last executing test programs: 53.079788855s ago: executing program 0 (id=31): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000007}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd=r1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/4, 0x4}, {0x0}], 0x2}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) 52.952390255s ago: executing program 0 (id=35): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000280)='netlink_extack\x00', r1, 0x0, 0xffffffffffffd306}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c030000160001"], 0x34c}}, 0x0) 52.809745526s ago: executing program 0 (id=41): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x11, 0xffffffff}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0xc}, 0x94) 52.780317849s ago: executing program 0 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000500)='./file0/file0\x00', 0x240) 52.674274377s ago: executing program 0 (id=47): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 51.158611458s ago: executing program 0 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) arch_prctl$ARCH_GET_CPUID(0x1011) 51.158502958s ago: executing program 32 (id=82): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x18, 0x7ffc1fff}]}) arch_prctl$ARCH_GET_CPUID(0x1011) 2.358315683s ago: executing program 1 (id=1318): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x3, 0x0, 0x8, @local, @local, 0x1, 0x7, 0x202, 0x8}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r1}, &(0x7f00000008c0), &(0x7f0000000880)=r2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000240)={'syztnl1\x00', 0x0}) 2.246528832s ago: executing program 1 (id=1320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.073469235s ago: executing program 1 (id=1322): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r3, &(0x7f0000000080)='./file0\x00') 1.986527982s ago: executing program 1 (id=1324): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) fcntl$getflags(r1, 0x401) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1.094531103s ago: executing program 1 (id=1355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f00000002c0)={0x28, 0x0, 0x2710, @local}, 0x10) 1.094406483s ago: executing program 1 (id=1356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 990.489281ms ago: executing program 2 (id=1360): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, r4, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x4008004) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="414601", @ANYRES64=r1], 0x4) 886.209299ms ago: executing program 2 (id=1363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_read_part_table(0x4078, &(0x7f0000004080)="$eJzszzFKA1EQBuB/TYJRVLAWxEWwFO2scotcQDyCjY0JpvMYgk3wAN7AI5lGnoQsuhtbBZXva2bm393Z98KvcP/aNFfd/OWmO+829fnyaT/JUZ23UkqGSfprKxclOTvPYHu4kZ0k11//Op5/3w0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/Zroe9LrjY1MPMrsd5aKsTO56qZon9Wmy9/nBoiRb7Q3L98bzHzg6AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDflVLKsladtJ/+KqySaSt/OM5sdFhlmNQn7S2Tj3YzGbyzP4c2AAAgEAMTdmT/PVAIJPrd3QJNX2Wu0hU4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKwUAAP//TWYnqQ==") 582.046474ms ago: executing program 2 (id=1375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r2, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 510.223039ms ago: executing program 2 (id=1379): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYRESHEX, @ANYBLOB="0000000000000000b7"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9, 0x0, {}, 0x4}) 438.472516ms ago: executing program 2 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 358.584462ms ago: executing program 2 (id=1390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) umount2(0x0, 0x800000000000000) syz_usb_connect$printer(0x1, 0x2d, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c002000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006203300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 358.444772ms ago: executing program 3 (id=1391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$tun(r2, &(0x7f0000000400)=ANY=[], 0xa2) readv(r2, &(0x7f0000000180)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1) 358.283352ms ago: executing program 4 (id=1392): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xcfdc}, 0x18) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x3}, 0x10) 358.147992ms ago: executing program 3 (id=1393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 353.573812ms ago: executing program 4 (id=1394): openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00002727f3f0"], 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000340)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 336.915193ms ago: executing program 3 (id=1395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_setup(0x8, &(0x7f0000002740)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000080)={0x0, 0x989680}, 0x0) 263.837119ms ago: executing program 4 (id=1397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) setgroups(0x0, 0x0) socket(0x2, 0x2, 0x1) 203.503914ms ago: executing program 4 (id=1398): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2b, 0x9, 0x3, 0x23ab, 0x14, @dev={0xfe, 0x80, '\x00', 0x13}, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8000, 0x10, 0xfffffffc, 0x1}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, r0, 0x25, 0x4, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000005c0)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) socket$inet(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0xd4}}, 0x0) 203.325104ms ago: executing program 5 (id=1399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r1) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettclass={0x24, 0x2a, 0x129, 0x870bd2c, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x0, 0xe}}}, 0x24}}, 0x40004) 203.141064ms ago: executing program 3 (id=1400): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETATTR(r2, &(0x7f0000000500)={0xa0, 0x19, 0x2, {0x80, {0x8, 0x2, 0x7}, 0x41, 0x0, 0xee00, 0x8, 0x6, 0xfff, 0x100000000, 0x896, 0x0, 0x3, 0x6, 0x6, 0x9, 0x10, 0x200, 0x1, 0xbf61, 0x8}}, 0xa0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) splice(r1, 0x0, r0, 0x0, 0x1c, 0x0) 202.953394ms ago: executing program 4 (id=1401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x509, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {0x0, 0x1}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 202.773724ms ago: executing program 3 (id=1402): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x604, 0x0, 0xa, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df, 0x2e}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000004c0)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x280}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000500)={0x800000, 0x210002, 0xffffffdd, 0x7fffffff, 0x2, 0x69}) 158.576067ms ago: executing program 5 (id=1403): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 158.245698ms ago: executing program 3 (id=1404): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x4008032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mm_page_free\x00', r0, 0x0, 0x2000000000000000}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 158.111098ms ago: executing program 5 (id=1405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x880) 141.087309ms ago: executing program 4 (id=1406): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/ip_tables_matches\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) write(r1, &(0x7f0000000a00)="c7885a8f24", 0x5) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 108.139692ms ago: executing program 5 (id=1407): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x9, 0x7f}, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x0, 0x30, 0x0, "d427443337084e2c155728b371e491e7767150c3194b3eef53f407cb03f98895ecd08a6031349042776e6b75b391a0b25d49d303a71729551360a53f27e07088924cd66920b0d40668542bb510bba12b"}, 0xd8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 42.604616ms ago: executing program 5 (id=1408): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x304e, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}, 0x0, {0x0, r3}}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 0s ago: executing program 5 (id=1409): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) kernel console output (not intermixed with test programs): :64): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.809717][ T3305] cgroup: Unknown subsys name 'cpuset' [ 32.815948][ T3305] cgroup: Unknown subsys name 'rlimit' [ 33.006992][ T29] audit: type=1400 audit(1765700671.587:65): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.030535][ T29] audit: type=1400 audit(1765700671.587:66): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.046618][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.051043][ T29] audit: type=1400 audit(1765700671.587:67): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.079897][ T29] audit: type=1400 audit(1765700671.597:68): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.100152][ T29] audit: type=1400 audit(1765700671.597:69): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.117399][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.125010][ T29] audit: type=1400 audit(1765700671.597:70): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.157171][ T29] audit: type=1400 audit(1765700671.617:71): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.269508][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 34.314368][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.348781][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 34.408004][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 34.441927][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.449054][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.456216][ T3316] bridge_slave_0: entered allmulticast mode [ 34.462751][ T3316] bridge_slave_0: entered promiscuous mode [ 34.471962][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 34.487821][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.494964][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.502290][ T3315] bridge_slave_0: entered allmulticast mode [ 34.508824][ T3315] bridge_slave_0: entered promiscuous mode [ 34.515331][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.522413][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.529759][ T3316] bridge_slave_1: entered allmulticast mode [ 34.536237][ T3316] bridge_slave_1: entered promiscuous mode [ 34.561509][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.568813][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.575996][ T3315] bridge_slave_1: entered allmulticast mode [ 34.582334][ T3315] bridge_slave_1: entered promiscuous mode [ 34.617186][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.624401][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.631783][ T3319] bridge_slave_0: entered allmulticast mode [ 34.638171][ T3319] bridge_slave_0: entered promiscuous mode [ 34.658643][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.667906][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.674996][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.682257][ T3319] bridge_slave_1: entered allmulticast mode [ 34.688719][ T3319] bridge_slave_1: entered promiscuous mode [ 34.703108][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.713379][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.732760][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.739851][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.747047][ T3320] bridge_slave_0: entered allmulticast mode [ 34.753719][ T3320] bridge_slave_0: entered promiscuous mode [ 34.761155][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.785213][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.792374][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.799526][ T3320] bridge_slave_1: entered allmulticast mode [ 34.806082][ T3320] bridge_slave_1: entered promiscuous mode [ 34.823252][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.832431][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.839651][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.846860][ T3322] bridge_slave_0: entered allmulticast mode [ 34.853365][ T3322] bridge_slave_0: entered promiscuous mode [ 34.870221][ T3316] team0: Port device team_slave_0 added [ 34.876667][ T3315] team0: Port device team_slave_0 added [ 34.883218][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.892909][ T3315] team0: Port device team_slave_1 added [ 34.898621][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.905736][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.912973][ T3322] bridge_slave_1: entered allmulticast mode [ 34.919635][ T3322] bridge_slave_1: entered promiscuous mode [ 34.931618][ T3316] team0: Port device team_slave_1 added [ 34.952790][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.982959][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.002616][ T3319] team0: Port device team_slave_0 added [ 35.008512][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.015477][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.041381][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.053339][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.067640][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.074638][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.100576][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.112079][ T3319] team0: Port device team_slave_1 added [ 35.117889][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.124906][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.150816][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.162672][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.172669][ T3320] team0: Port device team_slave_0 added [ 35.178579][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.185612][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.211590][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.235219][ T3320] team0: Port device team_slave_1 added [ 35.259321][ T3322] team0: Port device team_slave_0 added [ 35.266045][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.273046][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.299032][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.310696][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.317643][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.343558][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.359982][ T3322] team0: Port device team_slave_1 added [ 35.391050][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.398003][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.424046][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.450670][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.457635][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.483745][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.496891][ T3315] hsr_slave_0: entered promiscuous mode [ 35.503133][ T3315] hsr_slave_1: entered promiscuous mode [ 35.512183][ T3316] hsr_slave_0: entered promiscuous mode [ 35.518159][ T3316] hsr_slave_1: entered promiscuous mode [ 35.524108][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 35.529866][ T3316] Cannot create hsr debugfs directory [ 35.535621][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.542669][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.568574][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.582279][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.589298][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.615239][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.660795][ T3319] hsr_slave_0: entered promiscuous mode [ 35.667068][ T3319] hsr_slave_1: entered promiscuous mode [ 35.672990][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 35.678806][ T3319] Cannot create hsr debugfs directory [ 35.709323][ T3320] hsr_slave_0: entered promiscuous mode [ 35.715365][ T3320] hsr_slave_1: entered promiscuous mode [ 35.721317][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 35.727041][ T3320] Cannot create hsr debugfs directory [ 35.755646][ T3322] hsr_slave_0: entered promiscuous mode [ 35.761796][ T3322] hsr_slave_1: entered promiscuous mode [ 35.767719][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 35.773520][ T3322] Cannot create hsr debugfs directory [ 35.953795][ T3316] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.962470][ T3316] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.974109][ T3316] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.985551][ T3316] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.008494][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.020036][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.028765][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.038564][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.062212][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.071211][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.082679][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.095492][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.134148][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.144050][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.153040][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.169328][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.202253][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.211128][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.220752][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.235901][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.255689][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.287574][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.296927][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.319695][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.326821][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.338694][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.355077][ T1656] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.362161][ T1656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.371649][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.378838][ T1656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.391740][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.415827][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.422936][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.444118][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.455030][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.470863][ T1656] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.478006][ T1656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.491283][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.501693][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.521616][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.528723][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.539505][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.560692][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.585621][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.594810][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.602054][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.622216][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.629397][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.645116][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.652267][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.669654][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.676758][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.724225][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.737167][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.751796][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.762252][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.815384][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.872162][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.940887][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.967333][ T3316] veth0_vlan: entered promiscuous mode [ 36.997757][ T3320] veth0_vlan: entered promiscuous mode [ 37.019766][ T3316] veth1_vlan: entered promiscuous mode [ 37.035384][ T3322] veth0_vlan: entered promiscuous mode [ 37.044216][ T3320] veth1_vlan: entered promiscuous mode [ 37.056558][ T3322] veth1_vlan: entered promiscuous mode [ 37.072137][ T3316] veth0_macvtap: entered promiscuous mode [ 37.091743][ T3320] veth0_macvtap: entered promiscuous mode [ 37.102839][ T3316] veth1_macvtap: entered promiscuous mode [ 37.111384][ T3322] veth0_macvtap: entered promiscuous mode [ 37.119766][ T3320] veth1_macvtap: entered promiscuous mode [ 37.131985][ T3322] veth1_macvtap: entered promiscuous mode [ 37.151417][ T3319] veth0_vlan: entered promiscuous mode [ 37.157883][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.173347][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.182558][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.196026][ T3315] veth0_vlan: entered promiscuous mode [ 37.204857][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.213227][ T404] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.223487][ T3319] veth1_vlan: entered promiscuous mode [ 37.231782][ T404] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.247561][ T3319] veth0_macvtap: entered promiscuous mode [ 37.256997][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.268753][ T802] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.278344][ T3319] veth1_macvtap: entered promiscuous mode [ 37.285796][ T3315] veth1_vlan: entered promiscuous mode [ 37.292323][ T802] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.301743][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.313685][ T802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.324314][ T802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.334992][ T363] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.348459][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.363391][ T363] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.376195][ T3315] veth0_macvtap: entered promiscuous mode [ 37.386931][ T1656] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.397046][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.407522][ T1656] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.423553][ T1656] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.443019][ T3315] veth1_macvtap: entered promiscuous mode [ 37.452705][ T1656] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.463773][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.481649][ T1656] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.505880][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.524136][ T1656] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.536035][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.563248][ T1656] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.595433][ T1656] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.628911][ T1656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.653455][ T1656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.663899][ T1656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.673594][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 37.673610][ T29] audit: type=1400 audit(1765700676.257:108): avc: denied { map_create } for pid=3503 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.713652][ T1656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.758081][ T3511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 37.763776][ T29] audit: type=1400 audit(1765700676.297:109): avc: denied { map_read map_write } for pid=3503 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.786443][ T29] audit: type=1400 audit(1765700676.317:110): avc: denied { create } for pid=3508 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.805637][ T29] audit: type=1400 audit(1765700676.327:111): avc: denied { create } for pid=3503 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.825956][ T29] audit: type=1400 audit(1765700676.337:112): avc: denied { write } for pid=3503 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.846398][ T29] audit: type=1400 audit(1765700676.337:113): avc: denied { bind } for pid=3508 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.857936][ T3515] netlink: 'syz.4.9': attribute type 83 has an invalid length. [ 37.865534][ T29] audit: type=1400 audit(1765700676.337:114): avc: denied { listen } for pid=3508 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.892551][ T29] audit: type=1400 audit(1765700676.337:115): avc: denied { write } for pid=3508 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.911756][ T29] audit: type=1400 audit(1765700676.337:116): avc: denied { accept } for pid=3508 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.939220][ T29] audit: type=1400 audit(1765700676.487:117): avc: denied { read write } for pid=3516 comm="syz.0.8" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 37.994128][ T3523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 38.048969][ T3523] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 38.057070][ T3528] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3528 comm=syz.1.15 [ 38.302684][ T3558] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 38.321564][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 38.370715][ T3566] bridge0: port 3(batadv1) entered blocking state [ 38.377233][ T3566] bridge0: port 3(batadv1) entered disabled state [ 38.384644][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.28'. [ 38.409739][ T3566] batadv1: entered allmulticast mode [ 38.426093][ T3566] batadv1: entered promiscuous mode [ 38.469076][ T3575] netlink: 596 bytes leftover after parsing attributes in process `syz.0.35'. [ 38.609628][ T3586] ======================================================= [ 38.609628][ T3586] WARNING: The mand mount option has been deprecated and [ 38.609628][ T3586] and is ignored by this kernel. Remove the mand [ 38.609628][ T3586] option from the mount to silence this warning. [ 38.609628][ T3586] ======================================================= [ 38.869637][ T363] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 38.878932][ T363] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 38.895695][ T3604] SELinux: failed to load policy [ 39.448386][ T3638] netlink: 'syz.3.65': attribute type 13 has an invalid length. [ 39.466835][ T3638] gretap0: refused to change device tx_queue_len [ 39.473364][ T3638] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 39.562507][ T3643] loop1: detected capacity change from 0 to 1024 [ 39.586148][ T3643] EXT4-fs: Ignoring removed oldalloc option [ 39.592302][ T3643] EXT4-fs: Ignoring removed bh option [ 39.622645][ T3643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.655172][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.749452][ T3651] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 39.894605][ T3655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 39.944048][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.951599][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.959062][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.967356][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.974969][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.982621][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.990076][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 39.997575][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.005001][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.012507][ T3488] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.022412][ T3488] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.01 Device [syz0] on syz0 [ 40.094877][ T3673] netlink: 'syz.4.80': attribute type 6 has an invalid length. [ 40.106988][ T3666] fido_id[3666]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.164329][ T802] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.326882][ T3695] loop4: detected capacity change from 0 to 1024 [ 40.340506][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.390547][ T3695] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 40.547926][ T3690] chnl_net:caif_netlink_parms(): no params data found [ 40.589725][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.637677][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.645041][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.653943][ T3721] usb usb1: usbfs: process 3721 (syz.2.95) did not claim interface 63 before use [ 40.665366][ T3690] bridge_slave_0: entered allmulticast mode [ 40.680384][ T3690] bridge_slave_0: entered promiscuous mode [ 40.693327][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.700596][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.709556][ T3690] bridge_slave_1: entered allmulticast mode [ 40.716282][ T3690] bridge_slave_1: entered promiscuous mode [ 40.737281][ T3690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.755310][ T3690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.773721][ T802] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.821142][ T3690] team0: Port device team_slave_0 added [ 40.845747][ T3690] team0: Port device team_slave_1 added [ 40.861520][ T802] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.878149][ T3736] loop2: detected capacity change from 0 to 1024 [ 40.902432][ T3690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.909544][ T3690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.935494][ T3690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.954816][ T3736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.963857][ T3690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.973883][ T3690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.000002][ T3690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.007661][ T3736] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.082537][ T802] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.136821][ T3736] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.100: Freeing blocks not in datazone - block = 0, count = 16 [ 41.160803][ T3690] hsr_slave_0: entered promiscuous mode [ 41.185263][ T3690] hsr_slave_1: entered promiscuous mode [ 41.194010][ T3690] debugfs: 'hsr0' already exists in 'hsr' [ 41.199887][ T3690] Cannot create hsr debugfs directory [ 41.239527][ T802] bridge_slave_1: left allmulticast mode [ 41.245331][ T802] bridge_slave_1: left promiscuous mode [ 41.250693][ T363] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 112: padding at end of block bitmap is not set [ 41.251053][ T802] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.265802][ T363] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 41.284725][ T363] EXT4-fs (loop2): This should not happen!! Data will be lost [ 41.284725][ T363] [ 41.295047][ T802] bridge_slave_0: left allmulticast mode [ 41.301203][ T802] bridge_slave_0: left promiscuous mode [ 41.302106][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.306974][ T802] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.333285][ T3765] netlink: 24 bytes leftover after parsing attributes in process `syz.4.112'. [ 41.535954][ T802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.555560][ T802] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.568056][ T802] bond0 (unregistering): Released all slaves [ 41.575434][ T3784] syz.4.114 uses obsolete (PF_INET,SOCK_PACKET) [ 41.583965][ T3783] netlink: 14 bytes leftover after parsing attributes in process `syz.3.119'. [ 41.641830][ T3783] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.682315][ T3783] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.694674][ T3783] bond0 (unregistering): Released all slaves [ 41.725893][ T802] hsr_slave_0: left promiscuous mode [ 41.742720][ T802] hsr_slave_1: left promiscuous mode [ 41.774770][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.782259][ T802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.799891][ T802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.807406][ T802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.840654][ T802] veth1_macvtap: left promiscuous mode [ 41.846408][ T802] veth0_macvtap: left promiscuous mode [ 41.852932][ T802] veth1_vlan: left promiscuous mode [ 41.862084][ T802] veth0_vlan: left promiscuous mode [ 42.038497][ T802] team0 (unregistering): Port device team_slave_1 removed [ 42.049990][ T802] team0 (unregistering): Port device team_slave_0 removed [ 42.754237][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 42.754255][ T29] audit: type=1400 audit(1765700681.337:254): avc: denied { create } for pid=3821 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.760782][ T3822] lo speed is unknown, defaulting to 1000 [ 42.812998][ T3822] lo speed is unknown, defaulting to 1000 [ 42.813994][ T3690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.825759][ T29] audit: type=1400 audit(1765700681.347:255): avc: denied { write } for pid=3821 comm="syz.4.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.866048][ T3690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.887327][ T3822] lo speed is unknown, defaulting to 1000 [ 42.893305][ T3690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.913725][ T3690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.984212][ T3822] infiniband syz1: set active [ 42.988986][ T3822] infiniband syz1: added lo [ 42.994040][ T3501] lo speed is unknown, defaulting to 1000 [ 43.031921][ T3822] RDS/IB: syz1: added [ 43.037304][ T3822] smc: adding ib device syz1 with port count 1 [ 43.045473][ T3822] smc: ib device syz1 port 1 has no pnetid [ 43.054431][ T3501] lo speed is unknown, defaulting to 1000 [ 43.072283][ T3822] lo speed is unknown, defaulting to 1000 [ 43.169830][ T3690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.205882][ T3822] lo speed is unknown, defaulting to 1000 [ 43.217441][ T3690] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.240883][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.248047][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.287243][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.294438][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.335294][ T3822] lo speed is unknown, defaulting to 1000 [ 43.362896][ T3690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 43.452202][ T3822] lo speed is unknown, defaulting to 1000 [ 43.535218][ T3690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.555430][ T3822] lo speed is unknown, defaulting to 1000 [ 43.621097][ T3840] loop2: detected capacity change from 0 to 32768 [ 43.633916][ T3822] lo speed is unknown, defaulting to 1000 [ 43.796119][ T3885] loop2: detected capacity change from 0 to 1764 [ 43.838024][ T3885] iso9660: Unknown parameter 'de' [ 43.959945][ T3690] veth0_vlan: entered promiscuous mode [ 43.980373][ T3690] veth1_vlan: entered promiscuous mode [ 44.037747][ T3690] veth0_macvtap: entered promiscuous mode [ 44.048486][ T3918] loop1: detected capacity change from 0 to 512 [ 44.060712][ T3690] veth1_macvtap: entered promiscuous mode [ 44.075966][ T3919] process 'syz.3.138' launched '/dev/fd/5' with NULL argv: empty string added [ 44.087647][ T29] audit: type=1400 audit(1765700682.667:256): avc: denied { execute_no_trans } for pid=3917 comm="syz.3.138" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.111433][ T3690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.129531][ T3690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.137710][ T3921] netlink: 'syz.4.139': attribute type 3 has an invalid length. [ 44.150032][ T3918] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.157654][ T3921] netlink: 'syz.4.139': attribute type 3 has an invalid length. [ 44.164786][ T3918] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.189504][ T29] audit: type=1400 audit(1765700682.777:257): avc: denied { cpu } for pid=3924 comm="syz.3.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.199333][ T802] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.238556][ T29] audit: type=1326 audit(1765700682.817:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b056ff749 code=0x7ffc0000 [ 44.261919][ T29] audit: type=1326 audit(1765700682.817:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b056ff749 code=0x7ffc0000 [ 44.267879][ T802] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.285222][ T29] audit: type=1326 audit(1765700682.817:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b056ff749 code=0x7ffc0000 [ 44.285258][ T29] audit: type=1326 audit(1765700682.817:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b056ff749 code=0x7ffc0000 [ 44.341523][ T29] audit: type=1400 audit(1765700682.837:262): avc: denied { mounton } for pid=3690 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 44.352596][ T802] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.386695][ T29] audit: type=1326 audit(1765700682.927:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.1.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b056ff749 code=0x7ffc0000 [ 44.439603][ T802] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.450219][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.489590][ T3938] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.519100][ T3944] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=3944 comm=syz.5.147 [ 44.645439][ T3501] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.804956][ T3973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 44.881272][ T3986] syz_tun: entered allmulticast mode [ 44.889978][ T3985] syz_tun: left allmulticast mode [ 44.940998][ T3989] loop3: detected capacity change from 0 to 2048 [ 44.961993][ T3989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 45.033077][ T3989] EXT4-fs (loop3): shut down requested (0) [ 45.068965][ T4002] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.069292][ T4001] IPVS: stopping master sync thread 4002 ... [ 45.093693][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 45.143470][ T4004] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.172'. [ 45.294642][ T4014] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 45.353461][ T4021] loop5: detected capacity change from 0 to 128 [ 45.366034][ T4021] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 45.395254][ T4021] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 45.403430][ T4021] FAT-fs (loop5): Filesystem has been set read-only [ 45.411045][ T4021] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 45.720357][ T4066] loop4: detected capacity change from 0 to 1024 [ 45.727400][ T4066] EXT4-fs: inline encryption not supported [ 45.733420][ T4066] EXT4-fs: Ignoring removed orlov option [ 45.743541][ T4066] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 45.779411][ T4066] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 45.819385][ T4066] System zones: 0-1, 3-12 [ 45.841109][ T4066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.875948][ T4076] SELinux: failed to load policy [ 45.881611][ T4066] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.927825][ T4066] xt_hashlimit: max too large, truncated to 1048576 [ 46.005585][ T4090] loop3: detected capacity change from 0 to 512 [ 46.033255][ T4090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.056444][ T4090] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.070484][ T4096] Zero length message leads to an empty skb [ 46.298805][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.471492][ T4134] netlink: 164 bytes leftover after parsing attributes in process `syz.5.216'. [ 46.484262][ T4132] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 46.529578][ T4137] loop2: detected capacity change from 0 to 1024 [ 46.536282][ T4137] ext4: Unknown parameter 'hash' [ 46.579877][ T4143] loop5: detected capacity change from 0 to 1024 [ 46.593917][ T4143] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.649601][ T4143] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.696618][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.718127][ T4150] loop2: detected capacity change from 0 to 128 [ 46.859377][ T4159] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.002897][ T4150] syz.2.224: attempt to access beyond end of device [ 47.002897][ T4150] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 47.005411][ T4176] loop1: detected capacity change from 0 to 512 [ 47.029929][ T4150] syz.2.224: attempt to access beyond end of device [ 47.029929][ T4150] loop2: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 47.044665][ T4150] syz.2.224: attempt to access beyond end of device [ 47.044665][ T4150] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 47.058711][ T4150] syz.2.224: attempt to access beyond end of device [ 47.058711][ T4150] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 47.089692][ T4176] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.097938][ T4150] syz.2.224: attempt to access beyond end of device [ 47.097938][ T4150] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 47.102794][ T4176] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 47.112075][ T4176] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 47.135671][ T4176] System zones: 1-12 [ 47.140236][ T4176] EXT4-fs (loop1): 1 truncate cleaned up [ 47.146469][ T4176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.176348][ T4150] syz.2.224: attempt to access beyond end of device [ 47.176348][ T4150] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 47.191409][ T4150] syz.2.224: attempt to access beyond end of device [ 47.191409][ T4150] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 47.205762][ T4150] syz.2.224: attempt to access beyond end of device [ 47.205762][ T4150] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 47.219589][ T4150] syz.2.224: attempt to access beyond end of device [ 47.219589][ T4150] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 47.221503][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.233480][ T4150] syz.2.224: attempt to access beyond end of device [ 47.233480][ T4150] loop2: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 47.374160][ T4200] netlink: 20 bytes leftover after parsing attributes in process `syz.5.243'. [ 47.689609][ T4216] netlink: 'syz.3.250': attribute type 1 has an invalid length. [ 47.896326][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 47.896345][ T29] audit: type=1400 audit(1765700686.477:482): avc: denied { read write } for pid=4221 comm="syz.3.253" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.896480][ T29] audit: type=1400 audit(1765700686.477:483): avc: denied { open } for pid=4221 comm="syz.3.253" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.930463][ T29] audit: type=1400 audit(1765700686.517:484): avc: denied { ioctl } for pid=4221 comm="syz.3.253" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.249437][ T29] audit: type=1400 audit(1765700686.837:485): avc: denied { create } for pid=4228 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.275000][ T29] audit: type=1400 audit(1765700686.857:486): avc: denied { connect } for pid=4228 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 48.299151][ T29] audit: type=1400 audit(1765700686.887:487): avc: denied { wake_alarm } for pid=4230 comm="syz.1.257" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.385379][ T4233] dummy0: entered allmulticast mode [ 48.385510][ T4233] dummy0: left allmulticast mode [ 48.452827][ T29] audit: type=1326 audit(1765700687.037:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712214f749 code=0x7ffc0000 [ 48.452933][ T29] audit: type=1326 audit(1765700687.037:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712214f749 code=0x7ffc0000 [ 48.452974][ T29] audit: type=1326 audit(1765700687.037:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f712214f749 code=0x7ffc0000 [ 48.453067][ T29] audit: type=1326 audit(1765700687.037:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4234 comm="syz.5.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f712214f749 code=0x7ffc0000 [ 48.938163][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.265'. [ 49.004649][ T4220] syz.2.252 (4220) used greatest stack depth: 7448 bytes left [ 49.141470][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.271'. [ 49.240049][ T4267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.296120][ T4267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.924561][ T4288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 49.965847][ T4291] loop3: detected capacity change from 0 to 1024 [ 49.974586][ T4291] EXT4-fs: inline encryption not supported [ 49.980637][ T4291] EXT4-fs: Ignoring removed orlov option [ 49.988787][ T4291] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 50.012601][ T4291] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 50.023177][ T4291] System zones: 0-1, 3-12 [ 50.036525][ T4291] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.068735][ T4291] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.128401][ T4291] xt_hashlimit: max too large, truncated to 1048576 [ 50.297236][ T4302] loop4: detected capacity change from 0 to 512 [ 50.359556][ T4302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.392976][ T4302] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.661504][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.691760][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.727870][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.805745][ T4331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 50.862510][ T4335] loop2: detected capacity change from 0 to 1024 [ 50.875789][ T4335] EXT4-fs: inline encryption not supported [ 50.881835][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.892155][ T4335] EXT4-fs: Ignoring removed orlov option [ 50.901036][ T4335] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 50.923145][ T4335] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 50.937982][ T4335] System zones: 0-1, 3-12 [ 50.943712][ T4335] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.966382][ T4335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.996400][ T4335] xt_hashlimit: max too large, truncated to 1048576 [ 51.234731][ T4355] loop1: detected capacity change from 0 to 512 [ 51.265429][ T4355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.290036][ T4355] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.501060][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.802294][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.327'. [ 52.060386][ T4382] syz.5.329 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 52.071333][ T4382] CPU: 1 UID: 0 PID: 4382 Comm: syz.5.329 Not tainted syzkaller #0 PREEMPT(voluntary) [ 52.071359][ T4382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.071375][ T4382] Call Trace: [ 52.071400][ T4382] [ 52.071410][ T4382] __dump_stack+0x1d/0x30 [ 52.071511][ T4382] dump_stack_lvl+0xe8/0x140 [ 52.071551][ T4382] dump_stack+0x15/0x1b [ 52.071609][ T4382] dump_header+0x81/0x240 [ 52.071633][ T4382] oom_kill_process+0x295/0x350 [ 52.071655][ T4382] out_of_memory+0x97b/0xb80 [ 52.071755][ T4382] try_charge_memcg+0x610/0xa10 [ 52.071810][ T4382] charge_memcg+0x51/0xc0 [ 52.071840][ T4382] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 52.071870][ T4382] __read_swap_cache_async+0x17b/0x2d0 [ 52.071982][ T4382] swap_cluster_readahead+0x262/0x3c0 [ 52.072020][ T4382] swapin_readahead+0xde/0x820 [ 52.072044][ T4382] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 52.072134][ T4382] ? lruvec_stat_mod_folio+0xd6/0x120 [ 52.072155][ T4382] ? __rcu_read_unlock+0x4f/0x70 [ 52.072173][ T4382] ? swap_cache_get_folio+0x277/0x280 [ 52.072201][ T4382] do_swap_page+0x2b4/0x21e0 [ 52.072242][ T4382] ? css_rstat_updated+0xb7/0x240 [ 52.072345][ T4382] ? __pfx_default_wake_function+0x10/0x10 [ 52.072376][ T4382] handle_mm_fault+0x9d8/0x2c60 [ 52.072416][ T4382] do_user_addr_fault+0x630/0x1080 [ 52.072465][ T4382] exc_page_fault+0x62/0xa0 [ 52.072496][ T4382] asm_exc_page_fault+0x26/0x30 [ 52.072519][ T4382] RIP: 0033:0x7f71220259ec [ 52.072615][ T4382] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 52.072683][ T4382] RSP: 002b:00007ffcb8953e60 EFLAGS: 00010202 [ 52.072702][ T4382] RAX: 0000000000000000 RBX: 00007f71223a5fa0 RCX: 0000000000000000 [ 52.072718][ T4382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555562b1f808 [ 52.072732][ T4382] RBP: 00007f71223a7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 52.072743][ T4382] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000cdcf [ 52.072755][ T4382] R13: 00007ffcb8953f50 R14: ffffffffffffffff R15: 00007ffcb8953f70 [ 52.072830][ T4382] [ 52.072839][ T4382] memory: usage 307200kB, limit 307200kB, failcnt 157 [ 52.293150][ T4382] memory+swap: usage 307372kB, limit 9007199254740988kB, failcnt 0 [ 52.301078][ T4382] kmem: usage 307176kB, limit 9007199254740988kB, failcnt 0 [ 52.308378][ T4382] Memory cgroup stats for /syz5: [ 52.313381][ T4382] cache 0 [ 52.321556][ T4382] rss 0 [ 52.324420][ T4382] shmem 0 [ 52.327390][ T4382] mapped_file 0 [ 52.330885][ T4382] dirty 0 [ 52.333826][ T4382] writeback 8192 [ 52.337434][ T4382] workingset_refault_anon 4 [ 52.341975][ T4382] workingset_refault_file 0 [ 52.346483][ T4382] swap 176128 [ 52.349780][ T4382] swapcached 24576 [ 52.353502][ T4382] pgpgin 4031 [ 52.356850][ T4382] pgpgout 4025 [ 52.360302][ T4382] pgfault 7037 [ 52.363675][ T4382] pgmajfault 1 [ 52.367061][ T4382] inactive_anon 20480 [ 52.371099][ T4382] active_anon 4096 [ 52.374820][ T4382] inactive_file 0 [ 52.378502][ T4382] active_file 0 [ 52.382066][ T4382] unevictable 0 [ 52.385597][ T4382] hierarchical_memory_limit 314572800 [ 52.391005][ T4382] hierarchical_memsw_limit 9223372036854771712 [ 52.397156][ T4382] total_cache 0 [ 52.400646][ T4382] total_rss 0 [ 52.403939][ T4382] total_shmem 0 [ 52.407409][ T4382] total_mapped_file 0 [ 52.411429][ T4382] total_dirty 0 [ 52.414903][ T4382] total_writeback 8192 [ 52.419011][ T4382] total_workingset_refault_anon 4 [ 52.424063][ T4382] total_workingset_refault_file 0 [ 52.429136][ T4382] total_swap 176128 [ 52.432969][ T4382] total_swapcached 24576 [ 52.437215][ T4382] total_pgpgin 4031 [ 52.441052][ T4382] total_pgpgout 4025 [ 52.445038][ T4382] total_pgfault 7037 [ 52.449046][ T4382] total_pgmajfault 1 [ 52.452949][ T4382] total_inactive_anon 20480 [ 52.457464][ T4382] total_active_anon 4096 [ 52.461748][ T4382] total_inactive_file 0 [ 52.465919][ T4382] total_active_file 0 [ 52.469977][ T4382] total_unevictable 0 [ 52.473995][ T4382] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.329,pid=4382,uid=0 [ 52.488694][ T4382] Memory cgroup out of memory: Killed process 4382 (syz.5.329) total-vm:95884kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 52.517104][ T4384] syz.5.329 (4384) used greatest stack depth: 7416 bytes left [ 52.530228][ T4395] loop1: detected capacity change from 0 to 1024 [ 52.537017][ T4395] EXT4-fs: inline encryption not supported [ 52.542872][ T4395] EXT4-fs: Ignoring removed orlov option [ 52.554203][ T4395] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 52.579278][ T4395] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 52.587395][ T4395] System zones: 0-1, 3-12 [ 52.592652][ T4395] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.605148][ T4395] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.649916][ T4404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.325'. [ 52.660984][ T4395] xt_hashlimit: max too large, truncated to 1048576 [ 52.721551][ T4409] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 52.743347][ T4416] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.328'. [ 52.765330][ T4412] netlink: 108 bytes leftover after parsing attributes in process `syz.4.330'. [ 52.839369][ T4419] loop2: detected capacity change from 0 to 4096 [ 52.899471][ T4419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.919852][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 52.919854][ T4428] SELinux: Context system_u:object_r:tmp_t:s0 is not valid (left unmapped). [ 52.919870][ T29] audit: type=1400 audit(1765700691.507:559): avc: denied { mac_admin } for pid=4426 comm="syz.1.337" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 52.995625][ T29] audit: type=1400 audit(1765700691.507:560): avc: denied { relabelto } for pid=4426 comm="syz.1.337" name="cgroup.procs" dev="cgroup" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:tmp_t:s0" [ 53.016169][ T4435] loop5: detected capacity change from 0 to 1024 [ 53.022080][ T29] audit: type=1400 audit(1765700691.507:561): avc: denied { associate } for pid=4426 comm="syz.1.337" name="cgroup.procs" dev="cgroup" ino=249 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:tmp_t:s0" [ 53.030888][ T4435] EXT4-fs: inline encryption not supported [ 53.055584][ T29] audit: type=1400 audit(1765700691.547:562): avc: denied { name_connect } for pid=4418 comm="syz.2.332" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 53.061458][ T4435] EXT4-fs: Ignoring removed orlov option [ 53.083376][ T29] audit: type=1400 audit(1765700691.547:563): avc: denied { validate_trans } for pid=4427 comm="syz.5.338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 53.139811][ T4435] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 53.146624][ T29] audit: type=1400 audit(1765700691.697:564): avc: denied { write } for pid=4437 comm="syz.4.343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.180563][ T29] audit: type=1400 audit(1765700691.767:565): avc: denied { name_bind } for pid=4439 comm="syz.1.342" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 53.197213][ T4435] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 53.212398][ T4435] System zones: 0-1, 3-12 [ 53.217444][ T4435] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.230110][ T4435] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.271287][ T4435] xt_hashlimit: max too large, truncated to 1048576 [ 53.279687][ T4453] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.348'. [ 53.339920][ T4459] syzkaller1: entered promiscuous mode [ 53.345463][ T4459] syzkaller1: entered allmulticast mode [ 53.457452][ T4462] 9pnet: p9_errstr2errno: server reported unknown error  [ 53.533258][ T4467] netlink: 'syz.3.354': attribute type 2 has an invalid length. [ 53.541346][ T4467] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 53.549089][ T4467] netlink: 'syz.3.354': attribute type 1 has an invalid length. [ 53.556792][ T4467] netlink: 76 bytes leftover after parsing attributes in process `syz.3.354'. [ 53.587501][ T29] audit: type=1400 audit(1765700692.167:566): avc: denied { module_request } for pid=4471 comm="syz.3.356" kmod="netdev-syztnl1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.628906][ T29] audit: type=1400 audit(1765700692.207:567): avc: denied { sys_module } for pid=4471 comm="syz.3.356" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 53.677908][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.711656][ T4478] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 53.745208][ T4480] mmap: syz.2.358 (4480) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 53.763459][ T29] audit: type=1400 audit(1765700692.347:568): avc: denied { create } for pid=4482 comm="syz.3.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.766460][ T4483] loop1: detected capacity change from 0 to 1024 [ 53.803463][ T4483] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.361: bad orphan inode 134217728 [ 53.815092][ T4483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.861364][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.911091][ T4498] netlink: 'syz.2.367': attribute type 7 has an invalid length. [ 53.922041][ T4498] netlink: 'syz.2.367': attribute type 7 has an invalid length. [ 54.038334][ T4511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.070485][ T4511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.447935][ T4541] macvlan2: entered promiscuous mode [ 54.452491][ T4545] loop4: detected capacity change from 0 to 1024 [ 54.453425][ T4541] macvlan2: entered allmulticast mode [ 54.465116][ T4541] gretap0: entered allmulticast mode [ 54.465150][ T4545] EXT4-fs: Ignoring removed bh option [ 54.493966][ T4545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.532184][ T4545] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.389: Allocating blocks 385-513 which overlap fs metadata [ 54.556402][ T4545] EXT4-fs (loop4): pa ffff888107ea9150: logic 16, phys. 129, len 24 [ 54.564587][ T4545] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 54.605887][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.676723][ T4559] loop3: detected capacity change from 0 to 164 [ 54.717104][ T4559] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.742386][ T4559] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.763195][ T4559] Symlink component flag not implemented [ 54.768999][ T4559] Symlink component flag not implemented [ 54.795974][ T4559] Symlink component flag not implemented (7) [ 54.802108][ T4559] Symlink component flag not implemented (116) [ 54.902514][ T4589] netlink: 60 bytes leftover after parsing attributes in process `syz.4.399'. [ 54.928331][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 55.424981][ T802] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.446060][ T4644] loop5: detected capacity change from 0 to 512 [ 55.464344][ T4644] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.412: error while reading EA inode 32 err=-116 [ 55.495943][ T4644] EXT4-fs (loop5): Remounting filesystem read-only [ 55.538927][ T4644] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 55.560828][ T4649] ref_ctr_offset mismatch. inode: 0x162 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 55.572957][ T4644] EXT4-fs (loop5): 1 orphan inode deleted [ 55.583506][ T4644] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.617609][ T4644] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.923975][ T4674] __nla_validate_parse: 1 callbacks suppressed [ 55.923994][ T4674] netlink: 1347 bytes leftover after parsing attributes in process `syz.5.427'. [ 55.990946][ T4683] random: crng reseeded on system resumption [ 56.280341][ T4713] xt_hashlimit: max too large, truncated to 1048576 [ 56.478167][ T4742] xt_hashlimit: max too large, truncated to 1048576 [ 56.491779][ T4742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.451'. [ 56.582670][ T4751] netlink: 68 bytes leftover after parsing attributes in process `syz.5.456'. [ 56.704765][ T4774] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 56.717005][ T4774] team0: Port device dummy0 added [ 56.723021][ T37] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 56.744997][ T4774] netlink: 'syz.4.465': attribute type 10 has an invalid length. [ 56.751462][ T4777] loop1: detected capacity change from 0 to 1024 [ 56.760358][ T4774] team0: Port device dummy0 removed [ 56.769536][ T4774] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.775692][ T4777] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.817131][ T4777] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.466: Allocating blocks 449-513 which overlap fs metadata [ 56.846946][ T4776] EXT4-fs (loop1): pa ffff888107d825b0: logic 48, phys. 177, len 21 [ 56.855104][ T4776] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 56.888560][ T4786] loop4: detected capacity change from 0 to 512 [ 56.900295][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.912651][ T4786] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.469: bg 0: block 248: padding at end of block bitmap is not set [ 56.927242][ T4786] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.469: Failed to acquire dquot type 1 [ 56.941474][ T4786] EXT4-fs (loop4): 1 truncate cleaned up [ 56.947679][ T4786] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.960919][ T4786] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.972451][ T4786] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.469: Failed to acquire dquot type 1 [ 57.007167][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.438671][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 57.474614][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 57.483631][ T4819] netlink: 312 bytes leftover after parsing attributes in process `syz.3.483'. [ 57.492758][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 57.568537][ T4828] loop5: detected capacity change from 0 to 512 [ 57.590859][ T4828] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 57.611348][ T4828] EXT4-fs (loop5): 1 truncate cleaned up [ 57.617527][ T4828] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.880229][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.938189][ T4867] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 57.962525][ T29] kauditd_printk_skb: 210 callbacks suppressed [ 57.962543][ T29] audit: type=1400 audit(1765700696.547:775): avc: denied { read } for pid=4868 comm="syz.5.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 58.083776][ T4877] loop4: detected capacity change from 0 to 1024 [ 58.090720][ T4877] EXT4-fs: Ignoring removed bh option [ 58.096147][ T4877] EXT4-fs: inline encryption not supported [ 58.114220][ T4877] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.139010][ T4877] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 58.159014][ T4877] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.494: lblock 2 mapped to illegal pblock 2 (length 1) [ 58.178739][ T29] audit: type=1400 audit(1765700696.757:776): avc: denied { mount } for pid=4885 comm="syz.5.499" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 58.215818][ T4877] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 58.233044][ T4877] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.494: lblock 0 mapped to illegal pblock 48 (length 1) [ 58.265078][ T4877] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 58.273942][ T4877] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.494: Failed to acquire dquot type 0 [ 58.309415][ T4877] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 58.331753][ T4877] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.494: mark_inode_dirty error [ 58.343883][ T4877] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 58.355862][ T4877] EXT4-fs (loop4): 1 orphan inode deleted [ 58.362425][ T4877] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.377365][ T1011] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 58.393125][ T1011] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 58.401663][ T1011] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 58.466141][ T4899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4899 comm=syz.5.505 [ 58.478639][ T4899] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4899 comm=syz.5.505 [ 58.492495][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.507292][ T3319] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 58.534369][ T3319] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 58.550189][ T3319] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 58.574336][ T29] audit: type=1400 audit(1765700697.157:777): avc: denied { create } for pid=4902 comm="syz.1.509" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.635455][ T29] audit: type=1400 audit(1765700697.207:778): avc: denied { write } for pid=4902 comm="syz.1.509" name="file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.657897][ T29] audit: type=1400 audit(1765700697.207:779): avc: denied { open } for pid=4902 comm="syz.1.509" path="/80/file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.680507][ T29] audit: type=1400 audit(1765700697.207:780): avc: denied { ioctl } for pid=4902 comm="syz.1.509" path="/80/file0" dev="tmpfs" ino=433 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.721168][ T29] audit: type=1400 audit(1765700697.277:781): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=433 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 58.746215][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'. [ 58.755219][ T4905] netlink: 108 bytes leftover after parsing attributes in process `syz.4.506'. [ 58.765751][ T4905] netlink: 28 bytes leftover after parsing attributes in process `syz.4.506'. [ 58.775275][ T4905] netlink: 108 bytes leftover after parsing attributes in process `syz.4.506'. [ 58.776825][ T4916] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.815392][ T4920] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 59.035994][ T1734] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 59.060817][ T4958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4958 comm=syz.3.530 [ 59.845272][ T5008] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 59.874462][ T5010] netlink: 'syz.3.556': attribute type 1 has an invalid length. [ 60.053896][ T1011] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 60.616198][ T5043] bridge0: port 3(vlan2) entered blocking state [ 60.622715][ T5043] bridge0: port 3(vlan2) entered disabled state [ 60.630245][ T5043] vlan2: entered allmulticast mode [ 60.635423][ T5043] bridge0: entered allmulticast mode [ 60.642793][ T5043] vlan2: left allmulticast mode [ 60.647848][ T5043] bridge0: left allmulticast mode [ 60.763334][ T5059] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 60.777644][ T5059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.796939][ T5059] bond1: (slave geneve2): making interface the new active one [ 60.806206][ T5059] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 60.897794][ T3006] udevd[3006]: worker [3762] terminated by signal 33 (Unknown signal 33) [ 61.034918][ T5090] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 61.067664][ T5099] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 61.067664][ T5099] program syz.2.594 not setting count and/or reply_len properly [ 61.150337][ T1734] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 61.221233][ T5114] netlink: 'syz.5.601': attribute type 6 has an invalid length. [ 61.294112][ T5122] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 61.387792][ T5126] netlink: 'syz.1.607': attribute type 13 has an invalid length. [ 61.411123][ T5126] gretap0: refused to change device tx_queue_len [ 61.417544][ T5126] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 61.492386][ T5138] __nla_validate_parse: 16 callbacks suppressed [ 61.492403][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 61.511029][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 61.517220][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.1.613'. [ 61.520961][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 61.538054][ T5138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.612'. [ 61.620618][ T5157] netlink: 'syz.5.620': attribute type 13 has an invalid length. [ 61.640425][ T5157] gretap0: refused to change device tx_queue_len [ 61.646813][ T5157] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 61.724106][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 61.735647][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 61.745172][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 61.754596][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.627'. [ 61.979220][ T5188] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 62.000018][ T5188] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.016523][ T5192] loop4: detected capacity change from 0 to 512 [ 62.029748][ T5188] bond1: (slave geneve2): making interface the new active one [ 62.038484][ T5188] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 62.062778][ T5192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.085542][ T5192] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.117216][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.223282][ T5209] bridge0: port 3(vlan2) entered blocking state [ 62.229742][ T5209] bridge0: port 3(vlan2) entered disabled state [ 62.249335][ T5209] vlan2: entered allmulticast mode [ 62.254537][ T5209] bridge0: entered allmulticast mode [ 62.268321][ T5209] vlan2: left allmulticast mode [ 62.273274][ T5209] bridge0: left allmulticast mode [ 62.282652][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'. [ 62.296814][ T52] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 62.317395][ T5226] loop4: detected capacity change from 0 to 1024 [ 62.325586][ T5226] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.340198][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.370026][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.404470][ T5234] loop2: detected capacity change from 0 to 512 [ 62.413896][ T5234] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.426766][ T5234] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.463462][ T3316] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.082581][ T5255] netlink: 'syz.4.660': attribute type 1 has an invalid length. [ 63.097119][ T5255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.117176][ T5255] bond1: (slave geneve2): making interface the new active one [ 63.118458][ T5261] loop3: detected capacity change from 0 to 512 [ 63.126511][ T5255] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 63.153403][ T5263] bridge0: port 3(vlan2) entered blocking state [ 63.159863][ T5263] bridge0: port 3(vlan2) entered disabled state [ 63.168777][ T5263] vlan2: entered allmulticast mode [ 63.174017][ T5263] bridge0: entered allmulticast mode [ 63.181789][ T5263] vlan2: left allmulticast mode [ 63.186669][ T5263] bridge0: left allmulticast mode [ 63.194464][ T5261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.212616][ T5261] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.228881][ T29] kauditd_printk_skb: 266 callbacks suppressed [ 63.228936][ T29] audit: type=1326 audit(1765700701.817:1048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.258787][ T29] audit: type=1326 audit(1765700701.847:1049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.282193][ T29] audit: type=1326 audit(1765700701.847:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.305679][ T29] audit: type=1326 audit(1765700701.847:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.329170][ T29] audit: type=1326 audit(1765700701.847:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.352525][ T29] audit: type=1326 audit(1765700701.847:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.375903][ T29] audit: type=1326 audit(1765700701.847:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.399215][ T29] audit: type=1326 audit(1765700701.847:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.422627][ T29] audit: type=1326 audit(1765700701.917:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.446022][ T29] audit: type=1326 audit(1765700701.927:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5259 comm="syz.3.663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 63.488611][ T5276] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 63.501087][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.552577][ T5283] Driver unsupported XDP return value 0 on prog (id 412) dev N/A, expect packet loss! [ 63.650507][ T5298] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 63.736858][ T5309] loop5: detected capacity change from 0 to 512 [ 63.756666][ T5313] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 63.774802][ T5309] EXT4-fs (loop5): too many log groups per flexible block group [ 63.784741][ T5309] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 63.791663][ T5309] EXT4-fs (loop5): mount failed [ 63.847837][ T5327] capability: warning: `syz.5.692' uses 32-bit capabilities (legacy support in use) [ 63.982769][ T5348] netdevsim netdevsim5: Direct firmware load for ./file1 failed with error -2 [ 64.155805][ T5377] netdevsim netdevsim1: Direct firmware load for ./file1 failed with error -2 [ 64.216443][ T5387] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 64.245639][ T5392] bridge0: port 3(vlan2) entered blocking state [ 64.252002][ T5392] bridge0: port 3(vlan2) entered disabled state [ 64.266552][ T5392] vlan2: entered allmulticast mode [ 64.271816][ T5392] bridge0: entered allmulticast mode [ 64.278853][ T5392] vlan2: left allmulticast mode [ 64.283809][ T5392] bridge0: left allmulticast mode [ 64.387945][ T5402] openvswitch: netlink: Missing key (keys=40, expected=100) [ 64.587008][ T5422] loop3: detected capacity change from 0 to 512 [ 64.607003][ T5422] EXT4-fs (loop3): too many log groups per flexible block group [ 64.614850][ T5422] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 64.622098][ T5422] EXT4-fs (loop3): mount failed [ 64.777525][ T5441] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 64.957972][ T5458] openvswitch: netlink: Missing key (keys=40, expected=100) [ 65.007455][ T5462] lo speed is unknown, defaulting to 1000 [ 65.121403][ T5476] netlink: 'syz.3.761': attribute type 1 has an invalid length. [ 66.630397][ T5611] lo speed is unknown, defaulting to 1000 [ 66.641485][ T5607] 9pnet: p9_errstr2errno: server reported unknown error  [ 66.680561][ T5618] __nla_validate_parse: 8 callbacks suppressed [ 66.680608][ T5618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.824'. [ 66.712141][ T5622] netlink: 'syz.2.823': attribute type 1 has an invalid length. [ 66.840218][ T5629] netlink: 'syz.4.829': attribute type 7 has an invalid length. [ 66.855091][ T5629] netlink: 'syz.4.829': attribute type 7 has an invalid length. [ 66.929062][ T5639] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 66.944675][ T3488] lo speed is unknown, defaulting to 1000 [ 67.084357][ T5648] netlink: 'syz.4.837': attribute type 2 has an invalid length. [ 67.092366][ T5648] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 67.100207][ T5648] netlink: 'syz.4.837': attribute type 1 has an invalid length. [ 67.107935][ T5648] netlink: 76 bytes leftover after parsing attributes in process `syz.4.837'. [ 67.167287][ T5657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 67.209868][ T5651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.380562][ T5666] syzkaller1: entered promiscuous mode [ 67.386082][ T5666] syzkaller1: entered allmulticast mode [ 67.519247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.558367][ T5673] netlink: 'syz.3.844': attribute type 7 has an invalid length. [ 67.566803][ T5673] netlink: 'syz.3.844': attribute type 7 has an invalid length. [ 67.651080][ T5687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.660538][ T5687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.737809][ T5693] netlink: 12 bytes leftover after parsing attributes in process `syz.3.855'. [ 67.873741][ T5700] netlink: 60 bytes leftover after parsing attributes in process `syz.3.858'. [ 68.128860][ T5719] ref_ctr_offset mismatch. inode: 0x34e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 68.144895][ T5720] macvlan2: entered promiscuous mode [ 68.150364][ T5720] macvlan2: entered allmulticast mode [ 68.155803][ T5720] gretap0: entered allmulticast mode [ 68.257338][ T29] kauditd_printk_skb: 136 callbacks suppressed [ 68.257409][ T29] audit: type=1400 audit(1765700706.837:1194): avc: denied { read write } for pid=5733 comm="syz.3.874" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.286854][ T29] audit: type=1400 audit(1765700706.837:1195): avc: denied { open } for pid=5733 comm="syz.3.874" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.331679][ T29] audit: type=1400 audit(1765700706.897:1196): avc: denied { rename } for pid=5730 comm="syz.5.872" name="file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.354670][ T29] audit: type=1400 audit(1765700706.897:1197): avc: denied { unlink } for pid=5730 comm="syz.5.872" name="file0" dev="tmpfs" ino=828 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.377088][ T29] audit: type=1400 audit(1765700706.897:1198): avc: denied { ioctl } for pid=5733 comm="syz.3.874" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7459 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 68.407824][ T5740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.877'. [ 68.418360][ T29] audit: type=1400 audit(1765700706.987:1199): avc: denied { create } for pid=5736 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.437964][ T29] audit: type=1400 audit(1765700706.987:1200): avc: denied { setopt } for pid=5736 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.457742][ T29] audit: type=1400 audit(1765700706.987:1201): avc: denied { bind } for pid=5736 comm="syz.1.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.477268][ T29] audit: type=1400 audit(1765700706.987:1202): avc: denied { name_bind } for pid=5736 comm="syz.1.876" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 68.499049][ T29] audit: type=1400 audit(1765700706.987:1203): avc: denied { node_bind } for pid=5736 comm="syz.1.876" saddr=127.0.0.1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 68.532556][ T5745] ref_ctr_offset mismatch. inode: 0x39f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 68.945498][ T5765] loop4: detected capacity change from 0 to 164 [ 68.972751][ T5765] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.008811][ T5765] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.029578][ T5765] Symlink component flag not implemented [ 69.035256][ T5765] Symlink component flag not implemented [ 69.041796][ T5773] netlink: 16 bytes leftover after parsing attributes in process `syz.2.892'. [ 69.058647][ T5765] Symlink component flag not implemented (7) [ 69.064688][ T5765] Symlink component flag not implemented (116) [ 69.170039][ T5786] loop5: detected capacity change from 0 to 1024 [ 69.170353][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 69.177077][ T5786] EXT4-fs: Ignoring removed bh option [ 69.211101][ T5786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.231350][ T5786] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.899: Allocating blocks 385-513 which overlap fs metadata [ 69.247058][ T5786] EXT4-fs (loop5): pa ffff888107ea9150: logic 16, phys. 129, len 24 [ 69.255129][ T5786] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 69.277398][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.608324][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.912'. [ 69.710809][ T5832] ref_ctr_offset mismatch. inode: 0x37a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 70.018076][ T5850] xt_hashlimit: max too large, truncated to 1048576 [ 70.029519][ T5850] netlink: 16 bytes leftover after parsing attributes in process `syz.3.923'. [ 70.070608][ T5852] xt_hashlimit: max too large, truncated to 1048576 [ 70.311558][ T5862] random: crng reseeded on system resumption [ 71.180242][ T5873] ref_ctr_offset mismatch. inode: 0x47a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 71.474795][ T5914] ref_ctr_offset mismatch. inode: 0x3ba offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 71.678257][ T5935] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.697130][ T5936] __nla_validate_parse: 1 callbacks suppressed [ 71.697158][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 71.712714][ T5936] netlink: 312 bytes leftover after parsing attributes in process `syz.1.964'. [ 71.721845][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.964'. [ 71.743441][ T5935] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.791240][ T5945] ref_ctr_offset mismatch. inode: 0x355 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000340 [ 71.834773][ T5935] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.910455][ T5955] loop4: detected capacity change from 0 to 1024 [ 71.919086][ T5935] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.951623][ T5955] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.986339][ T382] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.997882][ T382] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.027787][ T1734] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.040400][ T382] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.061711][ T5955] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.973: Allocating blocks 449-513 which overlap fs metadata [ 72.121761][ T5953] EXT4-fs (loop4): pa ffff888107d82690: logic 48, phys. 177, len 21 [ 72.129870][ T5953] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4 [ 72.186015][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.195830][ T5978] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 72.211810][ T5978] team0: Port device dummy0 added [ 72.224694][ T5978] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 72.236536][ T5978] team0: Port device dummy0 removed [ 72.244387][ T5978] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 72.574711][ T6001] netlink: 68 bytes leftover after parsing attributes in process `syz.1.991'. [ 73.021766][ T6021] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 73.055394][ T6021] team0: Port device dummy0 added [ 73.076018][ T6021] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 73.092614][ T6021] team0: Port device dummy0 removed [ 73.110203][ T6021] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 73.169890][ T6024] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.234409][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.999'. [ 73.243624][ T6031] netlink: 312 bytes leftover after parsing attributes in process `syz.5.999'. [ 73.252681][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.5.999'. [ 73.262679][ T6024] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.322550][ T6024] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.392146][ T6024] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.456227][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.468187][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.490378][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.527452][ T60] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.649885][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 73.649903][ T29] audit: type=1326 audit(1765700712.237:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.708463][ T29] audit: type=1326 audit(1765700712.267:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732216][ T29] audit: type=1326 audit(1765700712.267:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732284][ T29] audit: type=1326 audit(1765700712.277:1424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732346][ T29] audit: type=1326 audit(1765700712.277:1425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732403][ T29] audit: type=1326 audit(1765700712.277:1426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732433][ T29] audit: type=1326 audit(1765700712.277:1427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732464][ T29] audit: type=1326 audit(1765700712.277:1428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732668][ T29] audit: type=1326 audit(1765700712.277:1429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.732701][ T29] audit: type=1326 audit(1765700712.277:1430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6040 comm="syz.2.1004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 73.991336][ T6061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6061 comm=syz.2.1016 [ 74.003963][ T6061] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6061 comm=syz.2.1016 [ 74.238645][ T4643] Bluetooth: hci0: command 0x1003 tx timeout [ 74.244708][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.965306][ T6093] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1027'. [ 74.994174][ T6095] wireguard0: entered promiscuous mode [ 74.999899][ T6095] wireguard0: entered allmulticast mode [ 75.435262][ T6105] lo speed is unknown, defaulting to 1000 [ 75.617816][ T6109] sctp: [Deprecated]: syz.2.1036 (pid 6109) Use of int in max_burst socket option deprecated. [ 75.617816][ T6109] Use struct sctp_assoc_value instead [ 76.878678][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 76.878701][ T4643] Bluetooth: hci0: command 0x1003 tx timeout [ 77.509699][ T6137] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1045'. [ 77.540590][ T6141] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1048'. [ 77.722274][ T6149] loop5: detected capacity change from 0 to 512 [ 77.753334][ T6149] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1051: bg 0: block 248: padding at end of block bitmap is not set [ 77.770547][ T6149] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1051: Failed to acquire dquot type 1 [ 77.793244][ T6149] EXT4-fs (loop5): 1 truncate cleaned up [ 77.803219][ T6149] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.828328][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 77.828730][ T6149] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.838011][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1061'. [ 77.899959][ T6149] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1051: Failed to acquire dquot type 1 [ 77.923993][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.020754][ T6182] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1067'. [ 78.145538][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1076'. [ 78.155096][ T6201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1076'. [ 78.170076][ T6202] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.180595][ T6203] loop3: detected capacity change from 0 to 512 [ 78.210415][ T6203] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1078: bg 0: block 248: padding at end of block bitmap is not set [ 78.225345][ T6203] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1078: Failed to acquire dquot type 1 [ 78.237554][ T6203] EXT4-fs (loop3): 1 truncate cleaned up [ 78.243692][ T6203] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.256470][ T6203] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.275586][ T6202] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.284219][ T6203] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1078: Failed to acquire dquot type 1 [ 78.308031][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.341896][ T6202] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.417104][ T6218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1083'. [ 78.444731][ T6202] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.516509][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.531252][ T404] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.558238][ T404] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.579998][ T404] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.604230][ T6229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1089'. [ 78.629935][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1089'. [ 78.665490][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 78.665507][ T29] audit: type=1326 audit(1765700717.247:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.695274][ T29] audit: type=1326 audit(1765700717.247:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.719014][ T29] audit: type=1326 audit(1765700717.247:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.742583][ T29] audit: type=1326 audit(1765700717.247:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.766306][ T29] audit: type=1326 audit(1765700717.247:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.789895][ T29] audit: type=1326 audit(1765700717.247:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.813382][ T29] audit: type=1326 audit(1765700717.247:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.836852][ T29] audit: type=1326 audit(1765700717.247:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.860386][ T29] audit: type=1326 audit(1765700717.247:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.890737][ T29] audit: type=1326 audit(1765700717.247:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6234 comm="syz.3.1090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb509f4f749 code=0x7ffc0000 [ 78.974252][ T6251] loop4: detected capacity change from 0 to 1024 [ 78.999231][ T6251] EXT4-fs: Ignoring removed bh option [ 79.024609][ T6251] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.060429][ T6251] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1098: Allocating blocks 385-513 which overlap fs metadata [ 79.076401][ T6264] program syz.1.1104 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.076938][ T6251] EXT4-fs (loop4): pa ffff888107d82700: logic 16, phys. 129, len 24 [ 79.093788][ T6251] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 79.183846][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.298695][ T6296] program syz.3.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.488903][ T6315] netlink: 'syz.1.1127': attribute type 1 has an invalid length. [ 79.496731][ T6315] netlink: 'syz.1.1127': attribute type 4 has an invalid length. [ 80.256055][ T6361] lo speed is unknown, defaulting to 1000 [ 80.791893][ T6373] loop3: detected capacity change from 0 to 1024 [ 80.803350][ T6373] EXT4-fs: Ignoring removed bh option [ 80.845215][ T6373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.867643][ T6373] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1149: Allocating blocks 385-513 which overlap fs metadata [ 80.893077][ T6390] loop4: detected capacity change from 0 to 1024 [ 80.913098][ T6390] EXT4-fs: Ignoring removed orlov option [ 80.921516][ T6373] EXT4-fs (loop3): pa ffff888107d82770: logic 16, phys. 129, len 24 [ 80.929673][ T6373] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 80.955472][ T6390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.967829][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.095400][ T6405] lo speed is unknown, defaulting to 1000 [ 81.127963][ T6390] EXT4-fs error (device loop4): __ext4_new_inode:1279: comm syz.4.1157: failed to insert inode 12: doubly allocated? [ 81.143929][ T6390] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 81.171150][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.819621][ T6418] random: crng reseeded on system resumption [ 81.845922][ T6420] lo speed is unknown, defaulting to 1000 [ 81.902309][ T6425] team0 (unregistering): Port device team_slave_0 removed [ 81.929412][ T6425] team0 (unregistering): Port device team_slave_1 removed [ 82.034705][ T6437] loop5: detected capacity change from 0 to 1024 [ 82.041665][ T6437] EXT4-fs: Ignoring removed bh option [ 82.050538][ T6439] loop4: detected capacity change from 0 to 1024 [ 82.058367][ T6437] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.078742][ T6439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.096045][ T6437] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.1173: Allocating blocks 385-513 which overlap fs metadata [ 82.127619][ T6437] EXT4-fs (loop5): pa ffff888107d82700: logic 16, phys. 129, len 24 [ 82.128328][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.135777][ T6437] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 82.199883][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.350594][ T6467] lo speed is unknown, defaulting to 1000 [ 82.362497][ T6476] loop3: detected capacity change from 0 to 256 [ 82.372751][ T6474] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.412181][ T6474] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.462924][ T6474] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.538135][ T6490] loop5: detected capacity change from 0 to 512 [ 82.553557][ T6490] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 82.567831][ T6474] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.579129][ T6490] EXT4-fs (loop5): invalid journal inode [ 82.584906][ T6490] EXT4-fs (loop5): can't get journal size [ 82.593240][ T6490] EXT4-fs (loop5): 1 truncate cleaned up [ 82.604214][ T6490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.657981][ T60] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.702605][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.720406][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.738713][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.838217][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.611189][ T6507] __nla_validate_parse: 19 callbacks suppressed [ 83.611208][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 83.626528][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1205'. [ 83.638885][ T6508] netlink: 'syz.2.1206': attribute type 1 has an invalid length. [ 83.675426][ T6517] loop4: detected capacity change from 0 to 1024 [ 83.682571][ T6517] EXT4-fs: Ignoring removed bh option [ 83.703410][ T6517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.721146][ T6517] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.1212: Allocating blocks 385-513 which overlap fs metadata [ 83.736288][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 83.736305][ T29] audit: type=1326 audit(1765700722.317:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.769561][ T6517] EXT4-fs (loop4): pa ffff888107d82770: logic 16, phys. 129, len 24 [ 83.777612][ T6517] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 83.800615][ T6524] loop3: detected capacity change from 0 to 2048 [ 83.807814][ T29] audit: type=1326 audit(1765700722.357:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.829686][ T6528] lo speed is unknown, defaulting to 1000 [ 83.831420][ T29] audit: type=1326 audit(1765700722.357:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.860466][ T29] audit: type=1326 audit(1765700722.357:1691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.884016][ T29] audit: type=1326 audit(1765700722.357:1692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.907538][ T29] audit: type=1326 audit(1765700722.357:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="syz.2.1213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.931135][ T29] audit: type=1326 audit(1765700722.357:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.953976][ T29] audit: type=1326 audit(1765700722.357:1695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.976865][ T29] audit: type=1326 audit(1765700722.357:1696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 83.999807][ T29] audit: type=1326 audit(1765700722.357:1697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6521 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8ca6f749 code=0x7ffc0000 [ 84.029743][ T6524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.066511][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.077182][ T6535] loop5: detected capacity change from 0 to 1024 [ 84.099699][ T6535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.128282][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.142747][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.224532][ T6545] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.250061][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 84.259105][ T6555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 84.295005][ T6545] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.323325][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 84.329174][ T6565] loop3: detected capacity change from 0 to 1024 [ 84.332477][ T6563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1229'. [ 84.339535][ T6565] EXT4-fs: Ignoring removed bh option [ 84.374282][ T6565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.393603][ T6545] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.414325][ T6565] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.1227: Allocating blocks 385-513 which overlap fs metadata [ 84.436778][ T6565] EXT4-fs (loop3): pa ffff888107d82850: logic 16, phys. 129, len 24 [ 84.444966][ T6565] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 84.472201][ T6545] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.513830][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.548373][ T382] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.590354][ T382] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.612311][ T382] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.638470][ T382] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.736953][ T6579] loop5: detected capacity change from 0 to 2048 [ 84.795401][ T6579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.868665][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.936671][ T6598] vlan2: entered allmulticast mode [ 84.948683][ T6598] dummy0: entered allmulticast mode [ 85.033222][ T6606] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.086357][ T6606] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.133006][ T6620] loop4: detected capacity change from 0 to 2048 [ 85.182800][ T6606] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.197954][ T6620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.245877][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.298143][ T6606] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.387543][ T363] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.395892][ T363] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.428802][ T363] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.447413][ T363] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.591975][ T6645] ip6gre0: entered promiscuous mode [ 85.631062][ T6645] team0: Device ip6gre0 is of different type [ 85.881559][ T6660] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1264'. [ 85.915455][ T6660] hsr_slave_1 (unregistering): left promiscuous mode [ 85.982582][ T6665] loop4: detected capacity change from 0 to 2048 [ 86.006210][ T6665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.092430][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.140221][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1276'. [ 86.149406][ T6684] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1276'. [ 86.158735][ T6684] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1276'. [ 86.603873][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.611286][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.669440][ T6702] loop5: detected capacity change from 0 to 512 [ 87.105143][ T6688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.119685][ T6688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.204537][ T10] lo speed is unknown, defaulting to 1000 [ 87.210659][ T10] syz1: Port: 1 Link DOWN [ 87.219861][ T404] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.250697][ T404] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.274905][ T404] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.293648][ T6724] wireguard0: entered promiscuous mode [ 87.308318][ T6725] loop3: detected capacity change from 0 to 1024 [ 87.333128][ T6725] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.363205][ T6725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.386943][ T404] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.395967][ T6719] lo speed is unknown, defaulting to 1000 [ 87.415257][ T3320] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.718726][ T4643] Bluetooth: hci0: command 0x1003 tx timeout [ 88.720100][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 88.837818][ T6831] __nla_validate_parse: 3 callbacks suppressed [ 88.837838][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1313'. [ 88.842908][ T6832] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.844072][ T6831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1313'. [ 88.853032][ T6832] IPv6: NLM_F_CREATE should be set when creating new route [ 88.973041][ T6839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6839 comm=syz.5.1316 [ 89.421705][ C1] hrtimer: interrupt took 27268 ns [ 89.431921][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 89.432012][ T29] audit: type=1326 audit(1765700728.017:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.486085][ T29] audit: type=1326 audit(1765700728.047:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.509678][ T29] audit: type=1326 audit(1765700728.047:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.533259][ T29] audit: type=1326 audit(1765700728.047:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.556861][ T29] audit: type=1326 audit(1765700728.047:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.580322][ T29] audit: type=1326 audit(1765700728.047:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.603815][ T29] audit: type=1326 audit(1765700728.047:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.627323][ T29] audit: type=1326 audit(1765700728.047:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6868 comm="syz.4.1327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f04ed46f749 code=0x7ffc0000 [ 89.709804][ T29] audit: type=1400 audit(1765700728.287:1806): avc: denied { bind } for pid=6875 comm="syz.5.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 89.769156][ T6880] smc: net device bond0 applied user defined pnetid SYZ0 [ 89.776920][ T6880] smc: net device bond0 erased user defined pnetid SYZ0 [ 89.823229][ T29] audit: type=1400 audit(1765700728.407:1807): avc: denied { name_connect } for pid=6885 comm="syz.3.1334" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 89.908022][ T6898] netlink: 'syz.4.1339': attribute type 21 has an invalid length. [ 89.916330][ T6898] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1339'. [ 89.916916][ T6896] serio: Serial port ptm0 [ 89.925515][ T6898] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1339'. [ 90.012083][ T6906] SELinux: ebitmap: truncated map [ 90.017974][ T6906] SELinux: failed to load policy [ 90.124141][ T6922] loop5: detected capacity change from 0 to 512 [ 90.142379][ T6922] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.155368][ T6922] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.179157][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.493052][ T6965] loop5: detected capacity change from 0 to 1024 [ 90.493287][ T6967] sd 0:0:1:0: device reset [ 90.500029][ T6965] EXT4-fs: Ignoring removed bh option [ 90.510684][ T6965] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 90.549620][ T6965] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.583845][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.624121][ T6974] $Hÿ: renamed from bond0 (while UP) [ 90.646590][ T6974] $Hÿ: entered promiscuous mode [ 90.651746][ T6974] bond_slave_0: entered promiscuous mode [ 90.657603][ T6974] bond_slave_1: entered promiscuous mode [ 90.786020][ T6985] netlink: 'syz.4.1374': attribute type 10 has an invalid length. [ 90.895061][ T7000] gre1: entered promiscuous mode [ 90.964462][ T7014] loop5: detected capacity change from 0 to 512 [ 90.995440][ T7014] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 91.008961][ T7014] EXT4-fs (loop5): orphan cleanup on readonly fs [ 91.016119][ T7014] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 91.032594][ T7014] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 91.040805][ T7014] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1389: bg 0: block 40: padding at end of block bitmap is not set [ 91.055246][ T7014] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 91.064466][ T7014] EXT4-fs (loop5): 1 truncate cleaned up [ 91.070840][ T7014] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.096106][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.134637][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1399'. [ 91.177145][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1403'. [ 91.235956][ T7050] loop4: detected capacity change from 0 to 128 [ 91.409449][ T7055] ================================================================== [ 91.417581][ T7055] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 91.424751][ T7055] [ 91.427083][ T7055] write to 0xffff88811ad38b14 of 4 bytes by task 7050 on cpu 1: [ 91.434723][ T7055] xas_set_mark+0x12b/0x140 [ 91.439246][ T7055] tag_pages_for_writeback+0xc2/0x290 [ 91.444658][ T7055] writeback_iter+0x340/0x820 [ 91.449365][ T7055] mpage_writepages+0x87/0x1250 [ 91.454237][ T7055] fat_writepages+0x24/0x30 [ 91.458759][ T7055] do_writepages+0x1c6/0x310 [ 91.463375][ T7055] file_write_and_wait_range+0x156/0x2c0 [ 91.469024][ T7055] __generic_file_fsync+0x46/0x160 [ 91.474151][ T7055] fat_file_fsync+0x49/0x100 [ 91.478782][ T7055] vfs_fsync_range+0x10d/0x130 [ 91.483562][ T7055] generic_file_write_iter+0x1b8/0x2f0 [ 91.489041][ T7055] iter_file_splice_write+0x66b/0xa20 [ 91.494418][ T7055] direct_splice_actor+0x156/0x2a0 [ 91.499704][ T7055] splice_direct_to_actor+0x312/0x680 [ 91.505086][ T7055] do_splice_direct+0xda/0x150 [ 91.509861][ T7055] do_sendfile+0x380/0x650 [ 91.514301][ T7055] __x64_sys_sendfile64+0x105/0x150 [ 91.519523][ T7055] x64_sys_call+0x2db1/0x3000 [ 91.524219][ T7055] do_syscall_64+0xd8/0x2c0 [ 91.528754][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.534660][ T7055] [ 91.536985][ T7055] read to 0xffff88811ad38b14 of 4 bytes by task 7055 on cpu 0: [ 91.544544][ T7055] xas_find_marked+0x5dc/0x620 [ 91.549326][ T7055] find_get_entry+0x5d/0x380 [ 91.553917][ T7055] filemap_get_folios_tag+0x92/0x210 [ 91.559209][ T7055] filemap_fdatawait_range+0x88/0x1d0 [ 91.564611][ T7055] __writeback_single_inode+0xdb/0x7c0 [ 91.570097][ T7055] writeback_single_inode+0x16d/0x3f0 [ 91.575489][ T7055] sync_inode_metadata+0x5b/0x90 [ 91.580461][ T7055] __generic_file_fsync+0x109/0x160 [ 91.585679][ T7055] fat_file_fsync+0x49/0x100 [ 91.590313][ T7055] vfs_fsync_range+0x10d/0x130 [ 91.595124][ T7055] generic_file_write_iter+0x1b8/0x2f0 [ 91.600612][ T7055] iter_file_splice_write+0x66b/0xa20 [ 91.605990][ T7055] direct_splice_actor+0x156/0x2a0 [ 91.611115][ T7055] splice_direct_to_actor+0x312/0x680 [ 91.616502][ T7055] do_splice_direct+0xda/0x150 [ 91.621288][ T7055] do_sendfile+0x380/0x650 [ 91.625728][ T7055] __x64_sys_sendfile64+0x105/0x150 [ 91.630951][ T7055] x64_sys_call+0x2db1/0x3000 [ 91.635657][ T7055] do_syscall_64+0xd8/0x2c0 [ 91.640190][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.646133][ T7055] [ 91.648477][ T7055] value changed: 0x02000021 -> 0x04000021 [ 91.654221][ T7055] [ 91.656571][ T7055] Reported by Kernel Concurrency Sanitizer on: [ 91.662750][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.4.1406 Not tainted syzkaller #0 PREEMPT(voluntary) [ 91.672484][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.682553][ T7055] ==================================================================