last executing test programs: 2m7.430506749s ago: executing program 0 (id=224): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x5, 0x3, 0xfffffffc) syz_emit_ethernet(0x52, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x1c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0xc, 0x0, 0x0, {[@generic={0x4, 0x5, "5eee37"}]}}}}}}}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) syz_emit_ethernet(0x66, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x4, 0x2f, 0x0, @local, @rand_addr=0x64010102}}}}}, 0x0) 2m6.253161058s ago: executing program 0 (id=230): mmap(&(0x7f0000fee000/0xf000)=nil, 0xf000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000002800)=ANY=[], 0xfc, 0xc41, &(0x7f0000001b80)="$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") r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x74) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x802, r1, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb000000000000080245"], 0x0) 2m5.560154859s ago: executing program 0 (id=235): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) 2m5.004952417s ago: executing program 0 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) 2m4.291622772s ago: executing program 0 (id=244): r0 = gettid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000004c0)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r1, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002380)=""/4087, 0xff7}], 0x1}, 0x102) sendto$inet6(r1, &(0x7f00000001c0)="a6", 0x1, 0x840, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 2m3.785562277s ago: executing program 0 (id=247): r0 = syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000d40)="01", 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m2.027876233s ago: executing program 32 (id=247): r0 = syz_io_uring_setup(0x35c9, &(0x7f0000000380)={0x0, 0x1ffffc, 0x10100, 0x0, 0x2}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r3 = io_uring_setup(0x2ed8, &(0x7f0000000280)={0x0, 0x6842, 0x800, 0x2, 0x12}) io_uring_register$IORING_REGISTER_IOWQ_AFF(r3, 0x11, &(0x7f0000000d40)="01", 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r0, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1400, 0x1}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m43.787572377s ago: executing program 3 (id=322): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="bf16000000000000b7070000ff030000487000000000000050000000000000009500000000000000e83d24a394a293b3bd23212fb56fa54f0b71d0e6adfefc41d86b60717142fa9ea4318123741c0a0f168c1886bf0fccf8d56ccb659427cf8593dbe3a2a3ad358061011fbc5ba1f07318988e6e01a41cc0990d0dc840a23f72eca0b2d89fc474c2a10000000077beee1cebf45fab73962fa8f6296b32a8343881dcc7b1b85f3c3da4cd36414e90a61965c3de4b3449abe802f5ab3e89cf6c662ed4048d3b3e22278d0054ce21fa41181a9580cfca031e5388ee5c9a7ddd04201f5200001fcadf95e5a4725837074e468ee23fd2f73902ebcfcf49822775985bf31b715f588cb211624f40401691721715f46e0500000000000000a663739a190a4e825c908c0abc85d457ec5a57cb706eef32a3ed12d63c9c4c508530e173650a8a8f2a9c81bcffe437bccbe158024d8d4939e6fd9adc43f0f4b049218db92bf466e934330ed79bc9f626d68b0000600057d14854eef851bc8c30f5d0df6b94ea0b852d495085ff4eabaac9606f0497958c2c357a7124a69f6770ea6702bc53896a15fad5e55c64efd217450a975221b20d78e445e3da74a3c1e59bae44546bde4ac6de55a480f3ad5dc0f2d1818b696492285f60d914283f8d687b0bdb46261277671bba2c550bfef679bddf38ab35eaaf0268c4efa45b56a188a9195044a222ec06bb49784d5608d87c4832e4305bf8889e5db2a70f6a83d4b3cdc12546d2e9f6720dec489b6276856de6d895704ba3e8ee12c8121ffc4f5d2ae03f0227dcc4f38699d3db16f69ed45e918b07ce58bf576e253364fe0000000084f897400d4f5503a6e9ea4a480e3221f3c247ee8c55e487eaa25a7689689c9c305da4b0181f0f653fec399fcc0cc800e82bde039cc29c19b538c76e65642875bddbef61e5985751d9ebd37d2f32375357b5d2b4dc24baa6a7010038380f7029a292f1ad05000000e4e801a819aef69d081e2cacaa8ad1b4ca6df5dc37962ebc5337379e00645b6d2bec249c0612510000000000a7060d8d9b9ad109b62d1dab0eec6beabc76d765b9caf70900000399772ddfe89be4338e70d0ecfed537780a31fcaf4acaf9bd3711a4359d68ec71b0693ede07e7d18e797697901fbae4a9d9966b68eadae75ef1b8931b0818a57e5136fb8c61d73b17d8fd55c2b8d321a6cba8743114fcff01e5c10200c512000800009a021d377e477ea807cc00919ee8bfbd090034f67609cfde8877b5bb072572b421d6b1fdae83e5e250190628d02d01f978323fe36685e652ceb218a9cc9e125a4880faccaf5ac2345f20b1ee403885790500d0bc75c7e95d23904dc446e0201aafea0d3f4cc0cf285ccd000000000100005aee4199a34686905441c1fa62ed20328a10690432f59a4d3e05bd00997ea2b6f5213cb883d05b620f31869f6cce80f1ae09009ed7e3c5f3aa61bfd240cb9726bc512ba0eb1f68579c76144feb0100809f12bcf79c4d57f66703c2aee08e52de3eff160623e1af555dc7481128ed0bab22dcb6e5b6ac5e4010eaf2510fa440aabfdc80c77108c769ed2d666c555c6c38b30899a688d96a6c6dc0dd4309f6548765d3f53261b4890aa004e7f667a230b22bc6e248bf56b219d9a547b6e1c5077c9ba463329323b53910e7358b4d0c6882c590cf25e4d044a6afb10a070f285e3c94ed405aa8dc41718dd3f4bf474868538aad9a23f85a707e325c10a9f22e37c4213d0ca2910726de8e62d2e3ae7f64e40c7af3dc00bab70cf607869c5a11a03bce8aa43fa010348bc2fb420ba5e344fcdcb302548e571157d323f5fd535800284d32ffff000088ccd685f07309101a3196b705479897f4c9d97c4c7b77db7b15bfb4305d5e954a34385418e665af882a7d505323070929b228bc94b70300000066dab8c4e63debff174621a0ac7dd85b14cb7616ca23f044bd0ccd1c79292c3aa8f6e4a1c27315ef8d55781edbe368f72aeb2f48256131aaab707451c14747dfa3bb5f8725a98f6d3c797573f18810bf378e38107ece5cb7cf3b98975e9254248af60de2f04e2429d9b6eba525fd1b1b665f77710fa494e2b619c975acd535fc78696fc980573c35e9916f0000000000002c8ee5ec55faffffffffffffffcd59cc0600000053d0a1f4ea4477022c9f376b3191efeb46be3c174fb24009379bbc949fd2923715540556450f12d1645177ce3eca0d65d17deff51a024f0180000000006100499e829bda469048c70e5968375feb39e6918e591a384851ba3079ad9c376bdaf0650e212eb4185cbbb6c0dc0e699afc34ca3b9a307cd2519cd9b192d678492ea2228ff0817d68f97b18402d271036067c141b911c4e0207e2c9d37ac203f440e1a065a2d227c6ec860c0104000000000000fe7144ec680c0dac7b5906a6197c8173080c9ab3ecb72820f04a42e4a43ee3f325f93edb3a204b9c9dc8953375e37c83876f248d91f166676b54781c6855c5e067ab2c2c6d22b20a703d68d77312333deff80883cb5a25c738f4e7cbb075e10f5c36396156abb221adebb9303342bfa2b745a5e045d5db847e4810270ed1c5bbb1548ec3184ff9b8ed1687333d0e0412d452ba6b390199bd684ff458d6c8114833efde87215e5f9569d92d24579f3ef473bce24e61eb21336ad441eea93cbcb69d2156b9b6e3000000000000000000fc411d2eadcadc7c0a2c12410e4b9d634807f2a6f1c3a13508e274ecef5cfccb707a1640973973fd2d1d60138d9b7a778827fd07fbd093a0ba779dcd32556613e1fac161825da91acde7fa964c689b1f0ea96047a98260270c3a3ccb2142b074db79aa88614663ff33f9966502a2361e49aabe58eb086c5827dd9d92fa4ff0c0e8b949d585f2cbc111de478905cb37f3cbfb019c6daace508b926718506a577234468f9279a52360d1a80b88b4eb1cda949ca77b6ec43bdf5f5a400989705746b86b400947891b33d591ec5ea9ae45983273f62027998d72f83625021a72e27e0449fa154ade55071546d4000000000000000000000000000000002f907c5db9c967a1f86c57bb5062fed7c37ec16a7e62b6e370c3c5a32adee9032367814394a7a7fd12c44b81fb5ac2ad92220a72aa3355e894cbefe344a6b5eb4c25128d5427a640faae401eccf3aca4294410461e946010c50f9ee556b38eae0b252ef288397672bbbd17e5306589f93dc130b6be5b19dfb2462348355ef24762509cf29becacf8515abe299b8a7dfd585f5dbf7578bfdbfa37deeb872c3291b59349238add315cd18e6f4196b404e48955657d680511c7ba7f5e0f9d97d649583190c78015aaf4db05aa2a6cc9d00084ce958406e09fe508a0ee5feb2d34f48d87000000000000001108780004ec696f618c20771a7ae436d733f603f20c9189567b63d47fae002e616969d888a418d139a25b11c0da7aecb8c14f1a879f7b985ab634b0f5cdb2090ad2c336e9a28289247ef4f3cfcafa393927d27711ed0543a5e8ec6c1c62082549791f75fccd54582f990234496954e6e54bcbb90f2756912ab7e511a55a9e0512e5c1c10bcd76ee4799af611179a39bd0c0323cae1aaaaaa8dafb55bca104ada3252c5d9de5b9cdb6217c35ca3d28b1d8b9d2fa79376c13167a9ef1b1f4b7509debbeacc153ca8bea4a0a65ee1d1d20a9106499f0bf7f416b051e835d790ac978b90143d9125224f74b6167f7a967c7e33eb5f43570b9f3c91371968a30e528968b233d0396db424e5fd73d380318e9676d074dd5ce552a222e250f9f6d0bdd9e46e7f22d9abfd4573b57e3b52d407b464b0146ea15560a2ce034b1623fecc84842928223d17ce4ab31ef4c2a9f9caebf65341fa3da1bbae7972097e24603b9db8edc25a152bd39af179eab23ed555040c2bbb89ea22c08b97264b3616a41abfad0ab12a79574c60cf1841ea45f10e9438e55e1e0eb645200993b08833bb14517b0d0e5ba72bdacd92d57b6029129c95ab0a93857c7205e8450b27aee5e684ece77f53112873f40247a998cc896ab4d55573c7a7ef2936a29425cab46cd4fdd1452ea8429c63c74d5673f5e4d47d1b001d0d3a9e1d5c840ab37a69cb30d17ff7591f01549e552dc43b672e0feff94408171d682565dc2d84476297c6901040000cb9f7f2eb690d7a032c09f0a3d48663fe5ece30f592d71755dd6cbfac96016a2ecd4e499ce9adce6e59db0494fa25117a2bc13275c9a94a3532c1b8417e9ed5e6cd5f51f8ccc878ba73305ad19b0cf05625439cdf688d33c8fd6cf52c5c5685444b65eb918884727d3a780bdac17d447745e4accd85d3aca4d63127bb3a58095cffa08a6cecae329dd5f47552c40b560b05e962363e99300d61931ddd97444c2bae02edb26383cb96ee7d2742d24dc7e9b6dac831674ae09b7d180ebb30b9221480ad78706dadf7ca3540eb6c6c43dc7e31b2c8d188f28d6ab10d3c0c97b9f6b5feb9abeb6a801975c0bbab0b1fed7485f2fca1730906a6dc1914386118646dab2618582c4ce0a8ce7a1a3ca7d56f6ca8c7d43cad0116c70751a0db051d9adc4ab34dafbca31fecd9191d38fa011a4c1fc19df0b9aac3a0de17dc01b413c4d4eccf9eb1cd90569508fc6479111544807f11dad193a170ac290f28d3e7f702c5bced7ed90c3251897446fdbb1195136d9092168e2deedb3e0afdf0f543363fbf8759df07270981c0bd7260998963e45a2c84e8b82ddfa98dab68a23cfb2ffa4fcc4ebcd38f273e9bdb240f77eb51e259bb88dc383b19107af39ffcc708a1278b3e53c2130a9c7150593794f8f22ae9b2ff0d46c8d175bf9ff227870f1dcecd5b564d20230ac32a10982cf1bbe5ca15ed6d85b2c447f3fb0872ea6170352fd4c76c75941d1c3684a466c81a5892e9f56c0b512be586381c2390aaf93347d318aa5de4322b11088435730c69bc1cfd96d869803a3113b2a33dbf7973434ba9e4ec15c0423bb384975498ff56bf8b51237dadf6264532fdca7c44e485e4c9b695cd000"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0x956e, 0x7, 0xda, 0x39c6}, 0x26, [0x9, 0x4, 0x1, 0x2, 0x8, 0x0, 0x7, 0x0, 0x8, 0x7, 0x5, 0x6, 0x4, 0x8001, 0x612, 0x1, 0x5, 0xd1ed, 0x0, 0x2, 0xeb17, 0xc1f, 0x7, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x5, 0x9, 0x25b, 0x7fff, 0xc3f1, 0x1, 0x7fff, 0x80000000, 0x8da2, 0x1, 0x7, 0x3, 0x5, 0x9, 0x5, 0x1, 0x3, 0x9, 0x2, 0x3, 0x7, 0x7, 0x234, 0x40, 0x9, 0x0, 0x6b08, 0xddfe, 0xaf64, 0x1, 0xa, 0xfffffffe, 0x7f82, 0x5, 0x9], [0xfe7, 0xb6, 0xffff0001, 0x8, 0x1, 0x1, 0x6, 0x8000, 0x5, 0x4, 0x2, 0x401, 0x9, 0x5, 0x4, 0x101, 0x8, 0x800, 0x8, 0x6d9, 0x3, 0xa81e, 0x5b8609fc, 0xc, 0xe0, 0x4d, 0x6, 0x1, 0x4, 0x3ff, 0x81, 0x5, 0x5, 0x1, 0x4, 0x1ff, 0xfc, 0x10001, 0xe, 0x3, 0x89a, 0x4, 0x6, 0x0, 0x0, 0x2, 0x4, 0x8, 0x85, 0x80, 0x80, 0xf, 0x0, 0x9, 0xfffffffe, 0x1, 0x81, 0x9, 0x1, 0x5, 0x8, 0x1, 0x5, 0x4], [0x8, 0x10, 0x1, 0x1, 0x9, 0x6, 0x3, 0x4, 0x2, 0x2, 0x2, 0x3, 0x72f, 0x1, 0x9, 0x1000, 0x7, 0x7f, 0x5, 0x2, 0x1, 0xffff8001, 0x7, 0x56faa404, 0x7, 0x401, 0x7, 0x4, 0x8, 0x7fff, 0x1ff, 0x7, 0x5, 0x7, 0x31, 0x7, 0x5, 0x0, 0xd0b, 0x7, 0x1, 0x8, 0x9, 0xb3, 0xfffffffd, 0x7fff, 0x5, 0xc, 0x3, 0x9, 0xa, 0x8, 0x10000, 0x80000001, 0x8, 0x5, 0x7, 0xffffffff, 0x3, 0x3, 0x80, 0xf, 0x5, 0x5], [0x200, 0x8, 0x4, 0x3a8, 0x7, 0x7ff, 0x1, 0x2, 0x800, 0x8, 0x2, 0x5, 0x2, 0x0, 0x0, 0x7, 0x5, 0xfffffff8, 0x6922, 0xfffffff7, 0x80, 0x200, 0x8, 0x5, 0x4, 0x0, 0xe84, 0xff, 0xfffffff7, 0xd, 0x9, 0xffffff7f, 0x50000, 0x7, 0x5, 0x8, 0x80000000, 0x40, 0xf, 0x2, 0x1000, 0x7, 0x8, 0x7f, 0x4, 0x5, 0xfe, 0x3, 0xa, 0x5, 0x8, 0x7, 0x7, 0x3ff, 0x4, 0x9, 0xfffffffd, 0x8e, 0x0, 0x8001, 0x71ba, 0x8, 0x10, 0x9]}, 0x45c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b041000e0ff030002004788aa96a13bb1000000000088f7ffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1m42.823952015s ago: executing program 3 (id=324): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}], [], 0x6b}}) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) chmod(&(0x7f0000000080)='./file0\x00', 0x8) 1m41.972742667s ago: executing program 3 (id=327): r0 = add_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x1}, &(0x7f00000002c0)="e51b2731", 0x4, 0xfffffffffffffffc) keyctl$read(0xb, r0, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xfe98, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x4}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000080)=0x1c) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x6, 0x0, 0x3, 0x9, 0x9, 0x180}, &(0x7f0000000100)=0x20) 1m41.266610836s ago: executing program 3 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000c8, &(0x7f00000005c0)=ANY=[@ANYBLOB='codepage=874,nodots,dots,tz=UTC,dots,nodots,codepage=862,dots,dots,check=strict,allow_utime=000000000000000000001,sys_immutable,nodots,nfs,quiet,dots,nodots,nodots,debug,usefree,tz=UTC,flush,nodots,\x00'], 0xfd, 0x1bf, &(0x7f0000000940)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m40.635507898s ago: executing program 3 (id=333): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000700)='./file1\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r1}, './file1\x00'}) 1m40.024648599s ago: executing program 3 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./bus\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) finit_module(r2, 0x0, 0x0) 1m37.746887464s ago: executing program 33 (id=335): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./bus\x00', 0x800810, &(0x7f0000000000)={[{@enospc_debug}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734d2FpAqhUbJJahw38Xptk4daqqwpVSPSNOuGBlURxcZek8ULdmxTYhQiYxPRCEFpg5R8KMIoimo+QK1ARFJAuEhxhMojoioKIFBoDVEQKSWJSBOkUM3ee2bvnLvz8GONl/5+knfOzP887zw859475wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP8Ph75y1d82iz/82/Oefu7Cicv2rrvw5WvOO/3xECZnH+/Iwh3919868fM7z71r731rbrvnyPkf7M3L5fEwUP3Tmd+5LtZ6ZGkI93aE0J0GVg5mgZ78/mCs712DIZwW5gK1ElP9WYm04fD9vhD2h7lArarv9YUwWAhc8MRDD95YTdzSF8KyEEIlbePZStZGXxo4qzcL9KeBbd1Z4FdvZGqB73ZmAThu8c1Qe9EfnKzPMDJ/uQavv54T1rE3Vzq8rpgYaZzvZ+sWuFMFvekDk8f1tJWqY0GU3h6HvNsWwbuttJ1v9rQVv0jl31DemAtVQufmqS0br5zZFR/pDGNjXY1qWqDn+alXv7TpaNKL5nUYOzByQl6HNz227M6uFZ969J6Vy1488KF9Lx1vN39U2KTF9EKrhPw1t2iex2jC58kiePuVviWN+tIVQtjy+d/7dLN4af4/0nz+H1/O8bazLnes9fWhbG4eHxmMiVeGsrk5AAAALBqLYa/ptrEHPlYoPlxJ6ivN/0fbO/4fD/nnk/lstIdCmJhN7BsO4YzZx7PAHbG5S4ZDeO9sarI+sC4JHArhnbOJFbWqkhJLYonRJPCToTwwkQQOx8BkEvhWDNycBK6LgYNJYFMMHEoC58ZAmK4fx+8P5eNoO9AXAxuyjXgwnoXwi6HYWrKtnqlVBQAAcILks8Oe+ruFcx2ON0OcXh7sa5UhnoHdMEMlqSGdwdamVQ1r6G5VQ2erGmrj3tN8+KWaO1rVXDoNo6M+w62//JvPhCZK8//x5vP/yjwd6Sgd/w9h/ezfmLszj8zU4hsm6zIAAAAAx2Hgf5//ZrN4af4/0d75/3GfSFchc3gk7obYOhzCeH0gq/YPy4HsqPdAHgAAAIDFoHY8vnYsfDq/zU7RTufT5fyTR5k/HvifmDd/76H7NzTrb2n+P9ne+f/99bdZJw7HXnxtOIQlhcAPYi+rgVmjMfDjj9cH8vEfjhvghlhVfmJCraobYokNMTCeBPY3KvHDWokz6gP5k1VrfF9tHNN5iUIAAAAATrq4OyAel4/n/7/vN2uualauNP/fcHTn/8/Og0un988MhLCqO4Su9IcBj/RnCwPGwGBHnnigP6urK63q2v4QzqkOLK3q+Xz9/+50jcEn+rKqYuCM9x149axq4pt9IawqBp783O0friZ2JYFa43/ZF8J7qqNNG//OkqzxnrTxry8J4d2FQK2qS5aEUG2sN63qoUp+HYO0qn+uhPC2QqBW1UcqIewOACxS8b/SzcUHd+6+euvGmZmpHQuYiPvw+8KW6ZmpsU3bZjZXGvRpc9LnumWMri2Pqd0r3zyTL1H02bvXD7aTrv1OcLzYVr4fv3TiYH4/fhfqmR3nmp66u2vTIX/g/eUmQuGbVKMhdy7wkPuLlcw9iaX6Y/7eMBCWXLlzasfYFzfu2rVjdfa33exrsr/xMFO2rVan26p/vr618fJouFpW4li31fJiJat2Xb591c7dV6+cvnzjpVOXTl2x+iNrxs8eXzv+0bNXVUc1nv1tMdTl81WdDPWN29sc1wkc6pndhUpOxqeGhITEYktsG1je9P/k0vx/e/P5f/zUiZ/8+foMjY7/j8TD/Nnjc4f5N8TA/naP/480OppfOzFgNAnsiYE9DvMDAADw1hAn+XFvZtwr/dMV33mxWbnS/H9Pe7//P0Hr/9eWrj+/0TL/K2KJ8Ubr/6fL/NfW/9/TaP3/dJn/2vr/+9+E9f+vrAWSTfIL6/8DAABvBSdv/f+Wy/unFwgoZWi5vH96gYBShpbL+Ld7gYCjXv//2f/8q/8OTZTm/ze3N/+3cD8AAACcOr78Z1f9TrN4af6/v735/8lf/y80Ov9/tFFgstHCgNb/AwAAYJFqtP7fyPX9FzcrV5r/H2xv/h9Pu+isyx1rfX0oW9MupGvavTJU+8kAAAAALA6dYWysp828dSujrjv2Np/KlwJtli56/k+OHN35/4fam//X/S7jpseW3dm14lOPvn7PymUvHvjQvpfmjv8DAAAAC6fd/RIAAAAAAAAAAAAAAMCb7/n/2Lu2Wbz0+/+wfvbxRr//j9f9i78veHtd7lhr6/X/8vsXfPKu3bNLFj4yFML7i4Gte7eeFvJr8y8vBh68aMU7qom9aYn7nzv3hWri4jTwiZWnv1ZNnJMENsRFEt+ZBuJVFV9bmgTi8or/ngbi9jiYBnrzwFeXZuPoSLfVTwezbdWRbqunB0MYLgRq2+rewayNjnSAtySB2gC/kAbiAP88D3SmvbprIOtVDAzGorcNZL0CAOCUFb8F9oQt0zNT4/ErfLw9s7v+NqpbsuzacrUdbTb/TL402WfvXj/YTror/S46d63xnlCpDmF16etqMUvH7ChPTC0tNt3bGwy51WpvnQ3KpY520/U2HlFfNqKxTdtmNve0HPja1lnWdLfMsro02Slm6ZzdpG3U0kZf2hhRm9umjS7H+51hbKwryfUHMTgS6rR6RbT7e/3iOn+NXgXFPFcc2ferZvWV5v8j7c3/K8VxvZZfDGBPvLLe3w1b5h8AAAAW1lfX/fob8d9nrn/4yWZ5S/P/0fbm/3EPVn4oONvbcShe/3/fcAizl9YfyQJ3xOYuGQ7hvbOpyVgiu6D++bHEeBa4I+4wWRFLbJisr2pJDBxMAj8ZygOHksDhGMj3UhwI+a6cvx8K4cOzqfX1JbbHEiNJ4NMxMJoExmJgPAksjYGJJPDy0jwwmQT+LQbCdP22untpvq0AAACORj7P6qm/G9J53sHuVhk6WmXob5Whs1WGSqsMjUYR7387ZuhJTl7pKGTqSWvtS2opZYgXwz/qfpUyhB/W50wLlpqO5x/UzjfoqM9w38e6K6GJ0vx/vL35f3/9bdb64Tj/n7v+Xxb4Qeze1+Kp46Mx8OOP1wfyHQOH42T3hlpVk3mJfNJ+QywxEQOjSWB7DEwkgQ3r88D+d9QH8pl2rfF9tcan8xKFAAAAAJx0cQdB3E0T5/+37fzKQLNypfn/RHvz/9jeQLGx62KtR5aGcG/HXG9qgZWDWSDuxxiMP49/12AIpxV2cNRKTPVnJXqThsP3+7JfqPemVX2vL/vxQbx/wRMPPXhjNXFLXwjLCntfam08W8na6EsDZ/Vmgf40sK07C8Q9P7XAdzuzABy32l7B+ILKT3WpGZm/XIPX31vlmqDp8Er7QOfJN99vrhZKaYdrvk+15uietqb7bzlhSm+PQ95ti/HdNuLdVvwilX9DeWMuVAmdm6e2bLxyZld8pPhL1pIFep6Lv1JtJ30CXod7jr23rVXSDownHx/j85eb/3XYEau76bFld3at+NSj96xc9uKBD+17qe1uNBB/KPzQNf86+KPC5l1olZC/5hbd58mkz5NF8d9A8u4e9bSFENa//PUbmsVL8//J9ub/3cntrF/HjblzOIQPFDbuI3Hz//Fw9jlYCGSfkm8rB7JD7v811PCTEwAAAE602u6O2v6C6fw2OyE8nSeX808eZf64v2Ji3vzt9rv/ry9a1ixemv9vaD7/X5J00/F/x/9ZII7/z+tU3xW9JH1gz3Htii5Vx4Jw/H9ep/q7zfH/eTn+7/j/fBz/b8Hx/3md6k9b6VvSdl+6Qggv/tEDTzeLl+b/29ub/1v/b/5F+2rr/21otP7f9kbr/+2x/h8AALCgGiw0l87zSqv3lTKkq/eVMrRcILDlEoPW/zvq9f9eOPPZ34QmSvP/Pe3N/+PLYaDY+mJZ/290fYOqbo6B7RYGBAAA4FTUaAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb677/uF/NjeLP/zb855+7sKJy/auu/Dla847/fEQpmcf78jCHf3X3zrx8zvPvWvvfWtuu+fI+R+s5OV68tvfrcsda319KIT9hUcGY+KVoeqducAFn7xrd3c18chQCO8vBrbu3XpaNfGtoRCWFwMPXrTiHdXE3rTE/c+d+0I1cXEa+MTK01+rJs7JAx1pd/9xadbdjrS7Ny4NYbgQqHX3sqX1VdXa+NM80Jm28U+DWRsxMBiLfmMwayMGZmKJ6SUhrOoOoSut6uFKVlVXWtW/VLKqutKqvlwJ4ZwQQnda1XO9WVXd6cgf782qioEz3nfg1bOqif29IawqBp783O0fria+kARqjf9Fbwjvqb5k0sa/3ZM13pM2fktPCO8OIfSmJX7ZnZXoTUs83x3C2wqBWuOf7w5hd+AtIX741H2i7dx99daNMzNTOxYw0Zu31Re2TM9MjW3aNrO5kvSpkY5C+o1rj33sz7z6pU3V28/evX6wnXR3Xq5ntstreururj3Vex/71V+sZO75KNUf8/eGgbDkyp1TO8a+uHHXrh2rs7/tZl+T/e3Ko9m2Wr1YttXyYiWrdl2+fdXO3VevnL5846VTl05dsfoja8bPHl87/tGzV1VHNZ79PRFDvf3kD/XM7kIlJ+MDQEJCYrElOus+3cZP9Q/y0hf9uY72hMrsB3RpWlHM0jE7yhMx6HXHOOJj+Z7SckSrSxOHUpY182S5tj7L2tJkYq6WvizL7Pe60uSw2Fjn7CaN9zvD2FhXo+0wUn+3uHl/dhyb96l807WbBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRg9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//7IeJCA=") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0xfffff, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) finit_module(r2, 0x0, 0x0) 1m20.328935624s ago: executing program 4 (id=404): open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r0 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) fcntl$setlease(r0, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) 1m19.807432944s ago: executing program 4 (id=406): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = gettid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f0000000180)="1000000000000000290000003b000000", 0x10) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 1m18.765601608s ago: executing program 4 (id=411): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB='data_checksum=crc32c,journal_transaction_names,norecovery,inodes_32bit,nocow_enabled,norecovery,background_compression=lz4,reconstruct_alloc,error=ro,errors=continue,uid>', @ANYRESDEC, @ANYBLOB=',euid>', @ANYRESDEC, @ANYBLOB=',pcr=00000000000000000044,uid>', @ANYRESDEC, @ANYBLOB="2c6d6561737572652c736d61636b66737472616e736d75c5653d402f2c00"], 0x1, 0x59b5, &(0x7f0000006a00)="$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") creat(&(0x7f00000002c0)='./file0\x00', 0x0) 1m14.091486972s ago: executing program 4 (id=425): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x81901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) r3 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 1m12.746048893s ago: executing program 4 (id=431): r0 = getuid() syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX=r0], 0x1, 0x522, &(0x7f0000000a80)="$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") r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x78) io_setup(0x5ff, &(0x7f0000000040)=0x0) io_submit(r3, 0x1a, &(0x7f0000001d00)=[&(0x7f0000000080)={0x2000000, 0x0, 0x0, 0x0, 0xf00, r2, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m12.20911996s ago: executing program 4 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r4, 0x407, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) splice(r3, 0x0, r0, 0x0, 0x2008484c, 0xb) write$binfmt_elf64(r2, 0x0, 0x0) 1m10.106069872s ago: executing program 34 (id=433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r4, 0x0, 0x6a) splice(r1, 0x0, r4, 0x0, 0x8ec3, 0x0) fcntl$setpipe(r4, 0x407, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000500)=""/137, 0x89}], 0x1) splice(r3, 0x0, r0, 0x0, 0x2008484c, 0xb) write$binfmt_elf64(r2, 0x0, 0x0) 9.117507554s ago: executing program 5 (id=640): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00'}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) 8.386709587s ago: executing program 7 (id=641): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='virtio_transport_alloc_pkt\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000c953c4ce0d4a11ac00", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000240), &(0x7f00000002c0)='%+9llu \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 7.731570035s ago: executing program 5 (id=645): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r4 = open(&(0x7f0000000600)='./file1\x00', 0x103942, 0x36cb6ec6cb24f419) sendfile(r4, r3, 0x0, 0x80000000) 7.610715766s ago: executing program 7 (id=647): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x18, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000700)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0}) 7.125121857s ago: executing program 5 (id=650): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x400, &(0x7f0000000100)=ANY=[], 0x1, 0x55b2, &(0x7f0000009a00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 6.415569538s ago: executing program 6 (id=652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0xa2e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x4000, 0x2d0}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x13dbe9e83b7cabcb, 0x31, 0xffffffffffffffff, 0x0) 5.379809123s ago: executing program 1 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 5.038018904s ago: executing program 6 (id=657): r0 = getpid() r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) write$cgroup_pid(r1, &(0x7f00000000c0)=r0, 0x12) close(r1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/cpuset.cpus\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/devices.allow\x00', 0x1, 0x0) 4.845741528s ago: executing program 1 (id=658): socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x400}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2) 4.654549951s ago: executing program 5 (id=659): bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 4.159477303s ago: executing program 2 (id=660): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000400)={r4}) 4.136831517s ago: executing program 6 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x23) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 3.784143724s ago: executing program 1 (id=662): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000000)='map_files\x00') openat$cgroup_ro(r2, &(0x7f0000000340)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 3.647171182s ago: executing program 7 (id=663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 3.526861729s ago: executing program 2 (id=664): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000050) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @null, @rose, @rose, @default, @bcast, @null, @rose]}, 0x0, 0x80000) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) 3.51880667s ago: executing program 6 (id=665): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000680), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) fallocate(r1, 0x0, 0x1, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) recvmmsg(0xffffffffffffffff, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fallocate(r0, 0x8, 0xc00, 0x2000) clock_gettime(0x0, &(0x7f00000000c0)) 2.064842367s ago: executing program 2 (id=666): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)='|', 0x1}], 0x1}}], 0x1, 0x4008014) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x12, 0x0, 0x0) 1.905745274s ago: executing program 7 (id=667): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB]) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x0) stat(&(0x7f0000000840)='./file0/../file0\x00', 0x0) lchown(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) 1.639539514s ago: executing program 1 (id=668): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000640)=ANY=[@ANYRESHEX, @ANYRESHEX], 0xa) 1.442949641s ago: executing program 2 (id=669): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r0, 0x2ff8) r2 = dup3(r1, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r3}) 1.289106322s ago: executing program 6 (id=670): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="be"], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x48, r1}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x2}) futex(0x0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x4000000) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 1.252293073s ago: executing program 7 (id=671): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f0000000480)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)='~', 0x1}, {&(0x7f0000000940)="5d704178597abc854594e5579ee771dfcd32030114511816a7636c13811a69bc2fa927cded1c15807783418a3a11b5cee35b4852ff9774c9d44e2a7dafd8c75dfecdbad8889cf7ccd9bca313f8208dae75d2ce19c25063a8308ec3bef025547e629f27dba0a40866b0ccb5ad3e1a998e14aa125a21facc59b482b39d29a6e197201cdb78fcfd6efaa701d4ccbb4ef683d2e46849cc98851480695a51b2fd42f2c8346649f205d5e8b359e9f12ae9d943ed8624313205a324d822f0e388037e471fd8ede04a4e8286ded23dc737c912200c30cd5bb34513e0c704f794e6afc3a6d09bac7ca631a37ce33039b645e567e89751d464f57d66acc2c9e3bfb03b039168d75ad5c0eca636085064e39b3cf009e6ef4c12232fe2183dd78550ec6035620ea3e09da2a26b12822877b8b9d74bb860618816006a79f71e121793d9e44769f9fa263bd40398edb72c68852b17fc47f63ca62f109bb39388926baa4f4f848ca6518fd2a13fcf894cef519afc7aed10d2df3cc6a6b4dfd09f4aa20f7b94ecd3285eaf8f97c232210966b272843ca41652fcd3774511873d12d60af9d2c7d1ceff7423b40aa15197df0c31c17751d0c105563b69a8da0e8fd35a18e543433b5f8f01378c985761b477bf24b23f1e45a95ab9da7c4bd7ee8aab8537aaf01a149532462ae335583799b3b824e5eb10bf72ddc7d55b32fffb8ec9a2a0949fa0eee604874750b75f23536352bd3bfe9ded0e4bfa9fb53567236ac94acf84a21a30677e8656111d203b9993a52f120700c6833ec5226f6e0fa12c1ac47139b6191cfff72b0ed74d97b99578952a981eb4d5e26431d3c2c1f7a5217dcce71aedcdaf5ab738b500aacd20f8286dea0a91c12e52bfaa53a424b95576ecb903d2b565361dbafaad29e3bb355653e0d5dd213163d02f71b0ae260c8c077033e3614a4b9aa2e30dd45c133dde61fab5ea031a607547a0ce8ee6046e4a8226a3ca21e7cbd033612c32dc0db141be5c890756ffdcd25009a15b598764b116362a5c4d5920b665c53632d679b9d1958c8051f3f9e69ee77a9b90f77bba6db7020e09d6e32d0388a64411c86008e8afe8b394cb7d79e4db6c28b87a555a84fc755335453e7ce40ce639daea03b8ee013c0712064db53b3d984ce109563000029d8b3916c1cba6961eea42c8a0128b845d547bb71f1d01b350cb8f0455b3437c5e5c55dad321463ebabf0793ae672dad72e1b08256ded79549044bd82f8ce55ed0adbed66ac7233df59f48f54690ccd89f6472bdaa011e967f4310ad945cb353696a74aec2689a5ccb56ad85b1bff94333d8b80e79479391de893de5f8c6d166f4665f3a539eec1c9930a13025d4f79672773dc79bd5dca3139ef3d990ec81e009ff9982ebecb0fbaeb830f31cba86ba7de99de08afd37096299ad78e801f7e46b967924bacbb59e5c9d4f9a99cd524cc433cf8128b4ef08dfe2adbaa36f97bc090198d70fb9d873dca3b551d2b70efcbb9a06756483263fc6c0b526c1f143998674b10221624a6d84c22f16628dc9b4bac2712526813d845ef44574c89ba15526fee81b570d03053a981c47647806a7ce1b975378c12f913959743cfbd1d2f6f84166539d8745561c9f1568f86a25790400c0c6d7304a6102180eb704e8bde79c109e28d6c60015c28d1b5e454df12ce893039263974aff8d9e186e7c56e0760f1bf3a6dc29a14ac9938ae7b219bff9d4df70f1fb82f1acc7ecd4c6ea7b4be4507649f32cd2f2969dc0c8d694c643d5c1dedcbab34ebcdf6c5f6757ffa8c1f6ee604be72c249f1a1637f5c1b5c663f19a569a93843012556cea835409e34f78ef8f54b64cf8e7513512bfba6be42ef446115898b4e109e21438fd3cb583cd452617e75f951be9eb76f9962fe09386cf19d867aae9bf4ac40915baaad1cf45ccc2c49855532a0ae4c86fbda67cb14b8908bbc965943be8702ef31371a1e9747cfa0461d6d05cce16cb144477f5e9d30efd0a48b408d8c5dea2fda86c99f96dc3053e1682917dc7694c44e1afc98f6c1a3c17c7bd46d87a51e15291701189ca50883e6ed6b3a9d605be9532c6d6a9045258c09e4a84b3beea4e146cba73987790a792b6dab81ebfe74c10e11b56b753ea48c233f4f44b6971daae6d5c334719ac3f358d9e224eab88361ae41817f9ebf4cfa66fc52fbfb57ea4531cee88862d5757f990ed32714dac850e1aa929007ac1f02d56f08b299cfaf028eb50a7edc537f3df94438564dcb89b452c19f63c3d4a2ec4f8715ccd244b8524717f31d777f26693fc22769e5da66258af5377241b09ff9245c0094333e9c676296115146e558ba193d81e6daec514e345e528b0e530170079c55af79b94d6803a056938835982af0c691753464aa0d1140afa63ae278577633d03ce02255e91b9aa4b6be5931924321fca4addb5ea", 0x6c1}, {&(0x7f00000004c0)="0f", 0x1}, {&(0x7f00000001c0)='F', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000600)="e7", 0x1}, {&(0x7f0000000800)="e12b", 0x2}, {&(0x7f0000001940)='aL', 0x2}, {&(0x7f0000001a00)="11", 0x1}, {&(0x7f0000001b00)='o', 0x1}, {&(0x7f0000001bc0)="c3", 0x1}], 0x6}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001dc0)="b6", 0x1}, {&(0x7f0000001e80)="ae", 0x1}, {&(0x7f0000001ec0)="05", 0x1}, {&(0x7f0000001f00)="823e", 0x2}, {&(0x7f0000001f80)="af", 0x1}], 0x5}}], 0x4, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.115536995s ago: executing program 1 (id=672): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x40000) 850.907986ms ago: executing program 2 (id=673): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000200)={r1, 0x0, 0xfffffffe}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000400)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r5, 0x3, r0}) 740.517103ms ago: executing program 5 (id=674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x802) 467.397258ms ago: executing program 6 (id=675): accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @private1}, &(0x7f0000000500)=0x1c, 0x800) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 467.181744ms ago: executing program 7 (id=676): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x800}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 226.691575ms ago: executing program 2 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x3665, &(0x7f0000000100)={0x0, 0x0, 0x2, 0xfe, 0xfffffffd}, 0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') 46.057782ms ago: executing program 5 (id=678): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x3, 0x0, @void}, 0x62) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) 0s ago: executing program 1 (id=679): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000040)='./file1\x00') open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 176.763742][ T5770] cgroup: Unknown subsys name 'net' [ 176.913627][ T5770] cgroup: Unknown subsys name 'cpuset' [ 176.931545][ T5770] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 223.530154][ T5770] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 224.462988][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 224.472141][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 228.345245][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 228.369674][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.409629][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.477416][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.520851][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.530306][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 228.568989][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 228.578498][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 228.595209][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 228.604365][ T5794] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 228.613316][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 228.625890][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 228.643058][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 228.670573][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 228.687289][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 228.696234][ T5794] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 228.701394][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.709343][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 228.711905][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 228.728832][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 228.736561][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 228.743465][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 228.745826][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 228.754919][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.769838][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.792157][ T5794] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.804007][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 228.812970][ T5794] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 228.822499][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.834467][ T5794] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 230.003539][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 230.231871][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 230.511208][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 230.588150][ T51] Bluetooth: hci0: command tx timeout [ 230.749540][ T51] Bluetooth: hci2: command tx timeout [ 230.826413][ T51] Bluetooth: hci1: command tx timeout [ 230.842841][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 230.985357][ T5084] Bluetooth: hci3: command tx timeout [ 230.991076][ T5084] Bluetooth: hci4: command tx timeout [ 231.189214][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 231.361613][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.371566][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.379654][ T5791] bridge_slave_0: entered allmulticast mode [ 231.389505][ T5791] bridge_slave_0: entered promiscuous mode [ 231.416595][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.424947][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.432663][ T5787] bridge_slave_0: entered allmulticast mode [ 231.442012][ T5787] bridge_slave_0: entered promiscuous mode [ 231.472551][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.480372][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.488231][ T5791] bridge_slave_1: entered allmulticast mode [ 231.497245][ T5791] bridge_slave_1: entered promiscuous mode [ 231.578199][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.589404][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.597561][ T5787] bridge_slave_1: entered allmulticast mode [ 231.606596][ T5787] bridge_slave_1: entered promiscuous mode [ 231.791744][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.901085][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.911781][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.919782][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.927605][ T5800] bridge_slave_0: entered allmulticast mode [ 231.936995][ T5800] bridge_slave_0: entered promiscuous mode [ 232.010030][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.091284][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.100705][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.108666][ T5800] bridge_slave_1: entered allmulticast mode [ 232.117634][ T5800] bridge_slave_1: entered promiscuous mode [ 232.135341][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.188348][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.196411][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.204469][ T5798] bridge_slave_0: entered allmulticast mode [ 232.213776][ T5798] bridge_slave_0: entered promiscuous mode [ 232.453051][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.461057][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.469927][ T5798] bridge_slave_1: entered allmulticast mode [ 232.479302][ T5798] bridge_slave_1: entered promiscuous mode [ 232.495077][ T5791] team0: Port device team_slave_0 added [ 232.546735][ T5787] team0: Port device team_slave_0 added [ 232.618620][ T5791] team0: Port device team_slave_1 added [ 232.635912][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.654623][ T5787] team0: Port device team_slave_1 added [ 232.690084][ T5084] Bluetooth: hci0: command tx timeout [ 232.766014][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.833373][ T5084] Bluetooth: hci2: command tx timeout [ 232.844300][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.852132][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.862229][ T5793] bridge_slave_0: entered allmulticast mode [ 232.870550][ T5793] bridge_slave_0: entered promiscuous mode [ 232.891352][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.901981][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.910047][ T5084] Bluetooth: hci1: command tx timeout [ 232.910299][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.923556][ T5793] bridge_slave_1: entered allmulticast mode [ 232.932593][ T5793] bridge_slave_1: entered promiscuous mode [ 233.022000][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.029383][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.055922][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.073548][ T5084] Bluetooth: hci4: command tx timeout [ 233.077795][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.079257][ T5084] Bluetooth: hci3: command tx timeout [ 233.133655][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.140810][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.167248][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.211362][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.219569][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.246100][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.321212][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.328624][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.355044][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.372950][ T5800] team0: Port device team_slave_0 added [ 233.437448][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.472788][ T5800] team0: Port device team_slave_1 added [ 233.495171][ T5798] team0: Port device team_slave_0 added [ 233.555375][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.699993][ T5798] team0: Port device team_slave_1 added [ 233.781488][ T5787] hsr_slave_0: entered promiscuous mode [ 233.791465][ T5787] hsr_slave_1: entered promiscuous mode [ 233.814179][ T5791] hsr_slave_0: entered promiscuous mode [ 233.823996][ T5791] hsr_slave_1: entered promiscuous mode [ 233.832517][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.841558][ T5791] Cannot create hsr debugfs directory [ 233.879355][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.886772][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.913300][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.002250][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.009857][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.036605][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.124513][ T5793] team0: Port device team_slave_0 added [ 234.168962][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.176724][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.203329][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.264986][ T5793] team0: Port device team_slave_1 added [ 234.288233][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.295641][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.321965][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.644137][ T5800] hsr_slave_0: entered promiscuous mode [ 234.654094][ T5800] hsr_slave_1: entered promiscuous mode [ 234.662571][ T5800] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.670458][ T5800] Cannot create hsr debugfs directory [ 234.679204][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.686583][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.713079][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.730394][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.737825][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.764360][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.776883][ T5084] Bluetooth: hci0: command tx timeout [ 234.903592][ T5084] Bluetooth: hci2: command tx timeout [ 234.978272][ T5798] hsr_slave_0: entered promiscuous mode [ 234.988622][ T5798] hsr_slave_1: entered promiscuous mode [ 234.997536][ T5798] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.003499][ T5084] Bluetooth: hci1: command tx timeout [ 235.005383][ T5798] Cannot create hsr debugfs directory [ 235.143483][ T5084] Bluetooth: hci4: command tx timeout [ 235.149157][ T5084] Bluetooth: hci3: command tx timeout [ 235.385661][ T5793] hsr_slave_0: entered promiscuous mode [ 235.395661][ T5793] hsr_slave_1: entered promiscuous mode [ 235.404591][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.412904][ T5793] Cannot create hsr debugfs directory [ 235.992191][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.112760][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.195827][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.215588][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.234084][ T5791] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.263687][ T5791] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.382500][ T5791] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.460150][ T5791] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.612711][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.669054][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.718077][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.739974][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.833757][ T51] Bluetooth: hci0: command tx timeout [ 236.946790][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.983721][ T51] Bluetooth: hci2: command tx timeout [ 237.001787][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 237.078692][ T51] Bluetooth: hci1: command tx timeout [ 237.148648][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 237.178471][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.200132][ T5793] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.224221][ T51] Bluetooth: hci3: command tx timeout [ 237.229917][ T51] Bluetooth: hci4: command tx timeout [ 237.279832][ T5793] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.438928][ T5793] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.524986][ T5793] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 238.049173][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.077519][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.242485][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.282552][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.317643][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.381286][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.389117][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.493005][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.500834][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.517779][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.525684][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.640974][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.737700][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.757420][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.765286][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.872281][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.893626][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.901373][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.063667][ T3660] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.071358][ T3660] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.087440][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.095057][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.110545][ T3660] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.118755][ T3660] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.452758][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.467801][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.680667][ T5800] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.736749][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.825514][ T4083] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.833946][ T4083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.967883][ T4083] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.975755][ T4083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.559930][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.655946][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.969885][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.192211][ T5791] veth0_vlan: entered promiscuous mode [ 242.208743][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.273691][ T5787] veth0_vlan: entered promiscuous mode [ 242.367584][ T5791] veth1_vlan: entered promiscuous mode [ 242.468146][ T5787] veth1_vlan: entered promiscuous mode [ 242.588374][ T5800] veth0_vlan: entered promiscuous mode [ 242.659033][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.785574][ T5800] veth1_vlan: entered promiscuous mode [ 242.858394][ T5791] veth0_macvtap: entered promiscuous mode [ 242.912738][ T5787] veth0_macvtap: entered promiscuous mode [ 242.923545][ T5798] veth0_vlan: entered promiscuous mode [ 242.963060][ T5791] veth1_macvtap: entered promiscuous mode [ 243.021001][ T5787] veth1_macvtap: entered promiscuous mode [ 243.109241][ T5798] veth1_vlan: entered promiscuous mode [ 243.239630][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.269866][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.281871][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.298561][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.314255][ T5800] veth0_macvtap: entered promiscuous mode [ 243.350439][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.411059][ T5791] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.420513][ T5791] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.429904][ T5791] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.439081][ T5791] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.486544][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.498318][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.514463][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.531271][ T5800] veth1_macvtap: entered promiscuous mode [ 243.617706][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.629581][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.641198][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.651138][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.709529][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.720469][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.730677][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.741535][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.756875][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.836352][ T5798] veth0_macvtap: entered promiscuous mode [ 243.911901][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.924420][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.935993][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.951870][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.966742][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.978944][ T5798] veth1_macvtap: entered promiscuous mode [ 244.166379][ T5800] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.175665][ T5800] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.184876][ T5800] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.194035][ T5800] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.220631][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.231474][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.241718][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.252550][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.262756][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.275418][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.292548][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.468926][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.481457][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.492293][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.505235][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.515598][ T5798] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.526560][ T5798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.541407][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.827710][ T5798] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.837141][ T5798] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.846413][ T5798] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.855609][ T5798] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.506448][ T5793] veth0_vlan: entered promiscuous mode [ 245.642194][ T5793] veth1_vlan: entered promiscuous mode [ 246.027947][ T5793] veth0_macvtap: entered promiscuous mode [ 246.089116][ T5793] veth1_macvtap: entered promiscuous mode [ 246.318710][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.330004][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.340337][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.352706][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.363558][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.374671][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.384945][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.395763][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.410565][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.672657][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.685072][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.695339][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.706191][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.716442][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.727250][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.737427][ T5793] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.750910][ T5793] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.768671][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.953890][ T5793] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.963092][ T5793] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.972821][ T5793] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.982293][ T5793] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.800769][ T4083] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.809752][ T4083] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.098072][ T2981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.106496][ T2981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.351317][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.359574][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.525827][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.534035][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.619906][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.629183][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.774838][ T3746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.782945][ T3746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.997615][ T5791] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 252.276964][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.285376][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.523948][ T3909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.532042][ T3909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.938803][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 253.050385][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 253.599082][ T3660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.608896][ T3660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.892669][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.901207][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.169355][ T5962] udevd[5962]: failed to send result of seq 10623 to main daemon: Connection refused [ 254.804307][ T6000] evm: overlay not supported [ 254.860218][ T6003] Zero length message leads to an empty skb [ 254.860916][ T29] audit: type=1804 audit(1739166007.622:2): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5" name="/newroot/0/bus/bus" dev="overlay" ino=26 res=1 errno=0 [ 254.961044][ T29] audit: type=1326 audit(1739166007.712:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 254.984119][ T29] audit: type=1326 audit(1739166007.712:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 255.310805][ T29] audit: type=1326 audit(1739166007.782:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 255.333904][ T29] audit: type=1326 audit(1739166007.782:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 255.356486][ T29] audit: type=1326 audit(1739166007.782:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 255.385670][ T29] audit: type=1326 audit(1739166007.792:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 255.988792][ T29] audit: type=1326 audit(1739166008.302:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 256.011748][ T29] audit: type=1326 audit(1739166008.302:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b4958cde9 code=0x7ffc0000 [ 256.345263][ T6010] loop1: detected capacity change from 0 to 40427 [ 256.412501][ T6010] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 256.439627][ T6010] F2FS-fs (loop1): heap/no_heap options were deprecated [ 256.469693][ T6010] F2FS-fs (loop1): invalid crc value [ 256.505103][ T6010] F2FS-fs (loop1): Found nat_bits in checkpoint [ 256.789147][ T6010] F2FS-fs (loop1): Start checkpoint disabled! [ 256.803097][ T6010] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 257.096886][ T6027] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_page of f2fs_new_inode_page+0xb6/0x100 [ 257.107668][ T6020] syzkaller0: entered promiscuous mode [ 257.107768][ T6020] syzkaller0: entered allmulticast mode [ 258.483829][ T6033] loop2: detected capacity change from 0 to 32768 [ 258.501293][ T6033] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.20 (6033) [ 258.550293][ T6033] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 258.561658][ T6033] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm [ 258.573853][ T6033] BTRFS info (device loop2): using free-space-tree [ 258.646078][ T1125] kworker/u8:6: attempt to access beyond end of device [ 258.646078][ T1125] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 258.661888][ T1125] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 258.670814][ T1125] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 258.679049][ T1125] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 258.686440][ T1125] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 259.200833][ T6048] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 259.245717][ T6044] loop0: detected capacity change from 0 to 512 [ 259.369325][ T6044] ======================================================= [ 259.369325][ T6044] WARNING: The mand mount option has been deprecated and [ 259.369325][ T6044] and is ignored by this kernel. Remove the mand [ 259.369325][ T6044] option from the mount to silence this warning. [ 259.369325][ T6044] ======================================================= [ 259.670102][ T5800] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 259.711434][ T6044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.727522][ T6044] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.984050][ T29] audit: type=1800 audit(1739166012.742:11): pid=6044 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.22" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 260.288357][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.474523][ T6063] syz.3.27 uses obsolete (PF_INET,SOCK_PACKET) [ 261.813555][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 262.006503][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 262.034500][ T5843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 262.095250][ T5843] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 262.109973][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.119931][ T5843] usb 2-1: Product: syz [ 262.124432][ T5843] usb 2-1: Manufacturer: syz [ 262.129255][ T5843] usb 2-1: SerialNumber: syz [ 262.180262][ T5843] usb 2-1: config 0 descriptor?? [ 262.220080][ T5843] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 262.229807][ T5843] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 262.259726][ T5876] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 262.437126][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 262.479474][ T5876] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 262.489302][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.497862][ T5876] usb 5-1: Product: syz [ 262.502267][ T5876] usb 5-1: Manufacturer: syz [ 262.507402][ T5876] usb 5-1: SerialNumber: syz [ 262.532208][ T5876] usb 5-1: config 0 descriptor?? [ 262.787667][ T5876] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 262.854163][ T5843] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 263.293818][ T5843] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 263.302445][ T5843] em28xx 2-1:0.0: board has no eeprom [ 263.603901][ T5843] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 263.612600][ T5843] em28xx 2-1:0.0: dvb set to bulk mode. [ 263.620281][ T44] em28xx 2-1:0.0: Binding DVB extension [ 263.688947][ T5843] usb 2-1: USB disconnect, device number 2 [ 263.696922][ T5843] em28xx 2-1:0.0: Disconnecting em28xx [ 263.860844][ T5876] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 264.004299][ T44] em28xx 2-1:0.0: Registering input extension [ 264.055312][ T5843] em28xx 2-1:0.0: Closing input extension [ 264.071728][ T44] usb 5-1: USB disconnect, device number 2 [ 264.124787][ T5843] em28xx 2-1:0.0: Freeing device [ 265.166081][ T6109] loop3: detected capacity change from 0 to 128 [ 265.285362][ T6109] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 265.393817][ T6109] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.580625][ T6119] loop4: detected capacity change from 0 to 128 [ 265.701354][ T29] audit: type=1800 audit(1739166018.432:12): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file1" dev="loop3" ino=12 res=0 errno=0 [ 265.875429][ T29] audit: type=1800 audit(1739166018.522:13): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file2" dev="loop3" ino=13 res=0 errno=0 [ 266.754148][ T6119] EXT4-fs (loop4): Test dummy encryption mode enabled [ 266.912678][ T6119] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 267.016144][ T5791] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 267.062202][ T6119] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 267.144107][ T6118] loop0: detected capacity change from 0 to 65536 [ 267.243390][ T6118] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 267.517455][ T6118] XFS (loop0): Ending clean mount [ 267.703041][ T6119] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 267.754692][ T5787] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 268.068640][ T6149] loop1: detected capacity change from 0 to 256 [ 268.185717][ T5793] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 268.978136][ T5843] kernel read not supported for file /zero (pid: 5843 comm: kworker/1:4) [ 270.574332][ T6183] dvmrp0: entered allmulticast mode [ 270.655413][ T6183] pimreg: entered allmulticast mode [ 270.914563][ T44] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 271.104191][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 271.124627][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 271.191300][ T44] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 271.202495][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.211910][ T44] usb 1-1: Product: syz [ 271.220303][ T44] usb 1-1: Manufacturer: syz [ 271.226537][ T44] usb 1-1: SerialNumber: syz [ 271.266127][ T44] usb 1-1: config 0 descriptor?? [ 271.266278][ T6194] loop4: detected capacity change from 0 to 512 [ 271.297744][ T44] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 271.307608][ T44] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 271.373652][ T6194] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 271.509883][ T6194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.527128][ T6194] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.950004][ T44] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 271.997231][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.234402][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 272.542115][ T6215] loop4: detected capacity change from 0 to 1024 [ 272.615630][ T6215] hfsplus: failed to load catalog file [ 272.702176][ T6217] syzkaller0: entered promiscuous mode [ 272.708240][ T6217] syzkaller0: entered allmulticast mode [ 272.786991][ T6218] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 272.995651][ T44] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 273.005825][ T44] em28xx 1-1:0.0: board has no eeprom [ 273.020154][ T6220] overlayfs: failed to resolve './file0/../file0': -2 [ 273.153971][ T44] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 273.168083][ T44] em28xx 1-1:0.0: dvb set to bulk mode. [ 273.177386][ T5843] em28xx 1-1:0.0: Binding DVB extension [ 273.209412][ T44] usb 1-1: USB disconnect, device number 2 [ 273.216809][ T44] em28xx 1-1:0.0: Disconnecting em28xx [ 273.338392][ T6226] capability: warning: `syz.4.81' uses 32-bit capabilities (legacy support in use) [ 273.437266][ T5843] em28xx 1-1:0.0: Registering input extension [ 273.473929][ T44] em28xx 1-1:0.0: Closing input extension [ 273.543881][ T44] em28xx 1-1:0.0: Freeing device [ 274.137827][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 274.285997][ T6237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 275.041319][ T6233] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 276.262864][ T6250] loop0: detected capacity change from 0 to 4096 [ 276.410663][ T6257] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.621967][ T6270] loop4: detected capacity change from 0 to 512 [ 277.655736][ T6270] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.961627][ T6270] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.980317][ T6270] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.365465][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.628420][ T6293] loop0: detected capacity change from 0 to 256 [ 279.720692][ T6293] exfat: Deprecated parameter 'utf8' [ 279.726843][ T6293] exfat: Deprecated parameter 'namecase' [ 279.732724][ T6293] exfat: Bad value for 'namecase' [ 279.831813][ T6288] loop4: detected capacity change from 0 to 40427 [ 279.879958][ T6288] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 279.890792][ T6288] F2FS-fs (loop4): heap/no_heap options were deprecated [ 279.907716][ T6293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.101'. [ 279.918774][ T6293] netlink: 'syz.0.101': attribute type 6 has an invalid length. [ 279.926334][ T6288] F2FS-fs (loop4): invalid crc value [ 279.932500][ T6293] netlink: 'syz.0.101': attribute type 5 has an invalid length. [ 279.943371][ T6293] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 279.972995][ T6288] F2FS-fs (loop4): Found nat_bits in checkpoint [ 280.265842][ T6288] F2FS-fs (loop4): Start checkpoint disabled! [ 280.290061][ T6288] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 280.416493][ T6288] syz.4.99: attempt to access beyond end of device [ 280.416493][ T6288] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 280.440250][ T6288] F2FS-fs (loop4): inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0x24a5/0x2bb0 [ 280.453358][ T6288] syz.4.99: attempt to access beyond end of device [ 280.453358][ T6288] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 280.470261][ T6288] F2FS-fs (loop4): Stopped filesystem due to reason: 1 [ 281.476086][ T6298] loop0: detected capacity change from 0 to 32768 [ 281.823598][ T6298] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 282.149293][ T6298] XFS (loop0): Ending clean mount [ 282.163997][ T6298] XFS (loop0): Quotacheck needed: Please wait. [ 282.266065][ T6298] XFS (loop0): Quotacheck: Done. [ 282.732614][ T5787] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 282.967843][ T6322] bond0: (slave macvlan2): Error -16 calling set_mac_address [ 284.046711][ T6331] loop4: detected capacity change from 0 to 512 [ 284.153940][ T6335] loop2: detected capacity change from 0 to 512 [ 284.232357][ T6331] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 284.245894][ T6331] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.315670][ T6335] EXT4-fs: Ignoring removed bh option [ 284.344893][ T6335] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 284.385168][ T6340] loop3: detected capacity change from 0 to 512 [ 284.385850][ T6335] EXT4-fs (loop2): 1 truncate cleaned up [ 284.399499][ T6335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.440695][ T6340] EXT4-fs: Ignoring removed nobh option [ 284.509612][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x19 [ 284.509743][ T51] Bluetooth: hci0: Unknown advertising packet type: 0x1f [ 284.516794][ T6340] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.591626][ T6331] EXT4-fs (loop4): shut down requested (1) [ 284.987397][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 285.012821][ T34] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 285.024039][ T34] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 285.066578][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.168722][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.540984][ C1] Unknown status report in ack skb [ 285.562470][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.119'. [ 285.885243][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.892037][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.729988][ T6361] loop2: detected capacity change from 0 to 32768 [ 286.806179][ T6361] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 287.890035][ T6381] netlink: 'syz.3.130': attribute type 5 has an invalid length. [ 288.698734][ T6389] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 289.221558][ T6399] loop3: detected capacity change from 0 to 8 [ 289.280695][ T6399] SQUASHFS error: zlib decompression failed, data probably corrupt [ 289.289543][ T6399] SQUASHFS error: Failed to read block 0x9b: -5 [ 289.296255][ T6399] SQUASHFS error: Unable to read metadata cache entry [99] [ 289.303915][ T6399] SQUASHFS error: Unable to read inode 0x127 [ 289.378213][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.3.138'. [ 290.087420][ T6405] loop4: detected capacity change from 0 to 1024 [ 290.202334][ T6405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.646712][ T5800] ocfs2: Unmounting device (7,2) on (node local) [ 290.805853][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.264148][ T6423] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 293.081536][ T6442] netlink: 96 bytes leftover after parsing attributes in process `syz.0.153'. [ 293.404351][ T6449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.156'. [ 293.491903][ T6451] netlink: 'syz.0.157': attribute type 10 has an invalid length. [ 293.500418][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.157'. [ 293.525816][ T6451] batadv0: entered promiscuous mode [ 293.531380][ T6451] batadv0: entered allmulticast mode [ 293.553631][ T6451] bridge0: port 3(batadv0) entered blocking state [ 293.564983][ T6451] bridge0: port 3(batadv0) entered disabled state [ 293.587943][ T6451] bridge0: port 3(batadv0) entered blocking state [ 293.595348][ T6451] bridge0: port 3(batadv0) entered forwarding state [ 293.699066][ T6454] warning: `syz.1.158' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 293.778701][ T3909] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 293.788633][ T3909] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 293.907500][ T44] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 294.132818][ T6451] batman_adv: batadv0: Adding interface: dummy0 [ 294.139991][ T6451] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.150938][ T6461] overlayfs: failed to clone upperpath [ 294.165642][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.172101][ T6451] batman_adv: batadv0: Interface activated: dummy0 [ 294.290072][ T6451] batadv0: mtu less than device minimum [ 294.297935][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.310466][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.322866][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.335356][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.347655][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.360089][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.372424][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.385010][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.397451][ T6451] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 294.511938][ T44] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 294.520185][ T44] usb 1-1: can't read configurations, error -71 [ 294.874488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 294.885793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 294.896815][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 296.538974][ T6497] netlink: 24 bytes leftover after parsing attributes in process `syz.2.175'. [ 296.801412][ T6499] loop0: detected capacity change from 0 to 1024 [ 297.343607][ T5418] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 297.606077][ T5418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.616741][ T5418] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.691965][ T5418] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 297.702117][ T5418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 297.711706][ T5418] usb 1-1: SerialNumber: syz [ 297.783810][ T6502] loop4: detected capacity change from 0 to 8192 [ 298.021063][ T5418] usb 1-1: 0:2 : does not exist [ 298.094605][ T5418] usb 1-1: USB disconnect, device number 5 [ 299.331687][ T6533] loop0: detected capacity change from 0 to 512 [ 299.420608][ T6533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 299.434265][ T6533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 299.548872][ T6533] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 299.567369][ T6533] EXT4-fs (loop0): 1 truncate cleaned up [ 299.575448][ T6533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.335965][ T6546] Illegal XDP return value 4294967274 on prog (id 46) dev N/A, expect packet loss! [ 300.363312][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.485307][ T6544] loop2: detected capacity change from 0 to 4096 [ 300.508765][ T6544] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 300.585524][ C1] net_ratelimit: 11 callbacks suppressed [ 300.585597][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 300.744454][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 300.931630][ T6544] ntfs3(loop2): ino=1a, mi_enum_attr [ 300.937804][ T6544] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 300.974555][ T6544] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 301.165320][ T5418] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 301.375496][ T5418] usb 5-1: Using ep0 maxpacket: 32 [ 301.403440][ T5418] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.453564][ T5418] usb 5-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 301.463579][ T5418] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.471838][ T5418] usb 5-1: Product: syz [ 301.476500][ T5418] usb 5-1: Manufacturer: syz [ 301.481323][ T5418] usb 5-1: SerialNumber: syz [ 301.574667][ T5418] usb 5-1: config 0 descriptor?? [ 301.596390][ T5418] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 303.155898][ T6580] tipc: Started in network mode [ 303.161150][ T6580] tipc: Node identity ea4c4b67a94f, cluster identity 4711 [ 303.176692][ T6580] tipc: Enabled bearer , priority 0 [ 303.254808][ T6584] +: renamed from syzkaller0 [ 303.290092][ T6584] tipc: Disabling bearer [ 303.924908][ T5418] gspca_sunplus: reg_r err -71 [ 303.930198][ T5418] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 303.954656][ T5418] usb 5-1: USB disconnect, device number 3 [ 304.433654][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 304.471479][ T6589] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.707508][ T6589] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.739293][ T6594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.213'. [ 304.894645][ T6589] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.965261][ T6599] loop4: detected capacity change from 0 to 512 [ 304.974713][ T6599] EXT4-fs: Ignoring removed nobh option [ 305.006296][ T6599] EXT4-fs: journaled quota format not specified [ 305.131129][ T6589] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.396497][ T6598] loop0: detected capacity change from 0 to 4096 [ 305.425196][ T6589] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.432960][ T6598] ntfs3: Unknown parameter 'noshowmeta' [ 305.456862][ T6589] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.487591][ T6589] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.519076][ T6589] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.511903][ T6614] loop0: detected capacity change from 0 to 2048 [ 306.624941][ T6614] loop0: p4 < > [ 308.023754][ T5084] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 308.032458][ T5084] Bluetooth: hci3: Injecting HCI hardware error event [ 308.043709][ T5084] Bluetooth: hci3: hardware error 0x00 [ 308.342684][ T6645] loop0: detected capacity change from 0 to 2048 [ 308.405377][ T6645] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 309.097605][ T29] audit: type=1326 audit(1739166061.852:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefdf8cde9 code=0x7fc00000 [ 309.124724][ T29] audit: type=1326 audit(1739166061.862:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbefdf8cde9 code=0x7fc00000 [ 309.148691][ T29] audit: type=1326 audit(1739166061.902:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.3.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefdf8cde9 code=0x7fc00000 [ 309.203522][ T5843] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 309.424350][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.435623][ T5843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.490283][ T6665] overlayfs: failed to clone upperpath [ 309.493346][ T5843] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 309.506037][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 309.518292][ T5843] usb 5-1: SerialNumber: syz [ 309.790698][ T5843] usb 5-1: 0:2 : does not exist [ 309.873587][ T5843] usb 5-1: USB disconnect, device number 4 [ 310.076155][ T6671] overlayfs: failed to clone upperpath [ 310.104160][ T5084] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 310.106764][ T6673] overlayfs: failed to clone upperpath [ 312.497846][ T6692] loop3: detected capacity change from 0 to 512 [ 312.563449][ T6689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.571642][ T6689] batadv_slave_0: entered promiscuous mode [ 312.841539][ T6694] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.255'. [ 312.851343][ T6694] netlink: 24 bytes leftover after parsing attributes in process `syz.4.255'. [ 313.052247][ T6692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.065591][ T6692] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.210214][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 313.236819][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 313.256599][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 313.290741][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 313.310615][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 313.324321][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 314.168833][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.194341][ T6699] chnl_net:caif_netlink_parms(): no params data found [ 314.549991][ T6717] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.258'. [ 315.172464][ T6699] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.182993][ T6699] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.191253][ T6699] bridge_slave_0: entered allmulticast mode [ 315.200738][ T6699] bridge_slave_0: entered promiscuous mode [ 315.236544][ T6699] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.247545][ T6699] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.259796][ T6699] bridge_slave_1: entered allmulticast mode [ 315.269150][ T6699] bridge_slave_1: entered promiscuous mode [ 315.383959][ T51] Bluetooth: hci0: command tx timeout [ 315.480005][ T6699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.568889][ T6699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.804968][ T6699] team0: Port device team_slave_0 added [ 315.852986][ T6699] team0: Port device team_slave_1 added [ 315.920501][ T6734] loop3: detected capacity change from 0 to 2048 [ 316.120285][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.128922][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.155446][ T6699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.179782][ T6699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.187240][ T6699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.213824][ T6699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.225452][ T6734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.402581][ T29] audit: type=1800 audit(1739166069.152:17): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.265" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 316.423543][ T29] audit: type=1800 audit(1739166069.162:18): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.265" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 316.429021][ T6744] overlayfs: failed to clone upperpath [ 316.515291][ T6699] hsr_slave_0: entered promiscuous mode [ 316.525697][ T6699] hsr_slave_1: entered promiscuous mode [ 316.535153][ T6699] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 316.542966][ T6699] Cannot create hsr debugfs directory [ 317.029880][ T5791] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.144728][ T6750] loop4: detected capacity change from 0 to 128 [ 317.226314][ T6750] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 317.311808][ T6750] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 317.464442][ T51] Bluetooth: hci0: command tx timeout [ 317.762044][ T6699] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 317.815080][ T6758] overlayfs: missing 'lowerdir' [ 317.824731][ T6699] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 317.896979][ T6699] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 318.004704][ T6699] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 318.329320][ T5793] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 318.927222][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 318.940701][ T6770] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 319.047352][ T6699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.182165][ T6699] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.212526][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.220409][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.433078][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.440857][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.543932][ T51] Bluetooth: hci0: command tx timeout [ 319.617492][ T6699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.629313][ T6699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.714467][ T6779] netem: incorrect gi model size [ 320.616683][ T6794] overlayfs: failed to clone lowerpath [ 320.649841][ T6794] overlayfs: failed to clone upperpath [ 321.395975][ T6699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.625719][ T51] Bluetooth: hci0: command tx timeout [ 322.774627][ T6816] loop4: detected capacity change from 0 to 32768 [ 322.896701][ T6816] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.293 (6816) [ 323.514051][ T6816] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 323.524932][ T6816] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm [ 323.534389][ T6816] BTRFS info (device loop4): using free-space-tree [ 324.000807][ T6699] veth0_vlan: entered promiscuous mode [ 324.298299][ T6699] veth1_vlan: entered promiscuous mode [ 324.871225][ T5793] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 324.936842][ T6699] veth0_macvtap: entered promiscuous mode [ 324.991657][ T6699] veth1_macvtap: entered promiscuous mode [ 325.201708][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.213040][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.224374][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.235725][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.246005][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.256998][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.267242][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.278140][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.300574][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.339009][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.350963][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.361209][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.371991][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.382286][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.397736][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.409308][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.420220][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.430473][ T6699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 325.441415][ T6699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 325.456712][ T6699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.485941][ T6699] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.499551][ T6699] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.509860][ T6699] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 325.533743][ T6699] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.888034][ T6878] netlink: 'syz.4.308': attribute type 27 has an invalid length. [ 328.564481][ T5876] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 328.777843][ T5876] usb 4-1: config 0 interface 0 altsetting 132 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 328.789693][ T5876] usb 4-1: config 0 interface 0 altsetting 132 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.800119][ T5876] usb 4-1: config 0 interface 0 has no altsetting 0 [ 328.810485][ T5876] usb 4-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 328.820826][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.955970][ T5876] usb 4-1: config 0 descriptor?? [ 329.490416][ T5876] wacom 0003:056A:00B8.0001: Unknown device_type for 'HID 056a:00b8'. Assuming pen. [ 329.535352][ T5876] wacom 0003:056A:00B8.0001: hidraw0: USB HID vff.ff Device [HID 056a:00b8] on usb-dummy_hcd.3-1/input0 [ 329.550957][ T5876] input: Wacom Intuos4 4x6 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:00B8.0001/input/input7 [ 329.712645][ T5876] usb 4-1: USB disconnect, device number 2 [ 331.729295][ T6921] netlink: 'syz.4.323': attribute type 10 has an invalid length. [ 331.908527][ T6921] bond0: (slave netdevsim3): Enslaving as an active interface with an up link [ 332.078580][ T6928] process 'syz.1.326' launched './file0' with NULL argv: empty string added [ 332.123083][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.131815][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.323085][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.331539][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.705833][ T6935] netlink: 72 bytes leftover after parsing attributes in process `syz.3.327'. [ 332.715433][ T6935] netlink: 72 bytes leftover after parsing attributes in process `syz.3.327'. [ 333.250948][ T6943] loop3: detected capacity change from 0 to 256 [ 333.393847][ T5876] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 333.595541][ T5876] usb 6-1: Using ep0 maxpacket: 8 [ 333.647717][ T5876] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 333.657398][ T5876] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.748971][ T5876] usb 6-1: config 0 descriptor?? [ 334.041804][ T5876] asix 6-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 334.124881][ T3660] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.277427][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 334.345775][ T3660] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.490098][ T3660] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.611604][ T3660] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.049588][ T3660] bridge_slave_1: left allmulticast mode [ 335.055917][ T3660] bridge_slave_1: left promiscuous mode [ 335.063279][ T3660] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.077967][ T3660] bridge_slave_0: left allmulticast mode [ 335.084224][ T3660] bridge_slave_0: left promiscuous mode [ 335.090950][ T3660] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.694831][ T3660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.746281][ T3660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.769464][ T5876] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 335.780037][ T5876] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 335.793076][ T5876] asix 6-1:0.0: probe with driver asix failed with error -71 [ 335.819676][ T3660] bond0 (unregistering): Released all slaves [ 335.865852][ T5876] usb 6-1: USB disconnect, device number 2 [ 336.009251][ T3660] tipc: Left network mode [ 336.537530][ T3660] hsr_slave_0: left promiscuous mode [ 336.566152][ T3660] hsr_slave_1: left promiscuous mode [ 336.574460][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.582243][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.663447][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.671382][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.741124][ T3660] veth1_macvtap: left promiscuous mode [ 336.747317][ T3660] veth0_macvtap: left promiscuous mode [ 336.757076][ T3660] veth1_vlan: left promiscuous mode [ 336.762819][ T3660] veth0_vlan: left promiscuous mode [ 337.958335][ T3660] team0 (unregistering): Port device team_slave_1 removed [ 338.065915][ T3660] team0 (unregistering): Port device team_slave_0 removed [ 338.325185][ T6971] erspan0: entered promiscuous mode [ 338.357060][ T6965] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.366254][ T6965] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.375554][ T6965] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.384792][ T6965] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.514861][ T6970] erspan0: left promiscuous mode [ 338.791431][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.823604][ T29] audit: type=1326 audit(1739166091.432:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 338.846920][ T29] audit: type=1326 audit(1739166091.432:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 338.872545][ T29] audit: type=1326 audit(1739166091.442:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 338.896210][ T29] audit: type=1326 audit(1739166091.442:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 338.921368][ T29] audit: type=1326 audit(1739166091.442:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 338.944954][ T29] audit: type=1326 audit(1739166091.472:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 338.968745][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.968861][ T29] audit: type=1326 audit(1739166091.472:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 338.998967][ T29] audit: type=1326 audit(1739166091.472:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 339.024017][ T29] audit: type=1326 audit(1739166091.472:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 339.048295][ T29] audit: type=1326 audit(1739166091.482:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6976 comm="syz.1.344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 339.120398][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 339.171946][ T6981] loop4: detected capacity change from 0 to 512 [ 339.267733][ T6983] loop5: detected capacity change from 0 to 164 [ 339.281452][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 339.334167][ T6983] ISOFS: unable to read i-node block [ 339.339986][ T6983] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 339.350513][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 339.364334][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.430773][ T6981] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.345: casefold flag without casefold feature [ 339.455698][ T6981] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.345: couldn't read orphan inode 15 (err -117) [ 339.498142][ T6981] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.082365][ T6977] chnl_net:caif_netlink_parms(): no params data found [ 340.355788][ T5793] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.289143][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.299244][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.307561][ T6977] bridge_slave_0: entered allmulticast mode [ 341.317320][ T6977] bridge_slave_0: entered promiscuous mode [ 341.369639][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.380373][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.389947][ T6977] bridge_slave_1: entered allmulticast mode [ 341.401888][ T6977] bridge_slave_1: entered promiscuous mode [ 341.466759][ T5084] Bluetooth: hci1: command tx timeout [ 341.611689][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.662207][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.979063][ T6977] team0: Port device team_slave_0 added [ 342.030359][ T6977] team0: Port device team_slave_1 added [ 342.349882][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.357251][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.383882][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.481988][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.492894][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.520468][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.874204][ T6977] hsr_slave_0: entered promiscuous mode [ 342.884769][ T6977] hsr_slave_1: entered promiscuous mode [ 342.893813][ T6977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.905234][ T6977] Cannot create hsr debugfs directory [ 343.552632][ T5084] Bluetooth: hci1: command tx timeout [ 343.906385][ T7051] netlink: 288 bytes leftover after parsing attributes in process `syz.4.372'. [ 343.917195][ T7051] unsupported nlmsg_type 40 [ 344.150916][ T6977] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 344.187697][ T6977] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 344.254381][ T6977] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 344.282797][ T6977] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 344.776246][ T7058] 9pnet: Found fid 0 not clunked [ 345.317851][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.445780][ T6977] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.541066][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.548993][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.614319][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.622037][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.634269][ T5084] Bluetooth: hci1: command tx timeout [ 346.336446][ T7073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'. [ 346.372088][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.381'. [ 346.545560][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fda1000: rx timeout, send abort [ 346.556168][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fe35c00: rx timeout, send abort [ 347.054394][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fda1000: abort rx timeout. Force session deactivation [ 347.073362][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801fe35c00: abort rx timeout. Force session deactivation [ 347.117600][ T7082] netlink: 44 bytes leftover after parsing attributes in process `syz.1.392'. [ 347.127169][ T7082] netlink: 'syz.1.392': attribute type 6 has an invalid length. [ 347.135264][ T7082] netlink: 'syz.1.392': attribute type 5 has an invalid length. [ 347.143974][ T7082] netlink: 'syz.1.392': attribute type 4 has an invalid length. [ 347.356506][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.363586][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 347.704248][ T5084] Bluetooth: hci1: command tx timeout [ 348.189218][ T6977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.090847][ T7097] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.387'. [ 350.100788][ T7097] netlink: 24 bytes leftover after parsing attributes in process `syz.5.387'. [ 351.570771][ T6977] veth0_vlan: entered promiscuous mode [ 351.645784][ T7110] netlink: 'syz.5.391': attribute type 4 has an invalid length. [ 351.661675][ T6977] veth1_vlan: entered promiscuous mode [ 352.228293][ T7124] netlink: 24 bytes leftover after parsing attributes in process `syz.1.396'. [ 352.405552][ T6977] veth0_macvtap: entered promiscuous mode [ 352.504112][ T6977] veth1_macvtap: entered promiscuous mode [ 352.648741][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.660594][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.671303][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.687978][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.698691][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.709484][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.719779][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 352.734546][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.750472][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 352.821456][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.836665][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.847885][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.858706][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.869055][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.880422][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.890659][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.901453][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.911754][ T6977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 352.922569][ T6977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 352.941749][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.170633][ T6977] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.180661][ T6977] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.189876][ T6977] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.199101][ T6977] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.505557][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 354.906219][ T7159] netlink: 24 bytes leftover after parsing attributes in process `syz.2.407'. [ 355.031426][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 355.040978][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.407'. [ 355.050365][ T7159] netlink: 68 bytes leftover after parsing attributes in process `syz.2.407'. [ 355.366310][ T5876] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 355.544007][ T5876] usb 6-1: Using ep0 maxpacket: 16 [ 355.587006][ T5876] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 355.598418][ T5876] usb 6-1: config 0 has no interface number 0 [ 355.605835][ T5876] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 355.616201][ T5876] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 355.627232][ T5876] usb 6-1: config 0 interface 41 has no altsetting 0 [ 355.757322][ T5876] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 355.766846][ T5876] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.775362][ T5876] usb 6-1: Product: syz [ 355.779780][ T5876] usb 6-1: Manufacturer: syz [ 355.784855][ T5876] usb 6-1: SerialNumber: syz [ 355.856088][ T5876] usb 6-1: config 0 descriptor?? [ 355.870764][ T7163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 355.884460][ T7163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 356.187343][ T7163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 356.214599][ T7163] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 356.888365][ T5876] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 357.569650][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 357.962380][ T5876] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 357.973605][ T5876] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 357.984569][ T5876] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 358.126265][ T5876] usb 6-1: USB disconnect, device number 3 [ 358.741349][ T7207] TCP: out of memory -- consider tuning tcp_mem [ 359.811755][ T7225] loop5: detected capacity change from 0 to 512 [ 359.930354][ T1125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.938680][ T1125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.116876][ T7225] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.130730][ T7225] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.134529][ T3909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.149449][ T3909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.658255][ T6699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.782560][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 360.812888][ T7242] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.828240][ T7242] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.840097][ T7242] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.849525][ T7242] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.859433][ T7242] vxlan0: entered promiscuous mode [ 361.007848][ T7244] netlink: 'syz.5.427': attribute type 7 has an invalid length. [ 361.016120][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 361.934373][ T5905] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 361.998531][ T3660] bond0: (slave netdevsim3): Releasing backup interface [ 362.009807][ T3660] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.084843][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 362.104724][ T5905] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.104890][ T5905] usb 7-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.105024][ T5905] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 362.105177][ T5905] usb 7-1: config 0 interface 0 has no altsetting 0 [ 362.105345][ T5905] usb 7-1: New USB device found, idVendor=05ac, idProduct=0218, bcdDevice=e8.ff [ 362.105483][ T5905] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.110676][ T5905] usb 7-1: config 0 descriptor?? [ 362.172000][ T3660] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.292884][ T3660] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.581064][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.588706][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.596114][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.603588][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.610807][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.618131][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.625453][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.632660][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.640090][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.647853][ T5905] apple 0003:05AC:0218.0002: unknown main item tag 0x0 [ 362.683467][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:0c [ 362.756972][ T3660] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.934180][ T5905] apple 0003:05AC:0218.0002: hidraw0: USB HID v0.00 Device [HID 05ac:0218] on usb-dummy_hcd.6-1/input0 [ 362.994981][ T5905] usb 7-1: USB disconnect, device number 2 [ 363.199315][ T3660] bridge_slave_1: left allmulticast mode [ 363.207542][ T3660] bridge_slave_1: left promiscuous mode [ 363.214475][ T3660] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.244656][ T3660] bridge_slave_0: left allmulticast mode [ 363.250681][ T3660] bridge_slave_0: left promiscuous mode [ 363.257669][ T3660] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.914341][ T3660] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.940261][ T3660] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.955734][ T3660] bond0 (unregistering): Released all slaves [ 364.450575][ T7267] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 364.458250][ T7267] overlayfs: failed to set xattr on upper [ 364.464393][ T7267] overlayfs: ...falling back to redirect_dir=nofollow. [ 364.471560][ T7267] overlayfs: ...falling back to index=off. [ 364.477780][ T7267] overlayfs: ...falling back to uuid=null. [ 364.561954][ T3660] hsr_slave_0: left promiscuous mode [ 364.592592][ T3660] hsr_slave_1: left promiscuous mode [ 364.601618][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.611427][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.685504][ T3660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.693528][ T3660] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.777603][ T3660] veth1_macvtap: left promiscuous mode [ 364.784255][ T3660] veth0_macvtap: left promiscuous mode [ 364.790488][ T3660] veth1_vlan: left promiscuous mode [ 364.796314][ T3660] veth0_vlan: left promiscuous mode [ 365.165788][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 365.184803][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 365.186389][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 365.186453][ T29] audit: type=1326 audit(1739166117.862:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.194176][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 365.199831][ T29] audit: type=1326 audit(1739166117.862:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.232205][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 365.267034][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 365.276532][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 365.404802][ T29] audit: type=1326 audit(1739166118.042:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.432797][ T29] audit: type=1326 audit(1739166118.042:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.456674][ T29] audit: type=1326 audit(1739166118.042:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.480523][ T29] audit: type=1326 audit(1739166118.112:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.504167][ T29] audit: type=1326 audit(1739166118.112:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.527843][ T29] audit: type=1326 audit(1739166118.112:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.557224][ T29] audit: type=1326 audit(1739166118.112:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.583011][ T29] audit: type=1326 audit(1739166118.122:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7275 comm="syz.2.439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb58cde9 code=0x7ffc0000 [ 365.954091][ T3660] team0 (unregistering): Port device team_slave_1 removed [ 365.979942][ T3660] team0 (unregistering): Port device team_slave_0 removed [ 367.417998][ T51] Bluetooth: hci2: command tx timeout [ 367.761061][ T7294] loop6: detected capacity change from 0 to 40427 [ 367.805833][ T7294] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 367.814054][ T7294] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 367.850481][ T7294] F2FS-fs (loop6): invalid crc value [ 367.873878][ T7294] F2FS-fs (loop6): Found nat_bits in checkpoint [ 367.920821][ T7276] chnl_net:caif_netlink_parms(): no params data found [ 368.217143][ T7294] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 368.224757][ T7294] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 368.954467][ T7308] loop5: detected capacity change from 0 to 32768 [ 368.973648][ T7308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.448 (7308) [ 369.007360][ T7308] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 369.024495][ T7308] BTRFS info (device loop5): using sha256 (sha256-generic) checksum algorithm [ 369.035943][ T7308] BTRFS info (device loop5): using free-space-tree [ 369.464411][ T51] Bluetooth: hci2: command tx timeout [ 370.796564][ T7335] tipc: Started in network mode [ 370.801921][ T7335] tipc: Node identity ac14140f, cluster identity 4711 [ 370.809811][ T7335] tipc: New replicast peer: 255.255.255.255 [ 370.817289][ T7335] tipc: Enabled bearer , priority 10 [ 370.930709][ T6699] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 371.248707][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.256648][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.274805][ T7276] bridge_slave_0: entered allmulticast mode [ 371.284514][ T7276] bridge_slave_0: entered promiscuous mode [ 371.360228][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.375749][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.383910][ T7276] bridge_slave_1: entered allmulticast mode [ 371.392982][ T7276] bridge_slave_1: entered promiscuous mode [ 371.508850][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 371.508920][ T29] audit: type=1326 audit(1739166124.272:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.539201][ T29] audit: type=1326 audit(1739166124.272:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.545609][ T51] Bluetooth: hci2: command tx timeout [ 371.561870][ T29] audit: type=1326 audit(1739166124.272:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.627237][ T29] audit: type=1326 audit(1739166124.372:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.650153][ T29] audit: type=1326 audit(1739166124.372:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.674864][ T29] audit: type=1326 audit(1739166124.372:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.697727][ T29] audit: type=1326 audit(1739166124.372:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.721285][ T29] audit: type=1326 audit(1739166124.372:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.743913][ T29] audit: type=1326 audit(1739166124.372:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.766553][ T29] audit: type=1326 audit(1739166124.382:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7341 comm="syz.1.458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7fb37f98cde9 code=0x7ffc0000 [ 371.813680][ T44] tipc: Node number set to 2886997007 [ 371.859362][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.976604][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.339582][ T7276] team0: Port device team_slave_0 added [ 372.385189][ T7276] team0: Port device team_slave_1 added [ 372.710322][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.717746][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.744252][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.787727][ T7352] netlink: 277 bytes leftover after parsing attributes in process `syz.2.462'. [ 372.877724][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.887026][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.931652][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.046119][ T7356] loop5: detected capacity change from 0 to 128 [ 373.353718][ T7276] hsr_slave_0: entered promiscuous mode [ 373.364029][ T7276] hsr_slave_1: entered promiscuous mode [ 373.373397][ T7276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.381231][ T7276] Cannot create hsr debugfs directory [ 373.524322][ T7358] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 373.625925][ T51] Bluetooth: hci2: command tx timeout [ 373.851191][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.465'. [ 373.862279][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.465'. [ 373.872399][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz.6.465'. [ 374.315419][ T7276] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 374.398040][ T7276] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 374.474958][ T7276] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 374.568864][ T7276] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 375.367318][ T7385] loop5: detected capacity change from 0 to 1024 [ 375.439802][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.451914][ T7385] EXT4-fs: Ignoring removed nobh option [ 375.521722][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.584655][ T1125] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.592403][ T1125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.723038][ T7276] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 375.735793][ T7276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 375.749437][ T7385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.798875][ T1125] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.806686][ T1125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.634867][ T6699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.771600][ T7408] loop5: detected capacity change from 0 to 32768 [ 377.783457][ T7408] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.479 (7408) [ 378.043820][ C1] batman_adv: batadv0: Local translation table size (80) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 378.435384][ T7408] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.446304][ T7408] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 378.455628][ T7408] BTRFS info (device loop5): using free-space-tree [ 378.609153][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.842322][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 378.842396][ T29] audit: type=1800 audit(1739166131.562:77): pid=7408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.479" name="bus" dev="loop5" ino=264 res=0 errno=0 [ 379.057990][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.6.483'. [ 379.161392][ T6699] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 379.609576][ T7440] overlayfs: failed to clone upperpath [ 381.371634][ T7276] veth0_vlan: entered promiscuous mode [ 381.550270][ T7276] veth1_vlan: entered promiscuous mode [ 381.874456][ T7454] overlayfs: failed to clone upperpath [ 381.951903][ T7276] veth0_macvtap: entered promiscuous mode [ 382.097821][ T7276] veth1_macvtap: entered promiscuous mode [ 382.466204][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.477311][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.487531][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.498343][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.512172][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.527814][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.543488][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.555714][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.571100][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.919120][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.930165][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.942097][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.953367][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.963762][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.974596][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.985017][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.995877][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.006133][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.016934][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.031974][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.086932][ T7276] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.096235][ T7276] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.105421][ T7276] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.114617][ T7276] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.416989][ T7478] loop6: detected capacity change from 0 to 512 [ 384.447265][ T7478] EXT4-fs: Ignoring removed oldalloc option [ 384.453699][ T7478] EXT4-fs: Ignoring removed i_version option [ 384.549772][ T7478] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.6.495: corrupted xattr block 95: invalid header [ 384.568573][ T7478] EXT4-fs (loop6): Remounting filesystem read-only [ 384.581630][ T7478] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 384.594266][ T7478] EXT4-fs (loop6): 1 orphan inode deleted [ 384.601900][ T7478] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 384.965767][ T6977] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 385.546262][ T7497] loop5: detected capacity change from 0 to 512 [ 385.905775][ T7497] EXT4-fs error (device loop5): ext4_orphan_get:1389: inode #15: comm syz.5.502: casefold flag without casefold feature [ 386.025582][ T7497] EXT4-fs error (device loop5): ext4_orphan_get:1394: comm syz.5.502: couldn't read orphan inode 15 (err -117) [ 386.112772][ T7497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 387.282534][ T6699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.370196][ T7513] netlink: 'syz.2.506': attribute type 4 has an invalid length. [ 388.721097][ T7513] netlink: 'syz.2.506': attribute type 4 has an invalid length. [ 389.941383][ T7522] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 390.262559][ T7521] loop5: detected capacity change from 0 to 128 [ 390.331878][ T7490] Set syz1 is full, maxelem 65536 reached [ 390.694462][ T7521] FAT-fs (loop5): Directory bread(block 32) failed [ 390.701318][ T7521] FAT-fs (loop5): Directory bread(block 33) failed [ 390.708650][ T7521] FAT-fs (loop5): Directory bread(block 34) failed [ 390.716905][ T7521] FAT-fs (loop5): Directory bread(block 35) failed [ 390.730369][ T7521] FAT-fs (loop5): Directory bread(block 36) failed [ 390.739496][ T7521] FAT-fs (loop5): Directory bread(block 37) failed [ 390.747545][ T7521] FAT-fs (loop5): Directory bread(block 38) failed [ 390.754705][ T7521] FAT-fs (loop5): Directory bread(block 39) failed [ 390.761647][ T7521] FAT-fs (loop5): Directory bread(block 40) failed [ 390.768597][ T7521] FAT-fs (loop5): Directory bread(block 41) failed [ 391.090588][ T7535] capability: warning: `syz.6.510' uses deprecated v2 capabilities in a way that may be insecure [ 391.795431][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.803994][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.079670][ T1125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.087886][ T1125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.187725][ T7551] loop5: detected capacity change from 0 to 32768 [ 393.205961][ T7551] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.514 (7551) [ 393.251858][ T7551] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 393.263842][ T7551] BTRFS info (device loop5): using crc32c (crc32c-x86_64) checksum algorithm [ 393.272981][ T7551] BTRFS info (device loop5): using free-space-tree [ 394.524861][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.6.523'. [ 394.781315][ T6699] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 398.175907][ T7618] loop5: detected capacity change from 0 to 40427 [ 398.195052][ T7618] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x1fffff [ 398.205282][ T7618] F2FS-fs (loop5): heap/no_heap options were deprecated [ 398.226180][ T7618] F2FS-fs (loop5): invalid crc value [ 398.314824][ T7618] F2FS-fs (loop5): Found nat_bits in checkpoint [ 398.386745][ T7616] overlayfs: failed to clone upperpath [ 398.577719][ T7618] F2FS-fs (loop5): Start checkpoint disabled! [ 398.589769][ T7618] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 398.708561][ T7618] syz.5.537: attempt to access beyond end of device [ 398.708561][ T7618] loop5: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 398.723359][ T7618] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_get_read_data_page+0x6fe/0x1840 [ 398.802615][ T29] audit: type=1800 audit(1739166151.462:78): pid=7618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.537" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 399.164669][ T4083] kworker/u8:22: attempt to access beyond end of device [ 399.164669][ T4083] loop5: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 399.181910][ T4083] kworker/u8:22: attempt to access beyond end of device [ 399.181910][ T4083] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 399.196623][ T4083] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 399.203914][ T4083] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 400.297067][ T7639] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 400.896839][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'. [ 400.989255][ T7648] loop7: detected capacity change from 0 to 16 [ 401.030017][ T7648] erofs (device loop7): mounted with root inode @ nid 36. [ 401.091129][ T7646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.545'. [ 401.380798][ T51] erofs (device loop7): failed to decompress -26 in[46, 0] out[9000] [ 401.400303][ T7648] erofs (device loop7): failed to decompress -26 in[46, 4050] out[8192] [ 401.409646][ T7648] erofs (device loop7): read error -117 @ 0 of nid 89 [ 401.428606][ T7652] loop5: detected capacity change from 0 to 512 [ 401.584996][ T7652] EXT4-fs (loop5): orphan cleanup on readonly fs [ 401.709278][ T7652] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.538: bg 0: block 248: padding at end of block bitmap is not set [ 401.769961][ T7652] Quota error (device loop5): write_blk: dquota write failed [ 401.781433][ T7652] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 401.792625][ T7652] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.538: Failed to acquire dquot type 1 [ 401.907754][ T7652] EXT4-fs (loop5): 1 truncate cleaned up [ 401.939718][ T7652] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 402.015856][ T7652] futex_wake_op: syz.5.538 tries to shift op by -1; fix this program [ 402.393037][ T7652] syz.5.538 (7652) used greatest stack depth: 3856 bytes left [ 402.411457][ T6699] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.135571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 404.274752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 404.544960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 404.647844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 404.853820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 404.905427][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 405.057405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 407.050133][ T7706] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 407.084843][ T7710] tipc: Started in network mode [ 407.089957][ T7710] tipc: Node identity 6, cluster identity 4711 [ 407.097321][ T7710] tipc: Node number set to 6 [ 408.766552][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 408.773390][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 409.344882][ T5876] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 409.521680][ T5876] usb 7-1: Using ep0 maxpacket: 8 [ 409.562934][ T5876] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 409.572445][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.606937][ T5876] usb 7-1: config 0 descriptor?? [ 409.898808][ T7750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 409.908314][ T7750] bridge_slave_1: left allmulticast mode [ 409.914477][ T7750] bridge_slave_1: left promiscuous mode [ 409.921229][ T7750] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.950462][ T5876] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 410.015263][ T7750] bridge_slave_0: left allmulticast mode [ 410.021174][ T7750] bridge_slave_0: left promiscuous mode [ 410.029701][ T7750] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.850404][ T7768] loop5: detected capacity change from 0 to 1024 [ 411.880766][ T7768] journal_path: Non-blockdev passed as '' [ 411.887162][ T7768] EXT4-fs: error: could not find journal device path [ 412.166556][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 412.856478][ T5876] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 412.871597][ T5876] asix 7-1:0.0: probe with driver asix failed with error -71 [ 412.891620][ T5876] usb 7-1: USB disconnect, device number 3 [ 413.892441][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 414.432058][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.6.597'. [ 414.918623][ T7792] @ÿ: renamed from bond_slave_0 (while UP) [ 415.565453][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.7.605'. [ 415.574923][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.7.605'. [ 415.584109][ T7802] netlink: 32 bytes leftover after parsing attributes in process `syz.7.605'. [ 415.664092][ T51] block nbd0: Receive control failed (result -107) [ 415.734635][ T7802] nbd0: detected capacity change from 0 to 256 [ 415.837921][ T7804] overlayfs: failed to clone upperpath [ 415.937600][ T7806] loop5: detected capacity change from 0 to 8 [ 416.136029][ T7806] Invalid ELF header magic: != ELF [ 417.948925][ T7831] netlink: 'syz.1.619': attribute type 4 has an invalid length. [ 423.099391][ T7824] Set syz1 is full, maxelem 65536 reached [ 424.172109][ T5876] kernel read not supported for file /audio1 (pid: 5876 comm: kworker/0:5) [ 424.350606][ T7875] vlan2: entered promiscuous mode [ 424.356106][ T7875] syz_tun: entered promiscuous mode [ 424.370751][ T7875] syz_tun: left promiscuous mode [ 424.730282][ T7877] Bluetooth: (null): Invalid header checksum [ 425.671932][ T7886] netlink: 'syz.7.638': attribute type 5 has an invalid length. [ 427.114361][ T5918] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 427.315390][ T5918] usb 8-1: Using ep0 maxpacket: 8 [ 427.352770][ T7915] dccp_close: ABORT with 180 bytes unread [ 427.381242][ T5918] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 427.393011][ T5918] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.401499][ T5918] usb 8-1: Product: syz [ 427.406263][ T5918] usb 8-1: Manufacturer: syz [ 427.411070][ T5918] usb 8-1: SerialNumber: syz [ 427.485821][ T5918] usb 8-1: config 0 descriptor?? [ 427.511015][ T5918] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 428.323962][ T7919] loop5: detected capacity change from 0 to 40427 [ 428.378605][ T7919] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 428.386745][ T7919] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 428.399258][ T7919] F2FS-fs (loop5): invalid crc value [ 428.428190][ T7919] F2FS-fs (loop5): Found nat_bits in checkpoint [ 428.719924][ T7919] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 428.727534][ T7919] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 428.859303][ T29] audit: type=1804 audit(1739166181.622:79): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.650" name="/newroot/65/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 428.919958][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.655'. [ 428.950472][ T29] audit: type=1804 audit(1739166181.652:80): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.650" name="/newroot/65/bus/bus" dev="loop5" ino=10 res=1 errno=0 [ 429.663817][ T5918] gspca_sonixj: reg_w1 err -71 [ 429.711081][ T5918] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 429.780233][ T5918] usb 8-1: USB disconnect, device number 2 [ 429.908791][ T7945] vlan2: entered promiscuous mode [ 429.914502][ T7945] veth0_virt_wifi: entered promiscuous mode [ 429.921856][ T7945] vlan2: entered allmulticast mode [ 429.927494][ T7945] veth0_virt_wifi: entered allmulticast mode [ 430.412772][ T7951] Process accounting resumed [ 431.962318][ T7965] loop6: detected capacity change from 0 to 128 [ 432.095215][ T7965] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 432.279582][ T7965] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 432.911037][ T6977] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 435.025750][ T7999] ===================================================== [ 435.032913][ T7999] BUG: KMSAN: uninit-value in sw842_compress+0x15eb/0x5990 [ 435.040447][ T7999] sw842_compress+0x15eb/0x5990 [ 435.045530][ T7999] crypto842_scompress+0x4f/0x70 [ 435.050576][ T7999] scomp_acomp_comp_decomp+0x7c6/0xb90 [ 435.060385][ T7999] scomp_acomp_compress+0x32/0x40 [ 435.065709][ T7999] zswap_store+0x20e9/0x48a0 [ 435.070425][ T7999] swap_writepage+0xa67/0x1950 [ 435.075387][ T7999] shmem_writepage+0x2360/0x25a0 [ 435.080800][ T7999] shrink_folio_list+0x5dd2/0x8220 [ 435.086136][ T7999] evict_folios+0x94ed/0xb9c0 [ 435.090907][ T7999] try_to_shrink_lruvec+0xc58/0x1080 [ 435.096511][ T7999] shrink_lruvec+0x49a/0x47c0 [ 435.101339][ T7999] shrink_node+0x105e/0x51c0 [ 435.106211][ T7999] do_try_to_free_pages+0x820/0x2550 [ 435.111623][ T7999] try_to_free_mem_cgroup_pages+0x3fa/0xa60 [ 435.117742][ T7999] try_charge_memcg+0x71a/0x1780 [ 435.122831][ T7999] obj_cgroup_charge_pages+0x2cb/0x640 [ 435.129761][ T7999] __memcg_kmem_charge_page+0x151/0x520 [ 435.135529][ T7999] __alloc_frozen_pages_noprof+0x93d/0xe00 [ 435.141579][ T7999] alloc_pages_mpol+0x4cd/0x890 [ 435.147213][ T7999] alloc_pages_noprof+0x1b5/0x250 [ 435.152386][ T7999] io_region_allocate_pages+0x168/0x8b0 [ 435.161817][ T7999] io_create_region+0x6eb/0x810 [ 435.167005][ T7999] io_allocate_scq_urings+0x774/0xa50 [ 435.172532][ T7999] io_uring_create+0xabc/0x1440 [ 435.177597][ T7999] __se_sys_io_uring_setup+0x476/0x4d0 [ 435.183302][ T7999] __x64_sys_io_uring_setup+0x6c/0xa0 [ 435.188772][ T7999] x64_sys_call+0x2e82/0x3c30 [ 435.193643][ T7999] do_syscall_64+0xcd/0x1e0 [ 435.198263][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.204518][ T7999] [ 435.206937][ T7999] Uninit was stored to memory at: [ 435.212224][ T7999] sw842_compress+0xe7d/0x5990 [ 435.217415][ T7999] crypto842_scompress+0x4f/0x70 [ 435.222558][ T7999] scomp_acomp_comp_decomp+0x7c6/0xb90 [ 435.228394][ T7999] scomp_acomp_compress+0x32/0x40 [ 435.233624][ T7999] zswap_store+0x20e9/0x48a0 [ 435.238334][ T7999] swap_writepage+0xa67/0x1950 [ 435.243304][ T7999] shmem_writepage+0x2360/0x25a0 [ 435.248411][ T7999] shrink_folio_list+0x5dd2/0x8220 [ 435.253716][ T7999] evict_folios+0x94ed/0xb9c0 [ 435.258485][ T7999] try_to_shrink_lruvec+0xc58/0x1080 [ 435.267050][ T7999] shrink_lruvec+0x49a/0x47c0 [ 435.271890][ T7999] shrink_node+0x105e/0x51c0 [ 435.277130][ T7999] do_try_to_free_pages+0x820/0x2550 [ 435.282550][ T7999] try_to_free_mem_cgroup_pages+0x3fa/0xa60 [ 435.288745][ T7999] try_charge_memcg+0x71a/0x1780 [ 435.293914][ T7999] obj_cgroup_charge_pages+0x2cb/0x640 [ 435.299594][ T7999] __memcg_kmem_charge_page+0x151/0x520 [ 435.305420][ T7999] __alloc_frozen_pages_noprof+0x93d/0xe00 [ 435.311368][ T7999] alloc_pages_mpol+0x4cd/0x890 [ 435.316421][ T7999] alloc_pages_noprof+0x1b5/0x250 [ 435.321574][ T7999] io_region_allocate_pages+0x168/0x8b0 [ 435.327317][ T7999] io_create_region+0x6eb/0x810 [ 435.332280][ T7999] io_allocate_scq_urings+0x774/0xa50 [ 435.337872][ T7999] io_uring_create+0xabc/0x1440 [ 435.342833][ T7999] __se_sys_io_uring_setup+0x476/0x4d0 [ 435.348541][ T7999] __x64_sys_io_uring_setup+0x6c/0xa0 [ 435.354093][ T7999] x64_sys_call+0x2e82/0x3c30 [ 435.358866][ T7999] do_syscall_64+0xcd/0x1e0 [ 435.367102][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.373709][ T7999] [ 435.376125][ T7999] Uninit was stored to memory at: [ 435.381346][ T7999] copy_page_from_iter_atomic+0x1299/0x30c0 [ 435.387973][ T7999] generic_perform_write+0x8d1/0x1080 [ 435.393656][ T7999] shmem_file_write_iter+0x2ba/0x2f0 [ 435.399058][ T7999] do_iter_readv_writev+0x93a/0xbc0 [ 435.404527][ T7999] vfs_iter_write+0x44d/0xd60 [ 435.409342][ T7999] loop_process_work+0x15fb/0x3760 [ 435.414661][ T7999] loop_workfn+0x48/0x60 [ 435.419000][ T7999] process_scheduled_works+0xae0/0x1c40 [ 435.424769][ T7999] worker_thread+0xea7/0x14f0 [ 435.429568][ T7999] kthread+0x6b9/0xef0 [ 435.433802][ T7999] ret_from_fork+0x6d/0x90 [ 435.438316][ T7999] ret_from_fork_asm+0x1a/0x30 [ 435.443356][ T7999] [ 435.445744][ T7999] Uninit was stored to memory at: [ 435.450937][ T7999] ntfs_write_bh+0x652/0xdb0 [ 435.455726][ T7999] indx_insert_into_buffer+0xd9c/0x2010 [ 435.461383][ T7999] indx_insert_entry+0xa3c/0xee0 [ 435.470301][ T7999] ntfs_create_inode+0x438d/0x4e40 [ 435.476664][ T7999] ntfs_create+0x56/0x70 [ 435.481035][ T7999] path_openat+0x2ed8/0x6250 [ 435.485834][ T7999] do_filp_open+0x268/0x600 [ 435.490418][ T7999] do_sys_openat2+0x1bf/0x2f0 [ 435.495345][ T7999] __x64_sys_openat+0x2a1/0x310 [ 435.500330][ T7999] x64_sys_call+0x36f5/0x3c30 [ 435.505278][ T7999] do_syscall_64+0xcd/0x1e0 [ 435.509866][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.515976][ T7999] [ 435.518343][ T7999] Uninit was stored to memory at: [ 435.523767][ T7999] indx_insert_into_buffer+0xcef/0x2010 [ 435.529422][ T7999] indx_insert_entry+0xa3c/0xee0 [ 435.534558][ T7999] ntfs_create_inode+0x438d/0x4e40 [ 435.539770][ T7999] ntfs_create+0x56/0x70 [ 435.544211][ T7999] path_openat+0x2ed8/0x6250 [ 435.548891][ T7999] do_filp_open+0x268/0x600 [ 435.553684][ T7999] do_sys_openat2+0x1bf/0x2f0 [ 435.558477][ T7999] __x64_sys_openat+0x2a1/0x310 [ 435.563526][ T7999] x64_sys_call+0x36f5/0x3c30 [ 435.571595][ T7999] do_syscall_64+0xcd/0x1e0 [ 435.576775][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.582809][ T7999] [ 435.585306][ T7999] Uninit was created at: [ 435.589884][ T7999] kmem_cache_alloc_noprof+0x915/0xe10 [ 435.595569][ T7999] ntfs_create_inode+0x5f5/0x4e40 [ 435.600715][ T7999] ntfs_create+0x56/0x70 [ 435.605164][ T7999] path_openat+0x2ed8/0x6250 [ 435.609928][ T7999] do_filp_open+0x268/0x600 [ 435.614608][ T7999] do_sys_openat2+0x1bf/0x2f0 [ 435.619410][ T7999] __x64_sys_openat+0x2a1/0x310 [ 435.625583][ T7999] x64_sys_call+0x36f5/0x3c30 [ 435.630455][ T7999] do_syscall_64+0xcd/0x1e0 [ 435.635555][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.641684][ T7999] [ 435.644211][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.2.677 Not tainted 6.14.0-rc2-syzkaller #0 [ 435.653327][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 435.663628][ T7999] ===================================================== [ 435.673685][ T7999] Disabling lock debugging due to kernel taint [ 435.679938][ T7999] Kernel panic - not syncing: kmsan.panic set ... [ 435.686437][ T7999] CPU: 0 UID: 0 PID: 7999 Comm: syz.2.677 Tainted: G B 6.14.0-rc2-syzkaller #0 [ 435.696876][ T7999] Tainted: [B]=BAD_PAGE [ 435.701083][ T7999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 435.711242][ T7999] Call Trace: [ 435.714583][ T7999] [ 435.717576][ T7999] dump_stack_lvl+0x216/0x2d0 [ 435.722351][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.728288][ T7999] dump_stack+0x1e/0x24 [ 435.732537][ T7999] panic+0x4e2/0xcf0 [ 435.736551][ T7999] ? kmsan_get_metadata+0xe1/0x1c0 [ 435.741779][ T7999] kmsan_report+0x2c7/0x2d0 [ 435.746386][ T7999] ? kmsan_internal_chain_origin+0xb0/0xd0 [ 435.752330][ T7999] ? __msan_warning+0x95/0x120 [ 435.757206][ T7999] ? sw842_compress+0x15eb/0x5990 [ 435.762360][ T7999] ? crypto842_scompress+0x4f/0x70 [ 435.767616][ T7999] ? scomp_acomp_comp_decomp+0x7c6/0xb90 [ 435.773400][ T7999] ? scomp_acomp_compress+0x32/0x40 [ 435.778801][ T7999] ? zswap_store+0x20e9/0x48a0 [ 435.783760][ T7999] ? swap_writepage+0xa67/0x1950 [ 435.788795][ T7999] ? shmem_writepage+0x2360/0x25a0 [ 435.794033][ T7999] ? shrink_folio_list+0x5dd2/0x8220 [ 435.799439][ T7999] ? evict_folios+0x94ed/0xb9c0 [ 435.804383][ T7999] ? try_to_shrink_lruvec+0xc58/0x1080 [ 435.809955][ T7999] ? shrink_lruvec+0x49a/0x47c0 [ 435.814959][ T7999] ? shrink_node+0x105e/0x51c0 [ 435.819851][ T7999] ? do_try_to_free_pages+0x820/0x2550 [ 435.825478][ T7999] ? try_to_free_mem_cgroup_pages+0x3fa/0xa60 [ 435.831730][ T7999] ? try_charge_memcg+0x71a/0x1780 [ 435.836960][ T7999] ? obj_cgroup_charge_pages+0x2cb/0x640 [ 435.842734][ T7999] ? __memcg_kmem_charge_page+0x151/0x520 [ 435.848574][ T7999] ? __alloc_frozen_pages_noprof+0x93d/0xe00 [ 435.854699][ T7999] ? alloc_pages_mpol+0x4cd/0x890 [ 435.859831][ T7999] ? alloc_pages_noprof+0x1b5/0x250 [ 435.865139][ T7999] ? io_region_allocate_pages+0x168/0x8b0 [ 435.870997][ T7999] ? io_create_region+0x6eb/0x810 [ 435.876254][ T7999] ? io_allocate_scq_urings+0x774/0xa50 [ 435.881994][ T7999] ? io_uring_create+0xabc/0x1440 [ 435.887148][ T7999] ? __se_sys_io_uring_setup+0x476/0x4d0 [ 435.892890][ T7999] ? __x64_sys_io_uring_setup+0x6c/0xa0 [ 435.898541][ T7999] ? x64_sys_call+0x2e82/0x3c30 [ 435.903494][ T7999] ? do_syscall_64+0xcd/0x1e0 [ 435.908262][ T7999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.914452][ T7999] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.920645][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.925960][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.931900][ T7999] ? add_bits+0xe9a/0xf70 [ 435.936349][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 435.941657][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 435.947587][ T7999] __msan_warning+0x95/0x120 [ 435.952277][ T7999] sw842_compress+0x15eb/0x5990 [ 435.957364][ T7999] crypto842_scompress+0x4f/0x70 [ 435.962415][ T7999] ? __pfx_crypto842_scompress+0x10/0x10 [ 435.968187][ T7999] scomp_acomp_comp_decomp+0x7c6/0xb90 [ 435.973789][ T7999] ? __pfx_scomp_acomp_compress+0x10/0x10 [ 435.979689][ T7999] scomp_acomp_compress+0x32/0x40 [ 435.984906][ T7999] zswap_store+0x20e9/0x48a0 [ 435.989644][ T7999] ? folio_free_swap+0x5b6/0xc50 [ 435.994699][ T7999] swap_writepage+0xa67/0x1950 [ 435.999557][ T7999] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 436.006158][ T7999] shmem_writepage+0x2360/0x25a0 [ 436.011228][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.016554][ T7999] ? __pfx_shmem_writepage+0x10/0x10 [ 436.021962][ T7999] shrink_folio_list+0x5dd2/0x8220 [ 436.027215][ T7999] ? filter_irq_stacks+0x60/0x1a0 [ 436.032358][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.037734][ T7999] evict_folios+0x94ed/0xb9c0 [ 436.042609][ T7999] try_to_shrink_lruvec+0xc58/0x1080 [ 436.048038][ T7999] shrink_lruvec+0x49a/0x47c0 [ 436.052848][ T7999] ? stack_depot_save_flags+0x2c/0x750 [ 436.058520][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.063827][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.069135][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.074443][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.080394][ T7999] ? page_counter_calculate_protection+0x289/0xa50 [ 436.087109][ T7999] ? mem_cgroup_iter+0xa9f/0xcb0 [ 436.092155][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.097463][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.103404][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.108734][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.114666][ T7999] shrink_node+0x105e/0x51c0 [ 436.119366][ T7999] ? kmsan_get_metadata+0x13e/0x1c0 [ 436.124677][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.130643][ T7999] do_try_to_free_pages+0x820/0x2550 [ 436.136089][ T7999] try_to_free_mem_cgroup_pages+0x3fa/0xa60 [ 436.142133][ T7999] try_charge_memcg+0x71a/0x1780 [ 436.147187][ T7999] ? kmsan_get_shadow_origin_ptr+0x38/0xb0 [ 436.153114][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.159092][ T7999] obj_cgroup_charge_pages+0x2cb/0x640 [ 436.164677][ T7999] __memcg_kmem_charge_page+0x151/0x520 [ 436.170354][ T7999] __alloc_frozen_pages_noprof+0x93d/0xe00 [ 436.176308][ T7999] alloc_pages_mpol+0x4cd/0x890 [ 436.181277][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.187248][ T7999] alloc_pages_noprof+0x1b5/0x250 [ 436.192467][ T7999] io_region_allocate_pages+0x168/0x8b0 [ 436.198136][ T7999] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 436.204082][ T7999] io_create_region+0x6eb/0x810 [ 436.209065][ T7999] io_allocate_scq_urings+0x774/0xa50 [ 436.214577][ T7999] io_uring_create+0xabc/0x1440 [ 436.219566][ T7999] __se_sys_io_uring_setup+0x476/0x4d0 [ 436.225200][ T7999] __x64_sys_io_uring_setup+0x6c/0xa0 [ 436.230750][ T7999] x64_sys_call+0x2e82/0x3c30 [ 436.235540][ T7999] do_syscall_64+0xcd/0x1e0 [ 436.240158][ T7999] ? clear_bhb_loop+0x25/0x80 [ 436.244956][ T7999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.251004][ T7999] RIP: 0033:0x7f7ccb58cde9 [ 436.255503][ T7999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.275242][ T7999] RSP: 002b:00007f7ccc330fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 436.283795][ T7999] RAX: ffffffffffffffda RBX: 00007f7ccb7a5fa0 RCX: 00007f7ccb58cde9 [ 436.291874][ T7999] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000003665 [ 436.299986][ T7999] RBP: 0000400000000100 R08: 0000000000000000 R09: 0000000000000000 [ 436.308042][ T7999] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 436.316098][ T7999] R13: 0000000000000000 R14: 0000000000003665 R15: 0000000000000000 [ 436.324229][ T7999] [ 436.327837][ T7999] Kernel Offset: disabled [ 436.332286][ T7999] Rebooting in 86400 seconds..