last executing test programs: 5.533268748s ago: executing program 2 (id=272): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r0, 0xee01, 0x0) keyctl$setperm(0x5, r0, 0x30925) keyctl$read(0xb, r0, 0x0, 0x0) 5.470458082s ago: executing program 2 (id=274): ioperm(0x7, 0x4, 0x7) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) 5.425481823s ago: executing program 2 (id=276): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$rds(0x15, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.406181065s ago: executing program 2 (id=277): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) ioctl$BTRFS_IOC_SPACE_INFO(0xffffffffffffffff, 0xc0109414, &(0x7f0000003140)={0x0, 0x1}) io_setup(0x20, &(0x7f0000001140)) 5.301882699s ago: executing program 2 (id=281): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5.223142314s ago: executing program 2 (id=285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r1, 0xf01, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1021}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) 2.130990786s ago: executing program 3 (id=333): unshare(0x2040400) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) 1.963984434s ago: executing program 3 (id=336): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e23, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000000)="f7", 0x1, 0x8081, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, 0x0, 0x0) 1.519744686s ago: executing program 3 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffc48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r1}, 0x94) 1.420557981s ago: executing program 3 (id=349): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@jqfmt_vfsv1}, {@nodelalloc}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x5}}, {@jqfmt_vfsv0}, {@quota}]}, 0x3, 0x458, &(0x7f0000000300)="$eJzs27tvHEUcAODfrh8hL2xCeOQBGALC4mHHToAUFIBAogAJiSaUJnaiECdGsZFIhEhAKJQoEhUNokTiL6CCBgEVEi30CCmCNERUh/Z21/fIPYi584Xc90nrm9nHzczNzN3MjjeAoTWV/UkidkTELxExkUcbT5jKX65drVzId1Yqr/+RVM/76+p7x8pTy+u2F5HpNCL9KIl9LdJdPXf+1MLy8tLZIj67dvrt2dVz5588eXrhxNKJpTPzR44cPjT3zNPzT/WknHdked37/sr+PS+/cfnVY0cvv/nDV0lZ/qZy9MhUp4OPVCo9Tm6wdtaFk9EBZoQbMhIRWXWNVfv/RIxErfIm4qUPB5o5oK8qhTaHL1aAW1gS9bHxGFxOgM1V/tBn899y27zRx+BdeT6fAGXlvlZs+ZHRSCOfGGVzo37N1qci4ujFvz/PtujPfQgAgAbfZOOfJxrHf39Wj6Rxd915txdrQ5PFWsquiLgzInZHxF0R1XPviYh7m94/7ZJ+8yLJ9eOftK+rCdn479nq2lbz+G8955MjRWxnNTKWHD+5vHSw+EymY2xLFp/rkMa3L/78Sbtj9eO/bMvSL8eCRT5+H93SeM3iwtrCfylzvSsfROwdbVX+ZH0lIImIPRGxd4NpnHzsy/3tjjWXv5J0eqfnGqM9aBmVLyIezev/YjSVv5R0Xp+cvS2Wlw7Olq3iej/+dOm1dul3r//+yup/W8v2v17+yaR+vXb1xtO49OvHbec0Mxtq/7Ud48Xruwtra2fnIsaTV/JM1++fr11bxsvzs/JPH2jd/3dF7ZPYFxFZI74vIu6PiAeKunswIh6KiAMdyv/9Cw+/1e7YzVD/i031P9l4SlP91wLj0byndWDk1HdfN75jLfjvvv8OV0PTxZ5u339lm+iWr421ZgAAAPj/SSNiRyTpzHo4TWdm8v/h3x3b0uWV1bXHj6+8c2Yxf0ZgMsbS8k5Xfj84vx86V0zry/h8U/xQcd/405Gt1fjMsZXlxUEXHobc9jb9P/PbyKBzB/Sd57VgeOn/MLz0fxhe+j8Mrxb9f2uXS8b6lRdgc7X6/b9QC1YmNjMzwKZq6v+W/WCImP/D8NL/YXjV9/+Oz98Dt5LVrdH9IXkBgesCkd4U2ehNIKn1gs+iD0nsGHQBbzww6G8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA3vgnAAD//2Gb4I4=") r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.190196932s ago: executing program 3 (id=356): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x89f9b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) personality(0x619641b6fb4b8591) uname(&(0x7f0000000180)=""/224) 859.262008ms ago: executing program 0 (id=363): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/4096, 0x1000}, 0x5}], 0x1, 0x100, 0x0) 800.610291ms ago: executing program 0 (id=364): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000000d0a010800000000000000000a0000080900020073797a31000000000900010073797a31000000001800038014000080080003400000002208"], 0x44}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 673.530187ms ago: executing program 1 (id=368): set_mempolicy(0x8003, &(0x7f0000000080)=0x1, 0x8) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 633.509589ms ago: executing program 4 (id=369): arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = io_uring_setup(0x1684, &(0x7f0000000200)={0x0, 0x3a2b, 0x8, 0x4, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 614.75761ms ago: executing program 0 (id=370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, 0x0, 0x0) 548.561404ms ago: executing program 0 (id=371): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@rand_addr=0x64010101, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x3f}, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="0001000018000100feffffff0001000020010000000000000000000000000000fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000ac14143f"], 0x100}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 491.237176ms ago: executing program 3 (id=372): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xdab1000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 465.423018ms ago: executing program 4 (id=373): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000004dc0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7fff}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000004c0)="1378", 0x2}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) 434.753629ms ago: executing program 0 (id=374): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, 0x0, 0x8000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000040), 0x21, 0x4f3, &(0x7f0000000f80)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240), 0x24, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) 395.257341ms ago: executing program 4 (id=375): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x471b, &(0x7f0000000080)={0x0, 0x6b86, 0x18, 0x2, 0x20000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 378.484091ms ago: executing program 1 (id=376): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x20040810}, 0x0) 315.246745ms ago: executing program 1 (id=377): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) 236.010269ms ago: executing program 4 (id=378): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 192.846681ms ago: executing program 1 (id=379): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f0000000c00)=ANY=[@ANYBLOB="6331fddf03333a00ff020000000000000000000000000001fe"], 0x35b) 166.862222ms ago: executing program 0 (id=380): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000780)={[{@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@fat=@dos1xfloppy}, {@fat=@fmask={'fmask', 0x3d, 0xffff}}, {@fat=@gid={'gid', 0x3d, 0xee00}}, {@fat=@quiet}, {@fat=@tz_utc}, {@nodots}, {@nodots}, {@dots}, {@fat=@check_normal}, {@fat=@nfs}, {@nodots}, {@fat=@nfs_stale_rw}, {@nodots}]}, 0x1, 0x1fc, &(0x7f0000000200)="$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") syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 165.154022ms ago: executing program 4 (id=381): unshare(0x8000280) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) 64.441007ms ago: executing program 1 (id=382): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newtaction={0x78, 0x30, 0x309, 0x0, 0x2, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0xbabd, 0x81, 0x5, 0x1, 0xffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 51.135718ms ago: executing program 4 (id=383): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x5464fadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xc}, 0x100b28, 0x9, 0x27fffffe, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r0}, 0x38) 0s ago: executing program 1 (id=384): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000180)={[{@barrier}, {@nombcache}, {@noquota}, {@barrier}, {@minixdf}, {@barrier}]}, 0x1, 0x5a5, &(0x7f0000000d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r1, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000200)='p', 0x8200, 0x600}]) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 36.569116][ T28] audit: type=1400 audit(1774390467.598:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 36.594315][ T28] audit: type=1400 audit(1774390467.628:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.596631][ T3303] cgroup: Unknown subsys name 'net' [ 36.624019][ T28] audit: type=1400 audit(1774390467.658:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 36.724809][ T3303] cgroup: Unknown subsys name 'cpuset' [ 36.731287][ T3303] cgroup: Unknown subsys name 'rlimit' [ 36.842438][ T28] audit: type=1400 audit(1774390467.868:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.866241][ T28] audit: type=1400 audit(1774390467.868:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.899877][ T28] audit: type=1400 audit(1774390467.868:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.921424][ T28] audit: type=1400 audit(1774390467.868:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.942580][ T28] audit: type=1400 audit(1774390467.868:69): avc: denied { read } for pid=3041 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.959433][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 36.964585][ T28] audit: type=1400 audit(1774390467.898:70): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 36.998569][ T28] audit: type=1400 audit(1774390467.898:71): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 37.014636][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.926182][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 38.942174][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 38.979196][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 38.989129][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 39.005515][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 39.087840][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.095104][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.102465][ T3315] bridge_slave_0: entered allmulticast mode [ 39.109388][ T3315] bridge_slave_0: entered promiscuous mode [ 39.134423][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.141934][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.149673][ T3315] bridge_slave_1: entered allmulticast mode [ 39.156790][ T3315] bridge_slave_1: entered promiscuous mode [ 39.169653][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.177113][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.184749][ T3321] bridge_slave_0: entered allmulticast mode [ 39.191488][ T3321] bridge_slave_0: entered promiscuous mode [ 39.215503][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.222792][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.230093][ T3321] bridge_slave_1: entered allmulticast mode [ 39.236795][ T3321] bridge_slave_1: entered promiscuous mode [ 39.243600][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.251133][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.258568][ T3317] bridge_slave_0: entered allmulticast mode [ 39.265637][ T3317] bridge_slave_0: entered promiscuous mode [ 39.282134][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.306636][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.314088][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.321386][ T3317] bridge_slave_1: entered allmulticast mode [ 39.328223][ T3317] bridge_slave_1: entered promiscuous mode [ 39.335178][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.342612][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.350290][ T3322] bridge_slave_0: entered allmulticast mode [ 39.357010][ T3322] bridge_slave_0: entered promiscuous mode [ 39.364732][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.374295][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.382247][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.390005][ T3320] bridge_slave_0: entered allmulticast mode [ 39.396856][ T3320] bridge_slave_0: entered promiscuous mode [ 39.413600][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.420971][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.428578][ T3322] bridge_slave_1: entered allmulticast mode [ 39.435190][ T3322] bridge_slave_1: entered promiscuous mode [ 39.446531][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.453970][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.461348][ T3320] bridge_slave_1: entered allmulticast mode [ 39.467934][ T3320] bridge_slave_1: entered promiscuous mode [ 39.475826][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.510259][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.521110][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.531666][ T3315] team0: Port device team_slave_0 added [ 39.538687][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.553796][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.568626][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.584155][ T3315] team0: Port device team_slave_1 added [ 39.598180][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.614491][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.640835][ T3317] team0: Port device team_slave_0 added [ 39.652510][ T3321] team0: Port device team_slave_0 added [ 39.659332][ T3322] team0: Port device team_slave_0 added [ 39.675491][ T3317] team0: Port device team_slave_1 added [ 39.682363][ T3321] team0: Port device team_slave_1 added [ 39.689270][ T3322] team0: Port device team_slave_1 added [ 39.696077][ T3320] team0: Port device team_slave_0 added [ 39.707265][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.714451][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.741596][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.767347][ T3320] team0: Port device team_slave_1 added [ 39.773464][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.780899][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.807555][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.824099][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.832026][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.859181][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.884157][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.891415][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.917939][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.929486][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.936700][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.964225][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.982698][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.989792][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.016737][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.039913][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.047494][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.074863][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.085931][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.093053][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.121376][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.140780][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.148078][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.176121][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.187715][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.194982][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 40.221171][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.238293][ T3315] hsr_slave_0: entered promiscuous mode [ 40.244864][ T3315] hsr_slave_1: entered promiscuous mode [ 40.288412][ T3322] hsr_slave_0: entered promiscuous mode [ 40.294810][ T3322] hsr_slave_1: entered promiscuous mode [ 40.300780][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 40.306748][ T3322] Cannot create hsr debugfs directory [ 40.319377][ T3321] hsr_slave_0: entered promiscuous mode [ 40.325568][ T3321] hsr_slave_1: entered promiscuous mode [ 40.331549][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 40.337605][ T3321] Cannot create hsr debugfs directory [ 40.356184][ T3320] hsr_slave_0: entered promiscuous mode [ 40.362757][ T3320] hsr_slave_1: entered promiscuous mode [ 40.369040][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 40.375015][ T3320] Cannot create hsr debugfs directory [ 40.383484][ T3317] hsr_slave_0: entered promiscuous mode [ 40.390514][ T3317] hsr_slave_1: entered promiscuous mode [ 40.396812][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 40.402914][ T3317] Cannot create hsr debugfs directory [ 40.627738][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 40.637190][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 40.648797][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 40.658091][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 40.688235][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.698327][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.711488][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.721188][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.751039][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.760670][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.770271][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.783580][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.819884][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.831402][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.840896][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.850496][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.886072][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.911761][ T3322] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.921263][ T3322] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.936651][ T3322] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.946454][ T3322] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.958513][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.967846][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.994402][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.001664][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.010935][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.018253][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.043071][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.067327][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.075460][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.092752][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.101027][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.108425][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.140583][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.160935][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.168343][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.183141][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.193928][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.210216][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.217687][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.234232][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.251083][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.282900][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.296441][ T1888] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.303769][ T1888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.318164][ T1888] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.325750][ T1888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.349916][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.361309][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.373257][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.398981][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.411120][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.421001][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.447008][ T2120] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.454471][ T2120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.472494][ T2120] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.479988][ T2120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.569102][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.595339][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.652964][ T3315] veth0_vlan: entered promiscuous mode [ 41.671038][ T3315] veth1_vlan: entered promiscuous mode [ 41.700642][ T3315] veth0_macvtap: entered promiscuous mode [ 41.725696][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.736260][ T3315] veth1_macvtap: entered promiscuous mode [ 41.759106][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.771950][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.794915][ T3321] veth0_vlan: entered promiscuous mode [ 41.807303][ T3317] veth0_vlan: entered promiscuous mode [ 41.815679][ T233] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.824623][ T233] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.851201][ T233] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.861131][ T233] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.872745][ T3317] veth1_vlan: entered promiscuous mode [ 41.885027][ T3321] veth1_vlan: entered promiscuous mode [ 41.892325][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 41.892349][ T28] audit: type=1400 audit(1774390472.918:85): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.qp6ppG/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 41.925723][ T3320] veth0_vlan: entered promiscuous mode [ 41.933025][ T28] audit: type=1400 audit(1774390472.918:86): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 41.959780][ T3317] veth0_macvtap: entered promiscuous mode [ 41.974139][ T28] audit: type=1400 audit(1774390472.928:87): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.qp6ppG/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 41.996127][ T3317] veth1_macvtap: entered promiscuous mode [ 42.004425][ T28] audit: type=1400 audit(1774390472.928:88): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 42.030240][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 42.038125][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.053607][ T28] audit: type=1400 audit(1774390472.928:89): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.qp6ppG/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 42.081393][ T28] audit: type=1400 audit(1774390472.928:90): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.qp6ppG/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 42.097848][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.117795][ T28] audit: type=1400 audit(1774390472.928:91): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.140945][ T3320] veth1_vlan: entered promiscuous mode [ 42.163652][ T3321] veth0_macvtap: entered promiscuous mode [ 42.171313][ T28] audit: type=1400 audit(1774390472.958:92): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.187301][ T2120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.206710][ T28] audit: type=1400 audit(1774390472.958:93): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=3932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 42.239520][ T3322] veth0_vlan: entered promiscuous mode [ 42.245722][ T28] audit: type=1400 audit(1774390473.178:94): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 42.248315][ T3321] veth1_macvtap: entered promiscuous mode [ 42.281700][ T2120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.291317][ T2120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.307264][ T3320] veth0_macvtap: entered promiscuous mode [ 42.318942][ T2120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.337392][ T3320] veth1_macvtap: entered promiscuous mode [ 42.359909][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.368571][ T3322] veth1_vlan: entered promiscuous mode [ 42.381618][ T3488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7'. [ 42.400429][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.418643][ T3322] veth0_macvtap: entered promiscuous mode [ 42.438279][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.447206][ T3322] veth1_macvtap: entered promiscuous mode [ 42.462083][ T1888] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.471920][ T1888] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.499427][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.511800][ T1888] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.522321][ T1888] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.544312][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.568405][ T3497] sctp: [Deprecated]: syz.0.10 (pid 3497) Use of int in max_burst socket option deprecated. [ 42.568405][ T3497] Use struct sctp_assoc_value instead [ 42.607156][ T1888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.618313][ T1888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.633279][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.662943][ T1888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.686759][ T1888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.736117][ T1888] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.759389][ T1888] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.806419][ T1888] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.827805][ T1888] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.903567][ T3524] Zero length message leads to an empty skb [ 43.083881][ C0] hrtimer: interrupt took 287784 ns [ 43.261114][ T3571] vcan0: tx address claim with dest, not broadcast [ 43.485683][ T3598] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 43.524244][ T3602] Illegal XDP return value 4294967294 on prog (id 1) dev N/A, expect packet loss! [ 43.587956][ T3605] bridge0: entered promiscuous mode [ 43.609795][ T3605] macvlan2: entered promiscuous mode [ 43.731046][ T3615] loop2: detected capacity change from 0 to 1024 [ 43.793470][ T3615] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.997465][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.149398][ T3644] netlink: 20 bytes leftover after parsing attributes in process `syz.4.62'. [ 44.352096][ T3664] netlink: 884 bytes leftover after parsing attributes in process `syz.0.71'. [ 44.711856][ T3693] team0: Device gtp0 is of different type [ 44.844839][ T9] kernel write not supported for file /input/event2 (pid: 9 comm: kworker/0:0) [ 44.950617][ T3717] loop2: detected capacity change from 0 to 512 [ 44.985828][ T3717] ======================================================= [ 44.985828][ T3717] WARNING: The mand mount option has been deprecated and [ 44.985828][ T3717] and is ignored by this kernel. Remove the mand [ 44.985828][ T3717] option from the mount to silence this warning. [ 44.985828][ T3717] ======================================================= [ 45.052211][ T3724] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.169690][ T3729] loop3: detected capacity change from 0 to 128 [ 45.177911][ T3727] loop1: detected capacity change from 0 to 512 [ 45.206616][ T3727] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.220112][ T3727] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.101: Failed to acquire dquot type 1 [ 45.245689][ T3727] loop1: lost filesystem error report for type 5 error -117 [ 45.245969][ T3727] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.101: Failed to acquire dquot type 1 [ 45.254130][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 45.254160][ C0] EXT4-fs (loop1): last error at time 1774390476: ext4_acquire_dquot:7001 [ 45.281342][ T3727] loop1: lost filesystem error report for type 5 error -117 [ 45.286308][ T3727] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.101: bg 0: block 248: padding at end of block bitmap is not set [ 45.323744][ T3727] loop1: lost filesystem error report for type 5 error -117 [ 45.324483][ T3727] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 45.353778][ T3727] loop1: lost filesystem error report for type 5 error -117 [ 45.363447][ T3727] EXT4-fs error (device loop1): ext4_acquire_dquot:7001: comm syz.1.101: Failed to acquire dquot type 1 [ 45.386291][ T3727] loop1: lost filesystem error report for type 5 error -117 [ 45.386497][ T3727] EXT4-fs (loop1): 1 orphan inode deleted [ 45.400960][ T3727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.511847][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.709622][ T3755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.114'. [ 45.744966][ T3760] netlink: 16 bytes leftover after parsing attributes in process `syz.2.116'. [ 45.754741][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 45.767622][ T3755] netlink: 24 bytes leftover after parsing attributes in process `syz.0.114'. [ 45.777452][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 45.787029][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.117'. [ 45.830764][ T3761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.115'. [ 45.964516][ T3781] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 45.972699][ T3783] capability: warning: `syz.4.126' uses 32-bit capabilities (legacy support in use) [ 45.990942][ T3783] program syz.4.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.019981][ T3785] loop0: detected capacity change from 0 to 512 [ 46.034969][ T3785] EXT4-fs: Ignoring removed nobh option [ 46.062579][ T3789] capability: warning: `syz.2.129' uses deprecated v2 capabilities in a way that may be insecure [ 46.074285][ T3790] team0: No ports can be present during mode change [ 46.115297][ T3785] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 46.144091][ T3785] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.127: iget: bad i_size value: 38620345925642 [ 46.191288][ T3799] loop4: detected capacity change from 0 to 1024 [ 46.200425][ T3800] program syz.1.134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.210013][ T3785] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.213719][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 46.230006][ C1] EXT4-fs (loop0): initial error at time 1774390477: ext4_orphan_get:1391: inode 15 [ 46.239741][ C1] EXT4-fs (loop0): last error at time 1774390477: ext4_orphan_get:1391: inode 15 [ 46.255544][ T3785] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.127: couldn't read orphan inode 15 (err -117) [ 46.273886][ T3785] loop0: lost filesystem error report for type 5 error -117 [ 46.274634][ T3785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.302437][ T3799] EXT4-fs: inline encryption not supported [ 46.344027][ T3799] EXT4-fs: Ignoring removed bh option [ 46.387289][ T3799] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.454201][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.484904][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.701580][ T3838] macvlan0: entered promiscuous mode [ 46.950741][ T28] kauditd_printk_skb: 126 callbacks suppressed [ 46.950761][ T28] audit: type=1400 audit(1774390477.978:215): avc: denied { write } for pid=3861 comm="syz.0.163" path="socket:[6267]" dev="sockfs" ino=6267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.379335][ T28] audit: type=1400 audit(1774390478.408:216): avc: denied { create } for pid=3888 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.442119][ T3893] loop1: detected capacity change from 0 to 1024 [ 47.501257][ T3893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.503940][ T28] audit: type=1400 audit(1774390478.428:217): avc: denied { write } for pid=3888 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 47.607110][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.755197][ T3914] __nla_validate_parse: 6 callbacks suppressed [ 47.755226][ T3914] netlink: 71 bytes leftover after parsing attributes in process `syz.1.185'. [ 48.220400][ T28] audit: type=1400 audit(1774390479.238:218): avc: denied { read } for pid=3935 comm="syz.1.194" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.256966][ T28] audit: type=1400 audit(1774390479.238:219): avc: denied { open } for pid=3935 comm="syz.1.194" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.342021][ T3944] netlink: 16 bytes leftover after parsing attributes in process `syz.1.199'. [ 48.423791][ T28] audit: type=1326 audit(1774390479.448:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.3.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97fc96c799 code=0x7fc00000 [ 48.475569][ T28] audit: type=1400 audit(1774390479.498:221): avc: denied { create } for pid=3949 comm="syz.3.201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 48.688200][ T28] audit: type=1400 audit(1774390479.708:222): avc: denied { create } for pid=3966 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_xfrm_socket permissive=1 [ 48.784948][ T3983] netlink: 556 bytes leftover after parsing attributes in process `syz.1.213'. [ 48.808454][ T28] audit: type=1400 audit(1774390479.838:223): avc: denied { bind } for pid=3985 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.852515][ T28] audit: type=1400 audit(1774390479.858:224): avc: denied { perfmon } for pid=3984 comm="syz.0.214" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 49.211782][ T4023] netem: change failed [ 49.287869][ T4027] netlink: 'syz.4.233': attribute type 1 has an invalid length. [ 49.295855][ T4027] netlink: 157116 bytes leftover after parsing attributes in process `syz.4.233'. [ 49.329895][ T4031] loop4: detected capacity change from 0 to 512 [ 49.398778][ T4035] veth0: entered promiscuous mode [ 49.404698][ T4034] veth0: left promiscuous mode [ 49.688695][ T4053] loop3: detected capacity change from 0 to 512 [ 49.721381][ T4053] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.245: bg 0: block 5: invalid block bitmap [ 49.750859][ T4053] loop3: lost filesystem error report for type 5 error -117 [ 49.751111][ T4053] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 49.758608][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 49.758632][ C0] EXT4-fs (loop3): initial error at time 1774390480: ext4_validate_block_bitmap:432 [ 49.758653][ C0] EXT4-fs (loop3): last error at time 1774390480: ext4_validate_block_bitmap:432 [ 49.828881][ T4053] loop3: lost filesystem error report for type 5 error -117 [ 49.832800][ T4060] ipvlan2: entered allmulticast mode [ 49.846351][ T4053] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.245: invalid indirect mapped block 3 (level 2) [ 49.859811][ T4060] dummy0: entered allmulticast mode [ 49.864409][ T4053] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 49.870020][ T4053] EXT4-fs (loop3): 1 orphan inode deleted [ 49.913864][ T4053] EXT4-fs (loop3): 1 truncate cleaned up [ 49.928308][ T4053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.022648][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.040391][ T4068] loop2: detected capacity change from 0 to 512 [ 50.049585][ T4073] loop1: detected capacity change from 0 to 1024 [ 50.070081][ T4068] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.113776][ T4073] EXT4-fs: Ignoring removed orlov option [ 50.131914][ T4068] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.251: corrupted inode contents [ 50.144559][ T4073] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 50.172357][ T4068] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.173290][ T4068] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 50.176244][ T4082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.256'. [ 50.182794][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 50.206722][ C1] EXT4-fs (loop2): initial error at time 1774390481: ext4_do_update_inode:5569: inode 15 [ 50.217259][ C1] EXT4-fs (loop2): last error at time 1774390481: ext4_do_update_inode:5569: inode 15 [ 50.227601][ T4068] loop2: lost filesystem error report for type 5 error -117 [ 50.227874][ T4068] EXT4-fs error (device loop2): ext4_do_update_inode:5569: inode #15: comm syz.2.251: corrupted inode contents [ 50.229247][ T4073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.235320][ T4068] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.235679][ T4068] EXT4-fs error (device loop2): ext4_evict_inode:303: inode #15: comm syz.2.251: mark_inode_dirty error [ 50.280767][ T4068] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.281020][ T4068] EXT4-fs (loop2): 1 orphan inode deleted [ 50.352586][ T4089] netlink: 60 bytes leftover after parsing attributes in process `syz.3.260'. [ 50.396878][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.411241][ T4068] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.512176][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.564928][ T4103] loop3: detected capacity change from 0 to 128 [ 50.582387][ T4101] loop1: detected capacity change from 0 to 1024 [ 50.624249][ T4101] EXT4-fs: Ignoring removed bh option [ 50.644742][ T4101] EXT4-fs: Ignoring removed oldalloc option [ 50.650873][ T4101] EXT4-fs: Ignoring removed nobh option [ 50.676120][ T4108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.268'. [ 50.724325][ T4101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.804520][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.866817][ T4121] loop1: detected capacity change from 0 to 512 [ 50.945341][ T4121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.977264][ T4121] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.998804][ T4121] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #18: comm syz.1.271: corrupted inode contents [ 51.028688][ T4121] loop1: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 51.028830][ T4121] EXT4-fs (loop1): Remounting filesystem read-only [ 51.060280][ T4121] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -30) [ 51.074259][ T4143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.282'. [ 51.087468][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.474273][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 51.502429][ T4188] netlink: 'syz.1.305': attribute type 1 has an invalid length. [ 51.511288][ T4186] netlink: 8 bytes leftover after parsing attributes in process `syz.0.304'. [ 51.791545][ T4213] SELinux: ebitmap: truncated map [ 51.798317][ T4213] SELinux: failed to load policy [ 51.839631][ T4219] loop3: detected capacity change from 0 to 512 [ 51.856025][ T4219] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.886283][ T4219] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.318: iget: bad i_size value: 38620345925642 [ 51.914364][ T4219] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 51.919126][ T4219] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.318: couldn't read orphan inode 15 (err -117) [ 51.928552][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 51.928576][ C1] EXT4-fs (loop3): initial error at time 1774390482: ext4_orphan_get:1391: inode 15 [ 51.928619][ C1] EXT4-fs (loop3): last error at time 1774390482: ext4_orphan_get:1391: inode 15 [ 51.967243][ T4219] loop3: lost filesystem error report for type 5 error -117 [ 51.975269][ T4219] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.015956][ T4219] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.318: bg 0: block 5: invalid block bitmap [ 52.028869][ T4219] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 52.042032][ T4219] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.042032][ T4219] [ 52.052550][ T4219] EXT4-fs (loop3): Total free blocks count 0 [ 52.059128][ T4219] EXT4-fs (loop3): Free/Dirty block details [ 52.065520][ T4219] EXT4-fs (loop3): free_blocks=0 [ 52.070790][ T4219] EXT4-fs (loop3): dirty_blocks=64 [ 52.076594][ T4219] EXT4-fs (loop3): Block reservation details [ 52.082914][ T4219] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 52.107582][ T4219] syz.3.318 (4219) used greatest stack depth: 9616 bytes left [ 52.111404][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.880420][ T4241] xt_hashlimit: size too large, truncated to 1048576 [ 53.892407][ T4242] loop4: detected capacity change from 0 to 764 [ 53.908229][ T4246] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 53.914833][ T4246] syzkaller0: owner set to 0 [ 53.945812][ T4242] rock: directory entry would overflow storage [ 53.952563][ T4242] rock: sig=0x4654, size=5, remaining=4 [ 53.983215][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 53.983233][ T28] audit: type=1400 audit(1774390485.008:252): avc: denied { mount } for pid=4239 comm="syz.4.328" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.095418][ T4252] __nla_validate_parse: 4 callbacks suppressed [ 54.095439][ T4252] netlink: 20 bytes leftover after parsing attributes in process `syz.3.332'. [ 54.241716][ T4256] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 54.356347][ T28] audit: type=1400 audit(1774390485.228:253): avc: denied { unmount } for pid=3321 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.417308][ T28] audit: type=1400 audit(1774390485.338:254): avc: denied { module_request } for pid=4240 comm="syz.1.329" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.803816][ T28] audit: type=1400 audit(1774390485.828:255): avc: denied { write } for pid=4275 comm="syz.4.342" name="ip6_flowlabel" dev="proc" ino=4026532728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 54.925776][ T4290] loop3: detected capacity change from 0 to 512 [ 54.980131][ T4290] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 55.034338][ T4290] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 55.064385][ T4290] EXT4-fs (loop3): 1 orphan inode deleted [ 55.083793][ T4290] EXT4-fs (loop3): 1 truncate cleaned up [ 55.090445][ T4290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.140443][ T28] audit: type=1400 audit(1774390486.148:256): avc: denied { create } for pid=4289 comm="syz.3.349" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 55.196690][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.289418][ T28] audit: type=1400 audit(1774390486.308:257): avc: denied { create } for pid=4310 comm="syz.1.359" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=mctp_socket permissive=1 [ 55.414654][ T4319] option changes via remount are deprecated (pid=4318 comm=syz.1.361) [ 55.423196][ T28] audit: type=1400 audit(1774390486.448:258): avc: denied { remount } for pid=4318 comm="syz.1.361" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.468425][ T4319] cgroup: option or name mismatch, new: 0x0 "none", old: 0x0 "" [ 55.541483][ T28] audit: type=1400 audit(1774390486.568:259): avc: denied { unmount } for pid=3322 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 55.733893][ T28] audit: type=1400 audit(1774390486.758:260): avc: denied { getopt } for pid=4337 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 55.800259][ T4340] netlink: 8 bytes leftover after parsing attributes in process `syz.0.371'. [ 55.934104][ T4347] loop0: detected capacity change from 0 to 512 [ 55.982017][ T4347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.015955][ T4347] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.091282][ T28] audit: type=1400 audit(1774390487.118:261): avc: denied { create } for pid=4346 comm="syz.0.374" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 56.158294][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.245371][ T4366] loop0: detected capacity change from 0 to 256 [ 56.338476][ T4372] loop1: detected capacity change from 0 to 1024 [ 56.353897][ T3404] ================================================================== [ 56.362490][ T3404] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 56.369960][ T3404] [ 56.372419][ T3404] read-write to 0xffff888237c2a8a4 of 4 bytes by task 10 on cpu 0: [ 56.381456][ T3404] wq_worker_running+0x9b/0x120 [ 56.387265][ T3404] synchronize_rcu_expedited+0x5f8/0x770 [ 56.393651][ T3404] try_check_zero+0x191/0x260 [ 56.398556][ T3404] process_srcu+0xd5/0xdc0 [ 56.404154][ T3404] process_scheduled_works+0x513/0xa10 [ 56.410433][ T3404] worker_thread+0x58a/0x780 [ 56.416004][ T3404] kthread+0x22a/0x280 [ 56.420963][ T3404] ret_from_fork+0x150/0x360 [ 56.426533][ T3404] ret_from_fork_asm+0x1a/0x30 [ 56.433348][ T3404] [ 56.435913][ T3404] read to 0xffff888237c2a8a4 of 4 bytes by task 3404 on cpu 1: [ 56.444057][ T3404] kick_pool+0x49/0x2d0 [ 56.448520][ T3404] __queue_work+0x896/0xaf0 [ 56.453675][ T3404] queue_work_on+0xa9/0x140 [ 56.458391][ T3404] process_srcu+0xa56/0xdc0 [ 56.463719][ T3404] process_scheduled_works+0x513/0xa10 [ 56.469993][ T3404] worker_thread+0x58a/0x780 [ 56.475228][ T3404] kthread+0x22a/0x280 [ 56.480454][ T3404] ret_from_fork+0x150/0x360 [ 56.485213][ T3404] ret_from_fork_asm+0x1a/0x30 [ 56.491023][ T3404] [ 56.493432][ T3404] value changed: 0x00000000 -> 0x00000001 [ 56.500244][ T3404] [ 56.502584][ T3404] Reported by Kernel Concurrency Sanitizer on: [ 56.509103][ T3404] CPU: 1 UID: 0 PID: 3404 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 56.519192][ T3404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 56.529492][ T3404] Workqueue: rcu_gp process_srcu [ 56.534575][ T3404] ================================================================== [ 56.695842][ T4372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 56.735025][ T4372] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.778147][ T4372] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 1: comm syz.1.384: lblock 1 mapped to illegal pblock 1 (length 5) [ 56.804965][ T4372] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 5 with error 117 [ 56.824684][ T4372] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.824684][ T4372] [ 56.959912][ T1888] EXT4-fs error (device loop1): ext4_map_blocks:818: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 56.979307][ T1888] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 56.993378][ T1888] EXT4-fs (loop1): This should not happen!! Data will be lost [ 56.993378][ T1888] [ 57.016850][ T3322] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.