last executing test programs: 1.645031765s ago: executing program 2 (id=2596): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0x1c, 0x180}, 0x48) creat(&(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$packet(0x11, 0x0, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) geteuid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0xfffffffffffffec9, 0x4, 0xfff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x24}}, 0x0) 1.46238886s ago: executing program 3 (id=2603): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='map_files\x00') fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000180)=""/46, 0x2e) getdents(r1, 0xfffffffffffffffd, 0x58) 1.450901851s ago: executing program 3 (id=2604): bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000280)={@cgroup, 0x0, 0x1a, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.423490353s ago: executing program 3 (id=2605): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000140)="8198", 0x2}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.422977813s ago: executing program 3 (id=2606): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$eJzs281vG0UbAPBn10n6vv1KKKW0oYVAQUR8JE1aoAcuIJA4gIQEh3IMSVqFug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSqIkFo4Ba29m9punObDrkP9+0nbznjHnnk8O97xTBxA1xrK/kkidkfErxHRX83WFxiq/ndjaWHy76WFySSWl9/4I6mUu760MFkULZ63K88MpxHpJ0leSb25i5fOTpTL0xfy/Oj8uXdH5y5eenrm3MSZ6TPT58dPnjxxfOy5Z8efaUmcWVzXBz+YPXzolbeuvDZ56srbP36dtffAker52jhaZSgL/M/lisZzj7W6sg7bU5NOejrYEDakFBFZd/VWxn9/lOJm5/XHyx93tHFAW2X3ph3NTy8uA3exJDrdAqAziht99v23OO7Q1GNbuPZC9QtQFveN/Kie6Yk0L9PbxvqHIuLU4j9fZEe0aR0CAKDWt9n856nV5n9pHKgptzffQxmIiHsiYl9E3BsR+yPivohK2fsj4uAG62/cGrp1/pNe3VRg65TN/57P97bq53/F7C8GSnluTyX+3uT0THn6WP6eDEfvjiw/tkYd3730y2fNztXO/7Ijq7+YC+btuNrTsEA3NTE/0apJ6bWPIgZ7Vos/WdkJSCLiUEQMbuyl9xaJmSe+Otys0O3jX0ML9pmWv4x4vNr/i9EQfyFZe39y9H9Rnj42WlwVt/rp58uvN6t/S/G3QNb/O+uv/4YS/X8ltfu1cxuv4/Jvnzb9TrPZ678vebOyZ92XP/b+xPz8hbGIvuTVSr7u8fGbzy3yRfks/uGjq4//fflzsvgfiIjsIj4SEQ9GxEN52x+OiEci4uga8f/w4qPvbD7+9srin1r182/l+h+o7/+NJ0pnv/+mWf3r6/8TldRw/kjl8+821tvArbx3AAAA8F+RRsTuSNKRlXSajoxU/4Z/f+xMy7Nz80+enn3v/FT1NwID0ZsWK139NeuhY8li/orV/Hi+VlycP56vG39e+n8lPzI5W57qcOzQ7XY1Gf+Z30udbh3Qdn6vBd2rcfynHWoHcOe5/0P3Mv6hexn/0L1WG/8fNuTtBcDdyf0fupfxD93L+IfuZfxDV9rK7/olujkR6bZoRrsScXBbNKNziU5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTGvwEAAP//KivtwQ==") open(&(0x7f0000000340)='./bus\x00', 0x42142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71594e7141171ce1a311ef54ec38d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) 1.276529605s ago: executing program 3 (id=2613): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20100cc, &(0x7f0000000400), 0x1, 0x7b5, &(0x7f0000000440)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v3, 0x18, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0x0) ftruncate(r0, 0x0) 1.160461874s ago: executing program 0 (id=2617): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001440)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/183, 0xb7, 0x0, 0x0}, &(0x7f0000001480)=0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1f) epoll_pwait(r1, &(0x7f0000000280)=[{}], 0x1, 0x55, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2002, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000040)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x4}, {0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffff6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff8, &(0x7f0000000500)=""/4088}, 0x90) 1.055714993s ago: executing program 0 (id=2619): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtaction={0x44, 0x31, 0x103, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0xfffffffffffffe25}, {0x4}, {0x4}, {0x4}, {0xc}}}]}]}, 0x44}}, 0x0) 952.762682ms ago: executing program 3 (id=2620): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000002180)=""/4076, 0xfec) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5600, 0x10000000000004) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) ioctl$TIOCGPGRP(r0, 0x540f, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioprio_set$pid(0x0, 0x0, 0x0) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x145442, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x0) r3 = eventfd2(0x0, 0x80800) io_setup(0x2, &(0x7f0000000080)=0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = pidfd_getfd(r2, 0xffffffffffffffff, 0x0) eventfd(0x0) io_submit(r4, 0x2, &(0x7f00000003c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r3}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, r5, &(0x7f00000001c0)="c6acad5e8adbe9", 0x7, 0x2, 0x0, 0x0, r6}]) 769.891926ms ago: executing program 2 (id=2621): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000a80)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @private1}}]}, 0x190) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x42, &(0x7f0000000380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0xc, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 736.036059ms ago: executing program 2 (id=2623): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000480)=@ethtool_cmd={0x33}}) 712.427231ms ago: executing program 2 (id=2624): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$eJzs281vG0UbAPBn10n6vv1KKKW0oYVAQUR8JE1aoAcuIJA4gIQEh3IMSVqFug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSqIkFo4Ba29m9punObDrkP9+0nbznjHnnk8O97xTBxA1xrK/kkidkfErxHRX83WFxiq/ndjaWHy76WFySSWl9/4I6mUu760MFkULZ63K88MpxHpJ0leSb25i5fOTpTL0xfy/Oj8uXdH5y5eenrm3MSZ6TPT58dPnjxxfOy5Z8efaUmcWVzXBz+YPXzolbeuvDZ56srbP36dtffAker52jhaZSgL/M/lisZzj7W6sg7bU5NOejrYEDakFBFZd/VWxn9/lOJm5/XHyx93tHFAW2X3ph3NTy8uA3exJDrdAqAziht99v23OO7Q1GNbuPZC9QtQFveN/Kie6Yk0L9PbxvqHIuLU4j9fZEe0aR0CAKDWt9n856nV5n9pHKgptzffQxmIiHsiYl9E3BsR+yPivohK2fsj4uAG62/cGrp1/pNe3VRg65TN/57P97bq53/F7C8GSnluTyX+3uT0THn6WP6eDEfvjiw/tkYd3730y2fNztXO/7Ijq7+YC+btuNrTsEA3NTE/0apJ6bWPIgZ7Vos/WdkJSCLiUEQMbuyl9xaJmSe+Otys0O3jX0ML9pmWv4x4vNr/i9EQfyFZe39y9H9Rnj42WlwVt/rp58uvN6t/S/G3QNb/O+uv/4YS/X8ltfu1cxuv4/Jvnzb9TrPZ678vebOyZ92XP/b+xPz8hbGIvuTVSr7u8fGbzy3yRfks/uGjq4//fflzsvgfiIjsIj4SEQ9GxEN52x+OiEci4uga8f/w4qPvbD7+9srin1r182/l+h+o7/+NJ0pnv/+mWf3r6/8TldRw/kjl8+821tvArbx3AAAA8F+RRsTuSNKRlXSajoxU/4Z/f+xMy7Nz80+enn3v/FT1NwID0ZsWK139NeuhY8li/orV/Hi+VlycP56vG39e+n8lPzI5W57qcOzQ7XY1Gf+Z30udbh3Qdn6vBd2rcfynHWoHcOe5/0P3Mv6hexn/0L1WG/8fNuTtBcDdyf0fupfxD93L+IfuZfxDV9rK7/olujkR6bZoRrsScXBbNKNziU5/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALTGvwEAAP//KivtwQ==") open(&(0x7f0000000340)='./bus\x00', 0x42142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71594e7141171ce1a311ef54ec38d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) 711.665351ms ago: executing program 0 (id=2625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) 677.075014ms ago: executing program 0 (id=2627): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000040)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 627.023348ms ago: executing program 1 (id=2628): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000019c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x56}, 0x20) 626.699788ms ago: executing program 0 (id=2629): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000051"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0xb0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 601.40773ms ago: executing program 1 (id=2630): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x3, 0x377, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0) 600.96256ms ago: executing program 0 (id=2631): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x0, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x0, r1}) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000500)=@base={0x1c, 0x180}, 0x48) creat(&(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x1612c2, 0x0) socket$packet(0x11, 0x0, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/locks\x00', 0x0, 0x0) geteuid() setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014"], 0x30}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002e40)={&(0x7f0000002e00)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0xfffffffffffffec9, 0x4, 0xfff}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xff}]}, 0x24}}, 0x0) 600.747581ms ago: executing program 1 (id=2632): bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000280)={@cgroup, 0x0, 0x1a, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0}, 0x40) 548.458365ms ago: executing program 1 (id=2633): unshare(0x42000000) syz_mount_image$vfat(&(0x7f0000008140), &(0x7f0000008180)='./file0\x00', 0x103038, &(0x7f0000000280)=ANY=[@ANYBLOB="a676e38d91db1e8bf13969224ef30afd3d3ca74772578c4c9705b83a5b294561a3cd7289aa27631e737b641a95d452232a91e36e0e08e41bc6099d7201ccb078e10775d39ba44e67bf2d750eb86f78bad7faf2"], 0x1, 0x8130, &(0x7f0000008200)="$eJzs3D+LY1UcBuCfbnTjyG6mEEFBPGijzWUzhZVNkFmQDSi7G2FHEO44NxpyTYbcMBARZzoLG7HxO4ilnSB+gWnEj2A3jeUUYmQSnX/EQpS5LPM8TV44eeGc5nLh3HOO3vzqk2G/yvr5NJ5sNqNxEBHHKVI04kaceCIO4vWvv/zlpQePtu51ut3N+ynd7Txsv5FSuv3yj+9/9t0rP02ffe/72z/cjMP1D45+2/j18PnDF47+ePjxoEqDKo3G05Sn7fF4mm+XRdoZVMMspXfLIq+KNBhVxeTCeL8c7+7OUj7aubW2OymqKuWjWRoWszQdp+lklvKP8sEoZVmWbq0F/0Xv27pnAAAAwNU4ns/nEfOFm9FcpLrnBAAAAAAAAAAAAAAAAAAAANeN8/8AAAAAAAAAAAAAAAAAAABQP+f/AQAAAAAAAAAAAAAAAAAAoH7O/wMAAAAAAAAAAAAAAAAAAED9Hjzautfpdjfvp9SMKL/Y6+31lr/L8U4/BlFGEXeiFb//fVPA/PTWgLtvdzfvpIX1+Kbc/6u/v9e7cbHfjlasr+63l/10sf9UrJ3vb0Qrnlvd31jZfzpee/VcP4tW/PxhjKOMnTjpnvU/b6f01jvdS/1nFv8DAAAAAAAAgMdBlk6t3L/Psn8aX/b/xfcBl/bXG/Fio961AwAAwHVRzT4d5mVZTARBEE5D3U8mAADg/3b20l/3TAAAAAAAAAAAAAAAAAAAAOD6uorrxOpeIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCjtwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAACC/K1XGKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgKgAA///5cu/6") r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000020000000000000800040001000000", 0x24) unshare(0xc040000) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x5, &(0x7f0000000100), 0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x24, 0x0, 0xb, 0x505, 0x0, 0x0, {}, [@NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x24}}, 0x48884) r5 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d0800fe007c05e8fe55a1150010000200142603600e12080005007a010401a80016002000034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x10000084}, 0x0) 508.520328ms ago: executing program 2 (id=2635): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x787, &(0x7f0000001000)="$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") open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbe78969e3fdcf335263bdbcef549ba197fce47ddfc2553abd9501ce721b6ae9b49600002a00", "b7326736181c208220000000b9000000f2000000000000000800"}) 289.517446ms ago: executing program 4 (id=2638): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000600)='./file1/file4\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1/file4/file7/file6\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xcb, &(0x7f00000000c0)={{0xa, 0xfffe, 0x0, @local}, {0xa, 0x0, 0x0, @local, 0x6}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x1, 0x5]}}, 0x5c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000a0000000900010073797a300000000080000000160a010200000000000000000a0000000900020073797a30000000005400038008000140000000000800024000000000404003801400010076657468315f746f5f7465616d00000014000100776731000000000000000000000000001400e70070696d726567300000000000000020000900010073797a30"], 0xc8}}, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000a6dc80638260b94b9f8699dcf71efe4120080090000000100000000140003007465616d5f736c61766501000000000008000f007ee1e2e088b97700000200fc000000000000000000000000000001e4e5dd6503dcd5b0b337c424e39fd6e3e122ca027be69491d73d2ec93b6ac1492e0246b02954633441655b9d3f53f4fe317c549a7cfa2e7cbe5167fb4abfafa37f3c5970a391cb3d1b3e9f3f834b82d3ae829c9f31cfb5f9576042fad5fa7af90aa73837402baa6d216ef77be71e5f9df8169539ebcdc8faff10db36", @ANYRESHEX=0x0, @ANYRES32=r2, @ANYRES64=r4], 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000f8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r5, 0xc) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r6, &(0x7f0000000200)="409110808300d6ccbd", 0x9, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003400090000000000000000000300000004000000130003800a41a0b5b924f6fd68dbff80b320"], 0x2c}}, 0x0) 288.960836ms ago: executing program 2 (id=2639): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000000)=[{0x15, 0x0, 0x0, 0x3}, {0x2d}, {0x6}]}) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) 219.582972ms ago: executing program 4 (id=2640): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000040)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r1}, @CGW_SRC_IF={0x8, 0x9, r1}]}, 0x24}}, 0x0) 219.219682ms ago: executing program 4 (id=2641): sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:4\tmr'], 0xa) 206.357343ms ago: executing program 4 (id=2642): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a80)={&(0x7f00000019c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x56}, 0x20) 196.739294ms ago: executing program 4 (id=2643): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000240)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x36, 0x38]}}}}]}) 179.838375ms ago: executing program 4 (id=2644): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000004700009500"/24], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'macvlan1\x00'}) read$usbfs(0xffffffffffffffff, &(0x7f0000000140)=""/76, 0x4c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r2, 0x1, 0x2b, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x0, &(0x7f0000000a80)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) recvmmsg(r4, &(0x7f0000004540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/4080, 0xff0}}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x200000, '\x00', r1}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f00000000c0)={0x3ff, 0xb87e}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r8 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000003c0)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) io_uring_enter(r8, 0x3, 0x464f, 0x1, 0x0, 0x0) 97.924862ms ago: executing program 1 (id=2645): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000001440)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001800)=""/183, 0xb7, 0x0, 0x0}, &(0x7f0000001480)=0x40) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = epoll_create(0x1f) epoll_pwait(r1, &(0x7f0000000280)=[{}], 0x1, 0x55, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2002, 0x0, 0x11, 0xffffffffffffffff, 0x0) r2 = fsopen(&(0x7f0000000040)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x4}, {0x7, 0x0, 0x4, 0x1, 0x0, 0x0, 0xfffffff6}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xb}, {}, {0x85, 0x0, 0x0, 0x5}}]}, &(0x7f0000000300)='GPL\x00', 0x9, 0xff8, &(0x7f0000000500)=""/4088}, 0x90) 0s ago: executing program 1 (id=2646): r0 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x7ff, [{0x0, 0x4, 0x7}, {0x4, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, &(0x7f00000002c0)=""/136, 0x42, 0x88, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00'}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x7}, @jmp={0x3, 0x0, 0xc}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x118, &(0x7f0000000140)=""/250}, 0x23) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r1) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x7c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x4}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x80}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7fff}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8001}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x7fffffff}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1e}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x7c}}, 0x0) sendto$inet6(r0, &(0x7f0000000080)="7800000018002507b9409b14ffff00000204be04020506050efd0409430009003f000c000a0000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): without journal. Quota mode: writeback. [ 108.977483][ T8514] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 108.984766][ T8514] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.029090][ T8514] netlink: 'syz.3.1919': attribute type 1 has an invalid length. [ 109.043628][ T8514] 8021q: adding VLAN 0 to HW filter on device bond1 [ 109.053910][ T8523] loop2: detected capacity change from 0 to 512 [ 109.061353][ T8523] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.073585][ T8523] EXT4-fs (loop2): 1 truncate cleaned up [ 109.079717][ T8523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.101663][ T8523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8523 comm=syz.2.1920 [ 109.116240][ T8523] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=8523 comm=syz.2.1920 [ 109.154848][ T7389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.447481][ T8603] tap0: tun_chr_ioctl cmd 19271 [ 109.629069][ T8627] netlink: zone id is out of range [ 109.634486][ T8627] netlink: set zone limit has 8 unknown bytes [ 109.679021][ T8633] loop0: detected capacity change from 0 to 128 [ 109.821385][ T8661] loop4: detected capacity change from 0 to 256 [ 109.829891][ T8661] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097162) [ 109.908847][ T8664] loop4: detected capacity change from 0 to 4096 [ 109.915314][ T8664] ext4: Bad value for 'journal_dev' [ 110.077323][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 110.077338][ T29] audit: type=1400 audit(1720722977.765:1562): avc: denied { connect } for pid=8672 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.095900][ T8673] netlink: 'syz.4.1984': attribute type 7 has an invalid length. [ 110.127770][ T29] audit: type=1400 audit(1720722977.815:1563): avc: denied { remount } for pid=8672 comm="syz.4.1984" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 110.155887][ T29] audit: type=1400 audit(1720722977.835:1564): avc: denied { setattr } for pid=8672 comm="syz.4.1984" name="KEY" dev="sockfs" ino=26757 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 110.196614][ T8690] IPv6: sit1: Disabled Multicast RS [ 110.198718][ T8691] loop4: detected capacity change from 0 to 256 [ 110.211707][ T29] audit: type=1400 audit(1720722977.895:1565): avc: denied { write } for pid=8689 comm="syz.2.1994" path="socket:[25592]" dev="sockfs" ino=25592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 110.259998][ T8700] loop3: detected capacity change from 0 to 512 [ 110.266800][ T8700] EXT4-fs: Ignoring removed orlov option [ 110.273688][ T8700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 110.282761][ T8700] System zones: 1-12 [ 110.287087][ T8700] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.1997: casefold flag without casefold feature [ 110.302208][ T8700] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.1997: couldn't read orphan inode 15 (err -117) [ 110.304453][ T8709] netlink: 'syz.1.1999': attribute type 21 has an invalid length. [ 110.315390][ T8700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.343421][ T29] audit: type=1400 audit(1720722978.025:1566): avc: denied { mount } for pid=8711 comm="syz.1.2001" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.348678][ T8700] EXT4-fs (loop3): shut down requested (0) [ 110.365758][ T29] audit: type=1400 audit(1720722978.025:1567): avc: denied { remount } for pid=8711 comm="syz.1.2001" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 110.397609][ T29] audit: type=1400 audit(1720722978.025:1568): avc: denied { ioctl } for pid=8699 comm="syz.3.1997" path="/149/file0/memory.numa_stat" dev="loop3" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 110.429221][ T7034] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.450842][ T8723] IPv6: sit1: Disabled Multicast RS [ 110.531800][ T8744] loop3: detected capacity change from 0 to 512 [ 110.538704][ T8744] EXT4-fs: Ignoring removed orlov option [ 110.545888][ T8744] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=6040e09c, mo2=0102] [ 110.553806][ T8744] System zones: 1-12 [ 110.558452][ T8744] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.2016: casefold flag without casefold feature [ 110.562151][ T8746] netlink: 'syz.4.2017': attribute type 7 has an invalid length. [ 110.572243][ T8744] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2016: couldn't read orphan inode 15 (err -117) [ 110.592358][ T8744] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.621897][ T8744] EXT4-fs (loop3): shut down requested (0) [ 110.623815][ T8749] loop0: detected capacity change from 0 to 256 [ 110.642043][ T7034] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.686291][ T8757] netlink: 'syz.0.2022': attribute type 21 has an invalid length. [ 110.851516][ T8782] loop3: detected capacity change from 0 to 1764 [ 110.924006][ T8785] loop3: detected capacity change from 0 to 512 [ 110.930685][ T8785] EXT4-fs: Ignoring removed mblk_io_submit option [ 110.938833][ T8785] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 110.948727][ T8785] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 110.957386][ T8785] System zones: 1-12 [ 110.961511][ T8785] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.2033: corrupted in-inode xattr: e_value size too large [ 110.975833][ T8785] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2033: couldn't read orphan inode 15 (err -117) [ 110.985580][ T8790] loop4: detected capacity change from 0 to 256 [ 110.988635][ T8785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.017804][ T8790] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097162) [ 111.026183][ T7034] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.070072][ T8794] Cannot find set identified by id 0 to match [ 111.117850][ T8806] netlink: 'syz.3.2043': attribute type 21 has an invalid length. [ 111.167973][ T29] audit: type=1400 audit(1720722978.855:1569): avc: denied { shutdown } for pid=8803 comm="syz.2.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.193366][ T8814] loop2: detected capacity change from 0 to 512 [ 111.203626][ T8814] EXT4-fs: Ignoring removed i_version option [ 111.209740][ T8814] EXT4-fs: Ignoring removed nobh option [ 111.216019][ T8814] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.227675][ T8814] EXT4-fs (loop2): 1 truncate cleaned up [ 111.233811][ T8814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.459848][ T8834] loop3: detected capacity change from 0 to 1764 [ 111.545104][ T8839] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 111.556896][ T29] audit: type=1400 audit(1720722979.245:1570): avc: denied { write } for pid=8838 comm="syz.3.2056" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 111.581388][ T29] audit: type=1326 audit(1720722979.245:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8838 comm="syz.3.2056" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f7a419bd9 code=0x0 [ 111.641078][ T8841] loop0: detected capacity change from 0 to 512 [ 111.648574][ T8841] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 111.659991][ T8841] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 111.669060][ T8841] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002] [ 111.677131][ T8841] System zones: 0-2, 18-18, 34-34 [ 111.682427][ T8841] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 111.696966][ T8841] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2057: bg 0: block 408: padding at end of block bitmap is not set [ 111.713796][ T8841] EXT4-fs (loop0): Remounting filesystem read-only [ 111.720464][ T8841] EXT4-fs (loop0): 1 truncate cleaned up [ 111.727936][ T8841] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.742137][ T8841] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 111.750456][ T8841] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.867730][ T8803] syz.2.2042 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 111.878943][ T8803] CPU: 0 PID: 8803 Comm: syz.2.2042 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 111.889079][ T8803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 111.899215][ T8803] Call Trace: [ 111.902485][ T8803] [ 111.905457][ T8803] dump_stack_lvl+0xf2/0x150 [ 111.910043][ T8803] dump_stack+0x15/0x20 [ 111.914186][ T8803] dump_header+0x83/0x2d0 [ 111.918497][ T8803] oom_kill_process+0x33e/0x4c0 [ 111.923456][ T8803] out_of_memory+0x9af/0xbe0 [ 111.928051][ T8803] ? try_to_free_mem_cgroup_pages+0x22a/0x4e0 [ 111.934149][ T8803] mem_cgroup_out_of_memory+0x13e/0x190 [ 111.939739][ T8803] try_charge_memcg+0x745/0xcd0 [ 111.944601][ T8803] ? _raw_spin_unlock+0x26/0x50 [ 111.949446][ T8803] ? radix_tree_lookup+0xf9/0x150 [ 111.954519][ T8803] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 111.960752][ T8803] __read_swap_cache_async+0x2b9/0x520 [ 111.966277][ T8803] swap_cluster_readahead+0x276/0x3f0 [ 111.971640][ T8803] swapin_readahead+0xe2/0x7a0 [ 111.976457][ T8803] ? __filemap_get_folio+0x420/0x5b0 [ 111.981851][ T8803] ? swap_cache_get_folio+0x6e/0x210 [ 111.987159][ T8803] do_swap_page+0x3bc/0x1840 [ 111.991749][ T8803] ? cgroup_rstat_updated+0x99/0x550 [ 111.997076][ T8803] ? __rcu_read_lock+0x36/0x50 [ 112.001897][ T8803] handle_mm_fault+0x8b9/0x2ac0 [ 112.006746][ T8803] exc_page_fault+0x3b9/0x650 [ 112.011415][ T8803] asm_exc_page_fault+0x26/0x30 [ 112.016257][ T8803] RIP: 0033:0x7f60bd6b2564 [ 112.020707][ T8803] Code: 00 69 3d 53 b1 de 00 e8 03 00 00 48 8d 1d 14 9a 2b 00 e8 df b5 12 00 eb 11 0f 1f 44 00 00 48 81 c3 d8 00 00 00 48 39 dd 74 bc <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df e8 87 ee ff ff eb [ 112.040351][ T8803] RSP: 002b:00007ffc55d6ad70 EFLAGS: 00010216 [ 112.046401][ T8803] RAX: 0000000000000000 RBX: 00007f60bd96c038 RCX: 0000000000000000 [ 112.054357][ T8803] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555c720808 [ 112.062425][ T8803] RBP: 00007f60bd96da60 R08: 0000000000000000 R09: 7fffffffffffffff [ 112.070381][ T8803] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001b534 [ 112.078395][ T8803] R13: 0000000000000032 R14: 00007f60bd96da60 R15: 00007f60bd96c038 [ 112.086354][ T8803] [ 112.089492][ T8803] memory: usage 307192kB, limit 307200kB, failcnt 1300 [ 112.096467][ T8803] memory+swap: usage 307792kB, limit 9007199254740988kB, failcnt 0 [ 112.104409][ T8803] kmem: usage 307028kB, limit 9007199254740988kB, failcnt 0 [ 112.111767][ T8803] Memory cgroup stats for /syz2: [ 112.112854][ T8803] cache 159744 [ 112.121361][ T8803] rss 0 [ 112.124269][ T8803] shmem 0 [ 112.127247][ T8803] mapped_file 1724416 [ 112.131218][ T8803] dirty 159744 [ 112.134655][ T8803] writeback 4096 [ 112.138194][ T8803] workingset_refault_anon 65 [ 112.138682][ T8849] __nla_validate_parse: 12 callbacks suppressed [ 112.138705][ T8849] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2060'. [ 112.142764][ T8803] workingset_refault_file 0 [ 112.142774][ T8803] swap 614400 [ 112.165955][ T8803] swapcached 8192 [ 112.169642][ T8803] pgpgin 41004 [ 112.173080][ T8803] pgpgout 40963 [ 112.176606][ T8803] pgfault 66396 [ 112.180074][ T8803] pgmajfault 32 [ 112.183503][ T8803] inactive_anon 0 [ 112.187132][ T8803] active_anon 8192 [ 112.190945][ T8803] inactive_file 0 [ 112.194594][ T8803] active_file 159744 [ 112.198462][ T8803] unevictable 0 [ 112.201855][ T8850] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.202031][ T8803] hierarchical_memory_limit 314572800 [ 112.202042][ T8803] hierarchical_memsw_limit 9223372036854771712 [ 112.220699][ T8803] total_cache 159744 [ 112.224592][ T8803] total_rss 0 [ 112.227863][ T8803] total_shmem 0 [ 112.231328][ T8803] total_mapped_file 1724416 [ 112.235943][ T8803] total_dirty 159744 [ 112.239894][ T8803] total_writeback 4096 [ 112.243990][ T8803] total_workingset_refault_anon 65 [ 112.249192][ T8803] total_workingset_refault_file 0 [ 112.254283][ T8803] total_swap 614400 [ 112.258065][ T8803] total_swapcached 8192 [ 112.262190][ T8803] total_pgpgin 41004 [ 112.266070][ T8803] total_pgpgout 40963 [ 112.270024][ T8803] total_pgfault 66396 [ 112.274029][ T8803] total_pgmajfault 32 [ 112.278013][ T8803] total_inactive_anon 0 [ 112.282143][ T8803] total_active_anon 8192 [ 112.286379][ T8803] total_inactive_file 0 [ 112.290507][ T8803] total_active_file 159744 [ 112.296345][ T8803] total_unevictable 0 [ 112.300320][ T8803] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz2,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.2042,pid=8803,uid=0 [ 112.315386][ T8803] Memory cgroup out of memory: Killed process 8803 (syz.2.2042) total-vm:82424kB, anon-rss:580kB, file-rss:11676kB, shmem-rss:128kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 112.372360][ T8854] loop4: detected capacity change from 0 to 512 [ 112.457870][ T8854] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.470511][ T8854] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.511727][ T8868] loop3: detected capacity change from 0 to 136 [ 112.542460][ T8868] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 112.620104][ T8882] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2071'. [ 112.624400][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2073'. [ 112.655776][ T8884] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.681764][ T8888] loop3: detected capacity change from 0 to 512 [ 112.699636][ T7389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.701425][ T8888] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 112.724665][ T8888] EXT4-fs (loop3): 1 truncate cleaned up [ 112.730875][ T8888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.805155][ T7034] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.919695][ T8915] loop2: detected capacity change from 0 to 136 [ 112.960131][ T8915] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 113.094666][ T8929] loop0: detected capacity change from 0 to 1024 [ 113.116794][ T8929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.176410][ T8929] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.218152][ T8173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.343108][ T8958] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2103'. [ 113.405788][ T7831] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.418953][ T8969] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2108'. [ 113.429995][ T8969] IPv6: NLM_F_REPLACE set, but no existing node found! [ 113.449865][ T8977] Cannot find set identified by id 0 to match [ 113.470816][ T8979] loop2: detected capacity change from 0 to 136 [ 113.487265][ T8979] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 113.516699][ T8986] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.534557][ T8989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2116'. [ 113.543600][ T8989] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2116'. [ 113.580061][ T8997] loop2: detected capacity change from 0 to 128 [ 113.581201][ T9000] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2122'. [ 113.597346][ T8997] FAT-fs (loop2): invalid media value (0x00) [ 113.603345][ T8997] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 113.612736][ T8997] FAT-fs (loop2): Can't find a valid FAT filesystem [ 113.675273][ T9007] syzkaller1: entered promiscuous mode [ 113.680767][ T9007] syzkaller1: entered allmulticast mode [ 113.797461][ T9015] loop2: detected capacity change from 0 to 136 [ 113.810363][ T9015] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 113.869128][ T9027] tmpfs: Bad value for 'nr_inodes' [ 113.976338][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2135'. [ 113.985498][ T9037] syzkaller1: entered promiscuous mode [ 113.990982][ T9037] syzkaller1: entered allmulticast mode [ 114.007602][ T9036] 9pnet_fd: Insufficient options for proto=fd [ 114.014742][ T9036] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 114.089469][ T9047] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2141'. [ 114.124330][ T9049] loop2: detected capacity change from 0 to 1024 [ 114.136932][ T9049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.153951][ T9049] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 114.263864][ T9058] netlink: 'syz.1.2145': attribute type 1 has an invalid length. [ 114.296802][ T9066] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.306138][ T9066] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 114.319946][ T9070] loop4: detected capacity change from 0 to 512 [ 114.336685][ T9070] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.359052][ T9070] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.397469][ T7389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.407991][ T9075] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(12) [ 114.414597][ T9075] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 114.422101][ T9075] vhci_hcd vhci_hcd.0: Device attached [ 114.431615][ T7831] block device autoloading is deprecated and will be removed. [ 114.446468][ T8173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.514854][ T9083] loop2: detected capacity change from 0 to 512 [ 114.525758][ T9085] loop4: detected capacity change from 0 to 136 [ 114.537378][ T9083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.559716][ T9083] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.567965][ T9085] iso9660: Corrupted directory entry in block 1 of inode 1536 [ 114.634108][ T24] vhci_hcd: vhci_device speed not set [ 114.668521][ T9094] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 114.702686][ T9077] vhci_hcd: connection closed [ 114.702960][ T28] vhci_hcd: stop threads [ 114.711988][ T28] vhci_hcd: release socket [ 114.714145][ T24] usb 3-3: new full-speed USB device number 2 using vhci_hcd [ 114.716416][ T28] vhci_hcd: disconnect device [ 114.742573][ T9106] loop3: detected capacity change from 0 to 128 [ 115.045483][ T9117] loop4: detected capacity change from 0 to 512 [ 115.062382][ T9117] EXT4-fs: Ignoring removed i_version option [ 115.068459][ T9117] EXT4-fs: Ignoring removed nobh option [ 115.088866][ T9117] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 115.355753][ T7389] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.429981][ T9117] EXT4-fs (loop4): 1 truncate cleaned up [ 115.507184][ T9117] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.964531][ T9140] tmpfs: Bad value for 'nr_inodes' [ 116.406757][ T8173] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.441927][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 116.441939][ T29] audit: type=1326 audit(1720722984.125:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.1.2178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ef6e56bd9 code=0x0 [ 116.481956][ T9150] netlink: 'syz.0.2180': attribute type 4 has an invalid length. [ 116.505824][ T9150] netlink: 'syz.0.2180': attribute type 4 has an invalid length. [ 116.717109][ T9161] loop0: detected capacity change from 0 to 256 [ 116.728441][ T29] audit: type=1400 audit(1720722984.415:1610): avc: denied { mounton } for pid=9160 comm="syz.0.2183" path="/82/file0/file0" dev="loop0" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 116.763279][ T7831] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 116.772342][ T7831] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 117.057688][ T40] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.111469][ T29] audit: type=1400 audit(1720722984.795:1611): avc: denied { sys_module } for pid=9163 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 117.158034][ T40] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.232136][ T40] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.289225][ T40] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.339618][ T9163] chnl_net:caif_netlink_parms(): no params data found [ 117.439020][ T9163] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.446147][ T9163] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.463343][ T9163] bridge_slave_0: entered allmulticast mode [ 117.470608][ T9163] bridge_slave_0: entered promiscuous mode [ 117.479973][ T40] bridge_slave_1: left allmulticast mode [ 117.485666][ T40] bridge_slave_1: left promiscuous mode [ 117.491320][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.504715][ T40] bridge_slave_0: left allmulticast mode [ 117.510371][ T40] bridge_slave_0: left promiscuous mode [ 117.516182][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.591403][ T29] audit: type=1400 audit(1720722985.275:1612): avc: denied { remount } for pid=9172 comm="syz.1.2187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 117.784973][ T40] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 117.848468][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.865652][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.902502][ T40] bond0 (unregistering): Released all slaves [ 117.923667][ T40] bond1 (unregistering): Released all slaves [ 117.955511][ T9163] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.962608][ T9163] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.980346][ T9163] bridge_slave_1: entered allmulticast mode [ 118.007770][ T9163] bridge_slave_1: entered promiscuous mode [ 118.047679][ T9163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.105272][ T40] hsr_slave_0: left promiscuous mode [ 118.134215][ T40] hsr_slave_1: left promiscuous mode [ 118.141691][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.149101][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.175628][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.183037][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.206966][ T40] veth1_macvtap: left promiscuous mode [ 118.212471][ T40] veth0_macvtap: left promiscuous mode [ 118.218033][ T40] veth1_vlan: left promiscuous mode [ 118.223274][ T40] veth0_vlan: left promiscuous mode [ 118.426500][ T40] team0 (unregistering): Port device team_slave_1 removed [ 118.447869][ T40] team0 (unregistering): Port device team_slave_0 removed [ 118.489517][ T9163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.510781][ T9163] team0: Port device team_slave_0 added [ 118.517647][ T9163] team0: Port device team_slave_1 added [ 118.537772][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.544958][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.571247][ T9163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.583545][ T9163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.590680][ T9163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.616618][ T9163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.652645][ T9163] hsr_slave_0: entered promiscuous mode [ 118.658975][ T9163] hsr_slave_1: entered promiscuous mode [ 118.665926][ T9163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.673461][ T9163] Cannot create hsr debugfs directory [ 118.937601][ T9163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.947373][ T9163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.956482][ T9163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.966557][ T9163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.007667][ T9163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.023741][ T9163] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.036456][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.043674][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.064034][ T9163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 119.074447][ T9163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.089698][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.096778][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.160011][ T9163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.237613][ T9163] veth0_vlan: entered promiscuous mode [ 119.247586][ T9163] veth1_vlan: entered promiscuous mode [ 119.262599][ T9163] veth0_macvtap: entered promiscuous mode [ 119.271950][ T9163] veth1_macvtap: entered promiscuous mode [ 119.282267][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.292878][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.302813][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.313295][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.323198][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.333714][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.343540][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.353962][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.363810][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.374270][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.388849][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.400373][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.410850][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.420699][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.431114][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.441026][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.451502][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.461341][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.471752][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.481566][ T9163] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.492042][ T9163] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.507017][ T9163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.517872][ T9163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.526823][ T9163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.535717][ T9163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.544585][ T9163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.667111][ T9197] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 119.784033][ T9202] loop0: detected capacity change from 0 to 512 [ 119.792142][ T9202] EXT4-fs: Ignoring removed i_version option [ 119.798160][ T9202] EXT4-fs: Ignoring removed nobh option [ 119.837211][ T9202] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.860991][ T9202] EXT4-fs (loop0): 1 truncate cleaned up [ 119.869676][ T9202] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.809098][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.019318][ T9207] chnl_net:caif_netlink_parms(): no params data found [ 125.058291][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.065463][ T9207] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.074088][ T9207] bridge_slave_0: entered allmulticast mode [ 125.080584][ T9207] bridge_slave_0: entered promiscuous mode [ 125.089749][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.097390][ T9207] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.108538][ T9207] bridge_slave_1: entered allmulticast mode [ 125.114962][ T9207] bridge_slave_1: entered promiscuous mode [ 125.141328][ T9207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.153194][ T9207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.195494][ T9207] team0: Port device team_slave_0 added [ 125.202052][ T9207] team0: Port device team_slave_1 added [ 125.220693][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.227742][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.253623][ T9207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.266560][ T9207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.273511][ T9207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.299541][ T9207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.330220][ T9207] hsr_slave_0: entered promiscuous mode [ 125.338926][ T9207] hsr_slave_1: entered promiscuous mode [ 125.346269][ T9207] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.353800][ T9207] Cannot create hsr debugfs directory [ 125.453310][ T9207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.566712][ T9207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.621729][ T9207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.705061][ T9207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.779789][ T9207] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 125.788158][ T9207] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 125.798165][ T9207] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 125.808093][ T9207] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 125.825781][ T9207] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.832853][ T9207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.840143][ T9207] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.847195][ T9207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.883810][ T9207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.911961][ T3158] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.924581][ T3158] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.969194][ T9207] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.027303][ T3158] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.034385][ T3158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.044279][ T3158] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.051325][ T3158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.169810][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.252126][ T9223] chnl_net:caif_netlink_parms(): no params data found [ 126.307826][ T9207] veth0_vlan: entered promiscuous mode [ 126.335470][ T9207] veth1_vlan: entered promiscuous mode [ 126.341931][ T9223] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.349118][ T9223] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.359047][ T9223] bridge_slave_0: entered allmulticast mode [ 126.365960][ T9223] bridge_slave_0: entered promiscuous mode [ 126.380466][ T9207] veth0_macvtap: entered promiscuous mode [ 126.396817][ T9223] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.403871][ T9223] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.412877][ T9223] bridge_slave_1: entered allmulticast mode [ 126.419673][ T9223] bridge_slave_1: entered promiscuous mode [ 126.428804][ T9207] veth1_macvtap: entered promiscuous mode [ 126.478344][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.488872][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.498762][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.509178][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.518980][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.529470][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.539397][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.549839][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.559646][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.570178][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.580053][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.590619][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.605677][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.615453][ T9223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 126.631128][ T9223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.675334][ T9223] team0: Port device team_slave_0 added [ 126.681220][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.691760][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.701607][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.712052][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.721910][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.732340][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.742145][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.752593][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.762495][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.772915][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.782739][ T9207] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.793152][ T9207] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.808013][ T9207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.816166][ T9223] team0: Port device team_slave_1 added [ 126.837938][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.844972][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.870925][ T9223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.913043][ T9223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.920029][ T9223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.945943][ T9223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.978810][ T9207] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.987577][ T9207] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.996287][ T9207] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.005013][ T9207] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.055672][ T9223] hsr_slave_0: entered promiscuous mode [ 127.076577][ T9223] hsr_slave_1: entered promiscuous mode [ 127.086305][ T9223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.093845][ T9223] Cannot create hsr debugfs directory [ 127.326942][ T9264] netlink: 'syz.3.2196': attribute type 298 has an invalid length. [ 127.355709][ T9106] FAT-fs (loop3): error, fat_get_cluster: detected the cluster chain loop (i_pos 50) [ 127.365434][ T9106] FAT-fs (loop3): Filesystem has been set read-only [ 127.385905][ T9223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.407141][ T24] usb 3-3: enqueue for inactive port 2 [ 127.412892][ T24] usb 3-3: enqueue for inactive port 2 [ 127.468941][ T9248] chnl_net:caif_netlink_parms(): no params data found [ 127.494393][ T24] vhci_hcd: vhci_device speed not set [ 127.540520][ T9282] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 127.558647][ T9223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.563143][ T9284] __nla_validate_parse: 1 callbacks suppressed [ 127.563157][ T9284] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2201'. [ 127.591838][ T9285] netlink: 'syz.0.2191': attribute type 4 has an invalid length. [ 127.633037][ T9289] sit1: entered promiscuous mode [ 127.638077][ T9289] sit1: entered allmulticast mode [ 127.645217][ T9271] netlink: 'syz.0.2191': attribute type 4 has an invalid length. [ 127.685637][ T9298] loop3: detected capacity change from 0 to 256 [ 127.693248][ T9223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.719433][ T9298] loop3: detected capacity change from 0 to 512 [ 127.726526][ T9298] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.750621][ T9298] EXT4-fs (loop3): 1 truncate cleaned up [ 127.757345][ T9308] block device autoloading is deprecated and will be removed. [ 127.758286][ T9298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.766699][ T29] audit: type=1400 audit(1720722995.435:1613): avc: denied { read } for pid=9307 comm="syz.0.2208" name="file0" dev="tmpfs" ino=61 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 127.787209][ T9298] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.2204: corrupted in-inode xattr: overlapping e_value [ 127.810144][ T9223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.813859][ T9298] EXT4-fs (loop3): Remounting filesystem read-only [ 127.830024][ T9298] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1766: inode #15: comm syz.3.2204: unable to update i_inline_off [ 127.851260][ T9248] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.858611][ T9248] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.868158][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2204'. [ 127.868663][ T9248] bridge_slave_0: entered allmulticast mode [ 127.883899][ T9248] bridge_slave_0: entered promiscuous mode [ 127.897789][ T9312] sit1: entered promiscuous mode [ 127.902722][ T9312] sit1: entered allmulticast mode [ 127.909414][ T9248] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.916559][ T9248] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.923747][ T9248] bridge_slave_1: entered allmulticast mode [ 127.930588][ T9248] bridge_slave_1: entered promiscuous mode [ 127.935751][ T9315] loop0: detected capacity change from 0 to 256 [ 127.948246][ T9315] FAT-fs (loop0): Directory bread(block 64) failed [ 127.956969][ T9315] FAT-fs (loop0): Directory bread(block 65) failed [ 127.963522][ T9315] FAT-fs (loop0): Directory bread(block 66) failed [ 127.970149][ T9315] FAT-fs (loop0): Directory bread(block 67) failed [ 127.977143][ T9315] FAT-fs (loop0): Directory bread(block 68) failed [ 127.982021][ T9223] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 127.983706][ T9315] FAT-fs (loop0): Directory bread(block 69) failed [ 127.997213][ T9315] FAT-fs (loop0): Directory bread(block 70) failed [ 128.003719][ T9315] FAT-fs (loop0): Directory bread(block 71) failed [ 128.010282][ T9315] FAT-fs (loop0): Directory bread(block 72) failed [ 128.011786][ T9248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.016784][ T9315] FAT-fs (loop0): Directory bread(block 73) failed [ 128.036662][ T9223] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 128.047484][ T9315] syz.0.2211: attempt to access beyond end of device [ 128.047484][ T9315] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 128.056562][ T9248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.065382][ T9315] syz.0.2211: attempt to access beyond end of device [ 128.065382][ T9315] loop0: rw=2049, sector=1352, nr_sectors = 88 limit=256 [ 128.086283][ T9223] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 128.115489][ T9223] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 128.127332][ T9248] team0: Port device team_slave_0 added [ 128.136903][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.151685][ T9265] chnl_net:caif_netlink_parms(): no params data found [ 128.161800][ T9248] team0: Port device team_slave_1 added [ 128.187926][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.216609][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.223568][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.249712][ T9248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.261009][ T9248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.268021][ T9248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.293989][ T9248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.305636][ T9322] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2213'. [ 128.315236][ T9322] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2213'. [ 128.336611][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.379103][ T9331] netlink: 'syz.0.2216': attribute type 10 has an invalid length. [ 128.393030][ T9331] team0: Failed to send options change via netlink (err -105) [ 128.400602][ T9331] team0: Port device netdevsim1 added [ 128.419664][ T9248] hsr_slave_0: entered promiscuous mode [ 128.425871][ T9248] hsr_slave_1: entered promiscuous mode [ 128.431790][ T9248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.439776][ T9248] Cannot create hsr debugfs directory [ 128.448512][ T40] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.462037][ T9331] netlink: 'syz.0.2216': attribute type 10 has an invalid length. [ 128.470474][ T9331] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 128.482463][ T9331] team0: Failed to send options change via netlink (err -105) [ 128.490333][ T9331] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 128.500071][ T9331] team0: Port device netdevsim1 removed [ 128.507353][ T9331] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 128.516376][ T9265] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.523481][ T9265] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.533310][ T9265] bridge_slave_0: entered allmulticast mode [ 128.540206][ T9265] bridge_slave_0: entered promiscuous mode [ 128.547170][ T9265] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.554417][ T9265] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.561626][ T9265] bridge_slave_1: entered allmulticast mode [ 128.568230][ T9265] bridge_slave_1: entered promiscuous mode [ 128.581108][ T9207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.615534][ T9265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.626141][ T9265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.652915][ T9265] team0: Port device team_slave_0 added [ 128.669584][ T9265] team0: Port device team_slave_1 added [ 128.682633][ T9333] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2217'. [ 128.873901][ T40] bridge_slave_1: left allmulticast mode [ 128.879718][ T40] bridge_slave_1: left promiscuous mode [ 128.885458][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.901803][ T40] bridge_slave_0: left allmulticast mode [ 128.907655][ T40] bridge_slave_0: left promiscuous mode [ 128.913341][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.924995][ T40] bridge_slave_1: left allmulticast mode [ 128.930654][ T40] bridge_slave_1: left promiscuous mode [ 128.936367][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.948212][ T40] bridge_slave_0: left allmulticast mode [ 128.953864][ T40] bridge_slave_0: left promiscuous mode [ 128.959738][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.971023][ T40] bridge_slave_1: left allmulticast mode [ 128.976692][ T40] bridge_slave_1: left promiscuous mode [ 128.982325][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.992428][ T40] bridge_slave_0: left allmulticast mode [ 128.998115][ T40] bridge_slave_0: left promiscuous mode [ 129.003763][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.162079][ T40] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 129.327232][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.337916][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.348331][ T40] bond0 (unregistering): Released all slaves [ 129.357842][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.368717][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.381421][ T40] bond0 (unregistering): Released all slaves [ 129.391465][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.396796][ T9343] loop0: detected capacity change from 0 to 256 [ 129.408441][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.412759][ T9343] FAT-fs (loop0): Directory bread(block 64) failed [ 129.423737][ T9343] FAT-fs (loop0): Directory bread(block 65) failed [ 129.430760][ T9343] FAT-fs (loop0): Directory bread(block 66) failed [ 129.431717][ T40] bond0 (unregistering): Released all slaves [ 129.437306][ T9343] FAT-fs (loop0): Directory bread(block 67) failed [ 129.437336][ T9343] FAT-fs (loop0): Directory bread(block 68) failed [ 129.437395][ T9343] FAT-fs (loop0): Directory bread(block 69) failed [ 129.437416][ T9343] FAT-fs (loop0): Directory bread(block 70) failed [ 129.437433][ T9343] FAT-fs (loop0): Directory bread(block 71) failed [ 129.448777][ T40] bond1 (unregistering): Released all slaves [ 129.449929][ T9343] FAT-fs (loop0): Directory bread(block 72) failed [ 129.489410][ T9343] FAT-fs (loop0): Directory bread(block 73) failed [ 129.512018][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.519014][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.535726][ T9343] syz.0.2219: attempt to access beyond end of device [ 129.535726][ T9343] loop0: rw=2049, sector=1224, nr_sectors = 32 limit=256 [ 129.545003][ T9265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.564309][ T9343] syz.0.2219: attempt to access beyond end of device [ 129.564309][ T9343] loop0: rw=2049, sector=1352, nr_sectors = 88 limit=256 [ 129.573219][ T9223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.622786][ T9265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.629846][ T9265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.656015][ T9265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.676796][ T9223] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.700508][ T29] audit: type=1400 audit(1720722997.385:1614): avc: denied { ioctl } for pid=9354 comm="syz.0.2223" path="socket:[30970]" dev="sockfs" ino=30970 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 129.727972][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.735029][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.744005][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.751170][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.767935][ T9265] hsr_slave_0: entered promiscuous mode [ 129.773913][ T9265] hsr_slave_1: entered promiscuous mode [ 129.779971][ T9265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.787548][ T9265] Cannot create hsr debugfs directory [ 129.797616][ T9355] serio: Serial port pts0 [ 129.803202][ T40] hsr_slave_0: left promiscuous mode [ 129.808950][ T40] hsr_slave_1: left promiscuous mode [ 129.815221][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.822648][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.830227][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.837666][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.846783][ T40] hsr_slave_0: left promiscuous mode [ 129.852843][ T40] hsr_slave_1: left promiscuous mode [ 129.853924][ T9355] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2223'. [ 129.867446][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.874901][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.882458][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.888559][ T9360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.889920][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.901579][ T9360] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 129.915129][ T40] hsr_slave_0: left promiscuous mode [ 129.920853][ T40] hsr_slave_1: left promiscuous mode [ 129.928507][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.936004][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.943741][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.951289][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.965404][ T40] veth1_macvtap: left promiscuous mode [ 129.970936][ T40] veth0_macvtap: left promiscuous mode [ 129.976740][ T40] veth1_vlan: left promiscuous mode [ 129.982028][ T40] veth0_vlan: left promiscuous mode [ 129.989959][ T40] veth1_macvtap: left promiscuous mode [ 129.995465][ T40] veth0_macvtap: left promiscuous mode [ 130.000952][ T40] veth1_vlan: left promiscuous mode [ 130.006297][ T40] veth0_vlan: left promiscuous mode [ 130.014861][ T40] veth1_vlan: left promiscuous mode [ 130.020125][ T40] veth0_vlan: left promiscuous mode [ 130.118676][ T9363] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 130.125293][ T9363] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 130.132753][ T9363] vhci_hcd vhci_hcd.0: Device attached [ 130.232381][ T40] team0 (unregistering): Port device team_slave_1 removed [ 130.243259][ T40] team0 (unregistering): Port device team_slave_0 removed [ 130.303709][ T40] team0 (unregistering): Port device team_slave_1 removed [ 130.313448][ T40] team0 (unregistering): Port device team_slave_0 removed [ 130.344113][ T3157] vhci_hcd: vhci_device speed not set [ 130.378493][ T40] team0 (unregistering): Port device team_slave_1 removed [ 130.388155][ T40] team0 (unregistering): Port device team_slave_0 removed [ 130.424642][ T3157] usb 1-3: new full-speed USB device number 2 using vhci_hcd [ 130.441094][ T9364] vhci_hcd: connection reset by peer [ 130.454893][ T53] vhci_hcd: stop threads [ 130.459236][ T53] vhci_hcd: release socket [ 130.463651][ T53] vhci_hcd: disconnect device [ 130.478401][ T9223] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 130.500095][ T9375] loop3: detected capacity change from 0 to 736 [ 130.506766][ T9375] iso9660: Bad value for 'mode' [ 130.548169][ T9223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.608808][ T9223] veth0_vlan: entered promiscuous mode [ 130.617241][ T9223] veth1_vlan: entered promiscuous mode [ 130.635823][ T9248] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.648681][ T9265] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.666101][ T9248] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.675631][ T9248] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.684369][ T9223] veth0_macvtap: entered promiscuous mode [ 130.690769][ T9248] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.702217][ T9223] veth1_macvtap: entered promiscuous mode [ 130.714002][ T9265] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.733369][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.743864][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.753661][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.764154][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.773944][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.784491][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.794400][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 130.804951][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.816172][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.832685][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.843261][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.853176][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.863766][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.873679][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.884267][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.894209][ T9223] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.904729][ T9223] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.915757][ T9223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.925464][ T9223] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.934225][ T9223] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.942972][ T9223] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.951765][ T9223] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.967693][ T9265] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.008026][ T9248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.035302][ T9265] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.060036][ T9248] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.070747][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.077837][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.095469][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.102550][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.160781][ T9265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.169726][ T9265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.181719][ T9265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.195121][ T9265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.249607][ T9248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.258388][ T9394] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2231'. [ 131.282168][ T9394] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2231'. [ 131.327571][ T9265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.356420][ T9265] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.388362][ T3453] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.395480][ T3453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.415736][ T3453] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.422808][ T3453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.477933][ T9430] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 131.480133][ T9265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 131.489355][ T9430] vhci_hcd: invalid port number 135 [ 131.500977][ T9430] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 131.572013][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.575064][ T29] audit: type=1400 audit(1720722999.245:1615): avc: denied { append } for pid=9432 comm="syz.3.2244" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 131.652046][ T9445] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2243'. [ 131.661229][ T9445] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2243'. [ 131.672649][ T9248] veth0_vlan: entered promiscuous mode [ 131.702938][ T9265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.714324][ T9248] veth1_vlan: entered promiscuous mode [ 131.741640][ T9248] veth0_macvtap: entered promiscuous mode [ 131.754736][ T9248] veth1_macvtap: entered promiscuous mode [ 131.772047][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.782599][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.792414][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.802832][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.812661][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.823223][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.833148][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.843554][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.853378][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.863809][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.874469][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.882756][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.893295][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.903298][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.913960][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.923860][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.934286][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.944108][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.954624][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.957943][ T9472] x_tables: duplicate underflow at hook 1 [ 131.964619][ T9248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.981017][ T9248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.992910][ T9248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.003945][ T9473] bond0: option mode: unable to set because the bond device has slaves [ 132.013347][ T9473] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.024686][ T9248] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.033407][ T9248] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.042142][ T9248] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.051126][ T9248] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.078565][ T9265] veth0_vlan: entered promiscuous mode [ 132.100168][ T9265] veth1_vlan: entered promiscuous mode [ 132.122429][ T9265] veth0_macvtap: entered promiscuous mode [ 132.133225][ T9265] veth1_macvtap: entered promiscuous mode [ 132.144638][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.155128][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.164966][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.175495][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.185426][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.195890][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.205701][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.216290][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.226299][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.236759][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.246622][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.257058][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.267928][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.279034][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.289635][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.299499][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.309982][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.319785][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.330198][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.340006][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.350428][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.360233][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.370732][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.380868][ T9265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.391356][ T9265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.402844][ T9265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.431666][ T9265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.440531][ T9265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.449268][ T9265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.458028][ T9265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.583988][ T9517] x_tables: duplicate underflow at hook 1 [ 132.649165][ T9537] __nla_validate_parse: 3 callbacks suppressed [ 132.649179][ T9537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2271'. [ 132.664605][ T9537] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2271'. [ 132.674666][ T29] audit: type=1400 audit(1720723000.365:1616): avc: denied { remount } for pid=9530 comm="syz.1.2270" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 132.695115][ T29] audit: type=1400 audit(1720723000.365:1617): avc: denied { setopt } for pid=9530 comm="syz.1.2270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 132.759347][ T29] audit: type=1400 audit(1720723000.445:1618): avc: denied { getopt } for pid=9543 comm="syz.1.2273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 132.831551][ T9548] bond0: option mode: unable to set because the bond device has slaves [ 132.840465][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.847097][ T9549] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2274'. [ 132.847525][ T9548] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2271'. [ 132.868277][ T29] audit: type=1400 audit(1720723000.555:1619): avc: denied { write } for pid=9546 comm="syz.1.2274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.080420][ T9555] loop2: detected capacity change from 0 to 1024 [ 133.089152][ T9555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.211217][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2277'. [ 133.220513][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2277'. [ 133.229513][ T9559] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2277'. [ 133.250703][ T9223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.334883][ T9569] Process accounting resumed [ 133.363796][ T9571] netlink: 'syz.2.2283': attribute type 1 has an invalid length. [ 133.371588][ T9571] netlink: 'syz.2.2283': attribute type 4 has an invalid length. [ 133.379477][ T9571] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.2283'. [ 133.442772][ T9579] loop2: detected capacity change from 0 to 4096 [ 133.451436][ T9579] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.507496][ T9223] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.553491][ T29] audit: type=1326 audit(1720723001.235:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.578130][ T9593] netlink: 'syz.1.2294': attribute type 1 has an invalid length. [ 133.586055][ T9593] netlink: 'syz.1.2294': attribute type 4 has an invalid length. [ 133.593795][ T9593] netlink: 15334 bytes leftover after parsing attributes in process `syz.1.2294'. [ 133.603428][ T29] audit: type=1326 audit(1720723001.235:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.620298][ T9600] ip6t_REJECT: ECHOREPLY is not supported [ 133.626844][ T29] audit: type=1326 audit(1720723001.235:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.626895][ T29] audit: type=1326 audit(1720723001.235:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.626915][ T29] audit: type=1326 audit(1720723001.235:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.660569][ T9602] tipc: Started in network mode [ 133.680092][ T29] audit: type=1326 audit(1720723001.235:1625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.703395][ T9602] tipc: Node identity 1, cluster identity 4711 [ 133.703405][ T9602] tipc: Node number set to 1 [ 133.716568][ T9602] tipc: Cannot configure node identity twice [ 133.731770][ T29] audit: type=1326 audit(1720723001.235:1626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.771961][ T29] audit: type=1326 audit(1720723001.235:1627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.795733][ T29] audit: type=1326 audit(1720723001.235:1628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9587 comm="syz.3.2293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dbb8dbd9 code=0x7ffc0000 [ 133.850080][ T9615] Process accounting resumed [ 133.885007][ T9629] loop3: detected capacity change from 0 to 256 [ 134.025240][ T9642] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2312'. [ 134.683494][ T9652] loop3: detected capacity change from 0 to 4096 [ 134.694888][ T9652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.704832][ T9657] loop4: detected capacity change from 0 to 512 [ 134.713834][ T9657] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.727939][ T9657] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2234: inode #12: comm syz.4.2319: corrupted in-inode xattr: invalid ea_ino [ 134.746498][ T9207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.746506][ T9657] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.2319: couldn't read orphan inode 12 (err -117) [ 134.747081][ T9657] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.854739][ T9671] tipc: Started in network mode [ 134.859779][ T9671] tipc: Node identity 6, cluster identity 4711 [ 134.865989][ T9671] tipc: Node number set to 6 [ 134.877727][ T9673] tipc: Started in network mode [ 134.882711][ T9673] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 134.891961][ T9673] tipc: Enabled bearer , priority 10 [ 134.944429][ T9671] loop3: detected capacity change from 0 to 2048 [ 134.984890][ T9671] Alternate GPT is invalid, using primary GPT. [ 134.991296][ T9671] loop3: p2 p3 p7 [ 135.011365][ T9687] loop0: detected capacity change from 0 to 8192 [ 135.019335][ T9687] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 135.116951][ T9705] loop0: detected capacity change from 0 to 512 [ 135.123921][ T9705] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.142176][ T9705] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 135.156443][ T9705] System zones: 1-12 [ 135.163216][ T9705] EXT4-fs (loop0): 1 truncate cleaned up [ 135.172458][ T9705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.177080][ T9714] netlink: 'syz.2.2346': attribute type 4 has an invalid length. [ 135.213173][ T9716] tipc: Cannot configure node identity twice [ 135.235380][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.246738][ T9720] netlink: 'syz.3.2349': attribute type 1 has an invalid length. [ 135.269807][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 135.279094][ T9720] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 135.288153][ T9716] loop2: detected capacity change from 0 to 2048 [ 135.301592][ T9720] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 135.315395][ T9720] bond1 (unregistering): Released all slaves [ 135.340099][ T9716] Alternate GPT is invalid, using primary GPT. [ 135.346425][ T9716] loop2: p2 p3 p7 [ 135.386360][ T9727] loop3: detected capacity change from 0 to 2048 [ 135.393334][ T9727] ext4: Unknown parameter 'fsname' [ 135.496134][ T3157] usb 1-3: enqueue for inactive port 2 [ 135.496291][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8881133a1400: rx timeout, send abort [ 135.501671][ T3157] usb 1-3: enqueue for inactive port 2 [ 135.515393][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88811340dc00: rx timeout, send abort [ 135.523663][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8881133a1400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.539052][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88811340dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 135.565717][ T9745] loop2: detected capacity change from 0 to 512 [ 135.572247][ T9745] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.584587][ T3157] vhci_hcd: vhci_device speed not set [ 135.595382][ T9745] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2234: inode #12: comm syz.2.2357: corrupted in-inode xattr: invalid ea_ino [ 135.625614][ T9745] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2357: couldn't read orphan inode 12 (err -117) [ 135.652703][ T9745] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.658757][ T9755] netlink: 'syz.1.2362': attribute type 1 has an invalid length. [ 135.739989][ T9763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.777771][ T9763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.881372][ T9776] loop3: detected capacity change from 0 to 512 [ 135.888258][ T9776] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 135.898898][ T9776] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 135.907025][ T9776] System zones: 1-12 [ 135.908946][ T9758] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 135.920545][ T9776] EXT4-fs (loop3): 1 truncate cleaned up [ 135.926680][ T9776] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.956366][ T9207] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.004201][ T3159] tipc: Node number set to 15444650 [ 136.018138][ T9786] loop3: detected capacity change from 0 to 512 [ 136.024846][ T9786] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.036109][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.047309][ T9786] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #12: comm syz.3.2374: corrupted in-inode xattr: invalid ea_ino [ 136.060906][ T9786] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2374: couldn't read orphan inode 12 (err -117) [ 136.073466][ T9786] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.123548][ T9779] chnl_net:caif_netlink_parms(): no params data found [ 136.147639][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.174497][ T9779] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.181725][ T9779] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.189087][ T9779] bridge_slave_0: entered allmulticast mode [ 136.195535][ T9779] bridge_slave_0: entered promiscuous mode [ 136.202443][ T9779] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.209651][ T9779] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.217339][ T9779] bridge_slave_1: entered allmulticast mode [ 136.224600][ T9779] bridge_slave_1: entered promiscuous mode [ 136.234192][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.254636][ T9779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.265405][ T9779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.285029][ T9779] team0: Port device team_slave_0 added [ 136.291610][ T9779] team0: Port device team_slave_1 added [ 136.307087][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.322322][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.329340][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.355610][ T9779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.366941][ T9779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.373914][ T9779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.396107][ T9791] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 136.399972][ T9779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.456448][ T9779] hsr_slave_0: entered promiscuous mode [ 136.463273][ T9779] hsr_slave_1: entered promiscuous mode [ 136.469569][ T9779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.477322][ T9779] Cannot create hsr debugfs directory [ 136.488271][ T53] bridge_slave_1: left allmulticast mode [ 136.493923][ T53] bridge_slave_1: left promiscuous mode [ 136.499657][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.516888][ T53] bridge_slave_0: left allmulticast mode [ 136.520863][ T9813] loop0: detected capacity change from 0 to 512 [ 136.522593][ T53] bridge_slave_0: left promiscuous mode [ 136.522670][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.543905][ T53] tipc: Resetting bearer [ 136.551161][ T9813] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 136.563936][ T9813] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.600699][ T53] tipc: Disabling bearer [ 136.612889][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 136.647081][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.657925][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.669643][ T53] bond0 (unregistering): Released all slaves [ 136.701406][ T9422] kernel write not supported for file bpf-prog (pid: 9422 comm: kworker/0:8) [ 136.716072][ T53] tipc: Left network mode [ 136.781284][ T53] hsr_slave_0: left promiscuous mode [ 136.787043][ T53] hsr_slave_1: left promiscuous mode [ 136.793170][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.800663][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.809482][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.816959][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.826162][ T53] veth1_macvtap: left promiscuous mode [ 136.831641][ T53] veth0_macvtap: left promiscuous mode [ 136.837184][ T53] veth1_vlan: left promiscuous mode [ 136.842400][ T53] veth0_vlan: left promiscuous mode [ 136.920381][ T53] team0 (unregistering): Port device team_slave_1 removed [ 136.930417][ T53] team0 (unregistering): Port device team_slave_0 removed [ 137.007989][ T9809] chnl_net:caif_netlink_parms(): no params data found [ 137.045988][ T9809] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.053087][ T9809] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.060585][ T9809] bridge_slave_0: entered allmulticast mode [ 137.067133][ T9809] bridge_slave_0: entered promiscuous mode [ 137.074003][ T9809] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.081091][ T9809] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.088491][ T9809] bridge_slave_1: entered allmulticast mode [ 137.096325][ T9809] bridge_slave_1: entered promiscuous mode [ 137.118722][ T9809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.133046][ T9809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.156622][ T9809] team0: Port device team_slave_0 added [ 137.163726][ T9809] team0: Port device team_slave_1 added [ 137.169777][ T9853] loop0: detected capacity change from 0 to 512 [ 137.181501][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.188582][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.197067][ T9853] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.214608][ T9809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.229876][ T9853] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.238215][ T9809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.254973][ T9809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.280861][ T9809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 137.297184][ T9853] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #12: block 32: comm syz.0.2396: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 137.320893][ T9853] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 137.339960][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.340073][ T9809] hsr_slave_0: entered promiscuous mode [ 137.355591][ T9809] hsr_slave_1: entered promiscuous mode [ 137.361565][ T9809] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 137.369222][ T9809] Cannot create hsr debugfs directory [ 137.390910][ T9779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 137.399380][ T9779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 137.412727][ T9779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 137.425814][ T9779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 137.460475][ T9665] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 137.491162][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.521227][ T9809] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.543015][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.579609][ T9779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.596956][ T9779] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.609814][ T9809] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.630655][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.645182][ T3450] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.652288][ T3450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.677924][ T3450] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.684968][ T3450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.703080][ T9779] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 137.713520][ T9779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 137.732441][ T9809] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.743899][ T9881] loop0: detected capacity change from 0 to 512 [ 137.753618][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.767331][ T9881] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.780696][ T9881] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.801444][ T9809] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.826878][ T9881] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #12: block 32: comm syz.0.2405: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 137.855894][ T9881] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 137.878128][ T9862] chnl_net:caif_netlink_parms(): no params data found [ 137.885281][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.897046][ T53] bridge_slave_1: left allmulticast mode [ 137.902735][ T53] bridge_slave_1: left promiscuous mode [ 137.909075][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.917339][ T53] bridge_slave_0: left allmulticast mode [ 137.923008][ T53] bridge_slave_0: left promiscuous mode [ 137.928743][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.984154][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 137.984168][ T29] audit: type=1400 audit(1720723005.665:1780): avc: denied { write } for pid=9894 comm="syz.1.2408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 138.046708][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.057000][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.067145][ T53] bond0 (unregistering): Released all slaves [ 138.077341][ T9809] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 138.086177][ T9809] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 138.094836][ T9891] __nla_validate_parse: 4 callbacks suppressed [ 138.094880][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2406'. [ 138.138768][ T9809] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 138.148111][ T9809] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 138.176822][ T53] hsr_slave_0: left promiscuous mode [ 138.182474][ T53] hsr_slave_1: left promiscuous mode [ 138.188359][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.195973][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.204442][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.212061][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.220864][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 138.232002][ T53] veth1_macvtap: left promiscuous mode [ 138.237502][ T53] veth0_macvtap: left promiscuous mode [ 138.243068][ T53] veth1_vlan: left promiscuous mode [ 138.248369][ T53] veth0_vlan: left promiscuous mode [ 138.329128][ T53] team0 (unregistering): Port device team_slave_1 removed [ 138.338948][ T53] team0 (unregistering): Port device team_slave_0 removed [ 138.380615][ T9862] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.387735][ T9862] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.396780][ T9862] bridge_slave_0: entered allmulticast mode [ 138.403517][ T9862] bridge_slave_0: entered promiscuous mode [ 138.411731][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 138.420761][ T9913] macvlan0: entered promiscuous mode [ 138.426170][ T9913] macvlan0: entered allmulticast mode [ 138.431533][ T9913] veth1_vlan: entered allmulticast mode [ 138.437793][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 138.448171][ T9779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.465125][ T9916] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 138.479200][ T9862] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.486473][ T9862] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.493607][ T9862] bridge_slave_1: entered allmulticast mode [ 138.500555][ T9862] bridge_slave_1: entered promiscuous mode [ 138.524019][ T9916] bond1 (unregistering): Released all slaves [ 138.548089][ T9862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.559831][ T9924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2417'. [ 138.578817][ T9862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.615615][ T9862] team0: Port device team_slave_0 added [ 138.630312][ T9862] team0: Port device team_slave_1 added [ 138.652806][ T9809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.667218][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.674285][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.700657][ T9862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.716023][ T9862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.723113][ T9862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.749150][ T9862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.763773][ T9809] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.792420][ T9862] hsr_slave_0: entered promiscuous mode [ 138.800939][ T9862] hsr_slave_1: entered promiscuous mode [ 138.807205][ T9862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.815611][ T9862] Cannot create hsr debugfs directory [ 138.828275][ T9779] veth0_vlan: entered promiscuous mode [ 138.853239][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.860396][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.883441][ T9779] veth1_vlan: entered promiscuous mode [ 138.908946][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.916128][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.938408][ T9779] veth0_macvtap: entered promiscuous mode [ 138.989077][ T9] kernel write not supported for file /200/attr/keycreate (pid: 9 comm: kworker/0:1) [ 138.996122][ T9779] veth1_macvtap: entered promiscuous mode [ 139.043393][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.053929][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.063856][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.074646][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.079446][ T9982] 9pnet: p9_errstr2errno: server reported unknown error 7j1' /!6V65~X [ 139.084544][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.084559][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.084574][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.125504][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.138712][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.147827][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.158423][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.168484][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.179301][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.189244][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.199924][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.209933][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.220665][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.230512][ T9779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.241130][ T9779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.252171][ T9779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.281140][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 139.288991][ T9809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.309560][ T9779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.318484][ T9779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.327218][ T9779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.335946][ T9779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.391908][T10003] 9pnet: p9_errstr2errno: server reported unknown error 7j1' /!6V65~X [ 139.460226][T10022] loop2: detected capacity change from 0 to 128 [ 139.462786][ T9862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 139.475473][ T9862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 139.483770][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2451'. [ 139.484015][T10022] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 139.509467][ T9862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 139.523964][ T9862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 139.531174][ T53] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 139.553137][ T9809] veth0_vlan: entered promiscuous mode [ 139.588499][ T9809] veth1_vlan: entered promiscuous mode [ 139.621839][ T9809] veth0_macvtap: entered promiscuous mode [ 139.648167][T10041] loop2: detected capacity change from 0 to 128 [ 139.655571][T10041] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 139.675050][ T9809] veth1_macvtap: entered promiscuous mode [ 139.686166][ T53] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 139.708795][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.719320][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.729425][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.739879][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.749865][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.760306][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.770185][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.780610][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.790416][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.798540][T10047] loop0: detected capacity change from 0 to 512 [ 139.801006][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.819045][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.848559][T10047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.866165][ T9862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.877309][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.887868][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.897771][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.903354][T10047] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.908179][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.908201][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.908214][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.948709][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.959236][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.969061][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.979499][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.989362][ T9809] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.993296][T10059] loop2: detected capacity change from 0 to 2048 [ 139.999769][ T9809] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.005417][ T9809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.016818][T10047] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #12: block 32: comm syz.0.2465: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 140.024600][ T9809] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.051410][ T9809] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.060197][ T9809] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.068937][ T9809] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.094902][T10059] loop2: p1 < > p4 [ 140.097200][T10047] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 140.099139][T10059] loop2: p4 size 8388608 extends beyond EOD, truncated [ 140.118674][ T9862] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.140431][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.154739][ T910] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.161805][ T910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.178871][ T910] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.186085][ T910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.228722][ T29] audit: type=1326 audit(1720723007.915:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.0.2471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f75f4a8cbd9 code=0x0 [ 140.317907][ T9862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.411567][ T29] audit: type=1326 audit(1720723008.095:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.437966][ T29] audit: type=1326 audit(1720723008.095:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.470527][ T29] audit: type=1326 audit(1720723008.125:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.494211][ T29] audit: type=1326 audit(1720723008.125:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.518315][ T29] audit: type=1326 audit(1720723008.125:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.541954][ T29] audit: type=1326 audit(1720723008.125:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.567306][ T29] audit: type=1326 audit(1720723008.185:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.590174][ T9862] veth0_vlan: entered promiscuous mode [ 140.591077][ T29] audit: type=1326 audit(1720723008.185:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.2.2484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe3021debd9 code=0x7ffc0000 [ 140.604382][ T9862] veth1_vlan: entered promiscuous mode [ 140.645751][ T9862] veth0_macvtap: entered promiscuous mode [ 140.653427][ T9862] veth1_macvtap: entered promiscuous mode [ 140.665002][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.675480][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.685731][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.696385][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.706518][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.716986][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.726828][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.737256][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.747144][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.757541][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.767343][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.777815][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.789856][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.800818][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.811572][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.821407][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.832535][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.842443][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.852970][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.862797][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.873360][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.883280][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.893914][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.903748][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.914269][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.917435][T10140] loop2: detected capacity change from 0 to 2048 [ 140.924129][ T9862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.924144][ T9862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.928523][ T9862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.955394][T10140] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.984500][ T9862] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.988093][T10140] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 140.993234][ T9862] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.993266][ T9862] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.993296][ T9862] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.022257][T10140] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28 [ 141.046667][T10140] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.046667][T10140] [ 141.056410][T10140] EXT4-fs (loop2): Total free blocks count 0 [ 141.062463][T10140] EXT4-fs (loop2): Free/Dirty block details [ 141.068517][T10140] EXT4-fs (loop2): free_blocks=2415919104 [ 141.074789][T10140] EXT4-fs (loop2): dirty_blocks=32 [ 141.080173][T10140] EXT4-fs (loop2): Block reservation details [ 141.086281][T10140] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 141.131533][ T2074] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 141.152653][T10161] loop0: detected capacity change from 0 to 512 [ 141.170606][T10161] EXT4-fs: Ignoring removed bh option [ 141.189686][T10161] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 141.228571][T10161] EXT4-fs (loop0): 1 truncate cleaned up [ 141.253098][T10161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.374354][T10161] loop0: detected capacity change from 512 to 64 [ 141.387947][T10161] syz.0.2503: attempt to access beyond end of device [ 141.387947][T10161] loop0: rw=0, sector=70, nr_sectors = 2 limit=64 [ 141.410976][T10196] loop4: detected capacity change from 0 to 512 [ 141.427662][T10196] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 141.435910][T10196] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 141.444000][T10196] EXT4-fs error (device loop4): ext4_orphan_get:1420: comm syz.4.2517: bad orphan inode 13 [ 141.456493][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.457519][T10196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.511929][ T9862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.560172][ T3450] kernel write not supported for file bpf-prog (pid: 3450 comm: kworker/1:6) [ 141.562286][T10208] loop4: detected capacity change from 0 to 1024 [ 141.583728][T10208] EXT4-fs: Ignoring removed orlov option [ 141.589532][T10208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.610560][T10208] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a84ec018, mo2=0002] [ 141.618960][T10208] System zones: 0-1, 3-36 [ 141.626066][T10208] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.643020][ T9862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.691734][T10228] loop0: detected capacity change from 0 to 2048 [ 141.708777][T10228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.738021][ T2074] bridge_slave_1: left allmulticast mode [ 141.743765][ T2074] bridge_slave_1: left promiscuous mode [ 141.750135][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.767460][ T2074] bridge_slave_0: left allmulticast mode [ 141.773172][ T2074] bridge_slave_0: left promiscuous mode [ 141.773233][T10246] Cannot find set identified by id 0 to match [ 141.778978][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.817125][ T9163] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.976706][ T2074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.987267][ T2074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.997886][ T2074] bond0 (unregistering): Released all slaves [ 142.007083][ T2074] bond1 (unregistering): Released all slaves [ 142.015433][ T2074] bond2 (unregistering): Released all slaves [ 142.094906][T10270] Cannot find set identified by id 0 to match [ 142.130221][T10280] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 142.152661][T10286] loop4: detected capacity change from 0 to 128 [ 142.166202][ T2074] hsr_slave_0: left promiscuous mode [ 142.178411][ T2074] hsr_slave_1: left promiscuous mode [ 142.195301][ T2074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.202817][ T2074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.212766][ T2074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.220351][ T2074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.233986][ T2074] veth1_vlan: left promiscuous mode [ 142.239288][ T2074] veth0_vlan: left promiscuous mode [ 142.250939][T10303] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.351038][ T2074] team0 (unregistering): Port device team_slave_1 removed [ 142.360947][ T2074] team0 (unregistering): Port device team_slave_0 removed [ 142.443646][T10324] loop2: detected capacity change from 0 to 128 [ 142.481533][T10330] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 142.543707][T10343] loop3: detected capacity change from 0 to 512 [ 142.561274][T10345] Cannot find set identified by id 0 to match [ 142.564893][T10343] EXT4-fs: Ignoring removed bh option [ 142.573155][T10343] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 142.594088][T10343] EXT4-fs (loop3): 1 truncate cleaned up [ 142.606677][T10343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.668070][ T2074] IPVS: stop unused estimator thread 0... [ 142.674251][T10343] loop3: detected capacity change from 512 to 64 [ 142.691475][T10343] syz.3.2583: attempt to access beyond end of device [ 142.691475][T10343] loop3: rw=0, sector=70, nr_sectors = 2 limit=64 [ 142.735901][ T2074] bridge_slave_1: left allmulticast mode [ 142.741557][ T2074] bridge_slave_1: left promiscuous mode [ 142.747234][ T2074] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.773360][ T2074] bridge_slave_0: left allmulticast mode [ 142.779351][ T2074] bridge_slave_0: left promiscuous mode [ 142.785945][ T2074] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.800307][ T9809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.825577][T10381] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2596'. [ 142.908860][ T2074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.919420][T10390] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 142.934489][ T2074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.955428][ T2074] bond0 (unregistering): Released all slaves [ 142.986455][T10398] loop3: detected capacity change from 0 to 512 [ 143.002877][T10398] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz.3.2606: casefold flag without casefold feature [ 143.017443][T10398] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.2606: couldn't read orphan inode 15 (err -117) [ 143.034467][T10398] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.042054][T10407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2610'. [ 143.092371][ T2074] hsr_slave_0: left promiscuous mode [ 143.102455][ T9809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.113895][ T2074] hsr_slave_1: left promiscuous mode [ 143.130995][T10413] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 143.142326][ T2074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.149837][ T2074] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.159750][ T2074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.167352][ T2074] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.180631][ T2074] veth1_macvtap: left promiscuous mode [ 143.186303][ T2074] veth0_macvtap: left promiscuous mode [ 143.191914][ T2074] veth1_vlan: left promiscuous mode [ 143.247050][T10421] loop3: detected capacity change from 0 to 2048 [ 143.253483][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 143.253495][ T29] audit: type=1400 audit(1720723010.935:1803): avc: denied { create } for pid=10416 comm="syz.4.2616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=irda_socket permissive=1 [ 143.283653][T10421] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 143.297735][ T29] audit: type=1400 audit(1720723010.985:1804): avc: denied { mount } for pid=10417 comm="syz.0.2617" name="/" dev="gadgetfs" ino=36110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 143.324546][T10421] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 143.345586][T10421] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a002e01c, mo2=0002] [ 143.353905][T10421] System zones: 0-19 [ 143.360720][T10421] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.377052][ T29] audit: type=1400 audit(1720723011.065:1805): avc: denied { setattr } for pid=10420 comm="syz.3.2613" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 143.400283][ T2074] team0 (unregistering): Port device team_slave_1 removed [ 143.410289][ T9809] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.411950][ T29] audit: type=1400 audit(1720723011.095:1806): avc: denied { setopt } for pid=10357 comm="syz.1.2588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 143.439644][ T2074] team0 (unregistering): Port device team_slave_0 removed [ 143.451299][ T29] audit: type=1326 audit(1720723011.105:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8eb0bd9 code=0x7ffc0000 [ 143.475500][ T29] audit: type=1326 audit(1720723011.105:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d8eb0bd9 code=0x7ffc0000 [ 143.485090][T10429] netlink: 'syz.4.2618': attribute type 49 has an invalid length. [ 143.498948][ T29] audit: type=1326 audit(1720723011.105:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8eb0bd9 code=0x7ffc0000 [ 143.498975][ T29] audit: type=1326 audit(1720723011.105:1810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d8eb0bd9 code=0x7ffc0000 [ 143.536927][T10430] loop4: detected capacity change from 0 to 256 [ 143.553987][ T29] audit: type=1326 audit(1720723011.125:1811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49d8eb0bd9 code=0x7ffc0000 [ 143.564276][T10430] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 143.583865][ T29] audit: type=1326 audit(1720723011.125:1812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10424 comm="syz.4.2618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49d8eb0bd9 code=0x7ffc0000 [ 143.620511][T10426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2618'. [ 143.629961][T10426] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2618'. [ 143.639487][T10428] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2619'. [ 143.649266][T10429] netlink: 'syz.4.2618': attribute type 49 has an invalid length. [ 143.699316][T10443] netlink: 'syz.1.2622': attribute type 4 has an invalid length. [ 143.704373][T10440] loop2: detected capacity change from 0 to 512 [ 143.707074][T10443] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2622'. [ 143.732654][T10440] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz.2.2624: casefold flag without casefold feature [ 143.759034][T10440] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz.2.2624: couldn't read orphan inode 15 (err -117) [ 143.801892][T10440] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.872028][T10467] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2631'. [ 143.892707][ T9779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.929120][T10471] loop4: detected capacity change from 0 to 512 [ 143.935991][T10471] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 143.965664][T10471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.970360][T10479] loop2: detected capacity change from 0 to 2048 [ 143.986665][T10471] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 144.001228][T10471] netlink: 'syz.4.2637': attribute type 4 has an invalid length. [ 144.011880][T10479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.076830][ T9862] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.111787][ T9779] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.130571][ T9779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.208803][T10495] tmpfs: Bad value for 'mpol' [ 144.447071][T10504] netlink: 'syz.1.2646': attribute type 5 has an invalid length. [ 144.455525][T10503] ================================================================== [ 144.463598][T10503] BUG: KCSAN: data-race in exit_mm / mm_update_next_owner [ 144.470694][T10503] [ 144.472996][T10503] write to 0xffff888100e61580 of 8 bytes by task 10504 on cpu 0: [ 144.480696][T10503] exit_mm+0x9c/0x190 [ 144.484660][T10503] do_exit+0x556/0x1710 [ 144.488799][T10503] do_group_exit+0x102/0x150 [ 144.493372][T10503] get_signal+0xf2f/0x1080 [ 144.497771][T10503] arch_do_signal_or_restart+0x95/0x4b0 [ 144.503298][T10503] syscall_exit_to_user_mode+0x59/0x130 [ 144.508852][T10503] do_syscall_64+0xd6/0x1c0 [ 144.513344][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.519223][T10503] [ 144.521534][T10503] read to 0xffff888100e61580 of 8 bytes by task 10503 on cpu 1: [ 144.529141][T10503] mm_update_next_owner+0x1c9/0x460 [ 144.534320][T10503] exit_mm+0xdc/0x190 [ 144.538286][T10503] do_exit+0x556/0x1710 [ 144.542511][T10503] do_group_exit+0x142/0x150 [ 144.547088][T10503] __x64_sys_exit_group+0x1f/0x20 [ 144.552100][T10503] x64_sys_call+0x27f9/0x2d70 [ 144.556786][T10503] do_syscall_64+0xc9/0x1c0 [ 144.561279][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.567245][T10503] [ 144.569551][T10503] value changed: 0xffff88810dccda40 -> 0x0000000000000000 [ 144.576634][T10503] [ 144.578939][T10503] Reported by Kernel Concurrency Sanitizer on: [ 144.585154][T10503] CPU: 1 PID: 10503 Comm: syz.1.2646 Not tainted 6.10.0-rc7-syzkaller-00076-g9d9a2f29aefd #0 [ 144.595287][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 144.605326][T10503] ==================================================================