last executing test programs: 55.337026621s ago: executing program 3 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0700000004000000800000000400000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x4a, &(0x7f0000004180)=ANY=[], 0x0) socket$packet(0x11, 0x2, 0x300) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 55.324157501s ago: executing program 3 (id=373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x60880, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x6, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_OP={0x5, 0x3d, 0xea}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) 55.282037623s ago: executing program 3 (id=374): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x400, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) 55.261188094s ago: executing program 3 (id=375): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x1000090, &(0x7f0000003240)=ANY=[], 0x6, 0x368, &(0x7f0000000680)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x46) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x22, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) 55.123645661s ago: executing program 3 (id=380): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x400, 0x1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 54.837052963s ago: executing program 3 (id=383): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) 54.820832264s ago: executing program 32 (id=383): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x400, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) 21.663960463s ago: executing program 2 (id=1370): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xffa0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) 21.623669135s ago: executing program 2 (id=1372): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6f6e, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x5, 0xc3a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000640)=ANY=[], 0xe) 21.428718634s ago: executing program 2 (id=1382): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d6163736563000014000280050006000000000005000f000000000008000500", @ANYRES32=r2], 0x4c}}, 0x0) 21.339328767s ago: executing program 2 (id=1389): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000300), 0x210008, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 21.245500392s ago: executing program 2 (id=1394): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000022c0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 21.006706583s ago: executing program 2 (id=1402): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) 21.006471562s ago: executing program 33 (id=1402): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r0, 0x1) 6.385059865s ago: executing program 1 (id=1856): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) 6.350899136s ago: executing program 1 (id=1858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd3a, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) io_setup(0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) 6.122987927s ago: executing program 1 (id=1860): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x1ff, 0x3) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 5.096936712s ago: executing program 1 (id=1886): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000003c0)={[{@nojournal_checksum}, {@acl}, {@resgid}, {}, {@resgid}, {@inlinecrypt}, {@debug}, {@usrquota}]}, 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f0000000680)='./bus\x00', 0x4001410c2, 0x2e) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x40, 0x8005, 0x0, 0x0, 0xa, 0x4, "ef359f413bb93852f7d6a4ae6dddfbd1000000000000ff91031905b9aaaaf755a3f6a004000000000001000200", "036c47c6780820d1cbf733970000cf33768bbd9bffbcc2542ded71038259ca171ce1a310ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204, 0xffffffffffffffff]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) 4.638270933s ago: executing program 1 (id=1908): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x18) r2 = memfd_secret(0x80000) fchownat(r2, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 3.913015965s ago: executing program 1 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2517000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200488c0) 3.912789265s ago: executing program 34 (id=1921): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000ffdbdf2517000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20008800}, 0x200488c0) 1.926678054s ago: executing program 0 (id=1944): r0 = syz_io_uring_setup(0xa4d, &(0x7f0000000480)={0x0, 0x2ced, 0x80, 0x89, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.736449182s ago: executing program 0 (id=1949): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x0) r2 = fcntl$dupfd(r0, 0x406, r1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x30000000}) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x69) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000080)=0x3, 0x4) 1.674563895s ago: executing program 0 (id=1961): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xd192}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.642840007s ago: executing program 4 (id=1952): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000550001000000000000c4000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}}, 0x0) 1.624801208s ago: executing program 4 (id=1953): unshare(0x28000600) r0 = fsopen(&(0x7f00000001c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8e) unshare(0x8000280) mknodat$loop(r1, &(0x7f0000000140)='./file0\x00', 0x4, 0x1) 1.602222788s ago: executing program 4 (id=1954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504000000b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.523606812s ago: executing program 4 (id=1956): r0 = socket$inet_sctp(0x2, 0x1, 0x84) shutdown(r0, 0x1) poll(&(0x7f0000000100)=[{r0, 0x84}], 0x1, 0x3ff) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 1.376615829s ago: executing program 0 (id=1960): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) unshare(0x62040200) 1.058631883s ago: executing program 0 (id=1973): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r2, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.022480304s ago: executing program 0 (id=1975): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 893.99425ms ago: executing program 6 (id=1980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) 858.216181ms ago: executing program 6 (id=1982): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 665.52925ms ago: executing program 7 (id=1985): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 647.590061ms ago: executing program 4 (id=1986): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000003c0)=[@in6={0xa, 0x4e23, 0x2, @loopback={0xfec0ffffffffffff}, 0x80000000}, @in6={0xa, 0x4e23, 0x5, @remote, 0x5}, @in6={0xa, 0x4e24, 0x7, @mcast2, 0xff}], 0x54) 608.897392ms ago: executing program 7 (id=1987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='rxrpc_local\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 574.669364ms ago: executing program 4 (id=1988): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x80000001}, 0x8) 558.717625ms ago: executing program 7 (id=1989): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='kfree\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x18d6, &(0x7f0000000440)={0x0, 0x5352, 0x40, 0x2000, 0xfffffffc}, &(0x7f0000ffe000), &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x2, &(0x7f0000000180), 0xfe) 549.469215ms ago: executing program 6 (id=1990): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000280)=0xb) 473.583079ms ago: executing program 5 (id=1992): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2c, r0, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x9}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 459.780889ms ago: executing program 6 (id=1993): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x7fff}, 0x18) chown(0x0, 0x0, 0x0) 429.376741ms ago: executing program 5 (id=1994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010329bd7000fcdbdf252400000018000180140002007465616d5f736c6176655f30"], 0x2c}}, 0x0) 391.941692ms ago: executing program 6 (id=1995): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 371.604873ms ago: executing program 5 (id=1996): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61c1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 327.151755ms ago: executing program 5 (id=1997): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r0}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 311.313136ms ago: executing program 6 (id=1999): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 246.808269ms ago: executing program 5 (id=2000): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0xdd, 0xa, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') stat(&(0x7f0000000b00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) 200.77188ms ago: executing program 7 (id=2001): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) 182.573391ms ago: executing program 5 (id=2002): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 149.863863ms ago: executing program 7 (id=2003): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) close_range(r0, r0, 0x2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 0s ago: executing program 7 (id=2004): r0 = syz_clone(0x80020100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f00000003c0)='ns/mnt\x00') kernel console output (not intermixed with test programs): 5.562722][ T5173] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 55.571994][ T5173] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.599808][ T5173] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 55.608907][ T5173] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.628008][ T6720] netlink: 'syz.0.676': attribute type 4 has an invalid length. [ 55.705772][ T6742] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.682'. [ 55.737008][ T6742] netlink: zone id is out of range [ 55.742278][ T6742] netlink: zone id is out of range [ 55.760197][ T6742] netlink: zone id is out of range [ 55.766461][ T6742] netlink: del zone limit has 8 unknown bytes [ 55.836077][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.685'. [ 56.382659][ T6824] loop2: detected capacity change from 0 to 1024 [ 56.422231][ T6824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.426577][ T6831] loop0: detected capacity change from 0 to 512 [ 56.455597][ T6831] ------------[ cut here ]------------ [ 56.461220][ T6831] EA inode 11 i_nlink=2 [ 56.461237][ T6831] WARNING: fs/ext4/xattr.c:1058 at 0x0, CPU#0: syz.0.695/6831 [ 56.473059][ T6831] Modules linked in: [ 56.477060][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz.0.695 Not tainted syzkaller #0 PREEMPT(voluntary) [ 56.486799][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 56.496929][ T6831] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 56.503789][ T6831] Code: c1 d2 9c ff 4c 8d 2d 0a c0 20 05 49 8d 7e 40 e8 01 65 b8 ff 49 8b 6e 40 4c 89 e7 e8 15 60 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 3c df ba 03 66 66 66 2e 0f 1f 84 [ 56.523572][ T6831] RSP: 0018:ffffc90001957778 EFLAGS: 00010246 [ 56.529964][ T6831] RAX: ffff88810374ed90 RBX: ffff88811a84b220 RCX: ffffffff81bb4beb [ 56.537968][ T6831] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0be0 [ 56.546087][ T6831] RBP: 000000000000000b R08: 000188811a84b1d3 R09: 0000000000000000 [ 56.554254][ T6831] R10: ffffc900019576a8 R11: 0001c900019576a8 R12: ffff88811a84b1d0 [ 56.562293][ T6831] R13: ffffffff86dc0be0 R14: ffff88811a84b188 R15: 0000000000000001 [ 56.570457][ T6831] FS: 00007f5fc329f6c0(0000) GS:ffff8882aedc3000(0000) knlGS:0000000000000000 [ 56.579448][ T6831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.586093][ T6831] CR2: 0000001b34123ffc CR3: 000000011c480000 CR4: 00000000003506f0 [ 56.594146][ T6831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.602206][ T6831] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 56.610342][ T6831] Call Trace: [ 56.613639][ T6831] [ 56.616597][ T6831] ext4_xattr_inode_dec_ref_all+0x57c/0x870 [ 56.622692][ T6831] ? errseq_check+0x2c/0x50 [ 56.627259][ T6831] ext4_xattr_delete_inode+0x6b7/0x790 [ 56.632981][ T6831] ext4_evict_inode+0xa20/0xd40 [ 56.637865][ T6831] ? __pfx_ext4_evict_inode+0x10/0x10 [ 56.643372][ T6831] evict+0x2af/0x510 [ 56.647310][ T6831] ? __dquot_initialize+0x146/0x7c0 [ 56.652662][ T6831] iput+0x4bd/0x650 [ 56.656591][ T6831] ext4_process_orphan+0x1a9/0x1c0 [ 56.661945][ T6831] ext4_orphan_cleanup+0x6a8/0xa00 [ 56.667328][ T6831] ext4_fill_super+0x3411/0x37a0 [ 56.672345][ T6831] ? set_blocksize+0x1a8/0x310 [ 56.677201][ T6831] ? sb_set_blocksize+0xfc/0x170 [ 56.682238][ T6831] ? setup_bdev_super+0x30e/0x370 [ 56.687403][ T6831] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.693021][ T6831] get_tree_bdev_flags+0x291/0x300 [ 56.698192][ T6831] ? __pfx_ext4_fill_super+0x10/0x10 [ 56.703553][ T6831] get_tree_bdev+0x1f/0x30 [ 56.708027][ T6831] ext4_get_tree+0x1c/0x30 [ 56.712533][ T6831] vfs_get_tree+0x57/0x1d0 [ 56.717146][ T6831] do_new_mount+0x24d/0x6a0 [ 56.721725][ T6831] path_mount+0x4ab/0xb80 [ 56.726088][ T6831] ? user_path_at+0xbf/0x130 [ 56.730753][ T6831] __se_sys_mount+0x28c/0x2e0 [ 56.735597][ T6831] __x64_sys_mount+0x67/0x80 [ 56.740262][ T6831] x64_sys_call+0x2cca/0x3000 [ 56.745023][ T6831] do_syscall_64+0xd8/0x2a0 [ 56.749748][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.755758][ T6831] RIP: 0033:0x7f5fc4840eea [ 56.760265][ T6831] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.780273][ T6831] RSP: 002b:00007f5fc329ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 56.788918][ T6831] RAX: ffffffffffffffda RBX: 00007f5fc329eef0 RCX: 00007f5fc4840eea [ 56.796919][ T6831] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f5fc329eeb0 [ 56.805101][ T6831] RBP: 0000200000000180 R08: 00007f5fc329eef0 R09: 0000000000800700 [ 56.813151][ T6831] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 56.821393][ T6831] R13: 00007f5fc329eeb0 R14: 000000000000046f R15: 0000200000000200 [ 56.829429][ T6831] [ 56.832514][ T6831] ---[ end trace 0000000000000000 ]--- [ 56.839411][ T6831] EXT4-fs (loop0): 1 orphan inode deleted [ 56.839788][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.845786][ T6831] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.900362][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.697'. [ 56.946227][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.504613][ T6943] syz.4.709 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 57.681302][ T6980] netlink: 256 bytes leftover after parsing attributes in process `syz.1.717'. [ 57.712579][ T6983] loop5: detected capacity change from 0 to 512 [ 57.745225][ T6983] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.760183][ T6997] loop4: detected capacity change from 0 to 1024 [ 57.769765][ T6983] EXT4-fs (loop5): mount failed [ 57.792372][ T6997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.826645][ T7003] loop2: detected capacity change from 0 to 1024 [ 57.839678][ T7009] netlink: 4 bytes leftover after parsing attributes in process `syz.1.721'. [ 57.846052][ T6997] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.848877][ T7009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.721'. [ 57.871831][ T7003] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.939777][ T7007] lo speed is unknown, defaulting to 1000 [ 58.210134][ T7026] EXT4-fs (loop1): 1 orphan inode deleted [ 58.233608][ T6985] syz.4.715 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 58.246794][ T7026] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.247776][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.4.715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 58.247811][ T6985] Tainted: [W]=WARN [ 58.247818][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 58.247876][ T6985] Call Trace: [ 58.247883][ T6985] [ 58.247891][ T6985] __dump_stack+0x1d/0x30 [ 58.247918][ T6985] dump_stack_lvl+0xe8/0x140 [ 58.247941][ T6985] dump_stack+0x15/0x1b [ 58.247962][ T6985] dump_header+0x81/0x240 [ 58.247987][ T6985] oom_kill_process+0x295/0x350 [ 58.248011][ T6985] out_of_memory+0x97b/0xb80 [ 58.248035][ T6985] try_charge_memcg+0x610/0xa10 [ 58.248071][ T6985] obj_cgroup_charge_pages+0xa6/0x150 [ 58.248102][ T6985] __memcg_kmem_charge_page+0x9f/0x170 [ 58.248132][ T6985] __alloc_frozen_pages_noprof+0x18f/0x360 [ 58.248179][ T6985] alloc_pages_mpol+0xb3/0x260 [ 58.248216][ T6985] alloc_pages_noprof+0x90/0x130 [ 58.248299][ T6985] __vmalloc_node_range_noprof+0xa7b/0x1310 [ 58.248410][ T6985] __kvmalloc_node_noprof+0x492/0x6b0 [ 58.248435][ T6985] ? ip_set_alloc+0x24/0x30 [ 58.248498][ T6985] ? ip_set_alloc+0x24/0x30 [ 58.248527][ T6985] ip_set_alloc+0x24/0x30 [ 58.248555][ T6985] hash_netiface_create+0x282/0x740 [ 58.248659][ T6985] ? __pfx_hash_netiface_create+0x10/0x10 [ 58.248767][ T6985] ip_set_create+0x3cc/0x970 [ 58.248805][ T6985] ? __nla_parse+0x40/0x60 [ 58.248834][ T6985] nfnetlink_rcv_msg+0x4c6/0x590 [ 58.248874][ T6985] netlink_rcv_skb+0x123/0x220 [ 58.248902][ T6985] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 58.248990][ T6985] nfnetlink_rcv+0x167/0x16c0 [ 58.249013][ T6985] ? kmem_cache_free+0xe3/0x3a0 [ 58.249039][ T6985] ? __kfree_skb+0x109/0x150 [ 58.249063][ T6985] ? nlmon_xmit+0x4f/0x60 [ 58.249130][ T6985] ? consume_skb+0x49/0x150 [ 58.249158][ T6985] ? nlmon_xmit+0x4f/0x60 [ 58.249254][ T6985] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 58.249284][ T6985] ? __dev_queue_xmit+0x138d/0x1ec0 [ 58.249416][ T6985] ? __dev_queue_xmit+0x148/0x1ec0 [ 58.249444][ T6985] ? ref_tracker_free+0x37d/0x3e0 [ 58.249471][ T6985] ? __netlink_deliver_tap+0x4dc/0x500 [ 58.249581][ T6985] netlink_unicast+0x5c0/0x690 [ 58.249661][ T6985] netlink_sendmsg+0x58b/0x6b0 [ 58.249734][ T6985] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.249779][ T6985] __sock_sendmsg+0x145/0x180 [ 58.249849][ T6985] ____sys_sendmsg+0x31e/0x4a0 [ 58.249880][ T6985] ___sys_sendmsg+0x17b/0x1d0 [ 58.249943][ T6985] __x64_sys_sendmsg+0xd4/0x160 [ 58.249974][ T6985] x64_sys_call+0x17ba/0x3000 [ 58.250000][ T6985] do_syscall_64+0xd8/0x2a0 [ 58.250049][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.250072][ T6985] RIP: 0033:0x7f5ebe61f749 [ 58.250090][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.250131][ T6985] RSP: 002b:00007f5ebd07f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.250152][ T6985] RAX: ffffffffffffffda RBX: 00007f5ebe875fa0 RCX: 00007f5ebe61f749 [ 58.250166][ T6985] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000005 [ 58.250180][ T6985] RBP: 00007f5ebe6a3f91 R08: 0000000000000000 R09: 0000000000000000 [ 58.250193][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.250232][ T6985] R13: 00007f5ebe876038 R14: 00007f5ebe875fa0 R15: 00007fff23618818 [ 58.250250][ T6985] [ 58.250282][ T6985] memory: usage 307200kB, limit 307200kB, failcnt 63 [ 58.596467][ T6985] memory+swap: usage 324152kB, limit 9007199254740988kB, failcnt 0 [ 58.604401][ T6985] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0 [ 58.611860][ T6985] Memory cgroup stats for /syz4: [ 58.628806][ T5168] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:49: Failed to release dquot type 1 [ 58.647199][ T6985] cache 28672 [ 58.650744][ T6985] rss 53248 [ 58.653895][ T6985] shmem 0 [ 58.657105][ T6985] mapped_file 4096 [ 58.660895][ T6985] dirty 0 [ 58.663897][ T6985] writeback 0 [ 58.667221][ T6985] workingset_refault_anon 28 [ 58.671875][ T6985] workingset_refault_file 4 [ 58.676460][ T6985] swap 17362944 [ 58.680227][ T6985] swapcached 143360 [ 58.684098][ T6985] pgpgin 35007 [ 58.687690][ T6985] pgpgout 34965 [ 58.691302][ T6985] pgfault 43042 [ 58.694801][ T6985] pgmajfault 8 [ 58.698173][ T6985] inactive_anon 86016 [ 58.702229][ T6985] active_anon 57344 [ 58.706059][ T6985] inactive_file 0 [ 58.709740][ T6985] active_file 28672 [ 58.713645][ T6985] unevictable 0 [ 58.717199][ T6985] hierarchical_memory_limit 314572800 [ 58.722618][ T6985] hierarchical_memsw_limit 9223372036854771712 [ 58.728884][ T6985] total_cache 28672 [ 58.732846][ T6985] total_rss 53248 [ 58.737026][ T6985] total_shmem 0 [ 58.740743][ T6985] total_mapped_file 4096 [ 58.744989][ T6985] total_dirty 0 [ 58.748622][ T6985] total_writeback 0 [ 58.752503][ T6985] total_workingset_refault_anon 28 [ 58.757675][ T6985] total_workingset_refault_file 4 [ 58.762865][ T6985] total_swap 17362944 [ 58.766851][ T6985] total_swapcached 143360 [ 58.771266][ T6985] total_pgpgin 35007 [ 58.775169][ T6985] total_pgpgout 34965 [ 58.779288][ T6985] total_pgfault 43042 [ 58.783287][ T6985] total_pgmajfault 8 [ 58.787265][ T6985] total_inactive_anon 86016 [ 58.791928][ T6985] total_active_anon 57344 [ 58.796410][ T6985] total_inactive_file 0 [ 58.800612][ T6985] total_active_file 28672 [ 58.805035][ T6985] total_unevictable 0 [ 58.809165][ T6985] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.715,pid=6978,uid=0 [ 58.823878][ T6985] Memory cgroup out of memory: Killed process 6978 (syz.4.715) total-vm:93968kB, anon-rss:1264kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 58.863998][ T7076] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 58.923867][ T6985] syz.4.715 (6985) used greatest stack depth: 7216 bytes left [ 58.974387][ T7107] batman_adv: batadv0: Adding interface: dummy0 [ 58.980752][ T7107] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.006591][ T7107] batman_adv: batadv0: Interface activated: dummy0 [ 59.013361][ T7086] lo speed is unknown, defaulting to 1000 [ 59.062145][ T7115] set_capacity_and_notify: 1 callbacks suppressed [ 59.062162][ T7115] loop0: detected capacity change from 0 to 1024 [ 59.090901][ T7115] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.105819][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.746'. [ 59.177352][ T7149] lo speed is unknown, defaulting to 1000 [ 59.200406][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 59.200423][ T29] audit: type=1326 audit(1765114163.947:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.207160][ T7149] lo speed is unknown, defaulting to 1000 [ 59.255522][ T29] audit: type=1326 audit(1765114163.987:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.278817][ T7149] lo speed is unknown, defaulting to 1000 [ 59.279053][ T29] audit: type=1326 audit(1765114163.987:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.285692][ T7149] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 59.307975][ T29] audit: type=1326 audit(1765114163.987:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.308007][ T29] audit: type=1326 audit(1765114163.987:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.308063][ T29] audit: type=1326 audit(1765114163.987:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.308093][ T29] audit: type=1326 audit(1765114163.987:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.308130][ T29] audit: type=1326 audit(1765114163.987:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.308274][ T29] audit: type=1326 audit(1765114163.987:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.308444][ T29] audit: type=1326 audit(1765114163.987:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7155 comm="syz.4.751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 59.341104][ T7149] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.522541][ T7174] netlink: 96 bytes leftover after parsing attributes in process `syz.1.757'. [ 59.532328][ T7149] lo speed is unknown, defaulting to 1000 [ 59.541766][ T7179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 59.550612][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.2.758'. [ 59.559732][ T7179] netlink: 'syz.2.758': attribute type 20 has an invalid length. [ 59.568753][ T7149] lo speed is unknown, defaulting to 1000 [ 59.575217][ T7149] lo speed is unknown, defaulting to 1000 [ 59.581978][ T7149] lo speed is unknown, defaulting to 1000 [ 59.592883][ T7184] loop1: detected capacity change from 0 to 1024 [ 59.599742][ T7149] lo speed is unknown, defaulting to 1000 [ 59.605968][ T7149] lo speed is unknown, defaulting to 1000 [ 59.616485][ T7179] netlink: 'syz.2.758': attribute type 20 has an invalid length. [ 59.624594][ T5133] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.633954][ T5133] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.647465][ T7184] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.662403][ T5133] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.671940][ T5158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.772719][ T7200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.802784][ T7200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.821692][ T7200] bond0 (unregistering): Released all slaves [ 59.859302][ T7250] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 2, id = 0 [ 59.859529][ T7249] IPVS: stopping master sync thread 7250 ... [ 59.891899][ T7252] 9pnet_fd: Insufficient options for proto=fd [ 59.943928][ T7259] pim6reg: entered allmulticast mode [ 59.952401][ T7259] pim6reg: left allmulticast mode [ 60.038449][ T7284] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 2, id = 0 [ 60.039782][ T7282] IPVS: stopping master sync thread 7284 ... [ 60.049232][ T7277] vhci_hcd vhci_hcd.3: invalid port number 9 [ 60.103606][ T7289] SELinux: Context Ü is not valid (left unmapped). [ 60.263865][ T7326] 9pnet_fd: Insufficient options for proto=fd [ 60.287187][ T7328] loop5: detected capacity change from 0 to 1024 [ 60.299994][ T7328] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 60.317251][ T7328] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 60.325438][ T7328] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.333208][ T7328] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.805: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.346930][ T7328] EXT4-fs (loop5): 1 orphan inode deleted [ 60.864041][ T7394] xt_hashlimit: max too large, truncated to 1048576 [ 61.146221][ T7396] __nla_validate_parse: 5 callbacks suppressed [ 61.146239][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.831'. [ 61.176423][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.831'. [ 61.191959][ T7400] vhci_hcd vhci_hcd.4: default hub control req: 2316 v0008 i0004 l0 [ 61.377646][ T7426] loop2: detected capacity change from 0 to 1024 [ 61.399607][ T7426] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.842: Allocating blocks 481-513 which overlap fs metadata [ 61.420732][ T7426] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.842: Allocating blocks 497-513 which overlap fs metadata [ 61.435354][ T7426] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.842: Allocating blocks 497-513 which overlap fs metadata [ 61.451342][ T7426] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 61.463758][ T7426] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.463758][ T7426] [ 61.489731][ T5133] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm kworker/u8:27: Allocating blocks 497-513 which overlap fs metadata [ 61.522878][ T7437] netlink: 'syz.0.845': attribute type 7 has an invalid length. [ 61.541781][ T5133] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 12 with error 117 [ 61.554332][ T5133] EXT4-fs (loop2): This should not happen!! Data will be lost [ 61.554332][ T5133] [ 61.947472][ T7502] loop4: detected capacity change from 0 to 1024 [ 61.955919][ T7502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.955935][ T7504] netlink: 100 bytes leftover after parsing attributes in process `syz.2.872'. [ 62.036622][ T7514] loop5: detected capacity change from 0 to 2048 [ 62.112157][ T7514] loop5: unable to read partition table [ 62.123652][ T7514] loop5: partition table beyond EOD, truncated [ 62.129885][ T7514] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 62.176198][ T7526] loop1: detected capacity change from 0 to 512 [ 62.179121][ T7527] veth1_to_bond: entered allmulticast mode [ 62.185214][ T7526] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.881: iget: bad extra_isize 90 (inode size 256) [ 62.202740][ T7526] EXT4-fs (loop1): Remounting filesystem read-only [ 62.209452][ T7526] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -30) [ 62.209697][ T7527] veth1_to_bond: left allmulticast mode [ 62.218933][ T7526] EXT4-fs (loop1): 1 orphan inode deleted [ 62.353236][ T7558] loop1: detected capacity change from 0 to 1024 [ 62.366528][ T7558] EXT4-fs: Ignoring removed oldalloc option [ 62.372587][ T7558] EXT4-fs: Ignoring removed bh option [ 62.431343][ T7576] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 62.525648][ T7593] loop5: detected capacity change from 0 to 512 [ 62.536540][ T7593] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 62.545461][ T7593] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 62.569613][ T7593] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.906: Allocating blocks 41-42 which overlap fs metadata [ 62.588127][ T7593] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.906: Allocating blocks 41-42 which overlap fs metadata [ 62.602364][ T7593] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.906: Failed to acquire dquot type 1 [ 62.615838][ T7593] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 62.631166][ T7593] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.906: corrupted inode contents [ 62.643551][ T7593] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.906: mark_inode_dirty error [ 62.655432][ T7593] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.906: corrupted inode contents [ 62.667737][ T7593] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.906: mark_inode_dirty error [ 62.679584][ T7593] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.906: corrupted inode contents [ 62.698771][ T7593] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 62.707748][ T7593] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.906: corrupted inode contents [ 62.726103][ T7593] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.906: mark_inode_dirty error [ 62.759348][ T7593] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 62.769287][ T7593] EXT4-fs (loop5): 1 truncate cleaned up [ 62.825048][ T7593] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.906: Allocating blocks 41-42 which overlap fs metadata [ 62.859055][ T7593] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.906: Failed to acquire dquot type 1 [ 62.943864][ T7620] loop4: detected capacity change from 0 to 1024 [ 62.962069][ T7620] EXT4-fs: Ignoring removed oldalloc option [ 62.973466][ T7627] smc: net device ip6gretap0 applied user defined pnetid SYZ2 [ 62.981450][ T7627] smc: net device ip6gretap0 erased user defined pnetid SYZ2 [ 63.007522][ T7620] ext2: Unknown parameter 'subj_type' [ 63.089423][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.924'. [ 63.156286][ T7648] netlink: 332 bytes leftover after parsing attributes in process `syz.4.928'. [ 63.211789][ T7659] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.932: iget: bad extra_isize 90 (inode size 256) [ 63.225432][ T7660] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.234489][ T7660] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.238384][ T7667] netlink: 'syz.2.934': attribute type 14 has an invalid length. [ 63.251611][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 63.261283][ T7659] EXT4-fs (loop0): Remounting filesystem read-only [ 63.268114][ T7659] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -30) [ 63.277350][ T7659] EXT4-fs (loop0): 1 orphan inode deleted [ 63.284659][ T7667] netlink: 'syz.2.934': attribute type 14 has an invalid length. [ 63.292501][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.934'. [ 63.311671][ T7660] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.931: Allocating blocks 41-42 which overlap fs metadata [ 63.339297][ T7660] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.931: Failed to acquire dquot type 1 [ 63.360866][ T7660] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 63.396531][ T7660] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.931: corrupted inode contents [ 63.410619][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 63.419561][ T7684] netlink: 12 bytes leftover after parsing attributes in process `syz.2.938'. [ 63.420677][ T7660] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.931: mark_inode_dirty error [ 63.440275][ T7660] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.931: corrupted inode contents [ 63.457867][ T7660] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.931: mark_inode_dirty error [ 63.476862][ T7690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.940'. [ 63.486869][ T7660] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.931: corrupted inode contents [ 63.499488][ T7660] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 63.509049][ T7660] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.931: corrupted inode contents [ 63.542022][ T7660] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.931: mark_inode_dirty error [ 63.553602][ T7660] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 63.563041][ T7660] EXT4-fs (loop4): 1 truncate cleaned up [ 63.627377][ T5173] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:51: Failed to release dquot type 1 [ 63.690675][ T7712] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.721550][ T7712] EXT4-fs (loop0): mount failed [ 63.857578][ T7726] ext4 filesystem being mounted at /189/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 63.896670][ T7731] ext4 filesystem being mounted at /192/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.086613][ T7749] EXT4-fs: Ignoring removed orlov option [ 64.233804][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 64.233825][ T29] audit: type=1326 audit(1765114168.967:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.263832][ T29] audit: type=1326 audit(1765114168.967:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.287762][ T29] audit: type=1326 audit(1765114168.967:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.311234][ T29] audit: type=1326 audit(1765114168.967:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.334908][ T29] audit: type=1326 audit(1765114168.967:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.358319][ T29] audit: type=1326 audit(1765114168.967:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.382010][ T29] audit: type=1326 audit(1765114168.967:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.405579][ T29] audit: type=1326 audit(1765114168.967:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.429427][ T29] audit: type=1326 audit(1765114168.967:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.452766][ T29] audit: type=1326 audit(1765114168.967:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7771 comm="syz.4.969" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 64.570363][ T7736] Set syz1 is full, maxelem 65536 reached [ 64.651631][ T7793] set_capacity_and_notify: 6 callbacks suppressed [ 64.651651][ T7793] loop0: detected capacity change from 0 to 4096 [ 64.672498][ T7796] dummy0: entered promiscuous mode [ 64.677784][ T7796] macsec0: entered allmulticast mode [ 64.694045][ T7796] dummy0: entered allmulticast mode [ 64.852875][ T7830] loop4: detected capacity change from 0 to 2048 [ 64.975255][ T7830] loop4: unable to read partition table [ 64.983443][ T7830] loop4: partition table beyond EOD, truncated [ 64.989691][ T7830] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 65.087004][ T7852] loop5: detected capacity change from 0 to 1024 [ 65.095937][ T7852] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.339306][ T7834] Set syz1 is full, maxelem 65536 reached [ 65.382895][ T7872] syz_tun: entered allmulticast mode [ 65.402329][ T7872] dvmrp8: entered allmulticast mode [ 65.512544][ T7906] netlink: 'syz.1.1010': attribute type 3 has an invalid length. [ 65.524290][ T7904] loop2: detected capacity change from 0 to 512 [ 65.536024][ T7904] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.544820][ T7904] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 65.558697][ T7913] 0ªX¹¦À: renamed from caif0 [ 65.566279][ T7913] 0ªX¹¦À: entered allmulticast mode [ 65.571572][ T7913] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 65.592111][ T7904] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1007: Allocating blocks 41-42 which overlap fs metadata [ 65.606221][ T7904] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1007: Allocating blocks 41-42 which overlap fs metadata [ 65.620324][ T7904] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1007: Failed to acquire dquot type 1 [ 65.632567][ T7904] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 65.647659][ T7904] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1007: corrupted inode contents [ 65.659969][ T7904] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.1007: mark_inode_dirty error [ 65.671893][ T7904] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1007: corrupted inode contents [ 65.684023][ T7904] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.1007: mark_inode_dirty error [ 65.695960][ T7904] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1007: corrupted inode contents [ 65.708433][ T7904] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 65.717428][ T7904] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.1007: corrupted inode contents [ 65.729843][ T7904] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.1007: mark_inode_dirty error [ 65.751052][ T7904] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 65.773071][ T7904] EXT4-fs (loop2): 1 truncate cleaned up [ 65.845321][ T7904] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.1007: Allocating blocks 41-42 which overlap fs metadata [ 65.879102][ T7904] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1007: Failed to acquire dquot type 1 [ 66.177708][ T7923] Set syz1 is full, maxelem 65536 reached [ 66.186074][ T7942] IPv6: Can't replace route, no match found [ 66.294329][ T7951] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 66.398208][ T7976] loop0: detected capacity change from 0 to 512 [ 66.427816][ T7976] journal_path: Non-blockdev passed as './bus' [ 66.434206][ T7976] EXT4-fs: error: could not find journal device path [ 66.599889][ T8005] __nla_validate_parse: 9 callbacks suppressed [ 66.599906][ T8005] netlink: 444 bytes leftover after parsing attributes in process `+}[K'. [ 66.631856][ T8005] netlink: 4 bytes leftover after parsing attributes in process `+}[K'. [ 66.711233][ T8020] loop5: detected capacity change from 0 to 512 [ 66.717718][ T8022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1054'. [ 66.727836][ T8020] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 66.764549][ T8020] EXT4-fs (loop5): 1 truncate cleaned up [ 66.773656][ T8020] EXT4-fs mount: 37 callbacks suppressed [ 66.773676][ T8020] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.827991][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.850444][ T8039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1060'. [ 66.931997][ T8056] loop1: detected capacity change from 0 to 512 [ 66.957364][ T8063] IPVS: Scheduler module ip_vs_ not found [ 67.015082][ T8056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.032328][ T8074] loop4: detected capacity change from 0 to 512 [ 67.054362][ T8074] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.077904][ T8056] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm gtp: invalid indirect mapped block 4294967295 (level 0) [ 67.092701][ T8074] EXT4-fs (loop4): 1 truncate cleaned up [ 67.098715][ T8056] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm gtp: invalid indirect mapped block 4294967295 (level 1) [ 67.103083][ T8074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.172304][ T8056] EXT4-fs (loop1): 1 orphan inode deleted [ 67.178180][ T8056] EXT4-fs (loop1): 1 truncate cleaned up [ 67.187002][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.194681][ T8056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.196323][ T8088] netlink: 'syz.2.1075': attribute type 21 has an invalid length. [ 67.215004][ T8056] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 67.254389][ T8088] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1075'. [ 67.263550][ T8088] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1075'. [ 67.280480][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.323302][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1079'. [ 67.378256][ T8108] loop1: detected capacity change from 0 to 256 [ 67.543429][ T8148] IPv6: Can't replace route, no match found [ 67.566357][ T8150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 67.613983][ T8156] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 67.672866][ T8166] loop4: detected capacity change from 0 to 512 [ 67.682924][ T8166] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 67.712598][ T8166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.729288][ T8166] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #2: block 18: comm syz.4.1102: lblock 23 mapped to illegal pblock 18 (length 1) [ 67.757491][ T8181] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.783600][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.813553][ T8190] IPv6: Can't replace route, no match found [ 67.823093][ T8181] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.883186][ T8181] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.932307][ T8181] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.943518][ T8201] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.964909][ T8201] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.982599][ T8201] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.989444][ T8201] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.1111: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.003524][ T8201] EXT4-fs (loop2): 1 orphan inode deleted [ 68.009938][ T8201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.029707][ T1607] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.042437][ T5168] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.051487][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.054833][ T5168] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.072646][ T5173] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.498445][ T8231] netlink: 'syz.1.1118': attribute type 1 has an invalid length. [ 68.506431][ T8231] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1118'. [ 68.627742][ T8250] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 68.627765][ T8250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 68.627803][ T8250] System zones: 0-1, 15-15, 18-18, 34-34 [ 68.627980][ T8250] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.628023][ T8250] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 68.628051][ T8250] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 68.628784][ T8250] EXT4-fs (loop5): 1 truncate cleaned up [ 68.629434][ T8250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.716035][ T8250] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 68.724140][ T8250] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 68.749748][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.988561][ T8290] FAT-fs (loop5): Directory bread(block 64) failed [ 68.988586][ T8290] FAT-fs (loop5): Directory bread(block 65) failed [ 68.988609][ T8290] FAT-fs (loop5): Directory bread(block 66) failed [ 68.988626][ T8290] FAT-fs (loop5): Directory bread(block 67) failed [ 68.988751][ T8290] FAT-fs (loop5): Directory bread(block 68) failed [ 68.988770][ T8290] FAT-fs (loop5): Directory bread(block 69) failed [ 68.988792][ T8290] FAT-fs (loop5): Directory bread(block 70) failed [ 68.988808][ T8290] FAT-fs (loop5): Directory bread(block 71) failed [ 68.988830][ T8290] FAT-fs (loop5): Directory bread(block 72) failed [ 68.988905][ T8290] FAT-fs (loop5): Directory bread(block 73) failed [ 69.138911][ T8303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1139'. [ 69.196724][ T8308] EXT4-fs: Ignoring removed bh option [ 69.196779][ T8308] EXT4-fs: inline encryption not supported [ 69.197631][ T8308] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 69.221606][ T8308] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 69.223336][ T8308] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 2: comm syz.1.1140: lblock 2 mapped to illegal pblock 2 (length 1) [ 69.246165][ T8308] __quota_error: 141 callbacks suppressed [ 69.246190][ T8308] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 69.275136][ T8308] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 48: comm syz.1.1140: lblock 0 mapped to illegal pblock 48 (length 1) [ 69.275387][ T8308] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 69.275404][ T8308] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1140: Failed to acquire dquot type 0 [ 69.275589][ T8308] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 69.275690][ T8308] EXT4-fs error (device loop1): ext4_evict_inode:253: inode #11: comm syz.1.1140: mark_inode_dirty error [ 69.275866][ T8308] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 69.350209][ T29] audit: type=1400 audit(1765114174.067:1066): avc: denied { ioctl } for pid=8314 comm="syz.5.1143" path="socket:[15066]" dev="sockfs" ino=15066 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.383720][ T8308] EXT4-fs (loop1): 1 orphan inode deleted [ 69.384243][ T8308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.408616][ T1607] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.408992][ T1607] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 69.409014][ T1607] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 69.415255][ T29] audit: type=1400 audit(1765114174.157:1067): avc: denied { setopt } for pid=8318 comm="syz.0.1145" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.434785][ T29] audit: type=1400 audit(1765114174.177:1068): avc: denied { remount } for pid=8307 comm="syz.1.1140" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 69.435493][ T8308] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 69.453525][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.457817][ T29] audit: type=1326 audit(1765114174.197:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 69.459662][ T29] audit: type=1326 audit(1765114174.197:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 69.459713][ T29] audit: type=1326 audit(1765114174.207:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 69.459885][ T29] audit: type=1326 audit(1765114174.207:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8321 comm="syz.5.1147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 69.493844][ T8331] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 69.803862][ T8362] set_capacity_and_notify: 7 callbacks suppressed [ 69.803880][ T8362] loop2: detected capacity change from 0 to 512 [ 69.827058][ T8346] lo speed is unknown, defaulting to 1000 [ 69.839653][ T8362] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.852744][ T8362] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.885138][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.904498][ T8370] loop2: detected capacity change from 0 to 128 [ 69.929212][ T8346] lo speed is unknown, defaulting to 1000 [ 69.973795][ T8390] syz.2.1162: attempt to access beyond end of device [ 69.973795][ T8390] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 70.003437][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.003437][ T8390] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 70.017640][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.017640][ T8390] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 70.035645][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.035645][ T8390] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 70.053689][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.053689][ T8390] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 70.078068][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.078068][ T8390] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 70.091867][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.091867][ T8390] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 70.106954][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.106954][ T8390] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 70.139393][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.139393][ T8390] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 70.164123][ T8390] syz.2.1162: attempt to access beyond end of device [ 70.164123][ T8390] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 70.222625][ T8402] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 70.390467][ T8413] SELinux: failed to load policy [ 70.471480][ T8423] netlink: 'syz.1.1177': attribute type 1 has an invalid length. [ 70.479363][ T8423] netlink: 'syz.1.1177': attribute type 4 has an invalid length. [ 70.547092][ T8430] loop1: detected capacity change from 0 to 2048 [ 70.563807][ T8430] EXT4-fs (loop1): failed to initialize system zone (-117) [ 70.571589][ T8430] EXT4-fs (loop1): mount failed [ 70.654915][ T8457] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 70.665130][ T8449] IPVS: stopping backup sync thread 8457 ... [ 70.689909][ T8459] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 70.714766][ T8461] xt_HMARK: spi-set and port-set can't be combined [ 70.854808][ T8495] loop5: detected capacity change from 0 to 128 [ 70.863428][ T8495] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 70.914411][ T8483] lo speed is unknown, defaulting to 1000 [ 70.920615][ T8503] loop5: detected capacity change from 0 to 1024 [ 70.935693][ T8503] EXT4-fs: Ignoring removed bh option [ 70.947840][ T8503] EXT4-fs: inline encryption not supported [ 70.960834][ T8503] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.980940][ T8503] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 71.012204][ T8483] lo speed is unknown, defaulting to 1000 [ 71.037357][ T8503] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 2: comm syz.5.1202: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.052563][ T8503] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 48: comm syz.5.1202: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.067537][ T8503] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.1202: Failed to acquire dquot type 0 [ 71.079494][ T8503] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 71.089288][ T8503] EXT4-fs error (device loop5): ext4_evict_inode:253: inode #11: comm syz.5.1202: mark_inode_dirty error [ 71.101091][ T8503] EXT4-fs warning (device loop5): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 71.111516][ T1607] nci: nci_ntf_packet: unsupported ntf opcode 0xf2e [ 71.111529][ T8503] EXT4-fs (loop5): 1 orphan inode deleted [ 71.111914][ T8503] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.136668][ T1607] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.155007][ T1607] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 71.171625][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.181244][ T5795] EXT4-fs error (device loop5): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 71.194621][ T5795] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 71.210275][ T5795] EXT4-fs error (device loop5): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 71.344027][ T8559] SELinux: failed to load policy [ 71.591059][ T8572] loop0: detected capacity change from 0 to 512 [ 71.597619][ T8572] EXT4-fs: Ignoring removed mblk_io_submit option [ 71.605208][ T8572] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 71.613511][ T8572] EXT4-fs (loop0): orphan cleanup on readonly fs [ 71.619897][ T8572] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 71.628693][ T8572] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.1213: attempt to clear invalid blocks 2 len 1 [ 71.641858][ T8572] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1213: bg 0: block 456: padding at end of block bitmap is not set [ 71.656727][ T8572] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 71.665991][ T8572] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1213: invalid indirect mapped block 1819239214 (level 0) [ 71.680659][ T8572] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.1213: invalid indirect mapped block 1819239214 (level 1) [ 71.695728][ T8572] EXT4-fs (loop0): 1 truncate cleaned up [ 71.700471][ T8580] loop1: detected capacity change from 0 to 512 [ 71.702771][ T8572] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 71.720976][ T8580] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.737857][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.751165][ T8580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.764036][ T8580] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.781287][ T8580] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1216: corrupted inode contents [ 71.794089][ T8580] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #18: comm syz.1.1216: mark_inode_dirty error [ 71.806018][ T8580] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #18: comm syz.1.1216: corrupted inode contents [ 71.819917][ T8580] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #18: comm syz.1.1216: mark_inode_dirty error [ 71.834117][ T8580] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #18: comm syz.1.1216: mark inode dirty (error -117) [ 71.847184][ T8580] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 71.868569][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.967690][ T8609] loop2: detected capacity change from 0 to 2048 [ 71.982639][ T8614] loop4: detected capacity change from 0 to 256 [ 71.990678][ T8614] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.007284][ T8614] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 72.015956][ T8614] FAT-fs (loop4): Filesystem has been set read-only [ 72.016482][ T8610] loop1: detected capacity change from 0 to 8192 [ 72.030182][ T8609] EXT4-fs (loop2): failed to initialize system zone (-117) [ 72.037591][ T8609] EXT4-fs (loop2): mount failed [ 72.171989][ T8653] netlink: 'syz.4.1238': attribute type 29 has an invalid length. [ 72.205839][ T8656] netlink: 'syz.4.1239': attribute type 19 has an invalid length. [ 72.213766][ T8656] __nla_validate_parse: 3 callbacks suppressed [ 72.213781][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 72.237489][ T5173] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.246999][ T8656] netlink: 'syz.4.1239': attribute type 19 has an invalid length. [ 72.254915][ T8656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1239'. [ 72.270404][ T8658] EXT4-fs (loop5): failed to initialize system zone (-117) [ 72.271510][ T5173] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.285452][ T8658] EXT4-fs (loop5): mount failed [ 72.291966][ T5173] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.333420][ T5173] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.350098][ T8678] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.426518][ T8686] lo speed is unknown, defaulting to 1000 [ 72.468396][ T8686] lo speed is unknown, defaulting to 1000 [ 72.493437][ T8702] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 72.518072][ T8702] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 72.537324][ T8702] EXT4-fs (loop5): 1 truncate cleaned up [ 72.543859][ T8702] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.574242][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.704837][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 72.714559][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1254'. [ 72.877735][ T8731] lo speed is unknown, defaulting to 1000 [ 72.955425][ T8731] lo speed is unknown, defaulting to 1000 [ 73.051490][ T8766] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 73.140587][ T8781] dummy0: entered allmulticast mode [ 73.152495][ T8781] dummy0: left allmulticast mode [ 73.361959][ T8795] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.444237][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1273'. [ 73.604800][ T8812] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 73.775554][ T8837] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 73.897879][ T8824] lo speed is unknown, defaulting to 1000 [ 73.904164][ T8841] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 73.920326][ T8841] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 73.920672][ T8841] EXT4-fs (loop2): 1 truncate cleaned up [ 73.921054][ T8841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.110179][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.121871][ T8824] lo speed is unknown, defaulting to 1000 [ 74.482038][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 74.482054][ T29] audit: type=1326 audit(1765114179.227:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8886 comm="syz.2.1297" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c2353f749 code=0x0 [ 74.516611][ T8888] dummy0: entered allmulticast mode [ 74.526900][ T8888] dummy0: left allmulticast mode [ 74.567658][ T29] audit: type=1326 audit(1765114179.307:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8890 comm="syz.5.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.591358][ T29] audit: type=1326 audit(1765114179.307:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8890 comm="syz.5.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.637936][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 74.646993][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 74.683213][ T29] audit: type=1326 audit(1765114179.307:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8890 comm="syz.5.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.707049][ T29] audit: type=1326 audit(1765114179.307:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8890 comm="syz.5.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.730782][ T29] audit: type=1326 audit(1765114179.307:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8890 comm="syz.5.1298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.754295][ T29] audit: type=1326 audit(1765114179.407:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.778042][ T29] audit: type=1326 audit(1765114179.407:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.782554][ T5168] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.801645][ T29] audit: type=1326 audit(1765114179.407:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.810558][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 74.833564][ T29] audit: type=1326 audit(1765114179.407:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8894 comm="syz.5.1300" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5daf1ff749 code=0x7ffc0000 [ 74.842529][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 74.888860][ T5168] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.897179][ T5168] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.905516][ T5168] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.957848][ T8901] rdma_rxe: rxe_newlink: failed to add syz_tun [ 75.179440][ T8921] set_capacity_and_notify: 6 callbacks suppressed [ 75.179461][ T8921] loop0: detected capacity change from 0 to 512 [ 75.194249][ T8921] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 75.212131][ T8921] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.265307][ T8921] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.314611][ T8921] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.1311: corrupted inode contents [ 75.339766][ T8921] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #18: comm syz.0.1311: mark_inode_dirty error [ 75.371590][ T8921] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #18: comm syz.0.1311: corrupted inode contents [ 75.410802][ T8921] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #18: comm syz.0.1311: mark_inode_dirty error [ 75.427040][ T8921] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #18: comm syz.0.1311: mark inode dirty (error -117) [ 75.472049][ T8928] loop2: detected capacity change from 0 to 1024 [ 75.486752][ T8928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.496025][ T8921] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 75.533319][ T8928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.548204][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.587944][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.638386][ T8940] ªªªªªª: renamed from vlan0 (while UP) [ 75.653991][ T8942] IPVS: Error connecting to the multicast addr [ 75.768579][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 75.768964][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 75.979431][ T8964] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1325'. [ 76.160115][ T8978] netlink: 'syz.2.1329': attribute type 29 has an invalid length. [ 76.220089][ T8978] netlink: 'syz.2.1329': attribute type 29 has an invalid length. [ 76.629760][ T9004] Falling back ldisc for ttyS3. [ 76.689028][ T9009] netlink: 'syz.0.1341': attribute type 1 has an invalid length. [ 76.807548][ T9017] loop0: detected capacity change from 0 to 1024 [ 76.829667][ T9017] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.859564][ T9017] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.903936][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.948866][ T9029] loop0: detected capacity change from 0 to 512 [ 76.951350][ T9029] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.984962][ T9029] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 76.985287][ T9029] EXT4-fs (loop0): 1 truncate cleaned up [ 76.985820][ T9029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.055895][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.265483][ T9056] netlink: 'syz.1.1356': attribute type 21 has an invalid length. [ 77.273534][ T9056] __nla_validate_parse: 4 callbacks suppressed [ 77.273550][ T9056] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1356'. [ 77.322204][ T9056] netlink: 'syz.1.1356': attribute type 5 has an invalid length. [ 77.330193][ T9056] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1356'. [ 77.351210][ T9058] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 77.478098][ T9076] loop2: detected capacity change from 0 to 256 [ 77.485580][ T9076] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.579564][ T9086] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 77.586972][ T9086] vhci_hcd vhci_hcd.2: invalid port number 96 [ 77.593196][ T9086] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 77.649980][ T9090] ip6gre1: entered allmulticast mode [ 77.711018][ T9099] loop5: detected capacity change from 0 to 2048 [ 77.726525][ T9104] loop1: detected capacity change from 0 to 512 [ 77.740471][ T9104] EXT4-fs error (device loop1): ext4_quota_enable:7177: inode #4: comm syz.1.1374: iget: bogus i_mode (254) [ 77.752643][ T9104] EXT4-fs error (device loop1): ext4_quota_enable:7180: comm syz.1.1374: Bad quota inode: 4, type: 1 [ 77.765388][ T9104] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 77.780950][ T9099] loop5: p1 < > p4 [ 77.781392][ T9104] EXT4-fs (loop1): mount failed [ 77.785991][ T9099] loop5: p4 size 8388608 extends beyond EOD, truncated [ 77.911813][ T9144] SELinux: Context system_u:object_r:systemd_tmpfiles_exec_t:s0 is not valid (left unmapped). [ 77.985498][ T9156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1390'. [ 77.996652][ T9159] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 78.007892][ T9158] IPVS: stopping master sync thread 9159 ... [ 78.036205][ T9162] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1390'. [ 78.101311][ T9170] loop4: detected capacity change from 0 to 512 [ 78.109109][ T9170] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 78.120176][ T9166] loop1: detected capacity change from 0 to 8192 [ 78.120995][ T9170] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 78.141968][ T9170] EXT4-fs (loop4): 1 truncate cleaned up [ 78.161246][ T9170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.199977][ T5168] Bluetooth: hci0: Frame reassembly failed (-84) [ 78.209463][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.223479][ T5155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.233923][ T5155] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.273058][ T5155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.283619][ T5155] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.359480][ T9207] netlink: 'syz.0.1407': attribute type 29 has an invalid length. [ 78.379486][ T9207] netlink: 'syz.0.1407': attribute type 29 has an invalid length. [ 78.388331][ T9207] netlink: 500 bytes leftover after parsing attributes in process `syz.0.1407'. [ 78.401675][ T5155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.412149][ T5155] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.472051][ T5155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 78.482566][ T5155] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.500526][ T9225] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.516806][ T9198] lo speed is unknown, defaulting to 1000 [ 78.556522][ T5155] bridge_slave_1: left allmulticast mode [ 78.562396][ T5155] bridge_slave_1: left promiscuous mode [ 78.568066][ T5155] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.577919][ T5155] bridge_slave_0: left allmulticast mode [ 78.583673][ T5155] bridge_slave_0: left promiscuous mode [ 78.589479][ T5155] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.599121][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 78.608044][ T9242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1414'. [ 78.700970][ T5155] bond1 (unregistering): (slave lo): Releasing backup interface [ 78.709107][ T5155] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 78.721297][ T5155] bond1 (unregistering): Released all slaves [ 78.729200][ T9198] lo speed is unknown, defaulting to 1000 [ 78.729220][ T5427] lo speed is unknown, defaulting to 1000 [ 78.740853][ T5427] syz1: Port: 1 Link DOWN [ 78.748047][ T36] lo speed is unknown, defaulting to 1000 [ 78.820736][ T9198] chnl_net:caif_netlink_parms(): no params data found [ 78.927289][ T5155] hsr_slave_0: left promiscuous mode [ 78.938438][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 78.947813][ T5155] hsr_slave_1: left promiscuous mode [ 78.948041][ T9399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1423'. [ 78.962485][ T5155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.970057][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.973060][ T9401] loop0: detected capacity change from 0 to 512 [ 78.984653][ T5155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.984873][ T9401] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 78.992259][ T5155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.012782][ T5155] dummy0: left allmulticast mode [ 79.019260][ T9401] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.028737][ T5155] veth1_vlan: left promiscuous mode [ 79.037279][ T5155] veth0_vlan: left promiscuous mode [ 79.043897][ T9401] ext4 filesystem being mounted at /267/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 79.111173][ T5155] team0 (unregistering): Port device team_slave_1 removed [ 79.112297][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.128119][ T5155] team0 (unregistering): Port device team_slave_0 removed [ 79.167034][ T5150] smc: removing ib device syz1 [ 79.199555][ T9198] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.206669][ T9198] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.228422][ T9198] bridge_slave_0: entered allmulticast mode [ 79.236264][ T9432] EXT4-fs error (device loop0): ext4_quota_enable:7177: inode #4: comm syz.0.1437: iget: bogus i_mode (254) [ 79.236781][ T9198] bridge_slave_0: entered promiscuous mode [ 79.248378][ T9432] EXT4-fs error (device loop0): ext4_quota_enable:7180: comm syz.0.1437: Bad quota inode: 4, type: 1 [ 79.265121][ T9432] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 79.275589][ T9198] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.286972][ T9198] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.295008][ T9432] EXT4-fs (loop0): mount failed [ 79.301701][ T9198] bridge_slave_1: entered allmulticast mode [ 79.308897][ T9198] bridge_slave_1: entered promiscuous mode [ 79.326603][ T9437] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 79.377105][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1430'. [ 79.433437][ T9198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.442636][ T9408] lo speed is unknown, defaulting to 1000 [ 79.455272][ T9198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.492417][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 79.492435][ T29] audit: type=1400 audit(1765114184.237:1342): avc: denied { watch watch_reads } for pid=9491 comm="syz.5.1433" path="/169/file1" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.536915][ T29] audit: type=1400 audit(1765114184.247:1343): avc: denied { execute } for pid=9491 comm="syz.5.1433" name="file1" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.539481][ T9198] team0: Port device team_slave_0 added [ 79.559506][ T29] audit: type=1400 audit(1765114184.247:1344): avc: denied { execute_no_trans } for pid=9491 comm="syz.5.1433" path="/169/file1" dev="tmpfs" ino=888 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 79.577316][ T9198] team0: Port device team_slave_1 added [ 79.627990][ T29] audit: type=1400 audit(1765114184.357:1345): avc: denied { connect } for pid=9526 comm="syz.0.1436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 79.663345][ T9553] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 79.669996][ T9553] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 79.677954][ T9553] vhci_hcd vhci_hcd.0: Device attached [ 79.679882][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.686473][ T9553] 9pnet_fd: Insufficient options for proto=fd [ 79.690479][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.690507][ T9198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.701775][ T9554] vhci_hcd: connection closed [ 79.758628][ T5177] vhci_hcd vhci_hcd.0: stop threads [ 79.768661][ T5177] vhci_hcd vhci_hcd.0: release socket [ 79.769184][ T9198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.774051][ T5177] vhci_hcd vhci_hcd.0: disconnect device [ 79.786851][ T9198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.812933][ T9198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.859728][ T9198] hsr_slave_0: entered promiscuous mode [ 79.866277][ T9198] hsr_slave_1: entered promiscuous mode [ 79.872558][ T9198] debugfs: 'hsr0' already exists in 'hsr' [ 79.878303][ T9198] Cannot create hsr debugfs directory [ 79.969022][ T9198] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 79.977451][ T9198] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 79.986780][ T9198] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 79.996642][ T9198] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 80.031122][ T9198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.045580][ T9198] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.055815][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.063052][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.073892][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.081072][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.143093][ T9198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.244305][ T9198] veth0_vlan: entered promiscuous mode [ 80.248545][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 80.249986][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 80.259370][ T9198] veth1_vlan: entered promiscuous mode [ 80.284248][ T29] audit: type=1400 audit(1765114185.027:1346): avc: denied { mount } for pid=9684 comm="syz.5.1441" name="/" dev="ramfs" ino=17882 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 80.310260][ T9198] veth0_macvtap: entered promiscuous mode [ 80.336594][ T9690] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 80.337515][ T9198] veth1_macvtap: entered promiscuous mode [ 80.346404][ T9687] IPVS: stopping master sync thread 9690 ... [ 80.381527][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.397370][ T29] audit: type=1400 audit(1765114185.137:1347): avc: denied { map } for pid=9693 comm="syz.5.1444" path="socket:[18524]" dev="sockfs" ino=18524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.421076][ T29] audit: type=1400 audit(1765114185.137:1348): avc: denied { read accept } for pid=9693 comm="syz.5.1444" path="socket:[18524]" dev="sockfs" ino=18524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.460713][ T9198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.482652][ T5177] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.502997][ T5177] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.523190][ T5177] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.535923][ T5155] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.538827][ T29] audit: type=1400 audit(1765114185.257:1349): avc: denied { mounton } for pid=9198 comm="syz-executor" path="/root/syzkaller.wrecaV/syz-tmp" dev="sda1" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 80.570283][ T29] audit: type=1400 audit(1765114185.257:1350): avc: denied { mount } for pid=9198 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 80.592494][ T29] audit: type=1400 audit(1765114185.267:1351): avc: denied { mounton } for pid=9198 comm="syz-executor" path="/root/syzkaller.wrecaV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 80.641213][ T9708] netlink: 'syz.6.1403': attribute type 3 has an invalid length. [ 80.694657][ T9714] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 80.694657][ T9714] program syz.1.1453 not setting count and/or reply_len properly [ 80.718743][ T9718] xt_hashlimit: max too large, truncated to 1048576 [ 80.743271][ T9722] hub 9-0:1.0: USB hub found [ 80.743332][ T9718] No such timeout policy "syz1" [ 80.764460][ T9725] team0: Device gtp0 is of different type [ 80.772845][ T9722] hub 9-0:1.0: 8 ports detected [ 80.784843][ T9731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9731 comm=syz.6.1458 [ 80.797516][ T9731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9731 comm=syz.6.1458 [ 80.831628][ T9734] set_capacity_and_notify: 2 callbacks suppressed [ 80.831643][ T9734] loop6: detected capacity change from 0 to 512 [ 80.861123][ T9734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.873824][ T9734] ext4 filesystem being mounted at /3/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.897389][ T9734] EXT4-fs error (device loop6): ext4_empty_dir:3075: inode #12: comm syz.6.1459: invalid size [ 80.935903][ T9198] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.037913][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 81.045684][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.053318][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.060863][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.068278][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.075945][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.087790][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.095340][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.102783][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 81.110323][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 81.121015][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz1 [ 81.173950][ T9765] wireguard0: entered promiscuous mode [ 81.179524][ T9765] wireguard0: entered allmulticast mode [ 81.246040][ T9781] hub 9-0:1.0: USB hub found [ 81.251402][ T9781] hub 9-0:1.0: 8 ports detected [ 81.325226][ T9786] lo speed is unknown, defaulting to 1000 [ 81.869645][ T9883] netlink: 'syz.0.1488': attribute type 21 has an invalid length. [ 81.870798][ T9882] loop6: detected capacity change from 0 to 512 [ 81.877648][ T9883] netlink: 'syz.0.1488': attribute type 5 has an invalid length. [ 81.904773][ T9882] EXT4-fs error (device loop6): ext4_quota_enable:7177: inode #4: comm syz.6.1477: iget: bogus i_mode (254) [ 81.926204][ T9893] 9pnet_fd: Insufficient options for proto=fd [ 81.934321][ T9882] EXT4-fs error (device loop6): ext4_quota_enable:7180: comm syz.6.1477: Bad quota inode: 4, type: 1 [ 81.960899][ T9882] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 81.976214][ T9882] EXT4-fs (loop6): mount failed [ 82.576053][ T9963] hub 9-0:1.0: USB hub found [ 82.581556][ T9963] hub 9-0:1.0: 8 ports detected [ 82.704905][ T9966] loop0: detected capacity change from 0 to 128 [ 82.712327][ T9966] FAT-fs (loop0): Directory bread(block 414) failed [ 82.719212][ T9966] FAT-fs (loop0): Directory bread(block 415) failed [ 82.726019][ T9966] FAT-fs (loop0): Directory bread(block 416) failed [ 82.728982][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 82.732861][ T9966] FAT-fs (loop0): Directory bread(block 417) failed [ 82.745567][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.761486][ T9966] FAT-fs (loop0): Directory bread(block 418) failed [ 82.768302][ T9966] FAT-fs (loop0): Directory bread(block 419) failed [ 82.774999][ T9966] FAT-fs (loop0): Directory bread(block 420) failed [ 82.781775][ T9966] FAT-fs (loop0): Directory bread(block 421) failed [ 82.822853][ T9966] __nla_validate_parse: 4 callbacks suppressed [ 82.822873][ T9966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1502'. [ 82.915348][T10000] team0: Device gtp0 is of different type [ 83.052036][T10010] loop6: detected capacity change from 0 to 512 [ 83.059472][T10010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.080069][T10010] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.099242][T10010] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.214494][T10026] team0 (unregistering): Port device team_slave_0 removed [ 83.233079][T10026] team0 (unregistering): Port device team_slave_1 removed [ 83.246377][ T9198] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.265784][T10064] loop6: detected capacity change from 0 to 128 [ 83.273070][T10064] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.285590][T10064] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.316158][ T5147] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 83.402692][T10082] program syz.0.1512 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.574325][T10119] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1528'. [ 83.680246][T10140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10140 comm=syz.0.1536 [ 83.693101][T10140] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10140 comm=syz.0.1536 [ 83.880391][T10173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1547'. [ 83.992156][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119a83800: rx timeout, send abort [ 84.000451][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a5d6200: rx timeout, send abort [ 84.010549][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888119a83800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.025019][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a5d6200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 84.046032][T10194] loop4: detected capacity change from 0 to 512 [ 84.061331][T10194] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 84.075754][T10196] netlink: 'syz.5.1554': attribute type 3 has an invalid length. [ 84.131034][T10194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 84.154589][T10194] System zones: 1-12 [ 84.164416][T10194] EXT4-fs (loop4): 1 truncate cleaned up [ 84.170935][T10194] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.357565][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.375359][T10245] vlan2: entered allmulticast mode [ 84.439102][T10264] netlink: 444 bytes leftover after parsing attributes in process `syz.5.1583'. [ 84.449492][T10264] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1583'. [ 84.509477][T10274] geneve2: entered promiscuous mode [ 84.514820][T10274] geneve2: entered allmulticast mode [ 84.521989][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 84.522034][ T29] audit: type=1400 audit(1765114189.267:1476): avc: denied { connect } for pid=10270 comm="syz.0.1587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.550093][T10279] loop5: detected capacity change from 0 to 2048 [ 84.570467][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1590'. [ 84.570858][T10279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.579638][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1590'. [ 84.579657][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1590'. [ 84.579786][T10286] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1590'. [ 84.602413][T10279] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.638895][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1591'. [ 84.665202][T10279] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1588: bg 0: block 345: padding at end of block bitmap is not set [ 84.715364][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.728126][T10296] 9pnet_fd: Insufficient options for proto=fd [ 84.742188][T10292] loop0: detected capacity change from 0 to 128 [ 84.754423][T10302] loop5: detected capacity change from 0 to 1024 [ 84.768020][T10292] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 84.768970][T10298] bond1: entered promiscuous mode [ 84.776164][T10292] FAT-fs (loop0): Filesystem has been set read-only [ 84.781353][T10298] bond1: entered allmulticast mode [ 84.794067][T10298] 8021q: adding VLAN 0 to HW filter on device bond1 [ 84.803377][T10292] bio_check_eod: 101 callbacks suppressed [ 84.803471][T10292] syz.0.1592: attempt to access beyond end of device [ 84.803471][T10292] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 84.810547][ T29] audit: type=1326 audit(1765114189.557:1477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 84.825034][T10292] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 84.855400][T10292] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 84.863691][T10343] syz.0.1592: attempt to access beyond end of device [ 84.863691][T10343] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 84.865433][T10298] bond1 (unregistering): Released all slaves [ 84.877354][T10343] Buffer I/O error on dev loop0, logical block 2065, async page read [ 84.909505][T10302] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.914276][T10343] syz.0.1592: attempt to access beyond end of device [ 84.914276][T10343] loop0: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 84.935355][T10343] Buffer I/O error on dev loop0, logical block 2066, async page read [ 84.944746][ T29] audit: type=1326 audit(1765114189.597:1478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 84.950805][T10302] EXT4-fs warning (device loop5): ext4_rename_delete:3729: inode #12: comm syz.5.1594: Deleting old file: nlink 2, error=-2 [ 84.968682][ T29] audit: type=1326 audit(1765114189.597:1479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 85.005516][ T29] audit: type=1326 audit(1765114189.597:1480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 85.029425][ T29] audit: type=1326 audit(1765114189.597:1481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 85.053273][ T29] audit: type=1326 audit(1765114189.597:1482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 85.053403][T10343] syz.0.1592: attempt to access beyond end of device [ 85.053403][T10343] loop0: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 85.077185][ T29] audit: type=1326 audit(1765114189.597:1483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 85.090575][T10343] Buffer I/O error on dev loop0, logical block 2067, async page read [ 85.114205][ T29] audit: type=1326 audit(1765114189.607:1484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 85.145955][ T29] audit: type=1326 audit(1765114189.607:1485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10340 comm="syz.4.1598" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ebe61f749 code=0x7ffc0000 [ 85.174685][T10343] syz.0.1592: attempt to access beyond end of device [ 85.174685][T10343] loop0: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 85.174760][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.187995][T10343] Buffer I/O error on dev loop0, logical block 2068, async page read [ 85.205464][T10343] syz.0.1592: attempt to access beyond end of device [ 85.205464][T10343] loop0: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 85.218789][T10343] Buffer I/O error on dev loop0, logical block 2069, async page read [ 85.251222][T10343] syz.0.1592: attempt to access beyond end of device [ 85.251222][T10343] loop0: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 85.264733][T10343] Buffer I/O error on dev loop0, logical block 2070, async page read [ 85.268995][T10383] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 85.273314][T10343] syz.0.1592: attempt to access beyond end of device [ 85.273314][T10343] loop0: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 85.296081][T10343] Buffer I/O error on dev loop0, logical block 2071, async page read [ 85.304401][T10343] syz.0.1592: attempt to access beyond end of device [ 85.304401][T10343] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 85.317817][T10343] Buffer I/O error on dev loop0, logical block 2072, async page read [ 85.326068][T10292] syz.0.1592: attempt to access beyond end of device [ 85.326068][T10292] loop0: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 85.331049][T10392] loop6: detected capacity change from 0 to 512 [ 85.339499][T10292] Buffer I/O error on dev loop0, logical block 2065, async page read [ 85.346627][T10392] EXT4-fs: Ignoring removed bh option [ 85.372093][T10292] Buffer I/O error on dev loop0, logical block 2066, async page read [ 85.382071][T10392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.400390][T10392] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.569086][T10409] infiniband syz!: set active [ 85.573991][T10409] infiniband syz!: added team_slave_0 [ 85.604458][ T9198] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.614306][T10409] RDS/IB: syz!: added [ 85.629011][T10409] smc: adding ib device syz! with port count 1 [ 85.637168][T10409] smc: ib device syz! port 1 has no pnetid [ 85.680566][T10427] netlink: 'syz.6.1611': attribute type 39 has an invalid length. [ 86.041835][T10474] vlan2: entered allmulticast mode [ 86.161126][T10493] bridge0: entered promiscuous mode [ 86.213680][T10506] loop5: detected capacity change from 0 to 128 [ 86.231734][T10514] loop4: detected capacity change from 0 to 2048 [ 86.255865][T10514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.277314][T10514] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.301964][T10525] loop0: detected capacity change from 0 to 512 [ 86.313256][T10514] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1641: bg 0: block 345: padding at end of block bitmap is not set [ 86.313791][T10525] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1644: invalid block [ 86.340972][T10525] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1644: invalid indirect mapped block 4294967295 (level 1) [ 86.355691][T10525] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1644: invalid indirect mapped block 4294967295 (level 1) [ 86.370911][T10525] EXT4-fs (loop0): 2 truncates cleaned up [ 86.371116][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.377366][T10525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.390354][T10527] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 86.406378][T10527] vhci_hcd vhci_hcd.2: invalid port number 96 [ 86.412551][T10527] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 86.498476][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.515094][T10544] loop5: detected capacity change from 0 to 2048 [ 86.531838][T10544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.559884][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.852681][T10608] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.901291][T10614] netlink: 'syz.4.1678': attribute type 3 has an invalid length. [ 86.921025][T10614] netlink: 'syz.4.1678': attribute type 3 has an invalid length. [ 86.984291][T10622] Unsupported ieee802154 address type: 0 [ 87.130891][ T36] hid_parser_main: 19 callbacks suppressed [ 87.130913][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.138330][T10640] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.144353][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.159257][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.171712][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.179282][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.187009][T10640] vhci_hcd vhci_hcd.2: invalid port number 96 [ 87.187029][T10640] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 87.193194][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.208770][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.216191][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.223782][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.231199][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 87.240317][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 87.340024][T10669] wireguard0: entered promiscuous mode [ 87.345601][T10669] wireguard0: entered allmulticast mode [ 87.404718][T10682] loop1: detected capacity change from 0 to 256 [ 87.426587][T10682] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 87.435467][T10682] FAT-fs (loop1): Filesystem has been set read-only [ 87.447417][T10682] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 87.459919][T10687] loop6: detected capacity change from 0 to 512 [ 87.467167][T10687] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.511762][T10687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=200ec018, mo2=0002] [ 87.520942][T10687] System zones: 1-12 [ 87.525282][T10687] EXT4-fs (loop6): 1 truncate cleaned up [ 87.532491][T10687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.548849][T10698] loop1: detected capacity change from 0 to 1024 [ 87.559844][T10648] loop4: detected capacity change from 0 to 32768 [ 87.599903][T10698] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.613004][T10648] loop4: p1 p3 < > [ 87.623841][ T9198] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.645606][T10698] EXT4-fs warning (device loop1): ext4_rename_delete:3729: inode #12: comm syz.1.1707: Deleting old file: nlink 2, error=-2 [ 87.692712][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.141181][T10759] __nla_validate_parse: 7 callbacks suppressed [ 88.141202][T10759] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1724'. [ 88.156586][T10759] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1724'. [ 88.271419][T10763] bond1: entered promiscuous mode [ 88.276505][T10763] bond1: entered allmulticast mode [ 88.364509][T10763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.386770][T10763] bond1 (unregistering): Released all slaves [ 88.786358][T10867] netlink: 'syz.5.1742': attribute type 39 has an invalid length. [ 88.820926][T10867] syz_tun (unregistering): left allmulticast mode [ 88.979836][T10865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.014993][T10865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.069883][T10887] loop5: detected capacity change from 0 to 2048 [ 89.097986][T10887] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.125564][T10887] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.164769][T10887] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1752: bg 0: block 345: padding at end of block bitmap is not set [ 89.252371][ T5795] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.348906][T10918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10918 comm=syz.5.1762 [ 89.348964][T10918] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10918 comm=syz.5.1762 [ 89.422036][T10925] netlink: 'syz.0.1763': attribute type 39 has an invalid length. [ 89.528682][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 89.528711][ T29] audit: type=1400 audit(1765114194.277:1596): avc: denied { getattr } for pid=10932 comm="syz.1.1766" name="/" dev="secretmem" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 89.529499][ T29] audit: type=1326 audit(1765114194.277:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddccaf749 code=0x7ffc0000 [ 89.529718][ T29] audit: type=1326 audit(1765114194.277:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10932 comm="syz.1.1766" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feddccaf749 code=0x7ffc0000 [ 89.703046][T10949] loop6: detected capacity change from 0 to 128 [ 89.713397][T10949] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 89.713425][T10949] FAT-fs (loop6): Filesystem has been set read-only [ 89.713503][T10949] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 89.713521][T10949] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 89.808595][T10949] bio_check_eod: 16839 callbacks suppressed [ 89.808614][T10949] syz.6.1773: attempt to access beyond end of device [ 89.808614][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.808822][T10949] syz.6.1773: attempt to access beyond end of device [ 89.808822][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.808865][T10949] syz.6.1773: attempt to access beyond end of device [ 89.808865][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.808906][T10949] syz.6.1773: attempt to access beyond end of device [ 89.808906][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.808954][T10949] syz.6.1773: attempt to access beyond end of device [ 89.808954][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.918561][T10949] syz.6.1773: attempt to access beyond end of device [ 89.918561][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.918636][T10949] syz.6.1773: attempt to access beyond end of device [ 89.918636][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.918678][T10949] syz.6.1773: attempt to access beyond end of device [ 89.918678][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.918799][T10949] syz.6.1773: attempt to access beyond end of device [ 89.918799][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 89.918837][T10949] syz.6.1773: attempt to access beyond end of device [ 89.918837][T10949] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 90.267171][T10981] FAT-fs (loop1): Directory bread(block 162) failed [ 90.289525][T10981] FAT-fs (loop1): Directory bread(block 163) failed [ 90.289583][T10981] FAT-fs (loop1): Directory bread(block 164) failed [ 90.289603][T10981] FAT-fs (loop1): Directory bread(block 165) failed [ 90.289620][T10981] FAT-fs (loop1): Directory bread(block 166) failed [ 90.289637][T10981] FAT-fs (loop1): Directory bread(block 167) failed [ 90.289655][T10981] FAT-fs (loop1): Directory bread(block 168) failed [ 90.289677][T10981] FAT-fs (loop1): Directory bread(block 169) failed [ 90.297944][T10981] FAT-fs (loop1): Directory bread(block 162) failed [ 90.297993][T10981] FAT-fs (loop1): Directory bread(block 163) failed [ 90.330390][T10985] Falling back ldisc for ttyS3. [ 90.507053][T11003] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 90.601876][T11013] sd 0:0:1:0: device reset [ 90.691941][T11029] netlink: 'syz.6.1793': attribute type 1 has an invalid length. [ 90.700055][T11029] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1793'. [ 90.715517][T11026] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 90.723483][T11026] FAT-fs (loop5): Filesystem has been set read-only [ 90.730597][T11026] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 90.738590][T11026] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 90.782119][T11051] buffer_io_error: 15486 callbacks suppressed [ 90.782136][T11051] Buffer I/O error on dev loop5, logical block 2065, async page read [ 90.836846][ T29] audit: type=1326 audit(1765114195.577:1599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc483f749 code=0x7ffc0000 [ 90.928793][T11051] Buffer I/O error on dev loop5, logical block 2066, async page read [ 90.940755][ T29] audit: type=1326 audit(1765114195.607:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f5fc483f749 code=0x7ffc0000 [ 90.964316][ T29] audit: type=1326 audit(1765114195.607:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fc483f749 code=0x7ffc0000 [ 91.004785][T11051] Buffer I/O error on dev loop5, logical block 2067, async page read [ 91.027462][ T29] audit: type=1400 audit(1765114195.767:1602): avc: denied { mount } for pid=11064 comm="syz.6.1804" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 91.042201][T11051] Buffer I/O error on dev loop5, logical block 2068, async page read [ 91.050522][ T29] audit: type=1400 audit(1765114195.767:1603): avc: denied { search } for pid=11064 comm="syz.6.1804" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.081236][ T29] audit: type=1400 audit(1765114195.767:1604): avc: denied { search } for pid=11064 comm="syz.6.1804" name="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.083344][T11051] Buffer I/O error on dev loop5, logical block 2069, async page read [ 91.103769][ T29] audit: type=1400 audit(1765114195.767:1605): avc: denied { read open } for pid=11064 comm="syz.6.1804" path="/" dev="configfs" ino=2121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 91.147801][T11051] Buffer I/O error on dev loop5, logical block 2070, async page read [ 91.156906][T11051] Buffer I/O error on dev loop5, logical block 2071, async page read [ 91.190895][T11051] Buffer I/O error on dev loop5, logical block 2072, async page read [ 91.218948][T11026] Buffer I/O error on dev loop5, logical block 2065, async page read [ 91.248386][T11026] Buffer I/O error on dev loop5, logical block 2066, async page read [ 91.338151][T11075] set_capacity_and_notify: 2 callbacks suppressed [ 91.338170][T11075] loop1: detected capacity change from 0 to 128 [ 91.388088][T11075] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.396094][T11075] FAT-fs (loop1): Filesystem has been set read-only [ 91.436155][T11075] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.444108][T11075] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 91.645685][T11093] pimreg: entered allmulticast mode [ 91.669314][T11093] pimreg: left allmulticast mode [ 91.893020][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1828'. [ 92.409689][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1835'. [ 92.419482][T11153] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1835'. [ 92.559913][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 92.569443][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1839'. [ 92.578571][T11163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1839'. [ 92.600497][T11163] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1839'. [ 92.609610][T11163] netlink: 'syz.0.1839': attribute type 6 has an invalid length. [ 92.622506][T11167] team0: Device gtp0 is of different type [ 92.664828][T11179] netlink: 'syz.1.1844': attribute type 7 has an invalid length. [ 92.710172][T11187] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 92.710172][T11187] program syz.1.1857 not setting count and/or reply_len properly [ 92.728678][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 92.729392][T11186] sd 0:0:1:0: device reset [ 92.739565][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 93.323921][T11232] loop6: detected capacity change from 0 to 2048 [ 93.368952][T11232] loop6: p1 < > p4 [ 93.373696][T11232] loop6: p4 size 8388608 extends beyond EOD, truncated [ 93.507831][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1869'. [ 93.516949][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1869'. [ 93.526042][T11251] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1869'. [ 93.552226][T11251] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1869'. [ 93.561319][T11251] netlink: 'syz.6.1869': attribute type 6 has an invalid length. [ 93.652396][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1873'. [ 93.661506][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1873'. [ 93.670728][T11263] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1873'. [ 93.700168][T11268] loop5: detected capacity change from 0 to 512 [ 93.718411][T11268] EXT4-fs: dax option not supported [ 93.774135][T11275] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.811830][T11275] bridge0: port 3(bond1) entered blocking state [ 93.818175][T11275] bridge0: port 3(bond1) entered disabled state [ 93.871047][T11275] bond1: entered allmulticast mode [ 93.882860][T11313] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1877'. [ 93.900291][T11275] bond1: entered promiscuous mode [ 93.912778][T11275] bridge0: port 3(bond1) entered blocking state [ 93.919135][T11275] bridge0: port 3(bond1) entered forwarding state [ 93.923283][T11315] loop6: detected capacity change from 0 to 1024 [ 93.949215][T11315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 93.959243][ T5124] bridge0: port 3(bond1) entered disabled state [ 93.980804][T11315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6841c01c, mo2=0003] [ 94.011697][T11315] System zones: 0-1, 3-36 [ 94.029737][T11315] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.115086][ T9198] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.205307][T11335] loop4: detected capacity change from 0 to 8192 [ 94.265094][T11350] loop1: detected capacity change from 0 to 1024 [ 94.282300][T11350] EXT4-fs: inline encryption not supported [ 94.358055][T11350] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 94.422525][T11377] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1898'. [ 94.442621][T11350] System zones: 0-1, 3-12 [ 94.528938][T11350] loop1: detected capacity change from 1024 to 64 [ 94.585480][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 94.585533][ T29] audit: type=1400 audit(1765114199.327:1748): avc: denied { create } for pid=11393 comm="syz.4.1904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.611850][ T29] audit: type=1400 audit(1765114199.327:1749): avc: denied { ioctl } for pid=11393 comm="syz.4.1904" path="socket:[21322]" dev="sockfs" ino=21322 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 94.612300][ T3314] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /366/file1: bad entry in directory: directory entry overrun - offset=0, inode=17104912, rec_len=158052, size=1024 fake=0 [ 94.673596][T11404] loop5: detected capacity change from 0 to 256 [ 94.724303][ T29] audit: type=1400 audit(1765114199.457:1750): avc: denied { audit_write } for pid=11408 comm="syz.6.1910" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 94.745932][ T29] audit: type=1107 audit(1765114199.457:1751): pid=11408 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 94.781857][ T29] audit: type=1400 audit(1765114199.517:1752): avc: denied { read } for pid=11399 comm="syz.0.1907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.818360][ T29] audit: type=1400 audit(1765114199.557:1753): avc: denied { ioctl } for pid=11415 comm="syz.4.1912" path="socket:[21347]" dev="sockfs" ino=21347 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.860184][T11411] lo speed is unknown, defaulting to 1000 [ 94.975197][T11359] bio_check_eod: 58575 callbacks suppressed [ 94.975219][T11359] kmmpd-loop1: attempt to access beyond end of device [ 94.975219][T11359] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 95.004854][ T29] audit: type=1400 audit(1765114199.647:1754): avc: denied { write } for pid=11415 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.024668][ T29] audit: type=1400 audit(1765114199.717:1755): avc: denied { bind } for pid=11415 comm="syz.4.1912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.055628][ T29] audit: type=1400 audit(1765114199.787:1756): avc: denied { read write } for pid=11437 comm="syz.6.1913" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 95.080406][ T29] audit: type=1400 audit(1765114199.787:1757): avc: denied { open } for pid=11437 comm="syz.6.1913" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 95.111691][T11443] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 95.310623][T11460] loop4: detected capacity change from 0 to 128 [ 95.324474][T11460] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 95.332424][T11460] FAT-fs (loop4): Filesystem has been set read-only [ 95.339404][T11460] syz.4.1920: attempt to access beyond end of device [ 95.339404][T11460] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 95.354404][T11460] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 95.362449][T11460] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 95.370948][T11460] syz.4.1920: attempt to access beyond end of device [ 95.370948][T11460] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.385801][T11460] syz.4.1920: attempt to access beyond end of device [ 95.385801][T11460] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 95.399297][T11465] syz.4.1920: attempt to access beyond end of device [ 95.399297][T11465] loop4: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 95.412952][T11465] syz.4.1920: attempt to access beyond end of device [ 95.412952][T11465] loop4: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 95.426464][T11465] syz.4.1920: attempt to access beyond end of device [ 95.426464][T11465] loop4: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 95.448076][T11465] syz.4.1920: attempt to access beyond end of device [ 95.448076][T11465] loop4: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 95.463609][T11465] syz.4.1920: attempt to access beyond end of device [ 95.463609][T11465] loop4: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 95.477037][T11465] syz.4.1920: attempt to access beyond end of device [ 95.477037][T11465] loop4: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 95.601588][T11466] lo speed is unknown, defaulting to 1000 [ 95.773948][T11466] chnl_net:caif_netlink_parms(): no params data found [ 95.789553][T11460] buffer_io_error: 36651 callbacks suppressed [ 95.789624][T11460] Buffer I/O error on dev loop4, logical block 2069, async page read [ 95.805399][T11460] Buffer I/O error on dev loop4, logical block 2070, async page read [ 95.813785][T11460] Buffer I/O error on dev loop4, logical block 2071, async page read [ 95.822669][T11460] Buffer I/O error on dev loop4, logical block 2072, async page read [ 95.831695][T11460] Buffer I/O error on dev loop4, logical block 2065, async page read [ 95.840820][T11466] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.848105][T11466] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.853100][T11460] Buffer I/O error on dev loop4, logical block 2066, async page read [ 95.855775][T11466] bridge_slave_0: entered allmulticast mode [ 95.870799][T11466] bridge_slave_0: entered promiscuous mode [ 95.878384][T11466] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.885815][T11466] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.893521][T11466] bridge_slave_1: entered allmulticast mode [ 95.894010][T11460] Buffer I/O error on dev loop4, logical block 2067, async page read [ 95.900954][T11466] bridge_slave_1: entered promiscuous mode [ 95.921155][T11460] Buffer I/O error on dev loop4, logical block 2068, async page read [ 95.942414][T11466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.951008][T11460] Buffer I/O error on dev loop4, logical block 2069, async page read [ 95.953590][T11466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.960078][T11460] Buffer I/O error on dev loop4, logical block 2070, async page read [ 95.990340][T11466] team0: Port device team_slave_0 added [ 95.997608][T11466] team0: Port device team_slave_1 added [ 96.023606][T11466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.030670][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.056802][T11466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.079335][T11466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.086428][T11466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.112578][T11466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.152760][T11466] hsr_slave_0: entered promiscuous mode [ 96.159349][T11466] hsr_slave_1: entered promiscuous mode [ 96.165535][T11466] debugfs: 'hsr0' already exists in 'hsr' [ 96.171360][T11466] Cannot create hsr debugfs directory [ 96.286354][T11466] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 96.295897][T11466] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 96.304680][T11466] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 96.314684][T11466] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 96.349182][T11832] sctp: [Deprecated]: syz.4.1934 (pid 11832) Use of struct sctp_assoc_value in delayed_ack socket option. [ 96.349182][T11832] Use struct sctp_sack_info instead [ 96.351702][T11466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.379118][T11466] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.389126][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.396265][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.407751][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.414944][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.482515][T11466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.586857][T11466] veth0_vlan: entered promiscuous mode [ 96.594825][T11466] veth1_vlan: entered promiscuous mode [ 96.610531][T11466] veth0_macvtap: entered promiscuous mode [ 96.618257][T11466] veth1_macvtap: entered promiscuous mode [ 96.630147][T11466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.641346][T11466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.653356][ T5175] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.662757][ T5175] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.673670][ T5175] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.683522][ T5175] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052154][T11858] loop7: detected capacity change from 0 to 128 [ 97.061861][T11858] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 97.069850][T11858] FAT-fs (loop7): Filesystem has been set read-only [ 97.077189][T11858] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 97.085188][T11858] FAT-fs (loop7): error, invalid access to FAT (entry 0x00000100) [ 97.169329][T11870] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1940'. [ 97.208533][ T3512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.265769][T11878] netlink: 'syz.4.1943': attribute type 13 has an invalid length. [ 97.796618][T11910] loop6: detected capacity change from 0 to 1024 [ 97.805702][T11910] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 97.816773][T11910] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 97.828407][T11910] JBD2: no valid journal superblock found [ 97.834502][T11910] EXT4-fs (loop6): Could not load journal inode [ 97.853853][T11910] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 98.013451][T11923] lo speed is unknown, defaulting to 1000 [ 98.066485][T11946] netlink: zone id is out of range [ 98.071728][T11946] netlink: zone id is out of range [ 98.077267][T11946] netlink: zone id is out of range [ 98.098146][T11946] netlink: set zone limit has 8 unknown bytes [ 98.147863][T11966] loop6: detected capacity change from 0 to 512 [ 98.157181][T11966] EXT4-fs: Ignoring removed bh option [ 98.180301][T11966] EXT4-fs mount: 2 callbacks suppressed [ 98.180321][T11966] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.199066][T11966] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.224221][ T9198] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.344208][T11994] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 98.584846][T12009] Cannot find add_set index 0 as target [ 98.741826][T12018] rdma_op ffff88811a383980 conn xmit_rdma 0000000000000000 [ 98.931335][T12039] __nla_validate_parse: 4 callbacks suppressed [ 98.931352][T12039] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1995'. [ 99.167071][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2003'. [ 99.176126][T12062] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2003'. [ 99.227086][T12063] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2003'. [ 99.236137][T12063] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2003'. [ 99.366031][T12000] ================================================================== [ 99.374185][T12000] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 99.382827][T12000] [ 99.385162][T12000] write to 0xffff888104c7a3a8 of 8 bytes by task 11987 on cpu 0: [ 99.392877][T12000] shmem_file_splice_read+0x470/0x600 [ 99.398446][T12000] splice_direct_to_actor+0x26f/0x680 [ 99.403825][T12000] do_splice_direct+0xda/0x150 [ 99.408603][T12000] do_sendfile+0x380/0x650 [ 99.413026][T12000] __x64_sys_sendfile64+0x105/0x150 [ 99.418284][T12000] x64_sys_call+0x2db1/0x3000 [ 99.423053][T12000] do_syscall_64+0xd8/0x2a0 [ 99.427685][T12000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.433666][T12000] [ 99.435987][T12000] write to 0xffff888104c7a3a8 of 8 bytes by task 12000 on cpu 1: [ 99.443964][T12000] shmem_file_splice_read+0x470/0x600 [ 99.449349][T12000] splice_direct_to_actor+0x26f/0x680 [ 99.454742][T12000] do_splice_direct+0xda/0x150 [ 99.459680][T12000] do_sendfile+0x380/0x650 [ 99.464155][T12000] __x64_sys_sendfile64+0x105/0x150 [ 99.469616][T12000] x64_sys_call+0x2db1/0x3000 [ 99.474331][T12000] do_syscall_64+0xd8/0x2a0 [ 99.478878][T12000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.484786][T12000] [ 99.487130][T12000] value changed: 0x0000000000006204 -> 0x0000000000006206 [ 99.494237][T12000] [ 99.496557][T12000] Reported by Kernel Concurrency Sanitizer on: [ 99.502708][T12000] CPU: 1 UID: 0 PID: 12000 Comm: syz.0.1975 Tainted: G W syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 99.514354][T12000] Tainted: [W]=WARN [ 99.518359][T12000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 99.528414][T12000] ================================================================== [ 99.610074][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 99.610092][ T29] audit: type=1400 audit(1765114204.357:1931): avc: denied { mounton } for pid=12064 comm="syz.7.2004" path="/proc/32/task" dev="proc" ino=22438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.740141][ T5191] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.790121][ T5191] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.839712][ T5191] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.889657][ T5191] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 99.963714][ T5191] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.051424][ T5191] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.101177][ T5191] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.141595][ T5191] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.223414][ T5191] bridge_slave_1: left allmulticast mode [ 100.229108][ T5191] bridge_slave_1: left promiscuous mode [ 100.234736][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.242429][ T5191] bridge_slave_0: left promiscuous mode [ 100.248197][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.256516][ T5191] bridge_slave_1: left allmulticast mode [ 100.262348][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.270230][ T5191] bridge_slave_0: left allmulticast mode [ 100.275935][ T5191] bridge_slave_0: left promiscuous mode [ 100.281630][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.421235][ T5191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.431316][ T5191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.440994][ T5191] bond0 (unregistering): Released all slaves [ 100.569465][ T5191] hsr_slave_0: left promiscuous mode [ 100.575235][ T5191] hsr_slave_1: left promiscuous mode [ 100.582992][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.590976][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.598983][ T5191] batman_adv: batadv0: Interface deactivated: dummy0 [ 100.605786][ T5191] batman_adv: batadv0: Removing interface: dummy0 [ 100.614019][ T5191] hsr_slave_0: left promiscuous mode [ 100.619630][ T5191] hsr_slave_1: left promiscuous mode [ 100.625245][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.632737][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.640341][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.647715][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.662208][ T5191] veth1_macvtap: left promiscuous mode [ 100.667803][ T5191] veth0_macvtap: left promiscuous mode [ 100.673463][ T5191] veth1_vlan: left promiscuous mode [ 100.678819][ T5191] veth0_vlan: left promiscuous mode [ 100.740521][ T5133] smc: removing ib device !yz! [ 100.785469][ T5191] team0 (unregistering): Port device team_slave_1 removed [ 100.795855][ T5191] team0 (unregistering): Port device team_slave_0 removed [ 101.342627][ T5191] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.391326][ T5191] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.460873][ T5191] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.501102][ T5191] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.554869][ T5191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.565515][ T5191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.621643][ T5191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.631963][ T5191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.681263][ T5191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.691671][ T5191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.741298][ T5191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.751601][ T5191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.812678][ T5191] bridge_slave_1: left allmulticast mode [ 101.818400][ T5191] bridge_slave_1: left promiscuous mode [ 101.824250][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.832415][ T5191] bridge_slave_0: left allmulticast mode [ 101.838067][ T5191] bridge_slave_0: left promiscuous mode [ 101.843763][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.852334][ T5191] bridge_slave_1: left allmulticast mode [ 101.858054][ T5191] bridge_slave_1: left promiscuous mode [ 101.863813][ T5191] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.871897][ T5191] bridge_slave_0: left allmulticast mode [ 101.877530][ T5191] bridge_slave_0: left promiscuous mode [ 101.883284][ T5191] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.010771][ T5191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.020852][ T5191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.030399][ T5191] bond0 (unregistering): Released all slaves [ 102.180519][ T5191] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.190435][ T5191] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.199886][ T5191] bond0 (unregistering): Released all slaves [ 102.303812][ T5191] hsr_slave_0: left promiscuous mode [ 102.309705][ T5191] hsr_slave_1: left promiscuous mode [ 102.315565][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.323107][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.331093][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.338674][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.347267][ T5191] hsr_slave_0: left promiscuous mode [ 102.352956][ T5191] hsr_slave_1: left promiscuous mode [ 102.358686][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.366318][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.374157][ T5191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.381715][ T5191] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.393224][ T5191] veth1_macvtap: left promiscuous mode [ 102.398815][ T5191] veth0_macvtap: left promiscuous mode [ 102.404348][ T5191] veth1_vlan: left promiscuous mode [ 102.409613][ T5191] veth0_vlan: left promiscuous mode [ 102.415381][ T5191] veth1_vlan: left promiscuous mode [ 102.420662][ T5191] veth0_vlan: left promiscuous mode [ 102.511981][ T5191] team0 (unregistering): Port device team_slave_1 removed [ 102.521882][ T5191] team0 (unregistering): Port device team_slave_0 removed [ 102.568250][ T5191] team0 (unregistering): Port device team_slave_1 removed [ 102.577846][ T5191] team0 (unregistering): Port device team_slave_0 removed [ 102.585566][ T5123] smc: removing ib device syz!