last executing test programs: 4.097041574s ago: executing program 1 (id=1203): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) r2 = syz_io_uring_setup(0x1d22, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x1) io_uring_enter(r2, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 3.898522457s ago: executing program 0 (id=1204): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x3000c81c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x7, 0x6}, 0x1004, 0x0, 0x10000, 0x3, 0x2, 0x80004001, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x110c, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x1}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x8911}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.519750677s ago: executing program 3 (id=1206): connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0xa25d, 0x0, 0x0, 0x0) 3.447865044s ago: executing program 1 (id=1208): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x4790, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x19b1, 0x35725d35}, 0x0, 0x1000, 0x20da, 0x0, 0x3, 0x20025, 0xb, 0x0, 0x0, 0x0, 0x20000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x2, 0xf4261, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_bp={0x0, 0xa}, 0x9092, 0x0, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000001d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='{&*.\x00') r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000780)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x9, &(0x7f0000000400)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @map_idx={0x18, 0xc, 0x5, 0x0, 0x8}, @alu={0x7, 0x0, 0xb, 0x1, 0x5, 0x20, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @ldst={0x0, 0x0, 0x0, 0x7, 0x7, 0x100, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x3}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0xf1, &(0x7f0000000580)=""/241, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0x10, 0x101, 0x8}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000007c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000800)=[{0x0, 0x3, 0x1, 0x9}, {0x0, 0x4, 0x10}, {0x4, 0x4, 0xa, 0xe}, {0x2, 0x5, 0xd, 0x1}, {0x1, 0x3, 0x7, 0x7}, {0x0, 0x2, 0x1, 0xf}], 0x10, 0x8}, 0x94) readv(r1, &(0x7f0000000300)=[{&(0x7f0000000240)=""/44, 0x2c}], 0x1) setresgid(0x0, 0x0, 0xee01) 3.259013389s ago: executing program 4 (id=1211): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x1, 0x4001) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r3) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="06", 0x1, 0x1, &(0x7f0000000080)={0xa, 0x6e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={r2, 0xfffc, 0x1, 'P'}, 0x9) 3.04330528s ago: executing program 0 (id=1213): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db", 0xd}], 0x1}, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x3, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x1}, 0x0, 0xffffefffffefffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=r2, 0x10) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x84, 0x22, &(0x7f0000000000)=r6, 0x10) 2.508872082s ago: executing program 1 (id=1214): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) r0 = syz_io_uring_setup(0x371d, &(0x7f0000000100)={0x0, 0xc9bd, 0x8, 0x3, 0x801ef}, &(0x7f0000000280)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749d, 0x4, 0x0, 0x0, 0x0) 2.508660032s ago: executing program 3 (id=1215): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}], 0x1, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0}, 0x94) writev(r0, &(0x7f0000000880), 0x1) 2.49983198s ago: executing program 0 (id=1224): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x15, 0x2000000000000276, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x625f00ac, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) rt_sigprocmask(0x2, &(0x7f00000000c0)={[0xffffffffffffffff]}, 0x0, 0x8) timer_create(0xfffffffd, 0x0, &(0x7f0000001280)) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 2.359416124s ago: executing program 4 (id=1216): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 1.84553519s ago: executing program 4 (id=1219): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xe723, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet_smc(0x2b, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x100, 0x62) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) r2 = syz_io_uring_setup(0x1d22, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x3a9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffff4, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x1) io_uring_enter(r2, 0x3532, 0x32c9, 0x45, 0x0, 0x0) 1.761084084s ago: executing program 2 (id=1220): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) getrlimit(0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) 1.649707714s ago: executing program 3 (id=1221): bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket(0x200000000000011, 0x2, 0x10) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0xa}, 0x102260, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@random="d100", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 1.647968804s ago: executing program 2 (id=1232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {0xfff1}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 1.565249418s ago: executing program 1 (id=1222): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 1.548646205s ago: executing program 1 (id=1223): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) unshare(0x2c020400) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x800000000000005, 0x4}, 0x4, 0x0, 0xe723, 0x4, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xfcd5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.541907954s ago: executing program 0 (id=1225): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24044840, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x100000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0xc, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000300)={0x0, 0xd54b, 0x8, 0xfefffffd, 0x1a6}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1.426388702s ago: executing program 4 (id=1226): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb1, 0x42758, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x4}, 0x8040, 0x6, 0x0, 0x7, 0xb, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x9}]}}]}, 0x4c}}, 0x0) 1.344643278s ago: executing program 2 (id=1227): bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = syz_io_uring_setup(0x110c, &(0x7f0000000540)={0x0, 0xc, 0x0, 0x8000003, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x424a}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.290769318s ago: executing program 3 (id=1228): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r1, &(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 1.145311431s ago: executing program 3 (id=1229): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x80000001, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0xcd0b3000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socketpair$unix(0x1, 0x1, 0x0, 0x0) 1.105824374s ago: executing program 2 (id=1230): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r4, &(0x7f0000000140), 0x4048081) 668.489624ms ago: executing program 0 (id=1231): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 668.177494ms ago: executing program 4 (id=1233): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 612.712963ms ago: executing program 4 (id=1234): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) fchdir(r2) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x249082, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) 419.996178ms ago: executing program 3 (id=1235): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x800) ioprio_set$pid(0x3, 0x0, 0x2000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x7ffff000) 419.295678ms ago: executing program 1 (id=1245): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000005}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write$bt_hci(r3, &(0x7f0000000340)=ANY=[], 0xa) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 216.92868ms ago: executing program 0 (id=1236): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r2, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 87.254496ms ago: executing program 2 (id=1237): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x24d2, &(0x7f0000000040)={0x0, 0xc8e2, 0xc000, 0xfffffffe, 0x20002f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40085}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) 0s ago: executing program 2 (id=1238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syz_tun\x00', 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xc002}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): nk: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 39.202977][ T3836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 39.213087][ T3836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.97'. [ 39.213952][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.101'. [ 39.545611][ T3864] loop1: detected capacity change from 0 to 1024 [ 39.553238][ T3865] macvlan2: entered promiscuous mode [ 39.581012][ T3864] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.601361][ T3865] macvlan2: entered allmulticast mode [ 39.635144][ T3864] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.110: Allocating blocks 497-513 which overlap fs metadata [ 39.650703][ T3864] EXT4-fs (loop1): Remounting filesystem read-only [ 39.796984][ T3862] EXT4-fs (loop1): pa ffff888107edca10: logic 304, phys. 433, len 5 [ 39.866565][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.913671][ T3882] loop1: detected capacity change from 0 to 1024 [ 39.938537][ T3882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.174911][ T3886] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 40.230750][ T3886] netlink: 'syz.0.118': attribute type 4 has an invalid length. [ 40.255122][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.324525][ T3890] netlink: 'syz.2.121': attribute type 12 has an invalid length. [ 40.404577][ T3899] loop0: detected capacity change from 0 to 512 [ 40.440554][ T3899] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.123: invalid indirect mapped block 256 (level 2) [ 40.523098][ T3899] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 40.523454][ T3899] EXT4-fs (loop0): 2 truncates cleaned up [ 40.532643][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 40.532683][ C0] EXT4-fs (loop0): initial error at time 1772892933: ext4_free_branches:1023: inode 11 [ 40.532731][ C0] EXT4-fs (loop0): last error at time 1772892933: ext4_free_branches:1023: inode 11 [ 40.691048][ T3899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.727163][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.954481][ T3923] loop0: detected capacity change from 0 to 256 [ 41.076187][ T3928] syz.0.132: attempt to access beyond end of device [ 41.076187][ T3928] loop0: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 41.117056][ T3928] syz.0.132: attempt to access beyond end of device [ 41.117056][ T3928] loop0: rw=2049, sector=320, nr_sectors = 32 limit=256 [ 41.141275][ T3928] syz.0.132: attempt to access beyond end of device [ 41.141275][ T3928] loop0: rw=2049, sector=384, nr_sectors = 64 limit=256 [ 41.155366][ T3928] syz.0.132: attempt to access beyond end of device [ 41.155366][ T3928] loop0: rw=2049, sector=480, nr_sectors = 32 limit=256 [ 41.169234][ T3928] syz.0.132: attempt to access beyond end of device [ 41.169234][ T3928] loop0: rw=2049, sector=608, nr_sectors = 32 limit=256 [ 41.200583][ T3933] loop2: detected capacity change from 0 to 1024 [ 41.219420][ T3928] syz.0.132: attempt to access beyond end of device [ 41.219420][ T3928] loop0: rw=2049, sector=672, nr_sectors = 32 limit=256 [ 41.236455][ T3933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.243487][ T3928] syz.0.132: attempt to access beyond end of device [ 41.243487][ T3928] loop0: rw=2049, sector=736, nr_sectors = 32 limit=256 [ 41.265575][ T3928] syz.0.132: attempt to access beyond end of device [ 41.265575][ T3928] loop0: rw=2049, sector=800, nr_sectors = 32 limit=256 [ 41.279496][ T3928] syz.0.132: attempt to access beyond end of device [ 41.279496][ T3928] loop0: rw=2049, sector=864, nr_sectors = 32 limit=256 [ 41.293442][ T3928] syz.0.132: attempt to access beyond end of device [ 41.293442][ T3928] loop0: rw=2049, sector=928, nr_sectors = 32 limit=256 [ 41.335122][ T3933] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4222: comm syz.2.136: Allocating blocks 497-513 which overlap fs metadata [ 41.349868][ T3933] EXT4-fs (loop2): Remounting filesystem read-only [ 41.405723][ T3932] EXT4-fs (loop2): pa ffff888107e25380: logic 304, phys. 433, len 5 [ 41.448664][ T3945] netlink: 236 bytes leftover after parsing attributes in process `syz.4.140'. [ 41.458072][ T3945] unsupported nla_type 217 [ 41.520766][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.632521][ T3952] netlink: 'syz.4.144': attribute type 1 has an invalid length. [ 41.889595][ T3960] loop3: detected capacity change from 0 to 512 [ 41.931597][ T3966] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.964406][ T3960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 42.030867][ T3966] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.045787][ T3960] EXT4-fs (loop3): 1 truncate cleaned up [ 42.056650][ T3960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.209589][ T3966] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.302284][ T3966] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.397848][ T3627] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.425410][ T3642] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.441830][ T3627] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.452658][ T3985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.158'. [ 42.468485][ T3627] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.533480][ T3987] netlink: 104 bytes leftover after parsing attributes in process `syz.2.159'. [ 42.577535][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.624667][ T3994] netlink: 'syz.3.162': attribute type 11 has an invalid length. [ 42.648781][ T3991] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.656050][ T3991] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.729102][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.739979][ T3991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.794091][ T3637] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.803496][ T3637] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.820689][ T3637] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.840262][ T3637] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.804954][ T28] kauditd_printk_skb: 58 callbacks suppressed [ 43.804973][ T28] audit: type=1326 audit(1772892936.784:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 43.820486][ T4033] loop1: detected capacity change from 0 to 8192 [ 43.848671][ T28] audit: type=1326 audit(1772892936.784:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 43.884479][ T28] audit: type=1326 audit(1772892936.784:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 43.958736][ T28] audit: type=1326 audit(1772892936.784:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 44.013413][ T28] audit: type=1326 audit(1772892936.784:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 44.045459][ T28] audit: type=1326 audit(1772892936.784:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 44.069050][ T28] audit: type=1326 audit(1772892936.804:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 44.092766][ T28] audit: type=1326 audit(1772892936.804:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 44.175384][ T28] audit: type=1326 audit(1772892936.804:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 44.212137][ T28] audit: type=1326 audit(1772892936.804:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4036 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 44.410423][ T4066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 44.821768][ T4089] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.889779][ T4089] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.958859][ T4089] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.022935][ T4089] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.097620][ T3637] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.113147][ T3637] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.131734][ T4094] loop2: detected capacity change from 0 to 512 [ 45.132214][ T4102] loop0: detected capacity change from 0 to 128 [ 45.150120][ T3637] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.172194][ T3637] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.189076][ T4102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 45.212995][ T4102] System zones: 1-3, 19-19, 35-36 [ 45.248292][ T4102] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.269243][ T4094] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.292686][ T4102] ext4 filesystem being mounted at /45/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.330586][ T4102] EXT4-fs warning (device loop0): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 45.359037][ T4094] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.201: Bad quota inum: 2, type: 1 [ 45.371955][ T4094] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 45.387682][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.409755][ T4109] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 45.439471][ T4109] EXT4-fs error (device loop2): ext4_quota_enable:7188: comm syz.2.201: Bad quota inum: 2, type: 1 [ 45.459144][ T4109] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 45.506835][ T4118] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 45.514971][ T4118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.208'. [ 45.532372][ T4118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.552978][ T3318] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 45.964635][ T4148] all: renamed from bridge_slave_1 (while UP) [ 46.029179][ T4152] loop2: detected capacity change from 0 to 512 [ 46.063288][ T4152] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.2.224: corrupted xattr block 95: invalid header [ 46.113014][ T4152] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.113334][ T4152] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.224: bg 0: block 7: invalid block bitmap [ 46.122524][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 46.122541][ C0] EXT4-fs (loop2): initial error at time 1772892939: ext4_expand_extra_isize_ea:2808: inode 11 [ 46.122574][ C0] EXT4-fs (loop2): last error at time 1772892939: ext4_expand_extra_isize_ea:2808: inode 11 [ 46.161903][ T4152] loop2: lost filesystem error report for type 5 error -117 [ 46.162256][ T4152] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 46.178463][ T4152] loop2: lost filesystem error report for type 5 error -117 [ 46.182377][ T4152] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2970: inode #11: comm syz.2.224: corrupted xattr block 95: invalid header [ 46.216271][ T4152] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.216490][ T4152] EXT4-fs warning (device loop2): ext4_evict_inode:275: xattr delete (err -117) [ 46.234775][ T4152] EXT4-fs (loop2): 1 orphan inode deleted [ 46.241054][ T4152] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.294975][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.350993][ T4162] loop0: detected capacity change from 0 to 1024 [ 46.386770][ T4162] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.460637][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.480777][ T4178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.233'. [ 46.658943][ T4192] loop0: detected capacity change from 0 to 512 [ 46.691033][ T4192] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.0.240: corrupted xattr block 95: invalid header [ 46.728602][ T4192] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.735379][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 46.751066][ C1] EXT4-fs (loop0): initial error at time 1772892939: ext4_expand_extra_isize_ea:2808: inode 11 [ 46.761452][ C1] EXT4-fs (loop0): last error at time 1772892939: ext4_expand_extra_isize_ea:2808: inode 11 [ 46.771699][ T4192] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.240: bg 0: block 7: invalid block bitmap [ 46.783911][ T4192] loop0: lost filesystem error report for type 5 error -117 [ 46.784116][ T4192] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 46.800133][ T4192] loop0: lost filesystem error report for type 5 error -117 [ 46.800382][ T4192] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2970: inode #11: comm syz.0.240: corrupted xattr block 95: invalid header [ 46.821471][ T4192] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 46.821677][ T4192] EXT4-fs warning (device loop0): ext4_evict_inode:275: xattr delete (err -117) [ 46.854855][ T4196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 46.865414][ T4192] EXT4-fs (loop0): 1 orphan inode deleted [ 46.867466][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 46.872020][ T4192] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.900865][ T4196] netlink: 12 bytes leftover after parsing attributes in process `syz.2.241'. [ 46.900965][ T3627] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.925461][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 46.941850][ T4198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.951149][ T4198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.979823][ T3627] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.989301][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.999281][ T3627] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.025474][ T3627] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.283899][ T4209] loop2: detected capacity change from 0 to 1024 [ 47.327310][ T4209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.349172][ T4215] netlink: 'syz.4.247': attribute type 13 has an invalid length. [ 47.413455][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.581886][ T4224] loop1: detected capacity change from 0 to 512 [ 47.636549][ T4224] EXT4-fs: Ignoring removed nobh option [ 47.687170][ T4224] EXT4-fs (loop1): orphan cleanup on readonly fs [ 47.738081][ T4224] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.252: EA inode hash validation failed [ 47.782055][ T4224] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 47.826907][ T4224] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.252: corrupted inode contents [ 47.865287][ T4224] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 47.876339][ T4224] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.252: mark_inode_dirty error [ 47.886318][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 47.886408][ C0] EXT4-fs (loop1): initial error at time 1772892940: ext4_do_update_inode:5569: inode 15 [ 47.886588][ C0] EXT4-fs (loop1): last error at time 1772892940: ext4_do_update_inode:5569: inode 15 [ 48.129388][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 48.147759][ T4247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 48.155918][ T4224] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.157870][ T4224] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.252: corrupted inode contents [ 48.215506][ T4224] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.215855][ T4224] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.252: mark_inode_dirty error [ 48.295473][ T4224] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.296363][ T4224] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.252: mark inode dirty (error -117) [ 48.345447][ T4224] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.346329][ T4224] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 48.395886][ T4224] EXT4-fs (loop1): 1 orphan inode deleted [ 48.407316][ T4224] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.576254][ T4253] loop3: detected capacity change from 0 to 128 [ 48.588466][ T4224] syz.1.252 (4224) used greatest stack depth: 9160 bytes left [ 48.596587][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.621142][ T4253] syz.3.263 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.737360][ T4262] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 48.871151][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.271'. [ 49.184880][ T4282] loop4: detected capacity change from 0 to 512 [ 49.303314][ T28] kauditd_printk_skb: 89 callbacks suppressed [ 49.303339][ T28] audit: type=1400 audit(1772892942.284:345): avc: denied { create } for pid=4284 comm="syz.3.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.558070][ T4282] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.732820][ T4282] EXT4-fs error (device loop4): ext4_quota_enable:7188: comm syz.4.276: Bad quota inum: 2, type: 1 [ 49.802023][ T4282] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 49.923419][ T4297] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 49.945801][ T4297] EXT4-fs error (device loop4): ext4_quota_enable:7188: comm syz.4.276: Bad quota inum: 2, type: 1 [ 49.988401][ T4297] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 50.005875][ T4300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.279'. [ 50.080220][ T3320] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 50.172283][ T4306] netlink: 28 bytes leftover after parsing attributes in process `syz.4.281'. [ 50.369928][ T28] audit: type=1400 audit(1772892943.354:346): avc: denied { create } for pid=4313 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.427508][ T28] audit: type=1400 audit(1772892943.374:347): avc: denied { setopt } for pid=4313 comm="syz.1.286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 51.220866][ T4317] netlink: 112 bytes leftover after parsing attributes in process `syz.2.290'. [ 51.243219][ T28] audit: type=1400 audit(1772892944.224:348): avc: denied { accept } for pid=4319 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 51.262851][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.292'. [ 51.302986][ T28] audit: type=1400 audit(1772892944.264:349): avc: denied { write } for pid=4321 comm="syz.4.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 51.366219][ T28] audit: type=1400 audit(1772892944.344:350): avc: denied { name_bind } for pid=4325 comm="syz.2.293" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 51.645426][ T28] audit: type=1400 audit(1772892944.374:351): avc: denied { read } for pid=4325 comm="syz.2.293" laddr=::ffff:127.0.0.1 lport=20001 faddr=::ffff:127.0.0.1 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.649575][ T4344] loop2: detected capacity change from 0 to 164 [ 51.796345][ T4344] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.827594][ T28] audit: type=1400 audit(1772892944.514:352): avc: denied { getopt } for pid=4338 comm="syz.2.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 51.867754][ T4344] netlink: 16 bytes leftover after parsing attributes in process `syz.2.300'. [ 51.895526][ T28] audit: type=1400 audit(1772892944.794:353): avc: denied { mount } for pid=4343 comm="syz.2.300" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 51.956033][ T28] audit: type=1400 audit(1772892944.914:354): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 52.380727][ T4399] loop0: detected capacity change from 0 to 512 [ 52.416596][ T4399] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 52.471268][ T4399] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 52.482963][ T4399] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.311: Corrupt directory, running e2fsck is recommended [ 52.532473][ T4399] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 52.547929][ T4399] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.311: corrupted in-inode xattr: invalid ea_ino [ 52.561318][ T4399] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.561538][ T4399] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.311: couldn't read orphan inode 15 (err -117) [ 52.570722][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 52.570742][ C1] EXT4-fs (loop0): initial error at time 1772892945: ext4_iget_extra_inode:5025: inode 15 [ 52.570767][ C1] EXT4-fs (loop0): last error at time 1772892945: ext4_iget_extra_inode:5025: inode 15 [ 52.609764][ T4399] loop0: lost filesystem error report for type 5 error -117 [ 52.610343][ T4399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.634672][ T4399] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #2: comm syz.0.311: corrupted xattr block 255: invalid header [ 52.648518][ T4399] SELinux: (dev loop0, type ext4) getxattr errno 117 [ 52.656199][ T4399] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.728182][ T4413] loop1: detected capacity change from 0 to 512 [ 52.734964][ T4413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.744027][ T4413] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.315: corrupted inode contents [ 52.756564][ T4413] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 52.757091][ T4413] EXT4-fs (loop1): Remounting filesystem read-only [ 52.766305][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 52.766324][ C1] EXT4-fs (loop1): initial error at time 1772892945: ext4_do_update_inode:5569: inode 15 [ 52.766355][ C1] EXT4-fs (loop1): last error at time 1772892945: ext4_do_update_inode:5569: inode 15 [ 52.798938][ T4413] EXT4-fs (loop1): 1 orphan inode deleted [ 52.805185][ T4413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.882428][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.995149][ T4435] loop4: detected capacity change from 0 to 1024 [ 53.002105][ T4435] EXT4-fs: Ignoring removed nobh option [ 53.021977][ T4435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.041422][ T4435] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.347948][ T4462] loop2: detected capacity change from 0 to 7 [ 53.386578][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.460743][ T4470] loop2: detected capacity change from 0 to 512 [ 53.468559][ T4468] loop4: detected capacity change from 0 to 512 [ 53.477579][ T4468] msdos: Unknown parameter 'dotsdcheck' [ 53.494886][ T4470] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 53.539379][ T4470] EXT4-fs (loop2): 1 truncate cleaned up [ 53.558765][ T4470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.623148][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.673076][ T4487] netlink: 'syz.4.343': attribute type 4 has an invalid length. [ 53.687136][ T4487] netlink: 'syz.4.343': attribute type 4 has an invalid length. [ 53.994778][ T4512] vlan2: entered promiscuous mode [ 54.000238][ T4512] syz_tun: entered promiscuous mode [ 54.049137][ T4514] loop0: detected capacity change from 0 to 512 [ 54.060285][ T4514] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 54.084797][ T4514] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.355: iget: bogus i_mode (2) [ 54.097668][ T4514] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.097887][ T4514] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.355: couldn't read orphan inode 15 (err -117) [ 54.107084][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 54.107107][ C0] EXT4-fs (loop0): initial error at time 1772892947: ext4_orphan_get:1391: inode 15 [ 54.107143][ C0] EXT4-fs (loop0): last error at time 1772892947: ext4_orphan_get:1391: inode 15 [ 54.144144][ T4514] loop0: lost filesystem error report for type 5 error -117 [ 54.144642][ T4514] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.167964][ T4514] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 54.182504][ T4514] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.355: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 54.207341][ T4514] EXT4-fs error (device loop0): ext4_find_dest_de:2050: inode #2: block 3: comm syz.0.355: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 54.241878][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.250350][ T4520] netlink: 11522 bytes leftover after parsing attributes in process `syz.4.359'. [ 54.263616][ T4522] netlink: 52 bytes leftover after parsing attributes in process `syz.3.357'. [ 54.410253][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 54.410270][ T28] audit: type=1400 audit(1772892947.394:400): avc: denied { read } for pid=4531 comm="syz.0.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.530927][ T28] audit: type=1400 audit(1772892947.514:401): avc: denied { watch watch_reads } for pid=4539 comm="syz.1.366" path="/" dev="configfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 54.603124][ T28] audit: type=1400 audit(1772892947.574:402): avc: denied { name_bind } for pid=4544 comm="syz.1.368" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 55.249513][ T4572] loop4: detected capacity change from 0 to 512 [ 55.273015][ T4572] EXT4-fs: Ignoring removed nobh option [ 55.352870][ T28] audit: type=1400 audit(1772892948.334:403): avc: denied { ioctl } for pid=4589 comm="syz.1.386" path="socket:[9236]" dev="sockfs" ino=9236 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.386962][ T4572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 55.398386][ T4572] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.377: EA inode hash validation failed [ 55.414007][ T4572] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.377: corrupted inode contents [ 55.428024][ T4572] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.430204][ T28] audit: type=1400 audit(1772892948.374:404): avc: denied { create } for pid=4589 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 55.439367][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 55.439392][ C1] EXT4-fs (loop4): initial error at time 1772892948: ext4_do_update_inode:5569: inode 15 [ 55.439420][ C1] EXT4-fs (loop4): last error at time 1772892948: ext4_do_update_inode:5569: inode 15 [ 55.451773][ T4572] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.377: mark_inode_dirty error [ 55.511838][ T28] audit: type=1400 audit(1772892948.494:405): avc: denied { load_policy } for pid=4589 comm="syz.1.386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 55.535526][ T4593] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 55.555272][ T4593] SELinux: failed to load policy [ 55.599022][ T4572] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.601273][ T4572] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.377: corrupted inode contents [ 55.645160][ T4572] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.647738][ T4572] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #15: comm syz.4.377: mark_inode_dirty error [ 55.671077][ T4572] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.685411][ T4572] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3002: inode #15: comm syz.4.377: mark inode dirty (error -117) [ 55.719245][ T4572] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.730989][ T4572] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 55.766671][ T4572] EXT4-fs (loop4): 1 orphan inode deleted [ 55.786606][ T4572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 55.910873][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.206043][ T4623] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.257369][ T4623] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.301312][ T4631] netlink: 'syz.3.402': attribute type 3 has an invalid length. [ 56.327781][ T4623] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.607821][ T4623] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.635218][ T28] audit: type=1400 audit(1772893205.619:406): avc: denied { create } for pid=4645 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 56.657533][ T28] audit: type=1400 audit(1772893205.619:407): avc: denied { setopt } for pid=4645 comm="syz.0.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 56.720285][ T583] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.745557][ T583] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.753804][ T583] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.808025][ T583] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.276959][ T4664] loop1: detected capacity change from 0 to 1024 [ 57.306167][ T4664] EXT4-fs: Ignoring removed oldalloc option [ 57.322642][ T4664] EXT4-fs: Ignoring removed bh option [ 57.454476][ T4664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.781998][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 57.794494][ T4678] netlink: 8 bytes leftover after parsing attributes in process `syz.2.418'. [ 57.874213][ T28] audit: type=1400 audit(1772893206.859:408): avc: denied { ioctl } for pid=4681 comm="syz.0.421" path="socket:[9521]" dev="sockfs" ino=9521 ioctlcmd=0xb101 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 57.928466][ T28] audit: type=1400 audit(1772893206.859:409): avc: denied { bind } for pid=4682 comm="syz.2.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.973183][ T4686] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.072833][ T4686] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.131292][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 58.142484][ T4688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 58.154128][ T4686] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.218566][ T4686] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.282156][ T3387] IPVS: starting estimator thread 0... [ 58.336464][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.385456][ T4692] IPVS: using max 2544 ests per chain, 127200 per kthread [ 58.392714][ T3627] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.435703][ T3639] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.449256][ T3639] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.475434][ T3639] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.528804][ T4700] netlink: 48 bytes leftover after parsing attributes in process `syz.1.428'. [ 59.018821][ T1032] IPVS: starting estimator thread 0... [ 59.165634][ T4716] IPVS: using max 2544 ests per chain, 127200 per kthread [ 59.589599][ T4730] netlink: 'syz.4.437': attribute type 3 has an invalid length. [ 59.770519][ T4733] loop0: detected capacity change from 0 to 1024 [ 59.807548][ T4733] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.841981][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 59.841996][ T28] audit: type=1400 audit(1772893208.829:412): avc: denied { create } for pid=4732 comm="syz.0.438" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.881200][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.906922][ T28] audit: type=1400 audit(1772893208.859:413): avc: denied { add_name } for pid=4732 comm="syz.0.438" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 59.997470][ T28] audit: type=1400 audit(1772893208.989:414): avc: denied { listen } for pid=4739 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.033723][ T28] audit: type=1400 audit(1772893208.989:415): avc: denied { read } for pid=4739 comm="syz.4.441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 60.210616][ T4757] syzkaller0: entered allmulticast mode [ 60.228521][ T4757] syzkaller0: entered promiscuous mode [ 60.246485][ T4757] syzkaller0 (unregistering): left promiscuous mode [ 60.253141][ T4757] syzkaller0 (unregistering): left allmulticast mode [ 60.510273][ T4764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'. [ 60.743437][ T4766] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.750761][ T4766] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.787457][ T28] audit: type=1400 audit(1772893209.759:416): avc: denied { listen } for pid=4770 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.866122][ T28] audit: type=1400 audit(1772893209.759:417): avc: denied { accept } for pid=4770 comm="syz.0.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 60.910974][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.931669][ T4766] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 61.007371][ T4769] geneve2: entered promiscuous mode [ 61.095423][ T4780] loop2: detected capacity change from 0 to 7 [ 61.256884][ T28] audit: type=1400 audit(1772893210.249:418): avc: denied { connect } for pid=4785 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.276330][ T28] audit: type=1400 audit(1772893210.249:419): avc: denied { read } for pid=4785 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.307704][ T28] audit: type=1400 audit(1772893210.299:420): avc: denied { write } for pid=4785 comm="syz.4.459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 61.816146][ T28] audit: type=1400 audit(1772893210.809:421): avc: denied { sqpoll } for pid=4800 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 62.257679][ T4822] loop2: detected capacity change from 0 to 7 [ 62.841271][ T3642] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.855625][ T3642] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.891512][ T3642] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.912180][ T3642] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.993640][ T4866] netlink: 'syz.4.479': attribute type 4 has an invalid length. [ 63.014507][ T4866] netlink: 'syz.4.479': attribute type 4 has an invalid length. [ 64.304521][ T4895] netlink: 84 bytes leftover after parsing attributes in process `syz.0.501'. [ 64.879499][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 64.879514][ T28] audit: type=1326 audit(1772893213.849:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 64.932064][ T28] audit: type=1326 audit(1772893213.849:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 64.956056][ T28] audit: type=1326 audit(1772893213.849:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 64.993519][ T28] audit: type=1326 audit(1772893213.849:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 65.018756][ T28] audit: type=1326 audit(1772893213.849:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 65.042164][ T28] audit: type=1326 audit(1772893213.849:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 65.065509][ T28] audit: type=1326 audit(1772893213.849:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 65.136026][ T28] audit: type=1326 audit(1772893213.849:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 65.159451][ T28] audit: type=1326 audit(1772893213.859:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 65.220921][ T28] audit: type=1326 audit(1772893213.859:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4913 comm="syz.4.498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd3dc11c799 code=0x7ffc0000 [ 65.298339][ T3387] IPVS: starting estimator thread 0... [ 65.385614][ T4930] IPVS: using max 2400 ests per chain, 120000 per kthread [ 66.249390][ T4971] Illegal XDP return value 4294967262 on prog (id 169) dev syz_tun, expect packet loss! [ 66.391763][ T4976] loop4: detected capacity change from 0 to 1024 [ 66.400903][ T4976] EXT4-fs: Ignoring removed bh option [ 66.447132][ T4976] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.460531][ T4981] loop3: detected capacity change from 0 to 164 [ 66.476453][ T4981] rock: directory entry would overflow storage [ 66.492034][ T4976] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 66.492999][ T4981] rock: sig=0x5252, size=5, remaining=3 [ 66.527458][ T4976] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 2: comm syz.4.527: lblock 2 mapped to illegal pblock 2 (length 1) [ 66.573487][ T4976] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.573641][ T4976] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 48: comm syz.4.527: lblock 0 mapped to illegal pblock 48 (length 1) [ 66.582769][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 66.582788][ C0] EXT4-fs (loop4): initial error at time 1772893215: ext4_map_blocks:776: inode 3: block 2 [ 66.582836][ C0] EXT4-fs (loop4): last error at time 1772893215: ext4_map_blocks:776: inode 3: block 2 [ 66.659258][ T4976] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 66.659354][ T4976] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.527: Failed to acquire dquot type 0 [ 66.719440][ T4976] loop4: lost filesystem error report for type 5 error -117 [ 66.727085][ T4976] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 66.743773][ T4976] loop4: lost filesystem error report for type 5 error -117 [ 66.743922][ T4976] EXT4-fs error (device loop4): ext4_evict_inode:255: inode #11: comm syz.4.527: mark_inode_dirty error [ 66.764236][ T4976] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 66.764837][ T4976] EXT4-fs warning (device loop4): ext4_evict_inode:258: couldn't mark inode dirty (err -117) [ 66.785179][ T4976] EXT4-fs (loop4): 1 orphan inode deleted [ 66.791391][ T4976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.894771][ T3642] EXT4-fs error (device loop4): ext4_map_blocks:776: inode #3: block 1: comm kworker/u8:15: lblock 1 mapped to illegal pblock 1 (length 1) [ 66.917754][ T4993] io-wq is not configured for unbound workers [ 66.938982][ T3642] EXT4-fs error (device loop4): ext4_release_dquot:7037: comm kworker/u8:15: Failed to release dquot type 0 [ 67.111907][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.124728][ T3320] EXT4-fs error (device loop4): __ext4_get_inode_loc:4782: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.159940][ T3320] loop4: lost filesystem error report for type 5 error -117 [ 67.160071][ T3320] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6246: Corrupt filesystem [ 67.195370][ T3320] loop4: lost filesystem error report for type 5 error -117 [ 67.196347][ T3320] EXT4-fs error (device loop4): ext4_quota_off:7285: inode #3: comm syz-executor: mark_inode_dirty error [ 67.225571][ T3320] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 67.308576][ T5004] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 67.350618][ T5004] netlink: 'syz.2.536': attribute type 4 has an invalid length. [ 67.366241][ T5004] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.536'. [ 67.430445][ T5008] netlink: 84 bytes leftover after parsing attributes in process `syz.0.538'. [ 67.456026][ T5008] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 67.474717][ T5015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.541'. [ 67.551657][ T5017] af_packet: tpacket_rcv: packet too big, clamped from 65536 to 3952. macoff=96 [ 67.761600][ T3455] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 67.779905][ T3455] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 67.829979][ T5030] loop1: detected capacity change from 0 to 4096 [ 67.956840][ T5030] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 68.452877][ T5051] netlink: 52 bytes leftover after parsing attributes in process `syz.3.555'. [ 68.779473][ T5070] loop0: detected capacity change from 0 to 512 [ 68.825051][ T5070] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.560: inode has both inline data and extents flags [ 68.870666][ T5070] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 68.872972][ T5070] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.560: couldn't read orphan inode 15 (err -117) [ 68.882284][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 68.882297][ C0] EXT4-fs (loop0): initial error at time 1772893217: ext4_orphan_get:1391: inode 15 [ 68.882327][ C0] EXT4-fs (loop0): last error at time 1772893217: ext4_orphan_get:1391: inode 15 [ 68.958705][ T5070] loop0: lost filesystem error report for type 5 error -117 [ 68.959309][ T5070] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.042507][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.292183][ T5073] geneve1: entered promiscuous mode [ 69.636761][ T5094] netlink: 'syz.3.567': attribute type 1 has an invalid length. [ 69.746395][ T5094] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.045462][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 70.045478][ T28] audit: type=1400 audit(1772893219.029:467): avc: denied { getopt } for pid=5100 comm="syz.3.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.483877][ T5114] uprobe: syz.0.575:5114 failed to unregister, leaking uprobe [ 70.677876][ T5118] loop3: detected capacity change from 0 to 512 [ 70.710538][ T5118] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 70.738512][ T5120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.578'. [ 70.781686][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.577'. [ 71.837766][ T5147] loop3: detected capacity change from 0 to 512 [ 71.864837][ T5147] EXT4-fs: Ignoring removed nobh option [ 71.878232][ T5147] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 71.944517][ T5147] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 72.014198][ T5147] EXT4-fs (loop3): 1 truncate cleaned up [ 72.031862][ T28] audit: type=1400 audit(1772893221.019:468): avc: denied { listen } for pid=5153 comm="syz.1.589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 72.059368][ T5147] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.082432][ T5158] xt_hashlimit: size too large, truncated to 1048576 [ 72.175461][ T28] audit: type=1400 audit(1772893221.069:469): avc: denied { setopt } for pid=5157 comm="syz.0.592" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.205439][ T28] audit: type=1400 audit(1772893221.089:470): avc: denied { recv } for pid=5155 comm="syz.2.590" saddr=10.128.0.163 src=30036 daddr=10.128.0.37 dest=41890 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 72.284899][ T28] audit: type=1400 audit(1772893221.119:471): avc: denied { connect } for pid=5161 comm="syz.1.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 72.330122][ T28] audit: type=1400 audit(1772893221.119:472): avc: denied { write } for pid=5161 comm="syz.1.595" path="socket:[12727]" dev="sockfs" ino=12727 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.120004][ T28] audit: type=1400 audit(1772893222.109:473): avc: denied { cmd } for pid=5183 comm="syz.0.602" path="socket:[11536]" dev="sockfs" ino=11536 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.165386][ T28] audit: type=1400 audit(1772893222.119:474): avc: denied { connect } for pid=5180 comm="syz.2.601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 73.389589][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.401740][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 73.413427][ T5193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.604'. [ 73.580781][ T5199] loop0: detected capacity change from 0 to 8192 [ 74.281461][ T5194] syz.0.605 (5194) used greatest stack depth: 7256 bytes left [ 74.483559][ T5229] netlink: 84 bytes leftover after parsing attributes in process `syz.3.628'. [ 74.492594][ T5229] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 75.194313][ T5237] loop2: detected capacity change from 0 to 512 [ 75.211869][ T5237] EXT4-fs: Ignoring removed nobh option [ 75.222094][ T5243] loop0: detected capacity change from 0 to 512 [ 75.252957][ T5237] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.266229][ T5243] EXT4-fs error (device loop0): ext4_iget_extra_inode:5025: inode #15: comm syz.0.630: corrupted in-inode xattr: e_value out of bounds [ 75.285576][ T5243] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 75.286348][ T5243] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.630: couldn't read orphan inode 15 (err -117) [ 75.292636][ T5237] EXT4-fs (loop2): 1 truncate cleaned up [ 75.295871][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 75.319310][ C0] EXT4-fs (loop0): initial error at time 1772893224: ext4_iget_extra_inode:5025: inode 15 [ 75.329281][ C0] EXT4-fs (loop0): last error at time 1772893224: ext4_iget_extra_inode:5025: inode 15 [ 75.336584][ T5237] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.357634][ T5243] loop0: lost filesystem error report for type 5 error -117 [ 75.361830][ T5243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.398051][ T5243] netlink: 'syz.0.630': attribute type 4 has an invalid length. [ 75.449519][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.487696][ T5254] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 75.516288][ T5254] bond1: (slave veth3): Enslaving as an active interface with a down link [ 75.532871][ T5254] bond1: (slave dummy0): making interface the new active one [ 75.540806][ T5254] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 75.558574][ T5254] netlink: 14 bytes leftover after parsing attributes in process `syz.0.624'. [ 75.610980][ T5254] bond1: (slave dummy0): Releasing active interface [ 75.743469][ T5261] netlink: 12 bytes leftover after parsing attributes in process `syz.1.626'. [ 75.882273][ T5268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.898434][ T28] audit: type=1400 audit(1772893224.889:475): avc: denied { lock } for pid=5266 comm="syz.1.631" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=11668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.933543][ T5268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.131464][ T5273] loop1: detected capacity change from 0 to 512 [ 76.161113][ T5273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.212494][ T5273] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.229323][ T28] audit: type=1400 audit(1772893225.219:476): avc: denied { ioctl } for pid=5272 comm="syz.1.633" path="/118/bus/file2" dev="loop1" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 76.261209][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.296979][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.502199][ T28] audit: type=1400 audit(1772893225.489:477): avc: denied { write } for pid=5292 comm="syz.4.642" name="tcp6" dev="proc" ino=4026532813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 76.635137][ T5299] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 76.726269][ T28] audit: type=1400 audit(1772893225.709:478): avc: denied { write } for pid=5304 comm="syz.3.649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.784518][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.0.648'. [ 76.806457][ T28] audit: type=1400 audit(1772893225.799:479): avc: denied { lock } for pid=5308 comm="syz.2.650" path="socket:[11762]" dev="sockfs" ino=11762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 77.083085][ T28] audit: type=1400 audit(1772893226.069:480): avc: denied { execute } for pid=5322 comm="syz.2.666" path="/138/file0" dev="tmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 77.199678][ T28] audit: type=1400 audit(1772893226.189:481): avc: denied { map } for pid=5322 comm="syz.2.666" path="socket:[14077]" dev="sockfs" ino=14077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.225359][ T5330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.656'. [ 77.270270][ T28] audit: type=1400 audit(1772893226.189:482): avc: denied { read accept } for pid=5322 comm="syz.2.666" path="socket:[14077]" dev="sockfs" ino=14077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.662814][ T28] audit: type=1400 audit(1772893226.639:483): avc: denied { ioctl } for pid=5341 comm="syz.3.661" path="socket:[11866]" dev="sockfs" ino=11866 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 80.267919][ T5362] loop0: detected capacity change from 0 to 512 [ 80.297403][ T5362] EXT4-fs: Ignoring removed nobh option [ 80.327461][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 80.327462][ T5362] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 80.367346][ T5362] EXT4-fs (loop0): 1 truncate cleaned up [ 80.373557][ T5362] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.589244][ T5377] batadv_slave_1: entered promiscuous mode [ 80.623490][ T5377] pimreg: entered allmulticast mode [ 80.641225][ T5379] loop1: detected capacity change from 0 to 128 [ 80.662240][ T5377] pimreg: left allmulticast mode [ 80.717434][ T5379] FAT-fs (loop1): IO charset cp855 not found [ 80.733843][ T5378] loop1: detected capacity change from 0 to 2048 [ 80.756230][ T5376] batadv_slave_1: left promiscuous mode [ 80.796856][ T5378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.871193][ T28] audit: type=1400 audit(1772893229.859:484): avc: denied { read } for pid=5375 comm="syz.1.676" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 80.883407][ T5378] EXT4-fs error (device loop1): ext4_map_blocks:776: inode #12: block 2: comm syz.1.676: lblock 0 mapped to illegal pblock 2 (length 1) [ 81.022402][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.207475][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.318320][ T28] audit: type=1400 audit(1772893230.309:485): avc: denied { bind } for pid=5401 comm="syz.1.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 81.387610][ T28] audit: type=1400 audit(1772893230.359:486): avc: denied { sqpoll } for pid=5405 comm="syz.2.692" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.431724][ T28] audit: type=1400 audit(1772893230.419:487): avc: denied { read write } for pid=5414 comm="syz.0.695" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.496919][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 81.514819][ T5421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'. [ 81.555440][ T28] audit: type=1400 audit(1772893230.449:488): avc: denied { open } for pid=5414 comm="syz.0.695" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.645468][ T28] audit: type=1400 audit(1772893230.449:489): avc: denied { ioctl } for pid=5414 comm="syz.0.695" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.745913][ T28] audit: type=1400 audit(1772893230.469:490): avc: denied { ioctl } for pid=5407 comm="syz.1.691" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=14164 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.776066][ T5441] team0 (unregistering): Port device team_slave_0 removed [ 81.784726][ T5441] team0 (unregistering): Port device team_slave_1 removed [ 81.800341][ T28] audit: type=1400 audit(1772893230.619:491): avc: denied { mount } for pid=5428 comm="syz.0.699" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 81.822658][ T28] audit: type=1400 audit(1772893230.789:492): avc: denied { ioctl } for pid=5442 comm="syz.4.703" path="socket:[14241]" dev="sockfs" ino=14241 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 81.887156][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 81.906227][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.705'. [ 82.003474][ T5418] chnl_net:caif_netlink_parms(): no params data found [ 82.088708][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.095915][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.103142][ T5418] bridge_slave_0: entered allmulticast mode [ 82.115802][ T5418] bridge_slave_0: entered promiscuous mode [ 82.122576][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.571591][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.579017][ T5418] bridge_slave_1: entered allmulticast mode [ 82.585626][ T5418] bridge_slave_1: entered promiscuous mode [ 82.602800][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.613079][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.714784][ T5418] team0: Port device team_slave_0 added [ 82.721567][ T5418] team0: Port device team_slave_1 added [ 82.738630][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.745913][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.779174][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.790727][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.797804][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.823912][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.898631][ T5486] loop2: detected capacity change from 0 to 2048 [ 82.941815][ T5418] hsr_slave_0: entered promiscuous mode [ 82.948221][ T5418] hsr_slave_1: entered promiscuous mode [ 82.954600][ T5418] debugfs: 'hsr0' already exists in 'hsr' [ 82.965375][ T5418] Cannot create hsr debugfs directory [ 82.966999][ T3298] loop2: p1 < > p4 [ 82.977234][ T3298] loop2: p4 size 8388608 extends beyond EOD, truncated [ 83.011709][ T5486] loop2: p1 < > p4 [ 83.020243][ T5486] loop2: p4 size 8388608 extends beyond EOD, truncated [ 83.054980][ T28] audit: type=1400 audit(1772893232.039:493): avc: denied { read } for pid=5482 comm="syz.2.714" name="loop2p1" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.085059][ T5483] EXT4-fs (loop2p1): unable to read superblock [ 83.136384][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 83.139782][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.167352][ T28] audit: type=1400 audit(1772893232.039:494): avc: denied { open } for pid=5482 comm="syz.2.714" path="/dev/loop2p1" dev="devtmpfs" ino=711 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 83.225023][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 83.230442][ T3298] udevd[3298]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 83.481242][ T5418] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.515818][ T5506] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 83.525837][ T5418] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.540259][ T5418] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.548611][ T5506] netlink: 'syz.1.722': attribute type 2 has an invalid length. [ 83.568189][ T5418] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.690249][ T5526] loop0: detected capacity change from 0 to 256 [ 83.702730][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.709820][ T5526] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.737639][ T5418] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.762512][ T3627] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.769693][ T3627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.781252][ T583] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.788383][ T583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.046125][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.093321][ T5545] loop4: detected capacity change from 0 to 1024 [ 84.145178][ T5545] EXT4-fs: Ignoring removed orlov option [ 84.162287][ T5545] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 84.186983][ T5545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.332712][ T5418] veth0_vlan: entered promiscuous mode [ 84.350602][ T5418] veth1_vlan: entered promiscuous mode [ 84.382017][ T5418] veth0_macvtap: entered promiscuous mode [ 84.397674][ T5418] veth1_macvtap: entered promiscuous mode [ 84.421129][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.445769][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.475149][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.500108][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.512982][ T5514] kexec: Could not allocate control_code_buffer [ 84.520924][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.552547][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.633857][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.154198][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 85.163262][ T5589] loop3: detected capacity change from 0 to 2048 [ 85.185601][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.754'. [ 85.213194][ T5589] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.445697][ T5589] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.466643][ T5589] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 902 with error 28 [ 85.479332][ T5589] EXT4-fs (loop3): This should not happen!! Data will be lost [ 85.479332][ T5589] [ 85.499194][ T5589] EXT4-fs (loop3): Total free blocks count 0 [ 85.505273][ T5589] EXT4-fs (loop3): Free/Dirty block details [ 85.511637][ T5589] EXT4-fs (loop3): free_blocks=2415919104 [ 85.518507][ T5589] EXT4-fs (loop3): dirty_blocks=912 [ 85.523741][ T5589] EXT4-fs (loop3): Block reservation details [ 85.532202][ T5589] EXT4-fs (loop3): i_reserved_data_blocks=57 [ 85.610739][ T5607] loop1: detected capacity change from 0 to 512 [ 85.616572][ T5418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.618161][ T5607] EXT4-fs: Ignoring removed nobh option [ 85.632288][ T5607] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 85.654948][ T5607] EXT4-fs (loop1): 1 truncate cleaned up [ 85.661701][ T5607] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.030133][ T5629] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 86.463022][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 86.474965][ T5636] loop0: detected capacity change from 0 to 512 [ 86.477760][ T5634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 86.513384][ T5636] EXT4-fs: Ignoring removed i_version option [ 86.536089][ T5636] EXT4-fs: Ignoring removed bh option [ 86.557485][ T5636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.570574][ T5636] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.599132][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 86.599148][ T28] audit: type=1400 audit(1772893491.587:503): avc: denied { read write } for pid=5635 comm="syz.0.762" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.605105][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.605246][ T28] audit: type=1400 audit(1772893491.587:504): avc: denied { open } for pid=5635 comm="syz.0.762" path="/154/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.627660][ T28] audit: type=1400 audit(1772893491.587:505): avc: denied { ioctl } for pid=5635 comm="syz.0.762" path="/154/bus/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 86.654669][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.764'. [ 86.736921][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.817414][ T5651] netlink: 'syz.1.768': attribute type 13 has an invalid length. [ 86.845580][ T5651] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.768'. [ 86.891949][ T5658] netlink: 20 bytes leftover after parsing attributes in process `syz.3.772'. [ 86.912917][ T5658] netlink: 'syz.3.772': attribute type 6 has an invalid length. [ 86.919867][ T5661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.773'. [ 86.936319][ T5658] netlink: 72 bytes leftover after parsing attributes in process `syz.3.772'. [ 86.951223][ T5647] loop4: detected capacity change from 0 to 8192 [ 87.758778][ T5670] netlink: 'syz.0.775': attribute type 13 has an invalid length. [ 87.843582][ T5644] syz.4.766 (5644) used greatest stack depth: 6840 bytes left [ 87.886966][ T5670] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.894223][ T5670] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.014388][ T5670] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.024754][ T5670] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.072101][ T3622] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.089989][ T3622] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.117232][ T3622] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.155359][ T3622] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.197950][ T5682] loop4: detected capacity change from 0 to 1024 [ 88.204720][ T5682] EXT4-fs: Ignoring removed oldalloc option [ 88.265539][ T5682] EXT4-fs: Ignoring removed bh option [ 88.295442][ T3455] IPVS: starting estimator thread 0... [ 88.309582][ T5682] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.385395][ T5688] IPVS: using max 2736 ests per chain, 136800 per kthread [ 88.647157][ T28] audit: type=1400 audit(1772893493.617:506): avc: denied { mount } for pid=5699 comm="syz.1.776" name="/" dev="hugetlbfs" ino=15891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 88.909047][ T5702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.921541][ T5702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.267331][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.950261][ T5704] kexec: Could not allocate control_code_buffer [ 90.301817][ T5730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.799'. [ 90.315233][ T5724] loop4: detected capacity change from 0 to 8192 [ 90.620713][ T5749] program syz.1.806 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.018805][ T28] audit: type=1400 audit(1772893495.997:507): avc: denied { read } for pid=5761 comm="syz.1.811" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 91.147718][ T28] audit: type=1400 audit(1772893495.997:508): avc: denied { open } for pid=5761 comm="syz.1.811" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 91.323428][ T28] audit: type=1400 audit(1772893496.307:509): avc: denied { create } for pid=5766 comm="syz.2.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 91.544688][ T5772] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.574614][ T28] audit: type=1400 audit(1772893496.557:510): avc: denied { open } for pid=5774 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.596560][ T5772] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.605509][ T28] audit: type=1400 audit(1772893496.557:511): avc: denied { kernel } for pid=5774 comm="syz.4.817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.847580][ T28] audit: type=1400 audit(1772893496.837:512): avc: denied { setopt } for pid=5788 comm="syz.4.822" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 91.903385][ T28] audit: type=1400 audit(1772893496.887:513): avc: denied { write } for pid=5790 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 91.932726][ T28] audit: type=1400 audit(1772893496.887:514): avc: denied { override_creds } for pid=5790 comm="syz.4.823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 92.220090][ T5795] loop2: detected capacity change from 0 to 128 [ 92.260946][ T5795] FAT-fs (loop2): bogus number of reserved sectors [ 92.281653][ T5795] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 92.299628][ T5795] FAT-fs (loop2): Can't find a valid FAT filesystem [ 92.404130][ T5801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.826'. [ 92.439274][ T5801] ip6gre1: entered promiscuous mode [ 92.452582][ T5801] ip6gre1: entered allmulticast mode [ 92.474287][ T5801] netlink: 'syz.2.826': attribute type 6 has an invalid length. [ 92.496285][ T28] audit: type=1400 audit(1772893497.487:515): avc: denied { mount } for pid=5802 comm="syz.3.829" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 92.519571][ T5801] netlink: 72 bytes leftover after parsing attributes in process `syz.2.826'. [ 92.854291][ T28] audit: type=1400 audit(1772893497.837:516): avc: denied { tracepoint } for pid=5818 comm="syz.0.836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 92.897385][ T5821] loop3: detected capacity change from 0 to 164 [ 93.543203][ T5832] loop3: detected capacity change from 0 to 2048 [ 93.625968][ T5832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.746477][ T5832] netlink: 'syz.3.839': attribute type 2 has an invalid length. [ 93.775485][ T5832] netlink: 199792 bytes leftover after parsing attributes in process `syz.3.839'. [ 93.938519][ T5857] netlink: 'syz.2.847': attribute type 3 has an invalid length. [ 93.946411][ T5857] netlink: 24 bytes leftover after parsing attributes in process `syz.2.847'. [ 93.955869][ T5857] ------------[ cut here ]------------ [ 93.961346][ T5857] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 93.973473][ T5857] WARNING: net/sched/cls_u32.c:855 at u32_change+0x144c/0x14d0, CPU#0: syz.2.847/5857 [ 93.983116][ T5857] Modules linked in: [ 93.987122][ T5857] CPU: 0 UID: 0 PID: 5857 Comm: syz.2.847 Not tainted syzkaller #0 PREEMPT(full) [ 93.996468][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 94.006591][ T5857] RIP: 0010:u32_change+0x1463/0x14d0 [ 94.011974][ T5857] Code: 31 ed e9 96 fe ff ff e8 4b 38 c2 fc 48 8d 3d 04 9f 89 02 b9 10 00 00 00 4d 89 f7 4c 8b 74 24 18 4c 89 f6 48 c7 c2 a3 86 7e 86 <67> 48 0f b9 3a 4c 89 f2 4d 89 fe 4c 8b 7c 24 28 e9 36 f1 ff ff e8 [ 94.031645][ T5857] RSP: 0018:ffffc90000e2f5e0 EFLAGS: 00010287 [ 94.037754][ T5857] RAX: ffffffff84971295 RBX: ffffc90000e2f7f0 RCX: 0000000000000010 [ 94.045897][ T5857] RDX: ffffffff867e86a3 RSI: 0000000000000020 RDI: ffffffff8720b1a0 [ 94.053933][ T5857] RBP: ffffc90000e2f6e8 R08: 000188811a6d9387 R09: 0000000000000000 [ 94.061961][ T5857] R10: ffff88811a6d9300 R11: 0001c90000e2f357 R12: ffff88810bad9200 [ 94.070072][ T5857] R13: 0000000000000001 R14: 0000000000000020 R15: ffff88810bad92c0 [ 94.078119][ T5857] FS: 00007f8f1fe376c0(0000) GS:ffff8882ae8dc000(0000) knlGS:0000000000000000 [ 94.087167][ T5857] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.093780][ T5857] CR2: 0000200000006040 CR3: 000000013c0b0000 CR4: 00000000003506f0 [ 94.101869][ T5857] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.109877][ T5857] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 94.117896][ T5857] Call Trace: [ 94.121197][ T5857] [ 94.124186][ T5857] tc_new_tfilter+0xfc0/0x1200 [ 94.129095][ T5857] ? ns_capable+0x7c/0xb0 [ 94.133464][ T5857] ? __pfx_tc_new_tfilter+0x10/0x10 [ 94.138772][ T5857] rtnetlink_rcv_msg+0x64b/0x720 [ 94.143848][ T5857] netlink_rcv_skb+0x123/0x220 [ 94.148680][ T5857] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 94.154180][ T5857] rtnetlink_rcv+0x1c/0x30 [ 94.158654][ T5857] netlink_unicast+0x5c0/0x690 [ 94.163473][ T5857] netlink_sendmsg+0x5c8/0x6f0 [ 94.168363][ T5857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 94.173703][ T5857] ____sys_sendmsg+0x563/0x5b0 [ 94.178573][ T5857] ___sys_sendmsg+0x195/0x1e0 [ 94.183313][ T5857] __sys_sendmmsg+0x185/0x320 [ 94.188124][ T5857] __x64_sys_sendmmsg+0x57/0x70 [ 94.193017][ T5857] x64_sys_call+0x27aa/0x3020 [ 94.197792][ T5857] do_syscall_64+0x12c/0x370 [ 94.202417][ T5857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.208387][ T5857] RIP: 0033:0x7f8f213dc799 [ 94.212844][ T5857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.232587][ T5857] RSP: 002b:00007f8f1fe37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 94.241060][ T5857] RAX: ffffffffffffffda RBX: 00007f8f21655fa0 RCX: 00007f8f213dc799 [ 94.249121][ T5857] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 94.257140][ T5857] RBP: 00007f8f21472bd9 R08: 0000000000000000 R09: 0000000000000000 [ 94.265132][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.273157][ T5857] R13: 00007f8f21656038 R14: 00007f8f21655fa0 R15: 00007fffcd97ee68 [ 94.281187][ T5857] [ 94.284277][ T5857] ---[ end trace 0000000000000000 ]--- [ 94.325402][ T5857] netlink: 2 bytes leftover after parsing attributes in process `syz.2.847'. [ 94.336009][ T5418] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.419189][ T5859] vlan2: entered allmulticast mode [ 94.424475][ T5859] bond0: entered allmulticast mode [ 94.434557][ T5859] bond_slave_0: entered allmulticast mode [ 94.443023][ T5859] bond_slave_1: entered allmulticast mode [ 94.463286][ T5859] netlink: 14 bytes leftover after parsing attributes in process `syz.0.849'. [ 94.501089][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.521745][ T5859] bond_slave_0: left allmulticast mode [ 94.533582][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.543187][ T5859] bond_slave_1: left allmulticast mode [ 94.549209][ T5859] bond0 (unregistering): Released all slaves [ 94.634004][ T5869] loop4: detected capacity change from 0 to 512 [ 94.643046][ T5869] EXT4-fs: Ignoring removed nobh option [ 94.651872][ T5869] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 94.683139][ T5869] EXT4-fs (loop4): 1 truncate cleaned up [ 94.721011][ T5869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.014648][ T28] audit: type=1400 audit(1772893499.997:517): avc: denied { read write } for pid=5882 comm="syz.2.856" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.084105][ T28] audit: type=1400 audit(1772893499.997:518): avc: denied { open } for pid=5882 comm="syz.2.856" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.119031][ T28] audit: type=1400 audit(1772893499.997:519): avc: denied { ioctl } for pid=5882 comm="syz.2.856" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.424154][ T5892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.857'. [ 97.762791][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.812992][ T28] audit: type=1400 audit(1772893502.797:520): avc: denied { accept } for pid=5901 comm="syz.0.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 97.865708][ T28] audit: type=1326 audit(1772893502.857:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc97bc799 code=0x7fc00000 [ 97.898001][ T28] audit: type=1326 audit(1772893502.857:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5903 comm="syz.3.865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbfc97bc799 code=0x7fc00000 [ 97.928316][ T28] audit: type=1400 audit(1772893502.917:523): avc: denied { cpu } for pid=5911 comm="syz.0.867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 98.266620][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.874'. [ 98.398114][ T28] audit: type=1400 audit(1772893503.387:524): avc: denied { write } for pid=5929 comm="syz.4.876" path="socket:[17007]" dev="sockfs" ino=17007 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 98.940364][ T5938] loop3: detected capacity change from 0 to 8192 [ 100.018474][ T5936] syz.3.879 (5936) used greatest stack depth: 5776 bytes left [ 100.877437][ T5979] loop0: detected capacity change from 0 to 512 [ 100.898340][ T5977] loop2: detected capacity change from 0 to 8192 [ 100.904853][ T5979] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.893: inode has both inline data and extents flags [ 100.918104][ T5979] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 100.925332][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 100.940930][ C1] EXT4-fs (loop0): initial error at time 1772893505: ext4_orphan_get:1391: inode 15 [ 100.950422][ C1] EXT4-fs (loop0): last error at time 1772893505: ext4_orphan_get:1391: inode 15 [ 100.959658][ T5979] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.893: couldn't read orphan inode 15 (err -117) [ 100.971440][ T5979] loop0: lost filesystem error report for type 5 error -117 [ 100.976044][ T5979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.143391][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.011296][ T28] audit: type=1400 audit(1772893506.997:525): avc: denied { setopt } for pid=6013 comm="syz.1.901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 102.183456][ T6026] loop1: detected capacity change from 0 to 1024 [ 102.199818][ T6027] loop4: detected capacity change from 0 to 512 [ 102.235803][ T6027] EXT4-fs: Ignoring removed nobh option [ 102.247441][ T6026] loop1: detected capacity change from 0 to 1024 [ 102.269638][ T6027] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.297764][ T6027] EXT4-fs (loop4): 1 truncate cleaned up [ 102.303986][ T6027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.338901][ T6026] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.388381][ T28] audit: type=1400 audit(1772893507.377:526): avc: denied { create } for pid=6025 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.409106][ T6026] netlink: 'syz.1.906': attribute type 21 has an invalid length. [ 102.426364][ T6026] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 102.435473][ T28] audit: type=1400 audit(1772893507.397:527): avc: denied { write } for pid=6025 comm="syz.1.906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 102.463336][ T6026] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 102.475831][ T6026] EXT4-fs (loop1): This should not happen!! Data will be lost [ 102.475831][ T6026] [ 102.485982][ T6026] EXT4-fs (loop1): Total free blocks count 0 [ 102.491982][ T6026] EXT4-fs (loop1): Free/Dirty block details [ 102.497992][ T6026] EXT4-fs (loop1): free_blocks=20480 [ 102.503300][ T6026] EXT4-fs (loop1): dirty_blocks=64 [ 102.508534][ T6026] EXT4-fs (loop1): Block reservation details [ 102.514798][ T6026] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 102.516762][ T6031] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 103.226261][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.289556][ T28] audit: type=1400 audit(1772893509.267:528): avc: denied { getopt } for pid=6084 comm="syz.2.930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 105.017494][ T6104] loop1: detected capacity change from 0 to 512 [ 105.044316][ T6104] EXT4-fs warning (device loop1): ext4_xattr_inode_get:546: inode #11: comm syz.1.939: ea_inode file size=4 entry size=6 [ 105.087181][ T6104] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.939: corrupted inode contents [ 105.099255][ T6104] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.102519][ T6104] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.939: mark_inode_dirty error [ 105.111688][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 105.111705][ C1] EXT4-fs (loop1): initial error at time 1772893510: ext4_do_update_inode:5569: inode 15 [ 105.111729][ C1] EXT4-fs (loop1): last error at time 1772893510: ext4_do_update_inode:5569: inode 15 [ 105.148886][ T6104] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.155356][ T6104] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.939: corrupted inode contents [ 105.202997][ T6104] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.203151][ T6104] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.939: mark_inode_dirty error [ 105.249155][ T6104] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.249465][ T6104] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.939: mark inode dirty (error -117) [ 105.275495][ T6104] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 105.277212][ T6104] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117) [ 105.315420][ T6104] EXT4-fs (loop1): 1 orphan inode deleted [ 105.321829][ T6104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.375814][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.540953][ T28] audit: type=1326 audit(1772893510.527:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc97bc799 code=0x7ffc0000 [ 105.608232][ T28] audit: type=1326 audit(1772893510.557:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbfc97bc799 code=0x7ffc0000 [ 105.650902][ T28] audit: type=1326 audit(1772893510.557:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc97bc799 code=0x7ffc0000 [ 105.674188][ T28] audit: type=1326 audit(1772893510.557:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfc97bc799 code=0x7ffc0000 [ 105.697545][ T28] audit: type=1326 audit(1772893510.557:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfc977cfce code=0x7ffc0000 [ 105.721036][ T28] audit: type=1326 audit(1772893510.557:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbfc97bda97 code=0x7ffc0000 [ 105.755404][ T28] audit: type=1326 audit(1772893510.557:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbfc97bc799 code=0x7ffc0000 [ 105.795532][ T28] audit: type=1326 audit(1772893510.557:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fbfc97bda97 code=0x7ffc0000 [ 105.823084][ T6126] syz.1.944: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 105.835456][ T28] audit: type=1326 audit(1772893510.557:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6120 comm="syz.3.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fbfc977cfce code=0x7ffc0000 [ 105.845533][ T6126] CPU: 0 UID: 0 PID: 6126 Comm: syz.1.944 Tainted: G W syzkaller #0 PREEMPT(full) [ 105.845618][ T6126] Tainted: [W]=WARN [ 105.845636][ T6126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 105.845666][ T6126] Call Trace: [ 105.845683][ T6126] [ 105.845701][ T6126] __dump_stack+0x1d/0x30 [ 105.845782][ T6126] dump_stack_lvl+0x95/0xd0 [ 105.845893][ T6126] dump_stack+0x15/0x1b [ 105.845968][ T6126] warn_alloc+0x145/0x1c0 [ 105.846059][ T6126] ? __schedule+0x93c/0xd40 [ 105.846129][ T6126] ? reweight_entity+0x286/0x2d0 [ 105.846277][ T6126] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 105.846390][ T6126] ? preempt_schedule_common+0x11/0x30 [ 105.846483][ T6126] ? __rcu_read_unlock+0x4e/0x70 [ 105.846532][ T6126] ? avc_has_perm_noaudit+0xab/0x130 [ 105.846604][ T6126] ? should_fail_ex+0x30/0x280 [ 105.846735][ T6126] ? xskq_create+0x36/0xe0 [ 105.846795][ T6126] vmalloc_user_noprof+0x7d/0xb0 [ 105.846859][ T6126] ? xskq_create+0x80/0xe0 [ 105.846906][ T6126] xskq_create+0x80/0xe0 [ 105.846960][ T6126] xsk_init_queue+0x70/0xb0 [ 105.847023][ T6126] xsk_setsockopt+0x3f5/0x640 [ 105.847139][ T6126] ? __pfx_xsk_setsockopt+0x10/0x10 [ 105.847252][ T6126] __sys_setsockopt+0x184/0x200 [ 105.847372][ T6126] __x64_sys_setsockopt+0x64/0x80 [ 105.847486][ T6126] x64_sys_call+0x2327/0x3020 [ 105.847565][ T6126] do_syscall_64+0x12c/0x370 [ 105.847668][ T6126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.847740][ T6126] RIP: 0033:0x7f3c0025c799 [ 105.847791][ T6126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.847872][ T6126] RSP: 002b:00007f3bfecaf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 105.847935][ T6126] RAX: ffffffffffffffda RBX: 00007f3c004d5fa0 RCX: 00007f3c0025c799 [ 105.847984][ T6126] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000008 [ 105.848019][ T6126] RBP: 00007f3c002f2bd9 R08: 0000000000000004 R09: 0000000000000000 [ 105.848060][ T6126] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.848101][ T6126] R13: 00007f3c004d6038 R14: 00007f3c004d5fa0 R15: 00007ffc71305438 [ 105.848210][ T6126] [ 105.850695][ T6126] Mem-Info: [ 106.085507][ T6126] active_anon:26130 inactive_anon:33520 isolated_anon:0 [ 106.085507][ T6126] active_file:13747 inactive_file:2494 isolated_file:0 [ 106.085507][ T6126] unevictable:0 dirty:261 writeback:0 [ 106.085507][ T6126] slab_reclaimable:3750 slab_unreclaimable:42898 [ 106.085507][ T6126] mapped:30305 shmem:52328 pagetables:3167 [ 106.085507][ T6126] sec_pagetables:0 bounce:0 [ 106.085507][ T6126] kernel_misc_reclaimable:0 [ 106.085507][ T6126] free:1816906 free_pcp:3795 free_cma:0 [ 106.136168][ T6126] Node 0 active_anon:105912kB inactive_anon:134080kB active_file:54988kB inactive_file:9976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:121220kB dirty:1044kB writeback:0kB shmem:210704kB kernel_stack:3888kB pagetables:12668kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 106.184035][ T6126] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 106.214099][ T6126] lowmem_reserve[]: 0 2879 7857 7857 [ 106.219661][ T6126] Node 0 DMA32 free:2944656kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948180kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 106.304970][ T6126] lowmem_reserve[]: 0 0 4978 4978 [ 106.310299][ T6126] Node 0 Normal free:4310740kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:97560kB inactive_anon:134080kB active_file:52088kB inactive_file:9976kB unevictable:0kB writepending:1044kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:18680kB local_pcp:8584kB free_cma:0kB [ 106.356280][ T6126] lowmem_reserve[]: 0 0 0 0 [ 106.360997][ T6126] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 106.374340][ T6126] Node 0 DMA32: 2*4kB (M) 3*8kB (M) 5*16kB (M) 5*32kB (M) 4*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944656kB [ 106.391136][ T6126] Node 0 Normal: 1397*4kB (UME) 782*8kB (UME) 785*16kB (UME) 594*32kB (UME) 510*64kB (UME) 318*128kB (UM) 217*256kB (UME) 175*512kB (UME) 138*1024kB (UM) 90*2048kB (UM) 909*4096kB (UM) = 4310804kB [ 106.458519][ T6130] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'. [ 106.467504][ T6126] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 106.477152][ T6126] 66110 total pagecache pages [ 106.489120][ T6126] 23 pages in swap cache [ 106.493439][ T6126] Free swap = 55680kB [ 106.499234][ T6126] Total swap = 124996kB [ 106.503454][ T6126] 2097051 pages RAM [ 106.520556][ T6126] 0 pages HighMem/MovableOnly [ 106.555915][ T6126] 81606 pages reserved [ 106.857639][ T6149] loop1: detected capacity change from 0 to 2048 [ 106.879701][ T6149] EXT4-fs: Ignoring removed i_version option [ 106.919312][ T6149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.019045][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.957'. [ 107.070246][ T6161] bridge_slave_1: left allmulticast mode [ 107.090144][ T6161] bridge_slave_1: left promiscuous mode [ 107.107991][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.126055][ T6161] bridge_slave_0: left allmulticast mode [ 107.136681][ T6161] bridge_slave_0: left promiscuous mode [ 107.155599][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.331957][ T6174] loop2: detected capacity change from 0 to 512 [ 107.379124][ T6174] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.961: inode has both inline data and extents flags [ 107.393727][ T6174] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 107.395322][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 107.410891][ C0] EXT4-fs (loop2): initial error at time 1772893512: ext4_orphan_get:1391: inode 15 [ 107.420304][ C0] EXT4-fs (loop2): last error at time 1772893512: ext4_orphan_get:1391: inode 15 [ 107.495365][ T6174] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.961: couldn't read orphan inode 15 (err -117) [ 107.507296][ T6174] loop2: lost filesystem error report for type 5 error -117 [ 107.507866][ T6174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.548902][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.603653][ T70] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 107.619058][ T70] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1682 with error 28 [ 107.634855][ T70] EXT4-fs (loop1): This should not happen!! Data will be lost [ 107.634855][ T70] [ 107.651140][ T70] EXT4-fs (loop1): Total free blocks count 0 [ 107.661666][ T70] EXT4-fs (loop1): Free/Dirty block details [ 107.667751][ T70] EXT4-fs (loop1): free_blocks=2415919504 [ 107.673914][ T70] EXT4-fs (loop1): dirty_blocks=3392 [ 107.679501][ T70] EXT4-fs (loop1): Block reservation details [ 107.686053][ T70] EXT4-fs (loop1): i_reserved_data_blocks=106 [ 107.701649][ T70] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1682 with error 28 [ 107.938606][ T6195] loop2: detected capacity change from 0 to 512 [ 107.953786][ T6195] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 108.374436][ T6195] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.969: bg 0: block 393: padding at end of block bitmap is not set [ 108.397733][ T6206] bond1: entered allmulticast mode [ 108.416042][ T6195] loop2: lost filesystem error report for type 5 error -117 [ 108.416310][ T6195] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 108.432340][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 108.432355][ C1] EXT4-fs (loop2): initial error at time 1772893513: ext4_validate_block_bitmap:441 [ 108.432385][ C1] EXT4-fs (loop2): last error at time 1772893513: ext4_validate_block_bitmap:441 [ 108.457695][ T6195] loop2: lost filesystem error report for type 5 error -117 [ 108.457957][ T6195] EXT4-fs (loop2): 2 truncates cleaned up [ 108.471636][ T6195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.497919][ T6206] bridge0: entered promiscuous mode [ 108.504029][ T6206] bridge0: entered allmulticast mode [ 108.511285][ T6206] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 108.555529][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.250392][ T6254] loop1: detected capacity change from 0 to 512 [ 109.257196][ T6254] EXT4-fs: test_dummy_encryption option not supported [ 109.270697][ T6254] SELinux: security_context_str_to_sid (ÿû`Û'àˆsÃÉuàA^:=®‚) failed with errno=-22 [ 109.500815][ T6273] netlink: 'syz.1.997': attribute type 1 has an invalid length. [ 109.545765][ T6273] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.586952][ T6273] bond1: (slave veth3): Enslaving as an active interface with a down link [ 109.598794][ T6273] bond1: (slave dummy0): making interface the new active one [ 109.607679][ T6273] dummy0: entered promiscuous mode [ 109.612969][ T6273] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 109.623491][ T6273] netlink: 14 bytes leftover after parsing attributes in process `syz.1.997'. [ 109.650087][ T6273] bond1: (slave dummy0): Releasing active interface [ 109.664302][ T6273] dummy0 (unregistering): left promiscuous mode [ 109.703214][ T6285] IPVS: Unknown mcast interface: dummy0 [ 109.760239][ T6290] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1004'. [ 109.837864][ T6290] ipvlan2: entered promiscuous mode [ 109.892756][ T6304] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 109.904548][ T6304] syzkaller0: entered promiscuous mode [ 109.910471][ T6304] syzkaller0: entered allmulticast mode [ 109.951876][ T6310] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1011'. [ 109.970566][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 109.970580][ T28] audit: type=1400 audit(1772893514.957:575): avc: denied { ioctl } for pid=6311 comm="syz.1.1013" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x451b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 109.973711][ T6312] loop1: detected capacity change from 0 to 512 [ 110.026917][ T28] audit: type=1400 audit(1772893515.017:576): avc: denied { mount } for pid=6298 comm="syz.3.1008" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 110.041063][ T6314] loop4: detected capacity change from 0 to 256 [ 110.080051][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.099251][ T6312] EXT4-fs (loop1): too many log groups per flexible block group [ 110.110893][ T6314] FAT-fs (loop4): Filesystem has been set read-only [ 110.141835][ T6312] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 110.150655][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.159553][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.168425][ T6312] EXT4-fs (loop1): mount failed [ 110.175755][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.184564][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.193503][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.202496][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.211392][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.220358][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.229478][ T6314] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 110.967580][ T6356] netlink: 'syz.0.1031': attribute type 1 has an invalid length. [ 111.002154][ T6356] gretap1: entered allmulticast mode [ 111.009220][ T6356] bond0: (slave gretap1): making interface the new active one [ 111.017288][ T6356] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 111.113609][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'. [ 111.251445][ T6376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1039'. [ 111.266286][ T6372] loop2: detected capacity change from 0 to 8192 [ 111.288005][ T6372] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 111.355436][ T28] audit: type=1400 audit(1772893516.337:577): avc: denied { mounton } for pid=6371 comm="syz.2.1038" path="/214/file0/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 111.480354][ T6397] loop3: detected capacity change from 0 to 256 [ 111.550404][ T6397] FAT-fs (loop3): Directory bread(block 64) failed [ 111.557733][ T6397] FAT-fs (loop3): Directory bread(block 65) failed [ 111.565210][ T6397] FAT-fs (loop3): Directory bread(block 66) failed [ 111.573599][ T6397] FAT-fs (loop3): Directory bread(block 67) failed [ 111.581489][ T6397] FAT-fs (loop3): Directory bread(block 68) failed [ 111.589227][ T6397] FAT-fs (loop3): Directory bread(block 69) failed [ 111.600800][ T6397] FAT-fs (loop3): Directory bread(block 70) failed [ 111.608567][ T6397] FAT-fs (loop3): Directory bread(block 71) failed [ 111.616171][ T6397] FAT-fs (loop3): Directory bread(block 72) failed [ 111.623355][ T6397] FAT-fs (loop3): Directory bread(block 73) failed [ 112.051283][ T28] audit: type=1400 audit(1772893517.037:578): avc: denied { create } for pid=6421 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 112.161041][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1057'. [ 112.183377][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 112.336006][ T28] audit: type=1400 audit(1772893517.327:579): avc: denied { bind } for pid=6433 comm="syz.2.1060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 112.356186][ T28] audit: type=1400 audit(1772893517.327:580): avc: denied { name_bind } for pid=6433 comm="syz.2.1060" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 112.389733][ T6436] loop0: detected capacity change from 0 to 764 [ 112.396026][ T28] audit: type=1400 audit(1772893517.327:581): avc: denied { node_bind } for pid=6433 comm="syz.2.1060" saddr=ff02::1 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 112.448500][ T6436] iso9660: Unknown parameter ' [ 112.448500][ T6436] %';ºª™!ˆ²5†ÐPq¤´ÆëºB«€œ‰r)š184467440737095516150x00000000000000040xffffffffffffffff' [ 112.503513][ T28] audit: type=1400 audit(1772893517.487:582): avc: denied { create } for pid=6441 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.541415][ T28] audit: type=1400 audit(1772893517.487:583): avc: denied { write } for pid=6441 comm="syz.3.1064" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 112.575502][ T28] audit: type=1400 audit(1772893517.517:584): avc: denied { mounton } for pid=6435 comm="syz.0.1061" path="/proc/532/task" dev="proc" ino=24535 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 112.614545][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1067'. [ 112.879033][ T6484] delete_channel: no stack [ 113.111492][ T6521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1082'. [ 113.152587][ T6521] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1082'. [ 114.346390][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 115.103449][ T28] kauditd_printk_skb: 281 callbacks suppressed [ 115.103464][ T28] audit: type=1400 audit(1772893520.087:866): avc: denied { write } for pid=6621 comm="syz.2.1104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 115.157675][ T6627] Invalid ELF header magic: != ELF [ 115.181000][ T28] audit: type=1400 audit(1772893520.127:867): avc: denied { sys_module } for pid=6626 comm="syz.3.1106" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 115.202518][ T28] audit: type=1400 audit(1772893520.127:868): avc: denied { module_load } for pid=6626 comm="syz.3.1106" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=22458 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 115.612729][ T6657] netlink: 'syz.3.1119': attribute type 1 has an invalid length. [ 115.673384][ T6657] bond1: entered promiscuous mode [ 115.686297][ T6657] bond1: entered allmulticast mode [ 115.700752][ T6657] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.746163][ T6665] bridge2: entered promiscuous mode [ 115.760351][ T6665] bridge2: entered allmulticast mode [ 115.775401][ T3649] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 115.823471][ T6670] capability: warning: `syz.4.1123' uses deprecated v2 capabilities in a way that may be insecure [ 115.830834][ T6665] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 115.930597][ T3649] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 117.488272][ T6701] loop2: detected capacity change from 0 to 512 [ 117.494832][ T6701] EXT4-fs: inline encryption not supported [ 117.511152][ T28] audit: type=1400 audit(1772893522.497:869): avc: denied { setopt } for pid=6703 comm="syz.4.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 117.536992][ T6701] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 117.567423][ T6706] lo speed is unknown, defaulting to 1000 [ 117.576086][ T6706] lo speed is unknown, defaulting to 1000 [ 117.591595][ T6698] loop0: detected capacity change from 0 to 4096 [ 117.604055][ T6706] lo speed is unknown, defaulting to 1000 [ 117.622136][ T6698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.659970][ T6706] infiniband syU×: set active [ 117.664754][ T3369] lo speed is unknown, defaulting to 1000 [ 117.670698][ T6706] infiniband syU×: added lo [ 117.679263][ T6698] EXT4-fs (loop0): resizing filesystem from 512 to 0 blocks [ 117.687240][ T6698] EXT4-fs warning (device loop0): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 117.706290][ T6706] RDS/IB: syU×: added [ 117.717849][ T6706] smc: adding ib device syU× with port count 1 [ 117.725408][ T6706] smc: ib device syU× port 1 has no pnetid [ 117.738101][ T6706] lo speed is unknown, defaulting to 1000 [ 117.760132][ T9] lo speed is unknown, defaulting to 1000 [ 117.859500][ T6706] lo speed is unknown, defaulting to 1000 [ 117.877923][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.992989][ T6706] lo speed is unknown, defaulting to 1000 [ 118.131262][ T6706] lo speed is unknown, defaulting to 1000 [ 118.205261][ T6706] lo speed is unknown, defaulting to 1000 [ 118.301682][ T6706] lo speed is unknown, defaulting to 1000 [ 118.463801][ T6722] loop4: detected capacity change from 0 to 512 [ 118.500673][ T6722] EXT4-fs: Ignoring removed bh option [ 118.520622][ T6722] EXT4-fs: inline encryption not supported [ 118.546578][ T6722] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 118.589650][ T6722] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 118.644525][ T6722] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1142: bg 0: block 248: padding at end of block bitmap is not set [ 118.685374][ T6722] loop4: lost filesystem error report for type 5 error -117 [ 118.685594][ T6722] Quota error (device loop4): write_blk: dquota write failed [ 118.700358][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 118.700382][ C1] EXT4-fs (loop4): last error at time 1772893523: ext4_validate_block_bitmap:441 [ 118.745349][ T6722] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 118.775351][ T6722] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1142: Failed to acquire dquot type 1 [ 118.805344][ T6722] loop4: lost filesystem error report for type 5 error -117 [ 118.815595][ T6722] EXT4-fs (loop4): 1 truncate cleaned up [ 118.874651][ T6722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 118.936925][ T6722] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0008-000000000000. [ 118.980476][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 119.096940][ T6736] lo speed is unknown, defaulting to 1000 [ 119.153920][ T3369] IPVS: starting estimator thread 0... [ 119.271915][ T6740] IPVS: using max 2256 ests per chain, 112800 per kthread [ 119.370021][ T6750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1153'. [ 119.533020][ T28] audit: type=1400 audit(1772893524.517:870): avc: denied { create } for pid=6766 comm="syz.2.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.587406][ T28] audit: type=1400 audit(1772893524.567:871): avc: denied { write } for pid=6766 comm="syz.2.1160" path="socket:[25835]" dev="sockfs" ino=25835 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 119.835145][ T6779] loop1: detected capacity change from 0 to 512 [ 119.853411][ T6779] EXT4-fs: quotafile must be on filesystem root [ 119.948912][ T6783] cgroup: Setting release_agent not allowed [ 120.004085][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1167'. [ 120.119199][ T6787] x_tables: duplicate underflow at hook 2 [ 120.266595][ T6794] openvswitch: netlink: Missing key (keys=40, expected=100) [ 120.380653][ T6800] loop0: detected capacity change from 0 to 1024 [ 120.413436][ T6800] loop0: detected capacity change from 0 to 1024 [ 120.437688][ T6800] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.457953][ T6800] netlink: 'syz.0.1172': attribute type 21 has an invalid length. [ 120.466322][ T6800] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 120.536534][ T6800] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 120.568709][ T6807] loop2: detected capacity change from 0 to 512 [ 120.625437][ T6800] EXT4-fs (loop0): This should not happen!! Data will be lost [ 120.625437][ T6800] [ 120.635374][ T6800] EXT4-fs (loop0): Total free blocks count 0 [ 120.655103][ T6807] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.697810][ T6800] EXT4-fs (loop0): Free/Dirty block details [ 120.708004][ T6807] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.721862][ T6800] EXT4-fs (loop0): free_blocks=20480 [ 120.744466][ T6800] EXT4-fs (loop0): dirty_blocks=64 [ 120.749860][ T6800] EXT4-fs (loop0): Block reservation details [ 120.756216][ T6800] EXT4-fs (loop0): i_reserved_data_blocks=4 [ 120.794634][ T3627] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 120.802880][ T6815] loop4: detected capacity change from 0 to 1024 [ 120.814919][ T6807] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 120.906603][ T6815] EXT4-fs: Ignoring removed orlov option [ 120.912398][ T6807] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28 [ 120.925946][ T6815] EXT4-fs: Ignoring removed nobh option [ 120.932531][ T6807] EXT4-fs (loop2): This should not happen!! Data will be lost [ 120.932531][ T6807] [ 120.956889][ T6815] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.975332][ T6807] EXT4-fs (loop2): Total free blocks count 0 [ 120.981409][ T6807] EXT4-fs (loop2): Free/Dirty block details [ 120.987389][ T6807] EXT4-fs (loop2): free_blocks=65280 [ 120.992717][ T6807] EXT4-fs (loop2): dirty_blocks=33 [ 120.997938][ T6807] EXT4-fs (loop2): Block reservation details [ 121.003942][ T6807] EXT4-fs (loop2): i_reserved_data_blocks=33 [ 121.049743][ T6820] loop0: detected capacity change from 0 to 128 [ 121.088538][ T6820] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.125618][ T6820] ext4 filesystem being mounted at /229/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 121.158961][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.255892][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.351700][ T6830] loop4: detected capacity change from 0 to 164 [ 121.560713][ T3312] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.598679][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1184'. [ 121.664082][ T6837] hsr_slave_0: left promiscuous mode [ 121.704263][ T6837] hsr_slave_1: left promiscuous mode [ 122.148202][ T28] audit: type=1400 audit(1772893527.137:872): avc: denied { bind } for pid=6853 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.246529][ T6856] EXT4-fs warning (device loop2): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 122.285665][ T6856] EXT4-fs (loop2): mount failed [ 123.402384][ T6882] set_capacity_and_notify: 1 callbacks suppressed [ 123.402402][ T6882] loop1: detected capacity change from 0 to 4096 [ 123.445851][ T6882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.489918][ T6882] EXT4-fs (loop1): resizing filesystem from 512 to 0 blocks [ 123.604617][ T6882] EXT4-fs warning (device loop1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 123.963480][ T28] audit: type=1326 audit(1772893528.947:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 123.998581][ T28] audit: type=1326 audit(1772893528.947:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 124.026656][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.039986][ T28] audit: type=1326 audit(1772893528.947:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 124.098576][ T6895] loop2: detected capacity change from 0 to 1024 [ 124.109540][ T6895] EXT4-fs: Ignoring removed orlov option [ 124.120246][ T28] audit: type=1326 audit(1772893528.947:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 124.144064][ T6895] EXT4-fs: Ignoring removed nobh option [ 124.151604][ T28] audit: type=1326 audit(1772893528.947:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 124.175370][ T28] audit: type=1326 audit(1772893528.957:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f2139cfce code=0x7ffc0000 [ 124.214048][ T28] audit: type=1326 audit(1772893528.957:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8f213dda97 code=0x7ffc0000 [ 124.245775][ T6895] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.258035][ T28] audit: type=1326 audit(1772893528.957:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8f213dc799 code=0x7ffc0000 [ 124.281382][ T28] audit: type=1326 audit(1772893528.957:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6888 comm="syz.2.1205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f8f213dda97 code=0x7ffc0000 [ 124.375025][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.394219][ T6923] loop2: detected capacity change from 0 to 1024 [ 125.428378][ T6923] EXT4-fs: Ignoring removed nobh option [ 125.446989][ T6923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.517998][ T6923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.575449][ T6923] mmap: syz.2.1217 (6923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 125.602738][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.661750][ T6930] loop4: detected capacity change from 0 to 4096 [ 125.683830][ T6930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.726374][ T6930] EXT4-fs (loop4): resizing filesystem from 512 to 0 blocks [ 125.733940][ T6930] EXT4-fs warning (device loop4): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 126.046258][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.093609][ T6947] lo: Caught tx_queue_len zero misconfig [ 127.065269][ T6971] loop1: detected capacity change from 0 to 1024 [ 127.077559][ T6971] EXT4-fs: Ignoring removed oldalloc option [ 127.087314][ T6971] EXT4-fs: Ignoring removed bh option [ 127.109208][ T6971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.673450][ T6971] ================================================================== [ 127.681599][ T6971] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 127.689612][ T6971] [ 127.691960][ T6971] write to 0xffff88811a95428c of 4 bytes by task 6975 on cpu 0: [ 127.699616][ T6971] xas_set_mark+0x12b/0x140 [ 127.704170][ T6971] tag_pages_for_writeback+0xe3/0x2e0 [ 127.709582][ T6971] ext4_do_writepages+0x6b9/0x2840 [ 127.714754][ T6971] ext4_writepages+0x18f/0x320 [ 127.719537][ T6971] do_writepages+0x1c6/0x310 [ 127.724247][ T6971] file_write_and_wait_range+0x178/0x2f0 [ 127.729895][ T6971] generic_buffers_fsync_noflush+0x45/0x130 [ 127.735814][ T6971] ext4_sync_file+0x1aa/0x6b0 [ 127.740504][ T6971] vfs_fsync_range+0xc5/0xe0 [ 127.745145][ T6971] ext4_buffered_write_iter+0x34f/0x3c0 [ 127.750717][ T6971] ext4_file_write_iter+0x380/0xfa0 [ 127.755946][ T6971] iter_file_splice_write+0x6c4/0xa80 [ 127.761346][ T6971] direct_splice_actor+0x156/0x2a0 [ 127.766502][ T6971] splice_direct_to_actor+0x311/0x670 [ 127.771903][ T6971] do_splice_direct+0x119/0x1a0 [ 127.776768][ T6971] do_sendfile+0x382/0x650 [ 127.781214][ T6971] __x64_sys_sendfile64+0x105/0x150 [ 127.786430][ T6971] x64_sys_call+0x2dc4/0x3020 [ 127.791156][ T6971] do_syscall_64+0x12c/0x370 [ 127.795782][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.801698][ T6971] [ 127.804032][ T6971] read to 0xffff88811a95428c of 4 bytes by task 6971 on cpu 1: [ 127.811590][ T6971] file_write_and_wait_range+0x130/0x2f0 [ 127.817241][ T6971] generic_buffers_fsync_noflush+0x45/0x130 [ 127.823169][ T6971] ext4_sync_file+0x1aa/0x6b0 [ 127.827873][ T6971] vfs_fsync_range+0xc5/0xe0 [ 127.832499][ T6971] ext4_buffered_write_iter+0x34f/0x3c0 [ 127.838073][ T6971] ext4_file_write_iter+0x380/0xfa0 [ 127.843304][ T6971] iter_file_splice_write+0x6c4/0xa80 [ 127.848701][ T6971] direct_splice_actor+0x156/0x2a0 [ 127.853825][ T6971] splice_direct_to_actor+0x311/0x670 [ 127.859223][ T6971] do_splice_direct+0x119/0x1a0 [ 127.864095][ T6971] do_sendfile+0x382/0x650 [ 127.868539][ T6971] __x64_sys_sendfile64+0x105/0x150 [ 127.873762][ T6971] x64_sys_call+0x2dc4/0x3020 [ 127.878467][ T6971] do_syscall_64+0x12c/0x370 [ 127.883071][ T6971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.888983][ T6971] [ 127.891319][ T6971] value changed: 0x02000021 -> 0x04000021 [ 127.897066][ T6971] [ 127.899431][ T6971] Reported by Kernel Concurrency Sanitizer on: [ 127.905607][ T6971] CPU: 1 UID: 0 PID: 6971 Comm: syz.1.1245 Tainted: G W syzkaller #0 PREEMPT(full) [ 127.916479][ T6971] Tainted: [W]=WARN [ 127.920293][ T6971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 127.930388][ T6971] ================================================================== [ 128.013241][ T6975] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1245: Allocating blocks 1-17 which overlap fs metadata [ 128.054535][ T6971] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4222: comm syz.1.1245: Allocating blocks 1-17 which overlap fs metadata [ 128.105390][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.