[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.10.55' (ECDSA) to the list of known hosts. 2020/09/27 19:46:06 fuzzer started 2020/09/27 19:46:06 dialing manager at 10.128.0.105:36589 2020/09/27 19:46:06 syscalls: 3358 2020/09/27 19:46:06 code coverage: enabled 2020/09/27 19:46:06 comparison tracing: enabled 2020/09/27 19:46:06 extra coverage: enabled 2020/09/27 19:46:06 setuid sandbox: enabled 2020/09/27 19:46:06 namespace sandbox: enabled 2020/09/27 19:46:06 Android sandbox: /sys/fs/selinux/policy does not exist 2020/09/27 19:46:06 fault injection: enabled 2020/09/27 19:46:06 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2020/09/27 19:46:06 net packet injection: enabled 2020/09/27 19:46:06 net device setup: enabled 2020/09/27 19:46:06 concurrency sanitizer: enabled 2020/09/27 19:46:06 devlink PCI setup: PCI device 0000:00:10.0 is not available 2020/09/27 19:46:06 USB emulation: enabled 2020/09/27 19:46:06 hci packet injection: enabled 2020/09/27 19:46:06 wifi device emulation: enabled 2020/09/27 19:46:10 suppressing KCSAN reports in functions: '__ext4_new_inode' 'ext4_free_inode' 'find_get_pages_range_tag' 'ext4_mark_iloc_dirty' 'check_mmio_spte' 'audit_log_start' 'do_syslog' 'do_nanosleep' 'do_signal_stop' 'xas_find_marked' 'lru_add_drain_all' 'snd_rawmidi_transmit' 'tick_sched_timer' 'wbt_done' 'shmem_unlink' 'get_cpu_iowait_time_us' 'complete_signal' '__delayacct_blkio_end' 'do_sys_poll' '__xa_set_mark' 'blk_mq_dispatch_rq_list' 'ext4_mb_good_group' 'ext4_mb_regular_allocator' '__xa_clear_mark' 'generic_file_buffered_read' 'evict' 'ext4_free_inodes_count' 'blk_mq_sched_dispatch_requests' 'dd_has_work' 'n_tty_receive_buf_common' '__blkdev_get' 'kvm_mmu_notifier_invalidate_range_end' 'exit_mm' 'alloc_pid' 'expire_timers' 'ext4_writepages' 'do_select' '__mark_inode_dirty' 'generic_write_end' 'futex_wait_queue_me' 'tick_nohz_next_event' '__fsnotify_parent' 'shmem_file_read_iter' '__io_cqring_fill_event' '__add_to_page_cache_locked' '__filemap_fdatawrite_range' 'pcpu_alloc' 'blk_mq_rq_ctx_init' 'snd_rawmidi_poll' 'kauditd_thread' 19:47:42 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x705, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x61561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb, 0x1, 'ipvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6}]}}}, @IFLA_ADDRESS={0xa, 0x5, @empty=[0x4]}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) syzkaller login: [ 130.116190][ T8735] IPVS: ftp: loaded support on port[0] = 21 [ 130.188130][ T8735] chnl_net:caif_netlink_parms(): no params data found [ 130.219168][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.226214][ T8735] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.234107][ T8735] device bridge_slave_0 entered promiscuous mode [ 130.248574][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.256371][ T8735] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.266197][ T8735] device bridge_slave_1 entered promiscuous mode [ 130.291815][ T8737] IPVS: ftp: loaded support on port[0] = 21 [ 130.306847][ T8735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.317815][ T8735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.335646][ T8735] team0: Port device team_slave_0 added [ 130.343839][ T8735] team0: Port device team_slave_1 added [ 130.360324][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.367288][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.393306][ T8735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.410168][ T8735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.417348][ T8735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.443376][ T8735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.475035][ T8735] device hsr_slave_0 entered promiscuous mode [ 130.478738][ T8739] IPVS: ftp: loaded support on port[0] = 21 [ 130.487128][ T8735] device hsr_slave_1 entered promiscuous mode [ 130.553611][ T8737] chnl_net:caif_netlink_parms(): no params data found [ 130.639696][ T8741] IPVS: ftp: loaded support on port[0] = 21 [ 130.640860][ T8735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.668699][ T8735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.678131][ T8735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.686671][ T8735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.704130][ T8737] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.714840][ T8737] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.734574][ T8737] device bridge_slave_0 entered promiscuous mode [ 130.746267][ T8737] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.764582][ T8737] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.772828][ T8737] device bridge_slave_1 entered promiscuous mode [ 130.789093][ T8737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.812959][ T8739] chnl_net:caif_netlink_parms(): no params data found [ 130.818925][ T8743] IPVS: ftp: loaded support on port[0] = 21 [ 130.839643][ T8737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.880875][ T8745] IPVS: ftp: loaded support on port[0] = 21 [ 130.895287][ T8735] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.902348][ T8735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.909569][ T8735] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.916603][ T8735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.950114][ T8737] team0: Port device team_slave_0 added [ 130.977558][ T8737] team0: Port device team_slave_1 added [ 131.003719][ T8739] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.010904][ T8739] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.018675][ T8739] device bridge_slave_0 entered promiscuous mode [ 131.034420][ T8735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.051307][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.059599][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.085942][ T8737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.100416][ T8737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.108663][ T8737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.134572][ T8737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.150450][ T8739] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.157490][ T8739] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.164767][ T8739] device bridge_slave_1 entered promiscuous mode [ 131.183166][ T8739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.196487][ T8739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.220138][ T8741] chnl_net:caif_netlink_parms(): no params data found [ 131.233954][ T3448] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.242993][ T3448] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.251870][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 131.269233][ T8739] team0: Port device team_slave_0 added [ 131.276273][ T8739] team0: Port device team_slave_1 added [ 131.297806][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.305274][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.315281][ T8735] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.329313][ T8745] chnl_net:caif_netlink_parms(): no params data found [ 131.339876][ T8743] chnl_net:caif_netlink_parms(): no params data found [ 131.361375][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.368355][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.394797][ T8739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.415890][ T8737] device hsr_slave_0 entered promiscuous mode [ 131.422390][ T8737] device hsr_slave_1 entered promiscuous mode [ 131.428808][ T8737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.436335][ T8737] Cannot create hsr debugfs directory [ 131.450852][ T8739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.461308][ T8739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.487566][ T8739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.513475][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.521827][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.530454][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.537529][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.551795][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.561020][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.568708][ T8741] device bridge_slave_0 entered promiscuous mode [ 131.579710][ T8743] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.586727][ T8743] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.594608][ T8743] device bridge_slave_0 entered promiscuous mode [ 131.603098][ T8743] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.610470][ T8743] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.618040][ T8743] device bridge_slave_1 entered promiscuous mode [ 131.628883][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.637320][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.645465][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.652496][ T3971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.663490][ T8741] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.670993][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.678842][ T8741] device bridge_slave_1 entered promiscuous mode [ 131.701190][ T8739] device hsr_slave_0 entered promiscuous mode [ 131.708443][ T8739] device hsr_slave_1 entered promiscuous mode [ 131.714854][ T8739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.722511][ T8739] Cannot create hsr debugfs directory [ 131.732155][ T8741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.744839][ T8743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.755509][ T8743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.780551][ T8741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.792607][ T8745] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.800942][ T8745] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.808676][ T8745] device bridge_slave_0 entered promiscuous mode [ 131.819686][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.828170][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.850678][ T8745] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.859340][ T8745] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.866682][ T8745] device bridge_slave_1 entered promiscuous mode [ 131.880235][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.888476][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.896669][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.906355][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.925860][ T8737] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.940253][ T8741] team0: Port device team_slave_0 added [ 131.945882][ T8737] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.962458][ T8743] team0: Port device team_slave_0 added [ 131.970662][ T8743] team0: Port device team_slave_1 added [ 131.977683][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.985517][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.994979][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.003156][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.012760][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.021218][ T8735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.030004][ T8737] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 132.038631][ T8741] team0: Port device team_slave_1 added [ 132.051657][ T8745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.076041][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.084368][ T8737] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 132.104891][ T8745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.120505][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.127824][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.148663][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.155613][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.181958][ T5] Bluetooth: hci0: command 0x0409 tx timeout [ 132.187988][ T8741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.201132][ T8741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.208461][ T8741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.234897][ T8741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.245958][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.253049][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.279190][ T8743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.293457][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.303394][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.319019][ T8739] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 132.332105][ T3448] Bluetooth: hci1: command 0x0409 tx timeout [ 132.339330][ T8743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.346293][ T8743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.372600][ T8743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.383667][ T8745] team0: Port device team_slave_0 added [ 132.400298][ T8741] device hsr_slave_0 entered promiscuous mode [ 132.406679][ T8741] device hsr_slave_1 entered promiscuous mode [ 132.412942][ T8741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.420543][ T8741] Cannot create hsr debugfs directory [ 132.428810][ T8739] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 132.437453][ T8739] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 132.446168][ T8745] team0: Port device team_slave_1 added [ 132.459511][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.468886][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.476808][ T3971] Bluetooth: hci2: command 0x0409 tx timeout [ 132.477719][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.490454][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.507268][ T8739] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 132.515558][ T8735] device veth0_vlan entered promiscuous mode [ 132.525038][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.532327][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.558428][ T8745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.583504][ T8735] device veth1_vlan entered promiscuous mode [ 132.596729][ T8745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.603886][ T8745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.630219][ T8745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.656092][ T3971] Bluetooth: hci3: command 0x0409 tx timeout [ 132.675813][ T8737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.685969][ T8743] device hsr_slave_0 entered promiscuous mode [ 132.692547][ T8743] device hsr_slave_1 entered promiscuous mode [ 132.699192][ T8743] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.706730][ T8743] Cannot create hsr debugfs directory [ 132.717288][ T8741] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.729860][ T8735] device veth0_macvtap entered promiscuous mode [ 132.736773][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.744619][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.753309][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.761602][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.776956][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 132.796841][ T9286] Bluetooth: hci4: command 0x0409 tx timeout [ 132.802975][ T8741] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.814271][ T8735] device veth1_macvtap entered promiscuous mode [ 132.822832][ T8745] device hsr_slave_0 entered promiscuous mode [ 132.831123][ T8745] device hsr_slave_1 entered promiscuous mode [ 132.837442][ T8745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.844964][ T8745] Cannot create hsr debugfs directory [ 132.858721][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 132.866368][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 132.874834][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 132.882440][ T9286] Bluetooth: hci5: command 0x0409 tx timeout [ 132.884437][ T8737] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.896902][ T8741] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.905067][ T8741] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.938234][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 132.948766][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 132.957329][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.964341][ T9286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.974998][ T8743] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 132.988635][ T8743] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 133.009554][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.027926][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.035639][ T8743] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 133.047287][ T8745] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 133.059215][ T8745] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 133.070399][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.078729][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.088362][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.095396][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.103295][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.112042][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.120421][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.137436][ T8743] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 133.149425][ T8745] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 133.158444][ T8745] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 133.166691][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.175567][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.183902][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.192314][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.200708][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.209808][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.217843][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.226035][ T5092] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.235877][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.246520][ T8735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.256893][ T8735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.265569][ T8735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.274938][ T8735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.289608][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.298659][ T3971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.313710][ T8739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.330807][ T8737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 133.342905][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.351493][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.359848][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.367565][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.377552][ T8739] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.416870][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.425251][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.434948][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.442043][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.453641][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.478690][ T8741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.494382][ T8741] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.503963][ T21] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.511933][ T21] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.525341][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.533397][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.541156][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.549625][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.557888][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.564903][ T9286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.572611][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.581545][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.590204][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 133.597817][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 133.605260][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.624933][ T21] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.636951][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.645085][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.653897][ T21] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.661980][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 133.670340][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 133.678964][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 133.687411][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 133.695600][ T9286] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.702636][ T9286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.710198][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 133.718207][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.726563][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.734923][ T9286] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.741971][ T9286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.750053][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 133.758402][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 133.766384][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 133.774616][ T9286] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 133.783002][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.790924][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.801839][ T8737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.815885][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 133.824613][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 133.833199][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 133.841678][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 133.856570][ T8739] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 133.894976][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 133.903234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 133.914148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 19:47:47 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r5 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r5 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r5 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r5 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r5 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r5 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) ftruncate(0xffffffffffffffff, 0x40003) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1}, 0x0) io_uring_enter(r2, 0x80000002, 0x0, 0x0, 0x0, 0x64) 19:47:52 executing program 1: 19:47:52 executing program 4: 19:47:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) ftruncate(0xffffffffffffffff, 0x40003) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1}, 0x0) io_uring_enter(r2, 0x80000002, 0x0, 0x0, 0x0, 0x64) 19:47:52 executing program 1: [ 138.476972][ T37] Bluetooth: hci0: command 0x0419 tx timeout 19:47:52 executing program 3: 19:47:52 executing program 2: 19:47:52 executing program 5: 19:47:52 executing program 4: 19:47:52 executing program 1: 19:47:52 executing program 0: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = syz_io_uring_setup(0x76d1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) ftruncate(0xffffffffffffffff, 0x40003) syz_io_uring_submit(r3, r4, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1}, 0x0) io_uring_enter(r2, 0x80000002, 0x0, 0x0, 0x0, 0x64) [ 138.557772][ T37] Bluetooth: hci1: command 0x0419 tx timeout 19:47:52 executing program 4: 19:47:52 executing program 1: 19:47:52 executing program 3: 19:47:52 executing program 2: 19:47:52 executing program 5: 19:47:52 executing program 0: r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r1 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, 0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, 0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, 0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(0x0, 0x0) ftruncate(r3, 0x40003) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1}, 0x0) io_uring_enter(r0, 0x80000002, 0x0, 0x0, 0x0, 0x64) 19:47:55 executing program 1: 19:47:55 executing program 4: 19:47:55 executing program 2: 19:47:55 executing program 5: 19:47:55 executing program 3: 19:47:55 executing program 1: 19:47:55 executing program 2: 19:47:55 executing program 5: 19:47:55 executing program 4: 19:47:55 executing program 3: 19:47:55 executing program 5: 19:47:55 executing program 0: r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(0x0, 0x0) ftruncate(r3, 0x40003) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1}, 0x0) io_uring_enter(r0, 0x80000002, 0x0, 0x0, 0x0, 0x64) 19:47:55 executing program 1: 19:47:55 executing program 2: 19:47:55 executing program 4: 19:47:55 executing program 5: 19:47:55 executing program 3: 19:47:55 executing program 1: 19:47:55 executing program 2: 19:47:55 executing program 4: 19:47:55 executing program 0: r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(0x0, 0x0) ftruncate(r3, 0x40003) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/99, 0x63}], 0x1}, 0x0) io_uring_enter(r0, 0x80000002, 0x0, 0x0, 0x0, 0x64) 19:47:55 executing program 5: 19:47:55 executing program 1: 19:47:55 executing program 3: 19:47:55 executing program 4: 19:47:55 executing program 2: 19:47:55 executing program 5: 19:47:55 executing program 2: 19:47:55 executing program 4: 19:47:55 executing program 3: 19:47:55 executing program 1: 19:47:55 executing program 0: r0 = syz_io_uring_setup(0x76d1, &(0x7f0000000000), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r2 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, &(0x7f0000000100)=0x0) r3 = memfd_create(&(0x7f00000003c0)='/s\xcb2\x1d\b\x00\xe8\xdc[\x17\x8b\xb2\xf7W\xf0hW\xdd\xbd\xc8k\xc0\xa5velindf\r(\x90\xe0\xe0\r\xa6R\xb4\xb8\xa1\x98\xb43\xa7,\xa6<\x13\xfe\xa8\xc3\x01\xbd\x96:\xe2\x9aH\x97R\xad\xcd_\xa1i\xf8\x00\bbQ\xd8g\xb2-\xa1s\xd5\x0f\x8e\xe93\xf2\xd6\x03\'\xb0(\x8f\xaf\fNlTwwHd\t7\n$\x03\x89\xf7\xb6\xcd\xd0\xd2\x86i\xb6o\x96\x1e\xad\x18j\x8f\x9b\xd1\x8a\xda\\;\xb6\xf4\'y\x1f?\xc5\x90\xcc\xe9\xdc\xa7\a\xe2Jg\xf2\x89\xc5\xa8\xa5 %\f\xe7U\x19Y\xe9\x0f\xbaR\xc7\x87\x18\xc8\x87n\x1dS\xa6\xb8j\xa3\xf3\x85\amR:p\x03\xa3\xdctZ\x13\x81\xe2\xbaq\xb5\x88\xbd{UfW\xa8\tDH\xefm\xaa\x10\t)\xa3\xcf\x1cE\x02\xaf\xe4\xeep`\x91\xeep\xf4(P\x9c\xa2\x7fT2L0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf000}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x8, 0x2, [@TCA_FW_POLICE={0x4}]}}]}, 0x34}}, 0x0) [ 157.475942][T11890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. 19:48:11 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@loopback}, 0x14) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r1, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)='\n', 0x1}], 0x1}}], 0x1, 0x2400c06d) 19:48:11 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket(0x0, 0x803, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x100000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000500100000f000000000000000100000005000000000004000040000020000000dbf4655fdbf4655f0100ffff53ef010001000000dbf4655f000000000000000001000000000000000b0000008000000018000000c20500002b02", 0x66, 0x400}, {&(0x7f0000010100)="000000000000000000000000244b8e9b57f04b59aa229cc218853f95010040", 0x1f, 0x4e0}, {&(0x7f0000010200)="010000000000050040", 0x9, 0x560}, {&(0x7f0000010300)="020000000300000004", 0x9, 0x800}, {&(0x7f0000011500)="ed41000000080000dbf4655fdbf4655fdbf4655f000000000000040040", 0x1d, 0x2080}, {&(0x7f0000012400)="504d4d00504d4dff", 0x8, 0x20000}], 0x0, &(0x7f0000012f00)) [ 157.507002][T11894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. [ 157.521839][T11916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 19:48:11 executing program 2: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b276062f763e9b200a00080001c0", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4092, 0xc462, 0x0, 0x0, 0xf4acd1e9c4fa5544) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d0", 0x52, 0x40800, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r2, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000080), 0x4) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, 0xffffffffffffffff) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) recvmsg(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x17}, 0x100) [ 157.556235][T11894] netlink: 40027 bytes leftover after parsing attributes in process `syz-executor.5'. [ 157.573553][T11894] device lo entered promiscuous mode [ 157.615581][T11930] IPVS: ftp: loaded support on port[0] = 21 [ 157.616346][T11894] device tunl0 entered promiscuous mode [ 157.651668][T11894] device gre0 entered promiscuous mode [ 157.664265][T11894] device gretap0 entered promiscuous mode [ 157.673719][T11894] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 157.692878][T11934] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue 19:48:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xf000}, {}, {0xf}}, [@filter_kind_options=@f_fw={{0x7, 0x1, 'fw\x00'}, {0x18, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team0\x00'}]}}]}, 0x44}}, 0x0) 19:48:11 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="f4"], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast1, @ipv4={[0x0, 0x0, 0x8], [], @multicast2}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2}) [ 157.706051][T11934] ext4 filesystem being mounted at /root/syzkaller-testdir345202481/syzkaller.s92A4B/187/file0 supports timestamps until 2038 (0x7fffffff) [ 157.738510][T11949] device lo entered promiscuous mode [ 157.752357][T11949] device tunl0 entered promiscuous mode [ 157.759688][T11949] device gre0 entered promiscuous mode [ 157.766425][T11949] device gretap0 entered promiscuous mode [ 157.772952][T11949] device erspan0 entered promiscuous mode [ 157.779222][T11949] device ip_vti0 entered promiscuous mode [ 157.786416][T11949] device ip6_vti0 entered promiscuous mode [ 157.793233][T11949] device sit0 entered promiscuous mode [ 157.800524][T11949] device ip6tnl0 entered promiscuous mode [ 157.807861][T11949] device ip6gre0 entered promiscuous mode [ 157.814454][T11949] device syz_tun entered promiscuous mode [ 157.820868][T11949] device ip6gretap0 entered promiscuous mode [ 157.827896][T11949] device bridge0 entered promiscuous mode [ 157.834160][T11949] device vcan0 entered promiscuous mode [ 157.843052][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.851401][T11949] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 157.861521][T11949] device bond0 entered promiscuous mode [ 157.867983][T11949] device bond_slave_0 entered promiscuous mode [ 157.874275][T11949] device bond_slave_1 entered promiscuous mode [ 157.906636][T11949] device team0 entered promiscuous mode [ 157.912175][T11949] device team_slave_0 entered promiscuous mode [ 157.927211][T11949] device team_slave_1 entered promiscuous mode [ 157.934029][T11949] device dummy0 entered promiscuous mode [ 157.948616][T11949] device nlmon0 entered promiscuous mode [ 157.969163][T11949] device caif0 entered promiscuous mode [ 157.979257][T11949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 158.005929][ T21] tipc: TX() has been purged, node left! 19:48:12 executing program 1: bpf$MAP_CREATE(0x5000000000000000, &(0x7f0000000000)={0xa, 0xd, 0xc, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x37) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x24004005) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) 19:48:12 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000), 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) write(r0, &(0x7f0000000080)="202a1600e7796743", 0x8) 19:48:12 executing program 5: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b276062f763e9b200a00080001c0", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4092, 0xc462, 0x0, 0x0, 0xf4acd1e9c4fa5544) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) [ 158.144221][T11980] IPVS: ftp: loaded support on port[0] = 21 19:48:12 executing program 3: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) r1 = dup(r0) getrandom(&(0x7f0000000080)=""/4121, 0x1019, 0x0) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) 19:48:12 executing program 4: unshare(0x6c060000) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b276062f763e9b200a00080001c0", 0x1c, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000400)=""/4092, 0xc462, 0x0, 0x0, 0xf4acd1e9c4fa5544) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB="02"], 0x1}}, 0x0) r1 = socket$inet6(0x10, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000000c0)="1ba0000010001d0200fdc5cbdd041d8e828003000000000001a7960fab0fc8da78031c6660b08f00003f71aced466b4644434a88fed7d75725e1069e42dc4b3844e5fb82bb02fec770967c740c00000000d02830b5a4c01a92317320f0c0a5adb7b5b8bf255f1a8dffa8", 0xfe0b, 0x40800, 0x0, 0xffffffffffffff95) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0xa, &(0x7f00000000c0)=0x71, 0x4) bind$inet(r3, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) ioctl$sock_inet_SIOCDARP(r2, 0x8953, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000002240), 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000180), 0x4) sendto$inet(r3, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860005cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) recvmsg(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1}, 0x100) 19:48:12 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@private=0xa010100, @empty}, 0xc) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x200003f8, 0x0, &(0x7f0000000100), 0x5, &(0x7f0000000100), 0x0, 0xffffff7f}], 0x492492492492805, 0x0) 19:48:12 executing program 0: open(&(0x7f0000000440)='./file0\x00', 0x110000141042, 0x0) timer_create(0x3, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f00000011c0)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) mount(&(0x7f0000000640)=ANY=[@ANYBLOB='[d:'], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='ceph\x00', 0x0, 0x0) [ 158.266180][T12013] libceph: resolve 'd' (ret=-3): failed [ 158.275866][T12013] libceph: Failed to parse monitor IPs: -3 [ 158.281933][T11980] device lo entered promiscuous mode [ 158.290156][T12014] IPVS: ftp: loaded support on port[0] = 21 [ 158.301483][T11980] device tunl0 entered promiscuous mode 19:48:12 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffffffffffffffd]}, 0x0, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = dup3(r4, r0, 0x0) io_setup(0x3f, &(0x7f0000000080)=0x0) io_submit(r6, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r5, 0x0}, 0x0]) [ 158.317724][T11980] device gre0 entered promiscuous mode [ 158.335741][T11980] device gretap0 entered promiscuous mode [ 158.341597][T11980] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. 19:48:12 executing program 1: bpf$MAP_CREATE(0x5000000000000000, &(0x7f0000000000)={0xa, 0xd, 0xc, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x37) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x24004005) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) 19:48:12 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="1cfe8b00", @ANYRES16=0x0, @ANYBLOB="000000000000000000000f10000008000300", @ANYRES32], 0x4}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff830a0000000000001b", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 19:48:12 executing program 3: clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0x4161, 0x0) 19:48:12 executing program 2: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r1 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4ba0ff) fallocate(r0, 0x0, 0x0, 0x3) 19:48:12 executing program 1: bpf$MAP_CREATE(0x5000000000000000, &(0x7f0000000000)={0xa, 0xd, 0xc, 0x1ff, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000], 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x40) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000000c0)={0xe, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}, 0x37) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x10) setsockopt$sock_void(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x24004005) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={0x0}}, 0x4) 19:48:12 executing program 3: [ 158.571155][T12058] binder: 12054:12058 ioctl 4161 0 returned -22 19:48:12 executing program 4: 19:48:12 executing program 4: [ 158.665993][ T28] audit: type=1804 audit(1601236092.658:2): pid=12067 uid=0 auid=0 ses=4 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir922063991/syzkaller.atlF9o/207/cgroup.controllers" dev="sda1" ino=15944 res=1 errno=0 19:48:12 executing program 3: 19:48:12 executing program 4: [ 159.034202][ T3301] ================================================================== [ 159.042282][ T3301] BUG: KCSAN: data-race in inc_node_page_state / release_pages [ 159.049787][ T3301] [ 159.052087][ T3301] write to 0xffffea00043da980 of 8 bytes by task 12061 on cpu 0: [ 159.059777][ T3301] release_pages+0x402/0x8f0 [ 159.064345][ T3301] __pagevec_release+0x96/0xc0 [ 159.069091][ T3301] truncate_inode_pages_range+0xcf4/0xf70 [ 159.074798][ T3301] truncate_pagecache+0x4f/0x70 [ 159.079635][ T3301] ext4_setattr+0xb05/0xec0 [ 159.084123][ T3301] notify_change+0x7d7/0xa80 [ 159.088690][ T3301] do_truncate+0xe0/0x120 [ 159.093002][ T3301] path_openat+0x1a31/0x20a0 [ 159.097566][ T3301] do_filp_open+0xbd/0x1d0 [ 159.101962][ T3301] do_sys_openat2+0x33b/0x500 [ 159.106618][ T3301] __x64_sys_creat+0x62/0x80 [ 159.111187][ T3301] do_syscall_64+0x39/0x80 [ 159.115581][ T3301] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 159.121445][ T3301] [ 159.123753][ T3301] read to 0xffffea00043da980 of 8 bytes by task 3301 on cpu 1: [ 159.131372][ T3301] inc_node_page_state+0xe/0xc0 [ 159.136194][ T3301] test_clear_page_writeback+0x408/0x480 [ 159.141798][ T3301] end_page_writeback+0xa7/0x110 [ 159.146709][ T3301] ext4_finish_bio+0x429/0x490 [ 159.151446][ T3301] ext4_release_io_end+0x98/0x200 [ 159.156443][ T3301] ext4_end_io_rsv_work+0x306/0x360 [ 159.161612][ T3301] process_one_work+0x3e1/0x9a0 [ 159.166431][ T3301] worker_thread+0x665/0xbe0 [ 159.170989][ T3301] kthread+0x20d/0x230 [ 159.175035][ T3301] ret_from_fork+0x1f/0x30 [ 159.179415][ T3301] [ 159.181713][ T3301] Reported by Kernel Concurrency Sanitizer on: [ 159.187839][ T3301] CPU: 1 PID: 3301 Comm: kworker/u4:3 Not tainted 5.9.0-rc6-syzkaller #0 [ 159.196215][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.206246][ T3301] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 159.212988][ T3301] ================================================================== [ 159.221017][ T3301] Kernel panic - not syncing: panic_on_warn set ... [ 159.227572][ T3301] CPU: 1 PID: 3301 Comm: kworker/u4:3 Not tainted 5.9.0-rc6-syzkaller #0 [ 159.235946][ T3301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 159.245977][ T3301] Workqueue: ext4-rsv-conversion ext4_end_io_rsv_work [ 159.252703][ T3301] Call Trace: [ 159.255967][ T3301] dump_stack+0x10f/0x19d [ 159.260283][ T3301] panic+0x207/0x64a [ 159.264159][ T3301] ? vprintk_emit+0x44a/0x4f0 [ 159.268815][ T3301] kcsan_report+0x684/0x690 [ 159.273306][ T3301] ? kcsan_setup_watchpoint+0x41e/0x4a0 [ 159.278830][ T3301] ? inc_node_page_state+0xe/0xc0 [ 159.283828][ T3301] ? test_clear_page_writeback+0x408/0x480 [ 159.289607][ T3301] ? end_page_writeback+0xa7/0x110 [ 159.294693][ T3301] ? ext4_finish_bio+0x429/0x490 [ 159.299601][ T3301] ? ext4_release_io_end+0x98/0x200 [ 159.304772][ T3301] ? ext4_end_io_rsv_work+0x306/0x360 [ 159.310115][ T3301] ? process_one_work+0x3e1/0x9a0 [ 159.315111][ T3301] ? worker_thread+0x665/0xbe0 [ 159.319843][ T3301] ? kthread+0x20d/0x230 [ 159.324071][ T3301] ? ret_from_fork+0x1f/0x30 [ 159.328641][ T3301] ? x2apic_send_IPI+0x63/0x70 [ 159.333378][ T3301] ? __mod_memcg_lruvec_state+0xc0/0x180 [ 159.338982][ T3301] ? __mod_memcg_lruvec_state+0xc0/0x180 [ 159.344598][ T3301] kcsan_setup_watchpoint+0x41e/0x4a0 [ 159.349941][ T3301] ? __mod_memcg_lruvec_state+0xc0/0x180 [ 159.355546][ T3301] inc_node_page_state+0xe/0xc0 [ 159.360369][ T3301] test_clear_page_writeback+0x408/0x480 [ 159.365975][ T3301] end_page_writeback+0xa7/0x110 [ 159.370883][ T3301] ext4_finish_bio+0x429/0x490 [ 159.375620][ T3301] ext4_release_io_end+0x98/0x200 [ 159.380617][ T3301] ? ext4_end_io_rsv_work+0x2b0/0x360 [ 159.385959][ T3301] ext4_end_io_rsv_work+0x306/0x360 [ 159.391130][ T3301] process_one_work+0x3e1/0x9a0 [ 159.395969][ T3301] worker_thread+0x665/0xbe0 [ 159.400545][ T3301] ? finish_task_switch+0x8b/0x270 [ 159.405634][ T3301] ? process_one_work+0x9a0/0x9a0 [ 159.410634][ T3301] kthread+0x20d/0x230 [ 159.414681][ T3301] ? process_one_work+0x9a0/0x9a0 [ 159.419697][ T3301] ? kthread_blkcg+0x80/0x80 [ 159.424271][ T3301] ret_from_fork+0x1f/0x30 [ 159.429963][ T3301] Kernel Offset: disabled [ 159.434275][ T3301] Rebooting in 86400 seconds..