last executing test programs: 52.805705849s ago: executing program 0 (id=31): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) getrandom(0x0, 0x0, 0x1) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0x13, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x18) 52.755369071s ago: executing program 0 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) renameat2(r0, &(0x7f0000000000)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2) 52.730580471s ago: executing program 0 (id=33): r0 = syz_create_resource$binfmt(&(0x7f0000000080)='./file0\x00') r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0xdc, 0x9, 0x3, 0xffffffff, 0x2, 0x3e, 0x1001, 0xfe, 0x40, 0x20000002001df, 0x0, 0x3e, 0x38, 0x1, 0x27, 0x5}, [{0x3, 0x0, 0x8000000000000003, 0x80000000000002, 0x6, 0xfff, 0x80059b4, 0x8}]}, 0x78) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 52.684797793s ago: executing program 0 (id=34): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x0) 52.596470826s ago: executing program 0 (id=35): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) 52.246073737s ago: executing program 0 (id=43): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3}, 0x3286, 0x3, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0xea}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2, {0xfffffffe}}}}}}}}, 0x0) 52.245938677s ago: executing program 32 (id=43): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x5, 0x3}, 0x3286, 0x3, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prlimit64(0x0, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {0x8, 0x88be, 0xea}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2, {0xfffffffe}}}}}}}}, 0x0) 38.785523405s ago: executing program 4 (id=303): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) msgget$private(0x0, 0x351) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 38.761029316s ago: executing program 4 (id=304): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x540a, 0x1) 38.675655219s ago: executing program 4 (id=306): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0x200c4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000b00)}, {0x0}], 0x2) io_uring_enter(r0, 0x2219, 0x1adf, 0x16, 0x0, 0x0) 38.532794383s ago: executing program 4 (id=308): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 38.483538574s ago: executing program 4 (id=311): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendmmsg$inet6(r0, &(0x7f00000081c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10) 38.29517643s ago: executing program 4 (id=312): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x408a, &(0x7f0000004200)="$eJzszzFKw3AUBvAvjW2jBIqgkyB2cpO4OXXyCt2lZ3ByUDE3cRLxAN7DOzjqAVyklNgWXQtFfr/hz3vfRwgvbJGny1/RZzdUP1GR5HX2sp/kZJy2aRblTtfvLr9uztPfq3qpk1wvonKwrKfPm7gCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYWsOVubfW3CVp325Ou72aP4P5MztKezvJRZ1Uh6PkoUx/clzkIBmf/fGPMnlPUiT5SDIdbe4cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/uVrbhsnj12pQd8P9N7tzbAMgEMMA0AghsQd7sAUTsQklS4aG7lN9fdclkmWP0efIfW7J+t9V1VYszW9PrnduMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CgAAP//1bsXWQ==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid_for_children\x00') 38.284790351s ago: executing program 33 (id=312): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x408a, &(0x7f0000004200)="$eJzszzFKw3AUBvAvjW2jBIqgkyB2cpO4OXXyCt2lZ3ByUDE3cRLxAN7DOzjqAVyklNgWXQtFfr/hz3vfRwgvbJGny1/RZzdUP1GR5HX2sp/kZJy2aRblTtfvLr9uztPfq3qpk1wvonKwrKfPm7gCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADYWsOVubfW3CVp325Ou72aP4P5MztKezvJRZ1Uh6PkoUx/clzkIBmf/fGPMnlPUiT5SDIdbe4cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA/uVrbhsnj12pQd8P9N7tzbAMgEMMA0AghsQd7sAUTsQklS4aG7lN9fdclkmWP0efIfW7J+t9V1VYszW9PrnduMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBAxkAAAAAYf7WebQfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+CgAAP//1bsXWQ==") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/pid_for_children\x00') 25.848344597s ago: executing program 6 (id=449): ioctl$XFS_IOC_FSINUMBERS(0xffffffffffffffff, 0xc0205867, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2200850, &(0x7f0000000280)={[{@journal_dev={'journal_dev', 0x3d, 0x7}}, {@debug}, {@nodioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@jqfmt_vfsv1}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x1800000}}]}, 0x5, 0x596, &(0x7f0000000400)="$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") chdir(&(0x7f0000000400)='./file0\x00') syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rmdir(&(0x7f0000000040)='./bus\x00') 25.75661508s ago: executing program 6 (id=451): sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[], 0x58}}, 0x2004c0c0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000380)='9', 0x1}], 0x1) r0 = syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r0, r0, 0xffffffffffffffff], 0x3) r1 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x14, 0x6400, 0x0, 0x3) 25.461798259s ago: executing program 6 (id=459): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 25.342077913s ago: executing program 6 (id=462): capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f00000012c0)='syz1\x00', 0x1ff) 25.292767374s ago: executing program 6 (id=463): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000037) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r1, 0x402, 0x8000001c) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 25.236982076s ago: executing program 6 (id=464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x8000}, &(0x7f0000000040)=0x8) 21.863691091s ago: executing program 3 (id=490): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000200)={'#! ', './file0'}, 0xb) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 21.000806608s ago: executing program 3 (id=496): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e90009118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000180)="240030511cb60012237aa4dd338ada44", 0x10}], 0x2) 20.849789162s ago: executing program 3 (id=499): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc2f00, 0x0, '\x00', 0x0, @fallback=0x32}, 0x94) r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="20000000000000008400000002000000948404"], 0x20}, 0x0) 20.790426264s ago: executing program 3 (id=501): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00') 20.698173087s ago: executing program 3 (id=503): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 20.445592425s ago: executing program 3 (id=507): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 20.434425995s ago: executing program 34 (id=507): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 10.164367934s ago: executing program 35 (id=464): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={r2, 0x8000}, &(0x7f0000000040)=0x8) 4.847772459s ago: executing program 2 (id=732): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 4.750363602s ago: executing program 2 (id=733): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000100)='./bus\x00', 0x141b42, 0xa) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x800000000000000) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) write$tun(r1, &(0x7f00000033c0)=ANY=[], 0x107c) 4.594519807s ago: executing program 2 (id=736): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/108, 0x6c}, {0x0}], 0x2, 0x9, 0x7) 3.736532494s ago: executing program 1 (id=753): r0 = socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000069c0), 0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0xf8c, 0x510, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x2720df49, 0x5}, 0x0, 0x80000000, 0xfffffffd, 0x3, 0xabca, 0x85, 0x3ff, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000006ac0)={0x0, 0x0, &(0x7f0000006a80)={&(0x7f0000006a00)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048010}, 0x48804) 1.539568542s ago: executing program 1 (id=757): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x1000006, @private0, 0x4005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 1.535354533s ago: executing program 2 (id=760): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$eJzs3c9vFFUcAPDv7LalpWALMSoepIkxkCgtLWCI8QBXYxr8ES9erLQgoUDT1mjRhJLgxcR4McbEkwfxv1AiV0960YMXT4aEqOFo4prZ7vTnbH8s7Q4wn0+y7My8ebw3LN++t6/vzQRQWgPpH5WIAxExlUT0JfOLaR3RSBxYOO/ePx+fTV9J1Gpv/JVE0jiWnZ803nsbmbsj4ucfk9hfXVvuzNzVi2OTkxPTjf2h2UtTQzNzV49cuDR2fuL8xOWRF0dOnjh+4uTw0Zau69raQ2l1Puj7dPTtb7/+Nxn+7vfRJE7FK40Tl1/HdhmIgfq/SbI2qffkdhdWkGrj/8nyjzjpKLBCbEn2+XVGxJPRF9VY+vD64pPXCq0csKNqSUQNKKlE/ENJZf2A7Lv96u/BlUJ6JUA73D29MACwNv47FsYGo7s+NrD7XhLLh3WSiGhtZG6lPRHx0+3RG+duj96Y3rsz43BAvvnrEfHUsvjvylKSevz3R3f01+O/siL+037BmcZ7evz1FstfPVQs/qF9FuK/O6f9X4r/aBL/7yyL/3dbLH9gafO9nhXx39PqJQEAAAAAAEBp3TodES/kzf+pLM7/iZz5P70RcWobyh9Ytb/29/+VO9tQDJDj7umIl3Pn/1aiujD7t7/a+D3/3vp8gM7k3IXJiaMR8VhEHI7OXen+8DplHPls/1fN0gYa8/+yV1p++r50RuVOx66VecbHZsfu97qBiLvXI57Onf+bLLb/SU77n/48mNpkGfufu3mmWdrG8Q/slNo3EYdy2/+lu1Yk69+fY6jeHxjKegVrPfPR5983K7/V+HeLCbh/afu/e/3470+W369nZutlHJvrqDVLa7X/35W8Wb/lTLZc4cOx2dnp4Yie5NVqenTF8ZGt1xkeRVk8ZPGSxv/hZ9cf/8vr//dExPyqvzv5e+Wa4swT//X+0aw++v9QnDT+x7fU/jfdSOYjcpNGbvb/0Kz8zbX/x+tt/eHGEeN/sODLLEy7Vh7PCdCOvKR21xcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgWViNgTSWVwcbtSGRyM6I2Ix2N3ZfLKzOzz5668f3k8Tas//7+SPem3b2E/yZ7/379sf2TV/rGI2BcRX1R76vuDZ69Mjhd98QAAAAAAAAAAAAAAAAAAAPCA6G2y/j/1Z7Xo2gE7rqPoCgCFyYn/X4qoB9B+2n8oL/EP5SX+obzEP5SX+IfyEv9QXuIfykv8AwAAAADAI2XfwVu/JREx/1JP/ZXqaqR1FlozYKdViq4AUBi3+IHyMvUHyst3fCDZIL27aaaNcjbLnJo6u3FmAAAAAAAAAAAAACBz6ID1/1BW1v9DeVn/D+WVrf8/WHA9gPZr+Tt+0zW9wMNovZX8zcN9E+v/AQAAAAAAAAAAAIBtMTN39eLY5OTEdPs2fm089Cv3nJ6IaHN9so23iii02I1arXat/lE8IPV5yDeyqfCbz9WdHwU7s5Gt9dtcroJ+IAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGv8HwAA//+xpBxA") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.473132864s ago: executing program 8 (id=761): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r2, 0x0, 0xf00000000000000}, 0x38) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 1.199714643s ago: executing program 7 (id=765): r0 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x4d) lseek(r2, 0x1, 0x1) 1.169902214s ago: executing program 7 (id=766): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@deltfilter={0xfbc, 0x2d, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x5, 0xffe0}, {0xa, 0x3}, {0x6, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xf8c, 0x2, [@TCA_CGROUP_ACT={0xf88, 0x1, [@m_connmark={0xb0, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x671, 0x7, 0x7, 0x3}, 0xe57}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xe, 0x7, 0x9, 0x5ff}, 0xe}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8, 0x3, 0xffffffffffffffff, 0x5, 0x5854}, 0xfffc}}]}, {0x29, 0x6, "8603f539b6a7af824d262bf654e2998b1ef3d2c0c3dcff5329f40e2a6613622a8e0c660697"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_connmark={0x6c, 0x14, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x1, 0x20000000, 0x40, 0x2}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x8001, 0x10001, 0x3, 0x4, 0x800}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_pedit={0xe68, 0x5, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x1c000000, 0x40, 0x4, 0x7, 0x3fe}, 0xb1, 0x3, [{0xf7b7, 0x5, 0x9, 0xd, 0xdd, 0x5}]}, [{0x3, 0x2, 0xffffffff, 0x3, 0xd8aa, 0x7}, {0x8, 0x6, 0x101, 0x6, 0x2, 0x3}, {0x200000, 0x100, 0x0, 0x5c6, 0x6830, 0x8}, {0x2, 0x311, 0x8, 0x4b, 0x82, 0x8}, {0x7, 0x5, 0x2, 0x212, 0x7, 0xe1}, {0x7, 0x5, 0x40008d, 0x1ff, 0x1ff, 0x1000}, {0x200, 0x7, 0xffffffff, 0x9, 0x9}, {0x7, 0xfe4, 0x1, 0x0, 0x624, 0xb513}, {0x8, 0x3, 0x7ff, 0x70, 0x6, 0x8000}, {0xfffffffe, 0x0, 0x3ff, 0xb06, 0x1, 0x6}, {0x5, 0x1, 0xdb, 0x6, 0x2, 0x4}, {0x9, 0x4, 0x519f, 0x5, 0x6, 0x31c4}, {0x7, 0x7, 0x3ff, 0x1, 0x8000, 0x5}, {0x7fffffff, 0x1, 0x5, 0xfe45, 0x5, 0xb}, {0xbd, 0x5f05, 0x8, 0xf, 0x1, 0xa}, {0x0, 0x8000, 0x3, 0x7, 0xd17, 0x7}, {0xae, 0x7, 0x2, 0x2, 0x9}, {0x6, 0x4, 0xa, 0x3, 0x1, 0x3}, {0x2, 0xa502, 0x3, 0xfffffff7, 0x81, 0x1}, {0x80, 0x8, 0x9, 0x0, 0x0, 0x7}, {0x9, 0x4, 0x1400000, 0x9, 0xad, 0x6}, {0xc, 0xffffff00, 0x5, 0x3, 0x3, 0x3}, {0x7, 0x32da135, 0xb, 0x8, 0xa93c, 0x6}, {0x3e, 0x5bce, 0x4, 0x7ff, 0x80000001, 0x32b}, {0xffffffff, 0x9, 0x100, 0x1, 0xfffffffb, 0x9}, {0x10001, 0x1, 0xe0cc, 0x8, 0x9, 0x2}, {0xf7, 0x5, 0x800, 0x8, 0x7f}, {0xdbeb, 0x8, 0x1, 0x1, 0x1, 0x80000}, {0x5, 0x0, 0xbaf9, 0x4, 0x28000000, 0x9}, {0x0, 0x8, 0x6, 0x9, 0x5, 0xfffffff4}, {0xadfe, 0x9, 0x1, 0x4, 0xfaf, 0x81}, {0x800, 0x5, 0x3, 0x5, 0x5, 0x1e4}, {0x5, 0x7, 0x8, 0x8, 0xad38, 0x8001}, {0xa, 0x4467, 0x9, 0x5, 0x401, 0x1}, {0x1ff, 0x400, 0x9, 0x80000001, 0x7ff, 0xb6}, {0x1000, 0xffff8001, 0x40, 0x2, 0x800, 0x3}, {0x9, 0xb, 0x5, 0x9, 0x4, 0x9}, {0x0, 0xe, 0x4, 0x4, 0x9, 0x6}, {0x5, 0x4, 0x6, 0xfffffffe, 0x4, 0xfff}, {0x5, 0x0, 0x1, 0x5a48, 0x6, 0xfffffff9}, {0xffffffff, 0x80000000, 0x6d, 0x0, 0x8, 0xe}, {0x9, 0xfffffffa, 0x5, 0x6, 0x8, 0x9}, {0x7fff, 0x3, 0x5, 0x3ff, 0x8, 0x7}, {0x10001, 0x7, 0x2, 0x7ff, 0x9, 0x6}, {0x3, 0x9de, 0x4, 0x11, 0x7, 0x9}, {0x3, 0x9, 0x8f, 0xffffdd1a, 0x10, 0x2}, {0x1, 0xa8a9, 0x1, 0x5, 0x7, 0x401}, {0x4, 0xffff, 0x1000, 0x1, 0x6, 0x1}, {0x2a, 0x0, 0x80000000, 0x0, 0xfc, 0x3}, {0xc55b, 0x5, 0xb, 0x8001, 0x4, 0x7}, {0x7, 0x6, 0x0, 0x1d, 0x42f, 0x7}, {0xfffffff8, 0x6, 0x3, 0x2, 0x7, 0x7}, {0x1, 0x2, 0x5, 0x30, 0xfe68, 0x800}, {0x80000000, 0x2, 0x1, 0x8, 0x0, 0xffffffff}, {0x3, 0x6021db75, 0x7fff, 0x1000, 0xc1, 0x1add65aa}, {0x2, 0x7, 0x4, 0x2, 0xe9, 0x986}, {0xba, 0x8, 0x6, 0x401, 0x4, 0x10}, {0x9, 0x7fffffff, 0xb70f, 0x40, 0x3, 0xfffffffe}, {0x4, 0x3, 0x4, 0xd, 0xb24, 0x6}, {0xbf, 0x3, 0xbf6, 0xfffeffff, 0x2, 0x3}, {0x3, 0x6, 0x4, 0x7c6, 0x80000001, 0x1}, {0x58e2, 0x1, 0x4, 0x7, 0x3ff, 0x4}, {0x6, 0xb4, 0xeb, 0x3, 0x6, 0xe}, {0xc, 0x1, 0x3, 0xf, 0x7, 0xdb10ee8a}, {0x3, 0xf, 0x81, 0x420d, 0xa, 0xad78}, {0x2, 0x4, 0xfffffffc, 0x401, 0x4, 0x2}, {0x4, 0x4, 0x3, 0xf908, 0x2, 0x400}, {0x800, 0x6, 0x2, 0x4, 0x8e20, 0x4}, {0x7ae4fc5e, 0x3, 0xf, 0xf87, 0x2, 0x1}, {0x2, 0x7, 0xed7e, 0x4, 0x5, 0xdc}, {0x4, 0x154, 0xfffffe00, 0x3ff80000, 0x2, 0xd}, {0x6, 0x5, 0x3, 0x3a84, 0x0, 0x1}, {0xeea1, 0x9, 0x55de2144, 0x9, 0x80, 0x7cf}, {0x2, 0x6, 0x8, 0x3, 0x0, 0x7fffffff}, {0x1000, 0x7f, 0x8000, 0xfffffffe, 0x8, 0xd1e}, {0x6, 0x2, 0x6c5, 0xd, 0x4, 0x8}, {0x1, 0x5, 0x10000, 0xc, 0x7ff, 0x5}, {0x4, 0x7, 0x264564e6, 0xea, 0x7fff, 0x1}, {0xa, 0x4, 0x2, 0x3, 0x0, 0x7}, {0x84000000, 0x9, 0x2, 0x8000, 0x5, 0x4}, {0x0, 0x2, 0xa483, 0x9, 0x2, 0x6}, {0x22, 0x2, 0x9, 0x1, 0x3, 0x4}, {0x3, 0x3, 0x7fff, 0x0, 0x46, 0x7fffffff}, {0x6, 0x8, 0xffffc000, 0x1ff, 0x8}, {0xe, 0x1, 0x0, 0x9, 0x9, 0x8}, {0x1000, 0x9, 0xffffffff, 0x100, 0x3ff}, {0x80, 0x1, 0x9, 0x6a59, 0x4, 0x3}, {0x8000, 0x0, 0x100, 0x1, 0x0, 0x4}, {0x0, 0xc01, 0xbe5e, 0x0, 0x81, 0xd0}, {0x6, 0xa, 0x146e, 0x43d, 0xe, 0xb08}, {0x7ff, 0x0, 0x4, 0x0, 0x7f, 0x1}, {0xfffffff6, 0x45, 0xe, 0xff, 0x7, 0x6}, {0x0, 0x4c, 0x8, 0xfffffffc, 0x2, 0xd42}, {0xff, 0xfffffffc, 0x2, 0x0, 0xb881, 0x6}, {0x3, 0x8, 0xffffffff, 0xfffffbff, 0x1, 0x96e}, {0x5, 0x6, 0x380000, 0x3, 0x7, 0x2}, {0x0, 0x81, 0x3, 0x1, 0x4, 0x4}, {0x0, 0x7, 0x8, 0x5, 0x3, 0x10}, {0x4, 0x6, 0x3, 0xf, 0xf, 0x9}, {0x7fffffff, 0x8000, 0x3ff, 0x88, 0x505, 0xe3e}, {0x9, 0x1, 0x7, 0xd1, 0x8, 0x1}, {0x4, 0x9da, 0x2, 0x7, 0x9d94bae, 0x101}, {0x6, 0x0, 0x7f, 0x13760, 0x10001, 0x9}, {0x3c, 0x0, 0x409, 0x3, 0xfffeffff}, {0x9, 0x7, 0x0, 0xf5, 0xffffffff, 0x7c94}, {0x5, 0x3, 0xfff, 0x5, 0x99, 0x4e}, {0x10, 0x3, 0x8, 0x4516, 0x1, 0xe89c}, {0x21b, 0x9, 0xa, 0x5, 0x7fff}, {0x7f, 0x0, 0x489, 0x1, 0x80000001, 0xe}, {0x5, 0xfffff1f4, 0x7, 0x5, 0x7, 0x9}, {0x4, 0x6, 0x3, 0x5, 0x6, 0x1}, {0xe3e, 0xfffffffd, 0x3, 0x5, 0x8000, 0x2}, {0x101, 0xa2, 0xff, 0xfffffff7, 0x10001, 0x80000000}, {0x14a9, 0x1ff, 0x3, 0x2, 0x7, 0x1}, {0xa82c, 0x570b, 0x9, 0x0, 0x1, 0x5}, {0x2, 0x3, 0x2, 0xffff0000, 0x8, 0x7}, {0x0, 0xd2, 0x1, 0x9, 0x10, 0xfffff000}, {0x5, 0x8, 0x1, 0x0, 0x4, 0x1c5b}, {0x2, 0xffff5a2f, 0x2, 0x5, 0x1, 0x200}, {0x193cfceb, 0x800, 0x3, 0xd, 0x4, 0x5}, {0x8, 0x1fffe, 0x2, 0x9, 0x0, 0xc38c}, {0x9, 0x0, 0x5, 0x4, 0xfffffffd, 0xe0000}, {0xffffffff, 0xec, 0x5, 0x4, 0xc1e8, 0xb64d}, {0x8000, 0x87, 0x7ce, 0x400, 0x0, 0x2d}, {0x9, 0x9, 0x2, 0x18f, 0x3ff, 0x3}, {0x2, 0x5, 0x2, 0xb, 0x7}, {0x81, 0x2, 0x4, 0x0, 0x3, 0x7}, {0x9f8, 0x2, 0x4, 0xe, 0x400, 0x6}], [{0x2}, {0x706c4c185c430530}, {0x1, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x7, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x1, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {}, {0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x3}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {}, {0x5}, {0x0, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2}, {}, {0x0, 0x1}, {0x3}, {0x1, 0x1}, {0x3}, {0x7, 0x1}, {0x2, 0x1}, {0x3, 0x2}, {0x4}, {0x5}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0xec1752f8e3477738, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2, 0x433dd36a35789fc3}, {}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xfbc}, 0x1, 0x0, 0x0, 0x4040000}, 0x8800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.062612077s ago: executing program 7 (id=768): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x92, 0xd, 0x200000, 0xffdffffc, 0x6, "0000100000f7ffffffffffffff00"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x9, 0x0, 0x0, 0x82, "00000057d269f800"}) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000001a40)=""/4096, 0x1000) 1.007612679s ago: executing program 1 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x5c, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x20, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x1c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x5, 0x4, 0x5}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 976.23247ms ago: executing program 5 (id=770): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x20000008}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r2) 901.228272ms ago: executing program 5 (id=771): syz_open_dev$evdev(0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xf6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 877.849873ms ago: executing program 1 (id=772): io_uring_setup(0x2a6d, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) listen(0xffffffffffffffff, 0x20) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 817.052125ms ago: executing program 1 (id=773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x3, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "75cafbe60543bf0e434d5a7fa9fe66191de4c574"}]}}}}}}}}, 0x0) 754.169267ms ago: executing program 1 (id=774): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) preadv(r0, &(0x7f0000000900)=[{&(0x7f0000000000)=""/108, 0x6c}, {0x0}], 0x2, 0x9, 0x7) 654.100469ms ago: executing program 2 (id=776): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x51e, &(0x7f0000001080)="$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") r0 = creat(&(0x7f0000000200)='./file1\x00', 0x1) getuid() capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 644.98816ms ago: executing program 5 (id=786): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b7}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 480.907995ms ago: executing program 2 (id=777): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0x2, 0x0, 0x3}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff0c10000007000000080009000200000008000b00009a"], 0x2c}}, 0x890) 470.591355ms ago: executing program 5 (id=778): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x80, @loopback, 0x4}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast2, 0x4}, 0x2f) syz_emit_ethernet(0x7e, &(0x7f0000000080)={@random="79ee7c2eea00", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 328.68411ms ago: executing program 8 (id=779): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @loopback}}}, @ip_retopts={{0x10}}], 0x30}}], 0x1, 0x0) 327.99483ms ago: executing program 5 (id=780): capset(&(0x7f0000000300)={0x20071026}, &(0x7f0000000340)) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 308.616291ms ago: executing program 8 (id=781): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000740)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r1}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 247.397373ms ago: executing program 5 (id=782): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@bloom_filter={0x1e, 0x0, 0x6a, 0x40000007, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x50) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000080)={0x84, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x6}]}, 0x10) 188.523104ms ago: executing program 8 (id=783): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={0x1, 0x0, &(0x7f00000003c0)=@buf="2040b60fded8", 0x3}, 0x20) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 188.215364ms ago: executing program 8 (id=784): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1, 0x2}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}, 0x8820) 187.950894ms ago: executing program 7 (id=785): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x2c, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xc2, 0x3, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x18, 0x1f, 0x4, "75cafbe60543bf0e434d5a7fa9fe66191de4c574"}]}}}}}}}}, 0x0) 187.170024ms ago: executing program 8 (id=787): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x50148, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000001480)=[{0x9, &(0x7f0000001440)=0x9, 0x2}], 0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 151.113305ms ago: executing program 7 (id=788): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$eJzs3c9rHFUcAPDvbJI2/aFNoRT1IIEerNRumsQfFYTWo2ixoPe6bKahZNMt2U1pYqHtwV68SBFELIh/gHePxX/Av6KghSIl6MFLZDazzTbJ5lc3TXQ+H5j2vZnZvHn75vv2Ozu7bACFNZz9U4p4NSK+SSKOdGzrj3zj8NJ+C09uVhcO3Kwmsbj42Z9JJPm69v5J/v+hvPJKRPz6VcSp0up2G3PzU5VaLZ3J6yPN6Wsjjbn501emK5PpZHp1bHz87DvjY++/927P+vrmxb+///TBR2e/PrHw3c+Pjt5L4nwczrd19uM53O6sDMdw/pwMxPkVO472oLG9JNntA2Bb+vI4H4hsDjgSfXnUA/9/tyJiESioRPxDQbXzgNa1fb7sbkbyYj3+cOkCaHX/+5feG4nB1rXRwYXkmSuj7Hp3qAftZ2388sf9e9kSG7wPcasH7QG03b4TEWf6+1fPf0k+/23fmdabx+tb2UbRXn9gNz3I8p+31sp/Sk/zn1gj/zm0Ruxux8bxX3rUg2a6yvK/D9bMf59OXUN9ee2lVs43kFy+UkvPRMTLEXEyBvZn9fXu55xdeLjYbVtn/pctWfvtXDA/jkf9+599zESlWXmePnd6fCfiteX8N4lV8/9gK9ddOf7Z83Fxk20cT++/3m3bxv3v1PsMePGniDfWHP/lO1rJ+vcnR1rnw0j7rFjtr7vHf+vW/tb633vZ+B9cv/9DSef92sbW2/hx8J+027btnv/7ks9b5X2xdP12o9JszoxG7Es+WV4f+fqx5ce26+39s/6fPLH+/LfW+X8gIr7YZP/vHrvbdde9MP4TWxr/rRcefvzlD93a39z4v90qnczXbGb+2+wBPs9zBwAAAAAAAHtNKSIOR1IqPy2XSuXy0uc7jsXBUq3eaJ66XJ+9OhGt78oOxUCpfaf7SMfnIUbzz8O262Mr6uMRcTQivu070KqXq/XaxG53HgAAAAAAAAAAAAAAAAAAAPaIQ12+/5/5vW+3jw7YcX7yG4prw/jvxS89AXuS138oLvEPxSX+objEPxSX+IfiEv9QXOIfikv8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQE9dvHAhWxYXntysZvWJ63OzU/XrpyfSxlR5erZartZnrpUn6/XJWlqu1qc3+nu1ev3a6FjM3hhppo3mSGNu/tJ0ffZq89KV6cpkeikdeCG9AgAAAAAAAAAAAAAAAAAAgP+Wxtz8VKVWS2cUuhbOxZ44jG0Xko1G+Vx+Mmyrif7d76DCDhQ2NX0M7ujkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC5fwMAAP//lvwy6w==") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000000)='./file1\x00', 0x85) sync() setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f0000000100), &(0x7f0000001400)=ANY=[], 0x835, 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') 0s ago: executing program 7 (id=789): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): 694514][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.721923][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.730620][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.738263][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.746847][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.754581][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.762897][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.770642][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.778938][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.808698][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.836027][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.844415][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.852403][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.861245][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.871472][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.882031][ T2018] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.889103][ T2018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.897190][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.906049][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.913814][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.922425][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.935323][ T2018] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.942493][ T2018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.982752][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.000017][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.016379][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.027166][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.053227][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.063596][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.077547][ T2018] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.084642][ T2018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.098056][ T2018] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.105173][ T2018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.114497][ T2018] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.121588][ T2018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.130682][ T2018] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.137765][ T2018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.173563][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.187653][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.207464][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.229414][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.236525][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.247324][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.258687][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.265838][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.274926][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.282088][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.296577][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.303669][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.315982][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.538138][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.550393][ T3299] veth0_vlan: entered promiscuous mode [ 33.562498][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.583905][ T3299] veth1_vlan: entered promiscuous mode [ 33.621564][ T3299] veth0_macvtap: entered promiscuous mode [ 33.635186][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.653052][ T3299] veth1_macvtap: entered promiscuous mode [ 33.689060][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.705915][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.721869][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.736828][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.746650][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.771173][ T3303] veth0_vlan: entered promiscuous mode [ 33.780467][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.792696][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.806379][ T3303] veth1_vlan: entered promiscuous mode [ 33.820832][ T3305] veth0_vlan: entered promiscuous mode [ 33.843648][ T3300] veth0_vlan: entered promiscuous mode [ 33.854767][ T3300] veth1_vlan: entered promiscuous mode [ 33.861447][ T3305] veth1_vlan: entered promiscuous mode [ 33.887298][ T3303] veth0_macvtap: entered promiscuous mode [ 33.902959][ T3300] veth0_macvtap: entered promiscuous mode [ 33.922387][ T3303] veth1_macvtap: entered promiscuous mode [ 33.924267][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.933734][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.950799][ T3300] veth1_macvtap: entered promiscuous mode [ 33.960240][ T3305] veth0_macvtap: entered promiscuous mode [ 33.967595][ T3305] veth1_macvtap: entered promiscuous mode [ 33.985271][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.998520][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.017491][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.032877][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.042058][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.053317][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.067112][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.076186][ T2205] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.088514][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.101419][ T2205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.110382][ T2205] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.119303][ T2205] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.129356][ T3506] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6'. [ 34.142174][ T2205] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.151001][ T2205] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.167848][ T2205] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.177971][ T2205] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.191927][ T2205] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.209720][ T3304] veth0_vlan: entered promiscuous mode [ 34.224235][ T3304] veth1_vlan: entered promiscuous mode [ 34.285386][ T3304] veth0_macvtap: entered promiscuous mode [ 34.316387][ T3304] veth1_macvtap: entered promiscuous mode [ 34.339489][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.366273][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.370099][ T3518] loop0: detected capacity change from 0 to 2048 [ 34.381688][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 34.381704][ T28] audit: type=1400 audit(1780710822.438:169): avc: denied { mounton } for pid=3521 comm="syz.2.9" path="/1/file1" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.417646][ T2205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.419104][ T28] audit: type=1400 audit(1780710822.468:170): avc: denied { open } for pid=3519 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.443361][ T2205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.467811][ T3518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.486201][ T2205] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.500532][ T28] audit: type=1400 audit(1780710822.468:171): avc: denied { perfmon } for pid=3519 comm="syz.1.8" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.503386][ T2205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.552734][ T28] audit: type=1400 audit(1780710822.468:172): avc: denied { kernel } for pid=3519 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.571995][ T28] audit: type=1400 audit(1780710822.498:173): avc: denied { prog_load } for pid=3519 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.590892][ T28] audit: type=1400 audit(1780710822.498:174): avc: denied { bpf } for pid=3519 comm="syz.1.8" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.611372][ T28] audit: type=1400 audit(1780710822.508:175): avc: denied { prog_run } for pid=3519 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.631231][ T28] audit: type=1400 audit(1780710822.518:176): avc: denied { map_create } for pid=3524 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.651027][ T28] audit: type=1400 audit(1780710822.518:177): avc: denied { map_read map_write } for pid=3524 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.671085][ T28] audit: type=1400 audit(1780710822.518:178): avc: denied { write } for pid=3524 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.691669][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.757834][ T3534] netlink: 52 bytes leftover after parsing attributes in process `syz.0.12'. [ 34.811366][ T3543] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 34.839786][ T3545] loop4: detected capacity change from 0 to 128 [ 34.866311][ T3545] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.887210][ T3545] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.017890][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.067114][ T3556] loop4: detected capacity change from 0 to 512 [ 35.141794][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.161038][ T3556] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.250253][ T3573] tipc: Started in network mode [ 35.275025][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.294935][ T3573] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 35.314795][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.324609][ T3573] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 35.339113][ T3573] tipc: Enabled bearer , priority 10 [ 35.345554][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.376343][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.403199][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.421791][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.432952][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.447715][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.457591][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.473296][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.482615][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.502901][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.513863][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.528037][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.537379][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.551879][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.561959][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.576166][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.587283][ T3304] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz-executor: corrupted xattr block 6: invalid header [ 35.601467][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.611047][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.621757][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.631252][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.640856][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.651056][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.661153][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.670751][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.680553][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 35.690015][ T3304] loop4: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 35.690160][ T3304] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 35.708978][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 35.713928][ T3592] process 'syz.0.33' launched './file0' with NULL argv: empty string added [ 35.718388][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 35.736355][ T3304] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 35.746146][ T3304] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 35.746954][ T3304] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 35.758553][ T3594] ======================================================= [ 35.758553][ T3594] WARNING: The mand mount option has been deprecated and [ 35.758553][ T3594] and is ignored by this kernel. Remove the mand [ 35.758553][ T3594] option from the mount to silence this warning. [ 35.758553][ T3594] ======================================================= [ 35.765649][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b8fec00: rx timeout, send abort [ 35.810923][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.130195][ T3303] syz-executor (3303) used greatest stack depth: 10832 bytes left [ 36.149851][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.205143][ T3617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'. [ 36.223576][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.239988][ T3617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.45'. [ 36.250395][ T3617] Zero length message leads to an empty skb [ 36.259109][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b8fea00: rx timeout, send abort [ 36.267433][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b8fec00: abort rx timeout. Force session deactivation [ 36.317361][ T3626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 36.344797][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.449273][ T23] tipc: Node number set to 1 [ 36.456885][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.767417][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b8fea00: abort rx timeout. Force session deactivation [ 36.827277][ T39] bridge_slave_1: left allmulticast mode [ 36.845642][ T39] bridge_slave_1: left promiscuous mode [ 36.858562][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.896783][ T39] bridge_slave_0: left allmulticast mode [ 36.913449][ T39] bridge_slave_0: left promiscuous mode [ 36.937548][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.155109][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.160867][ T3693] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3693 comm=syz.4.66 [ 37.191773][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.205264][ T39] bond0 (unregistering): Released all slaves [ 37.230554][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.299351][ T39] hsr_slave_0: left promiscuous mode [ 37.317810][ T39] hsr_slave_1: left promiscuous mode [ 37.336846][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.348063][ T3708] netlink: 248 bytes leftover after parsing attributes in process `syz.3.71'. [ 37.365729][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.386296][ T3708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 37.408478][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.427775][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.433996][ T3713] netlink: 232 bytes leftover after parsing attributes in process `syz.3.71'. [ 37.465595][ T39] veth1_vlan: left promiscuous mode [ 37.472303][ T39] veth0_vlan: left promiscuous mode [ 37.573673][ T39] team0 (unregistering): Port device team_slave_1 removed [ 37.590788][ T39] team0 (unregistering): Port device team_slave_0 removed [ 37.632736][ T900] IPVS: starting estimator thread 0... [ 37.664307][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.681202][ T3620] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.699820][ T3620] bridge_slave_0: entered allmulticast mode [ 37.718343][ T3620] bridge_slave_0: entered promiscuous mode [ 37.724773][ T3719] IPVS: using max 2544 ests per chain, 127200 per kthread [ 37.758578][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.777723][ T3620] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.803553][ T3620] bridge_slave_1: entered allmulticast mode [ 37.840053][ T3620] bridge_slave_1: entered promiscuous mode [ 37.896685][ T3620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.938137][ T3620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.016163][ T3620] team0: Port device team_slave_0 added [ 38.025853][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.044738][ T3620] team0: Port device team_slave_1 added [ 38.075127][ T3751] netlink: 'syz.4.79': attribute type 18 has an invalid length. [ 38.092135][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.099166][ T3751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.79'. [ 38.113535][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.140787][ T3620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.173330][ T3751] netlink: 'syz.4.79': attribute type 18 has an invalid length. [ 38.175594][ T3620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.193533][ T3620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.222880][ T3620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.234899][ T49] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.245370][ T49] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.288138][ T49] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.302171][ T49] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.447769][ T3620] hsr_slave_0: entered promiscuous mode [ 38.465497][ T3620] hsr_slave_1: entered promiscuous mode [ 38.485298][ T3620] debugfs: 'hsr0' already exists in 'hsr' [ 38.508771][ T3620] Cannot create hsr debugfs directory [ 38.537814][ T3770] loop4: detected capacity change from 0 to 512 [ 38.565480][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 38.573381][ T3791] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3791 comm=syz.2.88 [ 38.606466][ T3770] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 38.641655][ T3770] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.86: bad orphan inode 15 [ 38.659481][ T3770] loop4: lost filesystem error report for type 5 error -117 [ 38.659923][ T3770] ext4_test_bit(bit=14, block=18) = 1 [ 38.672874][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 38.672906][ C1] EXT4-fs (loop4): initial error at time 1780710826: ext4_orphan_get:1423 [ 38.672990][ C1] EXT4-fs (loop4): last error at time 1780710826: ext4_orphan_get:1423 [ 38.723499][ T3797] veth1_to_bond: entered allmulticast mode [ 38.741633][ T3797] veth1_to_bond: left allmulticast mode [ 38.754058][ T3770] is_bad_inode(inode)=0 [ 38.774133][ T3770] NEXT_ORPHAN(inode)=1023 [ 38.778941][ T3620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.785776][ T3770] max_ino=32 [ 38.785804][ T3770] i_nlink=0 [ 38.793720][ T3770] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.86: bg 0: block 161: padding at end of block bitmap is not set [ 38.812000][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 38.820991][ T3620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.831821][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 38.837235][ T3770] loop4: lost filesystem error report for type 5 error -117 [ 38.842688][ T3770] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 38.852367][ T3620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.890652][ T3770] loop4: lost filesystem error report for type 5 error -117 [ 38.893093][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 38.893191][ T3770] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.911329][ T3620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.942692][ T3620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.950363][ T3770] ext2 filesystem being mounted at /21/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 39.063449][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.076679][ T3620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.088654][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.122314][ T3620] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.148954][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.156094][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.184319][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.191454][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.245372][ T3620] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.396280][ T28] kauditd_printk_skb: 109 callbacks suppressed [ 39.396298][ T28] audit: type=1400 audit(1780710827.448:288): avc: denied { mounton } for pid=3849 comm="syz.4.101" path="/proc/60/task" dev="proc" ino=6518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 39.511435][ T3861] loop4: detected capacity change from 0 to 512 [ 39.557547][ T28] audit: type=1400 audit(1780710827.608:289): avc: denied { mount } for pid=3859 comm="syz.4.103" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.562841][ T3620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.630496][ T28] audit: type=1400 audit(1780710827.678:290): avc: denied { perfmon } for pid=3865 comm="syz.2.105" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.701331][ T28] audit: type=1400 audit(1780710827.678:291): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.702290][ T3866] syz.2.105 (3866) used greatest stack depth: 10776 bytes left [ 39.773685][ T28] audit: type=1400 audit(1780710827.708:292): avc: denied { bind } for pid=3865 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.832462][ T28] audit: type=1400 audit(1780710827.708:293): avc: denied { name_bind } for pid=3865 comm="syz.2.105" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 39.876189][ T3880] Illegal XDP return value 67268641 on prog (id 13) dev N/A, expect packet loss! [ 39.901399][ T28] audit: type=1400 audit(1780710827.708:294): avc: denied { node_bind } for pid=3865 comm="syz.2.105" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 39.956781][ T28] audit: type=1400 audit(1780710827.908:295): avc: denied { bpf } for pid=3879 comm="syz.1.107" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.987342][ T28] audit: type=1400 audit(1780710828.038:296): avc: denied { connect } for pid=3889 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.995420][ T3620] veth0_vlan: entered promiscuous mode [ 40.027832][ T3620] veth1_vlan: entered promiscuous mode [ 40.042734][ T3892] loop1: detected capacity change from 0 to 512 [ 40.043684][ T3620] veth0_macvtap: entered promiscuous mode [ 40.055137][ T3884] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 40.070947][ T3620] veth1_macvtap: entered promiscuous mode [ 40.074233][ T3884] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 40.076787][ T3892] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.109994][ T3892] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.133971][ T3892] EXT4-fs (loop1): 1 truncate cleaned up [ 40.135306][ T3620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.148673][ T3620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.155587][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.171497][ T28] audit: type=1400 audit(1780710828.228:297): avc: denied { read } for pid=3893 comm="syz.3.114" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.179102][ T900] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.196824][ T2205] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.210965][ T2205] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.230981][ T2205] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.253428][ T2205] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.274853][ T900] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.286583][ T3897] loop2: detected capacity change from 0 to 4096 [ 40.308713][ T3897] EXT4-fs: test_dummy_encryption option not supported [ 40.416386][ T3910] netlink: 'syz.3.118': attribute type 2 has an invalid length. [ 40.563370][ T3916] syz.2.121 uses obsolete (PF_INET,SOCK_PACKET) [ 40.584799][ T3920] __nla_validate_parse: 1 callbacks suppressed [ 40.584815][ T3920] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.122'. [ 40.710479][ T3933] netlink: 'syz.2.127': attribute type 39 has an invalid length. [ 41.038829][ T3944] loop5: detected capacity change from 0 to 1024 [ 41.065347][ T3944] EXT4-fs: Ignoring removed orlov option [ 41.120498][ T3944] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.204236][ T3955] loop3: detected capacity change from 0 to 4096 [ 41.208631][ T3892] syz.1.112 (3892) used greatest stack depth: 10688 bytes left [ 41.228426][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.255552][ T3955] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.374498][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.493879][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.590502][ T3987] netlink: 'syz.3.146': attribute type 9 has an invalid length. [ 41.692163][ T3991] loop4: detected capacity change from 0 to 512 [ 41.713509][ T3991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.750899][ T3995] loop2: detected capacity change from 0 to 1024 [ 41.757410][ T3991] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.807078][ T3995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.807278][ T3991] syz.4.150 (3991) used greatest stack depth: 10472 bytes left [ 41.852554][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.890174][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.103554][ T4020] loop4: detected capacity change from 0 to 512 [ 42.169548][ T4020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.182722][ T4020] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.259896][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.289174][ T4026] loop1: detected capacity change from 0 to 4096 [ 42.308806][ T4026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.514597][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.564689][ T4048] Invalid argument reading file caps for ./file0 [ 42.613441][ T4053] loop5: detected capacity change from 0 to 512 [ 42.646223][ T4053] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.173: bg 0: block 127: padding at end of block bitmap is not set [ 42.672568][ T4053] loop5: lost filesystem error report for type 5 error -117 [ 42.673310][ T4053] ------------[ cut here ]------------ [ 42.680665][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 42.680700][ C1] EXT4-fs (loop5): initial error at time 1780711086: ext4_validate_block_bitmap:441 [ 42.680726][ C1] EXT4-fs (loop5): last error at time 1780711086: ext4_validate_block_bitmap:441 [ 42.711552][ T4053] EA inode 11 i_nlink=0 [ 42.711569][ T4053] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x313/0x350, CPU#1: syz.5.173/4053 [ 42.726540][ T4053] Modules linked in: [ 42.730490][ T4053] CPU: 1 UID: 0 PID: 4053 Comm: syz.5.173 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.739782][ T4053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 42.749931][ T4053] RIP: 0010:ext4_xattr_inode_update_ref+0x332/0x350 [ 42.756609][ T4053] Code: b4 52 98 ff 4c 8d 2d 8d 5e 5c 05 49 8d 7e 40 e8 74 15 b6 ff 49 8b 6e 40 4c 89 e7 e8 a8 10 b6 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 02 ff ff ff e8 cf 95 d8 03 66 66 66 66 66 66 2e [ 42.776378][ T4053] RSP: 0018:ffffc900012db778 EFLAGS: 00010246 [ 42.782545][ T4053] RAX: ffff8881043bcf00 RBX: ffff8881005acdd8 RCX: ffffffff81c0e178 [ 42.790616][ T4053] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3ff0 [ 42.798621][ T4053] RBP: 000000000000000b R08: 00018881005acd8b R09: 0000000000000000 [ 42.806685][ T4053] R10: ffffc900012db6a8 R11: 0001c900012db6a8 R12: ffff8881005acd88 [ 42.814789][ T4053] R13: ffffffff871d3ff0 R14: ffff8881005acd40 R15: 0000000000000001 [ 42.822855][ T4053] FS: 00007f9c339f76c0(0000) GS:ffff8882ae9f6000(0000) knlGS:0000000000000000 [ 42.831887][ T4053] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.838496][ T4053] CR2: 00007f6045d88060 CR3: 000000011ba66000 CR4: 00000000003506f0 [ 42.846551][ T4053] DR0: 0000000000007ffb DR1: 0000000000000000 DR2: 0000000000000000 [ 42.854594][ T4053] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 42.862612][ T4053] Call Trace: [ 42.865942][ T4053] [ 42.868969][ T4053] ext4_xattr_inode_dec_ref_all+0x57c/0x8b0 [ 42.875035][ T4053] ? errseq_check+0x2c/0x50 [ 42.879587][ T4053] ext4_xattr_delete_inode+0x6c1/0x7a0 [ 42.885087][ T4053] ext4_evict_inode+0xb16/0xe30 [ 42.890109][ T4053] ? __pfx_ext4_evict_inode+0x10/0x10 [ 42.895506][ T4053] evict+0x2af/0x510 [ 42.899545][ T4053] ? __dquot_initialize+0x146/0x7c0 [ 42.904783][ T4053] iput+0x41a/0x580 [ 42.908676][ T4053] ext4_process_orphan+0x1a9/0x1c0 [ 42.913855][ T4053] ext4_orphan_cleanup+0x69c/0x9f0 [ 42.918999][ T4053] ext4_fill_super+0x3408/0x37c0 [ 42.924053][ T4053] ? set_blocksize+0x14c/0x270 [ 42.928847][ T4053] ? setup_bdev_super+0x30e/0x370 [ 42.933970][ T4053] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.939305][ T4053] get_tree_bdev_flags+0x291/0x300 [ 42.944448][ T4053] ? __pfx_ext4_fill_super+0x10/0x10 [ 42.949873][ T4053] get_tree_bdev+0x1f/0x30 [ 42.954379][ T4053] ext4_get_tree+0x1c/0x30 [ 42.958829][ T4053] vfs_get_tree+0x57/0x1d0 [ 42.963379][ T4053] do_new_mount+0x288/0x8d0 [ 42.967933][ T4053] path_mount+0x4d0/0xbc0 [ 42.972401][ T4053] __se_sys_mount+0x28c/0x2e0 [ 42.977207][ T4053] __x64_sys_mount+0x67/0x80 [ 42.981895][ T4053] x64_sys_call+0x2d61/0x3020 [ 42.986694][ T4053] do_syscall_64+0x12c/0x3b0 [ 42.991498][ T4053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.997507][ T4053] RIP: 0033:0x7f9c34f9e0ca [ 43.001986][ T4053] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 43.021743][ T4053] RSP: 002b:00007f9c339f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.030213][ T4053] RAX: ffffffffffffffda RBX: 00007f9c339f6ee0 RCX: 00007f9c34f9e0ca [ 43.038229][ T4053] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007f9c339f6ea0 [ 43.046324][ T4053] RBP: 0000200000000180 R08: 00007f9c339f6ee0 R09: 0000000000000000 [ 43.054346][ T4053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 43.062416][ T4053] R13: 00007f9c339f6ea0 R14: 000000000000047a R15: 00002000000001c0 [ 43.070444][ T4053] [ 43.073485][ T4053] ---[ end trace 0000000000000000 ]--- [ 43.079140][ T4053] EXT4-fs error (device loop5): ext4_free_inode:354: comm syz.5.173: bit already cleared for inode 11 [ 43.091187][ T4053] loop5: lost filesystem error report for type 5 error -117 [ 43.091425][ T4053] EXT4-fs (loop5): 1 orphan inode deleted [ 43.105372][ T4053] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.207047][ T4053] netlink: 8 bytes leftover after parsing attributes in process `syz.5.173'. [ 43.259222][ T4053] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 43.475813][ T4053] netlink: 96 bytes leftover after parsing attributes in process `syz.5.173'. [ 43.510671][ T4053] syz.5.173 (4053) used greatest stack depth: 10032 bytes left [ 43.523416][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.813554][ T4108] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.830685][ T4108] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.916338][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.059931][ T4125] netlink: 72 bytes leftover after parsing attributes in process `syz.4.199'. [ 44.074454][ T4125] netlink: 436 bytes leftover after parsing attributes in process `syz.4.199'. [ 44.086972][ T4125] netlink: 16 bytes leftover after parsing attributes in process `syz.4.199'. [ 44.686186][ T4132] syz.4.204 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 44.722498][ T4132] CPU: 1 UID: 0 PID: 4132 Comm: syz.4.204 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 44.722630][ T4132] Tainted: [W]=WARN [ 44.722637][ T4132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 44.722649][ T4132] Call Trace: [ 44.722680][ T4132] [ 44.722689][ T4132] __dump_stack+0x1d/0x30 [ 44.722717][ T4132] dump_stack_lvl+0x95/0xd0 [ 44.722741][ T4132] dump_stack+0x15/0x1b [ 44.722761][ T4132] dump_header+0x80/0x240 [ 44.722812][ T4132] oom_kill_process+0x295/0x350 [ 44.722852][ T4132] out_of_memory+0x97d/0xb80 [ 44.722954][ T4132] try_charge_memcg+0x62f/0xa10 [ 44.722985][ T4132] ? radix_tree_lookup+0xfa/0x140 [ 44.723014][ T4132] charge_memcg+0x6d/0x120 [ 44.723037][ T4132] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 44.723142][ T4132] __swap_cache_prepare_and_add+0x69/0x4a0 [ 44.723200][ T4132] ? alloc_pages_mpol+0x217/0x260 [ 44.723224][ T4132] swap_cache_alloc_folio+0xa2/0x120 [ 44.723254][ T4132] swap_cluster_readahead+0x25f/0x3c0 [ 44.723304][ T4132] swapin_readahead+0xde/0x840 [ 44.723326][ T4132] ? _raw_spin_unlock+0x9/0x30 [ 44.723347][ T4132] ? swap_put_entries_cluster+0x46c/0x490 [ 44.723472][ T4132] ? __rcu_read_unlock+0x4e/0x70 [ 44.723515][ T4132] ? swap_cache_get_folio+0x1e0/0x1f0 [ 44.723538][ T4132] do_swap_page+0x31e/0x2180 [ 44.723618][ T4132] ? __css_rstat_updated+0xbb/0x280 [ 44.723641][ T4132] ? __rcu_read_lock+0x36/0x50 [ 44.723664][ T4132] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 44.723690][ T4132] handle_mm_fault+0xb30/0x2e70 [ 44.723715][ T4132] ? vma_start_read+0x1c7/0x2c0 [ 44.723792][ T4132] do_user_addr_fault+0x62f/0x1050 [ 44.723824][ T4132] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 44.723861][ T4132] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 44.723941][ T4132] ? trace_page_fault_user+0x1f/0xa0 [ 44.723968][ T4132] exc_page_fault+0x62/0xa0 [ 44.723994][ T4132] asm_exc_page_fault+0x26/0x30 [ 44.724085][ T4132] RIP: 0033:0x7fc8d866d976 [ 44.724102][ T4132] Code: 00 00 00 00 48 85 ff 74 0b e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 8d 07 48 69 c0 83 de 1b [ 44.724122][ T4132] RSP: 002b:00007fff5fc01440 EFLAGS: 00010246 [ 44.724142][ T4132] RAX: 000000000000ae40 RBX: 00007fc8d88e5fa0 RCX: 000000000000abe0 [ 44.724158][ T4132] RDX: 0000000000000260 RSI: 0000000000000000 RDI: 00000000000003e8 [ 44.724174][ T4132] RBP: 00007fc8d88e7da0 R08: 00000000244905d5 R09: 3fffffffffffffff [ 44.724190][ T4132] R10: 4000000000000000 R11: 0000000000000246 R12: 000000000000afc6 [ 44.724280][ T4132] R13: 00007fc8d88e5fac R14: 000000000000acba R15: 00007fff5fc01570 [ 44.724368][ T4132] [ 44.790397][ T4132] memory: usage 179024kB, limit 307200kB, failcnt 484 [ 44.813497][ T4144] netlink: 4 bytes leftover after parsing attributes in process `syz.2.209'. [ 44.825052][ T4132] memory+swap: usage 177632kB, limit 9007199254740988kB, failcnt 0 [ 45.016023][ T4132] kmem: usage 177192kB, limit 9007199254740988kB, failcnt 0 [ 45.029656][ T4132] Memory cgroup stats for /syz4: [ 45.029933][ T4132] cache 4096 [ 45.051077][ T4132] rss 28672 [ 45.054244][ T4132] shmem 0 [ 45.057207][ T4132] mapped_file 4096 [ 45.062979][ T28] kauditd_printk_skb: 91 callbacks suppressed [ 45.063045][ T28] audit: type=1400 audit(1780711089.113:389): avc: denied { firmware_load } for pid=4145 comm="syz.1.210" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 45.070701][ T4132] dirty 0 [ 45.132312][ T4132] writeback 8192 [ 45.155877][ T4132] workingset_refault_anon 26 [ 45.164453][ T4132] workingset_refault_file 59 [ 45.181333][ T4132] swap 135168 [ 45.190083][ T4132] swapcached 307200 [ 45.198356][ T28] audit: type=1400 audit(1780711089.243:390): avc: denied { setopt } for pid=4153 comm="syz.5.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.201029][ T4132] pgpgin 5058 [ 45.243452][ T4132] pgpgout 5041 [ 45.246911][ T4132] pgfault 8206 [ 45.249988][ T28] audit: type=1400 audit(1780711089.273:391): avc: denied { connect } for pid=4153 comm="syz.5.214" lport=136 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 45.256500][ T4132] pgmajfault 14 [ 45.300927][ T4132] inactive_anon 12288 [ 45.310759][ T4132] active_anon 53248 [ 45.319852][ T4132] inactive_file 0 [ 45.321070][ T28] audit: type=1400 audit(1780711089.353:392): avc: denied { read } for pid=4155 comm="syz.2.215" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.331367][ T4132] active_file 4096 [ 45.371001][ T4132] unevictable 0 [ 45.374639][ T4132] hierarchical_memory_limit 314572800 [ 45.380389][ T4132] hierarchical_memsw_limit 9223372036854771712 [ 45.386721][ T4132] total_cache 4096 [ 45.389383][ T28] audit: type=1400 audit(1780711089.353:393): avc: denied { open } for pid=4155 comm="syz.2.215" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.395732][ T4132] total_rss 28672 [ 45.418100][ T4132] total_shmem 0 [ 45.424452][ T4167] set_capacity_and_notify: 1 callbacks suppressed [ 45.424512][ T4167] loop5: detected capacity change from 0 to 256 [ 45.436845][ T28] audit: type=1400 audit(1780711089.363:394): avc: denied { ioctl } for pid=4155 comm="syz.2.215" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.437698][ T4132] total_mapped_file 4096 [ 45.470324][ T4132] total_dirty 0 [ 45.478440][ T4132] total_writeback 8192 [ 45.483045][ T4146] syz.1.210 (4146) used greatest stack depth: 9912 bytes left [ 45.485773][ T4167] FAT-fs (loop5): IO charset iso8859-4 not found [ 45.504458][ T4132] total_workingset_refault_anon 26 [ 45.510609][ T4132] total_workingset_refault_file 59 [ 45.518776][ T4132] total_swap 135168 [ 45.526053][ T4132] total_swapcached 307200 [ 45.543923][ T4132] total_pgpgin 5058 [ 45.554871][ T4132] total_pgpgout 5041 [ 45.566502][ T4132] total_pgfault 8206 [ 45.577804][ T4132] total_pgmajfault 14 [ 45.589385][ T4132] total_inactive_anon 12288 [ 45.598086][ T4132] total_active_anon 53248 [ 45.608348][ T4132] total_inactive_file 0 [ 45.608373][ T4164] netlink: 28 bytes leftover after parsing attributes in process `syz.5.219'. [ 45.619335][ T4132] total_active_file 4096 [ 45.625846][ T4132] total_unevictable 0 [ 45.644462][ T4132] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.204,pid=4132,uid=0 [ 45.679135][ T4132] Memory cgroup out of memory: Killed process 4132 (syz.4.204) total-vm:96084kB, anon-rss:1252kB, file-rss:22280kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 45.679487][ T4133] syz.4.204 (4133) used greatest stack depth: 8832 bytes left [ 45.703939][ T4174] loop2: detected capacity change from 0 to 8192 [ 45.717578][ T4174] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.734746][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.746908][ T4174] FAT-fs (loop2): Filesystem has been set read-only [ 45.755611][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.764987][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.774044][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.786565][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.819009][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.853770][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.863930][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.873013][ T4174] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 45.949094][ T28] audit: type=1400 audit(1780711089.993:395): avc: denied { create } for pid=4195 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 45.988597][ T28] audit: type=1400 audit(1780711089.993:396): avc: denied { setopt } for pid=4195 comm="syz.3.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 46.046897][ T28] audit: type=1400 audit(1780711090.093:397): avc: denied { name_bind } for pid=4202 comm="syz.2.236" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 46.186280][ T28] audit: type=1400 audit(1780711090.233:398): avc: denied { getopt } for pid=4216 comm="syz.2.241" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.502332][ T4235] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.249'. [ 46.596303][ T4239] syzkaller0: entered promiscuous mode [ 46.605871][ T4239] syzkaller0: entered allmulticast mode [ 46.910643][ T4265] netlink: 'syz.4.261': attribute type 4 has an invalid length. [ 47.647148][ T4298] loop2: detected capacity change from 0 to 256 [ 47.672861][ T4298] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.008661][ T4299] loop1: detected capacity change from 0 to 8192 [ 48.016472][ T4299] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.241612][ T4312] loop5: detected capacity change from 0 to 512 [ 48.281887][ T4312] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.279: Failed to acquire dquot type 1 [ 48.300932][ T4312] loop5: lost filesystem error report for type 5 error -117 [ 48.301263][ T4312] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.279: Failed to acquire dquot type 1 [ 48.319856][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 48.319888][ C1] EXT4-fs (loop5): last error at time 1780711092: ext4_acquire_dquot:7034 [ 48.369326][ T4312] loop5: lost filesystem error report for type 5 error -117 [ 48.369771][ T4312] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.279: bg 0: block 248: padding at end of block bitmap is not set [ 48.452962][ T4312] loop5: lost filesystem error report for type 5 error -117 [ 48.453166][ T4312] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 48.508836][ T4312] loop5: lost filesystem error report for type 5 error -117 [ 48.509099][ T4312] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.279: Failed to acquire dquot type 1 [ 48.550882][ T4312] loop5: lost filesystem error report for type 5 error -117 [ 48.552489][ T4312] EXT4-fs (loop5): 1 orphan inode deleted [ 48.566243][ T4312] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.580567][ T4312] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.615871][ T4312] EXT4-fs error (device loop5): ext4_acquire_dquot:7034: comm syz.5.279: Failed to acquire dquot type 1 [ 48.739605][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.301554][ T4352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.296'. [ 49.341676][ T4354] loop5: detected capacity change from 0 to 1024 [ 49.360665][ T4354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.377543][ T4354] EXT4-fs (loop5): shut down requested (1) [ 49.457218][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.572147][ T4363] sock: sock_set_timeout: `syz.1.300' (pid 4363) tries to set negative timeout [ 50.116540][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.127636][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.192263][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.202736][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.252559][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.262984][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.322932][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 50.333600][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.444391][ T12] bridge_slave_1: left allmulticast mode [ 50.450326][ T12] bridge_slave_1: left promiscuous mode [ 50.456123][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.464102][ T12] bridge_slave_0: left allmulticast mode [ 50.469900][ T12] bridge_slave_0: left promiscuous mode [ 50.475735][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.572225][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.583947][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.601683][ T12] bond0 (unregistering): Released all slaves [ 50.622810][ T4414] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.630449][ T4414] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.638200][ T4414] bridge_slave_0: entered allmulticast mode [ 50.647754][ T4414] bridge_slave_0: entered promiscuous mode [ 50.683461][ T12] hsr_slave_0: left promiscuous mode [ 50.684447][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 50.684462][ T28] audit: type=1400 audit(1780711094.733:454): avc: denied { map } for pid=4432 comm="syz.5.315" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.719017][ T12] hsr_slave_1: left promiscuous mode [ 50.724796][ T28] audit: type=1400 audit(1780711094.733:455): avc: denied { read write } for pid=4432 comm="syz.5.315" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.750151][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.759499][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.769012][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.777518][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.792141][ T12] veth1_macvtap: left promiscuous mode [ 50.801103][ T12] veth0_macvtap: left promiscuous mode [ 50.806773][ T12] veth1_vlan: left promiscuous mode [ 50.812278][ T12] veth0_vlan: left promiscuous mode [ 50.893723][ T12] team0 (unregistering): Port device team_slave_1 removed [ 50.904521][ T12] team0 (unregistering): Port device team_slave_0 removed [ 50.940840][ T4414] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.948126][ T4414] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.962562][ T4414] bridge_slave_1: entered allmulticast mode [ 50.969124][ T4414] bridge_slave_1: entered promiscuous mode [ 50.987735][ T4414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.000003][ T4414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.020477][ T4414] team0: Port device team_slave_0 added [ 51.027151][ T4414] team0: Port device team_slave_1 added [ 51.043730][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.050752][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.076760][ T4414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.088036][ T4414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.095422][ T4414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 51.121626][ T4414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.149730][ T4414] hsr_slave_0: entered promiscuous mode [ 51.155881][ T4414] hsr_slave_1: entered promiscuous mode [ 51.161868][ T4414] debugfs: 'hsr0' already exists in 'hsr' [ 51.167623][ T4414] Cannot create hsr debugfs directory [ 51.501361][ T28] audit: type=1400 audit(1780711095.553:456): avc: denied { load_policy } for pid=4441 comm="syz.1.319" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.501670][ T4442] SELinux: failed to load policy [ 51.555828][ T900] IPVS: starting estimator thread 0... [ 51.651029][ T4445] IPVS: using max 2496 ests per chain, 124800 per kthread [ 51.665216][ T4453] loop1: detected capacity change from 0 to 512 [ 51.696092][ T4453] Quota error (device loop1): do_check_range: Getting dqdh_next_free 256 out of range 0-7 [ 51.706138][ T4453] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 51.716327][ T4453] EXT4-fs error (device loop1): ext4_acquire_dquot:7034: comm syz.1.324: Failed to acquire dquot type 1 [ 51.727568][ T4453] loop1: lost filesystem error report for type 5 error -117 [ 51.731348][ T4453] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.324: corrupted inode contents [ 51.750417][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 51.750459][ C0] EXT4-fs (loop1): initial error at time 1780711095: ext4_acquire_dquot:7034 [ 51.750486][ C0] EXT4-fs (loop1): last error at time 1780711095: ext4_acquire_dquot:7034 [ 51.774500][ T4453] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.775960][ T4453] EXT4-fs error (device loop1): ext4_dirty_inode:6587: inode #16: comm syz.1.324: mark_inode_dirty error [ 51.796398][ T4453] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.796656][ T4453] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.324: corrupted inode contents [ 51.817726][ T4453] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.818506][ T4453] EXT4-fs error (device loop1): __ext4_ext_dirty:207: inode #16: comm syz.1.324: mark_inode_dirty error [ 51.838976][ T4453] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.839475][ T4453] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.324: corrupted inode contents [ 51.860669][ T4453] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.860846][ T4453] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 51.878532][ T4453] loop1: lost filesystem error report for type 5 error -117 [ 51.878745][ T4453] EXT4-fs error (device loop1): ext4_do_update_inode:5690: inode #16: comm syz.1.324: corrupted inode contents [ 51.897886][ T4453] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.898072][ T4453] EXT4-fs error (device loop1): ext4_truncate:4690: inode #16: comm syz.1.324: mark_inode_dirty error [ 51.918329][ T4453] loop1: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 51.918759][ T4453] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 51.936880][ T4453] loop1: lost filesystem error report for type 5 error -117 [ 51.937463][ T4453] EXT4-fs (loop1): 1 truncate cleaned up [ 51.951083][ T4453] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.963758][ T4453] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.996169][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.154626][ T28] audit: type=1400 audit(1780711096.203:457): avc: denied { read } for pid=4468 comm="syz.1.330" lport=42016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.396648][ T4482] syzkaller1: entered promiscuous mode [ 52.402514][ T4482] syzkaller1: entered allmulticast mode [ 52.495693][ T28] audit: type=1400 audit(1780711096.543:458): avc: denied { mount } for pid=4483 comm="syz.5.337" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 52.535931][ T28] audit: type=1400 audit(1780711096.583:459): avc: denied { create } for pid=4487 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.575072][ T28] audit: type=1400 audit(1780711096.603:460): avc: denied { setopt } for pid=4487 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.608076][ T28] audit: type=1400 audit(1780711096.623:461): avc: denied { bind } for pid=4487 comm="syz.5.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.610920][ T4367] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 52.645980][ T4414] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.671756][ T4414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.689858][ T4414] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.704235][ T4414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.726688][ T4414] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.770165][ T4414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.784070][ T4414] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.805230][ T4414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.889184][ T4414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.916603][ T4414] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.945974][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.953096][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.966243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.973399][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.035407][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 53.234438][ T4414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.585615][ T4414] veth0_vlan: entered promiscuous mode [ 53.605696][ T4414] veth1_vlan: entered promiscuous mode [ 53.648774][ T4414] veth0_macvtap: entered promiscuous mode [ 53.671005][ T4414] veth1_macvtap: entered promiscuous mode [ 53.709358][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.740621][ T4414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.767122][ T39] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.797631][ T39] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.825820][ T39] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.840445][ T39] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.003100][ T4591] loop6: detected capacity change from 0 to 1024 [ 54.056279][ T4591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 54.106439][ T4591] System zones: 0-1, 3-36 [ 54.145201][ T4591] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.313: bad orphan inode 134217728 [ 54.170958][ T4591] loop6: lost filesystem error report for type 5 error -117 [ 54.173060][ T4591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.414092][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 54.875200][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 54.913656][ T4634] loop2: detected capacity change from 0 to 8192 [ 54.952669][ T4634] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.164466][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 55.536533][ T4414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.795008][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 55.795027][ T28] audit: type=1326 audit(1780711099.843:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4666 comm="syz.3.357" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4546e0ce59 code=0x0 [ 55.876044][ T28] audit: type=1400 audit(1780711099.903:481): avc: denied { write } for pid=4670 comm="syz.6.359" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.922930][ T4674] netlink: 60 bytes leftover after parsing attributes in process `syz.6.360'. [ 55.941994][ T28] audit: type=1400 audit(1780711099.913:482): avc: denied { allowed } for pid=4670 comm="syz.6.359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.038168][ T28] audit: type=1400 audit(1780711100.083:483): avc: denied { connect } for pid=4677 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.096076][ T28] audit: type=1400 audit(1780711100.083:484): avc: denied { getopt } for pid=4677 comm="syz.2.361" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.232680][ T28] audit: type=1326 audit(1780711100.273:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.6.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30460fce59 code=0x7ffc0000 [ 56.314242][ T28] audit: type=1326 audit(1780711100.273:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.6.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30460fce59 code=0x7ffc0000 [ 56.365595][ T28] audit: type=1326 audit(1780711100.273:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.6.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30460fce59 code=0x7ffc0000 [ 56.424680][ T28] audit: type=1326 audit(1780711100.273:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.6.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f30460fce59 code=0x7ffc0000 [ 56.471396][ T28] audit: type=1326 audit(1780711100.313:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4673 comm="syz.6.360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30460fce59 code=0x7ffc0000 [ 56.497021][ T4674] netlink: 60 bytes leftover after parsing attributes in process `syz.6.360'. [ 57.126916][ T4701] loop6: detected capacity change from 0 to 8192 [ 57.134926][ T4701] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.279056][ T4719] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 57.299417][ T4719] SELinux: failed to load policy [ 57.351800][ T4718] loop3: detected capacity change from 0 to 8192 [ 57.435190][ T3415] IPVS: starting estimator thread 0... [ 57.539783][ T4724] IPVS: using max 2592 ests per chain, 129600 per kthread [ 57.706104][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.772851][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.791800][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.812906][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.832416][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.848034][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.860671][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.885647][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.914651][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 57.931854][ T4736] netlink: 'syz.3.381': attribute type 3 has an invalid length. [ 58.292217][ T4743] loop6: detected capacity change from 0 to 512 [ 58.337245][ T4743] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 58.369149][ T4743] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.383: bad orphan inode 15 [ 58.387430][ T4743] loop6: lost filesystem error report for type 5 error -117 [ 58.389255][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 58.403509][ C1] EXT4-fs (loop6): initial error at time 1780711102: ext4_orphan_get:1423 [ 58.412255][ C1] EXT4-fs (loop6): last error at time 1780711102: ext4_orphan_get:1423 [ 58.433066][ T4738] loop1: detected capacity change from 0 to 32768 [ 58.439901][ T4743] ext4_test_bit(bit=14, block=18) = 1 [ 58.445770][ T4743] is_bad_inode(inode)=0 [ 58.451082][ T4743] NEXT_ORPHAN(inode)=1023 [ 58.455838][ T4743] max_ino=32 [ 58.459979][ T4743] i_nlink=0 [ 58.464989][ T4743] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.383: bg 0: block 161: padding at end of block bitmap is not set [ 58.479988][ T4743] loop6: lost filesystem error report for type 5 error -117 [ 58.480734][ T4743] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 58.497740][ T4743] loop6: lost filesystem error report for type 5 error -117 [ 58.500579][ T4743] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.520841][ T4743] ext2 filesystem being mounted at /8/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 58.535873][ T4738] loop1: p1 p3 < > [ 58.578551][ T4414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.631064][ T4761] loop1: detected capacity change from 0 to 736 [ 58.694229][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 58.694236][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 59.289132][ T4783] loop2: detected capacity change from 0 to 512 [ 59.322815][ T4783] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 59.335910][ T4783] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.400: bad orphan inode 15 [ 59.346741][ T4783] loop2: lost filesystem error report for type 5 error -117 [ 59.347221][ T4783] ext4_test_bit(bit=14, block=18) = 1 [ 59.354658][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 59.354722][ C0] EXT4-fs (loop2): initial error at time 1780711103: ext4_orphan_get:1423 [ 59.354805][ C0] EXT4-fs (loop2): last error at time 1780711103: ext4_orphan_get:1423 [ 59.384677][ T4783] is_bad_inode(inode)=0 [ 59.388988][ T4783] NEXT_ORPHAN(inode)=1023 [ 59.393492][ T4783] max_ino=32 [ 59.396891][ T4783] i_nlink=0 [ 59.402081][ T4783] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.400: bg 0: block 161: padding at end of block bitmap is not set [ 59.416603][ T4783] loop2: lost filesystem error report for type 5 error -117 [ 59.417456][ T4783] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 59.436406][ T4783] loop2: lost filesystem error report for type 5 error -117 [ 59.442269][ T4783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.462577][ T4783] ext2 filesystem being mounted at /93/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 59.497815][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.072082][ T4813] loop6: detected capacity change from 0 to 128 [ 60.466617][ T4726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.690362][ T4844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.426'. [ 61.067569][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 61.067587][ T28] audit: type=1400 audit(1780711105.113:523): avc: denied { view } for pid=4862 comm="syz.1.433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 61.131440][ T4867] capability: warning: `syz.1.435' uses deprecated v2 capabilities in a way that may be insecure [ 61.211651][ T28] audit: type=1400 audit(1780711105.263:524): avc: denied { listen } for pid=4873 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.287589][ T28] audit: type=1400 audit(1780711105.333:525): avc: denied { read } for pid=4873 comm="syz.6.436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.487270][ T28] audit: type=1400 audit(1780711105.533:526): avc: denied { write } for pid=4876 comm="syz.3.438" laddr=fe80::13 lport=60 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.611869][ T4879] loop5: detected capacity change from 0 to 128 [ 61.638708][ T4879] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.651474][ T4879] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.689473][ T28] audit: type=1400 audit(1780711105.733:527): avc: denied { write } for pid=4878 comm="syz.5.439" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.712234][ T28] audit: type=1400 audit(1780711105.763:528): avc: denied { write } for pid=4878 comm="syz.5.439" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.734014][ T28] audit: type=1400 audit(1780711105.773:529): avc: denied { write } for pid=4878 comm="syz.5.439" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.756647][ T28] audit: type=1400 audit(1780711105.773:530): avc: denied { write } for pid=4878 comm="syz.5.439" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.778760][ T28] audit: type=1400 audit(1780711105.773:531): avc: denied { create } for pid=4878 comm="syz.5.439" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 61.829428][ T28] audit: type=1400 audit(1780711105.773:532): avc: denied { write } for pid=4878 comm="syz.5.439" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.874507][ T3620] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.949141][ T4891] loop3: detected capacity change from 0 to 256 [ 62.264967][ T4898] loop5: detected capacity change from 0 to 512 [ 62.290013][ T4898] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 62.333649][ T4898] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.446: bad orphan inode 15 [ 62.343865][ T4898] loop5: lost filesystem error report for type 5 error -117 [ 62.354701][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 62.368582][ C0] EXT4-fs (loop5): initial error at time 1780711106: ext4_orphan_get:1423 [ 62.369340][ T4898] ext4_test_bit(bit=14, block=18) = 1 [ 62.377383][ C0] EXT4-fs (loop5): last error at time 1780711106: ext4_orphan_get:1423 [ 62.395436][ T4898] is_bad_inode(inode)=0 [ 62.403537][ T4898] NEXT_ORPHAN(inode)=1023 [ 62.412677][ T4898] max_ino=32 [ 62.419120][ T4898] i_nlink=0 [ 62.426833][ T4898] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.446: bg 0: block 161: padding at end of block bitmap is not set [ 62.450357][ T4898] loop5: lost filesystem error report for type 5 error -117 [ 62.451008][ T4898] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 62.485420][ T4898] loop5: lost filesystem error report for type 5 error -117 [ 62.492064][ T4898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.533214][ T4898] ext2 filesystem being mounted at /66/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 62.579492][ T4902] loop6: detected capacity change from 0 to 1024 [ 62.586323][ T4902] EXT4-fs: Ignoring removed orlov option [ 62.610427][ T4902] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a002c018, mo2=0002] [ 62.618627][ T4902] System zones: 0-1, 3-12 [ 62.626911][ T4902] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.643878][ T4902] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2860: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 62.728624][ T4414] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 62.742679][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.834705][ T4910] loop6: detected capacity change from 0 to 4096 [ 62.852323][ T4914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.874088][ T4910] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.966189][ T4414] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.033552][ T4936] validate_nla: 201 callbacks suppressed [ 63.033571][ T4936] netlink: 'syz.2.460': attribute type 1 has an invalid length. [ 63.042073][ T4932] netlink: 4 bytes leftover after parsing attributes in process `syz.5.461'. [ 63.077549][ T4936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.090939][ T4939] capability: warning: `syz.6.462' uses 32-bit capabilities (legacy support in use) [ 63.126720][ T4932] team1: entered promiscuous mode [ 63.147771][ T4932] team1: entered allmulticast mode [ 63.163957][ T4932] 8021q: adding VLAN 0 to HW filter on device team1 [ 63.206337][ T4941] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 64.348242][ T4963] loop2: detected capacity change from 0 to 512 [ 64.360860][ T4963] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.405131][ T4963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.441670][ T4963] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.516744][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.607358][ T4978] loop1: detected capacity change from 0 to 2048 [ 64.713260][ T4978] loop1: p2 p3 p7 [ 66.111404][ T5014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.124359][ T5014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.400217][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 66.400233][ T28] audit: type=1400 audit(1780711110.453:584): avc: denied { write } for pid=5015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.482020][ T28] audit: type=1400 audit(1780711110.533:585): avc: denied { write } for pid=5026 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.713617][ T28] audit: type=1400 audit(1780711110.763:586): avc: denied { write } for pid=5029 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.796875][ T28] audit: type=1400 audit(1780711110.843:587): avc: denied { write } for pid=5045 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 66.923152][ T5051] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 66.942213][ T5051] vhci_hcd vhci_hcd.2: default hub control req: 4006 v000d i0000 l0 [ 67.151650][ T28] audit: type=1400 audit(1780711111.203:588): avc: denied { write } for pid=5052 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.228049][ T28] audit: type=1400 audit(1780711111.273:589): avc: denied { write } for pid=5063 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.443396][ T28] audit: type=1400 audit(1780711111.493:590): avc: denied { ioctl } for pid=5070 comm="syz.2.495" path="socket:[10459]" dev="sockfs" ino=10459 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 67.516399][ T28] audit: type=1400 audit(1780711111.563:591): avc: denied { mounton } for pid=5073 comm="syz.2.497" path="/115/bus" dev="tmpfs" ino=611 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.667098][ T28] audit: type=1400 audit(1780711111.713:592): avc: denied { mount } for pid=5081 comm="syz.3.501" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.741309][ T28] audit: type=1400 audit(1780711111.743:593): avc: denied { mounton } for pid=5081 comm="syz.3.501" path="/82/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 67.832366][ T5086] netlink: 'syz.2.504': attribute type 83 has an invalid length. [ 67.970170][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.042036][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.161449][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.234763][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.349709][ T12] bridge_slave_1: left allmulticast mode [ 68.360759][ T12] bridge_slave_1: left promiscuous mode [ 68.375541][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.400977][ T12] bridge_slave_0: left allmulticast mode [ 68.412595][ T12] bridge_slave_0: left promiscuous mode [ 68.428511][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.652439][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.663430][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.673993][ T12] bond0 (unregistering): Released all slaves [ 68.753114][ T12] hsr_slave_0: left promiscuous mode [ 68.775562][ T12] hsr_slave_1: left promiscuous mode [ 68.784486][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.800655][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.818434][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.838227][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.854593][ T12] veth1_macvtap: left promiscuous mode [ 68.869312][ T12] veth0_macvtap: left promiscuous mode [ 68.879497][ T12] veth1_vlan: left promiscuous mode [ 68.896298][ T12] veth0_vlan: left promiscuous mode [ 69.041003][ T5128] loop1: detected capacity change from 0 to 512 [ 69.064328][ T5128] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 69.075950][ T12] team0 (unregistering): Port device team_slave_1 removed [ 69.078304][ T5128] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.512: bad orphan inode 15 [ 69.094047][ T12] team0 (unregistering): Port device team_slave_0 removed [ 69.094249][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 69.102333][ T5128] ext4_test_bit(bit=14, block=18) = 1 [ 69.109879][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 69.109911][ C1] EXT4-fs (loop1): initial error at time 1780711113: ext4_orphan_get:1423 [ 69.109945][ C1] EXT4-fs (loop1): last error at time 1780711113: ext4_orphan_get:1423 [ 69.157928][ T5128] is_bad_inode(inode)=0 [ 69.169402][ T5128] NEXT_ORPHAN(inode)=1023 [ 69.175542][ T5128] max_ino=32 [ 69.180485][ T5128] i_nlink=0 [ 69.183589][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 69.191396][ T5128] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.512: bg 0: block 161: padding at end of block bitmap is not set [ 69.219492][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 69.223116][ T5098] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.238683][ T5128] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 69.263523][ T5098] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.270939][ T5128] loop1: lost filesystem error report for type 5 error -117 [ 69.271490][ T5098] bridge_slave_0: entered allmulticast mode [ 69.273606][ T5128] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.280448][ T5098] bridge_slave_0: entered promiscuous mode [ 69.303884][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.311202][ T5098] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.318437][ T5098] bridge_slave_1: entered allmulticast mode [ 69.319025][ T5128] ext2 filesystem being mounted at /106/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 69.325229][ T5098] bridge_slave_1: entered promiscuous mode [ 69.354924][ T5098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.365676][ T5098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.399162][ T5098] team0: Port device team_slave_0 added [ 69.416237][ T5098] team0: Port device team_slave_1 added [ 69.446700][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.453711][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.484922][ T5098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.499614][ T5098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.506673][ T5098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.540167][ T5098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.564946][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.603371][ T5098] hsr_slave_0: entered promiscuous mode [ 69.616746][ T3408] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.629553][ T3408] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 69.651974][ T5098] hsr_slave_1: entered promiscuous mode [ 69.670469][ T12] IPVS: stop unused estimator thread 0... [ 69.709724][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 69.878245][ T5098] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 69.904720][ T5098] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 69.923041][ T5098] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 69.944281][ T5098] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 69.968077][ T5098] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 69.989871][ T5098] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.018301][ T5098] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 70.042339][ T5098] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.052743][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 70.140685][ T5098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.180442][ T5098] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.210732][ T2018] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.217832][ T2018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.246743][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.253873][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.272251][ T5208] netlink: 56 bytes leftover after parsing attributes in process `syz.5.527'. [ 70.402009][ T5223] netlink: 'syz.2.531': attribute type 2 has an invalid length. [ 70.461728][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 70.561938][ T5242] loop2: detected capacity change from 0 to 128 [ 70.592972][ T5242] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.625001][ T5098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.632274][ T5242] ext4 filesystem being mounted at /133/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.699011][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.880497][ T5267] netlink: 204 bytes leftover after parsing attributes in process `syz.2.537'. [ 70.892957][ T5267] netlink: 232 bytes leftover after parsing attributes in process `syz.2.537'. [ 70.933261][ T5098] veth0_vlan: entered promiscuous mode [ 70.944692][ T5098] veth1_vlan: entered promiscuous mode [ 70.950851][ T5270] loop2: detected capacity change from 0 to 128 [ 70.975034][ T5270] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.975058][ T5098] veth0_macvtap: entered promiscuous mode [ 71.002542][ T5098] veth1_macvtap: entered promiscuous mode [ 71.010182][ T5270] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.031896][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.042329][ T5098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.056683][ T30] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.067076][ T30] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.077616][ T30] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.089266][ T30] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.183414][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.426179][ T5296] loop7: detected capacity change from 0 to 512 [ 71.445879][ T5296] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.468331][ T5296] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 71.542787][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 71.542805][ T28] audit: type=1400 audit(1780711115.593:614): avc: denied { ioctl } for pid=5300 comm="syz.2.549" path="socket:[10942]" dev="sockfs" ino=10942 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 71.595447][ T28] audit: type=1400 audit(1780711115.623:615): avc: denied { read } for pid=5300 comm="syz.2.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.016983][ T28] audit: type=1400 audit(1780711116.063:616): avc: denied { write } for pid=5310 comm="syz.5.553" path="socket:[10961]" dev="sockfs" ino=10961 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.161205][ T28] audit: type=1400 audit(1780711116.213:617): avc: denied { ioctl } for pid=5316 comm="syz.1.556" path="socket:[10966]" dev="sockfs" ino=10966 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.673991][ T5347] loop2: detected capacity change from 0 to 512 [ 72.701989][ T5347] EXT4-fs: Ignoring removed bh option [ 72.733316][ T5353] loop5: detected capacity change from 0 to 512 [ 72.743046][ T5347] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 72.760060][ T5353] EXT4-fs: quotafile must be on filesystem root [ 72.771462][ T28] audit: type=1400 audit(1780711116.823:618): avc: denied { getopt } for pid=5354 comm="syz.1.571" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.812688][ T5347] EXT4-fs (loop2): 1 truncate cleaned up [ 72.831296][ T5347] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.918510][ T28] audit: type=1400 audit(1780711116.963:619): avc: denied { write } for pid=5346 comm="syz.2.566" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.946734][ T28] audit: type=1400 audit(1780711116.963:620): avc: denied { map } for pid=5346 comm="syz.2.566" path="/146/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.971993][ T28] audit: type=1400 audit(1780711116.963:621): avc: denied { execute } for pid=5346 comm="syz.2.566" path="/146/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 72.976748][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.119491][ T5370] sctp: [Deprecated]: syz.1.577 (pid 5370) Use of int in max_burst socket option deprecated. [ 73.119491][ T5370] Use struct sctp_assoc_value instead [ 73.193201][ T5379] loop1: detected capacity change from 0 to 736 [ 73.238685][ T5384] loop7: detected capacity change from 0 to 128 [ 73.362986][ T5388] loop1: detected capacity change from 0 to 764 [ 73.464355][ T28] audit: type=1400 audit(1780711117.513:622): avc: denied { read } for pid=5392 comm="syz.7.586" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.712885][ T28] audit: type=1400 audit(1780711117.763:623): avc: denied { write } for pid=35 comm="kworker/1:1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11647 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.105642][ T5426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.602'. [ 74.115592][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.122922][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.152978][ T5426] netlink: 44 bytes leftover after parsing attributes in process `syz.1.602'. [ 74.521136][ T5439] loop5: detected capacity change from 0 to 512 [ 74.559407][ T5439] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 74.585331][ T5439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a856e01c, mo2=0102] [ 74.602320][ T5439] System zones: 1-12 [ 74.609484][ T5439] EXT4-fs (loop5): orphan cleanup on readonly fs [ 74.639507][ T5439] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.607: invalid indirect mapped block 2 (level 2) [ 74.679007][ T5439] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 74.679973][ T5439] EXT4-fs (loop5): 1 truncate cleaned up [ 74.694829][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 74.694847][ C0] EXT4-fs (loop5): initial error at time 1780711118: ext4_free_branches:1023: inode 11 [ 74.694883][ C0] EXT4-fs (loop5): last error at time 1780711118: ext4_free_branches:1023: inode 11 [ 74.735347][ T5439] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 74.790450][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 76.007398][ T5448] futex_wake_op: syz.2.611 tries to shift op by -1; fix this program [ 76.023612][ T5450] loop1: detected capacity change from 0 to 512 [ 76.039242][ T5450] EXT4-fs: Ignoring removed nobh option [ 76.059987][ T5450] EXT4-fs: Ignoring removed orlov option [ 76.091967][ T5450] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 1: comm syz.1.610: invalid block [ 76.125100][ T5460] loop2: detected capacity change from 0 to 512 [ 76.146979][ T5450] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 76.147176][ T5450] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.610: couldn't read orphan inode 11 (err -117) [ 76.156382][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 76.156401][ C1] EXT4-fs (loop1): initial error at time 1780711120: __ext4_iget:5481: inode 11: block 1 [ 76.156452][ C1] EXT4-fs (loop1): last error at time 1780711120: __ext4_iget:5481: inode 11: block 1 [ 76.176526][ T5452] loop7: detected capacity change from 0 to 512 [ 76.200694][ T5460] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 76.211312][ T5463] netlink: 'syz.5.615': attribute type 13 has an invalid length. [ 76.214042][ T5450] loop1: lost filesystem error report for type 5 error -117 [ 76.251037][ T5452] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 76.273762][ T5460] EXT4-fs (loop2): 1 orphan inode deleted [ 76.278821][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.282466][ T5460] EXT4-fs (loop2): 1 truncate cleaned up [ 76.313618][ T5460] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.320771][ T5450] EXT4-fs error (device loop1): htree_dirblock_to_tree:1051: inode #2: comm syz.1.610: Directory hole found for htree leaf block 0 [ 76.346373][ T5460] EXT4-fs (loop2): shut down requested (1) [ 76.353494][ T5460] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 76.362416][ T5460] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 76.365756][ T5452] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.609: bad orphan inode 15 [ 76.371733][ T5460] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 76.410598][ T5452] loop7: lost filesystem error report for type 5 error -117 [ 76.412448][ T5452] ext4_test_bit(bit=14, block=18) = 1 [ 76.420034][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 76.420068][ C0] EXT4-fs (loop7): initial error at time 1780711120: ext4_orphan_get:1423 [ 76.420150][ C0] EXT4-fs (loop7): last error at time 1780711120: ext4_orphan_get:1423 [ 76.465530][ T5452] is_bad_inode(inode)=0 [ 76.472917][ T5452] NEXT_ORPHAN(inode)=1023 [ 76.477524][ T5452] max_ino=32 [ 76.478227][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.481202][ T5452] i_nlink=0 [ 76.491431][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.503865][ T5452] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.609: bg 0: block 161: padding at end of block bitmap is not set [ 76.519412][ T5452] loop7: lost filesystem error report for type 5 error -117 [ 76.564410][ T5452] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 76.609371][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 76.609389][ T28] audit: type=1400 audit(1780711120.663:640): avc: denied { read } for pid=5471 comm="syz.2.618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.636831][ T5452] loop7: lost filesystem error report for type 5 error -117 [ 76.647527][ T5452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.692366][ T5452] ext2 filesystem being mounted at /16/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 76.780149][ T28] audit: type=1400 audit(1780711120.833:641): avc: denied { create } for pid=5478 comm="syz.5.622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.783714][ T5480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.622'. [ 76.881467][ T5098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.944084][ T28] audit: type=1326 audit(1780711120.993:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 76.991516][ T28] audit: type=1326 audit(1780711120.993:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 77.017382][ T28] audit: type=1326 audit(1780711120.993:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 77.044665][ T28] audit: type=1326 audit(1780711120.993:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 77.117237][ T28] audit: type=1326 audit(1780711120.993:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 77.169991][ T28] audit: type=1326 audit(1780711120.993:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 77.209533][ T28] audit: type=1326 audit(1780711120.993:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 77.211665][ T5500] loop5: detected capacity change from 0 to 512 [ 77.235587][ T28] audit: type=1326 audit(1780711120.993:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5486 comm="syz.1.626" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6044fdce59 code=0x7ffc0000 [ 77.303852][ T5500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.317753][ T5500] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.392313][ T5504] loop1: detected capacity change from 0 to 4096 [ 77.448132][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.475019][ T5504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.602345][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.759910][ T30] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.889601][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 77.898555][ T5536] netlink: 'syz.2.646': attribute type 26 has an invalid length. [ 77.908358][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 77.917517][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 77.926738][ T5536] netlink: 'syz.2.646': attribute type 26 has an invalid length. [ 77.934989][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'. [ 78.094816][ T5549] xt_hashlimit: size too large, truncated to 1048576 [ 78.187349][ T5552] loop7: detected capacity change from 0 to 8192 [ 78.433020][ T5579] loop7: detected capacity change from 0 to 512 [ 78.448193][ T5579] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 78.470318][ T5579] EXT4-fs (loop7): 1 truncate cleaned up [ 78.482578][ T5579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.503032][ T30] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.585557][ T30] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.642387][ T30] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.642788][ T5098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.709684][ T30] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.736786][ T5561] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.744036][ T5561] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.751472][ T5561] bridge_slave_0: entered allmulticast mode [ 78.758068][ T5561] bridge_slave_0: entered promiscuous mode [ 78.764968][ T5561] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.772232][ T5561] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.779585][ T5561] bridge_slave_1: entered allmulticast mode [ 78.786449][ T5561] bridge_slave_1: entered promiscuous mode [ 78.819094][ T5603] netlink: 'syz.5.667': attribute type 1 has an invalid length. [ 78.832722][ T5561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.856613][ T5605] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 78.880704][ T5561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.940682][ T5561] team0: Port device team_slave_0 added [ 78.964226][ T5561] team0: Port device team_slave_1 added [ 79.026850][ T30] bridge_slave_1: left allmulticast mode [ 79.032663][ T30] bridge_slave_1: left promiscuous mode [ 79.038420][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.046613][ T30] bridge_slave_0: left allmulticast mode [ 79.052474][ T30] bridge_slave_0: left promiscuous mode [ 79.058236][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.148427][ T5626] loop5: detected capacity change from 0 to 512 [ 79.155747][ T5626] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 79.167517][ T5626] EXT4-fs (loop5): 1 truncate cleaned up [ 79.174233][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.175786][ T5626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.213942][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.231747][ T30] bond0 (unregistering): Released all slaves [ 79.248915][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.256144][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.282500][ T5561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.297412][ T5615] veth0_to_team: entered promiscuous mode [ 79.306832][ T5615] veth0_to_team: left promiscuous mode [ 79.320683][ T5561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.327750][ T5561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.329090][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.353695][ T5561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.397918][ T30] hsr_slave_0: left promiscuous mode [ 79.403884][ T30] hsr_slave_1: left promiscuous mode [ 79.409752][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.423003][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.430989][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.438415][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.450373][ T30] veth1_macvtap: left promiscuous mode [ 79.456403][ T30] veth0_macvtap: left promiscuous mode [ 79.462322][ T30] veth1_vlan: left promiscuous mode [ 79.471440][ T30] veth0_vlan: left promiscuous mode [ 79.598718][ T30] team0 (unregistering): Port device team_slave_1 removed [ 79.609403][ T30] team0 (unregistering): Port device team_slave_0 removed [ 79.652882][ T5561] hsr_slave_0: entered promiscuous mode [ 79.658902][ T5561] hsr_slave_1: entered promiscuous mode [ 79.665131][ T5561] debugfs: 'hsr0' already exists in 'hsr' [ 79.671009][ T5561] Cannot create hsr debugfs directory [ 79.684850][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 79.755989][ T5561] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 79.765390][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.784486][ T5561] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 79.795165][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.804543][ T5561] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 79.819336][ T3704] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.822135][ T5527] Bluetooth: hci0: command 0x1003 tx timeout [ 79.857739][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.887384][ T5561] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 79.915257][ T5561] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.932920][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 79.978832][ T5561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.993600][ T5561] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.013205][ T2018] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.020425][ T2018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.041158][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.048349][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.314500][ T5561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.408730][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 80.565038][ T5561] veth0_vlan: entered promiscuous mode [ 80.580876][ T5561] veth1_vlan: entered promiscuous mode [ 80.610032][ T5561] veth0_macvtap: entered promiscuous mode [ 80.627542][ T5561] veth1_macvtap: entered promiscuous mode [ 80.641455][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 80.653625][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.669121][ T5561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.694000][ T2205] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.703674][ T2205] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.731231][ T2205] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.741482][ T2205] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.233959][ T5781] loop5: detected capacity change from 0 to 1024 [ 81.246549][ T5781] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.299156][ T5781] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 81.318294][ T5781] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 81.330707][ T5781] ext4 filesystem being mounted at /128/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.361538][ T5781] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.697: bg 0: block 112: padding at end of block bitmap is not set [ 81.384444][ T5781] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 81.412209][ T5781] EXT4-fs (loop5): This should not happen!! Data will be lost [ 81.412209][ T5781] [ 81.433350][ T5781] EXT4-fs (loop5): Total free blocks count 0 [ 81.448106][ T5781] EXT4-fs (loop5): Free/Dirty block details [ 81.463051][ T5781] EXT4-fs (loop5): free_blocks=0 [ 81.474754][ T5781] EXT4-fs (loop5): dirty_blocks=32 [ 81.487279][ T5781] EXT4-fs (loop5): Block reservation details [ 81.501589][ T5781] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 81.631212][ T3620] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 81.651192][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 81.655215][ T5788] loop8: detected capacity change from 0 to 512 [ 81.685281][ T5790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 81.704538][ T5788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.725654][ T5788] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.767719][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 81.767735][ T28] audit: type=1400 audit(1780711125.813:695): avc: denied { write } for pid=5787 comm="syz.8.699" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.784503][ T5800] loop2: detected capacity change from 0 to 512 [ 81.797289][ T28] audit: type=1400 audit(1780711125.823:696): avc: denied { write } for pid=5787 comm="syz.8.699" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.826958][ T28] audit: type=1400 audit(1780711125.823:697): avc: denied { unlink } for pid=5787 comm="syz.8.699" name="file1" dev="loop8" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 81.894422][ T5800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.913823][ T5800] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.941843][ T5561] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.952518][ T28] audit: type=1400 audit(1780711125.993:698): avc: denied { write } for pid=5798 comm="syz.2.701" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.010722][ T28] audit: type=1400 audit(1780711126.033:699): avc: denied { write } for pid=5798 comm="syz.2.701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.097175][ T28] audit: type=1400 audit(1780711126.043:700): avc: denied { write } for pid=5791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.127820][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.180829][ T5825] loop2: detected capacity change from 0 to 512 [ 82.183623][ T28] audit: type=1400 audit(1780711126.133:701): avc: denied { write } for pid=5815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.245954][ T5825] EXT4-fs (loop2): invalid journal inode [ 82.282499][ T5825] EXT4-fs (loop2): can't get journal size [ 82.319962][ T5825] EXT4-fs (loop2): 1 truncate cleaned up [ 82.338793][ T5825] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.384854][ T28] audit: type=1400 audit(1780711126.433:702): avc: denied { write } for pid=5826 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.495534][ T5851] can0: slcan on ttyS3. [ 82.511200][ T28] audit: type=1400 audit(1780711126.473:703): avc: denied { write } for pid=5824 comm="syz.2.705" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.512397][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.562096][ T28] audit: type=1400 audit(1780711126.473:704): avc: denied { write } for pid=5824 comm="syz.2.705" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.599611][ T5851] can0 (unregistered): slcan off ttyS3. [ 83.322667][ T5895] loop2: detected capacity change from 0 to 32768 [ 83.372046][ T5895] loop2: p1 p3 < > [ 83.487676][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 83.522124][ T5918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.727'. [ 83.596534][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 83.607425][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 83.815993][ T5929] loop7: detected capacity change from 0 to 1024 [ 83.833332][ T5929] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.865434][ T5929] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8802c018, mo2=0002] [ 83.887888][ T5929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 83.900707][ T5929] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.926506][ T5929] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.734: bg 0: block 112: padding at end of block bitmap is not set [ 83.942983][ T5929] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 18 with error 28 [ 83.972454][ T5929] EXT4-fs (loop7): This should not happen!! Data will be lost [ 83.972454][ T5929] [ 83.983400][ T5929] EXT4-fs (loop7): Total free blocks count 0 [ 83.989559][ T5929] EXT4-fs (loop7): Free/Dirty block details [ 83.995719][ T5929] EXT4-fs (loop7): free_blocks=0 [ 84.000791][ T5929] EXT4-fs (loop7): dirty_blocks=32 [ 84.006063][ T5929] EXT4-fs (loop7): Block reservation details [ 84.012176][ T5929] EXT4-fs (loop7): i_reserved_data_blocks=2 [ 84.050221][ T5946] loop1: detected capacity change from 0 to 1024 [ 84.061952][ T5946] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 84.072412][ T5946] System zones: 0-1, 3-36 [ 84.078055][ T5946] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz.1.740: bad orphan inode 134217728 [ 84.104534][ T5946] loop1: lost filesystem error report for type 5 error -117 [ 84.105272][ T5946] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.144558][ T5098] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 84.168034][ T5098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 84.282137][ T5957] loop7: detected capacity change from 0 to 512 [ 84.299377][ T5957] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.331546][ T5098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.497634][ T5969] raw_sendmsg: syz.8.749 forgot to set AF_INET. Fix it! [ 84.607453][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.856359][ T5933] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 86.910295][ T5993] netlink: 'syz.8.759': attribute type 6 has an invalid length. [ 86.921466][ T5990] netlink: 8 bytes leftover after parsing attributes in process `syz.5.767'. [ 86.931097][ T5997] loop2: detected capacity change from 0 to 1024 [ 86.962657][ T5997] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 86.986099][ T5997] System zones: 0-1, 3-36 [ 86.995723][ T6001] netlink: 'syz.1.757': attribute type 13 has an invalid length. [ 87.012817][ T5997] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.760: bad orphan inode 134217728 [ 87.026199][ T6005] loop5: detected capacity change from 0 to 512 [ 87.034879][ T5997] loop2: lost filesystem error report for type 5 error -117 [ 87.035863][ T5997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.075462][ T6005] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.116927][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 87.116944][ T28] audit: type=1400 audit(1780711131.163:715): avc: denied { write } for pid=5995 comm="syz.2.760" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.169284][ T28] audit: type=1400 audit(1780711131.193:716): avc: denied { write } for pid=6000 comm="syz.5.762" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.191487][ T28] audit: type=1400 audit(1780711131.203:717): avc: denied { ioctl } for pid=6000 comm="syz.5.762" path="/147/file0/file1" dev="loop5" ino=15 ioctlcmd=0x6611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.194143][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.563031][ T6033] loop5: detected capacity change from 0 to 1024 [ 87.573055][ T6033] EXT4-fs: Ignoring removed orlov option [ 87.595754][ T6033] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.611664][ T6033] EXT4-fs (loop5): shut down requested (1) [ 87.619552][ T6033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 87.629639][ T6033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 87.652433][ T6033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 87.676616][ T6033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 87.685917][ T6033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 87.695065][ T6033] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 87.716021][ T28] audit: type=1400 audit(1780711131.753:718): avc: denied { add_name } for pid=6032 comm="syz.5.771" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.772006][ T3620] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.784180][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.812922][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.786'. [ 87.825563][ T6049] loop2: detected capacity change from 0 to 512 [ 87.832337][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 87.841639][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.786'. [ 87.850782][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.5.786'. [ 87.873345][ T6049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.910456][ T28] audit: type=1400 audit(1780711131.963:719): avc: denied { write } for pid=6046 comm="syz.2.776" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 87.946303][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.121817][ T28] audit: type=1400 audit(1780711132.173:720): avc: denied { read write } for pid=6061 comm="syz.8.781" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.147853][ T28] audit: type=1400 audit(1780711132.173:721): avc: denied { open } for pid=6061 comm="syz.8.781" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 88.285077][ T6075] loop7: detected capacity change from 0 to 1024 [ 88.292160][ T6075] EXT4-fs: Ignoring removed orlov option [ 88.304380][ T6075] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.323825][ T28] audit: type=1400 audit(1780711132.373:722): avc: denied { setattr } for pid=6074 comm="syz.7.788" name="file0" dev="loop7" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.353999][ T28] audit: type=1400 audit(1780711132.403:723): avc: denied { write } for pid=6074 comm="syz.7.788" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.384297][ T28] audit: type=1400 audit(1780711132.433:724): avc: denied { write } for pid=6074 comm="syz.7.788" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.426403][ T5098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.470598][ T6080] loop7: detected capacity change from 0 to 1024 [ 88.484211][ T6080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 88.503435][ T6080] System zones: 0-1, 3-36 [ 88.510554][ T6080] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.789: bad orphan inode 134217728 [ 88.522945][ T6080] loop7: lost filesystem error report for type 5 error -117 [ 88.523655][ T6080] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.613433][ T6082] ================================================================== [ 88.621567][ T6082] BUG: KCSAN: data-race in filemap_read / filemap_read [ 88.628478][ T6082] [ 88.630817][ T6082] write to 0xffff888104b4aca0 of 8 bytes by task 6080 on cpu 1: [ 88.638460][ T6082] filemap_read+0x98d/0xa10 [ 88.643005][ T6082] generic_file_read_iter+0x79/0x330 [ 88.648326][ T6082] ext4_file_read_iter+0x1cc/0x290 [ 88.653474][ T6082] copy_splice_read+0x471/0x6c0 [ 88.658447][ T6082] splice_direct_to_actor+0x28f/0x670 [ 88.663862][ T6082] do_splice_direct+0x119/0x1a0 [ 88.668747][ T6082] do_sendfile+0x382/0x650 [ 88.673194][ T6082] __x64_sys_sendfile64+0x105/0x150 [ 88.678415][ T6082] x64_sys_call+0x2dc4/0x3020 [ 88.683119][ T6082] do_syscall_64+0x12c/0x3b0 [ 88.687744][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.693662][ T6082] [ 88.695999][ T6082] read to 0xffff888104b4aca0 of 8 bytes by task 6082 on cpu 0: [ 88.703559][ T6082] filemap_read+0x6f/0xa10 [ 88.708018][ T6082] generic_file_read_iter+0x79/0x330 [ 88.713343][ T6082] ext4_file_read_iter+0x1cc/0x290 [ 88.718505][ T6082] copy_splice_read+0x471/0x6c0 [ 88.723397][ T6082] splice_direct_to_actor+0x28f/0x670 [ 88.728809][ T6082] do_splice_direct+0x119/0x1a0 [ 88.733701][ T6082] do_sendfile+0x382/0x650 [ 88.738143][ T6082] __x64_sys_sendfile64+0x105/0x150 [ 88.743370][ T6082] x64_sys_call+0x2dc4/0x3020 [ 88.748180][ T6082] do_syscall_64+0x12c/0x3b0 [ 88.752806][ T6082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.758717][ T6082] [ 88.761042][ T6082] value changed: 0x000000000000012f -> 0x0000000000000130 [ 88.768175][ T6082] [ 88.770498][ T6082] Reported by Kernel Concurrency Sanitizer on: [ 88.776653][ T6082] CPU: 0 UID: 0 PID: 6082 Comm: syz.7.789 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 88.787428][ T6082] Tainted: [W]=WARN [ 88.791227][ T6082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 88.801299][ T6082] ================================================================== [ 88.831494][ T5098] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.681864][ T6041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.187188][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 92.187207][ T28] audit: type=1400 audit(1780711136.233:732): avc: denied { write } for pid=6111 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.216732][ T28] audit: type=1400 audit(1780711136.253:733): avc: denied { write } for pid=6122 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.244016][ T28] audit: type=1400 audit(1780711137.293:734): avc: denied { write } for pid=6125 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.268456][ T28] audit: type=1400 audit(1780711137.293:735): avc: denied { write } for pid=6136 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1