last executing test programs: 1m14.967308455s ago: executing program 1 (id=507): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m14.914806127s ago: executing program 1 (id=511): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001bc0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0xe7, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000000)="ff07000000000000", 0x400000}]) 668.9137ms ago: executing program 2 (id=2592): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x6001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x0, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10010}, 0x20004002) 621.066902ms ago: executing program 2 (id=2594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 588.044054ms ago: executing program 2 (id=2596): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x200, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) 587.785964ms ago: executing program 6 (id=2597): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="200000000000000084000000020000000a000800280000000b000002", @ANYRES32=r2], 0x20, 0x2400e044}, 0x0) 551.634446ms ago: executing program 7 (id=2598): io_setup(0x3ff, &(0x7f0000000500)=0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0) setpgid(r1, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) 550.993376ms ago: executing program 2 (id=2599): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000010c0)='highspeed', 0x9) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 458.59207ms ago: executing program 0 (id=2601): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = io_uring_setup(0x7858, &(0x7f0000000580)={0x0, 0xddf7, 0x2, 0xfffffdfe, 0x1c4}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2c, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) timer_create(0x0, 0x0, 0x0) close_range(r0, r0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000300)) 329.839155ms ago: executing program 3 (id=2613): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0, 0x2, 0x1, {0x1}}) io_uring_enter(r1, 0x47f6, 0x0, 0x4, 0x0, 0x0) close(0x3) 274.847358ms ago: executing program 7 (id=2605): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000280), 0x8002) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204010, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(0x0, 0xecf86c37d53049cc) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 192.072151ms ago: executing program 3 (id=2606): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000780)='kfree\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {}, {0x3, 0x0, 0x0, 0x1000000}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x8}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 130.304194ms ago: executing program 3 (id=2607): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/35, 0x23}], 0x1, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f00000003c0), 0x100000000000022d) 129.943034ms ago: executing program 3 (id=2608): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) 129.557234ms ago: executing program 7 (id=2609): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ppoll(&(0x7f0000000240)=[{r0, 0xa218}], 0x1, 0x0, 0x0, 0x0) 58.839177ms ago: executing program 7 (id=2610): r0 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/mnt\x00') 31.450728ms ago: executing program 3 (id=2611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x20050800) 0s ago: executing program 3 (id=2612): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): ss `syz.4.1208'. [ 77.875203][ T6767] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.935431][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.436903][ T6797] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 78.445277][ T6800] netlink: 'syz.3.1229': attribute type 14 has an invalid length. [ 78.453331][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 78.465782][ T6800] netlink: 'syz.3.1229': attribute type 14 has an invalid length. [ 78.473800][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1229'. [ 78.604172][ T6812] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 78.615446][ T6812] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 78.659911][ T6816] set_capacity_and_notify: 3 callbacks suppressed [ 78.659932][ T6816] loop2: detected capacity change from 0 to 1024 [ 78.673482][ T6816] EXT4-fs: Ignoring removed oldalloc option [ 78.679797][ T6816] ext2: Unknown parameter 'subj_type' [ 79.216522][ T6838] netlink: 332 bytes leftover after parsing attributes in process `syz.4.1246'. [ 79.262649][ T6842] loop3: detected capacity change from 0 to 512 [ 79.288400][ T6842] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.305006][ T6845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1249'. [ 79.331720][ T6842] EXT4-fs (loop3): mount failed [ 79.425709][ T6859] loop0: detected capacity change from 0 to 1024 [ 79.432501][ T6859] EXT4-fs: Ignoring removed orlov option [ 79.444786][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.492065][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.656054][ T6879] loop0: detected capacity change from 0 to 4096 [ 79.665686][ T6885] dummy0: entered promiscuous mode [ 79.673321][ T6885] macsec0: entered allmulticast mode [ 79.680032][ T6879] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.692632][ T6885] dummy0: entered allmulticast mode [ 79.729899][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.883739][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 79.883776][ T29] audit: type=1326 audit(1765114169.998:1586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 79.945978][ T29] audit: type=1326 audit(1765114169.998:1587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 79.969603][ T29] audit: type=1326 audit(1765114169.998:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 79.993394][ T29] audit: type=1326 audit(1765114169.998:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 80.017248][ T29] audit: type=1326 audit(1765114169.998:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 80.020486][ T6915] loop2: detected capacity change from 0 to 128 [ 80.040949][ T29] audit: type=1326 audit(1765114169.998:1591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 80.070553][ T29] audit: type=1326 audit(1765114169.998:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6904 comm="syz.2.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 80.113100][ T6915] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 80.126352][ T6915] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.141448][ T29] audit: type=1400 audit(1765114170.248:1593): avc: denied { setattr } for pid=6914 comm="syz.2.1278" path="/250/file1/file1" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.202218][ T6928] loop3: detected capacity change from 0 to 128 [ 80.211028][ T6928] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.219144][ T29] audit: type=1400 audit(1765114170.328:1594): avc: denied { ioctl } for pid=6914 comm="syz.2.1278" path="/250/file1/file1" dev="loop2" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 80.224061][ T6928] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 80.352948][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.369357][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.428427][ T29] audit: type=1326 audit(1765114170.538:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6940 comm="syz.0.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806adf749 code=0x7ffc0000 [ 80.462870][ T6945] syz_tun: entered allmulticast mode [ 80.494216][ T6945] dvmrp8: entered allmulticast mode [ 80.503737][ T6952] netlink: 'syz.0.1293': attribute type 3 has an invalid length. [ 80.522993][ T6956] __nla_validate_parse: 4 callbacks suppressed [ 80.523031][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 80.538834][ T6956] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1296'. [ 80.625281][ T6974] loop0: detected capacity change from 0 to 512 [ 80.633332][ T6974] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.646724][ T6974] EXT4-fs (loop0): 1 truncate cleaned up [ 80.652892][ T6974] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.698341][ T6983] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1307'. [ 80.708212][ T6983] 0X: renamed from caif0 [ 80.714293][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.714633][ T6985] netlink: 444 bytes leftover after parsing attributes in process `+}[K'. [ 80.732622][ T6985] netlink: 4 bytes leftover after parsing attributes in process `+}[K'. [ 80.745166][ T6983] 0X: entered allmulticast mode [ 80.750580][ T6983] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 80.790507][ T6988] loop0: detected capacity change from 0 to 512 [ 80.800070][ T6988] journal_path: Non-blockdev passed as './bus' [ 80.806500][ T6988] EXT4-fs: error: could not find journal device path [ 80.889709][ T7004] loop0: detected capacity change from 0 to 256 [ 81.088785][ T7039] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 81.124347][ T7046] IPv6: Can't replace route, no match found [ 81.131224][ T7048] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1336'. [ 81.192214][ T7054] loop3: detected capacity change from 0 to 512 [ 81.202794][ T7054] journal_path: Non-blockdev passed as './bus' [ 81.209158][ T7054] EXT4-fs: error: could not find journal device path [ 81.267273][ T7065] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1343'. [ 81.351465][ T7080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1351'. [ 81.458204][ T7091] netlink: 'syz.2.1355': attribute type 21 has an invalid length. [ 81.466450][ T7091] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1355'. [ 81.475156][ T7093] netlink: 444 bytes leftover after parsing attributes in process `+}[K'. [ 81.514591][ T7097] lo speed is unknown, defaulting to 1000 [ 81.553176][ T7097] lo speed is unknown, defaulting to 1000 [ 81.684191][ T7107] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 81.692219][ T7107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.705802][ T7107] System zones: 0-1, 15-15, 18-18, 34-34 [ 81.713426][ T7107] EXT4-fs (loop5): orphan cleanup on readonly fs [ 81.725560][ T7107] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 81.740304][ T7107] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 81.748184][ T7107] EXT4-fs (loop5): 1 truncate cleaned up [ 81.754842][ T7107] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 81.787771][ T7107] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 81.795751][ T7107] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 81.819530][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.036026][ T7137] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 82.074981][ T7137] EXT4-fs (loop2): 1 truncate cleaned up [ 82.081376][ T7137] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.125250][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.387058][ T7132] Set syz1 is full, maxelem 65536 reached [ 82.451896][ T7155] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 82.464076][ T7155] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm gtp: invalid indirect mapped block 4294967295 (level 0) [ 82.478259][ T7155] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 82.495530][ T7155] EXT4-fs (loop3): 1 orphan inode deleted [ 82.501394][ T7155] EXT4-fs (loop3): 1 truncate cleaned up [ 82.507680][ T7155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.525431][ T7155] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 82.584021][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.584418][ T7165] IPVS: Scheduler module ip_vs_ not found [ 82.671756][ T7177] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 82.705683][ T7177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.728981][ T7177] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.1390: lblock 23 mapped to illegal pblock 18 (length 1) [ 82.769159][ T3860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.869038][ T7203] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 82.925494][ T7209] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.953675][ T7209] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 82.963411][ T7209] EXT4-fs (loop4): orphan cleanup on readonly fs [ 82.978926][ T7209] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.1402: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.994398][ T7209] EXT4-fs (loop4): 1 orphan inode deleted [ 83.027784][ T7209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.159369][ T3860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.464283][ T7291] netlink: 'syz.4.1417': attribute type 1 has an invalid length. [ 83.522221][ T7299] xt_HMARK: spi-set and port-set can't be combined [ 83.571878][ T4682] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.850468][ T7351] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.860405][ T7351] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.925836][ T7351] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.935692][ T7351] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.942339][ T7365] set_capacity_and_notify: 6 callbacks suppressed [ 83.942360][ T7365] loop0: detected capacity change from 0 to 512 [ 83.985913][ T7351] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 83.995837][ T7351] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.008020][ T7365] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.016236][ T7365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 84.030860][ T7365] System zones: 0-1, 15-15, 18-18, 34-34 [ 84.037158][ T7365] EXT4-fs (loop0): orphan cleanup on readonly fs [ 84.044681][ T7365] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 84.059499][ T7365] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 84.068385][ T7351] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 84.078351][ T7351] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.091759][ T7365] EXT4-fs (loop0): 1 truncate cleaned up [ 84.098168][ T7365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.131883][ T4682] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.140184][ T4682] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.151386][ T7365] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 84.159483][ T7365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 84.184782][ T4682] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.193086][ T4682] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.201808][ T4682] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.210085][ T4682] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229181][ T4682] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.237606][ T4682] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.246557][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.499788][ T7433] SELinux: failed to load policy [ 84.551659][ T7438] loop0: detected capacity change from 0 to 256 [ 84.565116][ T7438] FAT-fs (loop0): Directory bread(block 64) failed [ 84.571733][ T7438] FAT-fs (loop0): Directory bread(block 65) failed [ 84.578451][ T7438] FAT-fs (loop0): Directory bread(block 66) failed [ 84.585199][ T7438] FAT-fs (loop0): Directory bread(block 67) failed [ 84.591819][ T7438] FAT-fs (loop0): Directory bread(block 68) failed [ 84.598475][ T7438] FAT-fs (loop0): Directory bread(block 69) failed [ 84.605183][ T7438] FAT-fs (loop0): Directory bread(block 70) failed [ 84.611728][ T7438] FAT-fs (loop0): Directory bread(block 71) failed [ 84.619263][ T7438] FAT-fs (loop0): Directory bread(block 72) failed [ 84.625839][ T7438] FAT-fs (loop0): Directory bread(block 73) failed [ 84.660585][ T7442] IPVS: stopping backup sync thread 3836 ... [ 84.799770][ T7460] loop5: detected capacity change from 0 to 1024 [ 84.806772][ T7460] EXT4-fs: Ignoring removed bh option [ 84.817769][ T7460] EXT4-fs: inline encryption not supported [ 84.824977][ T7460] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.837025][ T7460] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 84.846755][ T7460] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1457: lblock 2 mapped to illegal pblock 2 (length 1) [ 84.861204][ T7460] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1457: lblock 0 mapped to illegal pblock 48 (length 1) [ 84.875652][ T7460] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1457: Failed to acquire dquot type 0 [ 84.887398][ T7460] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 84.897352][ T7460] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1457: mark_inode_dirty error [ 84.908868][ T7460] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 84.919285][ T7460] EXT4-fs (loop5): 1 orphan inode deleted [ 84.925672][ T7460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.939194][ T4682] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:56: lblock 1 mapped to illegal pblock 1 (length 1) [ 84.953736][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 84.953755][ T29] audit: type=1400 audit(1765114175.058:1742): avc: denied { remount } for pid=7459 comm="syz.5.1457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 84.979715][ T4682] Quota error (device loop5): remove_tree: Can't read quota data block 1 [ 84.980734][ T7471] lo speed is unknown, defaulting to 1000 [ 84.988265][ T4682] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:56: Failed to release dquot type 0 [ 84.989113][ T7460] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 85.031986][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.038054][ T7471] lo speed is unknown, defaulting to 1000 [ 85.162032][ T29] audit: type=1400 audit(1765114175.268:1743): avc: denied { create } for pid=7476 comm="syz.5.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 85.210250][ T29] audit: type=1400 audit(1765114175.318:1744): avc: denied { create } for pid=7479 comm="syz.5.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.247236][ T29] audit: type=1400 audit(1765114175.338:1745): avc: denied { write } for pid=7479 comm="syz.5.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.267415][ T29] audit: type=1400 audit(1765114175.338:1746): avc: denied { nlmsg_write } for pid=7479 comm="syz.5.1464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 85.311468][ T29] audit: type=1400 audit(1765114175.418:1747): avc: denied { read } for pid=7483 comm="syz.0.1465" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.335164][ T29] audit: type=1400 audit(1765114175.418:1748): avc: denied { open } for pid=7483 comm="syz.0.1465" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.360790][ T29] audit: type=1400 audit(1765114175.418:1749): avc: denied { ioctl } for pid=7483 comm="syz.0.1465" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x2284 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.424988][ T7488] loop3: detected capacity change from 0 to 512 [ 85.459879][ T7497] loop0: detected capacity change from 0 to 512 [ 85.469124][ T7488] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 85.477228][ T7488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 85.485611][ T7488] System zones: 0-1, 15-15, 18-18, 34-34 [ 85.491876][ T7488] EXT4-fs (loop3): orphan cleanup on readonly fs [ 85.500370][ T7497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.501541][ T7488] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 85.522602][ T7497] ext4 filesystem being mounted at /326/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.523283][ T7488] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 85.547631][ T7488] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 85.554912][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.554894][ T7488] EXT4-fs (loop3): 1 truncate cleaned up [ 85.555421][ T7488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 85.625921][ T7488] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 85.633996][ T7488] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 85.653499][ T5688] Bluetooth: hci0: command 0x1003 tx timeout [ 85.659725][ T3566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.679077][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.720381][ T7521] loop4: detected capacity change from 0 to 2048 [ 85.764465][ T7521] EXT4-fs (loop4): failed to initialize system zone (-117) [ 85.772357][ T7521] EXT4-fs (loop4): mount failed [ 85.898808][ T7547] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 85.954564][ T7558] __nla_validate_parse: 8 callbacks suppressed [ 85.954580][ T7558] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1485'. [ 86.028966][ T7569] loop3: detected capacity change from 0 to 1024 [ 86.029275][ T7569] EXT4-fs: Ignoring removed bh option [ 86.029384][ T7569] EXT4-fs: inline encryption not supported [ 86.036680][ T7569] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.037775][ T7569] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 86.040470][ T7569] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 2: comm syz.3.1488: lblock 2 mapped to illegal pblock 2 (length 1) [ 86.040626][ T7569] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 48: comm syz.3.1488: lblock 0 mapped to illegal pblock 48 (length 1) [ 86.040786][ T7569] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1488: Failed to acquire dquot type 0 [ 86.041007][ T7569] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 86.041081][ T7569] EXT4-fs error (device loop3): ext4_evict_inode:253: inode #11: comm syz.3.1488: mark_inode_dirty error [ 86.041160][ T7569] EXT4-fs warning (device loop3): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 86.041251][ T7569] EXT4-fs (loop3): 1 orphan inode deleted [ 86.041789][ T7569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.057247][ T4671] EXT4-fs error (device loop3): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 86.057421][ T4671] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:45: Failed to release dquot type 0 [ 86.076292][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.231946][ T3313] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 86.232133][ T3313] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 86.232240][ T3313] EXT4-fs error (device loop3): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 86.289545][ T7585] lo speed is unknown, defaulting to 1000 [ 86.362267][ T7596] loop0: detected capacity change from 0 to 164 [ 86.409179][ T7585] lo speed is unknown, defaulting to 1000 [ 86.421670][ T7601] netlink: 'syz.0.1493': attribute type 1 has an invalid length. [ 86.421692][ T7601] netlink: 'syz.0.1493': attribute type 4 has an invalid length. [ 86.421707][ T7601] netlink: 212 bytes leftover after parsing attributes in process `syz.0.1493'. [ 86.911055][ T7644] loop0: detected capacity change from 0 to 128 [ 86.911867][ T7644] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 87.024219][ T7668] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 87.073210][ T7675] loop4: detected capacity change from 0 to 128 [ 87.141771][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.141771][ T7681] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 87.168954][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.168954][ T7681] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 87.183350][ T7668] SELinux: failed to load policy [ 87.222476][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.222476][ T7681] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 87.241372][ T7690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 87.288913][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.288913][ T7681] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 87.313586][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.313586][ T7681] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 87.328138][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.328138][ T7681] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 87.353441][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.353441][ T7681] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 87.370793][ T7707] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 87.378840][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.378840][ T7681] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 87.391226][ T7707] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 87.397214][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.397214][ T7681] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 87.403302][ T7707] FAT-fs (loop3): Filesystem has been set read-only [ 87.423804][ T7681] syz.4.1503: attempt to access beyond end of device [ 87.423804][ T7681] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 87.607120][ T7736] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.625968][ T7736] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.639204][ T7736] ext4 filesystem being mounted at /292/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.646509][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 87.660407][ T7742] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1522'. [ 87.660790][ T7736] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.1521: corrupted inode contents [ 87.681765][ T7736] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.1521: mark_inode_dirty error [ 87.693569][ T7736] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.1521: corrupted inode contents [ 87.706109][ T7736] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #18: comm syz.4.1521: mark_inode_dirty error [ 87.718949][ T7736] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #18: comm syz.4.1521: mark inode dirty (error -117) [ 87.732314][ T7736] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 87.743571][ T7745] netlink: 'syz.0.1523': attribute type 29 has an invalid length. [ 87.764320][ T3860] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.777527][ T7747] netlink: 'syz.0.1534': attribute type 19 has an invalid length. [ 87.785739][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 87.799091][ T4693] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.799192][ T7747] netlink: 'syz.0.1534': attribute type 19 has an invalid length. [ 87.807808][ T4693] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.815840][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 87.824812][ T4693] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.843656][ T4693] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.069734][ T7758] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 88.084624][ T7758] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 88.099555][ T7758] EXT4-fs (loop5): 1 truncate cleaned up [ 88.106341][ T7758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.135400][ T5108] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.426345][ T7781] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.441673][ T7785] dummy0: entered allmulticast mode [ 88.447440][ T7785] dummy0: left allmulticast mode [ 88.467254][ T7781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.480235][ T7781] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.484667][ T7794] netlink: 'syz.5.1543': attribute type 19 has an invalid length. [ 88.498925][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'. [ 88.509145][ T7781] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.1540: corrupted inode contents [ 88.511641][ T7794] netlink: 'syz.5.1543': attribute type 19 has an invalid length. [ 88.523577][ T4650] nci: nci_ntf_packet: unsupported ntf opcode 0xf2e [ 88.529076][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1543'. [ 88.536089][ T7781] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.1540: mark_inode_dirty error [ 88.545182][ T4671] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.556385][ T7781] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.1540: corrupted inode contents [ 88.564870][ T4671] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.577146][ T7781] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #18: comm syz.2.1540: mark_inode_dirty error [ 88.585116][ T4671] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.605303][ T4671] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 88.613869][ T7781] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #18: comm syz.2.1540: mark inode dirty (error -117) [ 88.627409][ T7781] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 88.665055][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.744328][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1545'. [ 88.753331][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1545'. [ 88.967365][ T7828] lo speed is unknown, defaulting to 1000 [ 89.004999][ T7828] lo speed is unknown, defaulting to 1000 [ 89.225611][ T7838] Falling back ldisc for ttyS3. [ 89.536292][ T7864] set_capacity_and_notify: 6 callbacks suppressed [ 89.536312][ T7864] loop4: detected capacity change from 0 to 1024 [ 89.536772][ T7864] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.590092][ T7868] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 89.685300][ T7876] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 89.685343][ T7876] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 89.685386][ T7876] vhci_hcd vhci_hcd.0: Device attached [ 89.685887][ T7876] 9pnet_fd: Insufficient options for proto=fd [ 89.686826][ T7877] vhci_hcd: connection closed [ 89.693525][ T4671] vhci_hcd vhci_hcd.3: stop threads [ 89.693614][ T4671] vhci_hcd vhci_hcd.3: release socket [ 89.693634][ T4671] vhci_hcd vhci_hcd.3: disconnect device [ 89.963658][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 89.963675][ T29] audit: type=1326 audit(1765114180.078:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbba03d2005 code=0x7ffc0000 [ 89.999510][ T29] audit: type=1326 audit(1765114180.108:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbba03d2005 code=0x7ffc0000 [ 90.023718][ T29] audit: type=1326 audit(1765114180.108:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 90.047382][ T29] audit: type=1326 audit(1765114180.108:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 90.064638][ T29] audit: type=1326 audit(1765114180.158:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 90.095849][ T29] audit: type=1326 audit(1765114180.158:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7892 comm="syz.2.1586" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 90.135583][ T29] audit: type=1400 audit(1765114180.238:1942): avc: denied { nlmsg_read } for pid=7906 comm="syz.4.1593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 90.135622][ T29] audit: type=1400 audit(1765114180.238:1943): avc: denied { audit_write } for pid=7906 comm="syz.4.1593" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 90.135725][ T29] audit: type=1107 audit(1765114180.238:1944): pid=7906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 90.218428][ T7911] loop4: detected capacity change from 0 to 512 [ 90.221742][ T7911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 90.232660][ T7911] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 90.232871][ T7911] EXT4-fs (loop4): 1 truncate cleaned up [ 90.263952][ T29] audit: type=1400 audit(1765114180.378:1945): avc: denied { write } for pid=7915 comm="syz.3.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.289166][ T7920] netlink: 'syz.4.1599': attribute type 29 has an invalid length. [ 90.289985][ T7920] netlink: 'syz.4.1599': attribute type 29 has an invalid length. [ 90.722688][ T7947] netlink: 'syz.5.1610': attribute type 1 has an invalid length. [ 90.768457][ T7950] lo speed is unknown, defaulting to 1000 [ 90.833901][ T7950] lo speed is unknown, defaulting to 1000 [ 90.915314][ T7957] : renamed from vlan0 [ 90.986347][ T7961] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 91.002016][ T3485] lo speed is unknown, defaulting to 1000 [ 91.027302][ T7962] IPVS: stopping master sync thread 7963 ... [ 91.033625][ T7963] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 91.123149][ T7969] __nla_validate_parse: 8 callbacks suppressed [ 91.123169][ T7969] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1618'. [ 91.163367][ T7969] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1618'. [ 91.350134][ T4671] nci: nci_ntf_packet: unsupported ntf opcode 0xf2e [ 91.412633][ T7995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1628'. [ 92.110826][ T8009] SELinux: Context system_u:object_r:systemd_tmpfiles_exec_t:s0 is not valid (left unmapped). [ 92.142698][ T8015] rdma_rxe: rxe_newlink: failed to add syz_tun [ 92.216200][ T8028] validate_nla: 4 callbacks suppressed [ 92.216219][ T8028] netlink: 'syz.5.1642': attribute type 29 has an invalid length. [ 92.246982][ T8028] netlink: 'syz.5.1642': attribute type 29 has an invalid length. [ 92.261533][ T8028] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1642'. [ 92.458140][ T8052] loop5: detected capacity change from 0 to 8192 [ 92.485394][ T8056] loop4: detected capacity change from 0 to 256 [ 92.492861][ T8056] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.529717][ T8060] ip6gre1: entered allmulticast mode [ 92.533597][ T3566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 92.535616][ T5688] Bluetooth: hci0: command 0x1003 tx timeout [ 92.544189][ T8058] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 92.555503][ T8058] vhci_hcd vhci_hcd.2: invalid port number 96 [ 92.561768][ T8058] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 92.600811][ T8064] netlink: 'syz.2.1660': attribute type 3 has an invalid length. [ 92.630195][ T8068] Falling back ldisc for ttyS3. [ 92.695622][ T8078] loop5: detected capacity change from 0 to 512 [ 92.720499][ T8079] loop3: detected capacity change from 0 to 2048 [ 92.740394][ T8078] EXT4-fs error (device loop5): ext4_quota_enable:7177: inode #4: comm syz.5.1666: iget: bogus i_mode (254) [ 92.757912][ T8078] EXT4-fs error (device loop5): ext4_quota_enable:7180: comm syz.5.1666: Bad quota inode: 4, type: 1 [ 92.771971][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 92.781274][ T8078] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 92.796722][ T8086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 92.806272][ T8079] loop3: p1 < > p4 [ 92.811280][ T8079] loop3: p4 size 8388608 extends beyond EOD, truncated [ 92.840048][ T8078] EXT4-fs (loop5): mount failed [ 92.886329][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1672'. [ 92.895593][ T8092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1672'. [ 93.016050][ T8098] lo speed is unknown, defaulting to 1000 [ 93.074383][ T8098] lo speed is unknown, defaulting to 1000 [ 93.088065][ T8103] Falling back ldisc for ttyS3. [ 93.260020][ T8104] lo speed is unknown, defaulting to 1000 [ 93.320810][ T8104] lo speed is unknown, defaulting to 1000 [ 93.342826][ T8121] loop0: detected capacity change from 0 to 512 [ 93.364105][ T8121] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 93.389484][ T8121] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 93.404222][ T8121] EXT4-fs (loop0): 1 truncate cleaned up [ 93.492597][ T8104] chnl_net:caif_netlink_parms(): no params data found [ 93.594150][ T8140] IPVS: Error connecting to the multicast addr [ 93.656872][ T8104] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.664005][ T8104] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.683595][ T8148] hub 9-0:1.0: USB hub found [ 93.702044][ T8148] hub 9-0:1.0: 8 ports detected [ 93.725810][ T8104] bridge_slave_0: entered allmulticast mode [ 93.732453][ T8104] bridge_slave_0: entered promiscuous mode [ 93.752290][ T8104] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.759550][ T8104] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.769819][ T8104] bridge_slave_1: entered allmulticast mode [ 93.776769][ T8104] bridge_slave_1: entered promiscuous mode [ 93.803488][ T8104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.815424][ T8104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.839197][ T8104] team0: Port device team_slave_0 added [ 93.846064][ T8104] team0: Port device team_slave_1 added [ 93.864751][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.871853][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.898143][ T8104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.910618][ T8104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.917647][ T8104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.943798][ T8104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.025271][ T8104] hsr_slave_0: entered promiscuous mode [ 94.031698][ T8104] hsr_slave_1: entered promiscuous mode [ 94.043557][ T8104] debugfs: 'hsr0' already exists in 'hsr' [ 94.049500][ T8104] Cannot create hsr debugfs directory [ 94.065691][ T8169] netlink: 'syz.3.1700': attribute type 3 has an invalid length. [ 94.171082][ T8179] 9pnet_fd: Insufficient options for proto=fd [ 94.183842][ T8104] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.216698][ T8181] loop3: detected capacity change from 0 to 512 [ 94.235550][ T8181] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.246325][ T8104] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.386051][ T8181] ext4 filesystem being mounted at /321/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 94.411577][ T8104] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.474730][ T8104] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 94.579098][ T8191] loop3: detected capacity change from 0 to 512 [ 94.589559][ T8104] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.606694][ T8104] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.616670][ T8104] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.633548][ T8189] loop0: detected capacity change from 0 to 2048 [ 94.634000][ T8191] EXT4-fs error (device loop3): ext4_quota_enable:7177: inode #4: comm syz.3.1708: iget: bogus i_mode (254) [ 94.654639][ T8104] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.664201][ T8189] loop0: p1 < > p4 [ 94.668303][ T8191] EXT4-fs error (device loop3): ext4_quota_enable:7180: comm syz.3.1708: Bad quota inode: 4, type: 1 [ 94.680504][ T8189] loop0: p4 size 8388608 extends beyond EOD, truncated [ 94.740441][ T8191] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 94.764981][ T8191] EXT4-fs (loop3): mount failed [ 94.790587][ T8104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.847249][ T8104] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.874854][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.882047][ T4645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.894643][ T8215] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 94.894643][ T8215] program syz.4.1716 not setting count and/or reply_len properly [ 94.926256][ T4693] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.933488][ T4693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.944321][ T8219] loop3: detected capacity change from 0 to 512 [ 94.969611][ T8219] ext4 filesystem being mounted at /326/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.984445][ T8104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.995051][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 94.995070][ T29] audit: type=1400 audit(1765114185.098:2052): avc: denied { create } for pid=8218 comm="syz.3.1718" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 94.997118][ T8219] EXT4-fs error (device loop3): ext4_empty_dir:3075: inode #12: comm syz.3.1718: invalid size [ 95.001735][ T29] audit: type=1400 audit(1765114185.108:2053): avc: denied { rename } for pid=8218 comm="syz.3.1718" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 95.053758][ T29] audit: type=1400 audit(1765114185.108:2054): avc: denied { rmdir } for pid=8218 comm="syz.3.1718" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 95.076028][ T8212] loop0: detected capacity change from 0 to 8192 [ 95.162487][ T29] audit: type=1326 audit(1765114185.258:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 95.186223][ T29] audit: type=1326 audit(1765114185.258:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 95.195355][ T8104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.210071][ T29] audit: type=1326 audit(1765114185.258:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 95.240199][ T29] audit: type=1326 audit(1765114185.258:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 95.264061][ T29] audit: type=1326 audit(1765114185.258:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8229 comm="syz.3.1721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 95.373972][ T8243] loop0: detected capacity change from 0 to 512 [ 95.404631][ T8243] EXT4-fs error (device loop0): ext4_quota_enable:7177: inode #4: comm syz.0.1724: iget: bogus i_mode (254) [ 95.443615][ T8243] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.1724: Bad quota inode: 4, type: 1 [ 95.479270][ T8253] loop3: detected capacity change from 0 to 256 [ 95.495854][ T8243] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 95.533572][ T8104] veth0_vlan: entered promiscuous mode [ 95.544322][ T8253] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 95.545635][ T8104] veth1_vlan: entered promiscuous mode [ 95.563699][ T8243] EXT4-fs (loop0): mount failed [ 95.609287][ T8104] veth0_macvtap: entered promiscuous mode [ 95.630633][ T4693] bridge_slave_1: left allmulticast mode [ 95.636415][ T4693] bridge_slave_1: left promiscuous mode [ 95.642163][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.650168][ T8262] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 95.656797][ T8262] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 95.664473][ T8262] vhci_hcd vhci_hcd.0: Device attached [ 95.670216][ T4693] bridge_slave_0: left allmulticast mode [ 95.676588][ T4693] bridge_slave_0: left promiscuous mode [ 95.682319][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.684141][ T8262] 9pnet_fd: Insufficient options for proto=fd [ 95.698547][ T8263] vhci_hcd: connection closed [ 95.698729][ T4680] vhci_hcd vhci_hcd.0: stop threads [ 95.708934][ T4680] vhci_hcd vhci_hcd.0: release socket [ 95.714404][ T4680] vhci_hcd vhci_hcd.0: disconnect device [ 95.786111][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.798539][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.814581][ T4693] bond0 (unregistering): Released all slaves [ 95.833795][ T4693] bond1 (unregistering): (slave batadv1): Releasing active interface [ 95.842439][ T4693] bond1 (unregistering): Released all slaves [ 95.852080][ T8104] veth1_macvtap: entered promiscuous mode [ 95.866701][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.887277][ T8255] lo speed is unknown, defaulting to 1000 [ 95.898034][ T8104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.899063][ T29] audit: type=1400 audit(1765114185.998:2060): avc: denied { map } for pid=8269 comm="syz.3.1730" path="socket:[21553]" dev="sockfs" ino=21553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.913299][ T4650] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.928735][ T29] audit: type=1400 audit(1765114185.998:2061): avc: denied { read accept } for pid=8269 comm="syz.3.1730" path="socket:[21553]" dev="sockfs" ino=21553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 96.035671][ T8255] lo speed is unknown, defaulting to 1000 [ 96.080570][ T4650] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.114475][ T4650] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.127882][ T8281] team0 (unregistering): Port device team_slave_0 removed [ 96.137533][ T8281] team0 (unregistering): Port device team_slave_1 removed [ 96.150343][ T4693] hsr_slave_0: left promiscuous mode [ 96.156217][ T4693] hsr_slave_1: left promiscuous mode [ 96.162052][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.169076][ T8284] xt_hashlimit: max too large, truncated to 1048576 [ 96.176304][ T8284] No such timeout policy "syz1" [ 96.176522][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.273581][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 96.299917][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 96.355619][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 96.363086][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.370571][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.378066][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.385577][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.393118][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.418092][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.425588][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.433092][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 96.438110][ T4650] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.440567][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.460917][ T3382] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 96.472603][ T8294] hub 9-0:1.0: USB hub found [ 96.495637][ T8294] hub 9-0:1.0: 8 ports detected [ 96.498826][ T8296] loop0: detected capacity change from 0 to 512 [ 96.507958][ T8296] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.552536][ T8296] ext4 filesystem being mounted at /398/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.565873][ T8255] chnl_net:caif_netlink_parms(): no params data found [ 96.583090][ T8303] team0: Device gtp0 is of different type [ 96.666399][ T8255] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.673553][ T8255] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.703471][ T8255] bridge_slave_0: entered allmulticast mode [ 96.723938][ T8308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8308 comm=syz.3.1743 [ 96.732533][ T8255] bridge_slave_0: entered promiscuous mode [ 96.736446][ T8308] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8308 comm=syz.3.1743 [ 96.755989][ T8255] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.763097][ T8255] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.770654][ T8255] bridge_slave_1: entered allmulticast mode [ 96.777783][ T8255] bridge_slave_1: entered promiscuous mode [ 96.811262][ T8255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.822932][ T8255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.852749][ T8255] team0: Port device team_slave_0 added [ 96.861159][ T8255] team0: Port device team_slave_1 added [ 96.883397][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.890487][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.916421][ T8255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.934023][ T8255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.941022][ T8255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.967051][ T8255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.027537][ T8255] hsr_slave_0: entered promiscuous mode [ 97.037433][ T8255] hsr_slave_1: entered promiscuous mode [ 97.053211][ T8255] debugfs: 'hsr0' already exists in 'hsr' [ 97.059074][ T8255] Cannot create hsr debugfs directory [ 97.099377][ T8336] program syz.3.1756 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.199165][ T4693] bridge_slave_1: left allmulticast mode [ 97.205167][ T4693] bridge_slave_1: left promiscuous mode [ 97.210882][ T4693] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.228743][ T4693] bridge_slave_0: left allmulticast mode [ 97.234500][ T4693] bridge_slave_0: left promiscuous mode [ 97.240281][ T4693] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.346457][ T4693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.357134][ T4693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.366627][ T8361] netlink: 'syz.0.1765': attribute type 39 has an invalid length. [ 97.375191][ T4693] bond0 (unregistering): Released all slaves [ 97.412333][ T8255] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 97.429609][ T8255] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 97.447683][ T8255] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 97.469855][ T8255] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 97.483467][ T4693] hsr_slave_0: left promiscuous mode [ 97.489571][ T4693] hsr_slave_1: left promiscuous mode [ 97.498858][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.506693][ T4693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.514639][ T4693] batman_adv: batadv0: Interface deactivated: dummy0 [ 97.521346][ T4693] batman_adv: batadv0: Removing interface: dummy0 [ 97.553303][ T4693] team0 (unregistering): Port device team_slave_1 removed [ 97.565239][ T4693] team0 (unregistering): Port device team_slave_0 removed [ 97.622200][ T9] lo speed is unknown, defaulting to 1000 [ 97.628059][ T9] infiniband syz2: ib_query_port failed (-19) [ 97.688910][ T8255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.706058][ T8255] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.717121][ T4650] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.724257][ T4650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.736274][ T4647] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.743523][ T4647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.855194][ T8409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8409 comm=syz.0.1784 [ 97.868125][ T8409] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8409 comm=syz.0.1784 [ 97.906355][ T8255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.017158][ T8431] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1790'. [ 98.034289][ T8430] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1789'. [ 98.167280][ T8451] loop0: detected capacity change from 0 to 128 [ 98.173739][ T8448] wireguard0: entered promiscuous mode [ 98.174791][ T8451] FAT-fs (loop0): Directory bread(block 414) failed [ 98.179373][ T8448] wireguard0: entered allmulticast mode [ 98.193778][ T8451] FAT-fs (loop0): Directory bread(block 415) failed [ 98.200449][ T8451] FAT-fs (loop0): Directory bread(block 416) failed [ 98.217325][ T8255] veth0_vlan: entered promiscuous mode [ 98.222963][ T8451] FAT-fs (loop0): Directory bread(block 417) failed [ 98.222996][ T8451] FAT-fs (loop0): Directory bread(block 418) failed [ 98.242239][ T8255] veth1_vlan: entered promiscuous mode [ 98.248487][ T8451] FAT-fs (loop0): Directory bread(block 419) failed [ 98.261735][ T8255] veth0_macvtap: entered promiscuous mode [ 98.269784][ T8255] veth1_macvtap: entered promiscuous mode [ 98.280707][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.282484][ T8451] FAT-fs (loop0): Directory bread(block 420) failed [ 98.298737][ T8451] FAT-fs (loop0): Directory bread(block 421) failed [ 98.315395][ T8255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.346652][ T4669] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.355588][ T4669] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.369998][ T4669] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.394138][ T8451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1796'. [ 98.401482][ T4669] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.476619][ T8475] loop0: detected capacity change from 0 to 128 [ 98.493754][ T8475] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.512851][ T8475] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.547552][ T4680] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 98.749495][ T8512] vlan2: entered allmulticast mode [ 98.845315][ T8530] loop0: detected capacity change from 0 to 1024 [ 98.954529][ T8530] EXT4-fs warning (device loop0): ext4_rename_delete:3729: inode #12: comm syz.0.1833: Deleting old file: nlink 2, error=-2 [ 99.199331][ T8548] EXT4-fs: Ignoring removed bh option [ 99.216451][ T8552] netlink: 'syz.6.1842': attribute type 3 has an invalid length. [ 99.226340][ T8548] ext4 filesystem being mounted at /328/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.336584][ T8569] netlink: 444 bytes leftover after parsing attributes in process `syz.3.1848'. [ 99.345904][ T8569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1848'. [ 99.487533][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1855'. [ 99.496612][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1855'. [ 99.505912][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1855'. [ 99.516074][ T8583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1855'. [ 99.520250][ T8585] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 99.533062][ T8585] FAT-fs (loop3): Filesystem has been set read-only [ 99.540297][ T8585] bio_check_eod: 212 callbacks suppressed [ 99.540329][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.540329][ T8585] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 99.560072][ T8585] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 99.568046][ T8585] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 99.576631][ T8587] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1857'. [ 99.579175][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.579175][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.599251][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.599251][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.612664][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.612664][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.626753][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.626753][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.640295][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.640295][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.654645][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.654645][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.657024][ T8589] set_capacity_and_notify: 2 callbacks suppressed [ 99.657043][ T8589] loop2: detected capacity change from 0 to 2048 [ 99.668428][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.668428][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.668483][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.668483][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.672011][ T8585] syz.3.1856: attempt to access beyond end of device [ 99.672011][ T8585] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 99.707223][ T8589] ext4 filesystem being mounted at /334/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.745387][ T8589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1858: bg 0: block 345: padding at end of block bitmap is not set [ 99.925117][ T8598] geneve2: entered promiscuous mode [ 99.930372][ C0] vcan0: j1939_tp_rxtimer: 0xffff888109c32c00: rx timeout, send abort [ 99.930431][ C0] vcan0: j1939_tp_rxtimer: 0xffff888109c33c00: rx timeout, send abort [ 99.930492][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888109c32c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.930536][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888109c33c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 99.975871][ T8598] geneve2: entered allmulticast mode [ 100.094241][ T8609] loop5: detected capacity change from 0 to 512 [ 100.101390][ T8609] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.113615][ T8609] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 100.121597][ T8609] System zones: 1-12 [ 100.126392][ T8609] EXT4-fs (loop5): 1 truncate cleaned up [ 100.271801][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 100.271821][ T29] audit: type=1326 audit(1765114190.378:2161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.350754][ T29] audit: type=1326 audit(1765114190.378:2162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.374658][ T29] audit: type=1326 audit(1765114190.388:2163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.398651][ T29] audit: type=1326 audit(1765114190.388:2164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.422378][ T29] audit: type=1326 audit(1765114190.388:2165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.445912][ T29] audit: type=1326 audit(1765114190.388:2166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.469825][ T29] audit: type=1326 audit(1765114190.408:2167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.493398][ T29] audit: type=1326 audit(1765114190.418:2168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.517097][ T29] audit: type=1326 audit(1765114190.438:2169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.540514][ T29] audit: type=1326 audit(1765114190.438:2170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8618 comm="syz.5.1870" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefe2faf749 code=0x7ffc0000 [ 100.566363][ T8631] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 100.596866][ T8634] 9pnet_fd: Insufficient options for proto=fd [ 100.635952][ T8637] bond1: entered promiscuous mode [ 100.641087][ T8637] bond1: entered allmulticast mode [ 100.649350][ T8641] loop0: detected capacity change from 0 to 128 [ 100.660649][ T8641] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 100.668716][ T8641] FAT-fs (loop0): Filesystem has been set read-only [ 100.675626][ T8637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.685232][ T8641] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 100.693202][ T8641] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 100.702432][ T8637] bond1 (unregistering): Released all slaves [ 100.718109][ T8647] Buffer I/O error on dev loop0, logical block 2065, async page read [ 100.728510][ T8647] Buffer I/O error on dev loop0, logical block 2066, async page read [ 100.736884][ T8647] Buffer I/O error on dev loop0, logical block 2067, async page read [ 100.745305][ T8647] Buffer I/O error on dev loop0, logical block 2068, async page read [ 100.753854][ T8647] Buffer I/O error on dev loop0, logical block 2069, async page read [ 100.762233][ T8647] Buffer I/O error on dev loop0, logical block 2070, async page read [ 100.792037][ T8647] Buffer I/O error on dev loop0, logical block 2071, async page read [ 100.800466][ T8647] Buffer I/O error on dev loop0, logical block 2072, async page read [ 100.811273][ T8647] Buffer I/O error on dev loop0, logical block 2065, async page read [ 100.819918][ T8647] Buffer I/O error on dev loop0, logical block 2066, async page read [ 101.118178][ T8671] infiniband syz!: set down [ 101.122754][ T8671] infiniband syz!: added team_slave_0 [ 101.135735][ T8671] RDS/IB: syz!: added [ 101.140116][ T8671] smc: adding ib device syz! with port count 1 [ 101.162392][ T8671] smc: ib device syz! port 1 has no pnetid [ 101.512180][ T8708] loop3: detected capacity change from 0 to 512 [ 101.531256][ T8690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.541434][ T8708] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.1909: invalid block [ 101.559390][ T8690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.588350][ T8708] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1909: invalid indirect mapped block 4294967295 (level 1) [ 101.603047][ T8708] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1909: invalid indirect mapped block 4294967295 (level 1) [ 101.617766][ T8708] EXT4-fs (loop3): 2 truncates cleaned up [ 101.624213][ T8708] EXT4-fs mount: 20 callbacks suppressed [ 101.624235][ T8708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.633938][ T8713] lo speed is unknown, defaulting to 1000 [ 101.718307][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.831303][ T8736] netlink: 'syz.6.1923': attribute type 3 has an invalid length. [ 101.874504][ T8741] Unsupported ieee802154 address type: 0 [ 101.914710][ T8736] netlink: 'syz.6.1923': attribute type 3 has an invalid length. [ 102.016667][ T8764] loop2: detected capacity change from 0 to 128 [ 102.031362][ T8766] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 102.175097][ T8780] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.182596][ T8780] vhci_hcd vhci_hcd.2: invalid port number 96 [ 102.188800][ T8780] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 102.245611][ T8794] loop5: detected capacity change from 0 to 2048 [ 102.260230][ T8799] vlan2: entered allmulticast mode [ 102.271705][ T8794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.322219][ T8104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.767850][ T8874] loop5: detected capacity change from 0 to 2048 [ 102.786118][ T8874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.800808][ T8874] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.824083][ T8874] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1967: bg 0: block 345: padding at end of block bitmap is not set [ 102.872060][ T8104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.952712][ T10] hid_parser_main: 19 callbacks suppressed [ 102.952776][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.966287][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.973927][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.981351][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.989191][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 102.996657][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.004184][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.011598][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.019289][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.026837][ T10] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 103.054599][ T10] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 103.076140][ T8919] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 103.101504][ T8924] netlink: 'syz.2.1972': attribute type 39 has an invalid length. [ 103.603586][ T9004] hub 9-0:1.0: USB hub found [ 103.608482][ T9004] hub 9-0:1.0: 8 ports detected [ 103.818764][ T9029] __nla_validate_parse: 7 callbacks suppressed [ 103.818781][ T9029] netlink: 35 bytes leftover after parsing attributes in process `syz.2.2000'. [ 103.834180][ T9029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2000'. [ 103.897929][ T9035] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 104.045064][ T9044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9044 comm=syz.3.2014 [ 104.057888][ T9044] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=9044 comm=syz.3.2014 [ 104.087752][ T9047] netlink: 444 bytes leftover after parsing attributes in process `syz.5.2005'. [ 104.101165][ T9047] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2005'. [ 104.901868][ T9055] loop6: detected capacity change from 0 to 32768 [ 105.114141][ T9094] loop2: detected capacity change from 0 to 8192 [ 105.124257][ T9055] loop6: p1 p3 < > [ 105.158176][ T9093] bio_check_eod: 63895 callbacks suppressed [ 105.158205][ T9093] syz.2.2024: attempt to access beyond end of device [ 105.158205][ T9093] loop2: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 105.181946][ T9096] vlan2: entered allmulticast mode [ 105.211627][ T9093] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 105.219545][ T9093] FAT-fs (loop2): Filesystem has been set read-only [ 105.243779][ T9093] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 105.257521][ T9093] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 105.436564][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2031'. [ 105.472300][ T9108] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2031'. [ 105.514515][ T9110] team0 (unregistering): Port device team_slave_0 removed [ 105.536357][ T9110] team0 (unregistering): Port device team_slave_1 removed [ 105.668899][ T9126] team0: Device gtp0 is of different type [ 105.744487][ T9132] sd 0:0:1:0: device reset [ 105.764137][ T9134] Falling back ldisc for ttyS3. [ 105.782448][ T9136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 105.881317][ T9153] netlink: 'syz.2.2052': attribute type 12 has an invalid length. [ 105.909118][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 105.909136][ T29] audit: type=1326 audit(1765114196.018:2295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 105.939446][ T29] audit: type=1326 audit(1765114196.048:2296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 105.963431][ T29] audit: type=1326 audit(1765114196.048:2297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 105.986985][ T29] audit: type=1326 audit(1765114196.048:2298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 106.010492][ T29] audit: type=1326 audit(1765114196.048:2299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 106.034364][ T29] audit: type=1326 audit(1765114196.048:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 106.058126][ T29] audit: type=1326 audit(1765114196.048:2301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 106.081748][ T29] audit: type=1326 audit(1765114196.048:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 106.105339][ T29] audit: type=1326 audit(1765114196.048:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 106.129087][ T29] audit: type=1326 audit(1765114196.048:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9157 comm="syz.2.2054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fbba039f749 code=0x7ffc0000 [ 106.273520][ T9174] loop6: detected capacity change from 0 to 512 [ 106.280295][ T9175] team0: Device gtp0 is of different type [ 106.284794][ T9174] EXT4-fs: dax option not supported [ 106.301415][ T9178] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 106.301415][ T9178] program syz.2.2061 not setting count and/or reply_len properly [ 106.331653][ T9181] loop6: detected capacity change from 0 to 1024 [ 106.343813][ T9181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.352535][ T9181] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 106.362498][ T9181] System zones: 0-1, 3-36 [ 106.368141][ T9181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.369128][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 106.389912][ T9186] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2063'. [ 106.398999][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2063'. [ 106.409501][ T9186] netlink: 'syz.2.2063': attribute type 6 has an invalid length. [ 106.410374][ T8255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.655205][ T4693] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.675624][ T9212] pimreg: entered allmulticast mode [ 106.692035][ T9212] pimreg: left allmulticast mode [ 106.908831][ T9248] netlink: 'syz.0.2094': attribute type 7 has an invalid length. [ 107.361123][ T9278] loop2: detected capacity change from 0 to 1024 [ 107.368279][ T9278] EXT4-fs: inline encryption not supported [ 107.386029][ T9278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 107.403379][ T9278] System zones: 0-1, 3-12 [ 107.408386][ T9278] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.493460][ T9278] loop2: detected capacity change from 1024 to 64 [ 107.520074][ T3320] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /401/file1: bad entry in directory: directory entry overrun - offset=0, inode=17104912, rec_len=158052, size=1024 fake=0 [ 107.621776][ T6350] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.663932][ T9281] kmmpd-loop2: attempt to access beyond end of device [ 107.663932][ T9281] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 107.677775][ T9281] buffer_io_error: 48502 callbacks suppressed [ 107.677794][ T9281] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 107.723552][ T4682] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.794724][ T4682] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.855178][ T4682] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.925014][ T4682] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 108.002819][ T4682] bridge_slave_1: left allmulticast mode [ 108.008644][ T4682] bridge_slave_1: left promiscuous mode [ 108.014691][ T4682] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.033516][ T4682] bridge_slave_0: left allmulticast mode [ 108.039311][ T4682] bridge_slave_0: left promiscuous mode [ 108.045078][ T4682] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.126512][ T4682] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.144658][ T4682] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.154082][ T4682] bond0 (unregistering): Released all slaves [ 108.226812][ T4682] hsr_slave_0: left promiscuous mode [ 108.232700][ T4682] hsr_slave_1: left promiscuous mode [ 108.243800][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.253979][ T4682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.263685][ T4682] batman_adv: batadv0: Interface deactivated: dummy0 [ 108.270486][ T4682] batman_adv: batadv0: Removing interface: dummy0 [ 108.287457][ T4682] dummy0: left allmulticast mode [ 108.330170][ T4682] team0 (unregistering): Port device team_slave_1 removed [ 108.342346][ T4682] team0 (unregistering): Port device team_slave_0 removed [ 108.353831][ T4671] smc: removing ib device syz! [ 108.693352][ T5688] Bluetooth: hci0: command 0x1003 tx timeout [ 108.699514][ T3566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.250958][ T9295] loop5: detected capacity change from 0 to 128 [ 109.275537][ T9295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 109.283516][ T9295] FAT-fs (loop5): Filesystem has been set read-only [ 109.301826][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.301826][ T9295] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 109.332467][ T9295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 109.340709][ T9295] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 109.357755][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.357755][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.371454][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.371454][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.387016][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.387016][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.410265][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.410265][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.424093][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.424093][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.437912][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.437912][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.447073][ T9300] lo speed is unknown, defaulting to 1000 [ 109.451745][ T9295] syz.5.2108: attempt to access beyond end of device [ 109.451745][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 109.681556][ T9300] chnl_net:caif_netlink_parms(): no params data found [ 109.794639][ T9300] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.801916][ T9300] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.813971][ T9300] bridge_slave_0: entered allmulticast mode [ 109.820690][ T9300] bridge_slave_0: entered promiscuous mode [ 109.837927][ T9300] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.845310][ T9300] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.852782][ T9300] bridge_slave_1: entered allmulticast mode [ 109.859595][ T9300] bridge_slave_1: entered promiscuous mode [ 109.888252][ T9300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.901561][ T9300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.956064][ T9367] __nla_validate_parse: 1 callbacks suppressed [ 109.956084][ T9367] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2121'. [ 109.972331][ T9300] team0: Port device team_slave_0 added [ 110.088886][ T9300] team0: Port device team_slave_1 added [ 110.132016][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.139128][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.165107][ T9300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.183150][ T9295] bio_check_eod: 9898 callbacks suppressed [ 110.183211][ T9295] syz.5.2108: attempt to access beyond end of device [ 110.183211][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 110.218214][ T9295] syz.5.2108: attempt to access beyond end of device [ 110.218214][ T9295] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 110.236902][ T9300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.244100][ T9300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.270436][ T9300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.309041][ T9409] Dead loop on virtual device ipvlan1, fix it urgently! [ 110.325156][ T9300] hsr_slave_0: entered promiscuous mode [ 110.340062][ T9409] syz.3.2123 (9409) used greatest stack depth: 1432 bytes left [ 110.343450][ T9300] hsr_slave_1: entered promiscuous mode [ 110.354797][ T9300] debugfs: 'hsr0' already exists in 'hsr' [ 110.360754][ T9300] Cannot create hsr debugfs directory [ 110.526711][ T9446] loop5: detected capacity change from 0 to 128 [ 110.639221][ T9300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 110.651313][ T9300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 110.680018][ T9300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 110.708457][ T9300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 110.873375][ T9300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.896480][ T9300] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.922515][ T9300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 110.933011][ T9300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 111.001320][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.008459][ T4645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.017372][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.024464][ T4645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.103112][ T9464] Set syz1 is full, maxelem 65536 reached [ 111.108493][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 111.108517][ T29] audit: type=1400 audit(1765114201.208:2403): avc: denied { listen } for pid=9496 comm="syz.0.2136" lport=59222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.135953][ T29] audit: type=1400 audit(1765114201.208:2404): avc: denied { accept } for pid=9496 comm="syz.0.2136" lport=59222 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 111.202346][ T9504] loop5: detected capacity change from 0 to 1024 [ 111.209604][ T9504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.218696][ T9300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.230460][ T9504] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6841c01c, mo2=0003] [ 111.241739][ T9504] System zones: 0-1, 3-36 [ 111.248356][ T9504] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.273667][ T29] audit: type=1400 audit(1765114201.378:2405): avc: denied { remove_name } for pid=9503 comm="syz.5.2137" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.296977][ T29] audit: type=1400 audit(1765114201.378:2406): avc: denied { rename } for pid=9503 comm="syz.5.2137" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 111.330724][ T8104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.364088][ T9514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.372768][ T9514] bridge0: port 3(bond1) entered blocking state [ 111.379405][ T9514] bridge0: port 3(bond1) entered disabled state [ 111.386252][ T9514] bond1: entered allmulticast mode [ 111.392573][ T9514] bond1: entered promiscuous mode [ 111.398053][ T9514] bridge0: port 3(bond1) entered blocking state [ 111.404383][ T9514] bridge0: port 3(bond1) entered forwarding state [ 111.461005][ T4645] bridge0: port 3(bond1) entered disabled state [ 111.476806][ T9300] veth0_vlan: entered promiscuous mode [ 111.494067][ T9523] loop5: detected capacity change from 0 to 8192 [ 111.500602][ T29] audit: type=1326 audit(1765114201.608:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 111.502515][ T9300] veth1_vlan: entered promiscuous mode [ 111.524782][ T29] audit: type=1326 audit(1765114201.608:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 111.554619][ T29] audit: type=1326 audit(1765114201.608:2409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 111.578926][ T29] audit: type=1326 audit(1765114201.608:2410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 111.592057][ T9300] veth0_macvtap: entered promiscuous mode [ 111.603014][ T29] audit: type=1326 audit(1765114201.608:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 111.603045][ T29] audit: type=1326 audit(1765114201.608:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9524 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 111.689701][ T9300] veth1_macvtap: entered promiscuous mode [ 111.701233][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.736557][ T9300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.757490][ T4669] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.766566][ T4669] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.800567][ T4669] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.814476][ T4669] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.860585][ T9544] loop2: detected capacity change from 0 to 1024 [ 111.867659][ T9544] EXT4-fs: Ignoring removed orlov option [ 111.876264][ T9544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.907513][ T9300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.981046][ T9561] loop2: detected capacity change from 0 to 512 [ 111.989976][ T9561] EXT4-fs: Ignoring removed bh option [ 112.009037][ T9561] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.022047][ T9561] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.055942][ T9300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.137258][ T9588] sctp: [Deprecated]: syz.2.2158 (pid 9588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 112.137258][ T9588] Use struct sctp_sack_info instead [ 112.677069][ T9666] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2160'. [ 112.687834][ T9666] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2160'. [ 112.823483][ T9691] SET target dimension over the limit! [ 112.886766][ T9696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2166'. [ 112.970842][ T9706] netlink: 'syz.3.2169': attribute type 13 has an invalid length. [ 113.038357][ T9713] loop2: detected capacity change from 0 to 2048 [ 113.062884][ T3485] lo speed is unknown, defaulting to 1000 [ 113.084283][ T9713] loop2: p1 < > p4 [ 113.089199][ T9713] loop2: p4 size 8388608 extends beyond EOD, truncated [ 113.102266][ T3382] Dead loop on virtual device ipvlan1, fix it urgently! [ 113.226354][ T9729] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2172'. [ 113.259180][ T9733] netlink: 83992 bytes leftover after parsing attributes in process `syz.6.2174'. [ 113.268745][ T9733] netlink: zone id is out of range [ 113.274016][ T9733] netlink: zone id is out of range [ 113.279569][ T9733] netlink: zone id is out of range [ 113.295857][ T9733] netlink: set zone limit has 8 unknown bytes [ 113.539418][ T9746] lo speed is unknown, defaulting to 1000 [ 113.660454][ T9752] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 113.744201][ T9762] rdma_op ffff888120b68d80 conn xmit_rdma 0000000000000000 [ 113.782726][ T9765] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 113.824319][ T3382] Dead loop on virtual device ipvlan1, fix it urgently! [ 113.905992][ T9786] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2199'. [ 113.967772][ T9799] loop6: detected capacity change from 0 to 512 [ 113.975052][ T9799] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 113.987914][ T9799] EXT4-fs (loop6): 1 truncate cleaned up [ 113.994498][ T9799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.065663][ T9815] netlink: 'syz.2.2209': attribute type 6 has an invalid length. [ 114.096592][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2211'. [ 114.105774][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2211'. [ 114.116338][ T8255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.125969][ T9819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2211'. [ 114.192364][ T9829] loop0: detected capacity change from 0 to 128 [ 114.202665][ T9829] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.228990][ T9829] ext4 filesystem being mounted at /472/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 114.279716][ T3319] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 114.400236][ T9841] loop0: detected capacity change from 0 to 512 [ 114.407577][ T9841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 114.425257][ T9841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.438458][ T9841] ext4 filesystem being mounted at /474/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.563113][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.942875][ T9874] loop5: detected capacity change from 0 to 512 [ 114.955059][ T9875] FAT-fs (loop2): Directory bread(block 162) failed [ 114.962346][ T9875] FAT-fs (loop2): Directory bread(block 163) failed [ 114.969318][ T9875] FAT-fs (loop2): Directory bread(block 164) failed [ 114.976544][ T9875] FAT-fs (loop2): Directory bread(block 165) failed [ 114.983491][ T9875] FAT-fs (loop2): Directory bread(block 166) failed [ 114.990552][ T9875] FAT-fs (loop2): Directory bread(block 167) failed [ 114.997333][ T9875] FAT-fs (loop2): Directory bread(block 168) failed [ 115.004618][ T9875] FAT-fs (loop2): Directory bread(block 169) failed [ 115.013812][ T9874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.016126][ T9875] FAT-fs (loop2): Directory bread(block 162) failed [ 115.033473][ T9875] FAT-fs (loop2): Directory bread(block 163) failed [ 115.040539][ T9875] syz.2.2232: attempt to access beyond end of device [ 115.040539][ T9875] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 115.046284][ T9874] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.054086][ T9875] syz.2.2232: attempt to access beyond end of device [ 115.054086][ T9875] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 115.149842][ T8104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.346429][ T9908] serio: Serial port ptm0 [ 115.469671][ T9917] syzkaller1: entered promiscuous mode [ 115.475303][ T9917] syzkaller1: entered allmulticast mode [ 115.534916][ T3475] hid_parser_main: 22 callbacks suppressed [ 115.534938][ T3475] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 115.554823][ T3475] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 115.746352][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.773474][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.834611][ T9952] __nla_validate_parse: 1 callbacks suppressed [ 115.834631][ T9952] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2268'. [ 115.966110][ T9970] set_capacity_and_notify: 1 callbacks suppressed [ 115.966127][ T9970] loop6: detected capacity change from 0 to 512 [ 115.995906][ T9970] EXT4-fs: Ignoring removed oldalloc option [ 116.004591][ T9970] EXT4-fs (loop6): 1 truncate cleaned up [ 116.016300][ T9970] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.075244][ T8255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.086859][ T3475] kernel read not supported for file /vcs (pid: 3475 comm: kworker/0:7) [ 116.151689][ T29] kauditd_printk_skb: 343 callbacks suppressed [ 116.151706][ T29] audit: type=1326 audit(1765114206.258:2756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.184326][ T29] audit: type=1326 audit(1765114206.258:2757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.208311][ T29] audit: type=1326 audit(1765114206.258:2758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.232287][ T29] audit: type=1326 audit(1765114206.258:2759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.256021][ T29] audit: type=1326 audit(1765114206.258:2760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.279473][ T29] audit: type=1326 audit(1765114206.258:2761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.303263][ T29] audit: type=1326 audit(1765114206.258:2762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.326757][ T29] audit: type=1326 audit(1765114206.268:2763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.350414][ T29] audit: type=1326 audit(1765114206.268:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.374328][ T29] audit: type=1326 audit(1765114206.268:2765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9994 comm="syz.3.2285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc4de5f749 code=0x7ffc0000 [ 116.447837][T10010] sctp: [Deprecated]: syz.5.2286 (pid 10010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.447837][T10010] Use struct sctp_sack_info instead [ 116.448694][T10009] SELinux: failed to load policy [ 116.682891][T10028] loop2: detected capacity change from 0 to 512 [ 116.690898][T10028] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.703690][T10028] EXT4-fs (loop2): 1 truncate cleaned up [ 116.709859][T10028] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.753488][ T9300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.176269][T10060] loop6: detected capacity change from 0 to 8192 [ 117.200622][ T8255] FAT-fs (loop6): error, invalid access to FAT (entry 0x0000e1b1) [ 117.208554][ T8255] FAT-fs (loop6): Filesystem has been set read-only [ 117.246500][T10066] netlink: 'syz.6.2315': attribute type 5 has an invalid length. [ 117.308091][T10078] loop6: detected capacity change from 0 to 128 [ 117.376168][T10078] syz.6.2322: attempt to access beyond end of device [ 117.376168][T10078] loop6: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 117.389975][T10078] syz.6.2322: attempt to access beyond end of device [ 117.389975][T10078] loop6: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 117.404546][T10078] syz.6.2322: attempt to access beyond end of device [ 117.404546][T10078] loop6: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 117.418294][T10078] syz.6.2322: attempt to access beyond end of device [ 117.418294][T10078] loop6: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 117.432051][T10078] syz.6.2322: attempt to access beyond end of device [ 117.432051][T10078] loop6: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 117.434987][T10086] netlink: 272 bytes leftover after parsing attributes in process `syz.5.2324'. [ 117.445882][T10078] syz.6.2322: attempt to access beyond end of device [ 117.445882][T10078] loop6: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 117.468464][T10078] syz.6.2322: attempt to access beyond end of device [ 117.468464][T10078] loop6: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 117.482191][T10078] syz.6.2322: attempt to access beyond end of device [ 117.482191][T10078] loop6: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 117.496202][T10078] syz.6.2322: attempt to access beyond end of device [ 117.496202][T10078] loop6: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 117.509990][T10078] syz.6.2322: attempt to access beyond end of device [ 117.509990][T10078] loop6: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 117.602099][T10105] loop5: detected capacity change from 0 to 1024 [ 117.609214][T10105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 117.617353][T10105] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 117.625911][T10105] System zones: 0-1, 3-36 [ 117.631833][T10105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.661005][ T8104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.719458][T10115] loop5: detected capacity change from 0 to 1024 [ 117.726249][T10115] EXT4-fs: Ignoring removed orlov option [ 117.739680][T10115] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.770940][ T8104] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.812254][T10123] loop5: detected capacity change from 0 to 128 [ 117.868527][T10128] loop5: detected capacity change from 0 to 512 [ 117.914495][T10128] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.935989][T10128] EXT4-fs (loop5): mount failed [ 117.964973][T10140] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 117.964973][T10140] program syz.5.2344 not setting count and/or reply_len properly [ 118.045851][T10150] loop6: detected capacity change from 0 to 164 [ 118.059353][T10150] rock: directory entry would overflow storage [ 118.065960][T10150] rock: sig=0x4f50, size=4, remaining=3 [ 118.071614][T10150] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 118.105779][T10153] all: renamed from team_slave_0 (while UP) [ 118.156403][T10158] syzkaller1: entered promiscuous mode [ 118.162031][T10158] syzkaller1: entered allmulticast mode [ 118.358306][T10184] loop6: detected capacity change from 0 to 164 [ 118.367754][T10186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2365'. [ 118.507857][T10202] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2373'. [ 118.619636][T10214] sd 0:0:1:0: device reset [ 118.635123][T10206] loop0: p1 < > p4 [ 118.642756][T10206] loop0: p4 size 8388608 extends beyond EOD, truncated [ 118.989282][T10252] program syz.6.2398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.020560][T10255] pim6reg: entered allmulticast mode [ 119.028268][T10255] pim6reg: left allmulticast mode [ 119.059523][ T4645] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.112645][ T4645] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.211783][ T4645] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.238656][T10283] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2411'. [ 119.253851][ T3566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.253997][ T5688] Bluetooth: hci0: command 0x1003 tx timeout [ 119.296196][ T4645] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.317762][T10265] lo speed is unknown, defaulting to 1000 [ 119.406298][ T4645] bond1: left allmulticast mode [ 119.411229][ T4645] bond1: left promiscuous mode [ 119.416279][ T4645] bridge0: port 3(bond1) entered disabled state [ 119.424926][ T4645] bridge_slave_1: left allmulticast mode [ 119.430617][ T4645] bridge_slave_1: left promiscuous mode [ 119.436404][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.454915][ T4645] bridge_slave_0: left allmulticast mode [ 119.460689][ T4645] bridge_slave_0: left promiscuous mode [ 119.466472][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.521360][T10303] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2418'. [ 119.557080][ T4645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.583852][T10307] Dead loop on virtual device ipvlan1, fix it urgently! [ 119.584507][ T4645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.600485][ T4645] bond0 (unregistering): Released all slaves [ 119.609781][ T4645] bond1 (unregistering): Released all slaves [ 119.673407][ T4645] hsr_slave_0: left promiscuous mode [ 119.679219][ T4645] hsr_slave_1: left promiscuous mode [ 119.684939][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.692413][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.701745][ T4645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.709242][ T4645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.720627][ T4645] veth1_macvtap: left promiscuous mode [ 119.727091][ T4645] veth0_macvtap: left promiscuous mode [ 119.732680][ T4645] veth1_vlan: left promiscuous mode [ 119.738356][ T4645] veth0_vlan: left promiscuous mode [ 119.858291][T10265] chnl_net:caif_netlink_parms(): no params data found [ 119.892404][T10323] lo speed is unknown, defaulting to 1000 [ 119.923668][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.925940][T10328] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2426'. [ 119.930797][T10265] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.973865][T10265] bridge_slave_0: entered allmulticast mode [ 119.980638][T10265] bridge_slave_0: entered promiscuous mode [ 119.996565][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.003830][T10265] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.011679][T10265] bridge_slave_1: entered allmulticast mode [ 120.018584][T10265] bridge_slave_1: entered promiscuous mode [ 120.062329][T10265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.078771][T10265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.100801][T10265] team0: Port device team_slave_0 added [ 120.107944][T10265] team0: Port device team_slave_1 added [ 120.134943][T10265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.141934][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.168017][T10265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.184214][T10265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.191293][T10265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.217479][T10265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.251368][T10265] hsr_slave_0: entered promiscuous mode [ 120.269450][T10265] hsr_slave_1: entered promiscuous mode [ 120.282100][T10265] debugfs: 'hsr0' already exists in 'hsr' [ 120.287949][T10265] Cannot create hsr debugfs directory [ 120.462344][T10265] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 120.487162][T10265] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 120.508252][T10265] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 120.524291][T10265] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 120.549685][T10265] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.556839][T10265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.564144][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.571263][T10265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.637687][T10265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.649995][T10355] netlink: 'syz.6.2435': attribute type 1 has an invalid length. [ 120.694658][ T4669] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.703605][ T4669] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.733522][T10265] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.743372][ T4669] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.750642][ T4669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.782261][ T4682] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.789475][ T4682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.901677][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2445'. [ 120.911233][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2445'. [ 120.920286][T10384] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2445'. [ 120.934363][T10384] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2445'. [ 120.956269][T10265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.151120][T10265] veth0_vlan: entered promiscuous mode [ 121.166935][T10265] veth1_vlan: entered promiscuous mode [ 121.202136][T10265] veth0_macvtap: entered promiscuous mode [ 121.214303][T10265] veth1_macvtap: entered promiscuous mode [ 121.234078][T10265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.252291][T10265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.266585][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 121.266606][ T29] audit: type=1400 audit(1765114211.378:2969): avc: denied { mount } for pid=10423 comm="syz.6.2459" name="/" dev="configfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 121.269263][ T4669] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.293774][ T29] audit: type=1400 audit(1765114211.408:2970): avc: denied { search } for pid=10423 comm="syz.6.2459" name="/" dev="configfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.327083][ T4669] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.338382][ T4669] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.365537][ T4669] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.370652][ T29] audit: type=1400 audit(1765114211.448:2971): avc: denied { search } for pid=10423 comm="syz.6.2459" name="/" dev="configfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.396881][ T29] audit: type=1400 audit(1765114211.448:2972): avc: denied { read open } for pid=10423 comm="syz.6.2459" path="/" dev="configfs" ino=1024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 121.428020][ T29] audit: type=1400 audit(1765114211.488:2973): avc: denied { mounton } for pid=10427 comm="syz.0.2461" path="/516/file0" dev="tmpfs" ino=2695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 121.468524][ T29] audit: type=1400 audit(1765114211.578:2974): avc: denied { write } for pid=10433 comm="syz.7.2403" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 121.510623][T10436] set_capacity_and_notify: 2 callbacks suppressed [ 121.510640][T10436] loop6: detected capacity change from 0 to 8192 [ 121.525992][T10434] vhci_hcd vhci_hcd.0: default hub control req: 0700 v0000 i0007 l0 [ 121.561007][T10438] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 121.611613][ T29] audit: type=1326 audit(1765114211.708:2975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10441 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806adf749 code=0x7ffc0000 [ 121.635318][ T29] audit: type=1326 audit(1765114211.708:2976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10441 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa806adf749 code=0x7ffc0000 [ 121.635558][T10440] loop7: detected capacity change from 0 to 1024 [ 121.659394][ T29] audit: type=1326 audit(1765114211.708:2977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10441 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa806adf749 code=0x7ffc0000 [ 121.659491][ T29] audit: type=1326 audit(1765114211.708:2978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10441 comm="syz.0.2467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=137 compat=0 ip=0x7fa806adf749 code=0x7ffc0000 [ 121.715014][T10440] EXT4-fs: test_dummy_encryption option not supported [ 122.031283][T10495] loop7: detected capacity change from 0 to 128 [ 122.041009][T10495] EXT4-fs: Ignoring removed nobh option [ 122.068955][T10495] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.082882][T10495] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.115278][T10265] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.145177][T10509] loop2: detected capacity change from 0 to 512 [ 122.152528][T10509] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 122.164576][T10509] EXT4-fs (loop2): 1 orphan inode deleted [ 122.170604][T10509] EXT4-fs (loop2): 1 truncate cleaned up [ 122.178506][T10509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.194773][T10509] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1324: inode #12: block 7: comm syz.2.2498: path /46/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 122.216958][T10509] EXT4-fs (loop2): Remounting filesystem read-only [ 122.249907][ T9300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.572877][T10530] loop6: detected capacity change from 0 to 128 [ 122.580079][T10530] EXT4-fs: Ignoring removed nobh option [ 122.593021][T10530] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.607592][T10530] ext4 filesystem being mounted at /168/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 122.618252][T10528] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.655437][ T8255] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 122.693576][ T3566] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 122.766269][T10540] lo speed is unknown, defaulting to 1000 [ 122.777423][T10544] netlink: 'syz.6.2513': attribute type 6 has an invalid length. [ 122.881763][T10554] loop7: detected capacity change from 0 to 128 [ 122.892278][T10557] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2517'. [ 122.901781][T10557] 0{X: renamed from gretap0 (while UP) [ 122.909468][T10557] 0{X: entered allmulticast mode [ 122.915966][T10557] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 122.934731][T10554] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 122.989739][T10554] ext4 filesystem being mounted at /11/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 123.022166][T10560] loop2: detected capacity change from 0 to 512 [ 123.046383][T10560] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.060904][T10560] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.075696][T10265] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 123.111022][ T9300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.152573][T10568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2520'. [ 123.244104][T10577] loop7: detected capacity change from 0 to 1024 [ 123.261286][T10577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.310984][T10265] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.602260][T10620] loop6: detected capacity change from 0 to 128 [ 123.610744][T10621] loop9: detected capacity change from 0 to 7 [ 123.617575][T10621] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.626178][T10621] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.634250][T10621] loop9: unable to read partition table [ 123.640077][T10621] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 123.640077][T10621] ) failed (rc=-5) [ 123.697855][T10628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 123.796337][T10617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.805595][T10617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.355299][T10665] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.409476][ T8255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.483723][T10679] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.496563][T10679] ext4 filesystem being mounted at /184/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 124.536897][T10684] netlink: 'syz.0.2582': attribute type 6 has an invalid length. [ 124.568276][ T8255] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.618046][T10693] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 124.638213][T10693] EXT4-fs (loop7): 1 truncate cleaned up [ 124.657361][T10693] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.696555][T10265] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.751175][T10698] EXT4-fs: Ignoring removed nobh option [ 124.777931][T10698] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #3: comm syz.7.2577: corrupted inode contents [ 124.790039][T10698] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #3: comm syz.7.2577: mark_inode_dirty error [ 124.813846][T10698] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #3: comm syz.7.2577: corrupted inode contents [ 124.837207][T10698] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.2577: mark_inode_dirty error [ 124.848850][T10698] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2577: Failed to acquire dquot type 0 [ 124.862356][T10698] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.2577: corrupted inode contents [ 124.874637][T10698] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #16: comm syz.7.2577: mark_inode_dirty error [ 124.887895][T10698] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.2577: corrupted inode contents [ 124.903508][T10698] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.2577: mark_inode_dirty error [ 124.925360][T10698] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.2577: corrupted inode contents [ 124.948000][T10706] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.959352][T10698] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 124.978596][T10706] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.987841][T10698] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.2577: corrupted inode contents [ 125.000797][T10698] EXT4-fs error (device loop7): ext4_truncate:4635: inode #16: comm syz.7.2577: mark_inode_dirty error [ 125.012890][T10706] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.025795][T10698] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 125.037499][T10698] EXT4-fs (loop7): 1 truncate cleaned up [ 125.046563][T10698] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.059686][T10698] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.117148][T10265] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.247336][ T8255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.594436][T10764] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 125.623567][T10764] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 125.717254][T10265] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.954531][T10780] ================================================================== [ 125.962679][T10780] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 125.971330][T10780] [ 125.973713][T10780] write to 0xffff88810565e768 of 8 bytes by task 10781 on cpu 1: [ 125.981451][T10780] shmem_file_splice_read+0x470/0x600 [ 125.986896][T10780] splice_direct_to_actor+0x26f/0x680 [ 125.992288][T10780] do_splice_direct+0xda/0x150 [ 125.997161][T10780] do_sendfile+0x380/0x650 [ 126.001694][T10780] __x64_sys_sendfile64+0x105/0x150 [ 126.007018][T10780] x64_sys_call+0x2db1/0x3000 [ 126.011724][T10780] do_syscall_64+0xd8/0x2a0 [ 126.016274][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.022195][T10780] [ 126.024535][T10780] write to 0xffff88810565e768 of 8 bytes by task 10780 on cpu 0: [ 126.032404][T10780] shmem_file_splice_read+0x470/0x600 [ 126.037805][T10780] splice_direct_to_actor+0x26f/0x680 [ 126.043202][T10780] do_splice_direct+0xda/0x150 [ 126.047993][T10780] do_sendfile+0x380/0x650 [ 126.052428][T10780] __x64_sys_sendfile64+0x105/0x150 [ 126.057653][T10780] x64_sys_call+0x2db1/0x3000 [ 126.062457][T10780] do_syscall_64+0xd8/0x2a0 [ 126.066996][T10780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.072901][T10780] [ 126.075257][T10780] value changed: 0x00000000000006b6 -> 0x00000000000006b8 [ 126.082379][T10780] [ 126.084707][T10780] Reported by Kernel Concurrency Sanitizer on: [ 126.090879][T10780] CPU: 0 UID: 0 PID: 10780 Comm: syz.3.2612 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 126.102268][T10780] Tainted: [W]=WARN [ 126.106077][T10780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.116139][T10780] ================================================================== [ 126.143683][T10775] loop7: p1 p3 < > [ 127.173970][ C1] Dead loop on virtual device ipvlan1, fix it urgently!