last executing test programs: 6.461103554s ago: executing program 0: syz_mount_image$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', 0xb016c5bac0a60f1c, 0x0, 0x0, 0x0, &(0x7f0000000200)) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x81901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x2) dup3(r1, r0, 0x0) 6.372142027s ago: executing program 0: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000e1b04f8b0e64109c002000f8fffcffffff8520000003000000180000000100010000000000020000003066000004000000182600", @ANYBLOB="000000000e004d9fb4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, &(0x7f00000002c0)=[@flags={0x3, 0x10200}], 0x1) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.761719673s ago: executing program 0: close(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00220f0000000bd9cd8d96296592"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0xfffffffd}) 3.844352391s ago: executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 3.499844125s ago: executing program 0: mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) setfsuid(0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r5, 0x0, 0x200) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lremovexattr(0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000001140)={0x50, 0x0, 0x0, {0x7, 0x26}}, 0x50) utime(&(0x7f0000000e00)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000c680)="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", 0x2000, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, &(0x7f0000000140)='syzkaller\x00', 0x5}, 0x90) 2.967075318s ago: executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014001100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) keyctl$KEYCTL_PKEY_SIGN(0x4, &(0x7f0000000040), &(0x7f0000000300)=ANY=[], 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x4000400) unshare(0x64000600) 2.427399382s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x10001, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x3, 0x3800, 0x3f, 0x11}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000480)=0x1f6, &(0x7f00000004c0)='%+9llu \x00'}, 0x20) 2.390435447s ago: executing program 0: close(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="00220f0000000bd9cd8d96296592"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x4018480c, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0xfffffffd}) 2.31118351s ago: executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x74, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 2.296985432s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$uid(0x0, 0xffffffffffffffff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3}) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080)=ANY=[], 0x2000011a) 1.994561839s ago: executing program 2: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 1.774777383s ago: executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x8, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) 1.419803959s ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) close(r1) pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000240)) write$P9_RCLUNK(r2, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = dup3(r4, r3, 0x0) accept4(r5, 0x0, 0x0, 0x0) syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") recvmmsg(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000002d80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) r6 = eventfd(0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$P9_RSTATFS(r7, &(0x7f0000000080)={0x43, 0x9, 0x1, {0x1ff, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x8}}, 0x43) write$binfmt_elf32(r7, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x58) 1.068440413s ago: executing program 2: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc1000004) 1.030677609s ago: executing program 2: r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000002850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, 0x0) close(0xffffffffffffffff) dup3(r0, r1, 0x0) 909.936759ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x5, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/fib_trie\x00') preadv(r5, &(0x7f0000000480)=[{&(0x7f0000000540)=""/115, 0x200005b3}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000380), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r6, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 802.183205ms ago: executing program 2: syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"/315], 0x1, 0x217, &(0x7f00000004c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0], 0x0, 0x200, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = signalfd4(r3, &(0x7f0000000240)={[0x7]}, 0x8, 0x80800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r4, &(0x7f0000000980)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8c6f7d3186cb478d9b", @ANYRES16=r5, @ANYBLOB="01002bbd7000fddbdf251800000034000380080003000300000008000300050000000800020006000000080001000000000008000100030000000800010005000000980005805400028008000200f2c3f92a080001001c00000008000400a30b00000800040003000000080003000000000008000400e20b0000080003000800000008000400ff0300000800010016000000080001000d0000000c00028008000200018000002c000280080002000100000008000300ffffffff0800040000100000080004000080ffff080004000800000008000100756470001c000280040004001400038008000200810000000800010000040000"], 0xfc}, 0x1, 0x0, 0x0, 0x4001}, 0x4004) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) socket$inet(0x2, 0x3, 0x5) r7 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) 567.169632ms ago: executing program 1: setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x0, {{@in=@multicast2, @in=@local}, {@in=@loopback}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xf0}}, 0x0) 416.064915ms ago: executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DEL_MFC(r0, 0x3a, 0xcd, 0x0, 0x0) 405.568747ms ago: executing program 3: openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x300, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) read$FUSE(r0, 0x0, 0x8003a0) 401.660127ms ago: executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 386.88963ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000f500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 358.558274ms ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001340)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="6321a1780e3fe8d9098f1f28f3c1f1895857b6b4afebba414b5998fa7c73702eb715d85b6a7709a53bf91325a9fbf7387371592c3533a8a34a28e9364405bb05cdeedb9ddfbe45a6933c33e5019991d691e8e8817a584f5392630d34c12a00aac5c546266df9fbb755447a0ff32acb32fc4b9c54b7fa15f82a9848478df5354f7158ece711c634aead9f427b8a3e580b3bd0920814473069f285753c945e0baa9072f76c542acf2986649075a243126f6d736b8bfa9a88672388eaa7902fc6c9a3c1b2781d", 0xc5}], 0x1}}], 0x1, 0x20000001) read$FUSE(r0, &(0x7f0000003000)={0x2020}, 0x2020) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000001240)="668546927ae520a8f3049a2f50ca1553a5e62dc469b5b2348ffe35a76a94a3ad96f8e87e3bd8a5c3c8ce4da39c468ccfb81bc03e88c8a813e9ce7cb1410024b82b58364f6dc5fbf35e04c17ccb4c793d5578c99cf2e1fe30481bb07c86c6806ad25840494578c1516bc6d6e1942cc9f6d3b5491d949c4b93d7a403ca75cb7bc8fea7d325645cbe4c87da88e362c3ae3206fe2d3d88d62500c4f5ccbc1af04079cc5d49c05f487f40ed97703cf5f46cc9d074e5a8811d3e43b5b4f6456c508e0695433ea9f6", 0xc5}], 0x1}}], 0x1, 0x1) 148.473727ms ago: executing program 3: futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc1000004) 146.268158ms ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x10, @mcast2={0xfc}}]}}}]}, 0x4c}}, 0x0) 135.058339ms ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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") chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 105.583904ms ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1004400, &(0x7f00000002c0)={[{@resgid}, {@data_err_ignore}]}, 0x6, 0x588, &(0x7f0000000300)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000880)=""/150, 0x96) 13.145968ms ago: executing program 4: unshare(0x400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x2c) 11.212608ms ago: executing program 3: syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) 0s ago: executing program 4: r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r0, 0x2007ffb) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) eventfd2(0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf}}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) prctl$PR_SET_ENDIAN(0x10, 0xf0ff1f00000000) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.193' (ED25519) to the list of known hosts. 2024/06/17 18:01:32 fuzzer started 2024/06/17 18:01:32 dialing manager at 10.128.0.163:30000 [ 20.960587][ T23] audit: type=1400 audit(1718647292.639:66): avc: denied { node_bind } for pid=345 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 20.980844][ T23] audit: type=1400 audit(1718647292.639:67): avc: denied { name_bind } for pid=345 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 21.031823][ T23] audit: type=1400 audit(1718647292.709:68): avc: denied { mounton } for pid=353 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.034001][ T353] cgroup1: Unknown subsys name 'net' [ 21.060996][ T353] cgroup1: Unknown subsys name 'net_prio' [ 21.067050][ T353] cgroup1: Unknown subsys name 'devices' [ 21.077421][ T23] audit: type=1400 audit(1718647292.709:69): avc: denied { mount } for pid=353 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.100124][ T23] audit: type=1400 audit(1718647292.739:70): avc: denied { mounton } for pid=355 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.125106][ T23] audit: type=1400 audit(1718647292.739:71): avc: denied { mount } for pid=355 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.130912][ T361] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.148365][ T23] audit: type=1400 audit(1718647292.749:72): avc: denied { unmount } for pid=353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.176175][ T23] audit: type=1400 audit(1718647292.759:73): avc: denied { setattr } for pid=360 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=9306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.199263][ T23] audit: type=1400 audit(1718647292.839:74): avc: denied { relabelto } for pid=361 comm="mkswap" name="swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.224528][ T23] audit: type=1400 audit(1718647292.839:75): avc: denied { write } for pid=361 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1927 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.262480][ T353] cgroup1: Unknown subsys name 'hugetlb' [ 21.268319][ T353] cgroup1: Unknown subsys name 'rlimit' [ 21.276396][ T358] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/06/17 18:01:33 starting 5 executor processes [ 21.726935][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.733823][ T374] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.741351][ T374] device bridge_slave_0 entered promiscuous mode [ 21.769256][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.776082][ T374] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.783543][ T374] device bridge_slave_1 entered promiscuous mode [ 21.847524][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.854521][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.861921][ T372] device bridge_slave_0 entered promiscuous mode [ 21.868337][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.875643][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.882985][ T373] device bridge_slave_0 entered promiscuous mode [ 21.894219][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.901091][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.908360][ T371] device bridge_slave_0 entered promiscuous mode [ 21.914877][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.921731][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.929162][ T372] device bridge_slave_1 entered promiscuous mode [ 21.939899][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.946724][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.954174][ T373] device bridge_slave_1 entered promiscuous mode [ 21.966347][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.973410][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.980759][ T371] device bridge_slave_1 entered promiscuous mode [ 22.063093][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.070080][ T375] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.077374][ T375] device bridge_slave_0 entered promiscuous mode [ 22.100709][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.107630][ T375] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.115246][ T375] device bridge_slave_1 entered promiscuous mode [ 22.268642][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.275506][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.282628][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.289382][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.298745][ T374] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.305594][ T374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.312756][ T374] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.319589][ T374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.335775][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.342624][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.349743][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.356529][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.365546][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.372397][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.379602][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.386367][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.415819][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.422669][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.429785][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.436536][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.469710][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.476730][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.484282][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.492541][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.499633][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.507709][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.514818][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.522012][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.529255][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.536219][ T74] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.543326][ T74] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.565968][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.574176][ T124] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.581016][ T124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.611725][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.619401][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.626753][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.635172][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.642014][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.649599][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.657542][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.664377][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.671561][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.679324][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.687295][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.694146][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.701335][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.709444][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.716255][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.723470][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.759539][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.767494][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.777902][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.785968][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.794035][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.801367][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.808533][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.816671][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.824422][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.832379][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.840264][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.848400][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.856581][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.863423][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.870591][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.878399][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.906647][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.914656][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.923309][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.932758][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.941021][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.948211][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.970817][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.979389][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.987417][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.994354][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.002283][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.010596][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.018491][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.025247][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.032377][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.040690][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.048583][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.055339][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.062574][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.071002][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.079159][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.086939][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.113241][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.121988][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.130562][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.138254][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.146584][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.154499][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.162477][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.170988][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.178673][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.186844][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.194476][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.202350][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.226060][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.234377][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.243817][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.252176][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.271162][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.279846][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.288036][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.296500][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.304890][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.313118][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.321452][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.329585][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.356674][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.365895][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.375198][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.383760][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.391941][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.399905][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.407568][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.415731][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.423751][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.445129][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.453543][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.463571][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.472284][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.480777][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.489890][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.497928][ T403] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 23.511678][ T403] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 23.526209][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.535052][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.541619][ T403] syz-executor.1 (403) used greatest stack depth: 19512 bytes left [ 23.545236][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.560340][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.578854][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.582611][ T407] ====================================================== [ 23.582611][ T407] WARNING: the mand mount option is being deprecated and [ 23.582611][ T407] will be removed in v5.15! [ 23.582611][ T407] ====================================================== [ 23.587085][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.622261][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.630539][ T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.714627][ T407] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 23.756893][ T407] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 23.761989][ T431] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 23.797271][ T436] overlayfs: upper fs does not support tmpfile. [ 23.797302][ T407] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 23.806287][ T436] overlayfs: upper fs does not support xattr, falling back to index=off and metacopy=off. [ 23.821818][ T441] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 23.830102][ T436] overlayfs: failed to resolve './file0': -2 [ 23.835288][ T407] EXT4-fs (loop1): This should not happen!! Data will be lost [ 23.835288][ T407] [ 23.857115][ T441] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 23.865274][ T407] EXT4-fs (loop1): Total free blocks count 0 [ 23.879675][ T407] EXT4-fs (loop1): Free/Dirty block details [ 23.891175][ T407] EXT4-fs (loop1): free_blocks=2415919104 [ 23.896820][ T407] EXT4-fs (loop1): dirty_blocks=16 [ 23.902258][ T407] EXT4-fs (loop1): Block reservation details [ 23.908067][ T407] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 24.131937][ T465] EXT4-fs (loop2): bad s_want_extra_isize: 11962 [ 24.420577][ T492] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 24.458863][ T492] EXT4-fs error (device loop2): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 24.494260][ T492] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 24.528933][ T492] EXT4-fs (loop2): This should not happen!! Data will be lost [ 24.528933][ T492] [ 24.692229][ T492] EXT4-fs (loop2): Total free blocks count 0 [ 24.698034][ T492] EXT4-fs (loop2): Free/Dirty block details [ 24.757747][ T492] EXT4-fs (loop2): free_blocks=2415919104 [ 24.785362][ T492] EXT4-fs (loop2): dirty_blocks=16 [ 24.812201][ T492] EXT4-fs (loop2): Block reservation details [ 24.828315][ T492] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 25.151409][ T514] F2FS-fs (loop1): Corrupted extension count (3384082469 + 1 > 64) [ 25.185233][ T514] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 25.218559][ T514] F2FS-fs (loop1): Invalid uid value -1 [ 25.225805][ T553] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 25.253221][ T553] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 25.323384][ T556] fuse: Unknown parameter '0xffffffffffffffff' [ 25.479012][ T552] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support! [ 25.526927][ T552] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 25.539359][ T552] EXT4-fs (loop4): Remounting filesystem read-only [ 25.545989][ T552] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 25.555375][ T552] EXT4-fs (loop4): 1 truncate cleaned up [ 25.559999][ T565] EXT4-fs (loop3): bad s_want_extra_isize: 11962 [ 25.575416][ T552] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,discard, [ 25.585640][ T552] ext4 filesystem being mounted at /root/syzkaller-testdir3804001595/syzkaller.ltuhoz/15/file1 supports timestamps until 2038 (0x7fffffff) [ 25.631333][ T552] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz-executor.4: inode #59392: comm syz-executor.4: iget: illegal inode # [ 25.645837][ T552] EXT4-fs (loop4): Remounting filesystem read-only [ 25.652931][ T552] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz-executor.4: error while reading EA inode 59392 err=-117 [ 25.665947][ T552] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz-executor.4: inode #59392: comm syz-executor.4: iget: illegal inode # [ 25.692825][ T552] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz-executor.4: error while reading EA inode 59392 err=-117 [ 25.716746][ T412] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 25.728651][ T412] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 25.778887][ T574] EXT4-fs error (device loop3): ext4_ext_check_inode:540: inode #2: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 1025, max 0(0), depth 0(0) [ 25.806448][ T574] EXT4-fs (loop3): get root inode failed [ 25.812183][ T574] EXT4-fs (loop3): mount failed [ 25.940233][ T596] EXT4-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value [ 25.995801][ T593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue [ 26.066755][ T593] EXT4-fs error (device loop3): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 26.105484][ T593] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 26.118919][ T593] EXT4-fs (loop3): This should not happen!! Data will be lost [ 26.118919][ T593] [ 26.131407][ T593] EXT4-fs (loop3): Total free blocks count 0 [ 26.196531][ T593] EXT4-fs (loop3): Free/Dirty block details [ 26.238255][ T593] EXT4-fs (loop3): free_blocks=2415919104 [ 26.239612][ T603] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 26.261385][ T593] EXT4-fs (loop3): dirty_blocks=16 [ 26.270781][ T603] ext4 filesystem being mounted at /root/syzkaller-testdir4254850157/syzkaller.7boDXn/21/bus supports timestamps until 2038 (0x7fffffff) [ 26.276661][ T593] EXT4-fs (loop3): Block reservation details [ 26.325148][ T619] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 26.337455][ T593] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 26.347500][ T619] EXT4-fs (loop4): Remounting filesystem read-only [ 26.372428][ T619] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 26.399212][ T619] __quota_error: 101 callbacks suppressed [ 26.399221][ T619] Quota error (device loop4): write_blk: dquota write failed [ 26.419204][ T619] Quota error (device loop4): qtree_write_dquot: Error -27 occurred while creating quota [ 26.438188][ T619] EXT4-fs (loop4): 1 truncate cleaned up [ 26.448056][ T619] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,discard, [ 26.460248][ T619] ext4 filesystem being mounted at /root/syzkaller-testdir3804001595/syzkaller.ltuhoz/18/file1 supports timestamps until 2038 (0x7fffffff) [ 26.487074][ T629] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 26.512058][ T619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz-executor.4: inode #59392: comm syz-executor.4: iget: illegal inode # [ 26.529175][ T619] EXT4-fs (loop4): Remounting filesystem read-only [ 26.565141][ T619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz-executor.4: error while reading EA inode 59392 err=-117 [ 26.604282][ T619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz-executor.4: inode #59392: comm syz-executor.4: iget: illegal inode # [ 26.647940][ T619] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz-executor.4: error while reading EA inode 59392 err=-117 [ 26.698926][ T7] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 26.716150][ T7] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 26.727167][ T7] Quota error (device loop4): write_blk: dquota write failed [ 26.734514][ T7] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 26.825252][ T7] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 26.838237][ T7] Quota error (device loop4): remove_tree: Getting block too big (0 >= 6) [ 26.847837][ T7] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 26.860482][ T7] Quota error (device loop4): write_blk: dquota write failed [ 26.867761][ T7] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 26.899724][ T642] [ 26.901883][ T642] ********************************************************** [ 26.909109][ T642] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 26.916298][ T642] ** ** [ 26.923524][ T642] ** trace_printk() being used. Allocating extra memory. ** [ 26.930928][ T642] ** ** [ 26.938111][ T642] ** This means that this is a DEBUG kernel and it is ** [ 26.945328][ T642] ** unsafe for production use. ** [ 26.952557][ T642] ** ** [ 26.955905][ T636] incfs: mount failed -22 [ 26.959746][ T642] ** If you see this message and you are not debugging ** [ 26.971095][ T642] ** the kernel, report this immediately to your vendor! ** [ 26.978281][ T642] ** ** [ 26.985654][ T642] ** NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE ** [ 26.992852][ T642] ********************************************************** [ 27.012971][ T23] audit: type=1400 audit(1718647298.569:168): avc: denied { mount } for pid=634 comm="syz-executor.0" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.105018][ T645] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 27.261971][ T654] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 27.272070][ T654] ext4 filesystem being mounted at /root/syzkaller-testdir838017316/syzkaller.LTcbg1/14/bus supports timestamps until 2038 (0x7fffffff) [ 27.378778][ T661] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.385771][ T661] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.393243][ T661] device bridge_slave_0 entered promiscuous mode [ 27.400817][ T661] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.407977][ T661] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.415768][ T661] device bridge_slave_1 entered promiscuous mode [ 27.747831][ T661] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.754703][ T661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.761921][ T661] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.768746][ T661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.905054][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.916365][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.924575][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.933561][ T680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 27.962202][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.982717][ T637] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.989598][ T637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.032265][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.051394][ T637] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.058255][ T637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.088089][ T7] device bridge_slave_1 left promiscuous mode [ 28.094442][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.109187][ T7] device bridge_slave_0 left promiscuous mode [ 28.115606][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.232972][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.245090][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.269950][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.278355][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.287971][ T692] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 28.296225][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.307910][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.326209][ T692] EXT4-fs (loop4): Remounting filesystem read-only [ 28.335802][ T692] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27 [ 28.349989][ T692] EXT4-fs (loop4): 1 truncate cleaned up [ 28.355492][ T692] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,discard, [ 28.365725][ T692] ext4 filesystem being mounted at /root/syzkaller-testdir3804001595/syzkaller.ltuhoz/23/file1 supports timestamps until 2038 (0x7fffffff) [ 28.380083][ T394] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.390265][ T703] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,user_xattr,data_err=abort,data_err=abort,block_validity,max_dir_size_kb=0x00000000000007b1,init_itable,min_batch_time=0x00000000000000ce,delalloc,noinit_itable,stripe=0x0000000000000906,,errors=continue [ 28.405693][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.462674][ T692] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz-executor.4: inode #59392: comm syz-executor.4: iget: illegal inode # [ 28.477325][ T692] EXT4-fs (loop4): Remounting filesystem read-only [ 28.488427][ T692] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz-executor.4: error while reading EA inode 59392 err=-117 [ 28.504954][ T692] EXT4-fs error (device loop4): ext4_xattr_inode_iget:402: comm syz-executor.4: inode #59392: comm syz-executor.4: iget: illegal inode # [ 28.520877][ T692] EXT4-fs error (device loop4): ext4_xattr_inode_iget:407: comm syz-executor.4: error while reading EA inode 59392 err=-117 [ 28.590399][ T712] incfs: mount failed -22 [ 28.647690][ T412] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 28.681509][ T412] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 28.797289][ T708] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 28.823256][ T708] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 28.837874][ T708] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 28.853866][ T708] EXT4-fs (loop1): This should not happen!! Data will be lost [ 28.853866][ T708] [ 28.865000][ T708] EXT4-fs (loop1): Total free blocks count 0 [ 28.870936][ T708] EXT4-fs (loop1): Free/Dirty block details [ 28.876657][ T708] EXT4-fs (loop1): free_blocks=2415919104 [ 28.883403][ T708] EXT4-fs (loop1): dirty_blocks=16 [ 28.888599][ T708] EXT4-fs (loop1): Block reservation details [ 28.894726][ T708] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 28.919024][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.930249][ T394] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 29.184896][ T394] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 29.193708][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.202905][ T394] usb 1-1: config 0 descriptor?? [ 29.494823][ T757] fuse: Bad value for 'fd' [ 29.580159][ T753] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 29.593476][ T753] EXT4-fs error (device loop1): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 29.608087][ T753] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 29.620037][ T753] EXT4-fs (loop1): This should not happen!! Data will be lost [ 29.620037][ T753] [ 29.630988][ T760] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 29.642897][ T753] EXT4-fs (loop1): Total free blocks count 0 [ 29.710559][ T753] EXT4-fs (loop1): Free/Dirty block details [ 29.716392][ T753] EXT4-fs (loop1): free_blocks=2415919104 [ 29.722360][ T753] EXT4-fs (loop1): dirty_blocks=16 [ 29.727357][ T753] EXT4-fs (loop1): Block reservation details [ 29.733824][ T753] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 29.780568][ T394] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 29.787829][ T394] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 29.797345][ T394] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 29.804597][ T394] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 29.811793][ T394] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 29.912567][ T770] incfs: mount failed -22 [ 30.037044][ T394] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 30.047016][ T394] plantronics 0003:047F:FFFF.0001: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 30.060630][ T394] usb 1-1: USB disconnect, device number 2 [ 30.458871][ T393] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 30.590123][ T795] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 30.646593][ T792] F2FS-fs (loop1): Test dummy encryption mode enabled [ 30.666696][ T792] F2FS-fs (loop1): Found nat_bits in checkpoint [ 30.691405][ T792] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 30.718882][ T393] usb 5-1: Using ep0 maxpacket: 32 [ 30.839381][ T393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 30.876339][ T393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 30.940384][ T393] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 30.955934][ T393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.969763][ T393] usb 5-1: config 0 descriptor?? [ 30.988999][ T791] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 31.009812][ T393] hub 5-1:0.0: USB hub found [ 31.150943][ T834] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 31.228897][ T393] hub 5-1:0.0: 2 ports detected [ 31.290690][ T837] incfs: mount failed -22 [ 31.416355][ T836] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 31.519157][ T412] device bridge_slave_1 left promiscuous mode [ 31.528120][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.540040][ T412] device bridge_slave_0 left promiscuous mode [ 31.546292][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.829422][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.836800][ T849] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.848130][ T849] device bridge_slave_0 entered promiscuous mode [ 31.865140][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.876149][ T849] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.883988][ T849] device bridge_slave_1 entered promiscuous mode [ 31.991012][ T23] kauditd_printk_skb: 28 callbacks suppressed [ 31.991020][ T23] audit: type=1400 audit(1718647303.669:188): avc: denied { read } for pid=855 comm="syz-executor.3" name="kvm" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.049137][ T23] audit: type=1400 audit(1718647303.699:189): avc: denied { open } for pid=855 comm="syz-executor.3" path="/dev/kvm" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.087306][ T849] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.094191][ T849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.101291][ T849] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.108055][ T849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.130018][ T23] audit: type=1400 audit(1718647303.699:190): avc: denied { ioctl } for pid=855 comm="syz-executor.3" path="/dev/kvm" dev="devtmpfs" ino=1120 ioctlcmd=0xae03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.179380][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.186978][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.194917][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.203224][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.454020][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.462458][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.469319][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.476538][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.485125][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.491980][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.507843][ T845] F2FS-fs (loop0): Test dummy encryption mode enabled [ 32.524090][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.533756][ T845] F2FS-fs (loop0): Found nat_bits in checkpoint [ 32.537107][ T23] audit: type=1400 audit(1718647304.209:191): avc: denied { read } for pid=871 comm="syz-executor.2" name="ppp" dev="devtmpfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.569114][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.576186][ T23] audit: type=1400 audit(1718647304.239:192): avc: denied { open } for pid=871 comm="syz-executor.2" path="/dev/ppp" dev="devtmpfs" ino=9278 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.602728][ T845] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 32.602816][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.610380][ T23] audit: type=1400 audit(1718647304.239:193): avc: denied { read } for pid=871 comm="syz-executor.2" name="usbmon0" dev="devtmpfs" ino=9279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.641943][ T23] audit: type=1400 audit(1718647304.239:194): avc: denied { open } for pid=871 comm="syz-executor.2" path="/dev/usbmon0" dev="devtmpfs" ino=9279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 32.644351][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.747027][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.797168][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.847292][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.937903][ T74] usb 5-1: USB disconnect, device number 2 [ 32.939651][ T23] audit: type=1400 audit(1718647304.619:195): avc: denied { connect } for pid=880 comm="syz-executor.3" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.066522][ T23] audit: type=1400 audit(1718647304.639:196): avc: denied { write } for pid=880 comm="syz-executor.3" name="hwrng" dev="devtmpfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 33.135654][ T888] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 33.180115][ T891] syz-executor.2 (pid 891) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 33.191752][ T23] audit: type=1400 audit(1718647304.869:197): avc: denied { create } for pid=889 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 33.220469][ T890] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=890 comm=syz-executor.1 [ 33.421760][ T412] device bridge_slave_1 left promiscuous mode [ 33.427906][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.447744][ T412] device bridge_slave_0 left promiscuous mode [ 33.481244][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.094380][ T926] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 34.121971][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.130122][ T922] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.140053][ T922] device bridge_slave_0 entered promiscuous mode [ 34.150459][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.157832][ T922] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.168483][ T922] device bridge_slave_1 entered promiscuous mode [ 34.174013][ T935] EXT4-fs error (device loop4): ext4_validate_block_bitmap:418: comm syz-executor.4: bg 0: block 234: padding at end of block bitmap is not set [ 34.208897][ T413] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 34.209246][ T935] EXT4-fs error (device loop4) in ext4_free_blocks:5019: Corrupt filesystem [ 34.227690][ T822] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1567 with error 28 [ 34.243563][ T822] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.243563][ T822] [ 34.256649][ T922] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.261835][ T822] EXT4-fs (loop4): Total free blocks count 0 [ 34.263536][ T922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.269379][ T822] EXT4-fs (loop4): Free/Dirty block details [ 34.276438][ T922] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.282104][ T822] EXT4-fs (loop4): free_blocks=0 [ 34.288933][ T922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.300840][ T124] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 34.309445][ T822] EXT4-fs (loop4): dirty_blocks=1568 [ 34.313391][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.314588][ T822] EXT4-fs (loop4): Block reservation details [ 34.327419][ T822] EXT4-fs (loop4): i_reserved_data_blocks=98 [ 34.327649][ T394] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.342749][ T394] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.361679][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.373583][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.380511][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.390057][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.398158][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.405034][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.449798][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.457656][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.477511][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.498436][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.521747][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.539130][ T124] usb 3-1: Using ep0 maxpacket: 32 [ 34.542293][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.567142][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.579069][ T413] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.595294][ T413] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.610351][ T413] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.619865][ T413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.638750][ T413] usb 2-1: config 0 descriptor?? [ 34.668894][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 34.687427][ T124] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 34.760858][ T124] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 34.770144][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.781732][ T124] usb 3-1: config 0 descriptor?? [ 34.798902][ T920] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 34.819469][ T124] hub 3-1:0.0: USB hub found [ 34.885281][ T946] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 35.030429][ T124] hub 3-1:0.0: 2 ports detected [ 35.132863][ T950] xt_l2tp: v2 sid > 0xffff: 536870912 [ 35.200524][ T413] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 35.210086][ T413] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 35.217938][ T413] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 35.225268][ T413] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 35.232510][ T413] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 35.241396][ T413] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 35.258975][ T413] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 35.666273][ T961] EXT4-fs (loop4): Test dummy encryption mode enabled [ 35.673314][ T961] EXT4-fs (loop4): Ignoring removed orlov option [ 35.680965][ T961] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 35.710420][ T394] usb 2-1: USB disconnect, device number 2 [ 35.872850][ T978] xt_hashlimit: size too large, truncated to 1048576 [ 35.879533][ T978] xt_hashlimit: overflow, try lower: 0/0 [ 35.932683][ T981] xt_l2tp: v2 sid > 0xffff: 536870912 [ 36.679407][ T637] usb 3-1: USB disconnect, device number 2 [ 36.992427][ T1013] xt_hashlimit: size too large, truncated to 1048576 [ 36.999223][ T1013] xt_hashlimit: overflow, try lower: 0/0 [ 37.024086][ T1015] xt_l2tp: v2 sid > 0xffff: 536870912 [ 37.206983][ T23] kauditd_printk_skb: 14 callbacks suppressed [ 37.206992][ T23] audit: type=1400 audit(1718647308.879:212): avc: denied { create } for pid=1026 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.218393][ T1031] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 37.384347][ T1035] fuse: Unknown parameter '0xffffffffffffffff' [ 37.403554][ T394] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 37.437192][ T23] audit: type=1400 audit(1718647309.029:213): avc: denied { write } for pid=1026 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.543139][ T1033] EXT4-fs (loop3): Test dummy encryption mode enabled [ 37.550664][ T1033] EXT4-fs (loop3): Ignoring removed orlov option [ 37.562667][ T1033] EXT4-fs (loop3): Unsupported blocksize for fs encryption [ 37.830947][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.131018][ T23] audit: type=1400 audit(1718647309.029:214): avc: denied { read } for pid=1026 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 38.144081][ T394] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.155757][ T23] audit: type=1400 audit(1718647309.619:215): avc: denied { append } for pid=1030 comm="syz-executor.4" name="kvm" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 38.161755][ T394] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 38.196181][ T394] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.205760][ T1022] EXT4-fs (loop3): Ignoring removed oldalloc option [ 38.206396][ T394] usb 1-1: config 0 descriptor?? [ 38.212205][ T1022] EXT4-fs (loop3): can't mount with dioread_nolock if block size != PAGE_SIZE [ 38.248876][ T124] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.623981][ T1052] xt_hashlimit: size too large, truncated to 1048576 [ 38.628948][ T124] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 38.633383][ T1052] xt_hashlimit: overflow, try lower: 0/0 [ 38.648870][ T124] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 38.680434][ T124] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 38.698330][ T124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.716768][ T394] waltop 0003:172F:0032.0003: hidraw0: USB HID v0.00 Device [HID 172f:0032] on usb-dummy_hcd.0-1/input0 [ 38.717168][ T124] usb 2-1: config 0 descriptor?? [ 39.220271][ T124] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.230904][ T124] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.241533][ T124] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.269709][ T124] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.284657][ T124] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 39.300106][ T124] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 39.313350][ T124] plantronics 0003:047F:FFFF.0004: hiddev96,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 39.436575][ T23] audit: type=1400 audit(1718647311.109:216): avc: denied { name_bind } for pid=1073 comm="syz-executor.3" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 39.460607][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.533296][ T124] usb 2-1: USB disconnect, device number 3 [ 39.539669][ T1067] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.547113][ T1067] device bridge_slave_0 entered promiscuous mode [ 39.567601][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.578487][ T1067] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.586294][ T1067] device bridge_slave_1 entered promiscuous mode [ 39.665663][ T1067] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.669872][ T23] audit: type=1400 audit(1718647311.349:217): avc: denied { create } for pid=1075 comm="syz-executor.4" dev="anon_inodefs" ino=16159 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.672523][ T1067] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.701637][ T1067] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.708462][ T1067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.714772][ T23] audit: type=1400 audit(1718647311.389:218): avc: denied { ioctl } for pid=1075 comm="syz-executor.4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16159 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 39.739383][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.750564][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.757720][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.775967][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.784234][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.791093][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.799477][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.807765][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.814626][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.873911][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.889417][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.900700][ T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.919937][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.928744][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.025902][ T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.058339][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.102850][ T1082] EXT4-fs (loop4): Test dummy encryption mode enabled [ 40.109649][ T1082] EXT4-fs (loop4): Ignoring removed orlov option [ 40.115967][ T1082] EXT4-fs (loop4): Unsupported blocksize for fs encryption [ 40.189033][ T822] device bridge_slave_1 left promiscuous mode [ 40.204810][ T822] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.212569][ T822] device bridge_slave_0 left promiscuous mode [ 40.223513][ T822] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.248893][ T1081] EXT4-fs (loop4): Ignoring removed oldalloc option [ 40.255328][ T1081] EXT4-fs (loop4): can't mount with dioread_nolock if block size != PAGE_SIZE [ 40.369915][ T1096] xt_hashlimit: size too large, truncated to 1048576 [ 40.376469][ T1096] xt_hashlimit: overflow, try lower: 0/0 [ 40.683049][ T74] usb 1-1: USB disconnect, device number 3 [ 40.815585][ T23] audit: type=1400 audit(1718647312.489:219): avc: denied { write } for pid=1112 comm="syz-executor.0" name="kvm" dev="devtmpfs" ino=1120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 40.884512][ T1113] kvm: emulating exchange as write [ 40.999601][ T1122] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 41.019856][ T23] audit: type=1400 audit(1718647312.649:220): avc: denied { create } for pid=1114 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.041712][ T23] audit: type=1400 audit(1718647312.659:221): avc: denied { ioctl } for pid=1114 comm="syz-executor.4" path="socket:[16639]" dev="sockfs" ino=16639 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 41.211159][ T394] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 41.463599][ T1133] xt_hashlimit: size too large, truncated to 1048576 [ 41.470162][ T1133] xt_hashlimit: overflow, try lower: 0/0 [ 41.783547][ T1144] EXT4-fs (loop1): Test dummy encryption mode enabled [ 41.790614][ T1144] EXT4-fs (loop1): Ignoring removed orlov option [ 41.797999][ T1144] EXT4-fs (loop1): Unsupported blocksize for fs encryption [ 41.919032][ T394] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 41.930053][ T394] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 42.012565][ T1153] fuse: Unknown parameter '0xffffffffffffffff' [ 42.106523][ T394] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 42.154288][ T394] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.224199][ T394] usb 4-1: config 0 descriptor?? [ 42.473350][ T23] kauditd_printk_skb: 2 callbacks suppressed [ 42.473358][ T23] audit: type=1400 audit(1718647314.149:224): avc: denied { create } for pid=1174 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.499001][ T23] audit: type=1400 audit(1718647314.159:225): avc: denied { getopt } for pid=1174 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.529036][ T74] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 42.560671][ T1177] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 42.569655][ T1177] ext4 filesystem being mounted at /root/syzkaller-testdir2810651207/syzkaller.5CDDpw/26/file0 supports timestamps until 2038 (0x7fffffff) [ 42.593342][ T23] audit: type=1400 audit(1718647314.269:226): avc: denied { mounton } for pid=1176 comm="syz-executor.1" path="/root/syzkaller-testdir2810651207/syzkaller.5CDDpw/26/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.672338][ T849] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 42.690034][ T9] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 15: comm kworker/u4:1: lblock 2 mapped to illegal pblock 15 (length 1) [ 42.705755][ T9] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 42.713786][ T9] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 42.720202][ T394] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.728712][ T849] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 42.742941][ T849] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 42.744598][ T394] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.760750][ T394] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.768472][ T394] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.776464][ T394] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 42.778865][ T74] usb 3-1: Using ep0 maxpacket: 32 [ 42.785337][ T394] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 42.798196][ T394] plantronics 0003:047F:FFFF.0005: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 42.914936][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.921889][ T74] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 42.922879][ T1188] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.939198][ T74] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 42.951673][ T1188] device bridge_slave_0 entered promiscuous mode [ 42.956020][ T74] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 42.958699][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.973552][ T74] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.973581][ T1188] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.985617][ T74] usb 3-1: config 0 descriptor?? [ 42.989432][ T1188] device bridge_slave_1 entered promiscuous mode [ 43.008909][ T1160] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 43.019468][ T394] usb 4-1: USB disconnect, device number 2 [ 43.029486][ T74] hub 3-1:0.0: USB hub found [ 43.052421][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.059266][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.066346][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.073161][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.103334][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.110780][ T637] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.117737][ T637] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.138854][ T393] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 43.147443][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.156291][ T637] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.163153][ T637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.171643][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.179684][ T637] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.187020][ T637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.194387][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.202203][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.225878][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.234473][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.249097][ T74] hub 3-1:0.0: 2 ports detected [ 43.262308][ T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.281305][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.290532][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.331055][ T1206] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.173836][ T1216] fuse: Unknown parameter '0xffffffffffffffff' [ 44.430020][ T9] device bridge_slave_1 left promiscuous mode [ 44.435998][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.447690][ T9] device bridge_slave_0 left promiscuous mode [ 44.454861][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.479344][ T23] audit: type=1400 audit(1718647316.159:227): avc: denied { mount } for pid=1241 comm="syz-executor.3" name="/" dev="pstore" ino=1962 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 44.502194][ T393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 44.528709][ T393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 44.550103][ T393] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 44.561491][ T23] audit: type=1400 audit(1718647316.189:228): avc: denied { mount } for pid=1241 comm="syz-executor.3" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 44.584452][ T393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.598947][ T1243] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 44.605453][ T393] usb 5-1: config 0 descriptor?? [ 44.673987][ T1250] fuse: Unknown parameter '0xffffffffffffffff' [ 45.168999][ T5] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 45.729735][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.742273][ T13] usb 3-1: USB disconnect, device number 3 [ 45.748005][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 45.761891][ T5] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 45.770777][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.899004][ T23] audit: type=1400 audit(1718647317.509:229): avc: denied { write } for pid=1271 comm="syz-executor.3" name="fib_trie" dev="proc" ino=4026532545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 45.940419][ T5] usb 1-1: config 0 descriptor?? [ 46.240816][ T23] audit: type=1400 audit(1718647317.919:230): avc: denied { ioctl } for pid=1277 comm="syz-executor.1" path="socket:[17161]" dev="sockfs" ino=17161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.420473][ T5] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.431247][ T5] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.445630][ T5] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.458498][ T5] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.465908][ T5] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 46.473716][ T5] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 46.487038][ T5] plantronics 0003:047F:FFFF.0006: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 46.574493][ T23] audit: type=1400 audit(1718647318.249:231): avc: denied { setopt } for pid=1297 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 46.638144][ T1305] process 'syz-executor.3' launched './file1' with NULL argv: empty string added [ 46.689782][ T413] usb 1-1: USB disconnect, device number 4 [ 46.714917][ T1293] F2FS-fs (loop2): Found nat_bits in checkpoint [ 46.759345][ T1293] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 46.818985][ T393] usbhid 5-1:0.0: can't add hid device: -71 [ 46.824988][ T393] usbhid: probe of 5-1:0.0 failed with error -71 [ 46.833609][ T393] usb 5-1: USB disconnect, device number 3 [ 46.885346][ T1309] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 46.893903][ T1309] EXT4-fs (loop3): Invalid log cluster size: 262144 [ 47.798868][ T376] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 47.808903][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 48.048921][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 48.139827][ T1348] F2FS-fs (loop3): Found nat_bits in checkpoint [ 48.158952][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.169811][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.180628][ T376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.184491][ T1348] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 48.190377][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.213010][ T376] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 48.222067][ T376] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.230172][ T13] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 48.240310][ T13] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 48.253661][ T376] usb 2-1: config 0 descriptor?? [ 48.269159][ T13] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 48.278077][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.287692][ T13] usb 5-1: config 0 descriptor?? [ 48.358317][ T1359] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 48.379490][ T23] kauditd_printk_skb: 1 callbacks suppressed [ 48.379500][ T23] audit: type=1400 audit(1718647320.059:233): avc: denied { ioctl } for pid=1360 comm="syz-executor.0" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.548848][ T1371] fuse: Unknown parameter '0xffffffffffffffff' [ 48.657701][ T1368] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 48.666279][ T1368] EXT4-fs (loop3): Invalid log cluster size: 262144 [ 48.896369][ T1381] FAT-fs (loop2): Directory bread(block 64) failed [ 48.908872][ T23] audit: type=1400 audit(1718647320.579:234): avc: denied { mount } for pid=1343 comm="syz-executor.1" name="/" dev="overlay" ino=1968 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.934739][ T13] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 48.942150][ T1381] FAT-fs (loop2): Directory bread(block 65) failed [ 48.948724][ T13] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 48.956298][ T1381] FAT-fs (loop2): Directory bread(block 66) failed [ 48.962731][ T13] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 48.969599][ T1381] FAT-fs (loop2): Directory bread(block 67) failed [ 48.976051][ T13] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 48.982923][ T1381] FAT-fs (loop2): Directory bread(block 68) failed [ 48.989330][ T13] ntrig 0003:1B96:000A.0007: unknown main item tag 0x0 [ 48.996015][ T1381] FAT-fs (loop2): Directory bread(block 69) failed [ 49.007028][ T13] ntrig 0003:1B96:000A.0007: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 49.018042][ T1381] FAT-fs (loop2): Directory bread(block 70) failed [ 49.024509][ T1381] FAT-fs (loop2): Directory bread(block 71) failed [ 49.031157][ T1381] FAT-fs (loop2): Directory bread(block 72) failed [ 49.229209][ T1381] FAT-fs (loop2): Directory bread(block 73) failed [ 49.886628][ T13] usb 5-1: USB disconnect, device number 4 [ 49.953467][ T23] audit: type=1400 audit(1718647321.629:235): avc: denied { bind } for pid=1390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.989960][ T23] audit: type=1400 audit(1718647321.669:236): avc: denied { listen } for pid=1390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.040238][ T23] audit: type=1400 audit(1718647321.719:237): avc: denied { accept } for pid=1390 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.063184][ T23] audit: type=1400 audit(1718647321.729:238): avc: denied { create } for pid=1399 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.115713][ T23] audit: type=1400 audit(1718647321.739:239): avc: denied { read } for pid=1399 comm="syz-executor.2" path="socket:[18372]" dev="sockfs" ino=18372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.185614][ T1404] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 50.325688][ T1409] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 50.334208][ T1409] EXT4-fs (loop2): Invalid log cluster size: 262144 [ 50.481484][ T1414] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 50.489176][ T1414] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 50.501695][ T1414] F2FS-fs (loop2): Found nat_bits in checkpoint [ 50.527316][ T1414] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 50.534626][ T1414] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 50.555406][ T23] audit: type=1400 audit(1718647322.229:240): avc: denied { map } for pid=1413 comm="syz-executor.2" path="/root/syzkaller-testdir29431081/syzkaller.ZF1ndZ/23/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.571105][ T1414] attempt to access beyond end of device [ 50.571105][ T1414] loop2: rw=10241, want=45104, limit=40427 [ 50.582301][ T23] audit: type=1400 audit(1718647322.229:241): avc: denied { execute } for pid=1413 comm="syz-executor.2" path="/root/syzkaller-testdir29431081/syzkaller.ZF1ndZ/23/bus/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.593322][ T1414] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.593328][ T1414] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.627504][ T1414] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.634918][ T1414] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.642326][ T1414] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.649698][ T1414] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.657037][ T1414] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 50.671216][ T23] audit: type=1400 audit(1718647322.349:242): avc: denied { rename } for pid=1413 comm="syz-executor.2" name="file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.720340][ T291] attempt to access beyond end of device [ 50.720340][ T291] loop2: rw=1, want=45112, limit=40427 [ 51.209196][ T376] usbhid 2-1:0.0: can't add hid device: -71 [ 51.215169][ T376] usbhid: probe of 2-1:0.0 failed with error -71 [ 51.230687][ T376] usb 2-1: USB disconnect, device number 4 [ 51.538844][ T394] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 51.778853][ T394] usb 5-1: Using ep0 maxpacket: 32 [ 51.907726][ T1460] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 52.028923][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.039615][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.049169][ T394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 52.058698][ T394] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 52.071414][ T394] usb 5-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 52.080234][ T394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.088912][ T394] usb 5-1: config 0 descriptor?? [ 52.419137][ T1485] fuse: Unknown parameter '0xffffffffffffffff' [ 52.733778][ T394] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 52.740637][ T394] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 52.747310][ T394] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 52.769358][ T394] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 52.776049][ T394] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0 [ 52.783995][ T394] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.4-1/input0 [ 52.933624][ T394] usb 5-1: USB disconnect, device number 5 [ 52.946465][ T1489] F2FS-fs (loop1): Found nat_bits in checkpoint [ 52.986836][ T1489] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 53.478776][ T23] kauditd_printk_skb: 9 callbacks suppressed [ 53.478785][ T23] audit: type=1400 audit(1718647325.149:252): avc: denied { setopt } for pid=1524 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.519148][ T23] audit: type=1400 audit(1718647325.189:253): avc: denied { bind } for pid=1524 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.556786][ T1529] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue [ 53.568668][ T23] audit: type=1400 audit(1718647325.239:254): avc: denied { write } for pid=1524 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 53.592821][ T1529] ext4 filesystem being mounted at /root/syzkaller-testdir2459484378/syzkaller.Cc9KUr/29/file0 supports timestamps until 2038 (0x7fffffff) [ 53.773485][ T1188] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor.1: lblock 0 mapped to illegal pblock 3 (length 1) [ 53.790357][ T1538] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.809559][ T23] audit: type=1400 audit(1718647325.489:255): avc: denied { remove_name } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9330 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.812029][ T291] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #3: block 15: comm kworker/u4:2: lblock 2 mapped to illegal pblock 15 (length 1) [ 53.833789][ T23] audit: type=1400 audit(1718647325.489:256): avc: denied { rename } for pid=144 comm="syslogd" name="messages" dev="tmpfs" ino=9330 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.846478][ T291] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 53.868798][ T23] audit: type=1400 audit(1718647325.489:257): avc: denied { create } for pid=144 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.876551][ T291] Quota error (device loop1): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 53.909076][ T1188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 53.919068][ T1188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem [ 54.182816][ T1552] fuse: Unknown parameter '0xffffffffffffffff' [ 55.140765][ T1562] FAT-fs (loop4): Directory bread(block 64) failed [ 55.160103][ T1562] FAT-fs (loop4): Directory bread(block 65) failed [ 55.175410][ T1562] FAT-fs (loop4): Directory bread(block 66) failed [ 55.189590][ T1562] FAT-fs (loop4): Directory bread(block 67) failed [ 55.196054][ T1562] FAT-fs (loop4): Directory bread(block 68) failed [ 55.204055][ T1562] FAT-fs (loop4): Directory bread(block 69) failed [ 55.210813][ T1562] FAT-fs (loop4): Directory bread(block 70) failed [ 55.217193][ T1562] FAT-fs (loop4): Directory bread(block 71) failed [ 55.224092][ T1562] FAT-fs (loop4): Directory bread(block 72) failed [ 55.230484][ T1562] FAT-fs (loop4): Directory bread(block 73) failed [ 55.517343][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.524360][ T1560] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.532010][ T1560] device bridge_slave_0 entered promiscuous mode [ 55.539154][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.546098][ T1560] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.588246][ T1560] device bridge_slave_1 entered promiscuous mode [ 55.987379][ T1560] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.994265][ T1560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.001368][ T1560] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.008121][ T1560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.060132][ T413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 56.068011][ T413] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.076472][ T413] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.096967][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.098190][ T637] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 56.105978][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.119085][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.151783][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.159911][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.166790][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.192686][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.387874][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.409649][ T291] device bridge_slave_1 left promiscuous mode [ 56.415716][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.423178][ T291] device bridge_slave_0 left promiscuous mode [ 56.430145][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.492885][ T1604] fuse: Unknown parameter '0xffffffffffffffff' [ 56.508905][ T637] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.520130][ T637] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.538647][ T637] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.549239][ T637] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.576265][ T637] usb 1-1: config 0 descriptor?? [ 56.650821][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.659444][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.667534][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.675408][ T394] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.690568][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.699594][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.724238][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.733343][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.741883][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.752499][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.159795][ T637] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 57.169387][ T637] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 57.177239][ T637] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 57.184974][ T637] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 57.192496][ T637] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 57.200342][ T637] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 57.210067][ T637] plantronics 0003:047F:FFFF.0009: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 57.550691][ T394] usb 1-1: USB disconnect, device number 5 [ 57.575549][ T23] audit: type=1326 audit(1718647329.249:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1626 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf94973f29 code=0x0 [ 58.189173][ T1655] fuse: Unknown parameter '0xffffffffffffffff' [ 58.625338][ T23] audit: type=1326 audit(1718647330.299:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1668 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc405201f29 code=0x0 [ 59.233989][ T1686] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.638962][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 59.700134][ T23] audit: type=1326 audit(1718647331.379:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1704 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf94973f29 code=0x0 [ 59.770331][ T23] audit: type=1400 audit(1718647331.449:261): avc: denied { getattr } for pid=1706 comm="syz-executor.3" name="/" dev="incremental-fs" ino=1961 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 59.805267][ T23] audit: type=1400 audit(1718647331.479:262): avc: denied { read } for pid=1706 comm="syz-executor.3" name=".log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.829719][ T23] audit: type=1400 audit(1718647331.479:263): avc: denied { open } for pid=1706 comm="syz-executor.3" path="/root/syzkaller-testdir2415644780/syzkaller.RMnPGV/95/bus/.log" dev="incremental-fs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 59.998959][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.009768][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 60.032084][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 60.040960][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.069281][ T13] usb 1-1: config 0 descriptor?? [ 60.112816][ T1723] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 60.128032][ T1723] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 60.139006][ T1723] System zones: 0-2, 18-18, 34-35 [ 60.149515][ T1723] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x0000000000000000,data_err=ignore,,errors=continue [ 60.164649][ T1723] EXT4-fs (loop3): re-mounted. Opts: (null) [ 60.171525][ T1723] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 60.180818][ T1723] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 60.188595][ T1723] EXT4-fs (loop3): re-mounted. Opts: (null) [ 60.194856][ T1723] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir2415644780/syzkaller.RMnPGV/100/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 60.276505][ T23] audit: type=1326 audit(1718647331.949:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1735 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbf94973f29 code=0x0 [ 60.535239][ T1741] EXT4-fs (loop3): Ignoring removed orlov option [ 60.543060][ T1741] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 60.570673][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 60.578020][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 60.578486][ T1741] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 60.585753][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 60.613637][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 60.620872][ T13] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 60.628529][ T13] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 60.638240][ T13] plantronics 0003:047F:FFFF.000A: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 60.691589][ T1741] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 60.705498][ T1741] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 60.728910][ T23] audit: type=1400 audit(1718647332.359:265): avc: denied { map } for pid=1740 comm="syz-executor.3" path="/root/syzkaller-testdir2415644780/syzkaller.RMnPGV/104/file1/file0/bus" dev="devtmpfs" ino=9211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 60.764847][ T23] audit: type=1400 audit(1718647332.439:266): avc: denied { rmdir } for pid=373 comm="syz-executor.3" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.787663][ T23] audit: type=1400 audit(1718647332.439:267): avc: denied { unmount } for pid=373 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 60.807482][ T23] audit: type=1400 audit(1718647332.439:268): avc: denied { unlink } for pid=373 comm="syz-executor.3" name="bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.955797][ T637] usb 1-1: USB disconnect, device number 6 [ 61.150372][ T1762] request_module fs-autofs succeeded, but still no fs? [ 61.452450][ T1783] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 61.460969][ T1780] EXT4-fs (loop3): Ignoring removed orlov option [ 61.467375][ T1780] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 61.480750][ T1780] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue [ 61.521031][ T1780] EXT4-fs error (device loop3): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.3: corrupt xattr in inline inode [ 61.534527][ T1780] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2221: inode #12: comm syz-executor.3: corrupted in-inode xattr [ 61.561467][ T373] ================================================================== [ 61.569434][ T373] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc1f/0xc30 [ 61.577241][ T373] Read of size 4 at addr ffff8881e3533000 by task syz-executor.3/373 [ 61.585139][ T373] [ 61.587326][ T373] CPU: 0 PID: 373 Comm: syz-executor.3 Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0 [ 61.597198][ T373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 61.607089][ T373] Call Trace: [ 61.610225][ T373] dump_stack+0x1d8/0x241 [ 61.614388][ T373] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 61.620032][ T373] ? printk+0xd1/0x111 [ 61.623932][ T373] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 61.629399][ T373] print_address_description+0x8c/0x600 [ 61.634783][ T373] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 61.640254][ T373] __kasan_report+0xf3/0x120 [ 61.644684][ T373] ? ext4_xattr_delete_inode+0xc1f/0xc30 [ 61.650226][ T373] kasan_report+0x30/0x60 [ 61.654392][ T373] ext4_xattr_delete_inode+0xc1f/0xc30 [ 61.659689][ T373] ? check_preemption_disabled+0x9f/0x320 [ 61.665242][ T373] ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0 [ 61.671149][ T373] ? __ext4_journal_start_sb+0x295/0x460 [ 61.676708][ T373] ext4_evict_inode+0x1378/0x1ac0 [ 61.681565][ T373] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 61.687203][ T373] ? wb_io_lists_depopulated+0x85/0x170 [ 61.692581][ T373] ? ext4_truncate_restart_trans+0xe0/0xe0 [ 61.698225][ T373] evict+0x29b/0x6a0 [ 61.701960][ T373] vfs_rmdir+0x24b/0x3c0 [ 61.706037][ T373] do_rmdir+0x2c1/0x580 [ 61.710028][ T373] ? d_delete_notify+0xc0/0xc0 [ 61.714630][ T373] ? _raw_spin_unlock_irq+0x4a/0x60 [ 61.719667][ T373] do_syscall_64+0xca/0x1c0 [ 61.724010][ T373] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 61.729739][ T373] RIP: 0033:0x7fbf94973707 [ 61.734003][ T373] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 61.753512][ T373] RSP: 002b:00007ffd11927f58 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 61.762030][ T373] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fbf94973707 [ 61.769830][ T373] RDX: 0000000000000200 RSI: 00007ffd11929100 RDI: 00000000ffffff9c [ 61.777640][ T373] RBP: 00007fbf949d06c6 R08: 0000000000000000 R09: 0000000000000000 [ 61.785542][ T373] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd11929100 [ 61.793366][ T373] R13: 00007fbf949d06c6 R14: 000000000000efea R15: 0000000000000000 [ 61.801251][ T373] [ 61.803418][ T373] Allocated by task 393: [ 61.807519][ T373] __kasan_kmalloc+0x171/0x210 [ 61.812102][ T373] kmem_cache_alloc+0xd9/0x250 [ 61.816711][ T373] fib6_add+0x6e9/0x3df0 [ 61.821299][ T373] ip6_ins_rt+0x102/0x170 [ 61.825464][ T373] __ipv6_ifa_notify+0x61d/0x1290 [ 61.830342][ T373] addrconf_dad_completed+0x181/0xdb0 [ 61.835534][ T373] addrconf_dad_work+0xe4d/0x16f0 [ 61.840396][ T373] process_one_work+0x765/0xd20 [ 61.845083][ T373] worker_thread+0xaef/0x1470 [ 61.849596][ T373] kthread+0x2da/0x360 [ 61.853502][ T373] ret_from_fork+0x1f/0x30 [ 61.857747][ T373] [ 61.859919][ T373] Freed by task 10: [ 61.863569][ T373] __kasan_slab_free+0x1b5/0x270 [ 61.868340][ T373] kmem_cache_free+0x10b/0x2c0 [ 61.872958][ T373] rcu_do_batch+0x492/0xa00 [ 61.877282][ T373] rcu_core+0x4c8/0xcb0 [ 61.881276][ T373] __do_softirq+0x23b/0x6b7 [ 61.885606][ T373] [ 61.888127][ T373] The buggy address belongs to the object at ffff8881e3533000 [ 61.888127][ T373] which belongs to the cache fib6_nodes of size 72 [ 61.902279][ T373] The buggy address is located 0 bytes inside of [ 61.902279][ T373] 72-byte region [ffff8881e3533000, ffff8881e3533048) [ 61.915127][ T373] The buggy address belongs to the page: [ 61.920605][ T373] page:ffffea00078d4cc0 refcount:1 mapcount:0 mapping:ffff8881eeae3680 index:0xffff8881e3533d00 [ 61.930838][ T373] flags: 0x8000000000000200(slab) [ 61.935699][ T373] raw: 8000000000000200 ffffea0007af05c0 0000000200000002 ffff8881eeae3680 [ 61.944124][ T373] raw: ffff8881e3533d00 0000000080200000 00000001ffffffff 0000000000000000 [ 61.952616][ T373] page dumped because: kasan: bad access detected [ 61.958875][ T373] page_owner tracks the page as allocated [ 61.964453][ T373] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL) [ 61.977625][ T373] prep_new_page+0x18f/0x370 [ 61.982048][ T373] get_page_from_freelist+0x2d13/0x2d90 [ 61.987511][ T373] __alloc_pages_nodemask+0x393/0x840 [ 61.993154][ T373] alloc_slab_page+0x39/0x3c0 [ 61.997669][ T373] new_slab+0x97/0x440 [ 62.001573][ T373] ___slab_alloc+0x2fe/0x490 [ 62.005997][ T373] __slab_alloc+0x62/0xa0 [ 62.010164][ T373] kmem_cache_alloc+0x109/0x250 [ 62.014852][ T373] fib6_add+0x76a/0x3df0 [ 62.018932][ T373] ip6_ins_rt+0x102/0x170 [ 62.023096][ T373] __ipv6_ifa_notify+0x61d/0x1290 [ 62.027956][ T373] addrconf_dad_completed+0x181/0xdb0 [ 62.033253][ T373] addrconf_dad_work+0xe4d/0x16f0 [ 62.038113][ T373] process_one_work+0x765/0xd20 [ 62.042806][ T373] worker_thread+0xaef/0x1470 [ 62.047313][ T373] kthread+0x2da/0x360 [ 62.051213][ T373] page last free stack trace: [ 62.055732][ T373] free_unref_page_prepare+0x297/0x380 [ 62.061024][ T373] __free_pages+0xaf/0x140 [ 62.065284][ T373] __free_slab+0x221/0x2e0 [ 62.069532][ T373] __slab_free+0x34b/0x360 [ 62.073784][ T373] qlist_free_all+0x43/0xb0 [ 62.078123][ T373] quarantine_reduce+0x1d9/0x210 [ 62.083070][ T373] __kasan_kmalloc+0x41/0x210 [ 62.087583][ T373] kmem_cache_alloc+0xd9/0x250 [ 62.092184][ T373] getname_flags+0xb8/0x4e0 [ 62.096523][ T373] user_path_at_empty+0x28/0x50 [ 62.101210][ T373] vfs_statx+0x115/0x210 [ 62.105297][ T373] __se_sys_newfstatat+0xce/0x770 [ 62.110157][ T373] do_syscall_64+0xca/0x1c0 [ 62.114493][ T373] entry_SYSCALL_64_after_hwframe+0x5c/0xc1 [ 62.120213][ T373] [ 62.122389][ T373] Memory state around the buggy address: [ 62.127856][ T373] ffff8881e3532f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.135765][ T373] ffff8881e3532f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 62.143658][ T373] >ffff8881e3533000: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 62.151641][ T373] ^ [ 62.155546][ T373] ffff8881e3533080: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 62.163457][ T373] ffff8881e3533100: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc 2024/06/17 18:02:13 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 62.171341][ T373] ================================================================== [ 62.179237][ T373] Disabling lock debugging due to kernel taint [ 62.259100][ T1787] EXT4-fs: failed to create workqueue [ 62.264470][ T1787] EXT4-fs (loop1): mount failed