last executing test programs: 11.073368802s ago: executing program 3: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x83, &(0x7f00000002c0), &(0x7f00000003c0)=""/131, 0xfffffffb, 0x0, 0x37, 0x3b, &(0x7f00000000c0)="a91980a151b68e3efeafe447acd93991c951a5a5cf06615634d933bf41dc769b845560403fbaae51c9af962f463c1cbefd07d47436e7b6", &(0x7f0000000480)="cbf24a9f08e41f3211c87b8cf38d12a402602b070fc547f0969ea7dbfc3e187caca81cdb4a4a34da8e2f4d1cad0bb092ddbc1e337481c01bec7a1b", 0x0, 0x0, 0xfff}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) 9.376664977s ago: executing program 2: chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000001c0)='./cgroup\x00', 0xd0) write$P9_RLINK(r3, &(0x7f0000000080)={0x7, 0x47, 0xd00}, 0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000000)=0x27) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0xb, &(0x7f0000000340)={0x2}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x20, 0xd, 0xa, 0x5, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 8.085543676s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000004c0)=0x0) tgkill(r0, r1, 0x31) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x200, &(0x7f0000000140)=0x0) ftruncate(r2, 0x81fd) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000}]) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)=""/86, 0x56}, {&(0x7f0000000300)=""/190, 0xbe}, {0x0}, {&(0x7f0000000440)=""/96, 0x60}], 0x4, 0x6, 0x93) open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) mount$9p_rdma(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x1000000, &(0x7f0000000a80)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xfffffffffffff359}}, {@rq={'rq', 0x3d, 0xfff}}, {@common=@cache_none}, {@sq={'sq', 0x3d, 0x99e}}, {@sq={'sq', 0x3d, 0x3}}, {@rq={'rq', 0x3d, 0x800}}, {@common=@privport}, {@sq={'sq', 0x3d, 0x7}}, {@sq}, {@rq={'rq', 0x3d, 0x5}}], [{@hash}, {@uid_eq={'uid', 0x3d, 0xee00}}, {@dont_appraise}, {@obj_type={'obj_type', 0x3d, ':'}}, {@uid_lt}, {@context={'context', 0x3d, 'staff_u'}}, {@permit_directio}, {@subj_user={'subj_user', 0x3d, '#'}}]}}) 7.674489351s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 7.512569484s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace$setregs(0xe4bc60f5d515abd2, r0, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0xa76, 0x0, 0x0, 0x0, 0x9d}) socket(0x0, 0x0, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000023007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2e, 0x42, 0x40}, 0x48) 7.178228537s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x27, &(0x7f0000004440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7", @ANYRES32, @ANYBLOB="0000000000000000b70200000000", @ANYRES32, @ANYBLOB="0000c5230000000000b7020000080000008500000086000000956683ab69a3d2ebfb783affb6b6df647eae9237ca422425280a8f67a16ff8d4c2764b5d0021fd9f464528f5cdf3bfdcf2351536663d2f97b096bd795c3ee0bf7ed630f481226d0b32ddf8f14359923f9de0f6fb2a2278a72540f1f3edfdb11c64549e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000100)={{0x14, 0x3ea}, [], {0x14, 0x3fa}}, 0x28}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000040)={0x0, "d2c4924d08b1e00000000000000000f3f70000000400000000fcff00"}) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r3]) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000740)='./file0\x00', 0x8102, &(0x7f0000000080), 0x7, 0x50a, &(0x7f00000001c0)="$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") r4 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f00000043c0)=ANY=[], 0x15) getpeername$qrtr(r5, &(0x7f0000000180), &(0x7f0000004240)=0xc) syz_fuse_handle_req(r4, &(0x7f0000002240)="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", 0x2000, &(0x7f0000007080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.604545489s ago: executing program 0: r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local, 0xffff7ffd}], 0x1c) 6.430901307s ago: executing program 0: chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x16, &(0x7f0000000080), 0x1, 0x5124, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac895ztz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVG7V/eUB6x0/eLuo5v2NjceP9yuX7109mT5pbNgYqUnsFLy8+rC4rnU7PweSfYo2l2nXq3nFM36pyfcv/IiAIAlmWp1FsXH0fwjbtHen9aTdjNpt5N2/ITQ7m4sRzbuqn7z3JDWV2iezSwqjPedZ1LP3/+i3Ur7J+0kaixhnr275pFmot8855L6Ss0TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E7yyNujD1XVT12bPnNuprnzwJaZy/um150OodHZXsvKtdXvH27+9e3WYwd+3PzV8QvPP1bP+8XlaNfO4be48sRkCG90VS7EYS+uDaHVW+g0w5flwludlediAQAAgLvJ/Z3fI0U7i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLyi3Vj8qXUF4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6Pd044bf40T3jUZwtSgqQMAAAB9xP93X/xqIeb17JuDNK8/9ejBc1XjlfJ/c7j8P3ZLXxUAAABwM458sf3hqnop/7eGy//jt3XWAAAAwFK88+HEB1X1Uv6fHS7/r86X+ZUPWaef4l8hHJoMYWJhZS4r/BzaTxcFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/12F7K5/T7oxAAAAAPei8vX88fb42ZML+j1/f9jr/x/438FXq45fyv/7h8v/9e7lwPv/F5Md/Pw/AAAAWIb/2vP/tpfGqTbo/v/3ffTuL1X9S/m/PVz+j8s13S/vRHx/3psMYf3CSn43wW/i4XYlhfmxrkJHK+mxLfbIC/PjXYWOuaTH5skQHlxY2d+4nssK/4+FdtLjytq8cCQpnI6F/HwoCseSwol4pn2+Np9uWvg+FvILLObjFRRriksikh5X+/VYKNywx9ni4AAAAPeUGJ7zLDvW2wxplJ2vDdph9aAdRgbtUB+0w2iyQ7pjv+1htrcQt7fPbFza8/+PDJf/41uxKlv0u/4/xOv/8+caFtf/z8ZCIynMx0IrvWNAKx4jC7sfx2M0WnmPK+uLAgAAANzV4vcC9RWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwD/s3XuMXFd9OPAz+xrvw7ubwE+E/BAsUMe44PXaDg+1qVinqYpCKeuSElWIYmOvw+INNrZTcATIsUEpiqChRII/iuIIIZw/klokCGhAcSNhFDUkKFUjkigRaZ0gotA0gEIhEq5m7z2zd87deaztdbzh85G8c2a+53nn4Tn33jkXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3w/HPvOxv28Vv/d3lz3y+JWTHz646cpnPnnZ+Q+EMDX3eCULVwau/8rkL2679PaDd224+c4Tl7+xLy+Xx8Ng7U9XfufTsdYTK0P4ViWEnjSwdigL9Ob3h2J9rxoK4bwwH6iXmB7ISqQNh+/3h3A4zAfqVX2nP4ShQuCKB++5+3O1xE39IawKIVTTNh6rZm30p4GL+rLAQBrY1ZMFfn0yUw98uysLwGmLb4b6i/7oVGOG0YXLNXn99Z6xjr240uF1x8Ro83w/37TEnSroSx+YOq2nrVQdS6L09jjm3bYM3m2l7Xyjp634RSr/hnJyPlQNXdund2y9ZnZffKQrjI93N6tpiZ7nh5/7xLbFpJfN6zB2YPSMvA4/f/+q27rXvOuHd65d9dSRNx16+nS7+ePCJi2ml1o15K+5ZfM8RpM+T5bB26/0LWnMl64Qwo4P/cG7W8VL8//R1vP/+HKOt10NuWOtLwxnc/P4yFBMPDuczc0BAABg2VgOe013jX/vba3qK83/xzo7/h8P+eeT+Wy0x0KYnEscGgnhgrnHs8CtsbkPjoTw2rnUVGNgUxI4FsIrv/D1PJhVlZRYEUuMJYGfDueBySRwPAamksDXYuDGJPDpGDiaBLbFwLEkcGkMhJn6OOYSfzicj6PjQH8MbMk24tF4FsIvh2NrU40lHq1XBQAAcIbks8PexruFcx1ON0OcXh7tb5chnoHdNEM1qSGdwdanVU1r6GlXQ1chQ6Uw1a9nqI/7QOvhl2qutOtb6TSMSmOGr/zq794TWijN/ydaz/+rC3SkUjr+H8Lmub8xd1cema3Ht0w1ZAAAAABOw+D/PvHVVvHS/H+ys/P/4z6R7kLmcF/cDbFzJISJxkBW7R+XA9lR78E8AAAAAMtB/Xh8/Vj4TH6bnaKdzqfL+acWmT8e+J9cMH/fse9uadXf0vx/qrPz/wcab7NOHI+9+OJICCsKgR/EXtYCc8Zi4Cdvbwzk4z8eN8ANsar8xIR6VTfEEltiYCIJHG5W4kf1Ehc0BvInq974ofo4ZvIShQAAAACcdXF3QDwuH8//f91vN3ysVbnS/H/L4s7/n5sHl07vnx0MYV1PCN3pDwPuG8gWBoyBoUqe+N5AVld3WtV1AyFcUhtYWtUT+fr/Pekagw/2Z1XFwAWvO/LcRbXEV/tDWFcMPPS+W95cS+xLAvXG/7o/hNfURps2/s0VWeO9aeNfWhHCqwuBelUfXBFCrbG+tKp7qvl1DNKq/rkawssKgXpVb6mGsD8AsEzF/0q3Fx/cu//anVtnZ6f3LGEi7sPvDztmZqfHt+2a3V5t0qftSZ8bljG6rjymTq9882i+RNF779g81Em6/jvBiWJb+X780omD+f34Xah3bpwbehvubkyH/IbXl5sIhW9SzYbctcRDHihWMv8kluqP+fvCYFhxzd7pPeMf37pv35712d9Os2/I/sbDTNm2Wp9uq4GF+tbBy6PpalmJU91Wq4uVrNt39e51e/dfu3bm6q1XTV81/ZH1b9kwcfHExom3XryuNqqJ7G+boa5eqOpkqCdv6XBcZ3CoF/YUKjkbnxoSEhLLLbFrcHXL/5NL8//dref/8VMnfvLn6zM0O/4/Gg/zZ4/PH+bfEgOHy8f/G/6XqB//H212NL9+YsBYEjgQAwcc5gcAAOClIU7y49w57pX+2ZpvPtWqXGn+f6Cz3/+fofX/60vXXz7SZJn/NbHERLP1/9Nl/uvr/x9otv5/usx/ff3/wy/C+v/X1APJJvml9f8BAICXgrO3/n/b5f3TCwSUMnS1y5BeIKCUoe0y/p1eIGDR6/8/9p9/89+hhdL8/8bO5v8W7gcAAIBzx6f+4mP/r1W8NP8/3Nn8/+yv/xeanf8/1iww1WxhQOv/AQAAsEw1W/9v9PqBD7QqV5r/H+1s/h9Pu+hqyB1rfWE4W9MupGvaPTtc/8kAAAAALA9dYXy8t8O8DSujbjr1Nh/OlwJtlS564s9OLO78/2Odzf8bfpfx+ftX3da95l0/fOHOtaueOvKmQ0/PH/8HAAAAlk6n+yUAAAAAAAAAAAAAAIAX3xP/cXBjq3jp9/9h89zjzX7/H6/7F39f8PKG3LHW9uv/5feveOft++eWLLxvOITXFwM7D+48L+TX5l9dDNz9/jWvqCUOpiW++/ilT9YSH0gD71h7/vO1xCVJYEtcJPGVaSBeVfH5lUkgLq/472kgbo+jaaAvD3x2ZTaOSrqtfjaUbatKuq0eGQphpBCob6tvDWVtVNIB3pQE6gP8aBqIA/zLPNCV9ur2waxXMTAUi948mPUKAIBzVvwW2Bt2zMxOT8Sv8PH2wp7G26hhybLrytVWOmz+0XxpsvfesXmok3R3+l10/lrjvaFaG8L60tfVYpbK3CjPTC1tNt3Lmwy53WpvXU3KpRa76fqaj6g/G9H4tl2z23vbDnxj+ywbetpmWV+a7BSzdM1t0g5q6aAvHYyow23TQZfj/a4wPt6d5PqjGBwNDdq9Ijr9vX5xnb9mr4Jino+cOPTrVvWV5v+jnc3/q8VxPZ9fDOBAvLLeP4xY5h8AAACW1mc3/ebL8d97rr/3oVZ5S/P/sc7m/3EPVn4oONvbcSxe///QSAhzl9YfzQK3xuY+OBLCa+dSU7FEdkH9y2OJiSxwa9xhsiaW2DLVWNWKGDiaBH46nAeOJYHjMZDvpTgS8l05XxgO4c1zqc2NJXbHEqNJ4N0xMJYExmNgIgmsjIHJJPDMyjwwlQT+LQbCTOO2umNlvq0AAAAWI59n9TbeDek872hPuwyVdhkG2mXoapeh2i5Ds1HE+9+IGXqTk1cqhUy9aa39SS2lDPFi+IvuVylD+FFjzrRgqel4/kH9fINKY4a73tZTDS2U5v8Tnc3/syfzZGPrx+P8f/76f1ngB7F7X4ynjo/FwE/e3hjIdwwcj5PdG+pVTeUl8kn7DbHEZAyMJYHdMTCZBLZszgOHX9EYyGfa9cYP1RufyUsUAgAAAHDWxR0EcTdNnP/fvPczg63Kleb/k53N/2N7g8XGPh1rPbEyhG9V5ntTD6wdygJxP8ZQ/Hn8q4ZCOK+wg6NeYnogK9GXNBy+35/9Qr0vreo7/dmPD+L9Kx685+7P1RI39YewqrD3pd7GY9Wsjf40cFFfFhhIA7t6skDc81MPfLsrC8Bpq+8VjC+o/FSXutGFyzV5/b1UrgmaDq+0D3SBfAv95mqplHa45vtU6xb3tLXcf8sZU3p7HPNuW47vtlHvtuIXqfwbysn5UDV0bZ/esfWa2X3xkeIvWUuW6Hku/kq1k/QZeB0eOPXetldNOzCRfHxMLFxu4ddhJVb3+ftX3da95l0/vHPtqqeOvOnQ0x13o4n4Q+F7PvmvQz8ubN6lVg35a27ZfZ5M+TxZjv8NjHnaQgibn/nSDa3ipfn/VGfz/57kds5v4sbcOxLCGwob9764+f90JPscLASyT8mXlQPZIff/Gm76yQkAAABnWn13R31/wUx+m50Qns6Ty/mnFpk/7q+YXDB/p/0e+Nv3r2oVL83/t7Se/69Iuun4v+P/LBHH/xd0ru+KXpE+cOC0dkWXqmNJOP6/oHP93eb4/4Ic/3f8fyGO/7fh+P+CzvWnrfQtabcvXSGEp/7ke4+0ipfm/7s7m/9b/2/hRfvq6/9tabb+3+5m6/8dsP4fAACwpJosNJfO80qr95UypKv3lTK0XSCw7RKD1v9b9Pp/T1742G/DQvKaSvP/A53N/+PLYbDY+nJZ/29sc5OqboyB3RYGBAAA4FzUbAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL667/vF/treK3/u7yx55/MrJDx/cdOUzn7zs/AdCmJl7vJKFKwPXf2XyF7ddevvBuzbcfOeJy99Yzcv15rf/vyF3rPWF4RAOFx4Ziolnh2t35gNXvPP2/T21xH3DIby+GNh5cOd5tcTXhkNYXQzc/f41r6glDqYlvvv4pU/WEh9IA+9Ye/7ztcQlW7uybqbd/aeVWXcraXc/tzKEkUKg3t0Pr8zaqKRt/Hke6Erb+PpQ1kYMDMWiXx7K2oiB2VhiZkUI63pC6E6rureaVdWdVvUv1ayq7rSqT1VDuCSE0JNW9XhfVlVPOvIH+rKqYuCC1x157qJa4nBfCOuKgYfed8uba4mPJoF643/VF8Jrai+ZtPFv9GaN96aN39QbwqtDCH1piV/1ZCX60hJP9ITwskKg3viHekLYH3hJiB8+DZ9oe/dfu3Pr7Oz0niVM9OVt9YcdM7PT49t2zW6vJn1qplJIn7zu1Mf+6HOf2Fa7fe8dm4c6Sffk5Xrnuryht+HuxnO997FfA8VK5p+PUv0xf18YDCuu2Tu9Z/zjW/ft27M++9tp9g3Z3+48mm2r9S22VXfxzou9rVYXK1m37+rd6/buv3btzNVbr5q+avoj69+yYeLiiY0Tb714XW1UE9nfzocamg71llMa5ZW3ZrenNNQLewo1nY0PgMUl4uY5V/ojIfH7mOhq+HSbONf/0yt90Z/vaG+ozn1Al6YVxSyVuVGeiUFvOsURn8r3lLYjWl+aOJSybGifZWNpMjGfpT/LMve9rjQ5LNbUNbdJ4/2uMD7e3Ww7jDbeLW7en5/G5n0433SdpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//8aXSYE") chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f00000001c0)='./cgroup\x00', 0xd0) write$P9_RLINK(r3, &(0x7f0000000080)={0x7, 0x47, 0xd00}, 0x7) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000000)=0x27) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r6, 0x10e, 0xb, &(0x7f0000000340)={0x2}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000180)={'macvlan1\x00', &(0x7f00000001c0)}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x0) 6.045849343s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10) io_setup(0x9, 0x0) eventfd2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 5.537132353s ago: executing program 1: socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x30, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000006c0)='GPL\x00'}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000001c0)={r2, r0, 0x4, r0}, 0x10) 5.287822143s ago: executing program 1: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_init(0x200, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1}, 0x4) 4.578987015s ago: executing program 3: bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f0000000000)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x5}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x83, &(0x7f00000002c0), &(0x7f00000003c0)=""/131, 0xfffffffb, 0x0, 0x37, 0x3b, &(0x7f00000000c0)="a91980a151b68e3efeafe447acd93991c951a5a5cf06615634d933bf41dc769b845560403fbaae51c9af962f463c1cbefd07d47436e7b6", &(0x7f0000000480)="cbf24a9f08e41f3211c87b8cf38d12a402602b070fc547f0969ea7dbfc3e187caca81cdb4a4a34da8e2f4d1cad0bb092ddbc1e337481c01bec7a1b", 0x0, 0x0, 0xfff}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.stat\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r6, 0x1) 2.806614702s ago: executing program 2: syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x60302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) ftruncate(r0, 0x2007ffd) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}], 0x1, 0x40000022, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x0, 0x0) 2.695703636s ago: executing program 2: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) r0 = syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x8001}}, './file0\x00'}) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000000280)) socket$nl_route(0x10, 0x3, 0x0) getpid() sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(0xffffffffffffffff) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCADDDLCI(r5, 0x8980, &(0x7f0000000040)={'pim6reg\x00', 0x2ad7}) write$FUSE_DIRENTPLUS(r4, 0x0, 0xb0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000300)=ANY=[@ANYRESOCT], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}]}}) 2.628491563s ago: executing program 4: socket(0x10, 0x2, 0xffffffff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049dc) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0'}, 0xb) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 2.422312216s ago: executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x0, 0x1}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) read$nci(r1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x5327) sendfile(r6, r7, 0x0, 0x80001d00c0d1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000200016801c00018018000c801400020000000000040000000000000000000000140014"], 0x54}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4082, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@access_client}, {@cache_loose}, {@fscache}, {@version_9p2000}, {@mmap}, {@fscache}, {@cache_none}, {@version_L}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\xe0\xb2n\x7f\xa5\x910\xf7\xe4\xda\x06`\x94\x17\xec\xb3i\xee\x9b\xa1\x0f\x05% ,\xa1\xd0\xf6O\x93W\v\xfeI\xa6\xafX\xa4\xb5\xb5xwCl\xb2e\xc7\x8d\x7f\xdf\x18\xef\b\xeeX\xc2\xa1\xc7\x04Y6\'\xfd\xa4\xb5\xd8\x04#_\fv\xb5\x19\xf9\x17\x8c,\xfb\xb3]\x8a>\xc3U\x98n\x85#lU,#\x95\x0e\xc1\xca\xb5\r\xb5\xc3\xeb\xba\xba\xdca\xff\xb55\x96#\xeew/\x93Uf\xfdcx\f\xf0\x9bI\xa9\n\xbf\xa6\'\xfe\xf8\x95\xdb\xa5\xe8\xeeX\xc87\x80\x04r\x83\xe2&\xaf0\xb3%\x91\xa1@\xf7\xa7T\x118\xf6\xca$\xcc\x8c\xf8\x9c9?BM\xbf\xa1g\xc1\xc5zf\x0f\xe2\a\xed\xfbR\xc43\xa6\xc2\xacW\xb3$6\xcf\x04*\xf4\xee0\x04\x89\vP\xc5j\xdb+\xe1\a\xa0\xbcr\xd9\xd0\xf2@\xb5\xd2\x9dd\xba\xc7~\xd4\xe6\x13J\xd1\x82\xb0\xf7<\xa1]\xf4U\x95\xbe\xbe\x1f\xca\xd3\xc5_\xf0'}}, {@context={'context', 0x3d, 'system_u'}}]}}) setsockopt(r6, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) r11 = socket(0x1e, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c000000680001000000000000000000020000000400000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32, @ANYBLOB="14000600ff02000000000000000000000000000108000500", @ANYRES32=r12, @ANYBLOB="24000c80"], 0x7c}}, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000000)={0x8001, [0x7]}, 0x10) sendto$inet6(r3, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000449935ade4a460c89b6ec0cff3959547f5090ae84242e58ba86c902000000004a0180040016000b000a0018d1b866a31953ddf66ed538f252325000000000000000", 0x81, 0x20008840, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x101) 2.421516473s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 2.269469363s ago: executing program 4: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000804000000000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000000700000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ptrace$setregs(0xe4bc60f5d515abd2, r0, 0x0, &(0x7f0000000300)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0xa76, 0x0, 0x0, 0x0, 0x9d}) socket(0x0, 0x0, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x7, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000023007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2e, 0x42, 0x40}, 0x48) 1.229809878s ago: executing program 1: socket(0x200000000000011, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000080)='MS{O', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063f12c00000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000900)={'bridge0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x23, &(0x7f0000000000), 0x4) close(r7) sendmsg$inet(r8, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.033628126s ago: executing program 0: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @local, 0xffff7ffd}], 0x1c) 729.690619ms ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast1}, 0x10) io_setup(0x9, 0x0) eventfd2(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x54}}, 0x0) 712.754179ms ago: executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 670.20969ms ago: executing program 2: syz_open_procfs(0x0, 0x0) r0 = open(0x0, 0x60302, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r4, 0x1) ftruncate(r0, 0x2007ffd) sendfile(r0, 0xffffffffffffffff, 0x0, 0x1000000201005) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)="0100000000000000", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)=0x3, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}}], 0x1, 0x40000022, 0x0) mount$9p_unix(0x0, 0x0, 0x0, 0x0, 0x0) 647.960921ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000019c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = dup(r0) ftruncate(r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x2}) preadv2(r1, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/173, 0xad}], 0x1, 0x0, 0x0, 0x1a) 474.74878ms ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x0, 0xfff}, 0x38) statx(0xffffffffffffffff, &(0x7f0000000e80)='./file0\x00', 0x1000, 0x1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r5) getgroups(0x3, &(0x7f0000001080)=[0xee01, 0xee00, 0xee01]) sendmmsg$unix(r0, &(0x7f0000001180)=[{{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000000)="4c1b479f7fc7589a0119cd5a5d48e7080e2b6015526f8fd593dad00d84cf6643355820a5b9772f5016", 0x29}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/18, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x20004844}}, {{&(0x7f0000000c00)=@file={0x2, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c80)="10a99fd03a2caf525f205a9b193b1a7ca53c55be4cf0aee953f59b82ac65daec08a9e371437338a26ffed10700b71d8fa79fcb29d83eaeadb0c6581246c0fc729e5005b76be9385094a7eda84066db58b3239bda7ac2b18b8991260054813685148a724161598dfcbc8cac32d51c552c57c396ecf7234fb6114cfd5fb9f95c5bb637ecfefbe3975a31ae7f3863f9ed19de30be454b8addb730ac7690120792af05903be7c8435bce6a2dcd95f7ece08cde142d01", 0xb4}, {&(0x7f0000000d80)}, {&(0x7f0000000dc0)="031979b372d80f7f55b6bebd4b43a00b38c2a602a99838be9414c35fb20dad1056ed679b955fd43800dec2bb8b7ace44f3ffffa39e31ddb5275b4c5cfdcdb1fb716388fb", 0x44}], 0x3, &(0x7f00000010c0)=ANY=[@ANYBLOB="1c00000000001c5b8550a695d1010000", @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100", @ANYRES32, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB, @ANYRES32, @ANYRES32, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x20000804}}], 0x2, 0x4000010) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000000080)={0x44, r8, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xf, 0xa9, @name2}]}, 0x44}}, 0x0) 441.665994ms ago: executing program 3: prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fanotify_init(0x200, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1}, 0x4) 238.366732ms ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r1, &(0x7f0000000300)={'#! ', './file0'}, 0xb) 68.836288ms ago: executing program 1: r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_EXTTS_REQUEST2(r0, 0x40103d0b, &(0x7f0000000040)={0x0, 0x1}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) read$nci(r1, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r7, 0x200004) ioctl$int_in(r6, 0x5452, &(0x7f0000000080)=0x5327) sendfile(r6, r7, 0x0, 0x80001d00c0d1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000200016801c00018018000c801400020000000000040000000000000000000000140014"], 0x54}}, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4082, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@loose}, {@access_client}, {@cache_loose}, {@fscache}, {@version_9p2000}, {@mmap}, {@fscache}, {@cache_none}, {@version_L}], [{@smackfstransmute={'smackfstransmute', 0x3d, '\xe0\xb2n\x7f\xa5\x910\xf7\xe4\xda\x06`\x94\x17\xec\xb3i\xee\x9b\xa1\x0f\x05% ,\xa1\xd0\xf6O\x93W\v\xfeI\xa6\xafX\xa4\xb5\xb5xwCl\xb2e\xc7\x8d\x7f\xdf\x18\xef\b\xeeX\xc2\xa1\xc7\x04Y6\'\xfd\xa4\xb5\xd8\x04#_\fv\xb5\x19\xf9\x17\x8c,\xfb\xb3]\x8a>\xc3U\x98n\x85#lU,#\x95\x0e\xc1\xca\xb5\r\xb5\xc3\xeb\xba\xba\xdca\xff\xb55\x96#\xeew/\x93Uf\xfdcx\f\xf0\x9bI\xa9\n\xbf\xa6\'\xfe\xf8\x95\xdb\xa5\xe8\xeeX\xc87\x80\x04r\x83\xe2&\xaf0\xb3%\x91\xa1@\xf7\xa7T\x118\xf6\xca$\xcc\x8c\xf8\x9c9?BM\xbf\xa1g\xc1\xc5zf\x0f\xe2\a\xed\xfbR\xc43\xa6\xc2\xacW\xb3$6\xcf\x04*\xf4\xee0\x04\x89\vP\xc5j\xdb+\xe1\a\xa0\xbcr\xd9\xd0\xf2@\xb5\xd2\x9dd\xba\xc7~\xd4\xe6\x13J\xd1\x82\xb0\xf7<\xa1]\xf4U\x95\xbe\xbe\x1f\xca\xd3\xc5_\xf0'}}, {@context={'context', 0x3d, 'system_u'}}]}}) setsockopt(r6, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4) r11 = socket(0x1e, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="7c000000680001000000000000000000020000000400000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32, @ANYBLOB="14000600ff02000000000000000000000000000108000500", @ANYRES32=r12, @ANYBLOB="24000c80"], 0x7c}}, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000000)={0x8001, [0x7]}, 0x10) sendto$inet6(r3, &(0x7f0000000100)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000449935ade4a460c89b6ec0cff3959547f5090ae84242e58ba86c902000000004a0180040016000b000a0018d1b866a31953ddf66ed538f252325000000000000000", 0x81, 0x20008840, 0x0, 0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0x101) 0s ago: executing program 4: socket(0x200000000000011, 0x2, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000500)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001600)='\xcfD\xbc\xbf\x95@\xd6j\'$\x1d\x14\xb7!\x8b\xff\xdc\x83\xc5$\xb3\xecr\xe4G:\x93\xdfj\x96\x7f\x03\xe5\x94\x04[\x02\xa9[>\xf9\x9c\x83@\x1e\x99\xcah\x85\xb8\xbeSAk\xf4\xb6 \xdf\xa0P\x18\x19\xae\x8c\x9a\x19mm\r<|\xe8\x9e\xa0x\x84p2\xf9\xe2\xed\xb0\f\x7f;\xf6J18G\x84c\x88\x9d{\xf4~\xdby\xe1\xdf\x1a\xae\xd6ez\xe5\xa8\xe1\'', &(0x7f0000000080)='MS{O', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf1 1 [ 461.771713][ T5113] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 461.785824][ T29] audit: type=1326 audit(2000000039.419:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 461.786109][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 461.846688][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 461.870882][ T29] audit: type=1326 audit(2000000039.419:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11156 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 461.873774][ T5113] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 461.902574][ T5113] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 462.569566][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.585436][ T35] bond_slave_0: left promiscuous mode [ 462.606426][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.621821][ T35] bond_slave_1: left promiscuous mode [ 462.628203][ T35] bond0 (unregistering): Released all slaves [ 462.750566][T11172] vcan0 speed is unknown, defaulting to 1000 [ 463.905371][ T35] hsr_slave_0: left promiscuous mode [ 463.946967][ T35] hsr_slave_1: left promiscuous mode [ 463.994464][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.006046][ T5113] Bluetooth: hci2: command tx timeout [ 464.016414][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.709084][ T35] team0 (unregistering): Port device team_slave_1 removed [ 464.793657][ T35] team0 (unregistering): Port device team_slave_0 removed [ 466.074156][T11172] chnl_net:caif_netlink_parms(): no params data found [ 466.083059][ T5113] Bluetooth: hci2: command tx timeout [ 466.403773][T11172] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.424249][T11172] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.444306][T11172] bridge_slave_0: entered allmulticast mode [ 466.458574][T11172] bridge_slave_0: entered promiscuous mode [ 466.473033][T11172] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.483786][T11172] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.491313][T11172] bridge_slave_1: entered allmulticast mode [ 466.504222][T11172] bridge_slave_1: entered promiscuous mode [ 466.550415][T11172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.566172][ T35] IPVS: stop unused estimator thread 0... [ 466.582001][T11172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.591728][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 466.591744][ T29] audit: type=1326 audit(2000000044.849:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 466.625067][ T29] audit: type=1326 audit(2000000044.849:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 466.684913][ T29] audit: type=1326 audit(2000000044.889:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 466.727848][T11172] team0: Port device team_slave_0 added [ 466.741929][T11277] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 466.746822][ T29] audit: type=1326 audit(2000000044.889:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 466.757109][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 466.777348][T11172] team0: Port device team_slave_1 added [ 466.829679][ T29] audit: type=1326 audit(2000000044.889:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 466.853555][ T29] audit: type=1326 audit(2000000044.889:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 466.903108][T11172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.912996][T11172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.945463][T11172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.040070][T11172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.047943][T11172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.075623][ T29] audit: type=1326 audit(2000000044.889:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 467.129358][T11172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.024932][ T29] audit: type=1326 audit(2000000044.889:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 468.068469][ T29] audit: type=1326 audit(2000000044.889:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11273 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f303627cf69 code=0x7ffc0000 [ 468.150768][T11290] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 468.162974][T11290] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 468.166062][ T5113] Bluetooth: hci2: command tx timeout [ 468.180962][T11290] bridge0: port 3(dummy0) entered blocking state [ 468.189073][T11290] bridge0: port 3(dummy0) entered disabled state [ 468.198359][T11290] dummy0: entered allmulticast mode [ 468.205883][T11290] dummy0: entered promiscuous mode [ 468.211970][T11290] bridge0: port 3(dummy0) entered blocking state [ 468.218562][T11290] bridge0: port 3(dummy0) entered forwarding state [ 468.253248][T11172] hsr_slave_0: entered promiscuous mode [ 468.269510][T11172] hsr_slave_1: entered promiscuous mode [ 468.279246][T11172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 468.306206][T11172] Cannot create hsr debugfs directory [ 468.764082][ T29] audit: type=1326 audit(2000000047.029:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11302 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f777067cf69 code=0x7ffc0000 [ 470.246016][ T5113] Bluetooth: hci2: command tx timeout [ 470.389103][T11330] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 470.412000][T11330] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 470.445276][T11172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 470.483985][T11172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 470.529352][T11172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 470.571521][T11172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 470.867989][T11172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.928289][T11172] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.952930][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.960177][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.007853][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.015066][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.209836][T11339] overlayfs: missing 'lowerdir' [ 471.309848][T11339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 471.557003][T11172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.842917][T11172] veth0_vlan: entered promiscuous mode [ 471.897210][T11172] veth1_vlan: entered promiscuous mode [ 472.783822][T11172] veth0_macvtap: entered promiscuous mode [ 472.841769][T11172] veth1_macvtap: entered promiscuous mode [ 472.863503][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.876794][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.977661][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 473.022457][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.241494][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 473.241513][ T29] audit: type=1800 audit(2000000051.509:815): pid=11365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 473.275961][T11172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.429998][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.473742][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.485195][T11172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.509152][T11172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.519363][T11367] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 473.553467][T11172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.748355][T11172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.775706][T11172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.811724][T11172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.832519][T11172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.264127][ T29] audit: type=1800 audit(2000000052.529:816): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1968 res=0 errno=0 [ 474.407161][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.415044][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.497041][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.511990][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.615266][ T29] audit: type=1326 audit(2000000052.879:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11395 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7307cf69 code=0x0 [ 475.626326][T11431] xt_connbytes: Forcing CT accounting to be enabled [ 475.946082][T11431] xt_CT: No such helper "netbios-ns" [ 476.405643][ T29] audit: type=1326 audit(2000000054.669:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11457 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7307cf69 code=0x0 [ 476.945812][ T29] audit: type=1800 audit(2000000055.209:819): pid=11474 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1972 res=0 errno=0 [ 477.414103][T11483] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 477.579429][T11488] overlayfs: failed to resolve './file0/file0': -2 [ 477.586187][ T29] audit: type=1800 audit(2000000055.849:820): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 477.632807][ T29] audit: type=1804 audit(2000000055.889:821): pid=11488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="bus" dev="sda1" ino=1979 res=1 errno=0 [ 477.827461][T11495] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.0'. [ 478.208075][ T29] audit: type=1800 audit(2000000056.479:822): pid=11509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1964 res=0 errno=0 [ 478.459147][T11508] loop2: detected capacity change from 0 to 8192 [ 478.482770][ T29] audit: type=1326 audit(2000000056.749:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11510 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7df887cf69 code=0x0 [ 478.512130][T11508] REISERFS warning (device loop2): super-6504 reiserfs_getopt: the option "grpjquota" requires an argument [ 478.512130][T11508] [ 478.707079][ T29] audit: type=1800 audit(2000000056.969:824): pid=11516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1975 res=0 errno=0 [ 478.763696][T11508] loop2: detected capacity change from 0 to 2048 [ 478.863140][T11508] overlayfs: missing 'lowerdir' [ 479.089676][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 479.994832][T11531] loop2: detected capacity change from 0 to 128 [ 480.548224][T11531] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 480.988179][T11531] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.2'. [ 481.527137][ T29] audit: type=1800 audit(2000000059.799:825): pid=11547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 482.086140][ T29] audit: type=1326 audit(2000000060.339:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11554 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7df887cf69 code=0x0 [ 482.557824][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.951657][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.166331][T11571] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.188024][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.430695][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.467613][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 483.488623][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 483.499325][ T4489] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 483.510666][ T4489] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 483.520454][ T4489] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 483.530034][ T4489] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 483.582956][T11586] vcan0 speed is unknown, defaulting to 1000 [ 483.891755][ T51] bridge_slave_1: left allmulticast mode [ 483.897170][ T29] audit: type=1800 audit(2000000062.159:827): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1952 res=0 errno=0 [ 483.897777][ T51] bridge_slave_1: left promiscuous mode [ 483.927960][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.953544][ T51] bridge_slave_0: left allmulticast mode [ 484.013761][ T51] bridge_slave_0: left promiscuous mode [ 484.023644][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.599058][ T5113] Bluetooth: hci2: command tx timeout [ 486.013391][ T29] audit: type=1326 audit(2000000064.279:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f303627cf69 code=0x0 [ 487.033936][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.054637][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.071771][ T51] bond0 (unregistering): Released all slaves [ 487.164406][T11627] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.439232][T11586] chnl_net:caif_netlink_parms(): no params data found [ 487.689258][ T5113] Bluetooth: hci2: command tx timeout [ 487.719997][T11643] IPVS: set_ctl: invalid protocol: 43 224.0.0.2:20001 [ 487.739170][ T29] audit: type=1800 audit(2000000066.009:829): pid=11640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 487.937914][ T51] hsr_slave_0: left promiscuous mode [ 487.960980][ T51] hsr_slave_1: left promiscuous mode [ 487.977516][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.992660][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.389061][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.413305][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 489.760313][ T5113] Bluetooth: hci2: command tx timeout [ 489.799145][ T51] veth1_macvtap: left promiscuous mode [ 489.805672][ T51] veth0_macvtap: left promiscuous mode [ 489.811451][ T51] veth1_vlan: left promiscuous mode [ 489.817755][ T29] audit: type=1326 audit(2000000068.089:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11655 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f777067cf69 code=0x0 [ 489.840444][ T51] veth0_vlan: left promiscuous mode [ 490.134160][T11666] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.898798][ T29] audit: type=1800 audit(2000000069.159:831): pid=11677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 491.570747][ T29] audit: type=1800 audit(2000000069.829:832): pid=11688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 491.742326][ T51] team0 (unregistering): Port device team_slave_1 removed [ 491.835733][ T5113] Bluetooth: hci2: command tx timeout [ 491.837701][T11695] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 491.862738][T11691] overlayfs: failed to clone upperpath [ 491.892980][ T51] team0 (unregistering): Port device team_slave_0 removed [ 493.253053][T11586] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.263644][T11586] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.279088][T11586] bridge_slave_0: entered allmulticast mode [ 493.289108][T11586] bridge_slave_0: entered promiscuous mode [ 493.349193][T11695] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 493.358116][T11707] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.1'. [ 493.373720][T11707] bridge0: left promiscuous mode [ 493.399943][T11707] bridge0: left allmulticast mode [ 493.416052][T11586] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.435959][T11586] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.443309][T11586] bridge_slave_1: entered allmulticast mode [ 493.484052][T11586] bridge_slave_1: entered promiscuous mode [ 493.632247][T11711] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.4'. [ 493.691350][ T29] audit: type=1800 audit(2000000071.959:833): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1968 res=0 errno=0 [ 493.713373][T11586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.782610][T11586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.026450][T11586] team0: Port device team_slave_0 added [ 494.047875][T11586] team0: Port device team_slave_1 added [ 494.120044][T11586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.138545][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.183295][T11586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.205820][ T29] audit: type=1800 audit(2000000072.459:834): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 494.208018][T11586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.251242][T11586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.285818][T11586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.474976][T11586] hsr_slave_0: entered promiscuous mode [ 494.496811][T11586] hsr_slave_1: entered promiscuous mode [ 494.516583][T11586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.524277][T11586] Cannot create hsr debugfs directory [ 495.598804][T11732] syz-executor.4 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 495.663454][T11586] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 495.715829][T11586] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 495.841455][T11586] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 495.907425][T11586] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 496.398256][T11586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.449337][T11586] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.487379][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.494733][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 496.548519][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.555755][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.141908][T11586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.256157][T11753] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.0'. [ 497.289271][T11586] veth0_vlan: entered promiscuous mode [ 497.339253][T11586] veth1_vlan: entered promiscuous mode [ 497.433623][T11586] veth0_macvtap: entered promiscuous mode [ 497.447224][ T29] audit: type=1800 audit(2000000075.719:835): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1963 res=0 errno=0 [ 497.502620][T11586] veth1_macvtap: entered promiscuous mode [ 497.607759][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.644170][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.665044][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 497.685902][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.713378][T11586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 497.740684][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.771926][ T29] audit: type=1800 audit(2000000076.039:836): pid=11757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1954 res=0 errno=0 [ 497.792926][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.819100][T11586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 497.834290][ T29] audit: type=1800 audit(2000000076.099:837): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 497.855747][T11586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 497.884137][T11586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 497.885305][ T29] audit: type=1800 audit(2000000076.139:838): pid=11759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 497.931048][T11586] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.965670][T11586] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.974497][T11586] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.005710][T11586] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.020281][ T29] audit: type=1800 audit(2000000076.289:839): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 498.089631][ T29] audit: type=1800 audit(2000000076.329:840): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=6 res=0 errno=0 [ 498.206283][T11768] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 498.215242][T11768] bridge0: port 3(team0) entered blocking state [ 498.236239][T11768] bridge0: port 3(team0) entered disabled state [ 498.243239][T11768] team0: entered allmulticast mode [ 498.265934][T11768] team_slave_0: entered allmulticast mode [ 498.284245][T11768] team_slave_1: entered allmulticast mode [ 498.297736][T11768] team0: entered promiscuous mode [ 498.304338][T11768] team_slave_0: entered promiscuous mode [ 498.327087][T11768] team_slave_1: entered promiscuous mode [ 498.434977][ T29] audit: type=1326 audit(2000000076.699:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 498.489235][ T29] audit: type=1326 audit(2000000076.699:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 498.514344][ T1277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.539496][ T1277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 498.564370][ T29] audit: type=1326 audit(2000000076.699:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 498.625211][ T29] audit: type=1326 audit(2000000076.709:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 498.726964][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 498.748836][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.099435][T11804] loop2: detected capacity change from 0 to 2048 [ 501.138418][T11804] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 501.167222][T11804] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 501.194338][T11804] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 501.621793][T11817] 9pnet_fd: Insufficient options for proto=fd [ 501.960338][T11819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 501.974333][T11819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.999083][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.999701][T11820] cgroup: name respecified [ 502.005424][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.160819][T11824] loop2: detected capacity change from 0 to 16 [ 502.181917][T11824] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 503.390070][T11840] loop2: detected capacity change from 0 to 64 [ 504.397370][T11849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 504.427599][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 504.453600][T11849] macvlan0: entered allmulticast mode [ 505.117905][T11858] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: ipvlan2 [ 505.143813][T11858] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.192228][T11861] cgroup: name respecified [ 506.992765][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 506.992784][ T29] audit: type=1800 audit(2000000085.259:919): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1958 res=0 errno=0 [ 507.070884][T11878] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.928237][T11909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 512.992569][T11919] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 513.333910][T11932] loop2: detected capacity change from 0 to 2048 [ 513.474696][T11932] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 514.418875][T11966] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 516.454726][T11997] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 516.514424][T12000] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 516.636477][T12000] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 516.747614][T12005] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 516.753103][T12000] macvlan0: left allmulticast mode [ 516.798562][ T29] audit: type=1326 audit(2000000095.059:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12001 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f303627cf69 code=0x0 [ 517.177783][T12013] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 517.334695][T11987] loop2: detected capacity change from 0 to 32768 [ 518.053227][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 518.284607][T12026] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 520.325041][T12033] loop2: detected capacity change from 0 to 32768 [ 520.344312][T12033] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12033) [ 520.381167][T12033] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 520.401696][T12033] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 520.425292][T12033] BTRFS info (device loop2): using free-space-tree [ 520.646594][T12064] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 520.849228][ T29] audit: type=1800 audit(2000000099.119:921): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=265 res=0 errno=0 [ 521.023505][T12077] netlink: 'syz-executor.1': attribute type 28 has an invalid length. [ 521.051564][T12077] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.1'. [ 521.205860][ T5158] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 521.418767][ T5158] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 521.445977][ T5158] usb 3-1: config 1 interface 0 has no altsetting 0 [ 521.463335][ T5158] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.491647][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.513871][ T5158] usb 3-1: Product: syz [ 521.523955][ T5158] usb 3-1: Manufacturer: syz [ 521.533398][ T5158] usb 3-1: SerialNumber: syz [ 521.752136][ T29] audit: type=1326 audit(2000000100.019:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12084 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f303627cf69 code=0x0 [ 521.891275][ T5158] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 521.949863][ T5158] usb 3-1: USB disconnect, device number 8 [ 523.207729][T12080] Illegal XDP return value 205413904 on prog (id 671) dev N/A, expect packet loss! [ 523.251768][T11586] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 523.316201][T12108] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 523.546218][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 523.723474][T12119] bond1: entered promiscuous mode [ 523.806249][T12123] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 523.830592][T12123] bond1: (slave gre1): Error -95 calling set_mac_address [ 523.863887][T12126] loop2: detected capacity change from 0 to 1024 [ 523.940044][T12119] bond1: (slave vti0): The slave device specified does not support setting the MAC address [ 523.988491][T12119] bond1: (slave vti0): Error -95 calling set_mac_address [ 524.150997][ T2819] hfsplus: b-tree write err: -5, ino 4 [ 524.506168][ T29] audit: type=1326 audit(2000000102.769:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12138 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7df887cf69 code=0x0 [ 524.759218][T12147] loop2: detected capacity change from 0 to 4096 [ 524.775425][T12147] ntfs3: Bad value for 'gid' [ 524.953546][T12147] overlayfs: overlapping lowerdir path [ 525.119179][T12147] overlayfs: failed to resolve 'upperdir=./file0': -2 [ 526.193919][T12173] xt_SECMARK: invalid mode: 0 [ 526.347689][ T29] audit: type=1326 audit(2000000104.619:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7df887cf69 code=0x0 [ 527.174237][T12197] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 527.292560][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 527.834333][T12219] xt_SECMARK: invalid mode: 0 [ 528.028433][ T29] audit: type=1326 audit(2000000106.299:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7df887cf69 code=0x0 [ 528.213671][T12231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 528.345663][ T5279] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 528.537421][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 528.560901][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 528.605674][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.625691][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 528.665593][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 528.699663][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 528.719539][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 528.755790][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.785629][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 528.817999][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 528.839792][ T5279] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 528.865630][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 528.888471][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 528.928553][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 528.945804][T12217] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 528.975827][ T5279] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 529.120850][ T29] audit: type=1800 audit(2000000107.379:926): pid=12217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1969 res=0 errno=0 [ 529.570655][ T5279] usb 3-1: string descriptor 0 read error: -22 [ 529.586553][ T5279] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 529.597071][ T5279] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.636506][ T5279] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 529.660548][ T29] audit: type=1800 audit(2000000107.929:927): pid=12221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1970 res=0 errno=0 [ 529.831590][ T5279] usb 3-1: USB disconnect, device number 9 [ 529.871262][T12256] xt_SECMARK: invalid mode: 0 [ 530.111414][T12264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 530.329638][ T29] audit: type=1326 audit(2000000108.599:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12269 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7307cf69 code=0x0 [ 532.348580][T12288] xt_SECMARK: invalid mode: 0 [ 532.528992][ T29] audit: type=1800 audit(2000000110.799:929): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 532.614083][T12299] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 533.567126][T12311] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 533.633874][T12313] loop2: detected capacity change from 0 to 2048 [ 533.663025][T12313] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 533.922198][ T29] audit: type=1326 audit(2000000112.189:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12316 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f303627cf69 code=0x0 [ 534.385733][ T5158] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 534.610720][ T5158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 534.631707][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 534.642487][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 534.670006][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 534.699163][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 534.716428][ T5158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 534.732118][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 534.775017][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 534.830821][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 534.874346][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 534.886129][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 535.538380][ T5158] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 535.571757][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 535.611591][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 535.637263][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 535.658563][ T5158] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 535.792419][ T5158] usb 3-1: string descriptor 0 read error: -22 [ 535.823774][ T5158] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 535.875377][ T5158] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.327859][ T5158] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 536.429668][ T29] audit: type=1800 audit(2000000114.699:931): pid=12340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1959 res=0 errno=0 [ 536.567657][ T5158] usb 3-1: USB disconnect, device number 10 [ 536.891638][ T29] audit: type=1326 audit(2000000115.159:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12353 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7307cf69 code=0x0 [ 538.183187][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 540.665836][T12384] loop2: detected capacity change from 0 to 65536 [ 540.673603][T12384] xfs: Unknown parameter 'smackfsfloor' [ 541.135672][ T29] audit: type=1800 audit(2000000119.279:933): pid=12381 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="sda1" ino=1979 res=0 errno=0 [ 541.228344][T12389] veth0_vlan: entered allmulticast mode [ 542.506486][T12403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 542.787099][T12410] loop2: detected capacity change from 0 to 4096 [ 544.394820][T12426] bridge0: entered promiscuous mode [ 544.533405][T12426] bridge0: entered allmulticast mode [ 548.467859][T12440] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 549.444306][T12457] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 550.709828][T12477] loop2: detected capacity change from 0 to 256 [ 551.154959][T12489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 551.290993][T12492] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.4'. [ 551.729366][T12515] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.736892][T12515] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.812918][ T5271] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 551.838787][T12515] bridge0: left promiscuous mode [ 551.856944][T12515] bridge0: left allmulticast mode [ 552.096412][ T5271] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 552.262987][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.567251][ T5271] usb 3-1: config 0 descriptor?? [ 552.621443][T12519] bridge0: port 2(bridge_slave_1) entered blocking state [ 552.628827][T12519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 552.636520][T12519] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.643843][T12519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.808724][T12519] bridge0: entered promiscuous mode [ 552.825679][T12519] bridge0: entered allmulticast mode [ 553.048291][ T5271] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 553.065631][ T5271] hackrf 3-1:0.0: Could not detect board [ 553.075845][ T5271] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 553.101371][ T5271] usb 3-1: USB disconnect, device number 11 [ 553.745034][T12532] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 555.485778][ T25] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 555.749910][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 555.758501][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 555.769779][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 555.779962][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 555.796745][T12574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 555.813342][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 555.857147][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 555.888426][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 555.899782][T12576] bridge0: left promiscuous mode [ 555.916008][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 555.926171][T12576] bridge0: left allmulticast mode [ 555.931694][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 555.953265][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 555.982183][ T25] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 555.989871][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 556.004192][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 556.028970][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 556.051887][ T25] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 556.090296][ T25] usb 3-1: string descriptor 0 read error: -22 [ 556.096868][ T25] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 556.100955][T12576] bridge0: entered promiscuous mode [ 556.106184][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.135926][T12576] bridge0: entered allmulticast mode [ 556.158853][ T25] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 556.399135][ T25] usb 3-1: USB disconnect, device number 12 [ 556.534062][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 556.676915][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 556.773786][T12583] bond2: (slave xfrm0): The slave device specified does not support setting the MAC address [ 556.819467][T12583] bond2: (slave xfrm0): Error -95 calling set_mac_address [ 558.265978][T12607] loop2: detected capacity change from 0 to 2048 [ 558.348953][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 558.370551][T12607] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 558.384129][T12607] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 558.453708][T12607] Invalid option length (835) for dns_resolver key [ 559.006968][T12624] loop2: detected capacity change from 0 to 1024 [ 560.324141][T12635] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 560.841186][T12644] loop2: detected capacity change from 0 to 1024 [ 560.852257][T12644] EXT4-fs: Ignoring removed mblk_io_submit option [ 560.897017][T12644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 560.999273][T11586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.244664][T12654] cifs: Unknown parameter 'no9á ‘ýPƒ¹G!8°‰™…EŸ8-ö¤ ™ŠÇÅ–èEeÕ¬( IrÝ\•žu}ibˆŒÞêT0;´Œmy´[Gc¯î#Ï>QkÏübYü&“àÌ#“w„@/VV¼Lë~1ƒ2§÷lÿh–O„h'®ÈûrK1‚\kU{!e½úó¬Üš7»ßß [ 561.244664][T12654] ÄUúeâ[¦ÓÎ%#s' [ 561.290271][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 561.819885][T12661] loop2: detected capacity change from 0 to 4096 [ 561.839217][T12661] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 561.888554][T12661] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 561.904628][T12663] bridge0: entered promiscuous mode [ 561.944577][T12663] bridge0: entered allmulticast mode [ 561.996533][T12661] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 562.667449][T12672] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 562.794217][ T29] audit: type=1326 audit(2000000141.059:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 562.878357][ T29] audit: type=1326 audit(2000000141.059:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 562.954259][ T29] audit: type=1326 audit(2000000141.059:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 563.005146][ T29] audit: type=1326 audit(2000000141.059:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 563.054932][ T29] audit: type=1326 audit(2000000141.059:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 563.115831][ T29] audit: type=1326 audit(2000000141.099:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 563.139862][ T29] audit: type=1326 audit(2000000141.099:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7df887a6e7 code=0x7ffc0000 [ 563.193577][ T29] audit: type=1326 audit(2000000141.099:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7df88403b9 code=0x7ffc0000 [ 563.217286][ T29] audit: type=1326 audit(2000000141.099:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7df887a6e7 code=0x7ffc0000 [ 563.241367][ T29] audit: type=1326 audit(2000000141.109:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12673 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7df88403b9 code=0x7ffc0000 [ 563.397378][T12670] loop2: detected capacity change from 0 to 32768 [ 563.418694][T12670] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12670) [ 563.439131][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.445979][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.480237][T12670] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 563.537524][T12670] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 563.577858][T12670] BTRFS info (device loop2): using free-space-tree [ 564.574289][T12731] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 565.793348][T12749] bridge0: left promiscuous mode [ 565.800444][T12727] 9pnet_fd: Insufficient options for proto=fd [ 565.822449][T12749] bridge0: left allmulticast mode [ 565.943592][T12749] bridge0: entered promiscuous mode [ 565.975967][T12749] bridge0: entered allmulticast mode [ 566.392680][T11586] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 567.065390][T12762] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 568.098489][T12779] IPv6: sit1: Disabled Multicast RS [ 570.050292][T12795] binder: 12794:12795 ioctl 4018620d 0 returned -22 [ 570.145863][ T5113] Bluetooth: hci2: unexpected cc 0x2040 length: 7 > 1 [ 571.133517][T12781] 9pnet_fd: Insufficient options for proto=fd [ 571.338379][T12818] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.1'. [ 571.416720][T12823] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 571.505074][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 571.505092][ T29] audit: type=1804 audit(2000000149.769:1294): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="bus" dev="sda1" ino=1960 res=1 errno=0 [ 571.754894][T12829] loop2: detected capacity change from 0 to 2048 [ 571.870220][T12829] loop2: detected capacity change from 0 to 256 [ 573.659191][T12848] loop2: detected capacity change from 0 to 1024 [ 574.027906][T12853] serio: Serial port ptm0 [ 574.127077][T12851] loop2: detected capacity change from 0 to 1024 [ 574.156362][ T5113] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 574.170261][ T5113] Bluetooth: hci2: Injecting HCI hardware error event [ 574.182075][ T4489] Bluetooth: hci2: hardware error 0x00 [ 574.688093][T12846] 9pnet_fd: Insufficient options for proto=fd [ 575.504623][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.512432][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.866477][T12878] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.873649][T12878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 575.881228][T12878] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.888510][T12878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.304940][T12878] bridge0: entered promiscuous mode [ 576.316613][ T4489] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 576.686810][T12878] bridge0: entered allmulticast mode [ 578.200735][T12901] loop2: detected capacity change from 0 to 2048 [ 578.260064][T12901] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 578.322571][T12901] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 578.393167][T12901] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 578.458158][ T29] audit: type=1800 audit(2000000156.729:1295): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1367 res=0 errno=0 [ 580.363291][ T29] audit: type=1326 audit(2000000158.629:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 580.430190][ T29] audit: type=1326 audit(2000000158.659:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 580.518131][ T29] audit: type=1326 audit(2000000158.659:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 580.605847][ T29] audit: type=1326 audit(2000000158.669:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 580.695806][ T29] audit: type=1326 audit(2000000158.669:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 580.776877][ T29] audit: type=1326 audit(2000000158.679:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 580.868561][ T29] audit: type=1326 audit(2000000158.679:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 580.942502][ T29] audit: type=1326 audit(2000000158.679:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12919 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 581.375275][T12917] loop2: detected capacity change from 0 to 32768 [ 581.396226][T12917] jfs: Unrecognized mount option "uota" or missing value [ 581.622023][T12918] bridge0: port 3(dummy0) entered disabled state [ 581.668668][T12918] dummy0: left allmulticast mode [ 581.693954][T12918] bridge0: port 3(dummy0) entered disabled state [ 581.896261][T12918] team0: Port device dummy0 added [ 581.979681][T12939] loop2: detected capacity change from 0 to 1024 [ 582.019920][T12939] EXT4-fs: Ignoring removed orlov option [ 582.312559][T12939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 582.946157][ T29] audit: type=1800 audit(2000000160.719:1304): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1970 res=0 errno=0 [ 583.129259][T12949] macvlan3: entered allmulticast mode [ 583.139430][T12949] team_slave_0: entered promiscuous mode [ 583.145744][T12949] team_slave_1: entered promiscuous mode [ 583.182841][T12949] team0: entered allmulticast mode [ 583.202519][T12949] team_slave_0: entered allmulticast mode [ 583.231036][T12949] team_slave_1: entered allmulticast mode [ 583.257681][T12949] dummy0: entered allmulticast mode [ 583.366872][T12949] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 583.379186][T12949] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 583.468953][T11586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.683489][T12959] loop2: detected capacity change from 0 to 64 [ 583.742062][T12959] hfs: keylen 94 too large [ 583.743470][T12957] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 583.882277][T12959] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 583.983903][T12959] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 584.616106][T12970] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 584.784958][T12974] loop2: detected capacity change from 0 to 128 [ 584.792464][T12974] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 586.461274][T12996] siw: device registration error -23 [ 587.249690][T13022] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 587.265687][ T29] audit: type=1326 audit(2000000165.529:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.327473][ T29] audit: type=1326 audit(2000000165.529:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.389375][ T29] audit: type=1326 audit(2000000165.529:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.468355][ T29] audit: type=1326 audit(2000000165.529:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.530813][ T29] audit: type=1326 audit(2000000165.529:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.575402][ T29] audit: type=1326 audit(2000000165.539:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.600129][ T29] audit: type=1326 audit(2000000165.539:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.624706][ T29] audit: type=1326 audit(2000000165.539:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.649402][ T29] audit: type=1326 audit(2000000165.539:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.673277][ T29] audit: type=1326 audit(2000000165.539:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13021 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 587.966279][T13019] loop2: detected capacity change from 0 to 32768 [ 587.988100][T13019] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13019) [ 588.023212][T13019] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 588.042619][T13019] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 588.061423][T13019] BTRFS info (device loop2): using free-space-tree [ 588.472020][T11586] BTRFS info (device loop2): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 589.551983][ T4489] Bluetooth: Unexpected continuation frame (len 18) [ 589.831742][T13087] vcan0 speed is unknown, defaulting to 1000 [ 590.385193][T13104] loop2: detected capacity change from 0 to 1024 [ 590.401234][T13104] EXT4-fs: Ignoring removed orlov option [ 590.440895][T13104] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 590.708286][T11586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.272062][T13116] loop2: detected capacity change from 0 to 32768 [ 592.338354][T13116] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13116) [ 592.374447][T13116] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 592.403904][T13116] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 592.561999][T13116] BTRFS info (device loop2): rebuilding free space tree [ 592.608453][T13116] BTRFS info (device loop2): disabling free space tree [ 592.615475][T13116] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 592.645848][T13116] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 592.860716][T11586] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 593.545872][T13166] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 593.694391][T13162] loop2: detected capacity change from 0 to 8192 [ 593.752133][T13162] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 594.145771][ T1790] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 595.912337][T13200] loop2: detected capacity change from 0 to 128 [ 595.920561][T13200] FAT-fs (loop2): Unrecognized mount option "" or missing value [ 595.998555][T13197] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 598.838725][T13262] syz-executor.1[13262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 598.838879][T13262] syz-executor.1[13262] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 600.129410][T13282] loop2: detected capacity change from 0 to 2048 [ 600.208395][T13282] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 600.239662][T13282] ext4 filesystem being mounted at /root/syzkaller-testdir3434464889/syzkaller.zTusGt/82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 600.310042][T13282] fs-verity: sha256 using implementation "sha256-avx2" [ 600.344685][T13282] fs-verity: sha512 using implementation "sha512-avx2" [ 600.357774][T13296] ptrace attach of "/root/syz-executor.1 exec"[5108] was attempted by "/root/syz-executor.1 exec"[13296] [ 600.401052][T11586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.368016][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 601.368037][ T29] audit: type=1804 audit(2000000179.629:1391): pid=13325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="ptmx" dev="sda1" ino=1961 res=1 errno=0 [ 601.449417][ T29] audit: type=1804 audit(2000000179.709:1392): pid=13327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="ptmx" dev="sda1" ino=1961 res=1 errno=0 [ 602.064518][T13366] loop2: detected capacity change from 0 to 512 [ 602.084710][T13366] EXT4-fs: Invalid want_extra_isize 5 [ 602.593594][ T29] audit: type=1800 audit(2000000180.839:1393): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1975 res=0 errno=0 [ 602.615644][ T29] audit: type=1804 audit(2000000180.839:1394): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="bus" dev="sda1" ino=1975 res=1 errno=0 [ 602.756309][T13389] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 602.879927][T13389] bridge0: left promiscuous mode [ 602.885015][T13389] bridge0: left allmulticast mode [ 603.439422][T13396] loop2: detected capacity change from 0 to 128 [ 603.477093][T13396] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 603.577150][T13396] ext4 filesystem being mounted at /root/syzkaller-testdir3434464889/syzkaller.zTusGt/88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 603.761806][T11586] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 604.166983][T13415] loop2: detected capacity change from 0 to 256 [ 605.280223][T13425] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 605.298676][T13425] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.345711][T13428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 605.567533][T13428] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 605.618486][T13428] netlink: 209324 bytes leftover after parsing attributes in process `syz-executor.4'. [ 607.988330][T13455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 609.292203][T13467] loop2: detected capacity change from 0 to 256 [ 609.367287][T13467] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x72684843, utbl_chksum : 0xe619d30d) [ 609.499642][ T29] audit: type=1800 audit(2000000187.739:1395): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=1048647 res=0 errno=0 [ 609.619203][T13472] 9pnet_fd: Insufficient options for proto=fd [ 609.822776][T13480] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 609.846159][T13480] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.086828][T13485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 610.299370][T13489] overlayfs: failed to clone upperpath [ 610.896428][T13485] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 610.904581][T13485] netlink: 209324 bytes leftover after parsing attributes in process `syz-executor.1'. [ 612.384502][T13511] syz-executor.4[13511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.384654][T13511] syz-executor.4[13511] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 612.722967][T13513] overlayfs: failed to clone upperpath [ 613.073205][T13516] overlayfs: failed to clone upperpath [ 614.588666][T13554] overlayfs: failed to clone upperpath [ 615.515205][T13570] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 615.530309][T13557] loop2: detected capacity change from 0 to 8192 [ 615.816334][T13581] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 616.084519][T13590] overlayfs: failed to clone upperpath [ 616.470917][T13595] loop2: detected capacity change from 0 to 1764 [ 616.508565][T13595] iso9660: Bad value for 'gid' [ 617.346246][ T4489] Bluetooth: hci0: unexpected event for opcode 0x0c23 [ 617.934049][ T29] audit: type=1326 audit(2000000196.199:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 617.984353][ T29] audit: type=1326 audit(2000000196.229:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.060901][ T29] audit: type=1326 audit(2000000196.229:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.088044][ T29] audit: type=1326 audit(2000000196.229:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.123075][ T29] audit: type=1326 audit(2000000196.229:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.186671][ T29] audit: type=1326 audit(2000000196.229:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.241651][ T29] audit: type=1326 audit(2000000196.229:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.296662][ T29] audit: type=1326 audit(2000000196.229:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.359758][ T29] audit: type=1326 audit(2000000196.229:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.417801][ T29] audit: type=1326 audit(2000000196.229:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 618.651316][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 618.735984][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 618.742505][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 618.749087][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 618.755579][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 618.762101][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 618.768588][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 618.775136][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 618.781726][ C0] vcan0: j1939_xtp_rx_dat: no rx connection found [ 620.056183][T13677] loop2: detected capacity change from 0 to 512 [ 620.371410][T13677] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 620.538895][T13677] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 620.706110][T13677] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 620.831345][T13677] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 620.974092][T13677] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.2: corrupted in-inode xattr: invalid ea_ino [ 621.074976][T13677] EXT4-fs (loop2): Remounting filesystem read-only [ 621.109740][T13677] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.179761][T13677] EXT4-fs warning (device loop2): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 621.215583][T13677] EXT4-fs warning (device loop2): dx_probe:880: Enable large directory feature to access it [ 621.240186][T13677] EXT4-fs warning (device loop2): dx_probe:965: inode #2: comm syz-executor.2: Corrupt directory, running e2fsck is recommended [ 621.339454][T11586] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.359390][ T4489] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 621.370174][ T4489] Bluetooth: hci0: Injecting HCI hardware error event [ 621.381097][ T4489] Bluetooth: hci0: hardware error 0x00 [ 621.590750][T13702] loop2: detected capacity change from 0 to 256 [ 621.720057][T13702] FAT-fs (loop2): Directory bread(block 64) failed [ 621.748911][T13702] FAT-fs (loop2): Directory bread(block 65) failed [ 621.790699][T13702] FAT-fs (loop2): Directory bread(block 66) failed [ 621.815877][T13702] FAT-fs (loop2): Directory bread(block 67) failed [ 621.823219][T13702] FAT-fs (loop2): Directory bread(block 68) failed [ 621.907667][T13702] FAT-fs (loop2): Directory bread(block 69) failed [ 621.914361][T13702] FAT-fs (loop2): Directory bread(block 70) failed [ 621.956215][T13702] FAT-fs (loop2): Directory bread(block 71) failed [ 621.962948][T13702] FAT-fs (loop2): Directory bread(block 72) failed [ 621.975650][T13702] FAT-fs (loop2): Directory bread(block 73) failed [ 622.630644][T13721] loop2: detected capacity change from 0 to 32768 [ 622.639241][T13721] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13721) [ 622.660208][T13721] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 622.670649][T13721] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 622.679569][T13721] BTRFS info (device loop2): using free-space-tree [ 623.436292][ T4489] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 623.928434][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 623.928453][ T29] audit: type=1800 audit(2000000202.199:1430): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 624.026929][ T29] audit: type=1800 audit(2000000202.199:1431): pid=13796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1960 res=0 errno=0 [ 624.102213][T13802] overlayfs: failed to clone upperpath [ 624.102635][T13800] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 624.635977][T13809] overlayfs: failed to clone upperpath [ 624.702993][T11586] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 624.892441][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.899098][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.947671][T13829] loop2: detected capacity change from 0 to 128 [ 626.269344][T13829] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 626.316454][T13834] bridge0: entered promiscuous mode [ 626.321735][T13834] bridge0: entered allmulticast mode [ 626.396055][T13825] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.2'. [ 626.979252][ T29] audit: type=1800 audit(2000000205.239:1432): pid=13848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="sda1" ino=1975 res=0 errno=0 [ 627.348008][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.577608][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.817806][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.366278][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.488830][T13700] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 628.503127][T13700] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 628.513307][T13700] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 628.521961][T13700] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 628.530467][T13700] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 628.555086][T13700] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 628.639293][T13860] vcan0 speed is unknown, defaulting to 1000 [ 628.834631][T13855] vcan0 speed is unknown, defaulting to 1000 [ 628.856670][ T35] bridge_slave_1: left allmulticast mode [ 628.875689][ T35] bridge_slave_1: left promiscuous mode [ 628.881530][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.917584][ T35] bridge_slave_0: left allmulticast mode [ 628.923318][ T35] bridge_slave_0: left promiscuous mode [ 628.956716][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.741271][ T29] audit: type=1800 audit(2000000207.999:1433): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 629.794449][ T29] audit: type=1800 audit(2000000207.999:1434): pid=13871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 629.894213][T13873] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 630.484713][T13876] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.1'. [ 630.555915][ T29] audit: type=1800 audit(2000000208.829:1435): pid=13883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="sda1" ino=1970 res=0 errno=0 [ 630.635939][T13700] Bluetooth: hci2: command tx timeout [ 630.728261][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.811308][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.855058][ T35] bond0 (unregistering): Released all slaves [ 630.871484][ T29] audit: type=1804 audit(2000000209.139:1436): pid=13891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="file0" dev="sda1" ino=1951 res=1 errno=0 [ 632.358126][ T35] hsr_slave_0: left promiscuous mode [ 632.369942][ T35] hsr_slave_1: left promiscuous mode [ 632.387054][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.403209][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.419906][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.435602][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.506121][ T35] veth1_macvtap: left promiscuous mode [ 632.518124][ T35] veth0_macvtap: left promiscuous mode [ 632.540657][ T35] veth1_vlan: left promiscuous mode [ 632.554995][ T35] veth0_vlan: left promiscuous mode [ 632.715712][T13700] Bluetooth: hci2: command tx timeout [ 633.664334][ T35] team0 (unregistering): Port device team_slave_1 removed [ 633.738173][ T35] team0 (unregistering): Port device team_slave_0 removed [ 634.490092][T13914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.503498][T13914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.516401][T13914] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 634.571130][T13855] chnl_net:caif_netlink_parms(): no params data found [ 634.631647][ T29] audit: type=1800 audit(2000000212.899:1437): pid=13925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1954 res=0 errno=0 [ 634.799773][T13927] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.4'. [ 634.805759][T13700] Bluetooth: hci2: command tx timeout [ 634.890984][T13931] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 634.932177][T13931] bridge0: left promiscuous mode [ 634.941399][T13931] bridge0: left allmulticast mode [ 635.079017][T13931] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 636.083794][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.155787][T13855] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.163092][T13855] bridge_slave_0: entered allmulticast mode [ 636.203381][T13855] bridge_slave_0: entered promiscuous mode [ 636.230415][T13855] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.241069][T13855] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.249066][T13855] bridge_slave_1: entered allmulticast mode [ 636.258567][T13855] bridge_slave_1: entered promiscuous mode [ 636.387717][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 636.433765][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 636.479081][T13952] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 636.539324][T13855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.609087][T13855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.825205][T13855] team0: Port device team_slave_0 added [ 636.843898][T13855] team0: Port device team_slave_1 added [ 636.876343][T13700] Bluetooth: hci2: command tx timeout [ 636.973807][T13855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.995654][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.085752][T13855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.151110][T13855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.172579][T13855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.201937][ T29] audit: type=1800 audit(2000000215.469:1438): pid=13964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1968 res=0 errno=0 [ 637.246008][T13855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 637.472055][T13855] hsr_slave_0: entered promiscuous mode [ 637.504186][T13855] hsr_slave_1: entered promiscuous mode [ 637.567902][T13855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 637.595094][T13855] Cannot create hsr debugfs directory [ 638.612479][T13969] vcan0 speed is unknown, defaulting to 1000 [ 640.601698][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.619608][T13992] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 640.634198][T13992] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 641.158370][T13855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 641.235917][T13855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 641.263202][T13855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 641.296438][T13855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 641.593043][T13855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 641.642674][ T29] audit: type=1800 audit(2000000219.909:1439): pid=14003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1959 res=0 errno=0 [ 641.689745][T13855] 8021q: adding VLAN 0 to HW filter on device team0 [ 641.741852][ T1790] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.749038][ T1790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.928613][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.935843][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.891833][T13855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.335165][T13855] veth0_vlan: entered promiscuous mode [ 645.015475][T13855] veth1_vlan: entered promiscuous mode [ 645.027713][T14037] 9pnet_fd: Insufficient options for proto=fd [ 645.129325][T13855] veth0_macvtap: entered promiscuous mode [ 645.144654][T13855] veth1_macvtap: entered promiscuous mode [ 645.193377][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.217026][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.237132][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 645.252151][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.271190][T13855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.293699][T14040] vcan0 speed is unknown, defaulting to 1000 [ 645.310113][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.328156][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.377630][T13855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 645.405744][T13855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 645.432976][T13855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.493826][T13855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.540878][T13855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.587661][T13855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.625390][T13855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.743847][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.752108][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.831515][ T2819] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.862013][ T2819] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 650.115639][ T8] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 650.130050][T14079] 9pnet_fd: Insufficient options for proto=fd [ 650.465674][ T29] audit: type=1326 audit(2000000228.729:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7df887a6e7 code=0x7ffc0000 [ 650.524322][T14087] loop2: detected capacity change from 0 to 4096 [ 650.525317][ T29] audit: type=1326 audit(2000000228.729:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7df88403b9 code=0x7ffc0000 [ 650.785738][ T29] audit: type=1326 audit(2000000228.729:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7df887a6e7 code=0x7ffc0000 [ 650.819398][ T29] audit: type=1326 audit(2000000228.729:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7df88403b9 code=0x7ffc0000 [ 650.842890][T14087] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 651.018275][ T29] audit: type=1326 audit(2000000228.739:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7df887a6e7 code=0x7ffc0000 [ 651.799577][T14087] ntfs3: loop2: Failed to initialize $Extend/$ObjId. [ 651.894097][ T29] audit: type=1326 audit(2000000228.739:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7df88403b9 code=0x7ffc0000 [ 651.937103][T14087] ntfs3: loop2: ino=21, "memory.events" fallocate(0x11) is not supported [ 651.978231][ T29] audit: type=1326 audit(2000000228.739:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7df887cf69 code=0x7ffc0000 [ 652.043135][ T29] audit: type=1326 audit(2000000228.739:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7df887a6e7 code=0x7ffc0000 [ 652.070478][ T29] audit: type=1326 audit(2000000228.749:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7df88403b9 code=0x7ffc0000 [ 652.165052][ T29] audit: type=1326 audit(2000000228.749:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14082 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7df887a6e7 code=0x7ffc0000 [ 655.617859][T14124] vcan0 speed is unknown, defaulting to 1000 [ 657.247154][T14125] loop2: detected capacity change from 0 to 32768 [ 657.261475][T14125] XFS: attr2 mount option is deprecated. [ 657.274894][T14125] XFS: noikeep mount option is deprecated. [ 657.384393][T14125] XFS (loop2): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 657.479033][T14125] XFS (loop2): Quotacheck needed: Please wait. [ 657.642003][ T5279] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x41/0xd0, xfs_rmapbt block 0x14 [ 657.665897][ T5279] XFS (loop2): Unmount and run xfs_repair [ 657.671681][ T5279] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 657.695725][ T5279] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 657.714739][ T5279] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 657.755959][ T5279] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 657.765260][ T5279] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 657.807866][ T5279] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 657.828865][ T5279] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 657.858063][ T5279] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 657.884204][ T5279] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 657.913263][ T2819] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x14 len 4 error 74 [ 658.025181][ T2819] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 658.041350][ T2819] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 658.094124][T14125] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 658.133969][T14160] tipc: Can't bind to reserved service type 0 [ 658.179697][T14125] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 659.634785][T14188] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.0'. [ 659.777691][T14186] loop2: detected capacity change from 0 to 32768 [ 659.794312][T14186] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (14186) [ 659.813060][T14186] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 659.823403][T14186] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 659.832241][T14186] BTRFS info (device loop2): using free-space-tree [ 661.869734][T14238] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.3'. [ 662.786393][T14247] 9pnet_fd: Insufficient options for proto=fd [ 663.503098][T13855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 664.283852][T14267] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 665.106124][T14267] loop2: detected capacity change from 0 to 512 [ 665.262795][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 665.262813][ T29] audit: type=1326 audit(2000000243.529:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14274 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7307cf69 code=0x0 [ 669.202689][ T8] IPVS: starting estimator thread 0... [ 669.335685][T14318] IPVS: using max 23 ests per chain, 55200 per kthread [ 669.691307][ T29] audit: type=1326 audit(2000000247.899:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14327 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f303627cf69 code=0x0 [ 669.805865][T14336] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 669.851177][ T29] audit: type=1326 audit(2000000248.119:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14326 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7df887cf69 code=0x0 [ 670.920516][ T29] audit: type=1800 audit(2000000249.179:1513): pid=14352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=0 errno=0 [ 671.008557][ T29] audit: type=1804 audit(2000000249.219:1514): pid=14343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=1 errno=0 [ 671.055212][ T29] audit: type=1804 audit(2000000249.219:1515): pid=14352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=1 errno=0 [ 672.855110][ T29] audit: type=1326 audit(2000000251.119:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14375 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fef7307cf69 code=0x0 [ 674.093212][ T29] audit: type=1326 audit(2000000252.359:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14384 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7df887cf69 code=0x0 [ 674.117513][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 674.136491][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 674.149855][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 674.159676][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 674.173017][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 674.180718][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 674.262095][T14389] vcan0 speed is unknown, defaulting to 1000 [ 674.802235][T14389] chnl_net:caif_netlink_parms(): no params data found [ 674.807473][T14400] loop2: detected capacity change from 0 to 512 [ 674.827253][T14400] EXT4-fs: Ignoring removed mblk_io_submit option [ 674.904663][T14400] EXT4-fs (loop2): Test dummy encryption mode enabled [ 674.926342][T14400] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0102] [ 674.939850][T14400] System zones: 1-12 [ 674.957620][T14400] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 674.998334][T14400] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 675.030062][T14400] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 675.045846][ T29] audit: type=1800 audit(2000000253.289:1518): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1958 res=0 errno=0 [ 675.207930][T14389] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.250469][T14389] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.294842][T14389] bridge_slave_0: entered allmulticast mode [ 675.352485][T14389] bridge_slave_0: entered promiscuous mode [ 675.519099][T14389] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.641641][T14389] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.791456][T14389] bridge_slave_1: entered allmulticast mode [ 675.948517][T14389] bridge_slave_1: entered promiscuous mode [ 676.067723][T14400] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 676.151443][ T29] audit: type=1800 audit(2000000254.419:1519): pid=14425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1970 res=0 errno=0 [ 676.175977][T14389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.208936][T14389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.228840][T14423] vcan0 speed is unknown, defaulting to 1000 [ 676.236108][T13700] Bluetooth: hci3: command tx timeout [ 676.380894][T14389] team0: Port device team_slave_0 added [ 676.411010][T14389] team0: Port device team_slave_1 added [ 676.417568][T13855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.551189][T14389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.584542][T14434] loop2: detected capacity change from 0 to 1024 [ 676.606093][T14434] EXT4-fs: Ignoring removed mblk_io_submit option [ 676.614577][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.662581][T14389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.694293][T14434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 676.779081][T14389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.793405][T14389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.820478][T14389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.855443][T14434] vcan0 speed is unknown, defaulting to 1000 [ 677.177648][T14389] hsr_slave_0: entered promiscuous mode [ 677.200787][T14389] hsr_slave_1: entered promiscuous mode [ 677.249222][T14389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.283860][T14389] Cannot create hsr debugfs directory [ 678.317802][T13700] Bluetooth: hci3: command tx timeout [ 678.471989][T14389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.700645][T14389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.708980][T13855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 678.872054][T14389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.074722][T14389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.359644][ T29] audit: type=1800 audit(2000000257.629:1520): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1964 res=0 errno=0 [ 680.465150][T14471] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 680.488742][T13700] Bluetooth: hci3: command tx timeout [ 681.252147][T14389] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 681.318542][T14474] vcan0 speed is unknown, defaulting to 1000 [ 681.340991][T14389] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 681.403907][T14389] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 681.453482][T14389] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 681.617411][ T29] audit: type=1800 audit(2000000259.889:1521): pid=14482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1970 res=0 errno=0 [ 681.791203][T14389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.857298][T14389] 8021q: adding VLAN 0 to HW filter on device team0 [ 681.886734][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.894053][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 681.995448][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.002944][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 682.555759][T13700] Bluetooth: hci3: command tx timeout [ 682.774433][T14389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 683.075868][ T29] audit: type=1326 audit(2000000261.339:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7307a6e7 code=0x7ffc0000 [ 683.173475][ T29] audit: type=1326 audit(2000000261.339:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef730403b9 code=0x7ffc0000 [ 683.188330][T14389] veth0_vlan: entered promiscuous mode [ 683.202597][ T29] audit: type=1326 audit(2000000261.349:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7307a6e7 code=0x7ffc0000 [ 683.229041][ T29] audit: type=1326 audit(2000000261.349:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef730403b9 code=0x7ffc0000 [ 683.273711][T14389] veth1_vlan: entered promiscuous mode [ 683.281651][ T29] audit: type=1326 audit(2000000261.349:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef7307cf69 code=0x7ffc0000 [ 683.321506][T14482] 9pnet_fd: Insufficient options for proto=fd [ 683.398957][ T29] audit: type=1326 audit(2000000261.349:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7307a6e7 code=0x7ffc0000 [ 683.452641][T14389] veth0_macvtap: entered promiscuous mode [ 683.484565][T14389] veth1_macvtap: entered promiscuous mode [ 683.487208][ T29] audit: type=1326 audit(2000000261.349:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef730403b9 code=0x7ffc0000 [ 683.563809][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.575094][ T29] audit: type=1326 audit(2000000261.349:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef7307a6e7 code=0x7ffc0000 [ 683.608950][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.634592][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.646266][ T29] audit: type=1326 audit(2000000261.349:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14501 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef730403b9 code=0x7ffc0000 [ 683.685681][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.722827][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 683.784783][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 683.836344][T14389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 684.179820][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.364982][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.516977][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.577850][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.613865][T14389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 684.625081][T14389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.648830][T14389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.660643][T14389] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.831669][T14389] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.876478][T14389] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.912938][T14389] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.510055][T14525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 685.539368][ T2819] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.594708][ T2819] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 685.688580][ T1277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 685.709397][ T1277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 686.291654][T14540] loop2: detected capacity change from 0 to 1024 [ 686.313207][T14540] EXT4-fs: Ignoring removed mblk_io_submit option [ 686.330584][ T1235] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.337376][ T1235] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.385117][T14540] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.569485][T14535] loop4: detected capacity change from 0 to 40427 [ 686.587967][T14535] F2FS-fs (loop4): Mismatch start address, segment0(0) cp_blkaddr(512) [ 686.594554][T14540] vcan0 speed is unknown, defaulting to 1000 [ 686.604528][T14535] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 686.632339][T14535] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60929 w/o reserve_root [ 686.701337][T14535] F2FS-fs (loop4): Found nat_bits in checkpoint [ 687.048870][T14535] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 687.092269][T14535] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 687.153307][T14535] syz-executor.4: attempt to access beyond end of device [ 687.153307][T14535] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 687.189245][T14535] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 687.229205][T14535] 9pnet_fd: Insufficient options for proto=fd [ 687.743275][T14576] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 688.427247][T13855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 688.442696][T14585] loop4: detected capacity change from 0 to 128 [ 688.451238][T14585] FAT-fs (loop4): Unrecognized mount option "" or missing value [ 688.898852][T14588] loop2: detected capacity change from 0 to 32768 [ 688.952862][T14588] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (14588) [ 688.978756][T14588] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 688.989783][T14588] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 688.998661][T14588] BTRFS info (device loop2): using free-space-tree [ 689.108029][T14597] bridge0: left promiscuous mode [ 689.113156][T14597] bridge0: left allmulticast mode [ 689.139136][T14597] bridge0: entered promiscuous mode [ 689.144461][T14597] bridge0: entered allmulticast mode [ 690.199981][T14631] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 690.748746][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 690.748764][ T29] audit: type=1800 audit(2000000269.019:1634): pid=14637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1965 res=0 errno=0 [ 691.790506][T13855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 691.874906][T14623] 9pnet_fd: Insufficient options for proto=fd [ 692.156856][T14665] 9pnet_fd: Insufficient options for proto=fd [ 692.927282][T14678] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 693.808568][ T29] audit: type=1326 audit(2000000272.079:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f980847a6e7 code=0x7ffc0000 [ 693.895731][ T29] audit: type=1326 audit(2000000272.079:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98084403b9 code=0x7ffc0000 [ 693.967548][ T29] audit: type=1326 audit(2000000272.099:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f980847cf69 code=0x7ffc0000 [ 694.061790][ T29] audit: type=1326 audit(2000000272.099:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f980847a6e7 code=0x7ffc0000 [ 694.150612][ T29] audit: type=1326 audit(2000000272.099:1639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98084403b9 code=0x7ffc0000 [ 694.225778][ T29] audit: type=1326 audit(2000000272.099:1640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f980847a6e7 code=0x7ffc0000 [ 694.268030][ T29] audit: type=1326 audit(2000000272.099:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98084403b9 code=0x7ffc0000 [ 694.328300][ T29] audit: type=1326 audit(2000000272.099:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f980847a6e7 code=0x7ffc0000 [ 694.408494][ T29] audit: type=1326 audit(2000000272.099:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14683 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f98084403b9 code=0x7ffc0000 [ 695.287081][T14704] 9pnet_fd: Insufficient options for proto=fd [ 695.993541][T14712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 696.457662][T14714] loop4: detected capacity change from 0 to 1024 [ 696.559717][T14714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 696.613356][T14718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 696.688003][T14714] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.4: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 697.082168][T14725] bridge0: entered promiscuous mode [ 697.088409][T14725] bridge0: entered allmulticast mode [ 697.126614][T14389] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 802.825550][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 802.825573][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14735/2:b..l [ 802.825607][ C0] rcu: (detected by 0, t=10502 jiffies, g=76573, q=331 ncpus=2) [ 802.825629][ C0] task:syz-executor.3 state:R running task stack:23408 pid:14735 tgid:14734 ppid:5121 flags:0x00004006 [ 802.825669][ C0] Call Trace: [ 802.825676][ C0] [ 802.825691][ C0] __schedule+0x17e8/0x4a20 [ 802.825730][ C0] ? mark_lock+0x9a/0x360 [ 802.825757][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 802.825777][ C0] ? __lock_acquire+0x1359/0x2000 [ 802.825799][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 802.825823][ C0] ? __pfx___schedule+0x10/0x10 [ 802.825848][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 802.825879][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 802.825904][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 802.825926][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 802.825962][ C0] irqentry_exit+0x5e/0x90 [ 802.825987][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.826007][ C0] RIP: 0010:debug_lockdep_rcu_enabled+0x0/0x40 [ 802.826034][ C0] Code: ca 8b 48 c7 c6 a0 e4 ca 8b e8 8c 65 ca f5 90 0f 0b 90 90 90 eb c6 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 31 c0 83 3d 67 23 20 04 00 74 1e 83 3d d6 54 20 04 00 [ 802.826056][ C0] RSP: 0018:ffffc90014317158 EFLAGS: 00000246 [ 802.826072][ C0] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffff8880200b9e00 [ 802.826085][ C0] RDX: ffff8880200b9e00 RSI: 0000000000000000 RDI: 0000000000000000 [ 802.826097][ C0] RBP: dffffc0000000000 R08: ffffffff8b88ea17 R09: ffffffff8b8969bb [ 802.826111][ C0] R10: 0000000000000002 R11: ffff8880200b9e00 R12: ffffc90014317440 [ 802.826123][ C0] R13: 0000000000000010 R14: ffffea0001a5a780 R15: ffff888021bf3e88 [ 802.826143][ C0] ? xas_find+0xfb/0x960 [ 802.826167][ C0] ? xas_load+0x1a7/0x5c0 [ 802.826198][ C0] rcu_read_lock_held+0xa/0x50 [ 802.826221][ C0] xas_load+0x478/0x5c0 [ 802.826255][ C0] xas_find+0x13f/0x960 [ 802.826278][ C0] ? xas_next_entry+0x38a/0x3d0 [ 802.826305][ C0] next_uptodate_folio+0x33/0xb10 [ 802.826328][ C0] ? mark_lock+0x9a/0x360 [ 802.826347][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 802.826373][ C0] ? filemap_map_pages+0x24f/0x1e70 [ 802.826395][ C0] filemap_map_pages+0x302/0x1e70 [ 802.826442][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 802.826466][ C0] ? handle_pte_fault+0x34b/0x7130 [ 802.826491][ C0] ? __pfx_lock_release+0x10/0x10 [ 802.826509][ C0] ? pte_offset_map_nolock+0x137/0x1f0 [ 802.826537][ C0] ? __lock_acquire+0x1359/0x2000 [ 802.826560][ C0] ? handle_pte_fault+0x2bf5/0x7130 [ 802.826582][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 802.826602][ C0] ? handle_pte_fault+0x2bf5/0x7130 [ 802.826627][ C0] handle_pte_fault+0x3c13/0x7130 [ 802.826665][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 802.826696][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 802.826716][ C0] ? __pfx_handle_pte_fault+0x10/0x10 [ 802.826742][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 802.826785][ C0] ? follow_page_pte+0x292/0x1d90 [ 802.826807][ C0] ? follow_page_pte+0x859/0x1d90 [ 802.826829][ C0] ? __pfx_lock_release+0x10/0x10 [ 802.826855][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 802.826893][ C0] handle_mm_fault+0x10df/0x1ba0 [ 802.826942][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 802.826966][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 802.827000][ C0] ? __get_user_pages+0x5f7/0x1590 [ 802.827024][ C0] ? follow_page_mask+0x10/0x2e00 [ 802.827054][ C0] __get_user_pages+0x6ef/0x1590 [ 802.827085][ C0] ? mt_find+0x62d/0x850 [ 802.827119][ C0] ? __pfx___get_user_pages+0x10/0x10 [ 802.827156][ C0] populate_vma_page_range+0x264/0x330 [ 802.827181][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 802.827201][ C0] ? userfaultfd_unmap_complete+0x30c/0x360 [ 802.827222][ C0] ? do_mmap+0x915/0xfa0 [ 802.827249][ C0] __mm_populate+0x27a/0x460 [ 802.827275][ C0] ? __pfx___mm_populate+0x10/0x10 [ 802.827306][ C0] vm_mmap_pgoff+0x2c3/0x3d0 [ 802.827336][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 802.827358][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 802.827379][ C0] ? do_syscall_64+0x100/0x230 [ 802.827396][ C0] ? ksys_mmap_pgoff+0xdf/0x720 [ 802.827416][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 802.827445][ C0] do_syscall_64+0xf3/0x230 [ 802.827463][ C0] ? clear_bhb_loop+0x35/0x90 [ 802.827484][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.827503][ C0] RIP: 0033:0x7fef7307cf69 [ 802.827524][ C0] RSP: 002b:00007fef73ea90c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 802.827542][ C0] RAX: ffffffffffffffda RBX: 00007fef731b3f80 RCX: 00007fef7307cf69 [ 802.827555][ C0] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 802.827568][ C0] RBP: 00007fef730da6fe R08: ffffffffffffffff R09: 0000000000000000 [ 802.827580][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 802.827591][ C0] R13: 000000000000000b R14: 00007fef731b3f80 R15: 00007ffee4c55a58 [ 802.827620][ C0] [ 803.316948][ C0] rcu: rcu_preempt kthread starved for 10551 jiffies! g76573 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 803.316975][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 803.316984][ C0] rcu: RCU grace-period kthread stack dump: [ 803.316990][ C0] task:rcu_preempt state:R running task stack:26008 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 803.317035][ C0] Call Trace: [ 803.317043][ C0] [ 803.317055][ C0] __schedule+0x17e8/0x4a20 [ 803.317104][ C0] ? __pfx___schedule+0x10/0x10 [ 803.317129][ C0] ? __pfx_lock_release+0x10/0x10 [ 803.317149][ C0] ? __asan_memset+0x23/0x50 [ 803.317178][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 803.317200][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 803.317223][ C0] ? schedule+0x90/0x320 [ 803.317243][ C0] schedule+0x14b/0x320 [ 803.317266][ C0] schedule_timeout+0x1be/0x310 [ 803.317285][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 803.317305][ C0] ? __pfx_process_timeout+0x10/0x10 [ 803.317335][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 803.317360][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 803.317381][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 803.317409][ C0] ? rcu_gp_init+0x126f/0x1650 [ 803.317434][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 803.317453][ C0] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 803.317476][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 803.317494][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 803.317521][ C0] ? finish_swait+0xd4/0x1e0 [ 803.317543][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 803.317566][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 803.317586][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 803.317610][ C0] ? __kthread_parkme+0x169/0x1d0 [ 803.317634][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 803.317654][ C0] kthread+0x2f0/0x390 [ 803.317676][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 803.317696][ C0] ? __pfx_kthread+0x10/0x10 [ 803.317717][ C0] ret_from_fork+0x4b/0x80 [ 803.317741][ C0] ? __pfx_kthread+0x10/0x10 [ 803.317761][ C0] ret_from_fork_asm+0x1a/0x30 [ 803.317800][ C0] [ 803.317807][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 803.317828][ C0] Sending NMI from CPU 0 to CPUs 1: [ 803.317852][ C1] NMI backtrace for cpu 1 [ 803.317872][ C1] CPU: 1 PID: 14727 Comm: syz-executor.0 Not tainted 6.10.0-rc2-next-20240607-syzkaller #0 [ 803.317890][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 803.317899][ C1] RIP: 0010:_raw_spin_lock+0x5/0x40 [ 803.317918][ C1] Code: 00 e8 cf 39 c1 f5 31 ed 89 e8 5b 41 5e 5d c3 cc cc cc cc 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 <48> 89 fb bf 01 00 00 00 e8 de d8 cc f5 48 8d 7b 18 31 f6 31 d2 31 [ 803.317931][ C1] RSP: 0018:ffffc900108bf738 EFLAGS: 00000017 [ 803.317944][ C1] RAX: 1ffffffff1bb9345 RBX: ffff8880b953e8c0 RCX: 0000000000040000 [ 803.317956][ C1] RDX: ffffc9000a79d000 RSI: 000000000003ffff RDI: ffff8880b953f250 [ 803.317968][ C1] RBP: 1ffff110172a7e49 R08: ffffffff818eefd8 R09: 1ffffffff1f5c04d [ 803.317980][ C1] R10: dffffc0000000000 R11: fffffbfff1f5c04e R12: ffff8880b953e8c0 [ 803.317991][ C1] R13: 00000000000071df R14: ffff8880b953f248 R15: dffffc0000000000 [ 803.318003][ C1] FS: 00007f7df956c6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 803.318017][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 803.318028][ C1] CR2: ffffffffffffffe8 CR3: 000000002cd2a000 CR4: 00000000003506f0 [ 803.318042][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 803.318052][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 803.318062][ C1] Call Trace: [ 803.318068][ C1] [ 803.318074][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 803.318093][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 803.318112][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 803.318129][ C1] ? nmi_handle+0x2a/0x5a0 [ 803.318152][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 803.318171][ C1] ? nmi_handle+0x14f/0x5a0 [ 803.318185][ C1] ? nmi_handle+0x2a/0x5a0 [ 803.318200][ C1] ? _raw_spin_lock+0x5/0x40 [ 803.318216][ C1] ? default_do_nmi+0x63/0x160 [ 803.318234][ C1] ? exc_nmi+0x123/0x1f0 [ 803.318252][ C1] ? end_repeat_nmi+0xf/0x53 [ 803.318272][ C1] ? __cgroup_account_cputime+0xd8/0x120 [ 803.318291][ C1] ? _raw_spin_lock+0x5/0x40 [ 803.318308][ C1] ? _raw_spin_lock+0x5/0x40 [ 803.318325][ C1] ? _raw_spin_lock+0x5/0x40 [ 803.318342][ C1] [ 803.318347][ C1] [ 803.318352][ C1] update_curr_rt+0x126/0x560 [ 803.318373][ C1] dequeue_task_rt+0x2c/0x680 [ 803.318393][ C1] __schedule+0x60e/0x4a20 [ 803.318422][ C1] ? __pfx___schedule+0x10/0x10 [ 803.318440][ C1] ? schedule+0x90/0x320 [ 803.318457][ C1] ? __pfx_lock_release+0x10/0x10 [ 803.318477][ C1] ? plist_add+0x3e3/0x490 [ 803.318494][ C1] ? futex_wait_queue+0x27/0x1d0 [ 803.318516][ C1] ? schedule+0x90/0x320 [ 803.318533][ C1] schedule+0x14b/0x320 [ 803.318550][ C1] ? futex_wait_queue+0x27/0x1d0 [ 803.318570][ C1] futex_wait_queue+0x14e/0x1d0 [ 803.318593][ C1] __futex_wait+0x17f/0x320 [ 803.318613][ C1] ? mark_lock+0x9a/0x360 [ 803.318634][ C1] ? __pfx___futex_wait+0x10/0x10 [ 803.318656][ C1] ? __pfx_futex_wake_mark+0x10/0x10 [ 803.318687][ C1] futex_wait+0x101/0x360 [ 803.318708][ C1] ? __pfx_futex_wait+0x10/0x10 [ 803.318732][ C1] ? __pfx_lock_release+0x10/0x10 [ 803.318759][ C1] do_futex+0x33b/0x560 [ 803.318780][ C1] ? __pfx_do_futex+0x10/0x10 [ 803.318795][ C1] ? restore_altstack+0x10c/0x150 [ 803.318815][ C1] ? __pfx_restore_altstack+0x10/0x10 [ 803.318837][ C1] __se_sys_futex+0x3f9/0x480 [ 803.318859][ C1] ? __pfx___se_sys_futex+0x10/0x10 [ 803.318876][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 803.318895][ C1] ? do_syscall_64+0x100/0x230 [ 803.318910][ C1] ? __x64_sys_futex+0x21/0xf0 [ 803.318929][ C1] do_syscall_64+0xf3/0x230 [ 803.318944][ C1] ? clear_bhb_loop+0x35/0x90 [ 803.318962][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 803.318979][ C1] RIP: 0033:0x7f7df887cf69 [ 803.318991][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 803.319004][ C1] RSP: 002b:00007f7df956c178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 803.319019][ C1] RAX: ffffffffffffffda RBX: 00007f7df89b3f88 RCX: 00007f7df887cf69 [ 803.319030][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7df89b3f88 [ 803.319040][ C1] RBP: 00007f7df89b3f80 R08: 00007f7df956c6c0 R09: 00007f7df956c6c0 [ 803.319051][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7df89b3f8c [ 803.319061][ C1] R13: 000000000000004d R14: 00007ffec574a650 R15: 00007ffec574a738 [ 803.319081][ C1]