T16441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  845.817431][T16447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3632'.
[  845.827221][T16447] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  850.076323][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3647'.
[  850.107566][T16508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  850.137927][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3647'.
[  850.185603][T16511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  850.198626][T16508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3647'.
[  850.248512][T16513] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  850.262275][T16508] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  850.278174][T16073] 8021q: adding VLAN 0 to HW filter on device batadv0
[  850.331167][T16516] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3650'.
[  850.361283][T16516] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3650'.
[  850.533590][T16073] veth0_vlan: entered promiscuous mode
[  850.771519][T16073] veth1_vlan: entered promiscuous mode
[  851.654828][T16073] veth0_macvtap: entered promiscuous mode
[  851.698303][T16073] veth1_macvtap: entered promiscuous mode
[  851.781111][T16073] batman_adv: batadv0: Interface activated: batadv_slave_0
[  851.858204][T16073] batman_adv: batadv0: Interface activated: batadv_slave_1
[  852.559189][ T1014] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  852.603655][ T1014] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  852.794143][ T8544] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  852.842863][ T8544] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.878405][ T6545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  852.960278][ T6545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  853.031019][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  853.070536][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  853.321682][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3663'.
[  853.374660][T16559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  853.382019][T16559] IPv6: NLM_F_CREATE should be set when creating new route
[  853.489698][T16559] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3663'.
[  853.550044][T16559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  853.748531][T16565] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3663'.
[  854.575669][T16565] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  854.705812][T16570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3665'.
[  854.796756][T16570] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  854.868534][T16570] bridge0: port 2(bridge_slave_1) entered disabled state
[  854.879454][T16570] bridge0: port 1(bridge_slave_0) entered disabled state
[  855.026895][T16575] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3667'.
[  855.963367][T16590] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3671'.
[  857.029104][T15124] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  857.042258][T15124] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  857.055443][T15124] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  857.067132][T15124] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  857.088787][T15124] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  857.327789][T16619] fuse: fd is not a fuse device
[  857.573640][T16624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  857.580994][T16624] IPv6: NLM_F_CREATE should be set when creating new route
[  857.635300][T16625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  857.740766][T16624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  858.078442][ T8544] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  858.483311][T16636] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3683'.
[  858.933867][ T8544] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  859.215527][T15124] Bluetooth: hci3: command tx timeout
[  859.854718][ T8544] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.124642][ T8544] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  860.378187][T16609] lo speed is unknown, defaulting to 1000
[  860.405816][T16671] fuse: fd is not a fuse device
[  860.588126][T16675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  860.608077][T16675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  860.627006][T16675] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  861.305941][T15124] Bluetooth: hci3: command tx timeout
[  861.875729][ T8544] bridge_slave_1: left allmulticast mode
[  861.903245][ T8544] bridge_slave_1: left promiscuous mode
[  861.930356][ T8544] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.973791][ T8544] bridge_slave_0: left allmulticast mode
[  861.992993][ T8544] bridge_slave_0: left promiscuous mode
[  862.010260][ T8544] bridge0: port 1(bridge_slave_0) entered disabled state
[  862.280707][T16706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3701'.
[  862.662815][T16721] fuse: fd is not a fuse device
[  864.070229][T15124] Bluetooth: hci3: command tx timeout
[  864.719766][T16747] netlink: 'syz.2.3715': attribute type 11 has an invalid length.
[  865.067369][T16763] fuse: fd is not a fuse device
[  865.193647][T16766] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3723'.
[  865.991419][ T8544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  866.034205][ T8544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  866.078054][ T8544] bond0 (unregistering): Released all slaves
[  866.106041][ T5626] Bluetooth: hci2: command 0x0c1a tx timeout
[  866.116271][T15124] Bluetooth: hci3: command tx timeout
[  866.132742][   T58] smbdirect: ib_dev[syz1] removed
[  866.221515][T16766] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3723'.
[  866.249615][   T10] syz1: Port: 1 Link DOWN
[  866.957541][ T8544] tipc: Disabling bearer <eth:syzkaller0>
[  866.979373][ T8544] tipc: Left network mode
[  867.080742][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3732'.
[  867.245675][T16800] fuse: fd is not a fuse device
[  867.408671][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3734'.
[  867.922706][T16824] fuse: fd is not a fuse device
[  867.988236][T16828] netlink: 'syz.5.3740': attribute type 11 has an invalid length.
[  868.186133][T15124] Bluetooth: hci2: command 0x0c1a tx timeout
[  868.339021][T16835] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3742'.
[  868.353780][T16835] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  868.360510][T16835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  868.368336][T16835] vhci_hcd vhci_hcd.0: Device attached
[  868.413080][T16839] vhci_hcd: cannot find a urb of seqnum 268435712 max seqnum 3
[  868.434607][T16835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3742'.
[  868.482273][ T8535] vhci_hcd vhci_hcd.3: stop threads
[  868.519449][ T8535] vhci_hcd vhci_hcd.3: release socket
[  868.538847][ T8535] vhci_hcd vhci_hcd.3: disconnect device
[  868.576090][   T10] vhci_hcd vhci_hcd.3: vhci_device speed not set
[  868.665185][ T8544] hsr_slave_0: left promiscuous mode
[  868.691218][ T8544] hsr_slave_1: left promiscuous mode
[  868.709340][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  868.727250][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_0
[  868.747107][ T8544] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  868.760442][ T8544] batman_adv: batadv0: Removing interface: batadv_slave_1
[  868.815424][ T8544] veth1_macvtap: left promiscuous mode
[  868.834694][ T8544] veth0_macvtap: left promiscuous mode
[  868.854484][ T8544] veth1_vlan: left promiscuous mode
[  868.869430][ T8544] veth0_vlan: left promiscuous mode
[  869.478699][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  869.487253][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  870.269759][ T8544] team0 (unregistering): Port device team_slave_1 removed
[  870.311466][ T8544] team0 (unregistering): Port device team_slave_0 removed
[  870.349243][T16880] netlink: 'syz.0.3756': attribute type 11 has an invalid length.
[  870.552133][T16609] bridge0: port 1(bridge_slave_0) entered blocking state
[  870.559795][T16609] bridge0: port 1(bridge_slave_0) entered disabled state
[  870.572017][T16609] bridge_slave_0: entered allmulticast mode
[  870.583285][T16609] bridge_slave_0: entered promiscuous mode
[  870.598408][T16856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3747'.
[  870.610753][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  870.693380][T16609] bridge0: port 2(bridge_slave_1) entered blocking state
[  870.706876][T16609] bridge0: port 2(bridge_slave_1) entered disabled state
[  870.714435][T16609] bridge_slave_1: entered allmulticast mode
[  870.723776][T16609] bridge_slave_1: entered promiscuous mode
[  870.859949][T16609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  870.899318][T16609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  871.202927][T16895] fuse: fd is not a fuse device
[  871.796431][T16609] team0: Port device team_slave_0 added
[  871.863748][T16609] team0: Port device team_slave_1 added
[  872.505434][T16609] batman_adv: batadv0: Adding interface: batadv_slave_0
[  872.518822][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.591024][T16609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  872.630926][ T8544] IPVS: stop unused estimator thread 0...
[  872.649918][T16609] batman_adv: batadv0: Adding interface: batadv_slave_1
[  872.670389][T16609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  872.716677][   T30] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  872.742366][T16609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  872.798176][T16918] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  872.896043][   T30] usb 4-1: device descriptor read/64, error -71
[  872.944766][T16609] hsr_slave_0: entered promiscuous mode
[  872.965221][T16609] hsr_slave_1: entered promiscuous mode
[  872.983209][T16609] debugfs: 'hsr0' already exists in 'hsr'
[  873.001108][T16609] Cannot create hsr debugfs directory
[  873.147105][   T30] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  873.286119][   T30] usb 4-1: device descriptor read/64, error -71
[  873.317635][T16934] fuse: fd is not a fuse device
[  873.411135][   T30] usb usb4-port1: attempt power cycle
[  873.531990][T16939] fuse: fd is not a fuse device
[  873.763161][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  873.776745][   T30] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  873.812243][   T30] usb 4-1: device descriptor read/8, error -71
[  874.278286][   T30] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  874.307423][   T30] usb 4-1: device descriptor read/8, error -71
[  875.098805][   T30] usb usb4-port1: unable to enumerate USB device
[  875.788801][T16962] lo speed is unknown, defaulting to 1000
[  876.504511][T16986] fuse: Bad value for 'fd'
[  876.766574][T16609] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  876.837306][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  876.881743][T16609] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  876.914328][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  876.991224][T16609] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  877.044882][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  877.074176][T16609] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  877.112456][T17002] fuse: Bad value for 'fd'
[  877.140078][T16609] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  877.842526][T16609] 8021q: adding VLAN 0 to HW filter on device bond0
[  877.938829][T16609] 8021q: adding VLAN 0 to HW filter on device team0
[  877.989222][ T6206] bridge0: port 1(bridge_slave_0) entered blocking state
[  877.996525][ T6206] bridge0: port 1(bridge_slave_0) entered forwarding state
[  878.057977][ T6206] bridge0: port 2(bridge_slave_1) entered blocking state
[  878.065211][ T6206] bridge0: port 2(bridge_slave_1) entered forwarding state
[  879.953302][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3801'.
[  880.252435][T17056] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.269671][T17065] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  880.532962][T17056] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.645442][T16609] 8021q: adding VLAN 0 to HW filter on device batadv0
[  880.683253][T17056] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  880.812716][T17056] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  881.074682][T17081] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3808'.
[  881.085934][T16609] veth0_vlan: entered promiscuous mode
[  881.136325][T16609] veth1_vlan: entered promiscuous mode
[  881.911230][T16609] veth0_macvtap: entered promiscuous mode
[  881.990869][T17089] overlayfs: failed to clone upperpath
[  882.046325][ T6545] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  882.087177][ T6545] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  882.144623][T16609] veth1_macvtap: entered promiscuous mode
[  882.271177][ T6206] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  882.368524][T16609] batman_adv: batadv0: Interface activated: batadv_slave_0
[  882.383755][T17096] overlayfs: failed to clone upperpath
[  882.405587][T17096] overlayfs: failed to clone upperpath
[  882.414362][T16609] batman_adv: batadv0: Interface activated: batadv_slave_1
[  882.446571][ T8544] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  882.496316][ T1014] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  882.538003][ T1014] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  882.612776][ T1014] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  882.622885][   T30] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  882.735979][ T1014] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  882.798321][   T30] usb 4-1: Using ep0 maxpacket: 32
[  882.814570][   T30] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  882.863588][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  882.873003][   T30] usb 4-1: config 0 has no interface number 0
[  882.900534][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  882.910614][   T30] usb 4-1: config 0 interface 184 has no altsetting 0
[  882.939838][   T30] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  882.971834][   T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  882.999879][   T30] usb 4-1: Product: syz
[  883.014223][   T30] usb 4-1: Manufacturer: syz
[  883.034399][   T30] usb 4-1: SerialNumber: syz
[  883.067323][   T30] usb 4-1: config 0 descriptor??
[  883.083710][ T8544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  883.125037][ T8544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  883.770459][T17125] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3821'.
[  884.378189][   T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71
[  884.400948][   T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  884.413239][   T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  884.913553][   T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  884.994782][   T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  885.051007][   T30] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  885.273267][   T30] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  885.326836][T15124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  885.346246][T15124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  885.388978][T15124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  885.420045][T15124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  885.781746][   T30] usb 4-1: USB disconnect, device number 22
[  886.021398][T15124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  886.078105][T17149] GUP no longer grows the stack in syz.0.3827 (17149): 200000005000-200000008000 (200000004000)
[  886.225586][T17149] CPU: 1 UID: 0 PID: 17149 Comm: syz.0.3827 Not tainted syzkaller #0 PREEMPT(full) 
[  886.225639][T17149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  886.225663][T17149] Call Trace:
[  886.225674][T17149]  <TASK>
[  886.225689][T17149]  dump_stack_lvl+0x100/0x190
[  886.225740][T17149]  gup_vma_lookup.cold+0x83/0x96
[  886.225800][T17149]  fixup_user_fault+0x253/0x510
[  886.225846][T17149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  886.225904][T17149]  fault_in_user_writeable+0x70/0xe0
[  886.225958][T17149]  futex_lock_pi+0x689/0x7f0
[  886.226031][T17149]  ? __pfx_futex_lock_pi+0x10/0x10
[  886.226091][T17149]  ? try_to_wake_up+0x70a/0x1c90
[  886.226150][T17149]  ? __pfx_try_to_wake_up+0x10/0x10
[  886.226235][T17149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  886.226283][T17149]  ? futex_private_hash_put+0x115/0x1c0
[  886.226340][T17149]  ? __pfx_futex_wake_mark+0x10/0x10
[  886.226435][T17149]  do_futex+0x371/0x440
[  886.226499][T17149]  ? __pfx_do_futex+0x10/0x10
[  886.226553][T17149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  886.226602][T17149]  ? __vm_munmap+0x1d2/0x390
[  886.226671][T17149]  __x64_sys_futex+0x34f/0x4d0
[  886.226733][T17149]  ? __pfx___x64_sys_futex+0x10/0x10
[  886.226799][T17149]  ? srso_alias_return_thunk+0x5/0xfbef5
[  886.226856][T17149]  do_syscall_64+0x115/0x870
[  886.226915][T17149]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  886.226956][T17149] RIP: 0033:0x7f9a8d59e019
[  886.226987][T17149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  886.227027][T17149] RSP: 002b:00007f9a8e3cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  886.227065][T17149] RAX: ffffffffffffffda RBX: 00007f9a8d825fa0 RCX: 00007f9a8d59e019
[  886.227092][T17149] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000
[  886.227117][T17149] RBP: 00007f9a8d63500c R08: 0000000000000000 R09: 0000000000000001
[  886.227146][T17149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  886.227170][T17149] R13: 00007f9a8d826038 R14: 00007f9a8d825fa0 R15: 00007ffc538146c8
[  886.227223][T17149]  </TASK>
[  887.203641][ T8535] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.477461][ T8535] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.639923][ T8535] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  887.791524][T17178] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3835'.
[  887.803331][ T8535] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  888.107513][ T5626] Bluetooth: hci0: command tx timeout
[  888.121236][T17141] lo speed is unknown, defaulting to 1000
[  888.344645][T17188] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3839'.
[  888.434792][T17188] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3839'.
[  890.197384][ T5626] Bluetooth: hci0: command tx timeout
[  890.525109][ T8535] team0: Port device xfrm0 removed
[  890.841299][ T8535] bond0 (unregistering): Released all slaves
[  890.905357][   T58] tipc: Resetting bearer <eth:team0>
[  891.117251][T17248] overlayfs: failed to clone upperpath
[  891.198135][ T8535] tipc: Disabling bearer <eth:syzkaller0>
[  891.249494][ T8535] tipc: Disabling bearer <eth:team0>
[  891.275816][ T8535] tipc: Left network mode
[  891.284069][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  891.571841][T17258] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  891.677296][T17260] fuse: fd is not a fuse device
[  891.923591][T17265] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3860'.
[  892.157307][T17265] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3860'.
[  892.381143][ T5626] Bluetooth: hci0: command tx timeout
[  893.511474][T17141] bridge0: port 1(bridge_slave_0) entered blocking state
[  893.519309][T17141] bridge0: port 1(bridge_slave_0) entered disabled state
[  893.527170][T17141] bridge_slave_0: entered allmulticast mode
[  893.535570][T17141] bridge_slave_0: entered promiscuous mode
[  893.573377][T17141] bridge0: port 2(bridge_slave_1) entered blocking state
[  893.587440][T17141] bridge0: port 2(bridge_slave_1) entered disabled state
[  893.595778][T17141] bridge_slave_1: entered allmulticast mode
[  893.615943][T17296] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3868'.
[  893.617857][T17141] bridge_slave_1: entered promiscuous mode
[  893.627172][T13419] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  893.707573][ T8535] hsr_slave_0: left promiscuous mode
[  893.727527][ T8535] hsr_slave_1: left promiscuous mode
[  893.809528][T13419] usb 2-1: config 0 has an invalid interface number: 41 but max is 0
[  893.831599][T13419] usb 2-1: config 0 has no interface number 0
[  893.850972][ T8535] veth1_macvtap: left promiscuous mode
[  893.853363][T13419] usb 2-1: config 0 interface 41 has no altsetting 0
[  893.879371][ T8535] veth0_macvtap: left promiscuous mode
[  893.891947][T13419] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  893.896816][ T8535] veth1_vlan: left promiscuous mode
[  893.911175][T17303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3870'.
[  893.914420][T13419] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  893.929158][ T8535] veth0_vlan: left promiscuous mode
[  893.946745][T13419] usb 2-1: Product: syz
[  893.951111][T13419] usb 2-1: Manufacturer: syz
[  893.955798][T13419] usb 2-1: SerialNumber: syz
[  893.969063][T13419] usb 2-1: config 0 descriptor??
[  894.412103][T17311] overlayfs: failed to clone upperpath
[  894.436038][ T5626] Bluetooth: hci0: command tx timeout
[  895.068182][T13419] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  896.421660][   T13] smbdirect: ib_dev[syz2] removed
[  896.432509][T17340] cgroup: Unknown subsys name 'cpuset'
[  896.464500][T13419] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9
[  896.512902][T13419] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  896.534896][   T30] lo speed is unknown, defaulting to 1000
[  896.549287][   T30] infiniband syz2: ib_query_port failed (-19)
[  896.556270][T13419] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71
[  896.565970][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  896.585328][T17141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  896.606528][T13419] usb 2-1: USB disconnect, device number 20
[  896.625989][T17306] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.694774][T17141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  896.807223][T17306] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  896.885000][T17141] team0: Port device team_slave_0 added
[  896.917483][T17141] team0: Port device team_slave_1 added
[  896.972653][T17338] netlink: 'syz.6.3882': attribute type 27 has an invalid length.
[  897.025680][T17344] netlink: 'syz.6.3882': attribute type 27 has an invalid length.
[  897.052093][T17306] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  897.307464][T17338] bridge0: port 2(bridge_slave_1) entered disabled state
[  897.317800][T17338] bridge0: port 1(bridge_slave_0) entered disabled state
[  897.392388][T17348] random: crng reseeded on system resumption
[  897.594453][T17338] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  897.643791][T17338] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  898.794133][T17338] vti0: left promiscuous mode
[  898.830866][T17338] vti0: left allmulticast mode
[  898.857367][T17141] batman_adv: batadv0: Adding interface: batadv_slave_0
[  898.887801][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  899.001541][T17141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  899.034024][T17141] batman_adv: batadv0: Adding interface: batadv_slave_1
[  899.041201][T17141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  899.075921][T17141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  899.261676][T17344] 8021q: adding VLAN 0 to HW filter on device bond0
[  899.338564][T17344] 8021q: adding VLAN 0 to HW filter on device team0
[  899.966194][T17344] 8021q: adding VLAN 0 to HW filter on device batadv0
[  900.072237][T17344] bridge0: port 1(bridge_slave_0) entered blocking state
[  900.079603][T17344] bridge0: port 1(bridge_slave_0) entered forwarding state
[  900.165620][T17344] bridge0: port 2(bridge_slave_1) entered blocking state
[  900.174737][T17344] bridge0: port 2(bridge_slave_1) entered forwarding state
[  900.338963][T17344] batman_adv: batadv0: Interface activated: batadv_slave_0
[  900.363278][T17344] batman_adv: batadv0: Interface activated: batadv_slave_1
[  900.428384][T17344] veth1_vlan: left promiscuous mode
[  900.447430][T17344] veth0_vlan: left promiscuous mode
[  900.465659][T17344] veth0_vlan: entered promiscuous mode
[  900.491422][T17344] veth1_vlan: entered promiscuous mode
[  900.521919][T17344] veth1_macvtap: left promiscuous mode
[  900.541152][T17344] veth0_macvtap: left promiscuous mode
[  900.561885][T17344] veth0_macvtap: entered promiscuous mode
[  900.589155][T17344] veth1_macvtap: entered promiscuous mode
[  900.649206][T17344] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check.
[  900.680739][T17394] fuse: Bad value for 'fd'
[  900.992530][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7
[  901.013609][T17306] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  901.356911][T17407] netlink: 'syz.6.3900': attribute type 12 has an invalid length.
[  901.997066][ T6545] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  902.290447][T17411] overlayfs: failed to clone lowerpath
[  902.330263][T17141] hsr_slave_0: entered promiscuous mode
[  902.337732][T17141] hsr_slave_1: entered promiscuous mode
[  902.436317][T17413] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  903.016491][   T13] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  903.025127][   T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  903.049762][   T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  903.400330][T17436] fuse: Bad value for 'fd'
[  903.413231][T17435] netlink: 'syz.6.3909': attribute type 5 has an invalid length.
[  903.446036][T17435] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3909'.
[  903.492867][T17440] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3911'.
[  904.135057][T17450] lo speed is unknown, defaulting to 1000
[  904.144285][T17450] lo speed is unknown, defaulting to 1000
[  904.151212][T17450] lo speed is unknown, defaulting to 1000
[  904.157934][T17450] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  904.172181][T17450] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  904.189159][T17450] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  904.209970][T17450] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  904.237542][T17450] lo speed is unknown, defaulting to 1000
[  904.244951][T17450] lo speed is unknown, defaulting to 1000
[  904.252489][T17450] lo speed is unknown, defaulting to 1000
[  904.259981][T17450] lo speed is unknown, defaulting to 1000
[  904.269632][T17450] lo speed is unknown, defaulting to 1000
[  904.277294][T17450] lo speed is unknown, defaulting to 1000
[  904.648921][T17461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'.
[  905.063665][T17467] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.393926][T17467] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.620811][T17479] lo speed is unknown, defaulting to 1000
[  905.629006][T17141] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  905.674677][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  905.730972][T17489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3924'.
[  905.808677][T17467] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  905.868602][T17141] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  905.897923][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  906.098676][T17467] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  906.155345][T17141] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  906.189818][T17495] netlink: 'syz.3.3925': attribute type 5 has an invalid length.
[  906.205629][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  906.214504][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'.
[  906.240693][T17141] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  906.261476][T17141] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  906.794937][T17511] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3928'.
[  906.865133][ T8542] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  906.966101][ T8542] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  907.186258][ T6545] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  907.204688][T17516] siw: device registration error -23
[  907.229675][ T6545] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  907.394149][T17141] 8021q: adding VLAN 0 to HW filter on device bond0
[  907.463328][T17141] 8021q: adding VLAN 0 to HW filter on device team0
[  907.511570][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state
[  907.518831][ T6545] bridge0: port 1(bridge_slave_0) entered forwarding state
[  907.615641][ T8542] bridge0: port 2(bridge_slave_1) entered blocking state
[  907.623098][ T8542] bridge0: port 2(bridge_slave_1) entered forwarding state
[  908.310828][T17543] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3936'.
[  908.656804][T17555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3939'.
[  908.703636][T17555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3939'.
[  908.776779][T17555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3939'.
[  909.885443][T17583] siw: device registration error -23
[  909.907074][T17583] bridge0: port 2(bridge_slave_1) entered blocking state
[  909.914233][T17583] bridge0: port 2(bridge_slave_1) entered forwarding state
[  909.921751][T17583] bridge0: port 1(bridge_slave_0) entered blocking state
[  909.928996][T17583] bridge0: port 1(bridge_slave_0) entered forwarding state
[  910.241352][T17141] 8021q: adding VLAN 0 to HW filter on device batadv0
[  910.620420][T17141] veth0_vlan: entered promiscuous mode
[  910.677016][T17612] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies.
[  910.713810][T17141] veth1_vlan: entered promiscuous mode
[  910.870519][T17141] veth0_macvtap: entered promiscuous mode
[  910.928627][T17141] veth1_macvtap: entered promiscuous mode
[  910.996743][T17616] random: crng reseeded on system resumption
[  911.035246][T17141] batman_adv: batadv0: Interface activated: batadv_slave_0
[  911.098420][T17141] batman_adv: batadv0: Interface activated: batadv_slave_1
[  911.178459][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3952'.
[  911.180053][T17565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  911.245995][T17565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  911.253503][T17624] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3952'.
[  911.394800][T17623] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3952'.
[  911.536075][T17565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  911.602516][T17565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  911.822875][T17588] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  911.860350][T17588] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  912.118123][T17590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  912.155921][T17590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  913.364513][T15124] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  913.381094][T15124] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  913.393425][T15124] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  913.409724][T15124] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  913.417816][T15124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  913.594466][T17653] siw: device registration error -23
[  913.663463][T17590] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.093009][T17590] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.433024][T17590] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.581022][T17590] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  914.755408][T17679] overlayfs: failed to resolve './file0': -2
[  915.038019][T17683] bridge0: port 3(syz_tun) entered blocking state
[  915.103057][T17683] bridge0: port 3(syz_tun) entered disabled state
[  915.130901][T17683] syz_tun: entered allmulticast mode
[  915.193938][T17683] syz_tun: entered promiscuous mode
[  915.211803][T17683] bridge0: port 3(syz_tun) entered blocking state
[  915.221382][T17683] bridge0: port 3(syz_tun) entered forwarding state
[  915.467162][T15124] Bluetooth: hci2: command tx timeout
[  915.618905][T17648] lo speed is unknown, defaulting to 1000
[  916.072312][T17712] siw: device registration error -23
[  916.351139][T17723] fuse: fd is not a fuse device
[  916.865817][T17590] bridge_slave_1: left allmulticast mode
[  916.880663][T17590] bridge_slave_1: left promiscuous mode
[  916.896263][T17590] bridge0: port 2(bridge_slave_1) entered disabled state
[  917.024662][T17590] bridge_slave_0: left allmulticast mode
[  917.052296][T17590] bridge_slave_0: left promiscuous mode
[  917.082149][T17590] bridge0: port 1(bridge_slave_0) entered disabled state
[  917.950415][ T5630] Bluetooth: hci1: command 0x0406 tx timeout
[  917.958228][T15124] Bluetooth: hci2: command tx timeout
[  918.497829][T17590] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  918.541866][T17590] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  918.570485][T17590] bond0 (unregistering): Released all slaves
[  918.704520][T17730] lo speed is unknown, defaulting to 1000
[  918.742536][T17590] : left promiscuous mode
[  918.837111][T17730] lo speed is unknown, defaulting to 1000
[  918.869140][T17734] lo speed is unknown, defaulting to 1000
[  918.929148][T17590] tipc: Disabling bearer <eth:syzkaller0>
[  918.938492][T17590] tipc: Left network mode
[  918.943081][T17730] lo speed is unknown, defaulting to 1000
[  919.171167][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3983'.
[  919.696237][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3983'.
[  920.196053][ T5626] Bluetooth: hci2: command tx timeout
[  920.271919][T17590] hsr_slave_0: left promiscuous mode
[  920.319260][T17590] hsr_slave_1: left promiscuous mode
[  920.351749][T17590] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  920.383743][T17590] batman_adv: batadv0: Removing interface: batadv_slave_0
[  920.434949][T17730] infiniband syz0: set active
[  920.448430][T17590] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  920.466997][T17730] infiniband syz0: added lo
[  920.473640][T17590] batman_adv: batadv0: Removing interface: batadv_slave_1
[  920.532214][T17590] veth1_macvtap: left promiscuous mode
[  920.575962][T17590] veth0_macvtap: left promiscuous mode
[  920.582490][T17730] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000
[  920.599412][T17590] veth1_vlan: left promiscuous mode
[  920.620643][T17590] veth0_vlan: left promiscuous mode
[  920.642081][T17730] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32
[  920.684051][T17730] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005
[  920.767050][T17730] RDS/IB: syz0: added
[  920.790685][T17730] smc: adding ib device syz0 with port count 1
[  920.804704][T17730] smc:    ib device syz0 port 1 has no pnetid
[  921.260417][T17590] team0 (unregistering): Port device team_slave_1 removed
[  921.330600][T17590] team0 (unregistering): Port device team_slave_0 removed
[  921.608698][T17762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3983'.
[  921.657648][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  921.671164][   T10] lo speed is unknown, defaulting to 1000
[  921.690942][T13419] lo speed is unknown, defaulting to 1000
[  921.707127][T13419] syz2: Port: 1 Link DOWN
[  921.749358][ T7371] lo speed is unknown, defaulting to 1000
[  921.823155][T17794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3991'.
[  921.834639][T17730] lo speed is unknown, defaulting to 1000
[  921.865555][T17794] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3991'.
[  921.905821][T17794] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3991'.
[  922.266534][ T5626] Bluetooth: hci2: command tx timeout
[  923.399169][T17648] bridge0: port 1(bridge_slave_0) entered blocking state
[  923.426561][T17648] bridge0: port 1(bridge_slave_0) entered disabled state
[  923.456009][T17648] bridge_slave_0: entered allmulticast mode
[  923.480248][T17648] bridge_slave_0: entered promiscuous mode
[  923.510121][T17648] bridge0: port 2(bridge_slave_1) entered blocking state
[  923.540326][T17648] bridge0: port 2(bridge_slave_1) entered disabled state
[  923.566200][T17648] bridge_slave_1: entered allmulticast mode
[  923.605208][T17648] bridge_slave_1: entered promiscuous mode
[  923.740035][T17648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  923.787840][T17648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  923.807948][T17730] lo speed is unknown, defaulting to 1000
[  923.967285][T17648] team0: Port device team_slave_0 added
[  924.007392][T17648] team0: Port device team_slave_1 added
[  924.148087][T17648] batman_adv: batadv0: Adding interface: batadv_slave_0
[  924.176203][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.260102][T17648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  924.307153][T17648] batman_adv: batadv0: Adding interface: batadv_slave_1
[  924.332240][T17648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  924.431156][T17648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  924.551515][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  924.631049][T17648] hsr_slave_0: entered promiscuous mode
[  924.648046][T17648] hsr_slave_1: entered promiscuous mode
[  924.667159][T17648] debugfs: 'hsr0' already exists in 'hsr'
[  924.672962][T17648] Cannot create hsr debugfs directory
[  924.691467][T17730] lo speed is unknown, defaulting to 1000
[  925.462922][T17730] lo speed is unknown, defaulting to 1000
[  925.705238][T17848] xt_hashlimit: overflow, rate too high: 1
[  926.890810][T17865] overlayfs: failed to clone upperpath
[  926.899194][T17857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  926.937477][T17730] lo speed is unknown, defaulting to 1000
[  926.947444][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7
[  927.593155][T17730] lo speed is unknown, defaulting to 1000
[  927.967224][T17808] siw: device registration error -23
[  928.004900][T17566] smbdirect: ib_dev[syz2] removed
[  928.261867][T17857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  928.302535][T17886] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4011'.
[  928.644358][T17885] tunl0: entered promiscuous mode
[  928.660541][T17885] netlink: 'syz.3.4010': attribute type 4 has an invalid length.
[  928.689884][T17885] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4010'.
[  928.713056][T17886] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4011'.
[  928.763905][T17590] IPVS: stop unused estimator thread 0...
[  928.865525][T17857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.202764][T17904] fuse: Bad value for 'fd'
[  929.229572][T17857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  929.774885][   T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  930.136086][T17565] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  930.171979][T17565] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  930.296625][T17927] lo speed is unknown, defaulting to 1000
[  930.302439][T17927] lo speed is unknown, defaulting to 1000
[  930.309567][T17927] lo speed is unknown, defaulting to 1000
[  930.316604][T17927] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[  930.331837][T17927] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[  930.348900][T17927] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[  930.367390][T17927] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  930.391988][T17927] lo speed is unknown, defaulting to 1000
[  930.399810][T17927] lo speed is unknown, defaulting to 1000
[  930.407341][T17927] lo speed is unknown, defaulting to 1000
[  930.414736][T17927] lo speed is unknown, defaulting to 1000
[  930.422276][T17927] lo speed is unknown, defaulting to 1000
[  930.437708][T17927] lo speed is unknown, defaulting to 1000
[  930.444778][ T5750] lo speed is unknown, defaulting to 1000
[  930.450700][   T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  930.629550][T17648] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  930.818298][T17942] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4027'.
[  930.840411][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  930.875495][T17648] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  930.893578][T17947] fuse: Bad value for 'fd'
[  930.916529][ T1307] ieee802154 phy0 wpan0: encryption failed: -22
[  930.923659][ T1307] ieee802154 phy1 wpan1: encryption failed: -22
[  930.959803][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  930.989556][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4027'.
[  931.023309][T17648] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  931.079993][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  931.113852][T17648] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  931.191696][T17648] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  931.520730][T17648] 8021q: adding VLAN 0 to HW filter on device bond0
[  931.610808][T17648] 8021q: adding VLAN 0 to HW filter on device team0
[  931.685111][T17565] bridge0: port 1(bridge_slave_0) entered blocking state
[  931.692414][T17565] bridge0: port 1(bridge_slave_0) entered forwarding state
[  931.764814][T17590] bridge0: port 2(bridge_slave_1) entered blocking state
[  931.772075][T17590] bridge0: port 2(bridge_slave_1) entered forwarding state
[  933.664398][T18008] fuse: fd is not a fuse device
[  933.684157][T17987] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  933.992581][T17997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  934.031807][ T5764] lo speed is unknown, defaulting to 1000
[  934.465083][T17987] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.703183][T18024] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4047'.
[  934.729425][T17987] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  934.871781][T18024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4047'.
[  934.883689][T18030] loop1: detected capacity change from 0 to 512
[  935.037971][T17987] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.269213][T18030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  935.315470][T18030] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  935.466225][ T6206] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  935.520719][T17987] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  935.807800][T17648] 8021q: adding VLAN 0 to HW filter on device batadv0
[  935.919898][T16609] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  936.990900][T17648] veth0_vlan: entered promiscuous mode
[  937.025809][T17648] veth1_vlan: entered promiscuous mode
[  937.148466][T17648] veth0_macvtap: entered promiscuous mode
[  937.187380][T17648] veth1_macvtap: entered promiscuous mode
[  937.251650][T17648] batman_adv: batadv0: Interface activated: batadv_slave_0
[  937.274047][T17648] batman_adv: batadv0: Interface activated: batadv_slave_1
[  937.337311][T17566] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  937.370009][T17566] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  937.426220][ T6206] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  937.448622][ T6206] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  937.761754][T17565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  937.800554][T17565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  937.960313][T17565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  937.994173][T17565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  938.213528][T18094] netlink: 'syz.3.4058': attribute type 10 has an invalid length.
[  938.294705][T18094] bridge0: port 3(syz_tun) entered disabled state
[  938.363634][T18094] syz_tun: left allmulticast mode
[  938.425696][T18094] bridge0: port 3(syz_tun) entered disabled state
[  938.539166][T18094] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  938.857703][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4059'.
[  938.933443][T18101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4059'.
[  939.877473][T18121] bridge0: port 3(syz_tun) entered blocking state
[  939.902912][T18121] bridge0: port 3(syz_tun) entered disabled state
[  939.942950][T18121] syz_tun: entered allmulticast mode
[  939.983573][T18121] syz_tun: entered promiscuous mode
[  939.998602][T18121] bridge0: port 3(syz_tun) entered blocking state
[  940.005255][T18121] bridge0: port 3(syz_tun) entered forwarding state
[  940.218485][T18130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4063'.
[  940.285638][T18130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4063'.
[  943.008865][T18129] loop2: detected capacity change from 0 to 32768
[  943.239405][T18129] workqueue: Failed to create a rescuer kthread for wq "gfs2-delete/syz:syz": -EINTR
[  943.316179][T15124] Bluetooth: hci5: command 0x0406 tx timeout
[  943.823012][T18185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  944.157330][T18193] zram0: detected capacity change from 0 to 8
[  944.190783][T18194] zram: Cannot change disksize for initialized device
[  945.096584][T18206] loop2: detected capacity change from 0 to 8
[  945.458643][T18213] fuse: fd is not a fuse device
[  945.759989][T18221] Set syz1 is full, maxelem 2076 reached
[  945.965376][T18190] loop5: detected capacity change from 0 to 65536
[  946.887652][T18190] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop5": -EINTR
[  947.304538][T18237] ima: policy update failed
[  947.352829][   T31] audit: type=1802 audit(1785525695.111:216): pid=18237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.4097" res=0 errno=0
[  953.036457][T18281] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  953.043081][T18281] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  953.051036][T18281] vhci_hcd vhci_hcd.0: Device attached
[  953.337357][T18283] usbip_core: unknown command
[  953.348323][T18283] vhci_hcd: unknown pdu 100663296
[  953.354324][T18283] usbip_core: unknown command
[  953.360559][T17566] vhci_hcd vhci_hcd.5: stop threads
[  953.389755][T17566] vhci_hcd vhci_hcd.5: release socket
[  953.417502][T17566] vhci_hcd vhci_hcd.5: disconnect device
[  953.465968][ T5949] usb 43-1: new low-speed USB device number 9 using vhci_hcd
[  953.494340][ T5949] usb 43-1: enqueue for inactive port 0
[  953.557010][ T7371] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  953.596006][ T5949] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  953.637113][T17566] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  953.697752][T17566] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  953.733797][ T7371] usb 6-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00
[  953.770772][ T7371] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  953.803495][ T7371] usb 6-1: Product: syz
[  953.818184][ T7371] usb 6-1: Manufacturer: syz
[  953.820277][T17565] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  953.834670][ T7371] usb 6-1: SerialNumber: syz
[  953.862751][T17565] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  954.367259][T18292] loop2: detected capacity change from 0 to 4096
[  954.770478][T18294] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  954.850551][T18295] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  954.889254][T18296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  955.588414][ T7371] kaweth 6-1:1.0: Downloading firmware...
[  955.605633][ T7371] usb 6-1: Direct firmware load for kaweth/new_code.bin failed with error -2
[  955.634085][ T7371] usb 6-1: Falling back to sysfs fallback for: kaweth/new_code.bin
[  956.023215][T18232] Set syz1 is full, maxelem 65536 reached
[  957.350380][   T24] IPVS: starting estimator thread 0...
[  957.472937][T18324] IPVS: using max 22 ests per chain, 52800 per kthread
[  958.103872][T17566] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.255609][T17141] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  958.259705][T17566] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.479764][T17566] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  958.698295][T17566] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  959.282634][T17566] bridge_slave_1: left allmulticast mode
[  959.313150][T17566] bridge_slave_1: left promiscuous mode
[  959.329375][T17566] bridge0: port 2(bridge_slave_1) entered disabled state
[  959.373283][T17566] bridge_slave_0: left allmulticast mode
[  959.394572][T17566] bridge_slave_0: left promiscuous mode
[  959.414545][T17566] bridge0: port 1(bridge_slave_0) entered disabled state
[  959.760277][T15124] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  959.776527][T15124] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  959.787497][T15124] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  959.800643][T15124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  959.826895][T15124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  960.146733][T17566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  960.470844][T17566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  960.499634][T17566] bond0 (unregistering): Released all slaves
[  960.850165][T15124] Bluetooth: hci6: ACL packet for unknown connection handle 200
[  960.995692][T18371] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(8)
[  961.002332][T18371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  961.391070][T18371] vhci_hcd vhci_hcd.0: Device attached
[  961.439929][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4140'.
[  961.532941][T18375] vhci_hcd: connection closed
[  961.535033][T17565] vhci_hcd vhci_hcd.5: stop threads
[  961.598808][T17565] vhci_hcd vhci_hcd.5: release socket
[  961.620831][T17565] vhci_hcd vhci_hcd.5: disconnect device
[  961.681370][ T5787] usb 43-1: new low-speed USB device number 10 using vhci_hcd
[  962.063819][T15124] Bluetooth: hci0: command tx timeout
[  962.318702][T18390] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.479569][T18390] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.763393][ T5281] 8021q: adding VLAN 0 to HW filter on device eth5
[  962.798362][T18390] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  962.916370][T18399] overlayfs: failed to clone upperpath
[  962.942173][T18390] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  963.134453][T18353] lo speed is unknown, defaulting to 1000
[  963.477575][T17590] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  963.524530][T18411] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  963.656224][ T6546] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  963.686030][ T6546] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  963.842754][T17566] hsr_slave_0: left promiscuous mode
[  963.879049][T17566] hsr_slave_1: left promiscuous mode
[  963.900172][T17566] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  963.913737][T17566] batman_adv: batadv0: Removing interface: batadv_slave_0
[  963.930982][T17566] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  963.957784][T17566] batman_adv: batadv0: Removing interface: batadv_slave_1
[  964.021283][T17566] veth1_macvtap: left promiscuous mode
[  964.041177][T17566] veth0_macvtap: left promiscuous mode
[  964.053761][T17566] veth1_vlan: left promiscuous mode
[  964.065154][T17566] veth0_vlan: left promiscuous mode
[  964.106016][T15124] Bluetooth: hci0: command tx timeout
[  964.683522][T18424] overlayfs: failed to clone upperpath
[  965.240916][T17566] team0 (unregistering): Port device team_slave_1 removed
[  965.333049][T17566] team0 (unregistering): Port device team_slave_0 removed
[  965.642387][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4156'.
[  965.651718][T18353] lo speed is unknown, defaulting to 1000
[  965.679170][ T5281] 8021q: adding VLAN 0 to HW filter on device eth6
[  966.107993][ T6206] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  966.186799][T15124] Bluetooth: hci0: command tx timeout
[  966.816009][ T5787] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  967.141803][T18353] bridge0: port 1(bridge_slave_0) entered blocking state
[  967.191237][T18353] bridge0: port 1(bridge_slave_0) entered disabled state
[  967.211796][T18353] bridge_slave_0: entered allmulticast mode
[  967.227312][T18353] bridge_slave_0: entered promiscuous mode
[  967.238309][T18353] bridge0: port 2(bridge_slave_1) entered blocking state
[  967.245758][T18353] bridge0: port 2(bridge_slave_1) entered disabled state
[  967.254030][T18353] bridge_slave_1: entered allmulticast mode
[  967.268814][T18353] bridge_slave_1: entered promiscuous mode
[  967.673181][T18353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  967.696489][T18353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  967.855206][T18490] loop5: detected capacity change from 0 to 512
[  967.887351][T18490] EXT4-fs: inline encryption not supported
[  967.901677][T18353] team0: Port device team_slave_0 added
[  967.929455][T18490] EXT4-fs: Ignoring removed bh option
[  967.941283][T18353] team0: Port device team_slave_1 added
[  967.988405][T18490] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[  968.090895][T18353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  968.129020][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  968.179715][T18490] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1145: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  968.196743][T18353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  968.214775][T18353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  968.222554][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  968.248933][T18353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  968.266681][T15124] Bluetooth: hci0: command tx timeout
[  968.277252][ T5281] 8021q: adding VLAN 0 to HW filter on device eth7
[  968.310271][T18490] EXT4-fs error (device loop5): ext4_validate_block_bitmap:440: comm syz.5.4165: bg 0: block 248: padding at end of block bitmap is not set
[  968.354544][T18490] loop5: lost filesystem error report for type 5 error -117
[  968.357370][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  968.372714][    C1] EXT4-fs (loop5): last error at time 1785525716: ext4_validate_block_bitmap:440
[  968.386817][T18490] Quota error (device loop5): write_blk: dquota write failed
[  968.396061][T18490] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota
[  968.406151][T18490] EXT4-fs error (device loop5): ext4_acquire_dquot:7039: comm syz.5.4165: Failed to acquire dquot type 1
[  968.417738][T18490] loop5: lost filesystem error report for type 5 error -28
[  968.459592][T18490] EXT4-fs (loop5): 1 truncate cleaned up
[  968.502017][T18490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  968.565368][T18498] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  968.649139][T18353] hsr_slave_0: entered promiscuous mode
[  968.723534][T18353] hsr_slave_1: entered promiscuous mode
[  968.741159][T18490] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  969.682089][T18511] siw: device registration error -23
[  970.384844][T18353] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  970.425610][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  970.460152][T18353] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  970.512613][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  970.540495][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4173'.
[  970.610208][T18353] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  970.652869][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  970.687141][T18353] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  970.730885][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  970.757673][T18492] overlayfs: failed to clone upperpath
[  970.770056][ T5281] 8021q: adding VLAN 0 to HW filter on device eth8
[  971.117284][T18353] 8021q: adding VLAN 0 to HW filter on device bond0
[  971.190278][T18353] 8021q: adding VLAN 0 to HW filter on device team0
[  971.238632][ T6546] bridge0: port 1(bridge_slave_0) entered blocking state
[  971.245819][ T6546] bridge0: port 1(bridge_slave_0) entered forwarding state
[  971.318841][T17565] bridge0: port 2(bridge_slave_1) entered blocking state
[  971.326085][T17565] bridge0: port 2(bridge_slave_1) entered forwarding state
[  972.350312][T18555] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  973.403962][T18573] siw: device registration error -23
[  973.749817][T18584] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare
[  973.854755][T18584] CIFS: VFS: Error connecting to socket. Aborting operation.
[  973.896067][T18584] CIFS: VFS: cifs_mount failed w/return code = -111
[  974.006685][ T5751] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  974.012199][T18353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  974.193117][ T5751] usb 1-1: Dual-Role OTG device on HNP port
[  974.216256][ T5751] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  974.217968][ T5787] IPVS: starting estimator thread 0...
[  974.265608][ T5751] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.336320][T18599] IPVS: using max 22 ests per chain, 52800 per kthread
[  974.340673][ T5751] gspca_main: spca501-2.14.0 probing 0000:0000
[  974.376954][ T5751] gspca_spca501: reg write: error -32
[  974.394678][ T5751] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  974.426670][ T5751] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  974.431658][T18604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  974.454574][ T5751] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  974.736619][T18604] bridge0: port 2(bridge_slave_1) entered disabled state
[  974.744438][T18604] bridge0: port 1(bridge_slave_0) entered disabled state
[  974.982633][T18611] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  975.063114][T18615] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4)
[  975.069788][T18615] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  975.078066][T18615] vhci_hcd vhci_hcd.0: Device attached
[  975.334334][T18618] usbip_core: unknown command
[  975.369342][T18618] vhci_hcd: unknown pdu 100663296
[  975.398850][T18604] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  975.404143][T18618] usbip_core: unknown command
[  975.423619][T17566] vhci_hcd vhci_hcd.5: stop threads
[  975.431418][T17566] vhci_hcd vhci_hcd.5: release socket
[  975.444400][T17566] vhci_hcd vhci_hcd.5: disconnect device
[  975.457388][ T5764] usb 43-1: new low-speed USB device number 11 using vhci_hcd
[  975.485044][ T5764] usb 43-1: enqueue for inactive port 0
[  975.518175][T18604] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  975.578834][ T5764] vhci_hcd vhci_hcd.5: vhci_device speed not set
[  975.844222][ T5787] lo speed is unknown, defaulting to 1000
[  975.856072][T17565] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  975.866296][ T5787] syz2: Port: 1 Link DOWN
[  975.881128][T17565] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  975.909743][T17565] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  975.930656][T17565] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  976.218841][T18353] veth0_vlan: entered promiscuous mode
[  976.250280][T18353] veth1_vlan: entered promiscuous mode
[  976.353063][T18353] veth0_macvtap: entered promiscuous mode
[  976.369289][T18353] veth1_macvtap: entered promiscuous mode
[  976.394983][T18353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  976.422952][T18353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  976.798946][ T6546] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  976.919536][T17590] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  976.951962][T17590] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  977.010294][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  977.064389][T17565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  977.095019][T17565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  977.224515][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  977.253410][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  977.481310][T18661] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  979.076870][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  979.104791][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  979.116496][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  979.120636][T18685] CIFS: Attempting to mount //1#7.0.0.1/Ë7Ì/Ðä…¯»—yshare
[  979.137719][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  979.156282][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  979.242076][T18685] CIFS: VFS: Error connecting to socket. Aborting operation.
[  979.301790][T18685] CIFS: VFS: cifs_mount failed w/return code = -111
[  979.820440][T15039] bridge0: port 3(syz_tun) entered disabled state
[  979.933479][T15039] syz_tun (unregistering): left allmulticast mode
[  979.972035][T15039] syz_tun (unregistering): left promiscuous mode
[  980.001722][T15039] bridge0: port 3(syz_tun) entered disabled state
[  980.559706][   T13] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  980.961967][   T13] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.164129][   T13] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.236542][ T5626] Bluetooth: hci4: command tx timeout
[  981.446311][   T13] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  981.744303][T18683] lo speed is unknown, defaulting to 1000
[  981.812718][T18739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4238'.
[  981.847171][T18739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4238'.
[  981.893415][T18739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4238'.
[  982.701997][   T13] bridge_slave_1: left allmulticast mode
[  982.733516][   T13] bridge_slave_1: left promiscuous mode
[  982.765924][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  982.843390][   T13] bridge_slave_0: left allmulticast mode
[  982.865360][   T13] bridge_slave_0: left promiscuous mode
[  982.884534][T18761] CIFS: Unable to determine destination address
[  982.891834][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  983.316568][ T5626] Bluetooth: hci4: command tx timeout
[  984.099579][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  984.117390][T18753] loop7: detected capacity change from 0 to 40427
[  984.139015][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  984.190520][   T13] bond0 (unregistering): Released all slaves
[  984.197197][ T5626] Bluetooth: hci3: command 0x0406 tx timeout
[  984.250408][T18683] lo speed is unknown, defaulting to 1000
[  984.259450][T18753] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  984.311541][T18753] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  984.364554][T18789] : renamed from bond_slave_1
[  984.375347][T18753] F2FS-fs (loop7): invalid crc value
[  984.431291][   T13] tipc: Disabling bearer <eth:syzkaller0>
[  984.497690][   T13] tipc: Left network mode
[  984.676167][T18801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4257'.
[  984.704656][T18801] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4257'.
[  984.734998][T18801] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4257'.
[  984.868532][T18805] CIFS: Unable to determine destination address
[  985.215613][T18753] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  985.386167][T15124] Bluetooth: hci4: command tx timeout
[  986.284660][   T13] BUG: unable to handle page fault for address: fffffffffffffc10
[  986.292434][   T13] #PF: supervisor read access in kernel mode
[  986.298427][   T13] #PF: error_code(0x0000) - not-present page
[  986.304418][   T13] PGD e997067 P4D e997067 PUD e999067 PMD 0 
[  986.310552][   T13] Oops: Oops: 0000 [#1] SMP KASAN NOPTI
[  986.316129][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) 
[  986.325534][   T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  986.335710][   T13] Workqueue: netns cleanup_net
[  986.340547][   T13] RIP: 0010:strnlen+0x4b/0x80
[  986.345272][   T13] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 6b 25 5a f5 48
[  986.364944][   T13] RSP: 0018:ffffc900001271f8 EFLAGS: 00010246
[  986.369724][T18825] sctp: Created asoc ffff88802a1e0000
[  986.371095][   T13] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  986.371126][   T13] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  986.392428][   T13] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  986.394136][T18825] sctp: sctp_assoc_add_peer: association:ffff88802a1e0000 addr:172.20.20.170:20004 state:65535
[  986.400420][   T13] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  986.400449][   T13] R13: ffff88801bcc1e00 R14: 0000000000000006 R15: 0000000000000010
[  986.400477][   T13] FS:  0000000000000000(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000
[  986.400511][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  986.400538][   T13] CR2: fffffffffffffc10 CR3: 00000000624e4000 CR4: 0000000000350ef0
[  986.400565][   T13] Call Trace:
[  986.439790][T18825] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:0.0.0.0 - 
[  986.442530][   T13]  <TASK>
[  986.442551][   T13]  trace_event_raw_event_drv_net_setup_tc+0x100/0x5d0
[  986.463866][T18825] sctp: rt_dst:172.20.20.170, rt_src:172.20.20.170
[  986.464003][   T13]  ? __pfx_trace_event_raw_event_drv_net_setup_tc+0x10/0x10
[  986.481824][T18825] sctp: sctp_v4_get_dst: dst:172.20.20.170, src:172.20.20.170 - 
[  986.484543][   T13]  ? __pfx___might_resched+0x10/0x10
[  986.484596][   T13]  ? trace_contention_end+0x126/0x160
[  986.502916][   T13]  ieee80211_netdev_setup_tc+0x2c6/0x3e0
[  986.508609][   T13]  ? __pfx_ieee80211_netdev_setup_tc+0x10/0x10
[  986.514865][   T13]  tcf_block_offload_cmd.isra.0+0x1c4/0x310
[  986.519223][T18825] sctp: rt_dst:172.20.20.170, rt_src:172.20.20.170
[  986.520834][   T13]  ? __pfx_tcf_block_offload_cmd.isra.0+0x10/0x10
[  986.533784][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.539484][   T13]  ? __pfx_down_write+0x10/0x10
[  986.544389][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.549037][T18825] sctp: sctp_assoc_set_pmtu: asoc:ffff88802a1e0000, pmtu:32768, frag_point:32700
[  986.550096][   T13]  tcf_block_offload_unbind+0xad/0x170
[  986.564684][   T13]  __tcf_block_put+0x11a/0x2a0
[  986.569491][   T13]  tcf_block_put_ext+0xf6/0x1d0
[  986.574383][   T13]  tcf_block_put+0xb6/0x100
[  986.578924][   T13]  ? __pfx_tcf_block_put+0x10/0x10
[  986.582353][T18825] sctp: sctp_packet_init: packet:ffff888052bf8b08 transport:ffff888052bf8800
[  986.584066][   T13]  ? qdisc_reset+0x322/0x670
[  986.597478][   T13]  ? __pfx_hfsc_reset_qdisc+0x10/0x10
[  986.602909][   T13]  hfsc_destroy_qdisc+0xe5/0x380
[  986.608159][   T13]  ? __pfx_hfsc_reset_qdisc+0x10/0x10
[  986.613585][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.619157][T18825] sctp: sctp_do_sm[pre-fn]: ep:ffff88807e876c00, EVENT_T_PRIMITIVE, PRIMITIVE_ASSOCIATE, asoc:ffff88802a1e0000[STATE_CLOSED], sctp_sf_do_prm_asoc
[  986.619382][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.639745][   T13]  ? __pfx_hfsc_destroy_qdisc+0x10/0x10
[  986.645352][   T13]  __qdisc_destroy+0x109/0x530
[  986.650161][   T13]  qdisc_put+0xb0/0xf0
[  986.654272][   T13]  dev_shutdown+0x1d2/0x440
[  986.658864][   T13]  unregister_netdevice_many_notify+0xd55/0x2140
[  986.665252][   T13]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  986.672071][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.674324][T18825] sctp: sctp_do_sm[post-fn]: asoc:ffff88802a1e0000, status:DISPOSITION_CONSUME
[  986.677738][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.677790][   T13]  ? rcu_is_watching+0x12/0xc0
[  986.677844][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.702905][   T13]  unregister_netdevice_queue+0x30b/0x3c0
[  986.708873][   T13]  ? kernfs_remove_by_name_ns+0x103/0x120
[  986.714639][   T13]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  986.718168][T18825] sctp: sctp_cmd_new_state: asoc:ffff88802a1e0000[STATE_COOKIE_WAIT]
[  986.720996][   T13]  _cfg80211_unregister_wdev+0x66e/0x830
[  986.721055][   T13]  ieee80211_remove_interfaces+0x34e/0x6e0
[  986.740574][   T13]  ? __pfx_ieee80211_remove_interfaces+0x10/0x10
[  986.746944][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.752628][   T13]  ieee80211_unregister_hw+0x55/0x360
[  986.754792][T18825] sctp: sctp_outq_tail: outq:ffff88802a1e07e0, chunk:ffff888023b47140[INIT]
[  986.758041][   T13]  hwsim_exit_net+0x88e/0x14f0
[  986.758099][   T13]  ? __pfx_hwsim_exit_net+0x10/0x10
[  986.777239][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.782906][   T13]  ? ip_vs_sync_net_cleanup+0x84/0x90
[  986.788313][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.793988][   T13]  ? __ip_vs_dev_cleanup_batch+0x21e/0x2a0
[  986.796393][T18825] sctp: sctp_packet_config: packet:ffff888052bf8b08 vtag:0x0
[  986.799858][   T13]  ? __pfx_hwsim_exit_net+0x10/0x10
[  986.799915][   T13]  ops_undo_list+0x2ee/0xab0
[  986.817028][   T13]  ? __entry_text_end+0x1020b6/0x1020b9
[  986.822619][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  986.827779][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.833590][   T13]  ? idr_destroy+0x62/0x2e0
[  986.838164][   T13]  cleanup_net+0x499/0x920
[  986.842737][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  986.847741][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.853420][   T13]  ? rcu_is_watching+0x12/0xc0
[  986.856306][T18823] sctp: sctp_close: sk:ffff88807fb571c0, timeout:0
[  986.858231][   T13]  process_one_work+0xa23/0x1940
[  986.858288][   T13]  ? __pfx_process_one_work+0x10/0x10
[  986.875135][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.880817][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.883478][T18823] sctp: sctp_destroy_sock: sk:ffff88807fb571c0
[  986.886527][   T13]  worker_thread+0x5ef/0xe50
[  986.886586][   T13]  ? kthread+0x13a/0x450
[  986.886648][   T13]  ? __pfx_worker_thread+0x10/0x10
[  986.906708][   T13]  kthread+0x370/0x450
[  986.910889][   T13]  ? __pfx_kthread+0x10/0x10
[  986.915712][   T13]  ret_from_fork+0x72b/0xd50
[  986.916081][T18823] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  986.920650][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  986.920712][   T13]  ? srso_alias_return_thunk+0x5/0xfbef5
[  986.941514][   T13]  ? __switch_to+0x800/0x10f0
[  986.946504][   T13]  ? __switch_to_asm+0x39/0x70
[  986.951308][   T13]  ? __pfx_kthread+0x10/0x10
[  986.955937][   T13]  ret_from_fork_asm+0x1a/0x30
[  986.960744][   T13]  </TASK>
[  986.963765][   T13] Modules linked in:
[  986.967661][   T13] CR2: fffffffffffffc10
[  986.971826][   T13] ---[ end trace 0000000000000000 ]---
[  986.977292][   T13] RIP: 0010:strnlen+0x4b/0x80
[  986.982037][   T13] Code: 49 89 fc 48 89 f8 eb 09 48 83 c0 01 48 39 e8 74 1e 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 0f b6 14 1a 38 ca 7f 04 84 d2 75 15 <80> 38 00 75 d9 4c 29 e0 48 83 c4 08 5b 5d 41 5c e9 6b 25 5a f5 48
[  987.001757][   T13] RSP: 0018:ffffc900001271f8 EFLAGS: 00010246
[  987.007845][   T13] RAX: fffffffffffffc10 RBX: dffffc0000000000 RCX: 0000000000000000
[  987.015921][   T13] RDX: 0000000000000000 RSI: 0000000000000010 RDI: fffffffffffffc10
[  987.024079][   T13] RBP: fffffffffffffc20 R08: 0000000000000007 R09: 0000000000000000
[  987.032068][   T13] R10: 0000000000000000 R11: 0000000000000000 R12: fffffffffffffc10
[  987.040053][   T13] R13: ffff88801bcc1e00 R14: 0000000000000006 R15: 0000000000000010
[  987.048030][   T13] FS:  0000000000000000(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000
[  987.057056][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  987.063655][   T13] CR2: fffffffffffffc10 CR3: 00000000624e4000 CR4: 0000000000350ef0
[  987.071818][   T13] Kernel panic - not syncing: Fatal exception
[  987.078121][   T13] Kernel Offset: disabled
[  987.082439][   T13] Rebooting in 86400 seconds..