last executing test programs: 6.992421786s ago: executing program 0 (id=5397): setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r0, r0, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 6.695288653s ago: executing program 0 (id=5401): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x880cc3, 0x20) 5.690913629s ago: executing program 0 (id=5409): r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) 5.690728129s ago: executing program 2 (id=5410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 5.4174199s ago: executing program 0 (id=5414): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x8001, 0x6, 0x300, 0x0, 0x3ff000000, 0x9c2a, 0x4}, 0x0, 0x0, 0x0, 0x0) 5.200374179s ago: executing program 0 (id=5416): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0xff, 0x5f15, &(0x7f0000000b00)="$eJzs3U9vHGcdB/Df/vH6T2kbVagKEQc3hdJSmv8JlH9NOXCAA0ioZxK5bhVIASUB0SoirnJAXICXAJdeOPQt8AL6GhAvgEg2px4og8Z+nmQ8XmcdEu/s+vl8JGfmN8+O95l8PZ5dz8w+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADED77/k7O9iLjym7TgWMTnYhDRj1iu69WoZy7nxw8j4nhsN8fzETFYjKjX3/7n2YgLEfHJMxGbW7fX6sXnDtiPi2du3fjsh9/7x+//dPf4z97+6Uft9h9//vzHf7gTcexHr3/82Z0ns+0AAABQiqqqql56m38ivb/vd90pAGAq8vG/SvJytVqtVj/R+o/92eqPutC6qRrvTrOIiI3mOvVrBqfjAWDObMSnXXeBDsm/aMOIeKrrTgAzrdd1BzgUm1u313op317zeLC6057/Trkr/43e/fs79ptO0r7GZFo/X3djEM/t05/lKfVhluT8++38r+y0j9LjDjv/adkv/9HOrU/FyfkP2vm37Mr/zxExt/n3x+Zfqpz/8FHy3xjM8f4vfwAAAAAAjr789/9jHZ//XXz8TTmQh53/XZ1SHwAAAAAAAADgSXvc8f/uM/4fAAAAzKz6vXrtL888WLbfZ7HVy9/qRTzdejxQmNXGhwMCAAAAAAAAAAAAANMxjFhJ1/UvRMTTKytVVdVfTe36UT3u+vOu9O2HknX9Sx4AAHZ88kzrXv5exFJEvJU+629hZWWlqpaWV6qVankxv54dLS5Vy433tXlaL1scHeAF8XBU1d9sqbFe06T3y5Pa29+vfq5RNThAx6ajw8ABICJ2jkabjkhHTFU9G12/ymE+2P+PHvs/B9H1zykAAABw+Kqqqnrp47xPpHP+/a47BQBMRT7+t88LqNVqtVqtPnp1UzXenWYRERvNderXDIbjB4A5sxGfdt0FOiT/og0j4njXnQBmWq/rDnAoNrdur/VSvr3m8WB1pz1fC7Ir/43e9np5/XHTSdrXmEzr5+tuDOK5ffrz/JT6MEty/v12/ld22vMQ/4ed/7Tsl3+9ncc66E/Xcv6Ddv4tRyf//tj8S5XzHz5S/gP5AwAAAADADMt//z/m/G/eZAAAAAAAAACYO5tbt9fyfa/5/P8Xxzyu15xz/+eRkfPvHTh/9/8eJTn/fjv/1gU5g8b8vTcf5P/vrdtrH9361xfydObzXxiM6ude6PUHw3TNT7XwTlyL67EeZ/Y8frir/eye9oVd7ecmtJ/f0z6q25dz+6lYi1/G9Xj7fvvihAujlia0VxPac/4D+3+Rcv7Dxled/0pq77WmtXsf9vfs983puOe5/Lf/vLR375q+uzG4v21N9fad7KA/2/8nT43i1zfXb5z67dVbt26cjTTZtfRcpMkTlvNfSF85/5df3GnPv/eb++u9D0ePnP+suBvDffN/sTFfb+8rU+5bF3L+o/SV889HoPH7/zznv//+/2oH/QEAAAAAAAAAAAAAAICHqapq+xbRyxFxKd3/09W9mQDAdOXjf5Xk5Wq1Wq1Wq49e3VSN90aziIi/N9epXzP8btw3AwBm2X8j4p9dd4LOyL9g+fP+6umXuu4MMFU33//g51evX1+/cbPrngAAAAAAAAAA/688/udqY/zn7euAWuNG7xr/9c1YndvxP/ujwfZY52mDXoiHj/99Mh4+/vdwwvMtTGgfTWhfnNC+NKF97I0eDTn/F1LGOf8TacNKGv/15Q7607Wc/8k01nPO/yutxzXzr/46z/n3d+V/+tZ7vzp98/0PXrv23tV3199d/8XZM5cunL944fzFi6ffuXZ9/czOvx32+HDl/PPY164DLUvOP2cu/7Lk/L+cavmXJef/UqrlX5acf369J/+y5Pzzex/5lyXn/0qq5V+WnP9XUy3/suT8X021/MuS8/9aquVflpz/a6mWf1ly/qdSLf+y5PxPp1r+Zcn55zNc8i9Lzj9f2SD/suT8z6Va/mXJ+Z9PtfzLkvO/kGr5lyXnfzHV8i9Lzv9SquVflpz/11Mt/7Lk/L+RavmXJef/eqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv+NVMu/LA8+/9+MGTNm8kzXv5kAAAAAAAAAAAAAgLZpXE7c9TYCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFvXuLkbO87wf+7sleGxL8D4QQ4oS1ORlY2F2fwCEGk4T8KemBkpA2Lalx7LVx4lO9awIIlU2hLVGQitRe0IumSZRGkdoKVEVqKtEIqZHau+aqETdRK3HhC6gMSqqmCmz1zjzP45nZ2Zn1YeyZ9/l8IvvnnXln5pl33pnd75LvDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANBowydm/2SoKIryT+2vdUVxafnvNcWu8suF7Rd7hQAAAMC5eqf2999elk7YtYILNWzzLx/5t+8vLi4uFl98++S7f7a4mM6YKIqR1UVROy/611/8fLFxm+CZYnxouOHr4S43P9Ll/NEu5491OX9Vl/NXdzl/vMv5S3bAEmvqv4+pXdl1tX+uq+/S4opirHbedW0u9czQ6uHh+LucmqHaZRbH9hcHi0PFbDG95DJDtf8VxSsbytu6r4i3NdxwW+uLojj11lN74xqGwj6+rmi6sZrGx+7Ne4qJt996au9359/4YLvZdTcsWWlRbNpYrvPZojj966piqFid9klc53DDOte3WedI0zqHapcr/926zlMrXGe83+NhnT/usM714bTHry2KYqFYdptWzxTDxdqWW037e7x+RJTXUT6U7ytGz+g42bCC46S8zOvXNh8nrcdk3P8bwj4ZXWYNjQ/Hm19dtWS/n+1xUt7rfjhWy+t+oLzR8fHGX602HavlNk9dv/wx0Paxa3MMpGO54RjY2O0YGF41UjsGhk+veWPTMTCz5DLDxVDttk5e3/kYmJo/fGxq7oknbz14eM+B2QOzR2amt2/dsm3rlm3bpvYfPDQ7Xf/7zHbpAFlbDKdjcGN4rYnH4I0t2zYekovfOn/Pg/E+eR6U9/2zN5QLunS4WOYYL7d5dtO5Pw/S9/2G58Fow/Og7Wtqm+fB6AqeB+U2pzat7HvmaMOfdmvo1WvhuoZj4GJ+Pyxv8+Gbln8tXB/W9dzNZ/r9cGTJMRDv1lB47pWnpJ/3xu8I+2XpcXF1ecYlq4oTc7PHb3t8z/z88ZkijAvi8obHqvV4Wdtwn4olx8vwGR8vu/7mlzdc3eb0dWFfjd/S+bEqt9k62fmxqr26t9+fTaduLsI4zy70/mz33azcnylLdNif5TbP3nruPwumXNLw+jfW7fVvZGy0/vo3kvbGWNPr39KHZqS2sqI4devKXv/Gwp8L/fp3RZ+8/pX76uHbOh8D5TbPTZ3pMTDa8fXv2jCHwnpuColhvCH3v1s7f6F+mDY8ll2Pm9HRsXDcjMZbbD5utiy5THlt5W1vmj6742bTtc2PVdPPLRU8bsp99efTnY+bcptXZ879tWNN/GfDa8eqbsfA2Miqcr1j6SCov94tronHwG3F3uJocajYly5TPsrlbU1uXtkxsCr8udCvHVf1yTFQ7qsXN3c+BsptfrTl/P7stCmckrZp+Nmp9fcLy2X+q0dPX1/rbjvfmb9c5ye3dv7dULnNG1vPNGd03k+3hFMuabOfWp8/yx3T+4oLs5+uCus8tK3z76bKba7YvsLjaVdRFK/NvFb7fVf4/e7fn/j37zf93rfd75Rfm3nt/qkHf3Im6wcA4Oy9W/t7YVX9Z82G/2K9kv/+DwAAAAyEmPuHw0zkfwAAAKiMmPtHwkzkfwAAAKiMmPtHw0wyyf+P3rHjpXeeLtK7AS4G8fy4Gx64q75d7HgvhK8nFk8rT//4d8Ze+trTK7vt4aIofnn/h9pu/+hdcV11x+I6P9p8+hJXXbOi23/kodPbNb5/wqkd9euP92elh0HsKr8ytbl2vRNPzNTmq/cXtfngwnPP1K+//nXc/uSW+vZ/Gd60ZNf+oabLbwrruS7MifCeMg/sOr0fyhkv99L6j/zz5Z87fXvxckMb31u7my/+Qf1643tEvXB5fft4v5db/z99/Xsvlds/fn379T893H79J8P1vh7mL3bWt2/c519rWP8fhfXH24uXu+3bP2y7/pc/UN/+5XBcfDPM1vXf86cffqfd4xVvZ9ed9cvF25/+7621y8Xri9ffuv7xp2ea9kfr9b/6dv16dj72s5HG7ePp8XaiR+5sPr6HwuPb1CMviuJ7f1w07efiY/XL/WPL+uP1Hbuz/fpvaVnnsaFrapc/fX/WNd2vb/z15rb3N65n19+ta7o/L9wb9t/bUz8qr/fkg+F4DOf/74/r19f6XqYv39v8ehO3/+a6+vM2Xt9Uy/pfaFn/wjXlvuu+/vverq//5btXN61/16fC8XRffXZb/4G/uqzp8t/6bv3xOP6VySNH504c3NewVxufx6vH16y95NL3vPey8Fra+vXuo/OPzh6fmJ6YLoqJAXzLwF6v/9th/ld9LJz/W6j7yc/qx93zn65/37rx5/WvXwinPxIez/j98Rt/MdZ0vLY+7gt31+e5rv/msI6V+sDX//OaFW148guvnPiHP3yj9eeCeH+OvX+8dv9e3HBl7byhV+vnt75edfMf729+Xv90dLo2fxD262J4Z+aNV9Zvr/X643uTPP+Z+vM3/iQXL1+0vJ/IupHm+3Gu6/9p+Dnmh1c1v/7F4+MHT7e8m/O6YqhcwkJ4fSgW6ufHreL+fv7UlW1vL74PT7HwwTNZ5rLmnpibOnTwyInHp+Zn5+an5p54cvfhoyeOzO+uvXfp7i91u/zp5/fa2vN73+z2rUXt2X60PnrsYq//2EN7990+fcO+2f17Tuyff+jY7PEDe+fm9s7um7thz/79s1/pdvmD+3bObN6x5fbNkwcO7tt5x44dW3ZMHjxytFxGfVFdbJ/+8uSR47trF5nbuXXHzLZtW6cnDx/dN7vz9unpyRPdLl/73jRZXvqxyeOzh/bMHzw8Ozl38MnZnTM7tm/f3PXdHw8f2z83MXX8xJGpE3Ozx6fq92VivnZy+b2v2+XJw9zR8HrXYij8dP75W7an98ctfeery15VfZPmH0+LN8N7QcXvb92+jrl/LMwkk/wPAAAAOYi5P7zx/+kz5H8AAACojJj7V4eZyP8AAABQGTH3j4eZZJL/M+r/r2n8Qv+/Tv9f/7/Q/9f/7zH9f/3/TjLs/78V/qX/X4H16//r/9Ndv/X/Y+5fUxRZ5n8AAADIQcz9a8NM5H8AAACojJj7Lwkzkf8BAACgMmLuvzTMJI/8P9b6zwr3/5vo/9fp/3fr/8dt9f8L/X/9/7Ok/6//30mG/X+f/38eXez192H/f43+P/2m3/r/Mfe/J8wkj/wPAAAAWYi5/71hJvI/AAAAVEbM/ZeFmcj/AAAAUBkx968LM8kk/2f0+f9N9P/r9P99/n+h/6//f/417WL9f/3/TvT/9f8Hef192P/3+f/0nX7r/8fc///CTDLJ/wAAAJCDmPvfF2Yi/wMAAEBlxNx/eZiJ/A8AAACVEXP/FWEmmeR//X/9f/1//X/9f/3/XtL/1//vRP9f/3+Q16//r/9Pd/3W/4+5//1hJpnkfwAAAMhBzP1XhpnI/wAAAFAZMfd/IMxE/gcAAIDKiLn/qjCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/8Ewk0zyPwAAAOQg5v6rw0zkfwAAAKiMmPs/FGYi/wMAAEBlxNy/Pswkk/yv/6//r/+v/6//r//fS4PV/x9e9hz9/zr9/2b6//r/+v/6/3TWb/3/mPs/HGaSSf4HAACAHMTc/5EwE/kfAAAAKiPm/mvCTOR/AAAAqIyY+yfCTDLJ//r/+v/6//r/+v/6/700WP3/5en/1+n/N9P/1//X/9f/p7N+6/9PrClquX9DUWSZ/wEAACAHMfdvDDOR/wEAAKAyYu6/NsxE/gcAAIDKiLn/ujCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/X1n/f1W3K6LS+q3/H3P/9WEmmeR/AAAAyEHM/TeEmcj/AAAAUBkx998YZiL/AwAAQGXE3L8pzCST/K//r/+v/6//r/+v/99L+v9L+v+v/0+h/x/p/+v/92z9K/h5UP/f5//Te/3W/4+5/6Ywk0zyPwAAAOQg5v6bw0zkfwAAAKiMmPtvCTOR/wEAAKAyYu6fDDPJJP/r/+v/6//r/+v/6//3UlX7/+l11Of/6//r//dn/9/n/+v/0xf6rf8fc/+tYSaZ5H8AAADIQcz9t4WZyP8AAABQGTH3T4WZyP8AAABQGTH3T4eZZJL/9f/1//X/+7v/P97meNP/1/8fJFXt/5/D5//r/zdo6v+vKYpC/1//f4DWr/+v/093/db/j7l/Jswkk/wPAAAAOYi5f3OYifwPAAAAlRFz/5YwE/kfAAAAKiPm/q1hJpnkf/1//X/9//7u//v8f/1//f/O9P8r1P/3+f/6/wO2fv1//X+aDbc5rd/6/zH3bwszyST/AwAAQA5i7t8eZiL/AwAAwGBp/T+XNoi5//YwE/kfAAAAKiPm/jvCTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n+76rf8fc/+OMJNM8j8AAADkIOb+j4aZyP8AAABQGTH33xlmIv8DAADAQGn3OYRRzP0fCzPJJP/r/1e9/7+4Wv9f/1//v/P69f97S/9f/78T/X/9/0Fev/6//j/d9Vv/P+b+nWEmK87/q1e6IQAAAHCRxNx/V5hJJv/9HwAAAHIQc//dYSbyPwAAAFRGzP27wkwyyf/6/1Xv//v8f/1//f9u69f/7y39f/3/TvT/B7P/H9uv+v8XpP8/vtzlG/v/5TGk/08/6rf+f8z994SZZJL/AQAAIAcx9388zET+BwAAgMqIuf8TYSbyPwAAAFRGzP2fDDPJJP/r/+v/6//r/+v/6//3kv6//n8n+v+D2f+P9P99/r/+P930W/8/5v57w0wyyf8AAACQg5j7PxVmIv8DAABAZcTc///DTOR/AAAAqIyY++8LM8kk/+v/6//r/+v/6//r//eS/r/+fyf6//r/g7x+/X/9f7rrt/5/zP2/EmaSSf4HAACAHMTcf3+YifwPAAAAlRFz/6fDTOR/AAAAqIyY+381zCST/K//f2H6/8Pp+vX/9f/1//X/9f/PJ/1//f9C//+sXez+/KCvX/9f/5/u+q3/H3P/r4WZZJL/AQAAIAcx9/96mIn8DwAAAJVR5v41RVH8Ru0r+R8AAACqKOb+B8JMMsn/+v8+/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7v/NMJNM8j8AAADkIOb+B8NM5H8AAACojJj7PxNmIv8DAABAZcTc/9kwk0zyv/6//r/+v/6//r/+fy/p/+v/d6L/r/8/yOs/v/3/8nHV/6d6+q3/H3P/Q2EmmeR/AAAAyEHM/Z8LM5H/AQAAoDJi7v+tMBP5HwAAACoj5v7fDjPJJP/r/+v/6//r/+v/6//3kv7/0v5/+Rp2Mfv/q1ayof7/iuj/6//7/H/9fzrrt/5/zP2fDzPJJP8DAABADmLu/50wE/kfAAAAKiPm/t8NM5H/AQAAoDJi7n84zCST/K//r/+v/6//r/+v/99L+v8+/78T/X/9/0Fev/6//j/d9Vv/P+b+L4SZZJL/AQAAIAcx9/9emIn8DwAAAJURc//uMBP5HwAAACoj5v5Hwkwyyf/6//r/K+j/x831//X/9f/1/8+Y/r/+fyf6//r/g7x+/X/9f7rrt/5/zP17wkwyyf8AAACQg5j7vxhmIv8DAABAZcTcvzfMRP4HAACAyoi5f1+YSSb5X/9/gPv/YY0+/1//X/9f/7+f6f/r/3ei/6//P8jr1//X/6e7fuv/x9w/G2aSSf4HAACAHMTcvz/MRP4HAACAyoi5/0CYifwPAAAAlRFz/6NhJpnkf/3/Ae7/X7jP/9f/1/+v0f/X/z8b+v/6/53o/+v/D/L69f/1/+mu3/r/MfcfDDPJJP8DAABADmLu/1KYifwPAAAAlRFz/5fDTOR/AAAAqIyY+w+FmWSS//X/9f/1//X/9f/1/3tJ/1//vxP9f/3/QV6//r/+P931W/8/5v7DYSaZ5H8AAADIQcz9R8JM5H8AAACojJj7j4aZyP8AAABQGTH3HwszyST/6//r/+v/6//r/+v/95L+v/5/J/r/+v+DvH79f/1/uuu3/n/M/b8fZpJJ/gcAAIAcxNx/PMxE/gcAAIDKiLl/LsxE/gcAAIDKiLl/Pswkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH3nwgzyST/AwAAQA5i7n8szET+BwAA+D/27nNX07KK4/CLOEBijMfiEZj43XgMfvIQ7Ipd7L0X7F2xYe9i712x94ZirwlG9lpr4x54ntl75uW9n3td15cVh8lw66jhn8kvD0wjd/8D4hb7HwAAAKaRu/+BcUuT/a//1//r/4/7/2vvf/TjB+r/jzo//b/+X/9/Kvp//f9O/39mh+7nt/5+/b/+n3Wj9f+5+x8UtzTZ/wAAANBB7v4Hxy32PwAAAEwjd/9D4hb7HwAAAKaRu/+hcUuT/a//1//r/zfy/f/rj39c/6//3xL9v/5/if5f/7/l9+v/9f+sG63/z93/sLilyf4HAACADnL3Pzxusf8BAABgGrn7HxG32P8AAAAwjdz9V8ctTfa//l//r//fSP9/G/p//f+W6P/1/0v0//r/Lb9f/6//Z91o/X/u/kfGLU32PwAAAHSQu/9RcYv9DwAAANPI3f/ouMX+BwAAgGnk7n9M3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9ZN1r/n7v/sXFLk/0PAAAAHeTuf1zcYv8DAADANHL3Pz5usf8BAABgGrn7nxC3NNn/+n/9v/5f/6//1//vk/5f/79E/6//3/L79f/6f9btvf+/7zW33gvt/3P3XxO3NNn/AAAA0EHu/ifGLfY/AAAATCN3/5PiFvsfAAAAppG7/8lxS5P9r//X/x/3/7dcpv/X/+v/j39c/39p6P/1/0v0/6P2/xf2n4T+X/+v/2fN3vv/ld7/5L/O3f+UuKXJ/gcAAIAOcvc/NW6x/wEAAGAaufufFrfY/wAAADCN3P1Pj1ua7H/9v/7f9/9vqPxc/6//1/9fevp//f8S/f+o/b/v/19s/3+vC3j/cf//v38O1/8zp9H6/9z9z4hbmux/AAAA6CB3/zPjFvsfAAAAppG7/1lxi/0PAAAA08jd/+y4pcn+1//r//X/vv+v/9f/75P+X/+/RP+v/9/y+33/X//PutH6/9z9z4lbmux/AAAA6CB3/3PjFvsfAAAAppG7/3lxi/0PAAAA08jd//y4pcn+1//r//X/+v+L6v8v1//r/5fp//X/S/T/+v8tv1//r/9n3Wj9f+7+F8QtTfY/AAAAdJC7/4Vxi/0PAAAA08jd/6K4xf4HAACAaeTuf3Hc0mT/6//1//p//b/v/+v/90n/P13/f5n+/5j+X/+v/9f/s2y0/j93/0vilib7HwAAADrI3f/SuMX+BwAAgGnk7n9Z3GL/AwAAwDRy918btzTZ//p//b/+X/+v/9f/75P+f7r+3/f/b0P/r//X/+v/WTZa/5+7/+Vxy9rwO7fy1wEAAIBh5O5/RdzS5M//AQAAoIPc/a+MW+x/AAAAmEbu/lfFLU32v/5f/6//1//r//X/+6T/1/8v0f/ffv9/1R38/fT/Y71f/6//Z91o/X/u/lfHLU32PwAAAHSQu/81cYv9DwAAANPI3f/auMX+BwAAgGnk7n9d3NJk/99R/3/z3Y7++in7/7vq//X/G+7/44ev1v/X30n/r/+/eJP2/+d2+n/9v+//6//1//p/Vo3W/+fuf33c0mT/AwAAQAe5+98Qt9j/AAAAMI3c/W+MW+x/AAAAmEbu/jfFLU32v+//6//1/77/r//X/+/TpP2/7//r/2+l/9f/6//1/ywbrf/P3f/muKXJ/gcAAIAOcve/JW6x/wEAAGAaufvfGrfY/wAAADCN3P3XxS1N9r/+X/9/8P7/Lvr/pP+P31f9v/7/FPT/+v+d/v/MDt3Pb/39+n/9P+tG6/9z978tbmmy/wEAAKCD3P1vj1vsfwAAAJhG7v53xC32PwAAAEwjd/8745Ym+1//r/8/eP/v+/9F/x+/r/p//f8p6P/1/zv9/5kdup/f+vv1//p/1o3W/+fuf1fc0mT/AwAAQAe5+6+PW+x/AAAAmEbu/nfHLfY/AAAATCN3/3vilib7X/+v/9f/6//1//r/fdL/6/+X6P/1/1t+v/5f/8+60fr/3P3vjVua7H8AAADoIHf/++IW+x8AAACmkbv//XGL/Q8AAADTyN3/gbilyf7X/2+9/7/fTfEC/b/+X/+v/x+S/l//v+QC+v/73Fv/X/T/Y71f/6//Z91o/X/u/g/GLU32PwAAAHSQu/9DcYv9DwAAANPI3f/huMX+BwAAgGnk7v9I3NJk//fo/8+d99Pm6f99/1//r//X/49N/6//X+L7//r/Lb9/H/3/Ffp/JjNa/5+7/6NxS5P9DwAAAB3k7v9Y3GL/AwAAwEZcufozcvd/PG6x/wEAAGAaufs/Ebc02f89+v/zNej/89/Wndv/33IP/b/+v+j/9f87/b/+f4X+X/8/5Puv2Pn+v/6fS2S0/j93/w1xS5P9DwAAAB3k7v9k3GL/AwAAwDRy938qbrH/AQAAYBq5+z8dN9zz7od70p1K/z9t/+/7//p//b/+fwj6f/3/Ev2//n/L79f/6/9ZN1r/n7v/M3GLP/8HAACAaeTu/2zcYv8DAADANHL3fy5usf8BAABgGrn7Px+3NNn/+n/9v/5f/z9d/x//e9L/j0H/r/9fov/X/2/5/fp//T/rRuv/c/d/IW5psv8BAACgg9z9X4xb7H8AAACYRu7+L8Ut9j8AAABMI3f/l+OWJvtf/6//1/9fsv7/3MlfX//v+//6f/2//n+Z/l//v+X36//1/6wbrf/P3f+VuKXJ/gcAAIAOcvd/NW6x/wEAAGAaufu/FrfY/wAAADCN3P1fj1ua7H/9/2b7/3P6/+H6//N+ff2//l//r//X/y/T/+v/t/x+/b/+n3Wj9f+5+78RtzTZ/wAAANBB7v5vxi32PwAAAEwjd/+34hb7HwAAAKaRu//bcUuT/T9z/7/00ybo/33/X/+v/z/xfv3/mPT/+v8l+n/9/5bfr//X/7NutP4/d/934pYm+x8AAAA6yN3/3bjF/gcAAIBp5O6/MW6x/wEAAGAaufu/F7c02f8z9/9L9P9H9P/6/53+X/+/Z/p//f8S/b/+f8vv1//r/1k3Wv+fu//7cUuT/Q8AAAAd5O7/Qdxi/wMAAMA0cvf/MG6x/wEAAGAauft/FLc02f/6f/2//l//r//X/++T/l//v0T/r//f8vv1//p/1o3W/+fu/3Hc0mT/AwAAQAe5+38St9j/AAAAMI3c/T+NW+x/AAAAmEbu/p/FLU32v/5f/6//H6r/v+Lkr6P/1//r/5fp//X/O/3/mR26n9/6+/X/+n/Wjdb/5+7/edzSZP8DAABAB7n7fxG32P8AAAAwjdz9v4xb7H8AAACYRu7+X8UtTfa//l//r/8/c/9/+c73///vPfp//f/t0f9vs/+/Mf6Lrv9fpv/X/+v/9f8sG63/z93/67ilyf4HAACADnL3/yZusf8BAABgGrn7fxu32P8AAAAwjdz9v4tbmux//b/+X/8/1Pf/9f/6f/3/Ken/ff9/p/8/s0P381t/v/5f/8+60fr/3P03xS1N9j8AAAB0kLv/93GL/Q8AAADTyN3/h7jF/gcAAIBp5O6/OW5psv/1//r/Kfv/K/X/+n/9/yj0//r/Jfp//f+W36//1/+zbrT+P3f/H+OWJvsfAAAAOsjd/6e4xf4HAACAaeTu/3PcYv8DAADANHL3/yVuabL/9f/6/yn7f9//1/9vrf+//Pj/gPX/p6P/1//v9P9nduh+fuvv1//r/1k3Wv+fu/+vcUuT/Q8AAAAd5O7/W9xi/wMAAMA0cvf/PW6x/wEAAGAaufv/Ebc02f9d+v+TGYn+/4j+X/+/0/+P0f83+v7/yd/vi7X1/v+qi3y//v+I/v9sDt3Pb/39+n/9P+tG6/9z9/8zbmmy/wEAAKCD3P3/ilvsfwAAAJhG7v5/xy32PwAAAEwjd/9/4pYm+79L/3+S/v+I/l//v9P/H7L/v27XsP+/1Lbe//v+v/5/p//f7Pv1//p/1o3W/+fu/28AAAD//9wgGwg=") symlink(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.19904911s ago: executing program 1 (id=5417): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.199331665s ago: executing program 2 (id=5418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000000c0), 0xd, 0x0) inotify_init() r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setns(r4, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r6, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x9902) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="11d7cc3e5c7052e7b8b9ca0b48ee2d2788ff9c6617f00947749ef13369347238191e7314724fc9ad1b563efd3b93165e540ead24e0f79fbe95fadeec92b0265b38382c80de92ca1ee47e3d29ab965cdb865dcbe574d7cb5775a2950497c94138172393ee6639109c33dc3ac7a5ba9ea50342c31fcf02ed3e938709eaf6787fecc6fefc1a7909f15d5d241c40381d512b62cf46a4cfbb2b91f3a7a5396cdc3c703e8a0beec77f011fc9bcabf166e78779803e0000000000", @ANYRESDEC=0x0], 0x7) 3.856534462s ago: executing program 1 (id=5420): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 3.790152037s ago: executing program 3 (id=5421): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096040a000200aaaaaaaaaa0c0000060005", @ANYRES32=r0], 0x30}}, 0x48010) 1.723403582s ago: executing program 2 (id=5422): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) setrlimit(0x9, &(0x7f0000000080)={0x8000, 0x6}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = inotify_init() r2 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000002, 0x9132, 0xffffffffffffffff, 0xa2c6000) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r2, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) close_range(r1, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.667923475s ago: executing program 1 (id=5423): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c8013000c800ca34880"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.650096828s ago: executing program 3 (id=5424): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 1.433864377s ago: executing program 2 (id=5425): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0x4048aec9, &(0x7f0000000200)="0100") r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl(r2, 0x4048aecb, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) 1.392560647s ago: executing program 3 (id=5426): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 1.323509932s ago: executing program 1 (id=5427): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.258539017s ago: executing program 0 (id=5428): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.214256646s ago: executing program 3 (id=5429): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fddbdf250a00000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20044051}, 0x20000000) 1.182220434s ago: executing program 2 (id=5430): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x9) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="380100001a00010027bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000000000000000000000000ffffffffffff00000000001f00000400000000000000e8ffffffffffffffffff0000800000001c25e50000000000020000000000000009000000000000000000000000000000ffffffffffffffff00000000000000001f0000ffffff02000000ca3d0000000000002ace8a00043500000a0001002000000000000000480003006465666c61746500000000000000000000b5b1691fe923cf5700"/217], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) r7 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], 0x10}}], 0x1, 0x4891) 926.650761ms ago: executing program 3 (id=5431): r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 803.110329ms ago: executing program 1 (id=5432): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000096040a000200aaaaaaaaaa0c0000060005", @ANYRES32=r0], 0x30}}, 0x48010) 379.573554ms ago: executing program 3 (id=5433): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_destroy(r0) 21.261905ms ago: executing program 2 (id=5434): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a00000709000100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x92}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) 0s ago: executing program 1 (id=5435): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x80, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) kernel console output (not intermixed with test programs): e_1: left promiscuous mode [ 535.366094][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.379776][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.397128][ T50] bridge_slave_1: left allmulticast mode [ 535.405307][ T50] bridge_slave_1: left promiscuous mode [ 535.422884][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.450286][ T50] bridge_slave_0: left allmulticast mode [ 535.460178][ T50] bridge_slave_0: left promiscuous mode [ 535.487608][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.575052][ T50] pim6reg (unregistering): left allmulticast mode [ 536.343817][ T50] team0 (unregistering): Port device team_slave_1 removed [ 536.400483][ T50] team0 (unregistering): Port device team_slave_0 removed [ 536.454074][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.513744][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.915188][ T50] bond0 (unregistering): Released all slaves [ 537.208976][T15427] syzkaller0: entered promiscuous mode [ 537.220833][T15427] syzkaller0: entered allmulticast mode [ 537.364333][T15433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3044'. [ 537.373740][T15431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'. [ 537.761273][ T50] IPVS: stop unused estimator thread 0... [ 537.835905][T15450] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 537.969077][T15454] syzkaller0: entered promiscuous mode [ 537.974644][T15454] syzkaller0: entered allmulticast mode [ 538.095914][T15460] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3055'. [ 538.171577][T15458] syzkaller0: entered promiscuous mode [ 538.190456][T15458] syzkaller0: entered allmulticast mode [ 538.342577][T15471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 538.638316][T15484] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3065'. [ 538.680311][T15489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 538.949515][T15495] syzkaller0: entered promiscuous mode [ 538.955088][T15495] syzkaller0: entered allmulticast mode [ 539.047883][T15498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3072'. [ 539.098989][T15501] syzkaller0: entered promiscuous mode [ 539.108792][T15501] syzkaller0: entered allmulticast mode [ 539.189830][T15505] ip_tables: iptables: counters copy to user failed while replacing table [ 539.397348][T15511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3077'. [ 539.468693][T15518] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 539.627043][T15524] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 539.859345][T15531] syzkaller0: entered promiscuous mode [ 539.864905][T15531] syzkaller0: entered allmulticast mode [ 540.002711][T15538] syzkaller0: entered promiscuous mode [ 540.018853][T15538] syzkaller0: entered allmulticast mode [ 540.047484][T15541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3090'. [ 540.169011][T15545] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 541.003063][T15571] syzkaller0: entered promiscuous mode [ 541.009826][T15574] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3101'. [ 541.024593][T15571] syzkaller0: entered allmulticast mode [ 541.152906][T15576] syzkaller0: entered promiscuous mode [ 541.164877][T15576] syzkaller0: entered allmulticast mode [ 541.322695][T15583] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 541.670175][T15596] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3109'. [ 541.763491][T15605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3111'. [ 541.998896][T15611] syzkaller0: entered promiscuous mode [ 542.004467][T15611] syzkaller0: entered allmulticast mode [ 542.050197][T15609] syzkaller0: entered promiscuous mode [ 542.070886][T15609] syzkaller0: entered allmulticast mode [ 542.615676][T15629] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 542.728058][T15633] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.837001][T15638] syzkaller0: entered promiscuous mode [ 542.870018][T15638] syzkaller0: entered allmulticast mode [ 543.017193][T15646] syzkaller0: entered promiscuous mode [ 543.023345][T15646] syzkaller0: entered allmulticast mode [ 543.364899][T15662] __nla_validate_parse: 2 callbacks suppressed [ 543.364918][T15662] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3132'. [ 543.670707][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3135'. [ 543.771280][T15675] syzkaller0: entered promiscuous mode [ 543.797425][T15675] syzkaller0: entered allmulticast mode [ 544.387325][T15689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3142'. [ 544.409623][T15689] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3142'. [ 544.777652][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3145'. [ 544.844717][T15709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3148'. [ 545.572386][T15732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3159'. [ 546.206903][T15753] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3169'. [ 546.283413][T15751] syzkaller0: entered promiscuous mode [ 546.292439][T15751] syzkaller0: entered allmulticast mode [ 548.627573][T15774] syzkaller0: entered promiscuous mode [ 548.650649][T15774] syzkaller0: entered allmulticast mode [ 548.714130][T15780] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 548.721958][T15780] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 548.854844][T15784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3179'. [ 549.107357][T15792] syzkaller0: entered promiscuous mode [ 549.133720][T15792] syzkaller0: entered allmulticast mode [ 549.934789][T15816] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3192'. [ 551.736788][T15797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3184'. [ 551.746079][T15797] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3184'. [ 551.935292][T15830] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3195'. [ 552.298457][T15846] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3201'. [ 552.550523][T15850] syzkaller0: entered promiscuous mode [ 552.556269][T15850] syzkaller0: entered allmulticast mode [ 552.699917][T15858] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3206'. [ 554.766658][T15856] syzkaller0: entered promiscuous mode [ 554.772391][T15856] syzkaller0: entered allmulticast mode [ 554.933629][T15872] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3209'. [ 555.137496][T15882] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3220'. [ 555.147747][T15883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3212'. [ 555.169507][T15883] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3212'. [ 555.225729][T15886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3213'. [ 555.529811][T15895] syzkaller0: entered promiscuous mode [ 555.543321][T15895] syzkaller0: entered allmulticast mode [ 555.670249][T15897] syzkaller0: entered promiscuous mode [ 555.675999][T15897] syzkaller0: entered allmulticast mode [ 555.937929][T15903] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3221'. [ 556.071729][T15908] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3224'. [ 558.232317][T15926] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3226'. [ 558.435963][T15938] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3232'. [ 558.565960][T15943] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3233'. [ 558.821127][T15949] syzkaller0: entered promiscuous mode [ 558.836944][T15949] syzkaller0: entered allmulticast mode [ 558.942785][T15953] syzkaller0: entered promiscuous mode [ 558.955161][T15953] syzkaller0: entered allmulticast mode [ 560.931036][T15957] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3237'. [ 561.340155][T15968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3242'. [ 561.413369][T15970] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3243'. [ 563.114364][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.346909][T15979] syzkaller0: entered promiscuous mode [ 563.352841][T15979] syzkaller0: entered allmulticast mode [ 563.648564][T15989] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3251'. [ 565.203508][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 565.728279][T15995] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3253'. [ 565.874936][T15998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3254'. [ 565.995621][T16000] syzkaller0: entered promiscuous mode [ 566.003043][T16000] syzkaller0: entered allmulticast mode [ 566.012907][T16002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3256'. [ 566.551301][T16020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3260'. [ 568.607124][T16031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3264'. [ 568.650509][T16029] syzkaller0: entered promiscuous mode [ 568.661767][T16029] syzkaller0: entered allmulticast mode [ 568.740514][T16037] wlan1 speed is unknown, defaulting to 1000 [ 568.746910][T16042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'. [ 569.097306][T16049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3269'. [ 571.427415][T16054] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3271'. [ 571.702996][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3275'. [ 571.740704][T16077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3276'. [ 571.785519][T16079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3277'. [ 571.962891][T16083] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3279'. [ 572.060141][T16087] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3281'. [ 572.244558][T16090] syzkaller0: entered promiscuous mode [ 572.254425][T16090] syzkaller0: entered allmulticast mode [ 572.331303][T16092] syzkaller0: entered promiscuous mode [ 572.336950][T16092] syzkaller0: entered allmulticast mode [ 574.607899][T16104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3286'. [ 576.547606][T16109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3289'. [ 576.730083][T16113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3291'. [ 576.748611][T16115] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3290'. [ 577.037706][T16125] syzkaller0: entered promiscuous mode [ 577.043702][T16125] syzkaller0: entered allmulticast mode [ 577.214724][T16131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3296'. [ 579.668999][T16137] syzkaller0: entered promiscuous mode [ 579.674709][T16137] syzkaller0: entered allmulticast mode [ 579.682244][T16145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3298'. [ 579.698330][T16145] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3298'. [ 579.854504][T16151] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3301'. [ 581.844395][T16153] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3302'. [ 581.869622][T16157] wlan1 speed is unknown, defaulting to 1000 [ 582.118069][T16169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3308'. [ 582.544073][T16177] syzkaller0: entered promiscuous mode [ 582.558283][T16177] syzkaller0: entered allmulticast mode [ 582.637648][T16180] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3312'. [ 585.135827][T16216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3318'. [ 585.382699][T16223] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3321'. [ 585.734815][T16229] syzkaller0: entered promiscuous mode [ 585.740880][T16229] syzkaller0: entered allmulticast mode [ 585.823618][T16231] syzkaller0: entered promiscuous mode [ 585.841579][T16231] syzkaller0: entered allmulticast mode [ 587.525439][T16240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3329'. [ 591.135035][T16249] wlan1 speed is unknown, defaulting to 1000 [ 591.217115][T16254] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3332'. [ 591.855744][T16276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3340'. [ 592.096193][T16281] syzkaller0: entered promiscuous mode [ 592.105372][T16281] syzkaller0: entered allmulticast mode [ 592.174483][T16284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3344'. [ 592.622624][T16294] nbd0: detected capacity change from 0 to 63 [ 593.369603][ T5792] block nbd0: Receive control failed (result -104) [ 594.590093][T16310] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3354'. [ 594.594695][T16311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3355'. [ 594.616610][T16307] syzkaller0: entered promiscuous mode [ 594.638181][T16307] syzkaller0: entered allmulticast mode [ 594.847737][T16314] wlan1 speed is unknown, defaulting to 1000 [ 595.130264][T16324] syzkaller0: entered promiscuous mode [ 595.142051][T16324] syzkaller0: entered allmulticast mode [ 595.867555][T16344] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3367'. [ 595.908894][ T5790] Bluetooth: hci4: command 0x0406 tx timeout [ 597.716628][T16336] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3366'. [ 597.999652][T16360] wlan1 speed is unknown, defaulting to 1000 [ 598.163322][T16371] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3377'. [ 598.964730][T16391] syzkaller0: entered promiscuous mode [ 598.970355][T16391] syzkaller0: entered allmulticast mode [ 600.932072][T16393] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3383'. [ 601.104179][T16400] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3386'. [ 601.325276][T16374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 601.647849][T16412] wlan1 speed is unknown, defaulting to 1000 [ 601.875871][T16415] syzkaller0: entered promiscuous mode [ 601.892644][T16415] syzkaller0: entered allmulticast mode [ 601.918707][T16417] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3393'. [ 602.112120][T16422] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3395'. [ 604.355206][T16446] nbd1: detected capacity change from 0 to 63 [ 604.443514][T16451] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3402'. [ 604.459741][ T5792] block nbd1: Receive control failed (result -104) [ 604.754629][T16457] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3404'. [ 605.283672][T16471] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3411'. [ 605.378746][T16473] syzkaller0: entered promiscuous mode [ 605.394989][T16473] syzkaller0: entered allmulticast mode [ 605.519312][T16478] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3413'. [ 605.814670][T16485] wlan1 speed is unknown, defaulting to 1000 [ 606.309111][T16497] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3421'. [ 606.751994][T16504] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3424'. [ 607.620135][T16525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3431'. [ 608.151256][T16534] wlan1 speed is unknown, defaulting to 1000 [ 608.443810][T16539] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3436'. [ 608.941233][T16553] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3442'. [ 609.385763][T16559] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3445'. [ 609.560297][T16567] wlan1 speed is unknown, defaulting to 1000 [ 609.752778][T16573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3451'. [ 610.247514][T16585] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3456'. [ 610.507761][T16520] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 610.749615][T16593] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3460'. [ 610.904766][T16601] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3465'. [ 611.042565][T16603] wlan1 speed is unknown, defaulting to 1000 [ 611.483686][T16619] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3471'. [ 611.998365][T16630] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3476'. [ 612.377815][T16641] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3481'. [ 612.981221][T16658] tipc: Started in network mode [ 612.986281][T16658] tipc: Node identity ac1414aa, cluster identity 4711 [ 613.050936][T16658] tipc: New replicast peer: 172.20.20.187 [ 613.100197][T16658] tipc: Enabled bearer , priority 10 [ 613.528709][T16674] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3487'. [ 613.612169][T16679] wlan1 speed is unknown, defaulting to 1000 [ 613.938719][T16690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3494'. [ 613.978982][T16692] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3492'. [ 614.219331][ T5842] tipc: Node number set to 2886997162 [ 615.078203][T16725] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3499'. [ 615.605665][T16743] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3505'. [ 615.774384][T16747] wlan1 speed is unknown, defaulting to 1000 [ 616.322571][T16773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'. [ 617.179246][T16789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3518'. [ 617.319083][T16794] syzkaller0: entered promiscuous mode [ 617.324649][T16794] syzkaller0: entered allmulticast mode [ 617.534316][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3521'. [ 617.919484][T16817] wlan1 speed is unknown, defaulting to 1000 [ 618.016051][T16823] syzkaller1: entered promiscuous mode [ 618.026665][T16823] syzkaller1: entered allmulticast mode [ 618.124192][T16825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3531'. [ 618.462818][T16833] syzkaller0: entered promiscuous mode [ 618.490018][T16833] syzkaller0: entered allmulticast mode [ 619.327777][T16851] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3541'. [ 619.614298][T16856] netlink: 'syz.2.3542': attribute type 1 has an invalid length. [ 619.780948][T16860] netlink: 'syz.2.3545': attribute type 6 has an invalid length. [ 619.789552][T16860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3545'. [ 619.817960][T16860] bond0: option use_carrier: invalid value (239) [ 619.864368][T16864] syzkaller0: entered promiscuous mode [ 619.872811][T16864] syzkaller0: entered allmulticast mode [ 620.067179][T16863] wlan1 speed is unknown, defaulting to 1000 [ 620.238664][T16874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3551'. [ 620.393481][T16881] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3554'. [ 620.942879][T16895] syzkaller0: entered promiscuous mode [ 620.957798][T16895] syzkaller0: entered allmulticast mode [ 621.248521][T16902] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input24 [ 621.749831][T16909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3565'. [ 621.939757][T16914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3567'. [ 622.231702][T16914] team0: Port device team_slave_0 removed [ 622.297974][T16920] syzkaller1: entered promiscuous mode [ 622.303964][T16920] syzkaller1: entered allmulticast mode [ 622.358311][T16916] wlan1 speed is unknown, defaulting to 1000 [ 622.535538][T16930] syzkaller0: entered promiscuous mode [ 622.563265][T16930] syzkaller0: entered allmulticast mode [ 623.030047][T16947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3577'. [ 623.175878][T16949] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input25 [ 623.273376][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 30 seconds [ 623.285472][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 30 seconds [ 623.308377][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 30 seconds [ 623.319671][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 30 seconds [ 624.281010][T16968] syzkaller0: entered promiscuous mode [ 624.289605][T16968] syzkaller0: entered allmulticast mode [ 624.552686][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.559821][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 624.724544][T16985] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3590'. [ 624.783708][T16987] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input26 [ 625.546985][T17003] syzkaller0: entered promiscuous mode [ 625.555316][T17003] syzkaller0: entered allmulticast mode [ 629.008475][T17052] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input27 [ 629.779196][T17069] syzkaller0: entered promiscuous mode [ 629.784763][T17069] syzkaller0: entered allmulticast mode [ 630.098554][T17071] syzkaller0: entered promiscuous mode [ 630.104517][T17071] syzkaller0: entered allmulticast mode [ 631.366441][T17098] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input28 [ 633.033573][T17079] syzkaller0: entered promiscuous mode [ 633.039966][T17079] syzkaller0: entered allmulticast mode [ 633.255724][T17107] syzkaller0: entered promiscuous mode [ 633.269674][T17107] syzkaller0: entered allmulticast mode [ 633.617321][ T3478] hsr_slave_0: left promiscuous mode [ 633.632465][ T3478] hsr_slave_1: left promiscuous mode [ 633.640790][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 633.652662][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.683125][ T3478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 633.701951][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.739630][ T3478] bridge_slave_1: left allmulticast mode [ 633.746639][ T3478] bridge_slave_1: left promiscuous mode [ 633.758912][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.784488][ T3478] bridge_slave_0: left allmulticast mode [ 633.819757][ T3478] bridge_slave_0: left promiscuous mode [ 633.845075][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.006013][ T3478] veth1_macvtap: left promiscuous mode [ 634.022642][ T3478] veth0_macvtap: left promiscuous mode [ 634.040308][ T3478] veth1_vlan: left promiscuous mode [ 634.046275][ T3478] veth0_vlan: left promiscuous mode [ 634.703090][T17141] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input29 [ 634.789528][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 30 seconds [ 634.800434][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 30 seconds [ 634.813354][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 30 seconds [ 634.825209][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 30 seconds [ 635.005914][ T3478] bond2 (unregistering): (slave bond0): Releasing active interface [ 635.067299][ T3478] bond2 (unregistering): Released all slaves [ 635.192324][ T3478] bond1 (unregistering): (slave batadv1): Releasing active interface [ 635.466812][ T3478] bond1 (unregistering): (slave veth5): Releasing active interface [ 635.604164][ T3478] bond1 (unregistering): Released all slaves [ 635.637089][ T3478] pim6reg (unregistering): left allmulticast mode [ 636.210275][ T3478] team0 (unregistering): Port device team_slave_1 removed [ 636.265720][ T3478] team0 (unregistering): Port device team_slave_0 removed [ 636.313916][ T3478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.364905][ T3478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.782224][ T3478] bond0 (unregistering): Released all slaves [ 636.884342][T17113] tc_dump_action: action bad kind [ 637.775960][T17180] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input30 [ 638.287372][T17186] syzkaller0: entered promiscuous mode [ 638.293634][T17186] syzkaller0: entered allmulticast mode [ 638.376257][T17188] syzkaller0: entered promiscuous mode [ 638.382687][T17188] syzkaller0: entered allmulticast mode [ 638.769427][T17191] syzkaller0: entered promiscuous mode [ 638.775328][T17191] syzkaller0: entered allmulticast mode [ 640.652774][T17218] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input31 [ 642.362322][T17226] tc_dump_action: action bad kind [ 643.384201][T17253] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input32 [ 643.461093][T17250] syzkaller0: entered promiscuous mode [ 643.476475][T17250] syzkaller0: entered allmulticast mode [ 646.281994][T17264] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3672'. [ 646.314662][T17278] netlink: 'syz.3.3677': attribute type 30 has an invalid length. [ 646.322800][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 646.338419][T17279] tc_dump_action: action bad kind [ 646.346659][T17281] netdevsim netdevsim3: Direct firmware load for .® failed with error -2 [ 646.359953][T17285] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 646.369585][T17281] netdevsim netdevsim3: Falling back to sysfs fallback for: .® [ 646.394851][T17285] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 646.445576][T17285] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 647.043715][T17308] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input33 [ 647.649939][T17320] syzkaller0: entered promiscuous mode [ 647.655795][T17320] syzkaller0: entered allmulticast mode [ 649.822055][T17323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3688'. [ 650.004791][T17334] netlink: 'syz.0.3694': attribute type 1 has an invalid length. [ 650.015552][T17334] netlink: 'syz.0.3694': attribute type 2 has an invalid length. [ 650.053906][T17334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3694'. [ 650.520197][T17356] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input34 [ 651.211564][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3702'. [ 651.376972][T17374] syzkaller0: entered promiscuous mode [ 651.383261][T17374] syzkaller0: entered allmulticast mode [ 651.396135][T17372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3702'. [ 653.358491][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 60 seconds [ 653.371239][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 60 seconds [ 653.389427][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 60 seconds [ 653.400744][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 60 seconds [ 654.281492][T17419] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input35 [ 654.559020][T17429] syzkaller0: entered promiscuous mode [ 654.572772][T17429] syzkaller0: entered allmulticast mode [ 655.152157][T17432] syzkaller0: entered promiscuous mode [ 655.159713][T17432] syzkaller0: entered allmulticast mode [ 655.237091][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3721'. [ 657.676657][T17465] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input36 [ 658.194308][T17479] syzkaller0: entered promiscuous mode [ 658.205816][T17479] syzkaller0: entered allmulticast mode [ 658.601093][T17482] syzkaller0: entered promiscuous mode [ 658.606667][T17482] syzkaller0: entered allmulticast mode [ 658.955290][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3740'. [ 661.034713][T17511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input37 [ 661.132696][T17522] tipc: Enabling of bearer rejected, failed to enable media [ 661.527276][T17528] syzkaller0: entered promiscuous mode [ 661.563251][T17528] syzkaller0: entered allmulticast mode [ 662.216176][ T5792] Bluetooth: hci1: link tx timeout [ 662.222765][ T5792] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 664.313634][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 664.870396][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 60 seconds [ 664.871158][T17569] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input38 [ 664.881161][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 60 seconds [ 664.903179][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 60 seconds [ 664.914414][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 60 seconds [ 665.959438][T17600] syzkaller0: entered promiscuous mode [ 665.965160][T17600] syzkaller0: entered allmulticast mode [ 666.059783][T17601] syzkaller0: entered promiscuous mode [ 666.065478][T17601] syzkaller0: entered allmulticast mode [ 666.707767][T17619] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input39 [ 668.569539][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3777'. [ 669.816770][ T5145] udevd[5145]: worker [16250] /devices/virtual/block/nbd0 is taking a long time [ 669.829361][ T5145] udevd[5145]: worker [16319] /devices/virtual/block/nbd1 is taking a long time [ 671.042394][T17623] netlink: 'syz.2.3775': attribute type 1 has an invalid length. [ 671.051072][T17623] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 671.529267][T17654] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input40 [ 671.605932][T16638] udevd[16638]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 672.273864][T17664] syzkaller0: entered promiscuous mode [ 672.288336][T17664] syzkaller0: entered allmulticast mode [ 674.481876][T17672] syzkaller0: entered promiscuous mode [ 674.487613][T17672] syzkaller0: entered allmulticast mode [ 674.544002][T17691] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3789'. [ 674.899454][T17707] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3796'. [ 675.377537][T17720] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input41 [ 676.953137][ T5790] Bluetooth: hci1: command 0x0406 tx timeout [ 677.668719][T17727] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 677.877227][T17732] syzkaller0: entered promiscuous mode [ 677.883085][T17732] syzkaller0: entered allmulticast mode [ 677.901550][T17729] netlink: 'syz.1.3801': attribute type 1 has an invalid length. [ 677.912869][T17729] netlink: 'syz.1.3801': attribute type 2 has an invalid length. [ 679.811483][T17739] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3801'. [ 679.821093][T17740] tc_dump_action: action bad kind [ 680.301461][T17762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input42 [ 680.478865][T17768] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.666585][T17772] netlink: 'syz.3.3813': attribute type 1 has an invalid length. [ 680.686135][T17772] netlink: 'syz.3.3813': attribute type 2 has an invalid length. [ 680.700937][T17772] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3813'. [ 680.712310][T17774] tc_dump_action: action bad kind [ 681.368584][T17778] syzkaller0: entered promiscuous mode [ 681.387550][T17778] syzkaller0: entered allmulticast mode [ 681.422774][T17789] syzkaller0: entered promiscuous mode [ 681.435271][T17789] syzkaller0: entered allmulticast mode [ 683.438656][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 90 seconds [ 683.449822][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 90 seconds [ 683.461462][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 90 seconds [ 683.477677][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 90 seconds [ 684.015257][T17821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3824'. [ 684.087760][T17824] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input43 [ 684.307828][T17827] tc_dump_action: action bad kind [ 685.282117][T17857] syzkaller0: entered promiscuous mode [ 685.297814][T17857] syzkaller0: entered allmulticast mode [ 685.437185][T17863] netlink: 'syz.0.3836': attribute type 1 has an invalid length. [ 685.452871][T17863] netlink: 'syz.0.3836': attribute type 2 has an invalid length. [ 685.465233][T17863] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3836'. [ 685.649302][T17872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input44 [ 685.864540][T17881] tc_dump_action: action bad kind [ 685.993309][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.564236][T17889] syzkaller0: entered promiscuous mode [ 686.570128][T17889] syzkaller0: entered allmulticast mode [ 686.802720][T17896] netlink: 'syz.2.3849': attribute type 1 has an invalid length. [ 686.823868][T17896] netlink: 'syz.2.3849': attribute type 2 has an invalid length. [ 686.843789][T17896] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3849'. [ 687.102806][T17884] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 687.257599][T17913] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input45 [ 687.382092][T17918] tc_dump_action: action bad kind [ 687.966999][T17937] netlink: 'syz.3.3861': attribute type 1 has an invalid length. [ 687.982109][T17937] netlink: 'syz.3.3861': attribute type 2 has an invalid length. [ 687.996806][T17937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3861'. [ 688.612137][T17959] tc_dump_action: action bad kind [ 688.830169][T17963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input46 [ 688.916804][T17969] netlink: 'syz.1.3873': attribute type 1 has an invalid length. [ 688.941338][T17969] netlink: 'syz.1.3873': attribute type 2 has an invalid length. [ 688.981456][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3873'. [ 689.911774][T17992] tc_dump_action: action bad kind [ 690.241637][T18004] netlink: 'syz.3.3886': attribute type 1 has an invalid length. [ 690.251666][T18004] netlink: 'syz.3.3886': attribute type 2 has an invalid length. [ 690.262094][T18004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3886'. [ 690.399021][T18008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input47 [ 691.468969][T18028] tc_dump_action: action bad kind [ 691.709752][T18034] netlink: 'syz.0.3896': attribute type 1 has an invalid length. [ 691.720482][T18034] netlink: 'syz.0.3896': attribute type 2 has an invalid length. [ 691.731342][T18034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3896'. [ 691.976634][T18048] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input48 [ 693.123162][T18065] tc_dump_action: action bad kind [ 693.265495][T18069] syzkaller0: entered promiscuous mode [ 693.271686][T18069] syzkaller0: entered allmulticast mode [ 694.660955][T18096] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input49 [ 694.948906][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 90 seconds [ 694.959898][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 90 seconds [ 694.971065][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 90 seconds [ 694.982883][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 90 seconds [ 696.456602][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3910'. [ 696.858685][T18113] tc_dump_action: action bad kind [ 697.253337][T18130] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input50 [ 697.347096][T18132] syzkaller0: entered promiscuous mode [ 697.366008][T18132] syzkaller0: entered allmulticast mode [ 697.405730][T18134] syzkaller0: entered promiscuous mode [ 697.413453][T18134] syzkaller0: entered allmulticast mode [ 700.106890][T18163] tc_dump_action: action bad kind [ 700.429727][T18180] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input51 [ 701.346538][T18197] syzkaller0: entered promiscuous mode [ 701.354555][T18197] syzkaller0: entered allmulticast mode [ 701.373303][T18201] syzkaller0: entered promiscuous mode [ 701.378991][T18201] syzkaller0: entered allmulticast mode [ 704.302371][T18214] tc_dump_action: action bad kind [ 704.325124][T18237] tipc: Enabling of bearer rejected, already enabled [ 704.466976][T18239] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3952'. [ 704.514405][T18241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input52 [ 704.566100][T18247] netlink: 'syz.2.3954': attribute type 1 has an invalid length. [ 704.584125][T18247] netlink: 'syz.2.3954': attribute type 2 has an invalid length. [ 704.601513][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3954'. [ 705.789263][T18262] syzkaller0: entered promiscuous mode [ 705.801532][T18262] syzkaller0: entered allmulticast mode [ 708.146442][T18281] tc_dump_action: action bad kind [ 708.155268][T18288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3963'. [ 708.313057][T18295] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input53 [ 708.466542][T18299] netlink: 'syz.1.3967': attribute type 1 has an invalid length. [ 708.493552][T18299] netlink: 'syz.1.3967': attribute type 2 has an invalid length. [ 708.533771][T18299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3967'. [ 709.341225][T18309] netlink: 'syz.2.3970': attribute type 2 has an invalid length. [ 709.822543][T18322] syzkaller0: entered promiscuous mode [ 709.828909][T18322] syzkaller0: entered allmulticast mode [ 709.836412][T18324] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3975'. [ 710.984852][T18343] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input54 [ 712.727821][T18341] tipc: Enabling of bearer rejected, failed to enable media [ 712.892246][T18350] netlink: 'syz.0.3982': attribute type 2 has an invalid length. [ 713.469958][T18374] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3989'. [ 713.509233][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 120 seconds [ 713.520467][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 120 seconds [ 713.531677][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 120 seconds [ 713.542874][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 120 seconds [ 713.582636][T18376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input55 [ 714.042793][T18383] syzkaller0: entered promiscuous mode [ 714.062928][T18383] syzkaller0: entered allmulticast mode [ 716.629491][T18391] netlink: 'syz.3.3994': attribute type 1 has an invalid length. [ 716.639499][T18392] netlink: 'syz.3.3994': attribute type 2 has an invalid length. [ 716.661705][T18408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3999'. [ 716.875997][T18422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input56 [ 717.971335][T18437] syzkaller0: entered promiscuous mode [ 717.983113][T18437] syzkaller0: entered allmulticast mode [ 720.013290][T18447] netlink: 'syz.0.4011': attribute type 1 has an invalid length. [ 720.021985][T18448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4010'. [ 720.031377][T18450] netlink: 'syz.0.4011': attribute type 2 has an invalid length. [ 720.251329][T18465] vlan3: entered allmulticast mode [ 720.263789][T18465] bridge0: port 4(vlan3) entered blocking state [ 720.273331][T18465] bridge0: port 4(vlan3) entered disabled state [ 720.286582][T18465] vlan3: entered promiscuous mode [ 720.391705][T18469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4017'. [ 720.493751][T18475] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input57 [ 720.947469][T18485] syzkaller0: entered promiscuous mode [ 720.963111][T18485] syzkaller0: entered allmulticast mode [ 720.981038][T18491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4021'. [ 723.363795][T18502] tc_dump_action: action bad kind [ 723.802186][T18526] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input58 [ 723.888439][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4032'. [ 724.516472][T18538] syzkaller0: entered promiscuous mode [ 724.539850][T18538] syzkaller0: entered allmulticast mode [ 725.030750][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 120 seconds [ 725.041731][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 120 seconds [ 725.053508][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 120 seconds [ 725.064699][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 120 seconds [ 726.662248][T18552] tc_dump_action: action bad kind [ 727.026492][T18576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4042'. [ 728.149773][T18626] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input59 [ 728.310699][T18632] tc_dump_action: action bad kind [ 728.879613][T18634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4049'. [ 728.904300][T18634] bond0: option arp_validate: invalid value (239) [ 729.180717][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4052'. [ 729.524267][T18659] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input60 [ 730.550064][T18693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4066'. [ 730.938555][T18708] netlink: 'syz.0.4073': attribute type 1 has an invalid length. [ 730.968993][T18708] netlink: 'syz.0.4073': attribute type 2 has an invalid length. [ 730.980233][T18711] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input61 [ 731.850786][T18719] syzkaller0: entered promiscuous mode [ 731.864762][T18719] syzkaller0: entered allmulticast mode [ 734.395907][T18743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4081'. [ 734.645782][T18760] syzkaller0: entered promiscuous mode [ 734.656622][T18760] syzkaller0: entered allmulticast mode [ 734.705496][T18762] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input62 [ 735.419059][T18786] syzkaller0: entered promiscuous mode [ 735.451497][T18786] syzkaller0: entered allmulticast mode [ 735.485224][T18789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4092'. [ 735.767451][T18792] syzkaller0: entered promiscuous mode [ 735.773643][T18792] syzkaller0: entered allmulticast mode [ 738.251459][T18799] syzkaller0: entered promiscuous mode [ 738.257009][T18799] syzkaller0: entered allmulticast mode [ 738.471591][T18821] syzkaller0: entered promiscuous mode [ 738.508423][T18821] syzkaller0: entered allmulticast mode [ 741.457892][T18844] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4105'. [ 741.591181][T18891] syzkaller0: entered promiscuous mode [ 741.596753][T18891] syzkaller0: entered allmulticast mode [ 742.167087][T18915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4121'. [ 742.407440][T18917] syzkaller0: entered promiscuous mode [ 742.415253][T18917] syzkaller0: entered allmulticast mode [ 742.425547][T18923] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4124'. [ 743.607969][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 150 seconds [ 743.619641][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 150 seconds [ 743.630975][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 150 seconds [ 743.642215][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 150 seconds [ 744.773903][T18928] syzkaller0: entered promiscuous mode [ 744.779900][T18928] syzkaller0: entered allmulticast mode [ 745.143712][T18968] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4132'. [ 745.188610][T18969] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4133'. [ 745.775989][T18981] syzkaller0: entered promiscuous mode [ 745.788380][T18981] syzkaller0: entered allmulticast mode [ 745.920252][T18984] syzkaller0: entered promiscuous mode [ 745.925965][T18984] syzkaller0: entered allmulticast mode [ 746.477344][T19008] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4142'. [ 747.434342][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.281291][T19018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4143'. [ 748.678991][T19031] syzkaller0: entered promiscuous mode [ 748.684566][T19031] syzkaller0: entered allmulticast mode [ 748.859810][T19037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4151'. [ 749.016904][T19042] tc_dump_action: action bad kind [ 749.143354][T19046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4152'. [ 749.403058][T19059] syzkaller0: entered promiscuous mode [ 749.417674][T19059] syzkaller0: entered allmulticast mode [ 749.679070][T19069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4161'. [ 749.694036][T19067] syzkaller0: entered promiscuous mode [ 749.699660][T19067] syzkaller0: entered allmulticast mode [ 749.962580][T19076] tc_dump_action: action bad kind [ 749.985354][T19080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4164'. [ 750.348664][T19096] syzkaller0: entered promiscuous mode [ 750.364434][T19096] syzkaller0: entered allmulticast mode [ 750.537925][T19103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4171'. [ 750.717018][T19107] syzkaller0: entered promiscuous mode [ 750.722928][T19107] syzkaller0: entered allmulticast mode [ 750.829869][T19116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4175'. [ 751.061730][T19120] tc_dump_action: action bad kind [ 751.352348][T19132] syzkaller0: entered promiscuous mode [ 751.360519][T19132] syzkaller0: entered allmulticast mode [ 751.583990][T19143] syzkaller0: entered promiscuous mode [ 751.606060][T19143] syzkaller0: entered allmulticast mode [ 751.972365][T19160] tc_dump_action: action bad kind [ 752.412416][T19172] syzkaller0: entered promiscuous mode [ 752.426354][T19172] syzkaller0: entered allmulticast mode [ 752.674273][T19182] syzkaller0: entered promiscuous mode [ 752.682365][T19182] syzkaller0: entered allmulticast mode [ 752.925251][T19191] tc_dump_action: action bad kind [ 753.248620][T19202] syzkaller0: entered promiscuous mode [ 753.256640][T19202] syzkaller0: entered allmulticast mode [ 753.589930][T19211] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4211'. [ 753.711380][T19217] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4214'. [ 753.829918][T19219] tc_dump_action: action bad kind [ 753.994770][T19227] syzkaller0: entered promiscuous mode [ 754.008522][T19227] syzkaller0: entered allmulticast mode [ 754.338663][T19238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4224'. [ 754.537032][T19244] tc_dump_action: action bad kind [ 754.680672][T19252] syzkaller0: entered promiscuous mode [ 754.686473][T19252] syzkaller0: entered allmulticast mode [ 754.934874][T19265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4236'. [ 755.114420][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 150 seconds [ 755.125876][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 150 seconds [ 755.137909][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 150 seconds [ 755.149885][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 150 seconds [ 755.374809][T19275] tc_dump_action: action bad kind [ 756.265758][T19309] tc_dump_action: action bad kind [ 757.144991][T19341] tc_dump_action: action bad kind [ 757.832268][T19366] tc_dump_action: action bad kind [ 758.132921][T19370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4279'. [ 758.679038][T19389] tc_dump_action: action bad kind [ 758.706571][T19392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4289'. [ 759.476266][T19419] syzkaller0: entered promiscuous mode [ 759.482044][T19419] syzkaller0: entered allmulticast mode [ 759.533176][T19418] team0: entered allmulticast mode [ 759.538531][T19418] team_slave_0: entered allmulticast mode [ 759.544319][T19418] team_slave_1: entered allmulticast mode [ 759.609097][T19421] tc_dump_action: action bad kind [ 760.326059][T19445] syzkaller0: entered promiscuous mode [ 760.332463][T19445] syzkaller0: entered allmulticast mode [ 760.523406][T19451] tc_dump_action: action bad kind [ 761.162856][T19472] syzkaller0: entered promiscuous mode [ 761.173949][T19472] syzkaller0: entered allmulticast mode [ 761.317492][T19479] tc_dump_action: action bad kind [ 761.614393][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4332'. [ 761.807253][ T5792] block nbd2: Receive control failed (result -32) [ 761.807257][ T5790] block nbd2: Receive control failed (result -32) [ 762.001076][T19506] syzkaller0: entered promiscuous mode [ 762.033849][T19506] syzkaller0: entered allmulticast mode [ 762.334146][T19511] tc_dump_action: action bad kind [ 762.787797][T19532] syzkaller0: entered promiscuous mode [ 762.795132][T19532] syzkaller0: entered allmulticast mode [ 763.160941][T19543] tc_dump_action: action bad kind [ 763.941738][T19568] syzkaller0: entered promiscuous mode [ 763.947293][T19568] syzkaller0: entered allmulticast mode [ 764.237046][T19581] tc_dump_action: action bad kind [ 764.767555][T19607] netlink: 'syz.3.4370': attribute type 2 has an invalid length. [ 765.045647][T19618] syzkaller0: entered promiscuous mode [ 765.051812][T19618] syzkaller0: entered allmulticast mode [ 765.173480][T19620] tc_dump_action: action bad kind [ 765.676512][T19643] netlink: 'syz.2.4382': attribute type 2 has an invalid length. [ 765.975715][T19656] syzkaller0: entered promiscuous mode [ 765.984031][T19656] syzkaller0: entered allmulticast mode [ 766.000392][T19658] tc_dump_action: action bad kind [ 766.496950][T19676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4393'. [ 766.499461][T19678] netlink: 'syz.1.4394': attribute type 2 has an invalid length. [ 766.723794][ T5790] block nbd3: Receive control failed (result -32) [ 766.723794][ T5792] block nbd3: Receive control failed (result -32) [ 766.925179][T19692] syzkaller0: entered promiscuous mode [ 766.933475][T19692] syzkaller0: entered allmulticast mode [ 766.942848][T19694] tc_dump_action: action bad kind [ 767.267164][T19710] netlink: 'syz.1.4404': attribute type 2 has an invalid length. [ 767.627777][T19724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4409'. [ 767.671683][T19726] tc_dump_action: action bad kind [ 767.881117][T19733] syzkaller0: entered promiscuous mode [ 767.886265][ T5792] block nbd4: Receive control failed (result -32) [ 767.886675][ T5790] block nbd4: Receive control failed (result -32) [ 767.893589][T19733] syzkaller0: entered allmulticast mode [ 768.100957][T19741] netlink: 'syz.3.4415': attribute type 2 has an invalid length. [ 768.360657][T19752] tc_dump_action: action bad kind [ 768.679179][T19762] syzkaller0: entered promiscuous mode [ 768.684796][T19762] syzkaller0: entered allmulticast mode [ 768.869164][T19771] netlink: 'syz.3.4429': attribute type 2 has an invalid length. [ 769.047707][T19777] tc_dump_action: action bad kind [ 769.393637][T19790] syzkaller0: entered promiscuous mode [ 769.408201][T19790] syzkaller0: entered allmulticast mode [ 769.521757][T19796] netlink: 'syz.0.4441': attribute type 2 has an invalid length. [ 769.816602][T19808] tc_dump_action: action bad kind [ 770.062836][T19819] syzkaller0: entered promiscuous mode [ 770.080498][T19819] syzkaller0: entered allmulticast mode [ 770.172042][T19822] netlink: 'syz.2.4452': attribute type 2 has an invalid length. [ 770.667925][T19841] tc_dump_action: action bad kind [ 770.729717][T19845] syzkaller0: entered promiscuous mode [ 770.735535][T19845] syzkaller0: entered allmulticast mode [ 770.993981][T19849] team0: Device xfrm0 is of different type [ 771.065340][T19853] tipc: Started in network mode [ 771.081221][T19853] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 771.096463][T19853] tipc: Enabled bearer , priority 0 [ 771.375030][T19867] syzkaller0: entered promiscuous mode [ 771.382325][T19867] syzkaller0: entered allmulticast mode [ 771.471779][T19870] tc_dump_action: action bad kind [ 771.602095][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4474'. [ 772.072519][T19896] bond0: (slave gretap0): Opening slave failed [ 772.149942][T19901] syzkaller0: entered promiscuous mode [ 772.155565][T19901] syzkaller0: entered allmulticast mode [ 772.208273][ T5842] tipc: Node number set to 11578026 [ 772.260427][T19904] tc_dump_action: action bad kind [ 772.497324][T19916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4485'. [ 772.861392][T19934] syzkaller0: entered promiscuous mode [ 772.867093][T19934] syzkaller0: entered allmulticast mode [ 773.145389][T19940] tc_dump_action: action bad kind [ 773.625604][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4502'. [ 773.681635][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 180 seconds [ 773.692920][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 180 seconds [ 773.705169][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 180 seconds [ 773.716438][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 180 seconds [ 773.801007][T19963] syzkaller0: entered promiscuous mode [ 773.843955][T19963] syzkaller0: entered allmulticast mode [ 773.870268][ T5145] udevd[5145]: worker [16250] /devices/virtual/block/nbd0 timeout; kill it [ 773.888260][ T5145] udevd[5145]: seq 18277 '/devices/virtual/block/nbd0' killed [ 774.022289][T19972] tc_dump_action: action bad kind [ 774.572352][T19998] syzkaller0: entered promiscuous mode [ 774.577913][T19998] syzkaller0: entered allmulticast mode [ 774.681775][T20005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4517'. [ 774.896305][T20010] tc_dump_action: action bad kind [ 775.415573][T20028] syzkaller0: entered promiscuous mode [ 775.424961][T20028] syzkaller0: entered allmulticast mode [ 775.673341][T20040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4530'. [ 775.989815][T20044] syzkaller0: entered promiscuous mode [ 776.005685][T20044] syzkaller0: entered allmulticast mode [ 778.477403][T20060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4543'. [ 778.605946][T20083] syzkaller0: entered promiscuous mode [ 778.622187][T20083] syzkaller0: entered allmulticast mode [ 778.636361][T20090] tipc: Enabled bearer , priority 24 [ 781.260635][T20121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4551'. [ 781.345986][T20133] tc_dump_action: action bad kind [ 781.464180][T20136] syzkaller0: entered promiscuous mode [ 781.471384][T20136] syzkaller0: entered allmulticast mode [ 784.021991][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4563'. [ 784.177296][T20187] tc_dump_action: action bad kind [ 784.279652][T20191] syzkaller0: entered promiscuous mode [ 784.285301][T20191] syzkaller0: entered allmulticast mode [ 784.842928][T20213] syzkaller0: entered promiscuous mode [ 784.850043][T20213] syzkaller0: entered allmulticast mode [ 784.891042][T20215] syzkaller0: entered promiscuous mode [ 784.896600][T20215] syzkaller0: entered allmulticast mode [ 785.192124][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 180 seconds [ 785.203327][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 180 seconds [ 785.214859][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 180 seconds [ 785.226191][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 180 seconds [ 785.889100][ T5145] udevd[5145]: worker [16319] /devices/virtual/block/nbd1 timeout; kill it [ 785.903870][ T5145] udevd[5145]: seq 18441 '/devices/virtual/block/nbd1' killed [ 787.294638][T20223] tc_dump_action: action bad kind [ 787.303021][T20232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4581'. [ 787.316478][T20232] geneve2: entered promiscuous mode [ 787.487110][T20248] syzkaller0: entered promiscuous mode [ 787.503229][T20248] syzkaller0: entered allmulticast mode [ 788.273635][T20272] syzkaller0: entered promiscuous mode [ 788.279369][T20272] syzkaller0: entered allmulticast mode [ 790.377284][T20276] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4596'. [ 790.391852][T20276] geneve2: entered promiscuous mode [ 790.551278][T20295] syzkaller0: entered promiscuous mode [ 790.556858][T20295] syzkaller0: entered allmulticast mode [ 790.662579][T20299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4601'. [ 790.686752][T20299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4601'. [ 791.629901][T20323] syzkaller0: entered promiscuous mode [ 791.635476][T20323] syzkaller0: entered allmulticast mode [ 793.774669][T20328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4610'. [ 793.787808][T20328] geneve2: entered promiscuous mode [ 794.726299][ T5790] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 794.758167][ T5790] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 794.765135][T20368] syzkaller0: entered promiscuous mode [ 794.765196][T20368] syzkaller0: entered allmulticast mode [ 794.778152][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 794.792438][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 794.802560][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 794.813730][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 795.352623][T20333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 796.879000][ T5792] Bluetooth: hci3: command tx timeout [ 796.943724][T20369] wlan1 speed is unknown, defaulting to 1000 [ 797.126865][T20369] chnl_net:caif_netlink_parms(): no params data found [ 797.237426][T20369] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.244835][T20369] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.252655][T20369] bridge_slave_0: entered allmulticast mode [ 797.260491][T20369] bridge_slave_0: entered promiscuous mode [ 797.270204][T20369] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.277491][T20369] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.285522][T20369] bridge_slave_1: entered allmulticast mode [ 797.293337][T20369] bridge_slave_1: entered promiscuous mode [ 797.331210][T20369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.344248][T20369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.403932][T20369] team0: Port device team_slave_0 added [ 797.417715][T20369] team0: Port device team_slave_1 added [ 797.468757][T20369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.475774][T20369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.502527][T20369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.517468][T20369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.525342][T20369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.605455][T20369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.714535][T20369] hsr_slave_0: entered promiscuous mode [ 797.743530][T20369] hsr_slave_1: entered promiscuous mode [ 797.758283][T20369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 797.771501][T20369] Cannot create hsr debugfs directory [ 797.834497][T20409] netlink: 'syz.0.4632': attribute type 1 has an invalid length. [ 798.161869][T20416] syzkaller0: entered promiscuous mode [ 798.167476][T20416] syzkaller0: entered allmulticast mode [ 798.232566][T20369] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.958695][ T5792] Bluetooth: hci3: command tx timeout [ 800.193799][T20417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.203528][T20417] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 800.279591][T20369] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.412062][T20369] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.620773][T20369] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.759444][T20444] netlink: 'syz.2.4642': attribute type 1 has an invalid length. [ 801.002264][T20369] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 801.046941][T20369] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 801.048238][ T5792] Bluetooth: hci3: command tx timeout [ 801.089753][T20369] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 801.131810][T20369] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 801.391083][T20369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.446207][T20369] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.486196][T18608] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.493483][T18608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.539648][T18608] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.546878][T18608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.802527][T20454] syzkaller0: entered promiscuous mode [ 801.809093][T20454] syzkaller0: entered allmulticast mode [ 803.118344][ T5792] Bluetooth: hci3: command tx timeout [ 803.755158][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 210 seconds [ 803.766439][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 210 seconds [ 803.777555][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 210 seconds [ 803.788988][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 210 seconds [ 804.040060][T20463] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4646'. [ 804.129964][T20470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 804.244489][T20369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.328731][T20476] syzkaller0: entered promiscuous mode [ 804.334310][T20476] syzkaller0: entered allmulticast mode [ 804.527576][T20369] veth0_vlan: entered promiscuous mode [ 804.543997][T20369] veth1_vlan: entered promiscuous mode [ 804.637208][T20369] veth0_macvtap: entered promiscuous mode [ 804.663336][T20369] veth1_macvtap: entered promiscuous mode [ 804.722478][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.737221][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.749013][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.761786][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.781926][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.802755][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.824533][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.848132][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.869584][T20369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.910959][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.932900][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.959099][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.970681][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.980600][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.991338][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.001379][T20369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 805.012120][T20369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.023877][T20369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.037664][T20369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.046847][T20369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.057141][T20369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.067162][T20369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.350187][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.385893][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.531591][T20498] syzkaller0: entered promiscuous mode [ 805.544578][T20498] syzkaller0: entered allmulticast mode [ 805.557125][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4655'. [ 807.717525][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.733025][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.957395][T20531] netlink: 'syz.1.4662': attribute type 1 has an invalid length. [ 808.335786][T20541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4664'. [ 808.645891][T20550] syzkaller0: entered promiscuous mode [ 808.652268][T20550] syzkaller0: entered allmulticast mode [ 808.663232][T20553] syzkaller0: entered promiscuous mode [ 808.678082][T20553] syzkaller0: entered allmulticast mode [ 808.895666][T20558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4670'. [ 809.352877][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 809.372883][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 809.393214][ T5790] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 809.414345][ T5790] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 809.431672][ T5790] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 809.439256][ T5790] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 811.226622][T20561] wlan1 speed is unknown, defaulting to 1000 [ 811.508312][ T5790] Bluetooth: hci0: command tx timeout [ 811.622232][T20582] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4678'. [ 811.720015][T20585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4676'. [ 811.891804][T20590] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4680'. [ 811.946105][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 811.984703][T20590] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4680'. [ 812.031798][T20561] chnl_net:caif_netlink_parms(): no params data found [ 812.207442][T20561] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.215249][T20561] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.223132][T20561] bridge_slave_0: entered allmulticast mode [ 812.231561][T20561] bridge_slave_0: entered promiscuous mode [ 812.273097][T20601] syzkaller0: entered promiscuous mode [ 812.283947][T20601] syzkaller0: entered allmulticast mode [ 812.293734][T20561] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.301269][T20561] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.315819][T20561] bridge_slave_1: entered allmulticast mode [ 812.325752][T20561] bridge_slave_1: entered promiscuous mode [ 812.332990][T20602] syzkaller0: entered promiscuous mode [ 812.343807][T20602] syzkaller0: entered allmulticast mode [ 813.590446][ T5790] Bluetooth: hci0: command tx timeout [ 814.290300][T20561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.317316][T20561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.374616][T20561] team0: Port device team_slave_0 added [ 814.409983][T20561] team0: Port device team_slave_1 added [ 814.475707][T20561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 814.491218][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.520553][T20561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 814.550745][T20561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 814.557960][T20561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 814.584904][T20561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 814.588886][T20609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4686'. [ 814.685522][T20561] hsr_slave_0: entered promiscuous mode [ 814.723865][T20561] hsr_slave_1: entered promiscuous mode [ 814.774093][T20561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 814.815241][T20561] Cannot create hsr debugfs directory [ 814.831960][T20618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4688'. [ 815.272929][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 210 seconds [ 815.284174][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 210 seconds [ 815.295729][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 210 seconds [ 815.308272][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 210 seconds [ 815.332447][T20623] syzkaller0: entered promiscuous mode [ 815.340960][T20623] syzkaller0: entered allmulticast mode [ 815.668125][ T5790] Bluetooth: hci0: command tx timeout [ 817.624538][T20561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.756672][ T5790] Bluetooth: hci0: command tx timeout [ 817.778802][T20561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 817.980083][T20561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.129390][T20561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.799842][T20677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4702'. [ 820.675365][T20644] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 820.690195][T20561] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 820.761927][T20561] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 820.803188][T20561] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 820.833762][T20561] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 821.136915][T20561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.356596][T20561] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.396107][T20705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4711'. [ 821.437928][T18610] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.445242][T18610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.505278][T18610] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.512591][T18610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 821.635949][T20561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 821.647423][T20561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 822.027855][T20561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 822.104116][T20561] veth0_vlan: entered promiscuous mode [ 822.121317][T20561] veth1_vlan: entered promiscuous mode [ 822.182880][T20561] veth0_macvtap: entered promiscuous mode [ 822.211725][T20561] veth1_macvtap: entered promiscuous mode [ 822.244819][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.258488][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.278102][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.295602][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.306100][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.332206][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.347088][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.363619][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.384038][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.402782][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.420891][T20561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.448325][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.460411][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.473655][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.484839][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.504341][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.524804][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.543713][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.570348][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.583078][T20561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.594250][T20561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.613605][T20561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 822.635809][T20561] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.644943][T20561] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.655344][T20561] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.664685][T20561] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 824.840058][T20716] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 824.976869][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.009688][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.077387][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4725'. [ 825.091623][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.100505][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.241956][T20762] syzkaller0: entered promiscuous mode [ 825.247765][T20762] syzkaller0: entered allmulticast mode [ 825.353341][T20767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4729'. [ 828.446372][T20769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 828.617879][T20802] syzkaller0: entered promiscuous mode [ 828.640719][T20802] syzkaller0: entered allmulticast mode [ 829.008511][T20824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4748'. [ 829.315094][T20845] syzkaller0: entered promiscuous mode [ 829.320800][T20845] syzkaller0: entered allmulticast mode [ 829.756311][T20857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4760'. [ 829.795099][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4760'. [ 832.107595][T20832] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 832.344164][T20868] syzkaller0: entered promiscuous mode [ 832.355631][T20868] syzkaller0: entered allmulticast mode [ 832.740151][T20886] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4773'. [ 832.772870][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 832.810911][T20886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 833.064812][T20898] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4778'. [ 833.296679][T20904] syzkaller0: entered promiscuous mode [ 833.305797][T20904] syzkaller0: entered allmulticast mode [ 833.420365][T20911] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4785'. [ 833.444529][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'. [ 833.465303][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4785'. [ 833.732057][T20919] tc_dump_action: action bad kind [ 833.793709][T20923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 833.831446][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 240 seconds [ 833.843408][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 240 seconds [ 833.855005][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 240 seconds [ 833.866402][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 240 seconds [ 834.272581][T20930] syzkaller0: entered promiscuous mode [ 834.288144][T20930] syzkaller0: entered allmulticast mode [ 834.508342][T20936] netlink: 'syz.1.4797': attribute type 2 has an invalid length. [ 834.700459][T20942] tc_dump_action: action bad kind [ 835.361525][T20956] syzkaller0: entered promiscuous mode [ 835.381006][T20956] syzkaller0: entered allmulticast mode [ 835.735062][T20965] netlink: 'syz.2.4811': attribute type 2 has an invalid length. [ 835.970090][T20977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4813'. [ 835.991805][T20977] netlink: 'syz.0.4813': attribute type 10 has an invalid length. [ 836.016641][T20977] netdevsim netdevsim0 netdevsim3: entered allmulticast mode [ 836.077221][T20977] team0: Port device netdevsim3 added [ 836.155173][T20982] syzkaller0: entered promiscuous mode [ 836.179561][T20982] syzkaller0: entered allmulticast mode [ 836.199539][T20978] tc_dump_action: action bad kind [ 836.830900][T20998] netlink: 'syz.1.4824': attribute type 2 has an invalid length. [ 837.046549][T21007] tc_dump_action: action bad kind [ 837.128490][T21013] syzkaller0: entered promiscuous mode [ 837.158474][T21013] syzkaller0: entered allmulticast mode [ 837.614237][T21025] block nbd0: reconnected socket [ 837.632561][T21025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4836'. [ 837.647049][ T5790] block nbd0: Receive control failed (result -32) [ 837.819436][T21032] netlink: 'syz.1.4838': attribute type 2 has an invalid length. [ 838.036924][T21036] tc_dump_action: action bad kind [ 838.119053][T21041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4842'. [ 838.258462][T21048] syzkaller0: entered promiscuous mode [ 838.264013][T21048] syzkaller0: entered allmulticast mode [ 838.660496][T21064] netlink: 'syz.1.4850': attribute type 2 has an invalid length. [ 839.188645][T21070] syzkaller0: entered promiscuous mode [ 839.204507][T21070] syzkaller0: entered allmulticast mode [ 839.238797][T21083] tc_dump_action: action bad kind [ 841.446965][T21090] syzkaller0: entered promiscuous mode [ 841.463018][T21090] syzkaller0: entered allmulticast mode [ 841.648929][T21099] netlink: 'syz.1.4862': attribute type 2 has an invalid length. [ 842.177471][T21113] syzkaller0: entered promiscuous mode [ 842.185642][T21113] syzkaller0: entered allmulticast mode [ 842.331367][T21119] block nbd0: reconnected socket [ 842.336397][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4868'. [ 842.350256][ T5790] block nbd0: Receive control failed (result -32) [ 842.394198][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4869'. [ 842.404455][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4869'. [ 842.419000][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4869'. [ 842.465826][T21120] tc_dump_action: action bad kind [ 842.750088][T21133] syzkaller0: entered promiscuous mode [ 842.756101][T21133] syzkaller0: entered allmulticast mode [ 842.828853][T21139] netlink: 'syz.2.4875': attribute type 2 has an invalid length. [ 843.356131][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4881'. [ 843.403436][T21152] block nbd0: reconnected socket [ 843.408822][T21152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4880'. [ 843.450536][ T5790] block nbd0: Receive control failed (result -32) [ 843.583770][T21161] syzkaller0: entered promiscuous mode [ 843.589854][T21161] syzkaller0: entered allmulticast mode [ 843.740413][T21165] netlink: 'syz.0.4888': attribute type 2 has an invalid length. [ 843.814861][T21163] tc_dump_action: action bad kind [ 844.297717][ T5790] Bluetooth: hci3: Malformed HCI Event [ 844.846861][T21194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4900'. [ 844.859349][T21192] netlink: 'syz.0.4899': attribute type 2 has an invalid length. [ 845.120603][T21199] tc_dump_action: action bad kind [ 845.213968][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 845.226211][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 845.238148][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 845.246306][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 845.255708][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 845.273260][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 845.287507][T21207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4904'. [ 845.370471][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 240 seconds [ 845.381846][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 240 seconds [ 845.393091][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 240 seconds [ 845.404176][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 240 seconds [ 845.427028][T21204] wlan1 speed is unknown, defaulting to 1000 [ 845.625171][T21204] chnl_net:caif_netlink_parms(): no params data found [ 845.809033][T21204] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.816361][T21204] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.824717][T21204] bridge_slave_0: entered allmulticast mode [ 845.833337][T21204] bridge_slave_0: entered promiscuous mode [ 845.842905][T21204] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.850246][T21204] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.857810][T21204] bridge_slave_1: entered allmulticast mode [ 845.866662][T21204] bridge_slave_1: entered promiscuous mode [ 845.910942][T21204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 845.949347][T21204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 846.092312][T21204] team0: Port device team_slave_0 added [ 846.135819][T21204] team0: Port device team_slave_1 added [ 846.246651][T21204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 846.253809][T21204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.281260][T21204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 846.294914][T21204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 846.302077][T21204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 846.344155][T21204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.429289][T21233] netlink: 'syz.1.4910': attribute type 1 has an invalid length. [ 846.483772][T21204] hsr_slave_0: entered promiscuous mode [ 846.490685][T21204] hsr_slave_1: entered promiscuous mode [ 846.497184][T21204] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.505651][T21204] Cannot create hsr debugfs directory [ 846.734760][T21204] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.761774][T21241] tc_dump_action: action bad kind [ 846.843760][T21204] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.933655][T21204] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.034387][T21204] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.348470][ T5792] Bluetooth: hci2: command tx timeout [ 848.967899][T21227] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 848.999958][T21204] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 849.035776][T21204] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 849.091482][T21204] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 849.133614][T21204] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 849.415704][T21204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.429700][ T5792] Bluetooth: hci2: command tx timeout [ 849.503372][T21204] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.540864][T18619] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.548205][T18619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.660397][T18619] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.667610][T18619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 850.043013][T21268] tc_dump_action: action bad kind [ 850.404175][T21285] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4926'. [ 850.470202][T21204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.543267][T21204] veth0_vlan: entered promiscuous mode [ 850.561312][T21204] veth1_vlan: entered promiscuous mode [ 850.657530][T21204] veth0_macvtap: entered promiscuous mode [ 850.675337][T21204] veth1_macvtap: entered promiscuous mode [ 850.707032][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.731427][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.742491][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.757057][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.768271][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.779397][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.792203][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.806154][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.816242][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.827039][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.840334][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 850.852121][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.865255][T21204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 850.877602][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.888282][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.898278][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.909421][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.919877][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.931968][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.942160][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.961944][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.973161][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 850.983753][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 850.993999][T21204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.004555][T21204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.016649][T21204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.040547][T21204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.050609][T21204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.060262][T21204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.070627][T21204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.515477][ T5792] Bluetooth: hci2: command tx timeout [ 853.048325][T21271] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 853.180358][T18608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.218123][T18608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.252186][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.269508][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.351631][T21301] tc_dump_action: action bad kind [ 853.588578][ T5792] Bluetooth: hci2: command tx timeout [ 854.236927][T21331] netlink: 'syz.2.4942': attribute type 1 has an invalid length. [ 854.261145][T21332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4942'. [ 854.285781][T21332] 8021q: VLANs not supported on ip6tnl0 [ 854.519213][T21336] tc_dump_action: action bad kind [ 855.296733][T21374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4953'. [ 855.406435][T21382] syzkaller0: left promiscuous mode [ 855.417478][T21382] syzkaller0: left allmulticast mode [ 855.515840][T21384] syzkaller0: entered promiscuous mode [ 855.522775][T21384] syzkaller0: entered allmulticast mode [ 855.659420][T21387] tc_dump_action: action bad kind [ 858.049390][T21365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.961190][T21415] syzkaller0: entered promiscuous mode [ 858.966759][T21415] syzkaller0: entered allmulticast mode [ 859.615638][T21421] Bluetooth: MGMT ver 1.22 [ 859.733246][T21423] syzkaller0: left promiscuous mode [ 859.755342][T21423] syzkaller0: left allmulticast mode [ 860.240423][T21446] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input63 [ 860.674743][T21450] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4978'. [ 861.122169][T21456] syzkaller0: entered promiscuous mode [ 861.127826][T21456] syzkaller0: entered allmulticast mode [ 862.721217][T21425] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 862.935814][T21465] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4982'. [ 863.013212][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4982'. [ 863.415409][T21474] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input64 [ 863.909402][ T1075] block nbd0: Possible stuck request ffff888021d60000: control (read@1024,1024B). Runtime 270 seconds [ 863.926543][ T1075] block nbd0: Possible stuck request ffff888021d60200: control (read@2048,1024B). Runtime 270 seconds [ 863.938735][ T1075] block nbd0: Possible stuck request ffff888021d60400: control (read@3072,1024B). Runtime 270 seconds [ 863.951940][ T10] block nbd0: Dead connection, failed to find a fallback [ 863.960382][ T10] block nbd0: shutting down sockets [ 863.967046][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 863.982381][ T1075] block nbd0: Possible stuck request ffff888021d68000: control (read@0,1024B). Runtime 270 seconds [ 864.002162][ T10] Buffer I/O error on dev nbd0, logical block 2, async page read [ 864.010374][ T10] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.019582][ T10] Buffer I/O error on dev nbd0, logical block 1, async page read [ 864.027508][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.036762][ T10] Buffer I/O error on dev nbd0, logical block 0, async page read [ 864.044776][ T10] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.054719][ T10] Buffer I/O error on dev nbd0, logical block 3, async page read [ 864.065366][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 864.076517][ T5790] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 864.086571][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 864.094777][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 864.102473][ T56] Buffer I/O error on dev nbd0, logical block 1, async page read [ 864.113641][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 864.120800][ T56] Buffer I/O error on dev nbd0, logical block 2, async page read [ 864.129262][ T56] Buffer I/O error on dev nbd0, logical block 3, async page read [ 864.139363][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 864.148880][ T56] Buffer I/O error on dev nbd0, logical block 0, async page read [ 864.157687][ T56] Buffer I/O error on dev nbd0, logical block 1, async page read [ 864.165958][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 864.175489][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 864.183021][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 864.191060][ T56] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.201791][ T56] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 864.227459][ T10] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 864.241232][ T10] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 4 prio class 2 [ 864.269657][T16250] ldm_validate_partition_table(): Disk read failed. [ 864.324456][T16250] Dev nbd0: unable to read RDB block 0 [ 864.358307][T16250] nbd0: unable to read partition table [ 864.392634][ T5145] udevd[5145]: worker [16250] terminated by signal 9 (Killed) [ 864.433262][T21479] wlan1 speed is unknown, defaulting to 1000 [ 864.449881][ T5145] udevd[5145]: worker [16250] failed while handling '/devices/virtual/block/nbd0' [ 864.982347][T21479] chnl_net:caif_netlink_parms(): no params data found [ 865.113010][T21479] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.132632][T21479] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.146503][T21479] bridge_slave_0: entered allmulticast mode [ 865.160615][T21479] bridge_slave_0: entered promiscuous mode [ 865.183071][T21479] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.204852][T21479] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.217154][T21479] bridge_slave_1: entered allmulticast mode [ 865.240895][T21479] bridge_slave_1: entered promiscuous mode [ 865.323603][T21479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.338415][T21479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.403525][T21479] team0: Port device team_slave_0 added [ 865.421971][T21479] team0: Port device team_slave_1 added [ 865.501348][T21479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.516556][T21479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.543440][T21479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.557301][T21479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.564593][T21479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.599582][T21479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.774749][T21479] hsr_slave_0: entered promiscuous mode [ 865.786002][T21479] hsr_slave_1: entered promiscuous mode [ 865.823398][T21479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 865.842884][T21479] Cannot create hsr debugfs directory [ 866.183245][T21479] team0: Port device netdevsim3 removed [ 866.207311][T21479] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.387029][T21479] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.389171][ T5792] Bluetooth: hci4: command tx timeout [ 866.517896][T21479] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.664720][T21479] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.802146][T21493] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.823471][T21479] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 867.861796][T21479] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 867.905109][T21479] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 867.970641][T21479] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 868.061804][T21528] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge0 [ 868.262172][T21479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 868.284222][T21533] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input65 [ 868.364390][T21479] 8021q: adding VLAN 0 to HW filter on device team0 [ 868.398759][T18619] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.406061][T18619] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.468261][ T5792] Bluetooth: hci4: command tx timeout [ 868.531568][T18619] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.538873][T18619] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.473678][T21479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 869.624986][T21479] veth0_vlan: entered promiscuous mode [ 869.650704][T21479] veth1_vlan: entered promiscuous mode [ 869.803368][T21479] veth0_macvtap: entered promiscuous mode [ 869.842042][T21479] veth1_macvtap: entered promiscuous mode [ 869.877635][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.892698][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.903372][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.918833][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.931669][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.942524][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.953257][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.964067][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 869.977008][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 869.988563][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.002769][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.013783][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.024546][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 870.035493][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.059233][T21479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.088395][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.113512][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.132607][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.157044][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.178341][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.199173][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.219554][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.235253][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.256870][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.271044][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.286121][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.306116][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.332416][T21479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 870.353501][T21479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 870.376940][T21479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.414477][T21479] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.435322][T21479] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.450675][T21479] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.473522][T21479] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.548430][ T5792] Bluetooth: hci4: command tx timeout [ 872.516732][T21552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 872.629281][ T5792] Bluetooth: hci4: command tx timeout [ 872.649053][T18619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.657724][T18619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.762106][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 872.782350][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.839717][T21576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5017'. [ 873.196132][T21594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5024'. [ 873.416763][T21604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5028'. [ 875.430378][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 270 seconds [ 875.441978][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 270 seconds [ 875.454106][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 270 seconds [ 875.465467][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 270 seconds [ 876.355364][T21599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 876.578678][T21638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5041'. [ 876.661424][T21641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5039'. [ 877.070144][T21669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5051'. [ 879.897944][T21653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.285554][T21687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5060'. [ 880.390816][T21689] netlink: 'syz.1.5059': attribute type 39 has an invalid length. [ 880.470255][T21696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5063'. [ 883.407579][T21694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 883.614275][T21722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5072'. [ 883.698552][T21727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5073'. [ 884.296890][T21760] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5086'. [ 886.927645][T21742] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 887.278854][T21777] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5095'. [ 887.481014][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5097'. [ 887.498871][T21786] IPVS: sh: FWM 1 0x00000001 - no destination available [ 887.526318][T11220] IPVS: starting estimator thread 0... [ 887.554935][T21786] ip_tables: iptables: counters copy to user failed while replacing table [ 887.639264][T21792] IPVS: using max 18 ests per chain, 43200 per kthread [ 887.888729][T21812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5106'. [ 890.686667][T21799] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 890.953503][T21839] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5115'. [ 891.181934][T21848] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.5119'. [ 891.317285][T18608] nci: nci_rsp_packet: unknown rsp opcode 0x1e [ 891.811503][T21871] ip_tables: iptables: counters copy to user failed while replacing table [ 894.160065][T21851] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 894.410484][T21879] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5127'. [ 894.426430][T21881] netlink: 'syz.3.5125': attribute type 10 has an invalid length. [ 894.475546][T21881] team0: Port device dummy0 added [ 894.693165][T21892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5132'. [ 895.264356][T21915] ip_tables: iptables: counters copy to user failed while replacing table [ 895.316708][T21918] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5138'. [ 897.844009][T21896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.051229][T21934] syzkaller0: entered promiscuous mode [ 898.056900][T21934] syzkaller0: entered allmulticast mode [ 898.168799][T21938] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5147'. [ 898.721886][T21963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5154'. [ 899.144898][T21969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5158'. [ 899.174227][T21968] syzkaller0: entered promiscuous mode [ 899.183978][T21968] syzkaller0: entered allmulticast mode [ 899.367079][T21983] ip_tables: iptables: counters copy to user failed while replacing table [ 902.063871][T21971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 902.234076][T22002] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5168'. [ 902.325467][T22006] syzkaller0: entered promiscuous mode [ 902.331221][T22006] syzkaller0: entered allmulticast mode [ 902.726332][T22028] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5179'. [ 902.773513][T22026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 902.871231][T22030] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5180'. [ 902.934486][T22034] netlink: 'syz.0.5181': attribute type 10 has an invalid length. [ 903.008855][T22034] team0: Device veth1_vlan failed to register rx_handler [ 903.170424][T22037] syzkaller0: entered promiscuous mode [ 903.186316][T22037] syzkaller0: entered allmulticast mode [ 903.663386][T22068] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5194'. [ 903.809369][T22072] syzkaller0: entered promiscuous mode [ 903.814990][T22072] syzkaller0: entered allmulticast mode [ 904.306300][T22086] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5203'. [ 904.381832][T22085] overlayfs: failed to get inode (-116) [ 904.397427][T22085] overlayfs: failed to get inode (-116) [ 904.548673][T22092] syzkaller0: entered promiscuous mode [ 904.554630][T22092] syzkaller0: entered allmulticast mode [ 905.524225][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 300 seconds [ 905.535508][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 300 seconds [ 905.557096][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 300 seconds [ 905.569027][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 300 seconds [ 905.911762][T22107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5212'. [ 906.388967][T22053] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.534271][T22116] syzkaller0: entered promiscuous mode [ 906.559880][T22116] syzkaller0: entered allmulticast mode [ 906.609089][T22120] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 906.921866][T22120] kvm: kvm [22119]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 906.975801][T22120] kvm: kvm [22119]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 906.997431][T22120] kvm: kvm [22119]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 908.060262][T22133] block nbd0: reconnected socket [ 908.085127][T22133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5222'. [ 908.125993][ T5792] block nbd0: Receive control failed (result -32) [ 908.185535][T22137] input: syz1 as /devices/virtual/input/input66 [ 908.252232][T22147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5227'. [ 908.411079][T22153] syzkaller0: entered promiscuous mode [ 908.416676][T22153] syzkaller0: entered allmulticast mode [ 909.244087][ T27] audit: type=1326 audit(1790852877.175:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22150 comm="syz.0.5228" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f007cf9e159 code=0x7fc00000 [ 911.107746][T22139] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 911.357434][T22173] input: syz1 as /devices/virtual/input/input67 [ 911.439137][T22177] syzkaller0: entered promiscuous mode [ 911.444755][T22177] syzkaller0: entered allmulticast mode [ 911.991078][T22190] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5244'. [ 912.165077][T22192] block nbd0: reconnected socket [ 912.172106][T22194] comedi comedi2: pcl816: I/O port conflict (0x1,16) [ 912.188355][T22192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5245'. [ 912.199678][ T5792] block nbd0: Receive control failed (result -32) [ 912.217300][T20739] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 912.475789][T20739] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 912.493993][T20739] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 912.508621][T20739] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.517796][T20739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.526484][T20739] usb 4-1: Product: syz [ 912.531070][T20739] usb 4-1: Manufacturer: syz [ 912.535762][T20739] usb 4-1: SerialNumber: syz [ 912.573712][T20739] cdc_mbim 4-1:1.0: skipping garbage [ 913.191147][T22188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 913.605469][T22205] tc_dump_action: action bad kind [ 914.003647][T22188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 914.015348][T20739] cdc_mbim 4-1:1.0: setting rx_max = 16384 [ 914.216335][T20739] cdc_mbim 4-1:1.0: setting tx_max = 184 [ 914.234078][T20739] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 914.253413][T20739] wwan wwan0: port wwan0mbim0 attached [ 914.281432][T20739] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 1e:f2:e0:f6:d7:36 [ 914.436318][T20739] usb 4-1: USB disconnect, device number 2 [ 914.444303][T20739] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 914.525089][T20739] wwan wwan0: port wwan0mbim0 disconnected [ 915.186561][T22218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5252'. [ 915.324471][T22196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.378622][T22222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5254'. [ 915.601452][T22230] comedi comedi2: pcl816: I/O port conflict (0x1,16) [ 915.785240][T22229] input: syz1 as /devices/virtual/input/input68 [ 916.064150][T22243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5261'. [ 916.079662][T22241] syzkaller0: entered promiscuous mode [ 916.098122][T22241] syzkaller0: entered allmulticast mode [ 916.460932][T22262] tc_dump_action: action bad kind [ 916.563142][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5266'. [ 917.087300][T22250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 917.106402][T22250] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 917.148745][T22250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 917.162758][T22250] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 917.180769][T22250] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 917.193501][T22250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 917.209726][T22250] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 917.228728][T22250] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 917.255235][T22250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 917.267628][T22250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 917.277737][T22250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 917.310203][T22256] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 917.914785][T22303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5273'. [ 917.978367][T22305] syzkaller0: entered promiscuous mode [ 917.987521][T22305] syzkaller0: entered allmulticast mode [ 918.158470][T22308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5275'. [ 918.223063][T22309] tc_dump_action: action bad kind [ 918.469991][ T5792] Bluetooth: hci3: command 0x0406 tx timeout [ 918.544017][T22301] loop2: detected capacity change from 0 to 32768 [ 918.561011][T22301] ======================================================= [ 918.561011][T22301] WARNING: The mand mount option has been deprecated and [ 918.561011][T22301] and is ignored by this kernel. Remove the mand [ 918.561011][T22301] option from the mount to silence this warning. [ 918.561011][T22301] ======================================================= [ 918.766108][T22301] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 918.934421][T22301] JBD2: Ignoring recovery information on journal [ 919.188211][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 919.201469][T22301] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 919.238720][T22334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5284'. [ 919.268292][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout [ 919.276560][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 919.520848][T21204] ocfs2: Unmounting device (7,2) on (node local) [ 920.052024][T22349] tc_dump_action: action bad kind [ 920.172677][T22353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5286'. [ 920.245135][T22355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5293'. [ 920.548546][T22257] Bluetooth: hci3: command 0x0406 tx timeout [ 921.268985][T22257] Bluetooth: hci0: command 0x0c1a tx timeout [ 921.349017][T22257] Bluetooth: hci2: command 0x0c1a tx timeout [ 921.350044][ T5792] Bluetooth: hci4: command 0x0c1a tx timeout [ 921.487494][T22362] loop3: detected capacity change from 0 to 32768 [ 921.527015][T22389] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5304'. [ 921.552454][T22389] nbd: must specify at least one socket [ 921.562216][T22387] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5303'. [ 921.729616][T22392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5305'. [ 923.210597][T22419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5314'. [ 923.353991][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 923.371183][T22423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5316'. [ 923.382842][T22421] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5315'. [ 923.429292][ T5792] Bluetooth: hci2: command 0x0c1a tx timeout [ 923.433304][T22257] Bluetooth: hci4: command 0x0c1a tx timeout [ 923.444572][T22421] nbd: must specify at least one socket [ 923.791804][T22437] syzkaller0: left promiscuous mode [ 923.804972][T22437] syzkaller0: left allmulticast mode [ 924.113508][T22429] loop1: detected capacity change from 0 to 32768 [ 924.150975][T22429] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 924.182964][T22429] JBD2: Ignoring recovery information on journal [ 924.258477][T22429] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 924.355988][T22427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 924.362733][T22427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 924.380233][T22427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 924.387420][T22427] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 924.564850][T22453] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5325'. [ 924.734876][T20561] ocfs2: Unmounting device (7,1) on (node local) [ 924.792491][T22460] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 925.038369][T22463] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5329'. [ 925.047469][T22463] nbd: must specify at least one socket [ 925.405650][T22479] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5335'. [ 925.460599][T22482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5337'. [ 926.199148][T22478] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 926.205718][T22478] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 926.220181][T22478] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 926.233727][T22478] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 926.427863][T22499] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5341'. [ 926.468823][T22499] nbd: must specify at least one socket [ 926.644474][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5346'. [ 926.749270][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5347'. [ 927.385180][T22531] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5354'. [ 927.418202][T22531] nbd: must specify a device to reconfigure [ 927.510604][T22257] Bluetooth: hci3: command 0x0406 tx timeout [ 927.562304][T22534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5356'. [ 927.909066][T22536] kvm: pic: non byte write [ 928.238145][T22257] Bluetooth: hci2: command 0x0c1a tx timeout [ 928.244412][ T5792] Bluetooth: hci0: command 0x0c1a tx timeout [ 928.318066][T22257] Bluetooth: hci4: command 0x0c1a tx timeout [ 929.388586][T22546] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5360'. [ 930.638532][T22563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5366'. [ 930.879163][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5372'. [ 931.576949][T22571] loop1: detected capacity change from 0 to 32768 [ 933.044260][T22601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5381'. [ 933.701039][T22618] kvm: pic: non byte write [ 934.195808][T22628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5394'. [ 935.198828][T22642] loop2: detected capacity change from 0 to 32768 [ 935.244725][T22642] JBD2: Ignoring recovery information on journal [ 935.303790][T22659] kvm: pic: non byte write [ 935.373399][T22642] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 935.528902][T22662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5407'. [ 935.592723][ T56] block nbd1: Possible stuck request ffff888021dd0000: control (read@0,1024B). Runtime 330 seconds [ 935.604323][ T56] block nbd1: Possible stuck request ffff888021dd0200: control (read@1024,1024B). Runtime 330 seconds [ 935.616033][ T56] block nbd1: Possible stuck request ffff888021dd0400: control (read@2048,1024B). Runtime 330 seconds [ 935.627311][ T56] block nbd1: Possible stuck request ffff888021dd0600: control (read@3072,1024B). Runtime 330 seconds [ 935.778285][T21204] ocfs2: Unmounting device (7,2) on (node local) [ 935.889580][T22674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5413'. [ 936.984462][T22687] kvm: pic: non byte write [ 937.350106][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5419'. [ 938.598005][ T0] NOHZ tick-stop error: local softirq work is pending, handler #46!!! [ 939.704270][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5424'. [ 940.267025][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5429'. [ 940.290458][T22726] kvm: pic: non byte write [ 941.327841][T22736] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5434'. [ 941.350454][ T29] INFO: task udevd:16319 blocked for more than 143 seconds. [ 941.359616][ T29] Not tainted syzkaller #0 [ 941.388271][ T29] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 941.407993][ T29] task:udevd state:D stack:25432 pid:16319 ppid:5145 flags:0x00004006 [ 941.427816][ T29] Call Trace: [ 941.433457][ T29] [ 941.436741][ T29] __schedule+0x15ae/0x4660 [ 941.448097][ T29] ? _raw_spin_unlock+0x40/0x40 [ 941.454968][ T29] ? asan.module_dtor+0x20/0x20 [ 941.460616][ T29] ? mark_lock+0x94/0x320 [ 941.465807][ T29] ? __lock_acquire+0x7d80/0x7d80 [ 941.471436][ T29] ? lock_chain_count+0x20/0x20 [ 941.476471][ T29] ? _raw_spin_lock_irq+0xbb/0xf0 [ 941.492567][ T29] ? _raw_spin_lock_irqsave+0x100/0x100 [ 941.500015][ T29] schedule+0xbd/0x170 [ 941.509889][ T29] io_schedule+0x80/0xd0 [ 941.519119][ T29] folio_wait_bit_common+0x881/0xfa0 [ 941.531537][ T29] ? folio_wait_bit+0x30/0x30 [ 941.546850][ T29] ? _compound_head+0x120/0x120 [ 941.558459][ T29] ? filemap_add_folio+0x190/0x3d0 [ 941.569105][ T29] ? __filemap_get_folio+0x71e/0xbe0 [ 941.574593][ T29] ? blkdev_writepage+0x30/0x30 [ 941.580234][ T29] do_read_cache_folio+0x1c0/0x7f0 [ 941.585528][ T29] ? blkdev_writepage+0x30/0x30 [ 941.591011][ T29] read_part_sector+0xd2/0x350 [ 941.595997][ T29] adfspart_check_POWERTEC+0x93/0xed0 [ 941.602109][ T29] ? adfspart_check_ADFS+0x620/0x620 [ 941.607594][ T29] ? put_partition+0x360/0x360 [ 941.613075][ T29] ? alloc_pages+0x4e1/0x740 [ 941.617899][ T29] bdev_disk_changed+0x755/0x1450 [ 941.628080][ T29] ? bdev_resize_partition+0xf0/0xf0 [ 941.640363][ T29] ? _atomic_dec_and_lock+0x93/0x120 [ 941.652640][ T29] ? iput+0x33f/0x900 [ 941.660323][ T29] blkdev_get_whole+0x30d/0x390 [ 941.665536][ T29] blkdev_get_by_dev+0x3a9/0x610 [ 941.675720][ T29] blkdev_open+0x14e/0x360 [ 941.680640][ T29] do_dentry_open+0x880/0x14b0 [ 941.685598][ T29] ? blkdev_mmap+0x1b0/0x1b0 [ 941.690841][ T29] path_openat+0x284f/0x3270 [ 941.695633][ T29] ? do_sys_openat2+0xda/0x1d0 [ 941.701021][ T29] ? __x64_sys_openat+0x139/0x160 [ 941.706219][ T29] ? verify_lock_unused+0x140/0x140 [ 941.718009][ T29] ? do_filp_open+0x430/0x430 [ 941.725118][ T29] do_filp_open+0x1f2/0x430 [ 941.738090][ T29] ? vfs_tmpfile+0x620/0x620 [ 941.745126][ T29] ? _raw_spin_unlock+0x28/0x40 [ 941.756999][ T29] ? alloc_fd+0x590/0x640 [ 941.765597][ T29] do_sys_openat2+0x134/0x1d0 [ 941.778480][ T29] ? do_sys_open+0xe0/0xe0 [ 941.786594][ T29] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 941.800862][ T29] ? lock_chain_count+0x20/0x20 [ 941.811489][ T29] __x64_sys_openat+0x139/0x160 [ 941.822217][ T29] do_syscall_64+0x55/0xb0 [ 941.832556][ T29] ? clear_bhb_loop+0x40/0x90 [ 941.843079][ T29] ? clear_bhb_loop+0x40/0x90 [ 941.853629][ T29] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 941.865283][ T29] RIP: 0033:0x7f1212ea7407 [ 941.871413][ T29] RSP: 002b:00007ffe3dd192b0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 941.891622][ T29] RAX: ffffffffffffffda RBX: 00007f1213646880 RCX: 00007f1212ea7407 [ 941.909815][ T29] RDX: 00000000000a0800 RSI: 00005642b6e756d0 RDI: ffffffffffffff9c [ 941.927902][ T29] RBP: 00005642b6e75910 R08: 0000000000000000 R09: 0000000000000000 [ 941.937664][ T29] R10: 0000000000000000 R11: 0000000000000202 R12: 00005642b6e8de00 [ 941.957214][ T29] R13: 00005642b6e8d410 R14: 0000000000000000 R15: 00005642b6e8de00 [ 941.965868][ T29] [ 941.971604][ T29] [ 941.971604][ T29] Showing all locks held in the system: [ 942.028083][ T29] 1 lock held by khungtaskd/29: [ 942.033092][ T29] #0: ffffffff8d1320e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x290 [ 942.075998][ T29] 2 locks held by getty/5535: [ 942.083172][ T29] #0: ffff8880319aa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 942.103753][ T29] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x428/0x1370 [ 942.118236][ T29] 1 lock held by udevd/16319: [ 942.123154][ T29] #0: ffff8880218954c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x11b/0x610 [ 942.136202][ T29] 2 locks held by syz.1.5435/22740: [ 942.141890][ T29] [ 942.144366][ T29] ============================================= [ 942.144366][ T29] [ 942.153549][ T29] NMI backtrace for cpu 0 [ 942.158380][ T29] CPU: 0 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 942.165630][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.175749][ T29] Call Trace: [ 942.179070][ T29] [ 942.182037][ T29] dump_stack_lvl+0x18c/0x250 [ 942.186770][ T29] ? __wake_up_klogd+0xd9/0x100 [ 942.191661][ T29] ? show_regs_print_info+0x20/0x20 [ 942.196896][ T29] ? load_image+0x420/0x420 [ 942.201442][ T29] nmi_cpu_backtrace+0x3a6/0x3e0 [ 942.206433][ T29] ? nmi_trigger_cpumask_backtrace+0x2f0/0x2f0 [ 942.212635][ T29] ? load_image+0x420/0x420 [ 942.217177][ T29] ? wq_watchdog_touch+0xef/0x170 [ 942.222389][ T29] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 942.228513][ T29] nmi_trigger_cpumask_backtrace+0x17a/0x2f0 [ 942.234720][ T29] watchdog+0xf59/0xfa0 [ 942.238963][ T29] ? watchdog+0x1e1/0xfa0 [ 942.243344][ T29] kthread+0x2fa/0x390 [ 942.247445][ T29] ? hungtask_pm_notify+0x50/0x50 [ 942.252505][ T29] ? kthread_blkcg+0xd0/0xd0 [ 942.257136][ T29] ret_from_fork+0x48/0x80 [ 942.261581][ T29] ? kthread_blkcg+0xd0/0xd0 [ 942.266195][ T29] ret_from_fork_asm+0x11/0x20 [ 942.271039][ T29] [ 942.275701][ T29] Sending NMI from CPU 0 to CPUs 1: [ 942.281205][ C1] NMI backtrace for cpu 1 [ 942.281215][ C1] CPU: 1 PID: 22740 Comm: syz.1.5435 Not tainted syzkaller #0 [ 942.281232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.281242][ C1] RIP: 0010:kasan_check_range+0x12/0x290 [ 942.281270][ C1] Code: 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 cc cc cc cc cc cc cc cc 66 0f 1f 00 b0 01 48 85 f6 0f 84 b4 01 00 00 55 41 57 <41> 56 41 55 41 54 53 4c 8d 04 37 49 39 f8 0f 82 13 02 00 00 49 89 [ 942.281284][ C1] RSP: 0018:ffffc9000e506bc8 EFLAGS: 00000002 [ 942.281298][ C1] RAX: 0000000000000001 RBX: 00000000000000ac RCX: ffffffff8168af16 [ 942.281310][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff911eb510 [ 942.281320][ C1] RBP: ffffc9000e506e28 R08: dffffc0000000000 R09: 1ffffffff223d6a2 [ 942.281333][ C1] R10: dffffc0000000000 R11: fffffbfff223d6a3 R12: 1c1026a7fb53f1a1 [ 942.281345][ C1] R13: ffff888056d60000 R14: 00000000fb53f1a1 R15: ffff888056d60b58 [ 942.281357][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 942.281371][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 942.281383][ C1] CR2: 00007f969dfef2f8 CR3: 00000000291b4000 CR4: 00000000003506e0 [ 942.281397][ C1] Call Trace: [ 942.281403][ C1] [ 942.281409][ C1] __lock_acquire+0x1336/0x7d80 [ 942.281442][ C1] ? verify_lock_unused+0x140/0x140 [ 942.281462][ C1] ? verify_lock_unused+0x140/0x140 [ 942.281482][ C1] ? verify_lock_unused+0x140/0x140 [ 942.281501][ C1] ? xfd_validate_state+0x6d/0x150 [ 942.281523][ C1] ? save_fpregs_to_fpstate+0x9e/0x200 [ 942.281554][ C1] lock_acquire+0x19e/0x420 [ 942.281573][ C1] ? __schedule+0x8c8/0x4660 [ 942.281603][ C1] ? read_lock_is_recursive+0x20/0x20 [ 942.281621][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 942.281641][ C1] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 942.281664][ C1] psi_account_irqtime+0x236/0x810 [ 942.281687][ C1] ? __schedule+0x8c8/0x4660 [ 942.281711][ C1] ? __schedule+0x8c8/0x4660 [ 942.281736][ C1] __schedule+0x8c8/0x4660 [ 942.281765][ C1] ? verify_lock_unused+0x140/0x140 [ 942.281784][ C1] ? verify_lock_unused+0x140/0x140 [ 942.281804][ C1] ? asan.module_dtor+0x20/0x20 [ 942.281830][ C1] ? asan.module_dtor+0x20/0x20 [ 942.281852][ C1] ? mark_lock+0x94/0x320 [ 942.281872][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 942.281896][ C1] ? preempt_schedule_irq+0xb4/0x150 [ 942.281927][ C1] preempt_schedule_irq+0xbf/0x150 [ 942.281956][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 942.281985][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 942.282010][ C1] irqentry_exit+0x67/0x70 [ 942.282094][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 942.282120][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x0/0x80 [ 942.282144][ C1] Code: c0 4c 89 01 48 c7 44 11 08 05 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 0f 1e fa 48 8b 04 24 65 48 8b 0d 60 28 7c 7e 65 8b 15 61 28 7c [ 942.282157][ C1] RSP: 0018:ffffc9000e507380 EFLAGS: 00000246 [ 942.282171][ C1] RAX: ffffffff817626ba RBX: ffffc9000e507440 RCX: ffff888056d60000 [ 942.282183][ C1] RDX: 0000000000000000 RSI: ffffffff817626ba RDI: 0000000000000000 [ 942.282194][ C1] RBP: ffffc9000e507410 R08: ffff888056d60000 R09: 0000000000000003 [ 942.282205][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: ffffffff817626ba [ 942.282216][ C1] R13: ffffc9000e507798 R14: ffffffff81762710 R15: ffffc9000e507388 [ 942.282229][ C1] ? stack_trace_save+0x100/0x100 [ 942.282250][ C1] ? stack_trace_save+0xaa/0x100 [ 942.282271][ C1] ? stack_trace_save+0xaa/0x100 [ 942.282292][ C1] ? stack_trace_save+0xaa/0x100 [ 942.282314][ C1] arch_stack_walk+0x12a/0x190 [ 942.282334][ C1] ? stack_trace_save+0xaa/0x100 [ 942.282356][ C1] stack_trace_save+0xaa/0x100 [ 942.282377][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 942.282400][ C1] ? verify_lock_unused+0x140/0x140 [ 942.282420][ C1] kasan_set_track+0x4e/0x70 [ 942.282461][ C1] ? percpu_ref_put+0x12/0x100 [ 942.282478][ C1] ? kmem_cache_free+0xf8/0x290 [ 942.282502][ C1] kasan_save_free_info+0x28/0x40 [ 942.282532][ C1] ____kasan_slab_free+0x126/0x1f0 [ 942.282553][ C1] slab_free_freelist_hook+0x130/0x1a0 [ 942.282573][ C1] ? __vm_area_free+0xe4/0x110 [ 942.282589][ C1] kmem_cache_free+0xf8/0x290 [ 942.282616][ C1] __vm_area_free+0xe4/0x110 [ 942.282633][ C1] exit_mmap+0x61d/0xb90 [ 942.282659][ C1] ? vm_brk+0x30/0x30 [ 942.282680][ C1] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 942.282706][ C1] ? uprobe_clear_state+0x278/0x290 [ 942.282737][ C1] __mmput+0x118/0x3a0 [ 942.282754][ C1] exit_mm+0x23f/0x340 [ 942.282778][ C1] ? sysctl_delayacct+0x220/0x220 [ 942.282794][ C1] ? do_exit+0x2530/0x2530 [ 942.282821][ C1] ? tty_audit_exit+0x14d/0x1f0 [ 942.282844][ C1] do_exit+0x909/0x2530 [ 942.282873][ C1] ? put_task_struct+0xc0/0xc0 [ 942.282899][ C1] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 942.282919][ C1] ? get_signal+0x100e/0x1390 [ 942.282936][ C1] ? lock_chain_count+0x20/0x20 [ 942.282958][ C1] ? _raw_spin_lock_irq+0xbb/0xf0 [ 942.282979][ C1] do_group_exit+0x22d/0x2f0 [ 942.282994][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 942.283011][ C1] get_signal+0x12a6/0x1390 [ 942.283038][ C1] arch_do_signal_or_restart+0xc2/0x7b0 [ 942.283076][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 942.283093][ C1] ? blkcg_maybe_throttle_current+0x19f/0xa90 [ 942.283116][ C1] ? get_sigframe_size+0x20/0x20 [ 942.283149][ C1] ? exit_to_user_mode_loop+0x3b/0x110 [ 942.283175][ C1] exit_to_user_mode_loop+0x70/0x110 [ 942.283199][ C1] exit_to_user_mode_prepare+0xee/0x180 [ 942.283224][ C1] syscall_exit_to_user_mode+0x1a/0x50 [ 942.283241][ C1] do_syscall_64+0x61/0xb0 [ 942.283262][ C1] ? clear_bhb_loop+0x40/0x90 [ 942.283285][ C1] ? clear_bhb_loop+0x40/0x90 [ 942.283309][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 942.283331][ C1] RIP: 0033:0x7f9f4599e159 [ 942.283344][ C1] Code: Unable to access opcode bytes at 0x7f9f4599e12f. [ 942.283352][ C1] RSP: 002b:00007f9f468170e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 942.283368][ C1] RAX: fffffffffffffe00 RBX: 00007f9f45c26098 RCX: 00007f9f4599e159 [ 942.283380][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9f45c26098 [ 942.283390][ C1] RBP: 00007f9f45c26090 R08: 0000000000000000 R09: 0000000000000000 [ 942.283401][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.283410][ C1] R13: 00007f9f45c26128 R14: 00007fff7758d4d0 R15: 00007fff7758d5b8 [ 942.283429][ C1] [ 942.513273][ T29] Kernel panic - not syncing: hung_task: blocked tasks [ 942.513317][ T29] CPU: 1 PID: 29 Comm: khungtaskd Not tainted syzkaller #0 [ 942.513377][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 942.513409][ T29] Call Trace: [ 942.513430][ T29] [ 942.513463][ T29] dump_stack_lvl+0x18c/0x250 [ 942.513558][ T29] ? show_regs_print_info+0x20/0x20 [ 942.513630][ T29] ? load_image+0x420/0x420 [ 942.513750][ T29] panic+0x2ca/0x720 [ 942.513827][ T29] ? bpf_jit_dump+0xd0/0xd0 [ 942.513887][ T29] ? __irq_work_queue_local+0x13a/0x3b0 [ 942.513970][ T29] ? preempt_schedule_thunk+0x1a/0x30 [ 942.514054][ T29] ? nmi_trigger_cpumask_backtrace+0x2a4/0x2f0 [ 942.514155][ T29] watchdog+0xf98/0xfa0 [ 942.514227][ T29] ? watchdog+0x1e1/0xfa0 [ 942.514318][ T29] kthread+0x2fa/0x390 [ 942.514372][ T29] ? hungtask_pm_notify+0x50/0x50 [ 942.514445][ T29] ? kthread_blkcg+0xd0/0xd0 [ 942.514494][ T29] ret_from_fork+0x48/0x80 [ 942.514565][ T29] ? kthread_blkcg+0xd0/0xd0 [ 942.514625][ T29] ret_from_fork_asm+0x11/0x20 [ 942.514728][ T29] [ 942.519360][ T29] Kernel Offset: disabled [ 943.038809][ T29] Rebooting in 86400 seconds..