last executing test programs: 27.358882154s ago: executing program 3 (id=571): syz_emit_vhci(0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xedcbe49bebb023ea, 0x10010, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@filename='mtd0\x00', 0x0, &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) 25.686211154s ago: executing program 3 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000180)='r:s/p ./file0:', 0xe) 23.829958937s ago: executing program 3 (id=580): socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x30048010) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r6, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) r8 = syz_open_dev$rtc(&(0x7f0000000080), 0x8, 0xc0100) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b5"], 0x34}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r8], 0x7) 21.603725218s ago: executing program 3 (id=584): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x30048010) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) r9 = syz_open_dev$rtc(&(0x7f0000000080), 0x8, 0xc0100) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b5"], 0x34}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r9], 0x7) 17.047080401s ago: executing program 1 (id=593): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r1, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/211, 0xd3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 17.044976385s ago: executing program 4 (id=594): keyctl$instantiate_iov(0x14, 0x0, &(0x7f00000026c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) gettid() pipe2(&(0x7f0000002140)={0x0, 0x0}, 0x0) ioprio_set$pid(0x2, 0x0, 0x4004) read$FUSE(r0, 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x34, 0x0, &(0x7f00000001c0)=0x2) msgsnd(0x0, 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r4 = fcntl$dupfd(r3, 0x406, r3) sendto$inet(r3, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001, 0x3}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) write(r2, 0x0, 0x0) 16.031591778s ago: executing program 0 (id=595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0x4}}}}]}, 0x44}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 15.003121185s ago: executing program 4 (id=597): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x74, &(0x7f0000000500)=""/116, 0x41100, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xa, 0x101, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@cgroup=r4, 0x36, 0x0, 0xd87, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000008300"/30, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000000800"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="b9b10ce7d856fa00b6dc4b00004cc7823d3c6c4b28cca75f013253e7643616b9dc36c7d62f073e10df59d87539729764303eb14852d55b7f95a6b5a5122e81305da404d3142cc54fa5e97ba2", @ANYRES64=r5], 0x20) socket$kcm(0xa, 0x5, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$eJzs3c9PXFsdAPDvveB7gO9V+t5bPBMTJ/ElGjUEulJpYktpKbRYU21j3EwHmLbowDQwGBdd4K6JKxMXjYtGE3esGhZu65/gxmVdN9GFGxOTRszMXOjcy4xMGwZs3+ez4DDnN3zvPZy7uJw007i/ulla3SxV1kv15bub50q/qNe21qqRDt5wROTHj+2THJ/XMIjr5BSvvc+9G5eu/Oj2uYg/r/z1xd7e3l40DUdXUx3f/+ufD5c7031poU2z3+69HZefRsQnh+bVNBQRP/lTRBIRF7O8mSwdjYgz0S67/fDXd0rHNJunz6vnyy8XH+1Of7aw82S398+eRPyu9uVv31v7+9eGpv/2zWMaHgAAAAAAAAAAAAAAAACAt9zczRu3fjg5Fc+SGN5JDr+vO5elvd6P3Ts2Xx38DwsAAAAAAAAAAAAAAAAAAAD/p169/19KPury/v9sll7o0X7v+4OfI4Mz/4Mbs5cnp7Lz35ND5d/Jsv5xcSjOdjn3vXj++8VC++7nvx8e503tz29/3PFI0pGO8vFI04mJiD9kB79/moyltfpm41t361vrK8c2jbdWPv7t0/tz0ckO9O83/jOF/gd//v/Hh66m5uc7x3eJvdPy8R/qWe+Pv0r6iv+lfLPHA5p2h48HP8Q7LB//4VbeaGeF99tJM/6/GT46/rOF/gd1/5+JiFLSnGsptwI09zDN/F77FfLy8f9CKy+3dGa/yF73/78L8b9c6P+01v/t4h8iusrH/71W3kiuRnsD0Ip/evT9f6XQ/2nEvzn/bX//+5KPf7bYD+eqtH6T/a7/c4X+u8S/9ybjNdxKs3meSXJXwE7Szu/1/+rIy8d/5FD5q+e/tK/939VC+5N6/tsft/n8N9HxHPKNpP38R3f5+I/2rNfv/T9faDfo9f9Ca//Hm8rHf6yVl987j7e+9hv/hUL/g4p/a1cysh//V+vJf95v5//e/q8v+fh/sZ2ZdtbYbn1t7f+So/f/1wr9n8b+rzn/7XSwo74r8vH/oGe9Zvz/ksV97H/c/9cL7QYf/4hJe/03lo//hz3rte7/kaPX/8VCu0HH/+uD7BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgLTCTpeORpBO5z2k6MRFxKfv8aYwlS5WV8lKtvvzzzYjZLL8UHyX3avWlSq28ul5fqZYrtVp9OeJyVv5JjCSbtXqjvFZ5cOWgr9HkfrWy0ViqVhoRMZflfyU+3O9rabWxVnkQEVcPyr6U1jce3K+sl1dWN743OTk5GfMHczibVH/ZqK432qO3SyMWDtqOJx2TaxVfO5jLB8nP6lsb65VaK/96R5tafblS62izmJX9Ns4mjY2t9eVKo1qu1e/tj3eaLmTp7PzNH9+8PnWo/E7STmdOdloAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvKZn0999HBHD7U9pRJSS5jfv9aj/9Hn1fPnl4qPd6c8Wdp7svoiI5CTnCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCLt2jRBAEYQCtbgUNPYbRMJOZjiiigSOCJ9BjeBg9ipfwDgYGpgbLwm4PLPMDy8Amy3tJQX9UV0MXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBs7p67l6e6iUhxvjqL+Hr7/tnNH0r9uJ7uP1kw83RBD4dx/9jd3NZN+fc0yq/K0W+bN+n/3/trTNTe52BPhvu0NZ4zNLdvc+/r515EylVEtCW/TDlX1X53AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8raPo2wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4FcAAAD//0yJHBw=") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file2\x00', 0x2024c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r9 = openat(r8, &(0x7f00000001c0)='./file2\x00', 0x10000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f0000000080)={0x17c04, r9, 0x6, 0xdf1f, 0x10000007, 0xdeb1}) r10 = socket$kcm(0xa, 0x2, 0x73) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000c00)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) sendmsg$kcm(r10, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1236}, 0x4c014) bind$rds(r1, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r13, 0x11, 0x2, &(0x7f0000000200)=""/205, &(0x7f0000000300)=0xcd) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 12.298567339s ago: executing program 1 (id=600): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100270086dd6001070000081100200100000000800000000001000000000000000100004e220008907800"/66], 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000040008002000128008000100736974001400028005000a0000000000060008000b000000"], 0x40}}, 0x4010) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25070000000a0004007770616e33000000080005000200000008000300", @ANYRES32, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x400448cb, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x1, 0xf7}]}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x5f, 0x0, 0x0, 0x2e]}}, 0x0, 0x37}, 0x28) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}], 0x1, 0x0) 11.762204175s ago: executing program 0 (id=601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x9d) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) 11.612061078s ago: executing program 4 (id=602): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x801, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000380), &(0x7f0000000340)=@tcp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[], 0x0) 9.445608129s ago: executing program 1 (id=603): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r0, &(0x7f00000004c0)="c8", 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x14, 0x2, 0x6, 0x3, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x4000000) r3 = socket$packet(0x11, 0x3, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0x0) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @remote}, 0x10) splice(r2, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) close(0xffffffffffffffff) write(r1, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000340), &(0x7f0000000440)=0x8) 9.338184021s ago: executing program 3 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 9.283618726s ago: executing program 2 (id=605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002a80)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write(r2, &(0x7f0000000180)='r:s/p ./file0:', 0xe) 9.163736814s ago: executing program 4 (id=606): openat(0xffffffffffffff9c, 0x0, 0x40440, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9.133114667s ago: executing program 0 (id=607): unshare(0x2c020400) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c000000020605000000000000000000000000070e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000000020c000180080001400000fa03080008400000005c05000500020000000500010006"], 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) symlinkat(0x0, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') openat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0/../file0\x00', &(0x7f0000000380)={0x100, 0x0, 0x8}, 0x18) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000100000018110000d0985a66da77531fec3546f0c5f9bf147f6e05c71701c7d777ab6796775a9583b631702f77e6867fe43d1d5dafaae1bf5da5a3d0f5ecacae4d41bad0e2fe2e3d201475e5531c54cdc7e93e63fe3b9f065616e5214fb22c329d9b419de6e5e9b21236a508c8be0fd84348bf60a40da84f21c7b6d719899d4d89b054d35b13694ca9e78794197e2abe3a9d6d60bc41d694cf63", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b60901000000002066000000646c6c251801000020646c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b5030000000000008500000076000000b70000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000200), 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r3, 0x0, 0xd1, &(0x7f0000000000)=0x2, 0x4) ioctl$XFS_IOC_SET_RESBLKS(r3, 0xc0105872, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r2, 0x40026f34, &(0x7f0000000040)=0x1) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 7.264694928s ago: executing program 4 (id=608): syz_mount_image$fuse(0x0, &(0x7f0000001a40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000002100), 0x14081, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000080)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) setns(0xc9, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$inet(0x2, 0x5, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) sendto$inet(r3, &(0x7f0000000300)="8c", 0x1, 0x5, &(0x7f0000000100)={0x2, 0x4e02, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendto$inet(r1, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x40000002, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x20, r5, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r6, {0x7, 0x29, 0x9, 0xffffffffb0802dee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f000000b0c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a3700", 0x2000, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r7, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) write(r8, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f000000b000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="10070080050000000100000000000000"], 0x0, 0x0, 0x0}) 6.488154701s ago: executing program 0 (id=609): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)='sl0\x00'/16) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6.431699085s ago: executing program 2 (id=610): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0000520006000500010000000800", @ANYRES16=r1], 0x2c}}, 0x20008000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0xa, &(0x7f00000009c0)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x101, 0x82, &(0x7f0000000640)=""/130, 0x41100, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x3690, 0xffffffffffffffff, 0x4, 0x0, &(0x7f00000008c0)=[{0x1, 0x2, 0x4, 0x2}, {0x1, 0x1, 0x2, 0x4}, {0x3, 0x4, 0xf, 0x9}, {0x1, 0x2, 0x4}], 0x10, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.302286051s ago: executing program 1 (id=611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c6572"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0x4}}}}]}, 0x44}}, 0x4890) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.992741786s ago: executing program 0 (id=612): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xd7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x74, &(0x7f0000000500)=""/116, 0x41100, 0x58, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xa, 0x101, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000980)={@cgroup=r4, 0x36, 0x0, 0xd87, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x0}, 0x40) r6 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYBLOB="0000000000000000b7020000140000008300"/30, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000000800"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYRES32=r2, @ANYBLOB, @ANYRES32=r3, @ANYRES32=r7, @ANYBLOB="b9b10ce7d856fa00b6dc4b00004cc7823d3c6c4b28cca75f013253e7643616b9dc36c7d62f073e10df59d87539729764303eb14852d55b7f95a6b5a5122e81305da404d3142cc54fa5e97ba2", @ANYRES64=r5], 0x20) socket$kcm(0xa, 0x5, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file2\x00', 0x2024c1b, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r8 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r9 = openat(r8, &(0x7f00000001c0)='./file2\x00', 0x10000, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r9, 0x40305829, &(0x7f0000000080)={0x17c04, r9, 0x6, 0xdf1f, 0x10000007, 0xdeb1}) r10 = socket$kcm(0xa, 0x2, 0x73) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000900), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000c00)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x0, @sint}]}) sendmsg$kcm(r10, &(0x7f0000001280)={&(0x7f00000010c0)=@in6={0xa, 0x4e1b, 0x3, @remote, 0x5}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000000)="f5", 0x1}], 0x1236}, 0x4c014) bind$rds(r1, &(0x7f0000000400)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_CONNINFO(r13, 0x11, 0x2, &(0x7f0000000200)=""/205, &(0x7f0000000300)=0xcd) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') 5.862589478s ago: executing program 2 (id=613): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000a80)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa8100270086dd6001070000081100200100000000800000000001000000000000000100004e220008907800"/66], 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x4462, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd38f}, 0x1c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000100001040000", @ANYRES32=0x0, @ANYBLOB="00000000040008002000128008000100736974001400028005000a0000000000060008000b000000"], 0x40}}, 0x4010) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x11, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c80)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, 0x0, 0x40) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448cb, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xb, [@enum={0x9, 0x1, 0x0, 0x6, 0x4, [{0x1, 0xf7}]}]}, {0x0, [0x5f, 0x4f, 0x30, 0x61, 0x2e, 0x5f, 0x0, 0x0, 0x2e]}}, 0x0, 0x37}, 0x28) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmmsg$inet6(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x40}}], 0x1, 0x0) 5.777718452s ago: executing program 1 (id=614): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='high-speed', 0xa) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbcf, &(0x7f0000000c00)="$eJzs3M9rm+cdAPDv+1qWncSbnDHGsss8xkhgTLEzHJYwWDIydtlhsF0HMY4cjJUf2B6ZHR/k7R8Y286DXQbbwkoPzTmXlvbaS5tcW3oohOLGLZTSurzSK9uJJdtpJL/B/nzg8fv8kPR8v3otvc8DkgI4ssayP2nEqYi4mkRU8v40IsrN2nBEo3W79bWV6U/XVqaT2Nj43UdJJBHxZG1luv1YSX48kTeGI+LtXybxrb/snHdhaXluql6vzefts4s3bp9dWFr+yeyNqeu167WbE+d/Nnlu8vz4hcme5frZe5fuf/KDX3/Q+Py/X9z7+O//TuJSjORj2/PolbEY23xOtitFxFSvJyvIQJ7P9jyT0h53SvscFAAAXaXb1nDfiUoMxNbirRKvv1NocAAAAEBPbAxEbAAAAACHXGL/DwAAAIdc+3MAT9ZWptul2E8kHKzHlyNitJX/el5aI6VoNI/DMRgRx58ksf1rrUnrbi9sLCLef3ThlaxEn76HvJvGasTxvP70+U+a+Y82v8W9M/80IsZ7MP/YM+0i8o/vdvr/3zv/Sz2Yv+j8ATiaHlxuXch2Xv/SzfVPdLj+lTpcu76Ooq9/7fXf+o7131b+A13Wf7/d5xx3//PPO93Gsvx/fv9X/2+XbP7s+EJJPYfHqxHfK3XKP9nMP+mS/9V9zlH58k6t21jR+W/8K+J0dM6/Ldn994nOzszWa+Otvx3nWH1r8n/d5i86/8f5+r9T/u3ff+p2/m/vc44/XLny6o7OR1vV3fNPPywnv2/WynnPn6YWF+cnIsrJb3b2n9s9lvZt2o+R5X/mh7u//jvln70nNPLnIdsLrObHrP3nZ+b8xb27r3WLp73/K/L8X+ty/rfn/2Zp5/n/6z7n+NEbfzvTbWz7/jcr2fztvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtKURMRJJWt2sp2m1GnEiIr4dx9P6rYXFH8/c+uPNa9lYxGgMpjOz9dp4RFRa7SRrTzTrW+1zz7R/GhEnI+IflWPNdnX6Vv1a0ckDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw6UREjESSViMijYj1SppWq0VHBQAAAPTcaKfO9ODjAAAAAPqn4/4fAAAAOFTs/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOizk99/8DCJiMbFY82SKedjg4VGBvRbWnQAQGEGig4AKEyp6ACAwjznHt9yAQ6hZI/x4a4jQz2PBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICX1+lTDx4mEdG4eKxZMuV8bLDQyIB+S4sOACjMwG6DpYOLAzh4XuJwdNnjA8ke48Nbt2k8PTLUt5gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePmMNEuSViOinPdVqxHfiIjRGExmZuu18Yj4ZkS8WxkcytoTBccMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7y0sLc9N1eu1+aySRl7Z7FHZqiStZ6zxssRzJCpDEdGvKcp9e+TDUCn6nQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCIsLC3PTdXrtfmFoiMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAirawtDw3Va/X5vtYKTpHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACK81UAAAD//996BfY=") r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x4, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff7ffc}, {0x8007, 0x5a, 0x0, 0x9}, {0x10, 0xbc, 0x3}, {0x7, 0xf2, 0xf6, 0xffffffff}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x4, 0x0, r2}) r4 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0xfffffffffffffffe, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x6], 0x80a0000}) ioctl$KVM_RUN(r7, 0xae80, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000080)='./file0\x00', r3, 0x4000, r4}, 0x18) close_range(r2, 0xffffffffffffffff, 0x3f00000000000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x80800}) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000380)={@private0}, 0x14) 5.60907312s ago: executing program 2 (id=615): syz_emit_vhci(0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, 0x0, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xedcbe49bebb023ea, 0x10010, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./mnt\x00', 0x0, 0x0, 0x0) 4.021507106s ago: executing program 3 (id=616): socket$inet_mptcp(0x2, 0x1, 0x106) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$inet_smc(0x2b, 0x801, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000380), &(0x7f0000000340)=@tcp6=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x6a, &(0x7f00000003c0)=ANY=[], 0x0) 3.095062753s ago: executing program 2 (id=617): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x30048010) r4 = socket(0x2b, 0x80801, 0x1) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r7, 0x8, &(0x7f0000000100)=0x3) unshare(0x68040000) r9 = syz_open_dev$rtc(&(0x7f0000000080), 0x8, 0xc0100) dup(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400b5"], 0x34}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYRES32=r9], 0x7) 817.078603ms ago: executing program 2 (id=618): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x4, 0x3, 0x1000}]}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x101280, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20024080}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f00000000c0)={0x8, 0xa6, 0x2, 0x9, 0x3, 0xead}) sendmmsg$inet(r0, &(0x7f0000002c40), 0x0, 0x0) 784.709845ms ago: executing program 1 (id=619): r0 = socket$inet(0x2, 0x3, 0x33) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_batadv\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x38, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xfc}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xffffffc0}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40001}, 0xc004) 689.062934ms ago: executing program 0 (id=620): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x759, &(0x7f0000000300)={[{@prjquota}, {@nogrpid}, {@discard}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x5}, 0x0}, {@orlov}, {@debug}, {@usrquota}, {@grpid}, {@jqfmt_vfsv1}, {@noauto_da_alloc}, {@mblk_io_submit}, {@usrjquota_path={'usrjquota', 0x3d, './file0/../file0/../file0'}}], [], 0x2c}, 0xfe, 0x513, &(0x7f0000000b00)="$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") syz_open_dev$loop(0x0, 0x7, 0x80) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x4028, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8002, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 0s ago: executing program 4 (id=621): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0xff) r2 = socket$netlink(0x10, 0x3, 0x14) preadv(r2, &(0x7f0000000280), 0x0, 0x0, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f00000001c0)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) socket$unix(0x1, 0x5, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.72' (ED25519) to the list of known hosts. [ 83.671746][ T5605] cgroup: Unknown subsys name 'net' [ 83.757376][ T5605] cgroup: Unknown subsys name 'cpuset' [ 83.767089][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.430689][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.668067][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.677831][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.685562][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.695540][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.707193][ T5623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.829607][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.839228][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.846723][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.855380][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.864967][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.943784][ T4934] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.952482][ T4934] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.962888][ T4934] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.973553][ T4934] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.983550][ T4934] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.042977][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.051093][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.059114][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.069757][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.078058][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.109237][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.117412][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.124903][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.135916][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.144500][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.736195][ T4934] Bluetooth: hci0: command tx timeout [ 91.893276][ T4934] Bluetooth: hci1: command tx timeout [ 91.918747][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.920103][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.920585][ T5622] bridge_slave_0: entered allmulticast mode [ 91.928232][ T5622] bridge_slave_0: entered promiscuous mode [ 91.980003][ T30] cfg80211: failed to load regulatory.db [ 91.997350][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.997601][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.998008][ T5622] bridge_slave_1: entered allmulticast mode [ 92.004633][ T5622] bridge_slave_1: entered promiscuous mode [ 92.053350][ T4934] Bluetooth: hci2: command tx timeout [ 92.081065][ T5636] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.081497][ T5636] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.082637][ T5636] bridge_slave_0: entered allmulticast mode [ 92.087542][ T5636] bridge_slave_0: entered promiscuous mode [ 92.133310][ T4934] Bluetooth: hci3: command tx timeout [ 92.149610][ T5636] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.150107][ T5636] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.152689][ T5636] bridge_slave_1: entered allmulticast mode [ 92.160445][ T5636] bridge_slave_1: entered promiscuous mode [ 92.196332][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.213257][ T4934] Bluetooth: hci4: command tx timeout [ 92.251747][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.286722][ T5637] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.287118][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.288164][ T5637] bridge_slave_0: entered allmulticast mode [ 92.293039][ T5637] bridge_slave_0: entered promiscuous mode [ 92.322437][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.325071][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.326359][ T5629] bridge_slave_0: entered allmulticast mode [ 92.331225][ T5629] bridge_slave_0: entered promiscuous mode [ 92.350143][ T5636] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.368167][ T5637] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.368659][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.369009][ T5637] bridge_slave_1: entered allmulticast mode [ 92.374907][ T5637] bridge_slave_1: entered promiscuous mode [ 92.414320][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.414553][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.417210][ T5629] bridge_slave_1: entered allmulticast mode [ 92.421688][ T5629] bridge_slave_1: entered promiscuous mode [ 92.441668][ T5636] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.453046][ T5622] team0: Port device team_slave_0 added [ 92.507544][ T5622] team0: Port device team_slave_1 added [ 92.508101][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.509299][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.509652][ T5632] bridge_slave_0: entered allmulticast mode [ 92.516445][ T5632] bridge_slave_0: entered promiscuous mode [ 92.536171][ T5637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.571004][ T5636] team0: Port device team_slave_0 added [ 92.587121][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.587490][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.587866][ T5632] bridge_slave_1: entered allmulticast mode [ 92.592675][ T5632] bridge_slave_1: entered promiscuous mode [ 92.609854][ T5637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.634618][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.644771][ T5636] team0: Port device team_slave_1 added [ 92.683863][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.716150][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.716196][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.716224][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.739426][ T5637] team0: Port device team_slave_0 added [ 92.782144][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.782191][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.782218][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.828026][ T5637] team0: Port device team_slave_1 added [ 92.845543][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.867009][ T5629] team0: Port device team_slave_0 added [ 92.873856][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.873889][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.873934][ T5636] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.922758][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.932531][ T5629] team0: Port device team_slave_1 added [ 92.949805][ T5636] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.949965][ T5636] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.950050][ T5636] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.956103][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.956149][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.956229][ T5637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.059674][ T5637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.059732][ T5637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.059760][ T5637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.124314][ T5622] hsr_slave_0: entered promiscuous mode [ 93.127542][ T5622] hsr_slave_1: entered promiscuous mode [ 93.145296][ T5632] team0: Port device team_slave_0 added [ 93.149389][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.149433][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.149500][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.211462][ T5632] team0: Port device team_slave_1 added [ 93.239887][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.240028][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.240105][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.263873][ T5636] hsr_slave_0: entered promiscuous mode [ 93.266686][ T5636] hsr_slave_1: entered promiscuous mode [ 93.268916][ T5636] debugfs: 'hsr0' already exists in 'hsr' [ 93.269172][ T5636] Cannot create hsr debugfs directory [ 93.311777][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.311936][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.312020][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.382368][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.382411][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.382438][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.432510][ T5637] hsr_slave_0: entered promiscuous mode [ 93.438831][ T5637] hsr_slave_1: entered promiscuous mode [ 93.440886][ T5637] debugfs: 'hsr0' already exists in 'hsr' [ 93.440947][ T5637] Cannot create hsr debugfs directory [ 93.600169][ T5629] hsr_slave_0: entered promiscuous mode [ 93.604972][ T5629] hsr_slave_1: entered promiscuous mode [ 93.607786][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 93.607849][ T5629] Cannot create hsr debugfs directory [ 93.646421][ T5632] hsr_slave_0: entered promiscuous mode [ 93.649649][ T5632] hsr_slave_1: entered promiscuous mode [ 93.652035][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 93.652082][ T5632] Cannot create hsr debugfs directory [ 93.814187][ T4934] Bluetooth: hci0: command tx timeout [ 93.973491][ T4934] Bluetooth: hci1: command tx timeout [ 94.134085][ T4934] Bluetooth: hci2: command tx timeout [ 94.150229][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.164536][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.171138][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.182960][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.188515][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.200337][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.208518][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.216043][ T4934] Bluetooth: hci3: command tx timeout [ 94.225508][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.293356][ T4934] Bluetooth: hci4: command tx timeout [ 94.314071][ T5636] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.325536][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.334723][ T5636] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.347094][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.370415][ T5636] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.381597][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.386402][ T5636] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.398863][ T5636] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.480617][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.490691][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.492316][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.507278][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.517149][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.527663][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.534141][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.540933][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.649365][ T5637] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.661198][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.680656][ T5637] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.692330][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.707635][ T5637] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.718814][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.721251][ T5637] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.732233][ T5637] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.856922][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.873869][ T5632] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.884594][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.901996][ T5632] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.912813][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.920195][ T5632] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.930121][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.945152][ T5632] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.955513][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.021312][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.046443][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.046798][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.080848][ T5636] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.091096][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.091480][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.149663][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.166208][ T5636] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.200303][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.201084][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.245076][ T3384] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.245208][ T3384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.274344][ T5637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.305077][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.319809][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.320070][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.381487][ T5637] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.401480][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.401706][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.437797][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.438039][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.489431][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.489721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.532886][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.677230][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.728972][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.729118][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.764825][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.764952][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.893503][ T4934] Bluetooth: hci0: command tx timeout [ 96.053501][ T4934] Bluetooth: hci1: command tx timeout [ 96.214723][ T4934] Bluetooth: hci2: command tx timeout [ 96.296017][ T4934] Bluetooth: hci3: command tx timeout [ 96.373929][ T4934] Bluetooth: hci4: command tx timeout [ 96.652614][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.747062][ T5636] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.919731][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.977441][ T5622] veth0_vlan: entered promiscuous mode [ 97.030393][ T5622] veth1_vlan: entered promiscuous mode [ 97.046732][ T5636] veth0_vlan: entered promiscuous mode [ 97.068993][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.108512][ T5636] veth1_vlan: entered promiscuous mode [ 97.199581][ T5629] veth0_vlan: entered promiscuous mode [ 97.243539][ T5629] veth1_vlan: entered promiscuous mode [ 97.268248][ T5622] veth0_macvtap: entered promiscuous mode [ 97.319816][ T5636] veth0_macvtap: entered promiscuous mode [ 97.338075][ T5622] veth1_macvtap: entered promiscuous mode [ 97.360157][ T5636] veth1_macvtap: entered promiscuous mode [ 97.439143][ T5629] veth0_macvtap: entered promiscuous mode [ 97.447292][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.467935][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.499241][ T5629] veth1_macvtap: entered promiscuous mode [ 97.509689][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.536542][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.555710][ T39] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.592371][ T5636] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.609051][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.633502][ T3384] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.644592][ T39] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.644644][ T39] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.644684][ T39] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.644732][ T39] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.644770][ T39] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.644869][ T39] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.736341][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.815021][ T39] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.837147][ T3384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.837334][ T3384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.956586][ T5632] veth0_vlan: entered promiscuous mode [ 97.973907][ T4934] Bluetooth: hci0: command tx timeout [ 97.997063][ T3384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.005921][ T3384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.028040][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.028080][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.049748][ T5637] veth0_vlan: entered promiscuous mode [ 98.092106][ T5632] veth1_vlan: entered promiscuous mode [ 98.106334][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.106373][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.135033][ T4934] Bluetooth: hci1: command tx timeout [ 98.156526][ T5637] veth1_vlan: entered promiscuous mode [ 98.206173][ T5622] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.227921][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.227973][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.264490][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.264791][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.295850][ T4934] Bluetooth: hci2: command tx timeout [ 98.308608][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.309236][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.309440][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.373484][ T4934] Bluetooth: hci3: command tx timeout [ 98.425743][ T5632] veth0_macvtap: entered promiscuous mode [ 98.454228][ T4934] Bluetooth: hci4: command tx timeout [ 98.465622][ T5632] veth1_macvtap: entered promiscuous mode [ 98.479275][ T5637] veth0_macvtap: entered promiscuous mode [ 98.510040][ T5637] veth1_macvtap: entered promiscuous mode [ 98.540729][ T5808] ip_tables: iptables: counters copy to user failed while replacing table [ 98.578300][ T5808] ip_tables: iptables: counters copy to user failed while replacing table [ 98.607206][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.666222][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.704275][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.741386][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.793762][ T39] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.797363][ T3384] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.797499][ T3384] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.797608][ T3384] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.807230][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.807377][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.807483][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.807589][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.893447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.903474][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.776884][ T5815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 100.778292][ T5815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.027697][ T5815] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.056123][ T5815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.236392][ T5815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.253953][ T4934] Bluetooth: hci0: command 0x0c1a tx timeout [ 101.270061][ T5815] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.372674][ T5825] loop2: detected capacity change from 0 to 256 [ 102.268937][ T5815] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.269060][ T5815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.863255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.953602][ T5815] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 103.002045][ T5815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 103.017105][ T5815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.043299][ T5815] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 103.080720][ T5815] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 103.087082][ T5815] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.095464][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.130316][ T5815] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 103.333757][ T4934] Bluetooth: hci0: command 0x0c1a tx timeout [ 104.293549][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.518466][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.527121][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.646179][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.654860][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.977591][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.977742][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.015149][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.102246][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.174955][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.420988][ T4934] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.461802][ T5839] netlink: 388 bytes leftover after parsing attributes in process `syz.2.11'. [ 105.513613][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.513652][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.030875][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.098080][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.174499][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 107.255435][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.398965][ T5849] jffs2: notice: (5849) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 108.135158][ T5858] ip_tables: iptables: counters copy to user failed while replacing table [ 108.161199][ T5858] ip_tables: iptables: counters copy to user failed while replacing table [ 108.376656][ T5865] netlink: 72 bytes leftover after parsing attributes in process `syz.1.18'. [ 109.269548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 109.348408][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 109.349470][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 109.350197][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 110.153795][ T5879] netlink: 388 bytes leftover after parsing attributes in process `syz.3.22'. [ 110.543731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 111.145642][ T5885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 111.148496][ T5885] netlink: 28 bytes leftover after parsing attributes in process `syz.2.24'. [ 112.193701][ T5885] veth1: entered promiscuous mode [ 112.200077][ T5885] veth0: entered promiscuous mode [ 113.919937][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.29'. [ 113.984921][ T5905] netlink: 72 bytes leftover after parsing attributes in process `syz.0.30'. [ 115.663356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 116.182400][ T5922] netlink: 388 bytes leftover after parsing attributes in process `syz.3.33'. [ 117.746066][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 117.755288][ T5937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.38'. [ 118.224999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 118.633416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 120.268650][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.35'. [ 120.778766][ T5967] loop1: detected capacity change from 0 to 512 [ 120.779757][ T5967] ======================================================= [ 120.779757][ T5967] WARNING: The mand mount option has been deprecated and [ 120.779757][ T5967] and is ignored by this kernel. Remove the mand [ 120.779757][ T5967] option from the mount to silence this warning. [ 120.779757][ T5967] ======================================================= [ 120.802350][ T5967] EXT4-fs (loop1): bad s_min_extra_isize: 65535 [ 122.802780][ T5969] netlink: 72 bytes leftover after parsing attributes in process `syz.0.46'. [ 124.916549][ T5992] jffs2: notice: (5992) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 124.945384][ T5992] overlayfs: upper fs does not support tmpfile. [ 124.947107][ T5992] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 124.947738][ T5992] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 126.428848][ T6020] netlink: 72 bytes leftover after parsing attributes in process `syz.0.61'. [ 126.503597][ T5731] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 126.611335][ T6027] netlink: 380 bytes leftover after parsing attributes in process `syz.4.50'. [ 126.785762][ T5731] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 126.800123][ T5731] usb 4-1: config 1 has an invalid interface number: 82 but max is 0 [ 126.869918][ T5731] usb 4-1: config 1 has no interface number 0 [ 126.876316][ T5731] usb 4-1: config 1 interface 82 has no altsetting 0 [ 126.888465][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.896863][ T5731] usb 4-1: Product: syz [ 126.902384][ T5731] usb 4-1: Manufacturer: syz [ 126.907257][ T5731] usb 4-1: SerialNumber: syz [ 127.089874][ T6034] syz.2.67 uses obsolete (PF_INET,SOCK_PACKET) [ 127.283065][ T5731] hub 4-1:1.82: bad descriptor, ignoring hub [ 127.289749][ T5731] hub 4-1:1.82: probe with driver hub failed with error -5 [ 127.314618][ T5731] sierra 4-1:1.82: Sierra USB modem converter detected [ 127.351466][ T5731] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 127.366818][ T6041] kAFS: bad VL server IP address [ 127.426579][ T5731] usb 4-1: USB disconnect, device number 2 [ 127.495888][ T5731] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 127.512337][ T5731] sierra 4-1:1.82: device disconnected [ 128.188466][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 129.524853][ T6064] netlink: 72 bytes leftover after parsing attributes in process `syz.4.75'. [ 129.540290][ T6068] netlink: 380 bytes leftover after parsing attributes in process `syz.1.78'. [ 130.036220][ T6073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.036755][ T6073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.037277][ T6073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.043964][ T6073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.044567][ T6073] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.071472][ T6079] kAFS: bad VL server IP address [ 130.425267][ T6083] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 132.007078][ T6104] netlink: 'syz.1.88': attribute type 2 has an invalid length. [ 132.007168][ T6104] netlink: 'syz.1.88': attribute type 2 has an invalid length. [ 132.053275][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.053352][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.053420][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.053517][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.053581][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.941224][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.941349][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.042639][ T6118] netlink: 72 bytes leftover after parsing attributes in process `syz.1.92'. [ 133.142381][ T6120] netlink: 380 bytes leftover after parsing attributes in process `syz.1.93'. [ 134.813316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.706629][ T6130] kAFS: bad VL server IP address [ 139.975399][ T6143] netlink: 68 bytes leftover after parsing attributes in process `syz.0.102'. [ 140.167381][ T6150] netlink: 72 bytes leftover after parsing attributes in process `syz.4.103'. [ 140.198412][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 140.207838][ T6151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.104'. [ 140.229570][ T6151] veth1: entered promiscuous mode [ 140.237356][ T6151] veth0: entered promiscuous mode [ 140.244695][ T6151] debugfs: 'hsr1' already exists in 'hsr' [ 140.250595][ T6151] Cannot create hsr debugfs directory [ 141.673529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 142.036264][ T6155] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 143.120795][ T6185] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 143.121025][ T6185] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 143.121219][ T6185] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 143.121381][ T6185] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 143.121544][ T6185] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 143.902652][ T6199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.112'. [ 145.125023][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 145.173637][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 145.175779][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.175873][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 145.175945][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.445962][ T6207] syzkaller0: entered promiscuous mode [ 145.451672][ T6207] syzkaller0: entered allmulticast mode [ 145.684497][ T6217] jffs2: notice: (6217) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 147.944777][ T6226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.118'. [ 149.977011][ T6262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.120'. [ 152.550418][ T6270] Zero length message leads to an empty skb [ 155.434553][ T6284] netlink: 72 bytes leftover after parsing attributes in process `syz.1.131'. [ 157.103437][ T6285] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.216553][ T6285] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.216777][ T6285] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.216939][ T6285] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.217054][ T6285] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.099512][ T6323] jffs2: notice: (6323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 158.314140][ T6323] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 158.452136][ T6332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 159.174625][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 159.175458][ T5623] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.368956][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 159.369016][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 159.381248][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 160.261023][ T6337] ip_tables: iptables: counters copy to user failed while replacing table [ 160.359504][ T6337] ip_tables: iptables: counters copy to user failed while replacing table [ 161.085049][ T6351] netlink: 1 bytes leftover after parsing attributes in process `syz.0.141'. [ 161.109118][ T6351] netlink: 1 bytes leftover after parsing attributes in process `syz.0.141'. [ 161.164353][ T6352] syzkaller0: entered promiscuous mode [ 161.171157][ T6352] syzkaller0: entered allmulticast mode [ 161.682917][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 162.489015][ T6363] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 163.238306][ T6376] syzkaller0: entered promiscuous mode [ 163.245956][ T6376] syzkaller0: entered allmulticast mode [ 164.829669][ T6411] netlink: 72 bytes leftover after parsing attributes in process `syz.4.151'. [ 168.029090][ T6439] netlink: 'syz.3.155': attribute type 2 has an invalid length. [ 168.029143][ T6439] netlink: 'syz.3.155': attribute type 2 has an invalid length. [ 168.238631][ T6403] syzkaller0: entered promiscuous mode [ 168.238700][ T6403] syzkaller0: entered allmulticast mode [ 168.679913][ T6446] loop3: detected capacity change from 0 to 512 [ 168.699379][ T6446] EXT4-fs (loop3): bad s_min_extra_isize: 65535 [ 168.753289][ T5805] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 168.910413][ T5805] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 168.914910][ T5805] usb 1-1: config 1 has an invalid interface number: 82 but max is 0 [ 168.914947][ T5805] usb 1-1: config 1 has no interface number 0 [ 168.914982][ T5805] usb 1-1: config 1 interface 82 has no altsetting 0 [ 168.917964][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.917998][ T5805] usb 1-1: Product: syz [ 168.918032][ T5805] usb 1-1: Manufacturer: syz [ 168.918053][ T5805] usb 1-1: SerialNumber: syz [ 169.738246][ T6452] netlink: 4 bytes leftover after parsing attributes in process `syz.3.158'. [ 170.866807][ T5805] hub 1-1:1.82: bad descriptor, ignoring hub [ 170.866866][ T5805] hub 1-1:1.82: probe with driver hub failed with error -5 [ 170.886144][ T5805] sierra 1-1:1.82: Sierra USB modem converter detected [ 170.957160][ T5805] usb 1-1: Sierra USB modem converter now attached to ttyUSB0 [ 171.039545][ T5805] usb 1-1: USB disconnect, device number 2 [ 172.148056][ T5805] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 172.178376][ T5805] sierra 1-1:1.82: device disconnected [ 172.288097][ T6474] netlink: 72 bytes leftover after parsing attributes in process `syz.3.162'. [ 173.193163][ T988] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 173.620498][ T6486] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.632782][ T6486] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.644258][ T6486] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.656803][ T6486] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 173.668532][ T6486] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 173.858842][ T6483] binder: BINDER_SET_CONTEXT_MGR already set [ 173.858865][ T6489] loop2: detected capacity change from 0 to 512 [ 173.858891][ T6483] binder: 6478:6483 ioctl 4018620d 200000004a80 returned -16 [ 173.886511][ T6489] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 173.923549][ T988] usb 5-1: unable to get BOS descriptor or descriptor too short [ 173.933156][ T988] usb 5-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 173.944847][ T988] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 173.944904][ T988] usb 5-1: can't read configurations, error -71 [ 175.573521][ T6501] syzkaller0: entered promiscuous mode [ 175.573563][ T6501] syzkaller0: entered allmulticast mode [ 175.602237][ T6503] jffs2: notice: (6503) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 175.630141][ T6503] overlayfs: upper fs does not support tmpfile. [ 175.630753][ T6503] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 175.631059][ T6503] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 175.653942][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.654046][ T4934] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.654237][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.733850][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 175.733997][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 176.204042][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.174'. [ 176.927258][ T6518] netlink: 72 bytes leftover after parsing attributes in process `syz.4.177'. [ 177.436048][ T6524] syzkaller0: entered promiscuous mode [ 177.441914][ T6524] syzkaller0: entered allmulticast mode [ 180.732912][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 181.161751][ T6550] vivid-000: kernel_thread() failed [ 181.267689][ T6543] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 181.267913][ T6543] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 181.268105][ T6543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 181.268211][ T6543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 181.268323][ T6543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 183.618929][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 183.618990][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 183.619037][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 183.619069][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 183.619193][ T52] Bluetooth: hci0: command 0x0c1a tx timeout [ 184.114860][ T6568] loop0: detected capacity change from 0 to 512 [ 184.146420][ T6568] EXT4-fs (loop0): bad s_min_extra_isize: 65535 [ 185.630657][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'. [ 186.596382][ T6591] Bluetooth: ISO socket layer initialized [ 186.663977][ T6592] netlink: 28 bytes leftover after parsing attributes in process `syz.4.193'. [ 186.664042][ T6592] netlink: 'syz.4.193': attribute type 7 has an invalid length. [ 186.664086][ T6592] netlink: 'syz.4.193': attribute type 8 has an invalid length. [ 186.664101][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.4.193'. [ 186.803244][ T6595] loop2: detected capacity change from 0 to 64 [ 186.979296][ T6597] jffs2: notice: (6597) jffs2_build_xattr_subsystem: complete building xattr subsystem, 8 of xdatum (0 unchecked, 8 orphan) and 8 of xref (2 dead, 6 orphan) found. [ 187.010872][ T6597] overlayfs: upper fs does not support tmpfile. [ 187.012108][ T6597] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 187.012422][ T6597] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 187.047977][ T6594] syzkaller0: entered promiscuous mode [ 187.048028][ T6594] syzkaller0: entered allmulticast mode [ 187.079092][ T6594] tipc: Started in network mode [ 187.079157][ T6594] tipc: Node identity 8aca29b981d7, cluster identity 4711 [ 187.091836][ T6594] tipc: Enabled bearer , priority 0 [ 187.156111][ T6593] tipc: Resetting bearer [ 187.194565][ T6593] tipc: Disabling bearer [ 192.236636][ T6629] ip_tables: iptables: counters copy to user failed while replacing table [ 192.253465][ T6629] ip_tables: iptables: counters copy to user failed while replacing table [ 192.369445][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 192.543198][ T6634] netlink: 'syz.0.204': attribute type 2 has an invalid length. [ 192.544152][ T6634] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 192.544733][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 192.544839][ T6634] netlink: 'syz.0.204': attribute type 2 has an invalid length. [ 192.544950][ T6634] netlink: 'syz.0.204': attribute type 1 has an invalid length. [ 192.545006][ T6634] netlink: 16 bytes leftover after parsing attributes in process `syz.0.204'. [ 192.545060][ T6634] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 192.552309][ T6634] mmap: syz.0.204 (6634) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 194.377275][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.392439][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.757081][ T6654] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 203.917386][ T6680] ip_tables: iptables: counters copy to user failed while replacing table [ 203.956133][ T6680] ip_tables: iptables: counters copy to user failed while replacing table [ 205.333373][ T5738] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 205.494129][ T5738] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 205.506153][ T5738] usb 2-1: config 1 has an invalid interface number: 82 but max is 0 [ 205.516004][ T5738] usb 2-1: config 1 has no interface number 0 [ 205.522579][ T5738] usb 2-1: config 1 interface 82 has no altsetting 0 [ 205.533168][ T5738] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.541670][ T5738] usb 2-1: Product: syz [ 205.548001][ T5738] usb 2-1: Manufacturer: syz [ 205.548047][ T5738] usb 2-1: SerialNumber: syz [ 206.323120][ T6694] loop4: detected capacity change from 0 to 131072 [ 206.360551][ T6694] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(3584) blocks(12321792) [ 206.360842][ T6694] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 206.397271][ T5738] hub 2-1:1.82: bad descriptor, ignoring hub [ 206.404030][ T5738] hub 2-1:1.82: probe with driver hub failed with error -5 [ 206.405241][ T5738] sierra 2-1:1.82: Sierra USB modem converter detected [ 206.429521][ T5738] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 206.455282][ T5738] usb 2-1: USB disconnect, device number 2 [ 206.465959][ T5738] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 206.475374][ T5738] sierra 2-1:1.82: device disconnected [ 206.517730][ T6694] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 206.539808][ T6694] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 206.540314][ T6694] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.653009][ T6701] loop2: detected capacity change from 0 to 512 [ 206.685605][ T6701] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 206.718281][ T6694] F2FS-fs (loop4): access invalid blkaddr:0 [ 206.718614][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.4.216 Not tainted syzkaller #0 PREEMPT(full) [ 206.718688][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.718740][ T6694] Call Trace: [ 206.718779][ T6694] [ 206.718802][ T6694] dump_stack_lvl+0xe8/0x150 [ 206.718961][ T6694] __f2fs_is_valid_blkaddr+0xe62/0x14f0 [ 206.719078][ T6694] sanity_check_extent_cache+0x1ab/0xa30 [ 206.719173][ T6694] ? f2fs_sanity_check_inline_data+0x70/0x740 [ 206.719250][ T6694] f2fs_iget+0x4211/0x6270 [ 206.719399][ T6694] f2fs_lookup+0x3ff/0xa50 [ 206.719480][ T6694] ? do_raw_spin_lock+0x12b/0x2f0 [ 206.719566][ T6694] ? __pfx_f2fs_lookup+0x10/0x10 [ 206.719651][ T6694] ? do_raw_spin_unlock+0xf5/0x200 [ 206.719745][ T6694] ? _raw_spin_unlock+0x28/0x50 [ 206.719810][ T6694] ? d_alloc+0x144/0x190 [ 206.719921][ T6694] lookup_one_qstr_excl+0x12d/0x360 [ 206.720042][ T6694] filename_create+0x20e/0x370 [ 206.720121][ T6694] ? __pfx_filename_create+0x10/0x10 [ 206.720210][ T6694] filename_mkdirat+0xd2/0x510 [ 206.720295][ T6694] ? __pfx_filename_mkdirat+0x10/0x10 [ 206.720371][ T6694] ? do_getname+0x151/0x250 [ 206.720442][ T6694] __se_sys_mkdirat+0x35/0x150 [ 206.720515][ T6694] do_syscall_64+0x166/0x520 [ 206.720592][ T6694] ? trace_irq_disable+0x3b/0x140 [ 206.720654][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.720710][ T6694] ? clear_bhb_loop+0x70/0xc0 [ 206.720800][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.720855][ T6694] RIP: 0033:0x7fba7e59cf47 [ 206.720927][ T6694] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.720979][ T6694] RSP: 002b:00007fba7f4d9e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 206.721050][ T6694] RAX: ffffffffffffffda RBX: 00007fba7f4d9ee0 RCX: 00007fba7e59cf47 [ 206.721094][ T6694] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 206.721163][ T6694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.721196][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 206.721229][ T6694] R13: 00007fba7f4d9ea0 R14: 0000000000000000 R15: 0000000000000000 [ 206.721339][ T6694] [ 206.724837][ T6694] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 206.836806][ T6694] F2FS-fs (loop4): access invalid blkaddr:0 [ 206.836836][ T6694] CPU: 0 UID: 0 PID: 6694 Comm: syz.4.216 Not tainted syzkaller #0 PREEMPT(full) [ 206.836908][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 206.836955][ T6694] Call Trace: [ 206.836984][ T6694] [ 206.837001][ T6694] dump_stack_lvl+0xe8/0x150 [ 206.837115][ T6694] __f2fs_is_valid_blkaddr+0xe62/0x14f0 [ 206.837224][ T6694] sanity_check_extent_cache+0x1ab/0xa30 [ 206.837320][ T6694] ? f2fs_sanity_check_inline_data+0x70/0x740 [ 206.837395][ T6694] f2fs_iget+0x4211/0x6270 [ 206.837572][ T6694] f2fs_lookup+0x3ff/0xa50 [ 206.837647][ T6694] ? do_raw_spin_lock+0x12b/0x2f0 [ 206.837732][ T6694] ? __pfx_f2fs_lookup+0x10/0x10 [ 206.837833][ T6694] ? do_raw_spin_unlock+0xf5/0x200 [ 206.837920][ T6694] ? _raw_spin_unlock+0x28/0x50 [ 206.837997][ T6694] ? d_alloc+0x144/0x190 [ 206.838100][ T6694] lookup_one_qstr_excl+0x12d/0x360 [ 206.838207][ T6694] filename_create+0x20e/0x370 [ 206.838284][ T6694] ? __pfx_filename_create+0x10/0x10 [ 206.838385][ T6694] filename_mkdirat+0xd2/0x510 [ 206.838487][ T6694] ? __pfx_filename_mkdirat+0x10/0x10 [ 206.838569][ T6694] ? do_getname+0x151/0x250 [ 206.838646][ T6694] __se_sys_mkdirat+0x35/0x150 [ 206.838719][ T6694] do_syscall_64+0x166/0x520 [ 206.838802][ T6694] ? trace_irq_disable+0x3b/0x140 [ 206.838858][ T6694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.838921][ T6694] ? clear_bhb_loop+0x70/0xc0 [ 206.839005][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.839062][ T6694] RIP: 0033:0x7fba7e59cf47 [ 206.839123][ T6694] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.839168][ T6694] RSP: 002b:00007fba7f4d9e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 206.839231][ T6694] RAX: ffffffffffffffda RBX: 00007fba7f4d9ee0 RCX: 00007fba7e59cf47 [ 206.839281][ T6694] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 206.839316][ T6694] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 206.839356][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 206.839389][ T6694] R13: 00007fba7f4d9ea0 R14: 0000000000000000 R15: 0000000000000000 [ 206.839485][ T6694] [ 206.839624][ T6694] F2FS-fs (loop4): sanity_check_extent_cache: inode (ino=4) extent info [0, 0, 5178624] is incorrect, run fsck to fix [ 207.273770][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.221'. [ 209.914923][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.222'. [ 210.201746][ T6719] vivid-000: kernel_thread() failed [ 210.650165][ T6729] netlink: 32 bytes leftover after parsing attributes in process `syz.2.229'. [ 210.840275][ T6730] loop3: detected capacity change from 0 to 4096 [ 211.051107][ T6730] Quota error (device loop3): v2_read_file_info: Can't read info structure [ 211.051235][ T6730] EXT4-fs warning (device loop3): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 211.051919][ T6730] EXT4-fs (loop3): mount failed [ 211.204476][ T6727] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 211.460676][ T6731] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 213.771050][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 214.222261][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.0.233'. [ 216.166174][ T6761] loop0: detected capacity change from 0 to 512 [ 216.203492][ T6761] EXT4-fs (loop0): bad s_min_extra_isize: 65535 [ 216.386534][ T5738] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 216.870833][ T5738] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 216.873835][ T5738] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 216.873868][ T5738] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 216.923268][ T5738] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.923318][ T5738] usb 4-1: Product: syz [ 216.923351][ T5738] usb 4-1: Manufacturer: syz [ 216.923370][ T5738] usb 4-1: SerialNumber: syz [ 217.160319][ T5738] usb 4-1: config 0 descriptor?? [ 217.276964][ T5738] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 218.898383][ T5738] gspca_sunplus: reg_r err -71 [ 218.905344][ T5738] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 218.953377][ T5738] usb 4-1: USB disconnect, device number 3 [ 220.349745][ T6781] netlink: 28 bytes leftover after parsing attributes in process `syz.3.241'. [ 222.472245][ T6791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 226.779375][ T6808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.249'. [ 226.796015][ T6808] netlink: 'syz.3.249': attribute type 7 has an invalid length. [ 226.804188][ T6808] netlink: 'syz.3.249': attribute type 8 has an invalid length. [ 226.811971][ T6808] netlink: 4 bytes leftover after parsing attributes in process `syz.3.249'. [ 228.142511][ T6816] loop1: detected capacity change from 0 to 4096 [ 228.162971][ T6816] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 228.172437][ T6816] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 228.190585][ T6816] EXT4-fs (loop1): mount failed [ 228.262457][ T6821] syzkaller0: entered promiscuous mode [ 228.268304][ T6821] syzkaller0: entered allmulticast mode [ 228.343973][ T6823] netlink: 28 bytes leftover after parsing attributes in process `syz.4.254'. [ 228.421799][ T6816] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 228.944288][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 231.741266][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 231.787618][ T6861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'. [ 231.787672][ T6861] netlink: 'syz.4.263': attribute type 7 has an invalid length. [ 231.788967][ T6861] netlink: 'syz.4.263': attribute type 8 has an invalid length. [ 231.789003][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.4.263'. [ 231.805257][ T6861] veth0: entered promiscuous mode [ 231.877781][ T6861] veth0: left promiscuous mode [ 232.229600][ T6869] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 232.456636][ T988] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 232.606782][ T988] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 232.621524][ T988] usb 5-1: config 1 has an invalid interface number: 82 but max is 0 [ 232.621588][ T988] usb 5-1: config 1 has no interface number 0 [ 232.621678][ T988] usb 5-1: config 1 interface 82 has no altsetting 0 [ 232.644391][ T988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.644441][ T988] usb 5-1: Product: syz [ 232.644458][ T988] usb 5-1: Manufacturer: syz [ 232.644509][ T988] usb 5-1: SerialNumber: syz [ 232.937421][ T988] hub 5-1:1.82: bad descriptor, ignoring hub [ 232.937477][ T988] hub 5-1:1.82: probe with driver hub failed with error -5 [ 232.967850][ T988] sierra 5-1:1.82: Sierra USB modem converter detected [ 233.009021][ T988] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 233.064379][ T988] usb 5-1: USB disconnect, device number 4 [ 233.100486][ T988] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 233.101075][ T988] sierra 5-1:1.82: device disconnected [ 233.925096][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 238.165719][ T6904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.279'. [ 238.165782][ T6904] netlink: 'syz.0.279': attribute type 7 has an invalid length. [ 238.165798][ T6904] netlink: 'syz.0.279': attribute type 8 has an invalid length. [ 238.165849][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.279'. [ 238.224782][ T6904] veth0: entered promiscuous mode [ 238.239964][ T6904] veth0: left promiscuous mode [ 238.412907][ T6907] ip_tables: iptables: counters copy to user failed while replacing table [ 238.438895][ T6907] ip_tables: iptables: counters copy to user failed while replacing table [ 241.912173][ T6934] jffs2: notice: (6934) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 243.586107][ T6946] netlink: 68 bytes leftover after parsing attributes in process `syz.3.291'. [ 243.714401][ T6929] loop1: detected capacity change from 0 to 32768 [ 243.905616][ T6956] ip_tables: iptables: counters copy to user failed while replacing table [ 243.917592][ T6956] ip_tables: iptables: counters copy to user failed while replacing table [ 244.188769][ T6929] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 247.146729][ T6993] netlink: 'syz.2.296': attribute type 1 has an invalid length. [ 247.197927][ T5636] ocfs2: Unmounting device (7,1) on (node local) [ 248.111038][ T6993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 251.988713][ T7043] jffs2: notice: (7043) jffs2_build_xattr_subsystem: complete building xattr subsystem, 12 of xdatum (0 unchecked, 12 orphan) and 12 of xref (3 dead, 9 orphan) found. [ 252.168075][ T7043] overlayfs: upper fs does not support tmpfile. [ 252.175098][ T7043] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 252.177480][ T7043] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 252.516256][ T7044] ip_tables: iptables: counters copy to user failed while replacing table [ 252.548975][ T7044] ip_tables: iptables: counters copy to user failed while replacing table [ 253.312837][ T7056] syzkaller0: entered promiscuous mode [ 253.312879][ T7056] syzkaller0: entered allmulticast mode [ 255.705293][ T7072] netlink: 1 bytes leftover after parsing attributes in process `syz.0.314'. [ 255.705339][ T7072] netlink: 1 bytes leftover after parsing attributes in process `syz.0.314'. [ 255.708085][ T7072] syzkaller0: entered promiscuous mode [ 255.710093][ T7072] syzkaller0: entered allmulticast mode [ 255.816034][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.499273][ T7081] netlink: 32 bytes leftover after parsing attributes in process `syz.3.303'. [ 257.476745][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 257.761347][ T7092] netlink: 68 bytes leftover after parsing attributes in process `syz.4.318'. [ 258.031735][ T7099] jffs2: notice: (7099) jffs2_build_xattr_subsystem: complete building xattr subsystem, 16 of xdatum (0 unchecked, 16 orphan) and 16 of xref (4 dead, 12 orphan) found. [ 258.385303][ T7076] syzkaller0: entered promiscuous mode [ 258.395302][ T7076] syzkaller0: entered allmulticast mode [ 260.462215][ T7145] overlayfs: upper fs does not support tmpfile. [ 260.465202][ T7145] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 260.466002][ T7145] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 261.412879][ T7158] netlink: 32 bytes leftover after parsing attributes in process `syz.4.327'. [ 264.060176][ T7108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.060313][ T7108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.060481][ T7108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.060587][ T7108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.285149][ T7183] netlink: 68 bytes leftover after parsing attributes in process `syz.1.331'. [ 264.674925][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.333'. [ 265.191112][ T7194] vivid-000: kernel_thread() failed [ 265.580179][ T7197] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.580456][ T7197] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.580882][ T7197] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 265.581389][ T7197] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 266.124726][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 266.125546][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 266.126443][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 266.126550][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 266.127074][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 266.127165][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 266.127546][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 266.127624][ T7190] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 266.127643][ T7190] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 267.052822][ T7228] netlink: 32 bytes leftover after parsing attributes in process `syz.4.338'. [ 268.015398][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 268.015516][ T5623] Bluetooth: hci3: command 0x0c1a tx timeout [ 268.015550][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.015624][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 268.112984][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.336'. [ 269.477108][ T7236] syzkaller0: entered promiscuous mode [ 269.483138][ T7236] syzkaller0: entered allmulticast mode [ 270.266921][ T7250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 270.772759][ T7249] vivid-000: kernel_thread() failed [ 270.825435][ T7239] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 270.825679][ T7239] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 270.825888][ T7239] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 270.826061][ T7239] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.604501][ T5731] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 271.832504][ T5731] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.834449][ T5731] usb 4-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 271.836456][ T5731] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 271.836567][ T5731] usb 4-1: can't read configurations, error -71 [ 272.244983][ T7267] jffs2: notice: (7267) jffs2_build_xattr_subsystem: complete building xattr subsystem, 20 of xdatum (0 unchecked, 20 orphan) and 20 of xref (5 dead, 15 orphan) found. [ 272.525083][ T7271] netlink: 28 bytes leftover after parsing attributes in process `syz.1.351'. [ 272.824768][ T7261] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 272.824992][ T7261] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 272.825172][ T7261] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 272.825284][ T7261] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 274.363419][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 274.501931][ T7279] syzkaller0: entered promiscuous mode [ 274.507932][ T7279] syzkaller0: entered allmulticast mode [ 274.831986][ T7286] netlink: 68 bytes leftover after parsing attributes in process `syz.2.346'. [ 274.853583][ T5623] Bluetooth: hci4: command 0x0c1a tx timeout [ 274.853654][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.853694][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.524427][ T7297] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.524649][ T7297] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 276.524833][ T7297] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.524980][ T7297] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 276.827405][ T7320] syzkaller0: entered promiscuous mode [ 276.827446][ T7320] syzkaller0: entered allmulticast mode [ 276.948980][ T7324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.362'. [ 276.980807][ T7321] loop2: detected capacity change from 0 to 4096 [ 277.085268][ T7321] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 277.085504][ T7321] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 277.086402][ T7321] EXT4-fs (loop2): mount failed [ 277.670275][ T7334] netlink: 32 bytes leftover after parsing attributes in process `syz.4.364'. [ 278.248311][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 278.744251][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 278.750841][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.750909][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 278.993671][ T7318] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 279.081676][ T7343] loop1: detected capacity change from 0 to 64 [ 279.150079][ T7348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 279.159688][ T7348] netlink: 16 bytes leftover after parsing attributes in process `syz.0.368'. [ 279.170557][ T7348] netlink: 36 bytes leftover after parsing attributes in process `syz.0.368'. [ 280.303716][ T7356] netlink: 60 bytes leftover after parsing attributes in process `syz.2.370'. [ 280.686156][ T7365] jffs2: notice: (7365) jffs2_build_xattr_subsystem: complete building xattr subsystem, 20 of xdatum (0 unchecked, 20 orphan) and 20 of xref (5 dead, 15 orphan) found. [ 280.717875][ T7365] overlayfs: upper fs does not support tmpfile. [ 280.719457][ T7365] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 280.719691][ T7365] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 281.426627][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 282.470738][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.1.375'. [ 284.077270][ T7411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.366'. [ 286.271480][ T7416] loop1: detected capacity change from 0 to 512 [ 286.415443][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.445260][ T7416] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.953092][ T5731] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 287.424637][ T5731] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=fa.2a [ 287.427135][ T5731] usb 4-1: config 1 has an invalid interface number: 82 but max is 0 [ 287.427209][ T5731] usb 4-1: config 1 has no interface number 0 [ 287.427292][ T5731] usb 4-1: config 1 interface 82 has no altsetting 0 [ 287.451153][ T5731] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.451229][ T5731] usb 4-1: Product: syz [ 287.451271][ T5731] usb 4-1: Manufacturer: syz [ 287.451312][ T5731] usb 4-1: SerialNumber: syz [ 287.725887][ T5731] hub 4-1:1.82: bad descriptor, ignoring hub [ 287.725945][ T5731] hub 4-1:1.82: probe with driver hub failed with error -5 [ 287.754097][ T5731] sierra 4-1:1.82: Sierra USB modem converter detected [ 287.777184][ T7434] jffs2: notice: (7434) jffs2_build_xattr_subsystem: complete building xattr subsystem, 24 of xdatum (0 unchecked, 24 orphan) and 24 of xref (6 dead, 18 orphan) found. [ 287.805795][ T7434] overlayfs: upper fs does not support tmpfile. [ 287.807289][ T7434] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 287.808129][ T7434] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 287.892717][ T5731] usb 4-1: Sierra USB modem converter now attached to ttyUSB0 [ 287.945398][ T5731] usb 4-1: USB disconnect, device number 6 [ 288.050305][ T5731] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 288.062688][ T5731] sierra 4-1:1.82: device disconnected [ 288.267635][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.279513][ T7444] netlink: 60 bytes leftover after parsing attributes in process `syz.2.387'. [ 288.563556][ T7440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.563727][ T7440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.563887][ T7440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.563992][ T7440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 290.055904][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 290.674450][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 290.705429][ T7179] Bluetooth: hci3: command 0x0c1a tx timeout [ 290.707183][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 291.195638][ T7496] jffs2: notice: (7496) jffs2_build_xattr_subsystem: complete building xattr subsystem, 28 of xdatum (0 unchecked, 28 orphan) and 28 of xref (7 dead, 21 orphan) found. [ 291.221608][ T7496] overlayfs: upper fs does not support tmpfile. [ 291.223225][ T7496] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 291.224092][ T7496] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 292.256092][ T7513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.403'. [ 292.967507][ T7514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 292.967745][ T7514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 292.979775][ T7514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.980194][ T7514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 293.015548][ T7522] netlink: 60 bytes leftover after parsing attributes in process `syz.4.405'. [ 294.775655][ T7179] Bluetooth: hci1: command 0x0c1a tx timeout [ 295.014542][ T7179] Bluetooth: hci4: command 0x0c1a tx timeout [ 295.014596][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 295.014651][ T4934] Bluetooth: hci3: command 0x0c1a tx timeout [ 295.605271][ T7560] jffs2: notice: (7560) jffs2_build_xattr_subsystem: complete building xattr subsystem, 32 of xdatum (0 unchecked, 32 orphan) and 32 of xref (8 dead, 24 orphan) found. [ 296.291488][ T7563] ip_tables: iptables: counters copy to user failed while replacing table [ 296.326575][ T7563] ip_tables: iptables: counters copy to user failed while replacing table [ 296.703600][ T7569] jffs2: notice: (7569) jffs2_build_xattr_subsystem: complete building xattr subsystem, 32 of xdatum (0 unchecked, 32 orphan) and 32 of xref (8 dead, 24 orphan) found. [ 296.736533][ T7569] overlayfs: upper fs does not support tmpfile. [ 296.738456][ T7569] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 296.739278][ T7569] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 296.898102][ T7574] netlink: 28 bytes leftover after parsing attributes in process `syz.0.416'. [ 297.280728][ T7586] netlink: 68 bytes leftover after parsing attributes in process `syz.4.420'. [ 300.518600][ T7620] jffs2: notice: (7620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 36 of xdatum (0 unchecked, 36 orphan) and 36 of xref (9 dead, 27 orphan) found. [ 301.295580][ T7630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 301.295640][ T7630] netlink: 'syz.1.427': attribute type 7 has an invalid length. [ 301.296277][ T7630] netlink: 'syz.1.427': attribute type 8 has an invalid length. [ 301.296331][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 301.335634][ T7629] ip_tables: iptables: counters copy to user failed while replacing table [ 301.349272][ T7630] veth0: entered promiscuous mode [ 301.362276][ T7629] ip_tables: iptables: counters copy to user failed while replacing table [ 301.397864][ T7630] veth0: left promiscuous mode [ 301.539650][ T7632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.429'. [ 301.851922][ T7637] jffs2: notice: (7637) jffs2_build_xattr_subsystem: complete building xattr subsystem, 36 of xdatum (0 unchecked, 36 orphan) and 36 of xref (9 dead, 27 orphan) found. [ 301.883901][ T7637] overlayfs: upper fs does not support tmpfile. [ 301.887346][ T7637] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 301.888225][ T7637] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 302.342029][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.2.432'. [ 303.450933][ T7659] netlink: 68 bytes leftover after parsing attributes in process `syz.2.434'. [ 305.335599][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.437'. [ 305.568092][ T7688] jffs2: notice: (7688) jffs2_build_xattr_subsystem: complete building xattr subsystem, 40 of xdatum (0 unchecked, 40 orphan) and 40 of xref (10 dead, 30 orphan) found. [ 307.065287][ T7709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.443'. [ 307.065346][ T7709] netlink: 'syz.4.443': attribute type 7 has an invalid length. [ 307.065379][ T7709] netlink: 'syz.4.443': attribute type 8 has an invalid length. [ 307.065396][ T7709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.443'. [ 307.128962][ T7709] veth0: entered promiscuous mode [ 307.142760][ T7709] veth0: left promiscuous mode [ 307.215505][ T7711] ip_tables: iptables: counters copy to user failed while replacing table [ 307.240275][ T7711] ip_tables: iptables: counters copy to user failed while replacing table [ 307.741118][ T7723] netlink: 68 bytes leftover after parsing attributes in process `syz.0.449'. [ 309.797392][ T7762] netlink: 32 bytes leftover after parsing attributes in process `syz.2.455'. [ 310.569774][ T7772] netlink: 28 bytes leftover after parsing attributes in process `syz.2.459'. [ 310.569834][ T7772] netlink: 'syz.2.459': attribute type 7 has an invalid length. [ 310.569870][ T7772] netlink: 'syz.2.459': attribute type 8 has an invalid length. [ 310.569888][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 310.825958][ T7775] ip_tables: iptables: counters copy to user failed while replacing table [ 310.881880][ T7775] ip_tables: iptables: counters copy to user failed while replacing table [ 314.402143][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.468'. [ 314.402187][ T7801] netlink: 16 bytes leftover after parsing attributes in process `syz.2.468'. [ 314.402232][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.2.468'. [ 315.413372][ T7818] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.421405][ T7818] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.421715][ T7818] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.448398][ T7818] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 316.011677][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.474'. [ 316.022964][ T7825] netlink: 'syz.1.474': attribute type 7 has an invalid length. [ 316.032028][ T7825] netlink: 'syz.1.474': attribute type 8 has an invalid length. [ 316.039961][ T7825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 316.085476][ T7825] veth0: entered promiscuous mode [ 316.101153][ T7825] veth0: left promiscuous mode [ 316.182467][ T7830] netlink: 32 bytes leftover after parsing attributes in process `syz.0.467'. [ 316.318278][ T7834] ip_tables: iptables: counters copy to user failed while replacing table [ 316.328985][ T7834] ip_tables: iptables: counters copy to user failed while replacing table [ 317.255983][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.334508][ T7179] Bluetooth: hci1: command 0x0c1a tx timeout [ 317.494108][ T7179] Bluetooth: hci4: command 0x0c1a tx timeout [ 317.494741][ T7179] Bluetooth: hci3: command 0x0c1a tx timeout [ 317.494792][ T7179] Bluetooth: hci2: command 0x0c1a tx timeout [ 318.020873][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 318.458727][ T7846] vivid-000: kernel_thread() failed [ 319.709535][ T7861] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 321.294931][ T7873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.486'. [ 322.396389][ T7886] loop1: detected capacity change from 0 to 256 [ 324.816154][ T7890] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 324.816217][ T7890] netlink: 'syz.2.489': attribute type 7 has an invalid length. [ 324.816232][ T7890] netlink: 'syz.2.489': attribute type 8 has an invalid length. [ 324.816246][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.489'. [ 324.939628][ T7887] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 324.946848][ T7887] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 324.956655][ T7887] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 324.958789][ T7887] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 325.065359][ T7895] netlink: 'syz.1.491': attribute type 2 has an invalid length. [ 325.065492][ T7895] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 325.065609][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 325.065719][ T7895] netlink: 'syz.1.491': attribute type 2 has an invalid length. [ 325.065783][ T7895] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 325.065846][ T7895] netlink: 16 bytes leftover after parsing attributes in process `syz.1.491'. [ 325.065865][ T7895] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 326.744172][ T7902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'. [ 326.744216][ T7902] netlink: 16 bytes leftover after parsing attributes in process `syz.0.483'. [ 326.744251][ T7902] netlink: 36 bytes leftover after parsing attributes in process `syz.0.483'. [ 326.933359][ T4934] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.021463][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 327.029352][ T7179] Bluetooth: hci3: command 0x0c1a tx timeout [ 327.029392][ T5623] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.491449][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz.0.499'. [ 327.576507][ T7926] No source specified [ 327.786987][ T7918] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.787217][ T7918] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.787384][ T7918] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 327.787503][ T7918] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 330.321147][ T4934] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.321208][ T4934] Bluetooth: hci2: command 0x0c1a tx timeout [ 330.322880][ T5623] Bluetooth: hci1: command 0x0c1a tx timeout [ 330.435119][ T7179] Bluetooth: hci3: command 0x0c1a tx timeout [ 330.506197][ T7944] ip_tables: iptables: counters copy to user failed while replacing table [ 330.522611][ T7944] ip_tables: iptables: counters copy to user failed while replacing table [ 333.171798][ T7967] netlink: 36 bytes leftover after parsing attributes in process `syz.0.509'. [ 333.171853][ T7967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.509'. [ 333.171894][ T7967] netlink: 36 bytes leftover after parsing attributes in process `syz.0.509'. [ 333.316909][ T7971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.511'. [ 334.988392][ T7979] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 334.988756][ T7979] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 334.988907][ T7979] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.989014][ T7979] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 335.741858][ T7992] netlink: 32 bytes leftover after parsing attributes in process `syz.3.516'. [ 336.654807][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 337.014654][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 337.014683][ T7949] Bluetooth: hci3: command 0x0c1a tx timeout [ 337.014871][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 337.540551][ T8004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 337.552851][ T8004] netlink: 'syz.1.505': attribute type 7 has an invalid length. [ 337.562926][ T8004] netlink: 'syz.1.505': attribute type 8 has an invalid length. [ 337.563084][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.1.505'. [ 337.627216][ T8004] veth0: entered promiscuous mode [ 337.647301][ T8004] veth0: left promiscuous mode [ 339.262915][ T8016] netlink: 'syz.1.523': attribute type 1 has an invalid length. [ 340.011718][ T8016] 8021q: adding VLAN 0 to HW filter on device bond1 [ 340.206221][ T8021] netlink: 32 bytes leftover after parsing attributes in process `syz.2.525'. [ 341.180961][ T8037] jffs2: notice: (8037) jffs2_build_xattr_subsystem: complete building xattr subsystem, 40 of xdatum (0 unchecked, 40 orphan) and 40 of xref (10 dead, 30 orphan) found. [ 341.207109][ T8037] overlayfs: upper fs does not support tmpfile. [ 341.207697][ T8037] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 341.208010][ T8037] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 342.608135][ T8045] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.608383][ T8045] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.608585][ T8045] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.608726][ T8045] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 342.894210][ T8056] netlink: 28 bytes leftover after parsing attributes in process `syz.4.534'. [ 342.894268][ T8056] netlink: 'syz.4.534': attribute type 7 has an invalid length. [ 342.894284][ T8056] netlink: 'syz.4.534': attribute type 8 has an invalid length. [ 342.894324][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.4.534'. [ 342.971867][ T8056] veth0: entered promiscuous mode [ 343.974514][ T8066] netlink: 32 bytes leftover after parsing attributes in process `syz.0.537'. [ 343.999744][ T8056] veth0: left promiscuous mode [ 344.165841][ T8068] ip_tables: iptables: counters copy to user failed while replacing table [ 344.176060][ T8068] ip_tables: iptables: counters copy to user failed while replacing table [ 344.293079][ T7949] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.613179][ T7179] Bluetooth: hci3: command 0x0c1a tx timeout [ 344.613239][ T7179] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.619544][ T7949] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.076575][ T8092] netlink: 32 bytes leftover after parsing attributes in process `syz.0.538'. [ 347.512419][ T8102] netlink: 'syz.2.548': attribute type 2 has an invalid length. [ 347.513868][ T8102] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 347.513990][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'. [ 347.514238][ T8102] netlink: 'syz.2.548': attribute type 2 has an invalid length. [ 347.514302][ T8102] netlink: 'syz.2.548': attribute type 1 has an invalid length. [ 347.514360][ T8102] netlink: 16 bytes leftover after parsing attributes in process `syz.2.548'. [ 347.514418][ T8102] iwpm_mapping_error_cb: Received msg seq = 0 err code = 5 client = 2 [ 347.894681][ T8095] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 347.894930][ T8095] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 347.895122][ T8095] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.895287][ T8095] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 349.190341][ T8106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.203856][ T8106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.218078][ T8106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 349.227480][ T8106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 349.312402][ T8090] loop3: detected capacity change from 0 to 32768 [ 349.498080][ T8090] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 349.956152][ T5632] ocfs2: Unmounting device (7,3) on (node local) [ 351.253420][ T7949] Bluetooth: hci4: command 0x0c1a tx timeout [ 351.253477][ T7949] Bluetooth: hci3: command 0x0c1a tx timeout [ 351.253528][ T7949] Bluetooth: hci2: command 0x0c1a tx timeout [ 351.253580][ T7949] Bluetooth: hci1: command 0x0c1a tx timeout [ 352.668682][ T8139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.557'. [ 353.919982][ T8147] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.920204][ T8147] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 353.920389][ T8147] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 353.920510][ T8147] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 355.637498][ T7179] Bluetooth: hci1: command 0x0c1a tx timeout [ 356.048458][ T7179] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.048636][ T7179] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.061834][ T7949] Bluetooth: hci4: command 0x0c1a tx timeout [ 361.529686][ T8187] netlink: 32 bytes leftover after parsing attributes in process `syz.1.573'. [ 362.847298][ T8206] Illegal XDP return value 4294967274 on prog (id 96) dev N/A, expect packet loss! [ 364.688907][ T8200] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 364.689139][ T8200] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.689306][ T8200] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.689459][ T8200] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 364.696158][ T7949] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.814212][ T8205] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 364.830145][ T8210] tipc: Enabling of bearer rejected, failed to enable media [ 366.693481][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 366.693738][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 366.693983][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.888171][ T8247] netlink: 32 bytes leftover after parsing attributes in process `syz.1.587'. [ 368.720162][ T8264] netlink: 'syz.4.589': attribute type 1 has an invalid length. [ 369.460584][ T8264] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.317248][ T8273] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.317492][ T8273] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.317947][ T8273] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 370.318156][ T8273] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 371.849029][ T8283] tipc: Enabling of bearer rejected, failed to enable media [ 372.383897][ T7949] Bluetooth: hci3: command 0x0c1a tx timeout [ 372.384052][ T7949] Bluetooth: hci2: command 0x0c1a tx timeout [ 372.384148][ T7949] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.384341][ T52] Bluetooth: hci4: command 0x0c1a tx timeout [ 373.389789][ T8301] netlink: 32 bytes leftover after parsing attributes in process `syz.2.598'. [ 374.991503][ T8305] netlink: 32 bytes leftover after parsing attributes in process `syz.1.600'. [ 379.429233][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.625584][ T8344] syzkaller0: entered promiscuous mode [ 380.631220][ T8344] syzkaller0: entered allmulticast mode [ 380.649393][ T8344] tipc: Enabling of bearer rejected, failed to enable media [ 380.962488][ T8353] netlink: 32 bytes leftover after parsing attributes in process `syz.2.613'. [ 383.351255][ T8362] loop1: detected capacity change from 0 to 4096 [ 383.458594][ T8362] Quota error (device loop1): v2_read_file_info: Can't read info structure [ 383.458838][ T8362] EXT4-fs warning (device loop1): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 383.459813][ T8362] EXT4-fs (loop1): mount failed [ 385.580591][ T8350] loop0: detected capacity change from 0 to 32768 [ 385.739912][ T8350] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 386.097215][ T5622] ocfs2: Unmounting device (7,0) on (node local) [ 386.744949][ T8397] loop0: detected capacity change from 0 to 512 [ 386.780252][ T8397] EXT4-fs (loop0): bad s_min_extra_isize: 65535 [ 529.983071][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 529.990122][ C1] rcu: 0-...!: (1 GPs behind) idle=aa34/1/0x4000000000000000 softirq=32378/32379 fqs=1 [ 529.999897][ C1] rcu: (detected by 1, t=10502 jiffies, g=37305, q=2774 ncpus=2) [ 530.007799][ C1] Sending NMI from CPU 1 to CPUs 0: [ 530.013131][ C0] NMI backtrace for cpu 0 [ 530.013206][ C0] CPU: 0 UID: 0 PID: 5625 Comm: udevd Tainted: G L syzkaller #0 PREEMPT(full) [ 530.013233][ C0] Tainted: [L]=SOFTLOCKUP [ 530.013240][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.013279][ C0] RIP: 0010:rcu_is_watching+0x3b/0xb0 [ 530.013364][ C0] Code: e8 6a 3b 37 0a 89 c3 83 f8 08 73 66 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 97 74 8e 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 9b 32 8b 00 48 c7 c3 18 9b 95 93 49 03 1e 48 89 [ 530.013380][ C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00000046 [ 530.013397][ C0] RAX: 1ffffffff1ce92fa RBX: 0000000000000000 RCX: 8000000001000001 [ 530.013411][ C0] RDX: 8000000001000001 RSI: ffffffff8c6d8d60 RDI: ffffffff8c6d8d20 [ 530.013425][ C0] RBP: ffff88802bc74300 R08: 0000000001000001 R09: 1ffffffff20f490f [ 530.013439][ C0] R10: dffffc0000000000 R11: fffffbfff20f4910 R12: 0000000000000000 [ 530.013452][ C0] R13: ffffffff89ebfe20 R14: ffffffff8e7497d0 R15: dffffc0000000000 [ 530.013467][ C0] FS: 00007f55ce94c880(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 530.013484][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.013497][ C0] CR2: 00007f55ce948000 CR3: 0000000079f2a000 CR4: 00000000003526f0 [ 530.013514][ C0] Call Trace: [ 530.013545][ C0] [ 530.013556][ C0] __hrtimer_run_queues+0x326/0xa10 [ 530.013597][ C0] hrtimer_interrupt+0x4cd/0xaa0 [ 530.013640][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 530.013666][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 530.013694][ C0] [ 530.013700][ C0] [ 530.013707][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.013728][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x75/0x80 [ 530.013757][ C0] Code: 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 cc cc cc cc cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 530.013772][ C0] RSP: 0018:ffffc90003e07698 EFLAGS: 00000293 [ 530.013788][ C0] RAX: ffffffff821347de RBX: 0000000000000000 RCX: ffff888012683e80 [ 530.013801][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.013813][ C0] RBP: ffffc90003e07a30 R08: ffffea0001037d87 R09: 1ffffd4000206fb0 [ 530.013827][ C0] R10: dffffc0000000000 R11: fffff94000206fb1 R12: dffffc0000000000 [ 530.013841][ C0] R13: ffffea00010f6b40 R14: ffffc90003e07880 R15: 0000000000000000 [ 530.013859][ C0] ? shmem_undo_range+0x3ee/0x15d0 [ 530.013886][ C0] shmem_undo_range+0x3ee/0x15d0 [ 530.013914][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 530.013948][ C0] ? lock_acquire+0x115/0x350 [ 530.013985][ C0] ? __lock_acquire+0x6df/0x2e50 [ 530.014010][ C0] shmem_evict_inode+0x247/0xae0 [ 530.014042][ C0] ? inode_wait_for_writeback+0x16d/0x3b0 [ 530.014063][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 530.014090][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 530.014109][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 530.014140][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 530.014166][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 530.014193][ C0] evict+0x624/0xb50 [ 530.014217][ C0] ? __pfx_evict+0x10/0x10 [ 530.014236][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 530.014263][ C0] ? _raw_spin_unlock+0x28/0x50 [ 530.014284][ C0] ? iput+0xb84/0xf00 [ 530.014351][ C0] dentry_kill+0x1b9/0x880 [ 530.014373][ C0] finish_dput+0x1a/0x260 [ 530.014400][ C0] __fput+0x675/0xa50 [ 530.014428][ C0] task_work_run+0x1d9/0x270 [ 530.014450][ C0] ? __pfx_task_work_run+0x10/0x10 [ 530.014469][ C0] ? fput_close_sync+0x11f/0x240 [ 530.014497][ C0] exit_to_user_mode_loop+0x204/0x770 [ 530.014517][ C0] ? rcu_is_watching+0x16/0xb0 [ 530.014541][ C0] do_syscall_64+0x328/0x520 [ 530.014583][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.014602][ C0] ? clear_bhb_loop+0x70/0xc0 [ 530.014624][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.014643][ C0] RIP: 0033:0x7f55ce2a7407 [ 530.014660][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 530.014675][ C0] RSP: 002b:00007fff7791fd00 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 530.014693][ C0] RAX: 0000000000000000 RBX: 00007f55ce94c880 RCX: 00007f55ce2a7407 [ 530.014706][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 530.014717][ C0] RBP: 00007f55ce94c6e8 R08: 0000000000000000 R09: 0000000000000000 [ 530.014729][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 530.014740][ C0] R13: 0000557cd10c3190 R14: 0000000000000008 R15: 0000557cd10d2f10 [ 530.014764][ C0] [ 530.471936][ C1] rcu: rcu_preempt kthread starved for 10462 jiffies! g37305 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 530.482994][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 530.492987][ C1] rcu: RCU grace-period kthread stack dump: [ 530.498923][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 530.512632][ C1] Call Trace: [ 530.515941][ C1] [ 530.518907][ C1] __schedule+0x1b57/0x5bc0 [ 530.523565][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 530.528736][ C1] ? __pfx___schedule+0x10/0x10 [ 530.533650][ C1] ? lock_acquire+0x115/0x350 [ 530.538374][ C1] ? schedule+0x90/0x2b0 [ 530.542664][ C1] schedule+0x164/0x2b0 [ 530.546858][ C1] schedule_timeout+0x152/0x2c0 [ 530.551741][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 530.557159][ C1] ? __pfx_process_timeout+0x10/0x10 [ 530.562509][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 530.568383][ C1] ? prepare_to_swait_event+0x322/0x350 [ 530.574061][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 530.578964][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 530.584899][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 530.590229][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 530.595490][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 530.600123][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 530.605360][ C1] ? __kthread_parkme+0x71/0x1f0 [ 530.610346][ C1] ? __kthread_parkme+0x199/0x1f0 [ 530.615423][ C1] kthread+0x38b/0x480 [ 530.619543][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 530.624789][ C1] ? __pfx_kthread+0x10/0x10 [ 530.629453][ C1] ret_from_fork+0x514/0xb70 [ 530.634079][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 530.639220][ C1] ? __switch_to+0xc89/0x1420 [ 530.643946][ C1] ? __pfx_kthread+0x10/0x10 [ 530.648665][ C1] ret_from_fork_asm+0x1a/0x30 [ 530.653509][ C1] [ 530.656567][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 530.662921][ C1] CPU: 1 UID: 0 PID: 1158 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 530.673991][ C1] Tainted: [L]=SOFTLOCKUP [ 530.678347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 530.688432][ C1] Workqueue: writeback wb_workfn (flush-8:0) [ 530.694476][ C1] RIP: 0010:smp_call_function_many_cond+0x61e/0x1500 [ 530.701199][ C1] Code: b6 04 04 84 c0 0f 85 d5 03 00 00 44 8b 3b 44 89 fe 83 e6 01 31 ff e8 51 51 0c 00 41 83 e7 01 75 07 e8 46 4c 0c 00 eb 3f f3 90 <48> b8 00 00 00 00 00 fc ff df 41 0f b6 04 04 84 c0 75 0f f7 03 01 [ 530.720841][ C1] RSP: 0018:ffffc900051fe120 EFLAGS: 00000293 [ 530.726953][ C1] RAX: ffffffff81bb734e RBX: ffff8880b8643808 RCX: ffff8880289d5dc0 [ 530.734963][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 530.742968][ C1] RBP: ffffc900051fe270 R08: ffff8880289d735f R09: 1ffff1100513ae6b [ 530.750990][ C1] R10: dffffc0000000000 R11: ffffffff8179db70 R12: 1ffff110170c8701 [ 530.759007][ C1] R13: 0000000000000000 R14: ffff8880b8643800 R15: 0000000000000001 [ 530.767010][ C1] FS: 0000000000000000(0000) GS:ffff888124dda000(0000) knlGS:0000000000000000 [ 530.776027][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 530.782666][ C1] CR2: 00007fff3e6102d8 CR3: 000000005aeca000 CR4: 00000000003526f0 [ 530.790679][ C1] Call Trace: [ 530.793994][ C1] [ 530.796968][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 530.802218][ C1] ? __pfx_should_flush_tlb+0x10/0x10 [ 530.807645][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 530.814036][ C1] ? rcu_is_watching+0x16/0xb0 [ 530.818842][ C1] ? trace_tlb_flush+0x3c/0x160 [ 530.823745][ C1] flush_tlb_mm_range+0x8ff/0x1090 [ 530.828903][ C1] ? check_pte+0x2c1/0x380 [ 530.833378][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 530.839062][ C1] ? lock_acquire+0x115/0x350 [ 530.843784][ C1] ? page_table_check_clear+0x124/0x500 [ 530.849463][ C1] ? page_table_check_clear+0x124/0x500 [ 530.855053][ C1] ? page_table_check_clear+0x49d/0x500 [ 530.860640][ C1] ? page_table_check_clear+0x124/0x500 [ 530.866252][ C1] ptep_clear_flush+0x120/0x170 [ 530.871186][ C1] page_vma_mkclean_one+0x4b9/0x840 [ 530.876483][ C1] ? __pfx_page_vma_mkclean_one+0x10/0x10 [ 530.882266][ C1] ? __lock_acquire+0x6df/0x2e50 [ 530.887262][ C1] ? lock_acquire+0x115/0x350 [ 530.891983][ C1] page_mkclean_one+0x20c/0x2e0 [ 530.896891][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 530.902335][ C1] ? mapping_rmap_tree_iter_first+0x219/0x230 [ 530.908479][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 530.913897][ C1] __rmap_walk_file+0x4cd/0x6a0 [ 530.918822][ C1] folio_mkclean+0x2d5/0x3f0 [ 530.923499][ C1] ? __pfx_folio_mkclean+0x10/0x10 [ 530.928681][ C1] ? __pfx_page_mkclean_one+0x10/0x10 [ 530.934121][ C1] ? __pfx_invalid_mkclean_vma+0x10/0x10 [ 530.939806][ C1] ? folio_mapping+0x16f/0x1f0 [ 530.944612][ C1] folio_clear_dirty_for_io+0x190/0x820 [ 530.950280][ C1] ? filemap_get_folios_tag+0x118/0x720 [ 530.955869][ C1] mpage_submit_folio+0x83/0x2a0 [ 530.960859][ C1] mpage_process_page_bufs+0x6bd/0x8a0 [ 530.966373][ C1] mpage_prepare_extent_to_map+0xf92/0x1890 [ 530.972341][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 530.978146][ C1] ? __pfx_mpage_prepare_extent_to_map+0x10/0x10 [ 530.984557][ C1] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 530.990240][ C1] ? ext4_init_io_end+0x29/0x130 [ 530.995281][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 531.000994][ C1] ? ext4_init_io_end+0x29/0x130 [ 531.006032][ C1] ext4_do_writepages+0xb8a/0x4770 [ 531.011219][ C1] ? kfree+0x1c5/0x650 [ 531.015348][ C1] ? ieee80211_inform_bss+0xbda/0x10d0 [ 531.020890][ C1] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 531.026669][ C1] ? __pfx_ext4_do_writepages+0x10/0x10 [ 531.032276][ C1] ? __lock_acquire+0x6df/0x2e50 [ 531.037264][ C1] ? __lock_acquire+0x6df/0x2e50 [ 531.042334][ C1] ? __lock_acquire+0x6df/0x2e50 [ 531.047354][ C1] ? lock_acquire+0x115/0x350 [ 531.052176][ C1] ext4_writepages+0x241/0x3b0 [ 531.056996][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 531.062345][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 531.067532][ C1] ? __pfx_ext4_writepages+0x10/0x10 [ 531.072864][ C1] do_writepages+0x338/0x560 [ 531.077606][ C1] ? reacquire_held_locks+0x117/0x1a0 [ 531.083026][ C1] ? writeback_sb_inodes+0x450/0x1b00 [ 531.088445][ C1] __writeback_single_inode+0x136/0x1220 [ 531.094156][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 531.099328][ C1] writeback_sb_inodes+0x9de/0x1b00 [ 531.104572][ C1] ? __lock_acquire+0x6df/0x2e50 [ 531.109571][ C1] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 531.115288][ C1] ? __pfx_down_read_trylock+0x10/0x10 [ 531.120807][ C1] __writeback_inodes_wb+0x114/0x240 [ 531.126159][ C1] wb_writeback+0x42f/0xad0 [ 531.130822][ C1] ? queue_io+0x241/0x470 [ 531.135213][ C1] ? __pfx_wb_writeback+0x10/0x10 [ 531.140457][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 531.145556][ C1] wb_workfn+0xc92/0x10f0 [ 531.149947][ C1] ? __pfx_wb_workfn+0x10/0x10 [ 531.154778][ C1] ? lock_acquire+0x115/0x350 [ 531.159615][ C1] ? rcu_is_watching+0x16/0xb0 [ 531.164424][ C1] ? process_scheduled_works+0x97a/0x1630 [ 531.170194][ C1] process_scheduled_works+0xc3d/0x1630 [ 531.175817][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 531.181852][ C1] ? assign_work+0x3cf/0x5d0 [ 531.186490][ C1] worker_thread+0xa47/0xfb0 [ 531.191155][ C1] kthread+0x38b/0x480 [ 531.195269][ C1] ? __pfx_worker_thread+0x10/0x10 [ 531.200423][ C1] ? __pfx_kthread+0x10/0x10 [ 531.205061][ C1] ret_from_fork+0x514/0xb70 [ 531.209705][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 531.215122][ C1] ? __switch_to+0xc89/0x1420 [ 531.219852][ C1] ? __pfx_kthread+0x10/0x10 [ 531.224476][ C1] ret_from_fork_asm+0x1a/0x30 [ 531.229302][ C1]