last executing test programs: 4.117394557s ago: executing program 4: syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x97, 0x24, 0xd7, 0x40, 0x2100, 0x9e54, 0xa59e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x1, 0x39, 0xbd, 0x98, 0x0, [], [{{0x9, 0x5, 0xd}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x23, 0x8c, 0x1, 0x0, [], [{{0x9, 0x5, 0xd}}]}}]}}]}}, 0x0) 2.254703063s ago: executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/76, 0xff0d}], 0x1, 0x0, 0x0) 2.10349371s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sys_enter\x00'}, 0x10) statfs(0x0, 0x0) 2.075423996s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@multicast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) 2.073722766s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_HOST_UUID={0x14, 0x5, "727485b51017023d74e95828feabf755"}]}]}, 0x38}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000240)=0xc, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.065371168s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x13, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) 2.061937048s ago: executing program 3: mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x80000000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$NS_GET_NSTYPE(r0, 0x8902, 0x20000000) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.045584411s ago: executing program 2: listen(0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x5450, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$FIBMAP(r0, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x6, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r1 = dup(r0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_devices(r2, &(0x7f0000000140)='devices.deny\x00', 0x63, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$P9_RAUTH(r1, 0x0, 0x0) write$P9_RLERROR(r1, 0x0, 0x0) 1.953471508s ago: executing program 4: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000080)="a1", 0x20000081}], 0x2, 0x0) vmsplice(r3, &(0x7f0000000040)=[{&(0x7f00000000c0)='c', 0x1}], 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102394, 0x19045}], 0x1, 0x0, 0x0) 1.694961296s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x8946, &(0x7f0000000140)) 1.67408953s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) rt_sigreturn() r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RSTATFS(r2, &(0x7f00000004c0)={0x43, 0x9, 0x0, {0x1ff}}, 0x43) write$P9_RMKNOD(r2, &(0x7f0000000300)={0x14, 0x13, 0x0, {0x40}}, 0x14) shutdown(r0, 0x0) 1.257402998s ago: executing program 3: r0 = memfd_create(&(0x7f00000003c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde%\x00]\xd8kD\x82S\x17?\xd6As\xc2\xb1\x9aF\x00\xba[\xc7%\x88 \xeeQR\x9f\x81\x8b\xdc\xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89%\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1u|\x94v\xdc\x9aD\xa9\xcby_\x7fy1B\x9c\x8ak\xc4[\xae\xd7\x944a\xaf\x8c\xfa\"9\xeb\x83W\xd0\x9aU\x8c=\x82,\xd5\xea4\xe0H\xf2\x1ar5\xb6t\xb6\x0e\xe6\x00$w\xad9\x11\x1d\xa5\xe0\x99\xfa\x04\x89.i\xd2?\xa9-\v\x1bwb\xcd\xc6\xe0\xd4o\x80\xc1mZY\x84F\x13s2\xc5\xed\x93W\x8a\x82\xfc\xaal:\n+V\xb0\xb7\x11Gj\xf9o16\xaeO\xb5\xe86\xb9\xbc\xe6QN\xf3\xb1\xf8\'P\f\xcdz\xb1ro\xea\xe1v\x88\xfb2\x00'/535, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000c, 0x12, r0, 0xffffe000) timer_create(0x0, &(0x7f00000000c0), 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x8000007) mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 1.221841204s ago: executing program 1: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x4019, &(0x7f0000000000)="$eJzszzEOAUEAheE3G1FwA5fQqInSUbbRSTQaV1E5hkTjIC7gBBqSJRNBu99XzUtm/mTG1+MySZlu1u02L5rOedEkJcnssUv65/3Pl2R+SjL6JTLsjvZWvTP4WNjta6lvPdurw+T8z3sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLMDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQwAAACAMH/rPNoPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALwUAAD//xe4ClM=") r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000006240)={0x2020}, 0x2020) 1.162721315s ago: executing program 1: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = accept(r0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x2, @dev}, 0x10) ioctl$FAT_IOCTL_GET_VOLUME_ID(r1, 0x5451, 0x0) 1.105529516s ago: executing program 4: madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000a70000/0x4000)=nil, &(0x7f000053d000/0x1000)=nil, 0x4000}) 1.046736786s ago: executing program 4: r0 = memfd_create(&(0x7f0000000400)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xea\xb4e)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb]\xd8\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\x87%\x882\x11)\xd7\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7ol\x00\x00\x00\x00\x00\x00\x00\xde\xc3d\x86>~\xf2\xff\x15\xe3\x8d.\xd1\t\x00\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6\xff\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x93Dm\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xcf\x7f\b\x94 2*{\xc1\xbe\x9bth\x86\xcb\xb9E\x10W\xed\xed\x00\x00\x00\x00\x00\x00\x00\xcb@3$\x87\x05\xaa\x9b3\x19\x03vxv\x19\xb7\x14j\xbe\xe3\xeb\x88\xf0\xb3\xf9\x84\v3\xad\xa7I\x98/\"\x12\xb4\xf7\xcbT\xc0X\v\xcf\xab\x94\xcd\xadH|\xe3\x83\x9c\xa7Y\xae\xdajG7s5\xfd\xbf\x9c(\xd4\xc8:\x14aS\xac\x00kKn`\x94\xa0\xb2P\b', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x11, r0, 0xffcab000) fallocate(r0, 0x0, 0x0, 0x8000007) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 823.641678ms ago: executing program 2: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_connect$cdc_ecm(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x5c8003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 688.768583ms ago: executing program 0: timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) poll(0x0, 0x0, 0x100) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) r2 = dup3(r1, r0, 0x0) rt_sigreturn() mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$inet(r2, &(0x7f0000002d80)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000280), 0x0) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) 560.977467ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) 530.750782ms ago: executing program 0: sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x8}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) 508.121997ms ago: executing program 0: r0 = creat(&(0x7f0000004040)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) close(r2) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}}, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) fallocate(r0, 0x0, 0x0, 0x8020003) pwrite64(r0, &(0x7f0000000000)='&', 0x1, 0x0) 433.03184ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) unshare(0x320c0280) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x4}) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$KVM_SET_DEVICE_ATTR(r0, 0x4018aee1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioperm(0x0, 0x0, 0x0) request_key(0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000003c0)={0x48800, 0x80}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@usrjquota}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) clock_gettime(0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) 329.37341ms ago: executing program 3: futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() syz_read_part_table(0x401f, &(0x7f0000000000)="$eJzs0DEOAUEUBuB/NqKgUbuERk2UjrKNTqLRuIrKMSQaB3EBJ9CMZElIVuv7mvlnMjMv741vp1WSMttu2l1eNJ28bJKSZF73Jf/nvedrsjgnGfX5pDvUtPcvNycfzveHGoZ96j4N6ro+Ti+/vAcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAwAAACDM3zqP9gMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwEsBAAD//4IoCls=") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002340)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000004040)=""/179, 0xb3}], 0x1}}], 0x1, 0x0, 0x0) 310.980213ms ago: executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = eventfd(0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$FUSE_ATTR(r2, &(0x7f0000000240)={0x78, 0xfffffffffffffffe}, 0x78) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01202a3a8a"], 0x8) close(r2) socket(0x11, 0x2, 0x0) rt_sigreturn() timer_settime(0x0, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0) r3 = timerfd_create(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0xc, 0x8000006}, 0x8) listen(r5, 0x0) connect$inet(r4, &(0x7f00000001c0)={0x2, 0x2, @remote}, 0x20) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close_range(r3, r6, 0x0) 249.058355ms ago: executing program 3: socket$xdp(0x2c, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)=0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/132, 0x84) 225.492369ms ago: executing program 1: r0 = gettid() dup2(0xffffffffffffffff, 0xffffffffffffffff) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'ipvlan0\x00', 0x2}) preadv2(r3, 0x0, 0x0, 0x0, 0x0, 0x0) close(r3) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() recvmmsg(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) getsockname$inet6(r2, 0x0, 0x0) 127.436127ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r2}, 0x10) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x2000) 78.740566ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000006f850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='skb_copy_datagram_iovec\x00', r1}, 0x70) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 48.786202ms ago: executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 0s ago: executing program 0: socket$inet6_icmp(0xa, 0x2, 0x3a) dup(0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$incfs(0xffffffffffffffff, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000180)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) close(r1) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): link becomes ready [ 24.685566][ T316] device veth0_vlan entered promiscuous mode [ 24.697158][ T309] device veth0_vlan entered promiscuous mode [ 24.706018][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.714104][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.721485][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.728637][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.736978][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.745190][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.753062][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.760921][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.768562][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.776473][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.784529][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.792763][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.800854][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.818466][ T312] device veth1_macvtap entered promiscuous mode [ 24.834578][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.842934][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.850884][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.858059][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.866087][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.876868][ T316] device veth1_macvtap entered promiscuous mode [ 24.889425][ T309] device veth1_macvtap entered promiscuous mode [ 24.900866][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.908997][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.917387][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.926201][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.934602][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.960058][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.968154][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.992802][ T313] device veth0_vlan entered promiscuous mode [ 24.999831][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.007614][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.029840][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.052313][ T313] device veth1_macvtap entered promiscuous mode [ 25.062035][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.070545][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.078490][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.086921][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.094949][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.114597][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.129957][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.138213][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.147113][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.156116][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.164403][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.173324][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.184375][ T342] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=10340 sclass=netlink_audit_socket pid=342 comm=syz-executor.4 [ 25.197601][ T330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.453102][ T350] loop0: detected capacity change from 0 to 16 [ 25.469410][ T350] erofs: (device loop0): mounted with root inode @ nid 36. [ 25.578419][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.756400][ T341] loop1: detected capacity change from 0 to 40427 [ 25.779744][ T341] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 25.801827][ T341] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 25.817466][ T341] F2FS-fs (loop1): invalid crc value [ 25.848363][ T341] F2FS-fs (loop1): Found nat_bits in checkpoint [ 25.884293][ T344] loop3: detected capacity change from 0 to 40427 [ 25.899862][ T341] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 25.906876][ T341] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 25.906920][ T344] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 25.939587][ T344] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 25.959940][ T344] F2FS-fs (loop3): invalid crc value [ 25.981496][ T344] F2FS-fs (loop3): Found nat_bits in checkpoint [ 26.031297][ T344] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 26.038238][ T344] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 26.049640][ T24] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 26.059872][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 26.682820][ T367] syz-executor.1: attempt to access beyond end of device [ 26.682820][ T367] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.240505][ T369] syz-executor.3: attempt to access beyond end of device [ 27.240505][ T369] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 27.310107][ T28] kauditd_printk_skb: 43 callbacks suppressed [ 27.310210][ T28] audit: type=1400 audit(1718063275.889:119): avc: denied { read write } for pid=340 comm="syz-executor.1" name="uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.459033][ T28] audit: type=1400 audit(1718063275.899:120): avc: denied { open } for pid=340 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.483140][ T312] syz-executor.1: attempt to access beyond end of device [ 27.483140][ T312] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 27.494661][ T28] audit: type=1400 audit(1718063275.899:121): avc: denied { ioctl } for pid=340 comm="syz-executor.1" path="/dev/uinput" dev="devtmpfs" ino=170 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 27.532196][ T316] syz-executor.3: attempt to access beyond end of device [ 27.532196][ T316] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 27.542907][ T28] audit: type=1400 audit(1718063275.899:122): avc: denied { write } for pid=340 comm="syz-executor.1" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.582208][ T28] audit: type=1400 audit(1718063275.899:123): avc: denied { add_name } for pid=340 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 27.610078][ T28] audit: type=1400 audit(1718063275.899:124): avc: denied { create } for pid=340 comm="syz-executor.1" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.642590][ T28] audit: type=1400 audit(1718063275.899:125): avc: denied { read write open } for pid=340 comm="syz-executor.1" path="/root/syzkaller-testdir3093048082/syzkaller.wcSRKe/0/file0/bus" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 27.670701][ T28] audit: type=1400 audit(1718063276.699:126): avc: denied { unmount } for pid=312 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.690410][ T28] audit: type=1400 audit(1718063276.699:127): avc: denied { unmount } for pid=313 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 27.752449][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.779677][ T28] audit: type=1400 audit(1718063277.149:128): avc: denied { create } for pid=373 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.826560][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.835670][ T24] usb 3-1: Product: Ч [ 28.840071][ T24] usb 3-1: Manufacturer: Л [ 28.845847][ T24] usb 3-1: SerialNumber: syz [ 28.869642][ T24] usb 3-1: can't set config #1, error -71 [ 28.937690][ T24] usb 3-1: USB disconnect, device number 2 [ 29.050842][ T395] loop2: detected capacity change from 0 to 16 [ 29.058772][ T395] erofs: (device loop2): mounted with root inode @ nid 36. [ 29.507490][ T352] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 29.649976][ T393] loop1: detected capacity change from 0 to 40427 [ 29.684139][ T393] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 29.706840][ T401] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 29.717900][ T401] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 29.728038][ T393] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 29.737389][ T393] F2FS-fs (loop1): invalid crc value [ 29.752702][ T393] F2FS-fs (loop1): Found nat_bits in checkpoint [ 29.826840][ T414] loop4: detected capacity change from 0 to 1024 [ 29.833935][ T393] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 29.843463][ T393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 29.870137][ T414] ======================================================= [ 29.870137][ T414] WARNING: The mand mount option has been deprecated and [ 29.870137][ T414] and is ignored by this kernel. Remove the mand [ 29.870137][ T414] option from the mount to silence this warning. [ 29.870137][ T414] ======================================================= [ 29.973717][ T414] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 29.982947][ T411] loop0: detected capacity change from 0 to 40427 [ 29.995479][ T411] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 30.002274][ T414] EXT4-fs (loop4): orphan cleanup on readonly fs [ 30.004166][ T411] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 30.010787][ T414] EXT4-fs error (device loop4): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.021448][ T411] F2FS-fs (loop0): invalid crc value [ 30.031976][ T414] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.038252][ T411] F2FS-fs (loop0): Found nat_bits in checkpoint [ 30.051263][ T414] EXT4-fs error (device loop4): ext4_free_blocks:6197: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 30.056881][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.070566][ T414] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.092305][ T414] EXT4-fs (loop4): 1 orphan inode deleted [ 30.102382][ T414] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 30.160246][ T411] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 30.167114][ T411] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 30.184942][ T422] syz-executor.1: attempt to access beyond end of device [ 30.184942][ T422] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 30.196705][ T424] EXT4-fs error (device loop4): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 30.247746][ T308] EXT4-fs (loop4): unmounting filesystem. [ 30.257848][ T414] syz-executor.4 (414) used greatest stack depth: 21672 bytes left [ 31.026804][ T430] syz-executor.0: attempt to access beyond end of device [ 31.026804][ T430] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 31.089712][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 31.250360][ T313] syz-executor.0: attempt to access beyond end of device [ 31.250360][ T313] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 31.269215][ T435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 31.270044][ T437] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 31.290710][ T435] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 31.309695][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 31.318482][ T24] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 31.328260][ T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 31.355973][ T24] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 31.369738][ T312] syz-executor.1: attempt to access beyond end of device [ 31.369738][ T312] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 31.372742][ T24] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 31.393332][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 31.399811][ T24] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 31.408678][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.480092][ T24] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 31.481969][ T439] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 31.707848][ T24] scsi host1: usb-storage 3-1:1.0 [ 31.757458][ T447] loop4: detected capacity change from 0 to 40427 [ 31.766359][ T445] loop1: detected capacity change from 0 to 40427 [ 31.772870][ T447] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 31.780073][ T445] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 31.780770][ T447] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 31.795109][ T445] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 31.798136][ T447] F2FS-fs (loop4): invalid crc value [ 31.804755][ T432] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.811548][ T445] F2FS-fs (loop1): invalid crc value [ 31.818410][ T447] F2FS-fs (loop4): Found nat_bits in checkpoint [ 31.824263][ T445] F2FS-fs (loop1): Found nat_bits in checkpoint [ 31.869755][ T447] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 31.876200][ T445] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 31.876743][ T447] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 31.883565][ T445] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 32.074127][ T459] syz-executor.1: attempt to access beyond end of device [ 32.074127][ T459] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.270063][ T432] usb 1-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 32.297073][ T461] syz-executor.4: attempt to access beyond end of device [ 32.297073][ T461] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 32.312561][ T432] usb 1-1: config 1 interface 0 has no altsetting 0 [ 32.510243][ T312] syz-executor.1: attempt to access beyond end of device [ 32.510243][ T312] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 32.532770][ T432] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 32.542000][ T432] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.550140][ T432] usb 1-1: Product: Ч [ 32.554030][ T432] usb 1-1: Manufacturer: Л [ 32.558371][ T432] usb 1-1: SerialNumber: syz [ 32.650081][ T469] loop3: detected capacity change from 0 to 16 [ 32.663191][ T469] erofs: (device loop3): mounted with root inode @ nid 36. [ 32.721106][ T40] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 32.887038][ T443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 33.029623][ T448] sddr09: could not read card info [ 33.034748][ T43] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 33.042142][ T43] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 33.050235][ T43] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 33.055903][ T308] syz-executor.4: attempt to access beyond end of device [ 33.055903][ T308] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 33.071146][ T43] sd 1:0:0:0: [sdb] Asking for cache data failed [ 33.078387][ T43] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 33.096493][ T43] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 33.124623][ T470] loop0: detected capacity change from 0 to 40427 [ 33.145346][ T470] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 33.159487][ T470] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 33.210344][ T470] F2FS-fs (loop0): Found nat_bits in checkpoint [ 33.235689][ T40] usb 3-1: USB disconnect, device number 3 [ 33.263847][ T472] loop1: detected capacity change from 0 to 40427 [ 33.277625][ T472] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 33.291423][ T472] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 33.303830][ T470] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 33.320381][ T472] F2FS-fs (loop1): invalid crc value [ 33.343061][ T470] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 33.369700][ T338] udevd[338]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 33.377591][ T483] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 33.391610][ T28] kauditd_printk_skb: 42 callbacks suppressed [ 33.391625][ T28] audit: type=1400 audit(1718063282.609:166): avc: denied { create } for pid=482 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.392455][ T483] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 33.400006][ T472] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.434569][ T28] audit: type=1400 audit(1718063282.629:167): avc: denied { read } for pid=482 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.476655][ T476] udevd[476]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 33.488851][ T28] audit: type=1400 audit(1718063282.679:168): avc: denied { create } for pid=442 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.520804][ T472] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 33.527761][ T472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.529655][ T28] audit: type=1400 audit(1718063282.689:169): avc: denied { write } for pid=482 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.561335][ T432] usb 1-1: USB disconnect, device number 2 [ 33.859725][ T40] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.986728][ T28] audit: type=1326 audit(1718063283.199:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=494 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f694967cf69 code=0x0 [ 34.033479][ T312] syz-executor.1: attempt to access beyond end of device [ 34.033479][ T312] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 34.152058][ T500] loop0: detected capacity change from 0 to 256 [ 34.165064][ T28] audit: type=1400 audit(1718063283.379:171): avc: denied { write } for pid=499 comm="syz-executor.0" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.186867][ T28] audit: type=1400 audit(1718063283.379:172): avc: denied { add_name } for pid=499 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.278903][ T40] usb 4-1: Using ep0 maxpacket: 16 [ 34.299643][ T28] audit: type=1400 audit(1718063283.379:173): avc: denied { create } for pid=499 comm="syz-executor.0" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.321046][ T28] audit: type=1400 audit(1718063283.379:174): avc: denied { associate } for pid=499 comm="syz-executor.0" name="bus" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 35.207092][ T28] audit: type=1400 audit(1718063283.639:175): avc: denied { remove_name } for pid=499 comm="syz-executor.0" name="file1" dev="loop0" ino=1048596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.359627][ T40] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 35.368724][ T40] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 35.389625][ T40] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 35.399307][ T40] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 35.436165][ T40] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 35.456688][ T518] loop1: detected capacity change from 0 to 16 [ 35.465501][ T518] erofs: (device loop1): mounted with root inode @ nid 36. [ 35.524291][ T40] usb 4-1: config 1 interface 0 has no altsetting 0 [ 35.554275][ T40] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 36.026545][ T40] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.072923][ T510] loop0: detected capacity change from 0 to 40427 [ 36.081196][ T40] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 36.081775][ T510] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 36.105265][ T510] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 36.139065][ T514] loop4: detected capacity change from 0 to 40427 [ 36.162409][ T514] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 36.165858][ T525] loop1: detected capacity change from 0 to 256 [ 36.170139][ T514] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 36.184946][ T510] F2FS-fs (loop0): invalid crc value [ 36.185899][ T514] F2FS-fs (loop4): invalid crc value [ 36.199123][ T510] F2FS-fs (loop0): Found nat_bits in checkpoint [ 36.199947][ T514] F2FS-fs (loop4): Found nat_bits in checkpoint [ 36.288779][ T514] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 36.296025][ T514] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 36.321619][ T510] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 36.328572][ T510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 36.650867][ T539] syz-executor.4: attempt to access beyond end of device [ 36.650867][ T539] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 36.702396][ T40] scsi host1: usb-storage 4-1:1.0 [ 36.896989][ T308] syz-executor.4: attempt to access beyond end of device [ 36.896989][ T308] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 37.045020][ T544] syz-executor.0: attempt to access beyond end of device [ 37.045020][ T544] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 37.059583][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.579583][ T310] usb 3-1: Using ep0 maxpacket: 16 [ 37.584864][ T313] syz-executor.0: attempt to access beyond end of device [ 37.584864][ T313] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 37.679601][ T6] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.699679][ T310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 37.708808][ T310] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 37.718582][ T310] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 37.728473][ T310] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 37.738421][ T310] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 37.748551][ T310] usb 3-1: config 1 interface 0 has no altsetting 0 [ 37.760803][ T40] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 37.770185][ T310] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 37.779047][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.820106][ T310] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 37.939653][ T535] sddr09: could not read card info [ 37.945346][ T519] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 38.107403][ T519] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 38.113557][ T519] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 38.125066][ T519] sd 1:0:0:0: [sdb] Asking for cache data failed [ 38.131873][ T519] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 38.140997][ T519] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 38.150815][ T432] usb 4-1: USB disconnect, device number 2 [ 38.159607][ T6] usb 2-1: Using ep0 maxpacket: 16 [ 38.170429][ T310] scsi host2: usb-storage 3-1:1.0 [ 38.309795][ T6] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 38.327723][ T6] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 38.368888][ T6] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 38.468187][ T6] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 38.497194][ T383] udevd[383]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 38.498862][ T6] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 38.515224][ T572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 38.518848][ T6] usb 2-1: config 1 interface 0 has no altsetting 0 [ 38.531718][ T6] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 38.542557][ T572] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 38.568025][ T6] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 38.583438][ T574] loop0: detected capacity change from 0 to 256 [ 38.610362][ T6] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 38.925887][ T6] scsi host1: usb-storage 2-1:1.0 [ 39.200055][ T331] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 39.299616][ T6] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 39.329628][ T565] sddr09: could not read card info [ 39.334714][ T431] sd 2:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 39.341915][ T431] sd 2:0:0:0: [sdb] 0-byte physical blocks [ 39.347712][ T431] sd 2:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 39.354866][ T431] sd 2:0:0:0: [sdb] Asking for cache data failed [ 39.361758][ T431] sd 2:0:0:0: [sdb] Assuming drive cache: write through [ 39.379211][ T431] sd 2:0:0:0: [sdb] Attached SCSI removable disk [ 39.387021][ T586] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 39.398269][ T586] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 39.471247][ T589] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 39.535800][ T432] usb 3-1: USB disconnect, device number 4 [ 39.612097][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 39.681028][ T6] usb 5-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 39.691479][ T6] usb 5-1: config 1 interface 0 has no altsetting 0 [ 39.709507][ T383] udevd[383]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 39.849615][ T6] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 39.858690][ T6] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.866557][ T6] usb 5-1: Product: Ч [ 39.870479][ T6] usb 5-1: Manufacturer: Л [ 39.874734][ T6] usb 5-1: SerialNumber: syz [ 39.999878][ T310] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 40.129667][ T581] sddr09: could not read card info [ 40.134994][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 40.141953][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 40.206705][ T599] loop2: detected capacity change from 0 to 16 [ 40.301328][ T599] erofs: (device loop2): mounted with root inode @ nid 36. [ 40.312149][ T8] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 40.334876][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 40.393633][ T432] usb 2-1: USB disconnect, device number 2 [ 40.442691][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 40.469929][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 40.508336][ T352] udevd[352]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 40.583808][ T352] udevd[352]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 40.613444][ T608] loop3: detected capacity change from 0 to 1024 [ 40.638645][ T608] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 40.649367][ T608] EXT4-fs (loop3): orphan cleanup on readonly fs [ 40.657138][ T608] EXT4-fs error (device loop3): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 40.671912][ T608] __quota_error: 4 callbacks suppressed [ 40.671926][ T608] Quota error (device loop3): write_blk: dquota write failed [ 40.684775][ T608] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 40.691268][ T583] loop4: detected capacity change from 0 to 40427 [ 40.693738][ T608] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.704649][ T583] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 40.716208][ T583] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 40.717910][ T608] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 40.727450][ T583] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.738740][ T608] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.754286][ T608] EXT4-fs error (device loop3): ext4_free_blocks:6197: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 40.768348][ T608] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 40.782806][ T608] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 40.789657][ T583] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 40.792836][ T608] EXT4-fs (loop3): 1 orphan inode deleted [ 40.799407][ T583] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 40.821074][ T608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 40.899580][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 40.912655][ T6] usb 5-1: USB disconnect, device number 2 [ 40.923008][ T616] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 40.978949][ T618] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 40.996901][ T316] EXT4-fs (loop3): unmounting filesystem. [ 41.159688][ T310] usb 1-1: Using ep0 maxpacket: 16 [ 41.289743][ T310] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 41.300995][ T627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 41.316932][ T627] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 41.318421][ T310] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 41.336031][ T310] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 41.345981][ T310] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 41.355808][ T310] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 41.365878][ T310] usb 1-1: config 1 interface 0 has no altsetting 0 [ 41.372564][ T310] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 41.391131][ T310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.450301][ T310] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 41.524913][ T633] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 41.646995][ T633] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 41.660315][ T310] scsi host1: usb-storage 1-1:1.0 [ 41.853600][ T28] audit: type=1326 audit(1718063291.069:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=640 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f694967cf69 code=0x0 [ 41.867195][ T643] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.959593][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.057336][ T28] audit: type=1326 audit(1718063291.269:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=640 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f694967cf69 code=0x7fc00000 [ 42.203235][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 42.253361][ T652] loop3: detected capacity change from 0 to 16 [ 42.320442][ T652] erofs: (device loop3): mounted with root inode @ nid 36. [ 42.410118][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 42.436527][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 42.446279][ T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 42.455892][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 42.465567][ T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 42.475343][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 42.481809][ T24] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 42.490663][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.530875][ T24] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 42.680330][ T28] audit: type=1326 audit(1718063291.899:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=640 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f694967cf69 code=0x7fc00000 [ 42.721060][ T310] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 42.736789][ T659] loop2: detected capacity change from 0 to 256 [ 42.755642][ T24] scsi host2: usb-storage 5-1:1.0 [ 42.859660][ T635] sddr09: could not read card info [ 42.864806][ T431] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 42.871871][ T431] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 42.877762][ T431] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 42.884829][ T431] sd 1:0:0:0: [sdb] Asking for cache data failed [ 42.891110][ T431] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 43.211464][ T432] usb 1-1: USB disconnect, device number 3 [ 43.227811][ T669] loop3: detected capacity change from 0 to 16 [ 43.231175][ T431] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 43.240444][ T669] erofs: (device loop3): mounted with root inode @ nid 36. [ 43.261572][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 43.297156][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 43.399680][ T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.439239][ T673] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 43.451593][ T673] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=46 [ 43.529721][ T28] audit: type=1400 audit(1718063292.679:183): avc: denied { mounton } for pid=668 comm="syz-executor.3" path="/root/syzkaller-testdir3638216297/syzkaller.P0mw3L/16/file0/file0" dev="loop3" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.748025][ T676] loop2: detected capacity change from 0 to 40427 [ 43.755369][ T676] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 43.763162][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 43.765609][ T676] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 43.777069][ T676] F2FS-fs (loop2): invalid crc value [ 43.783680][ T676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 43.882535][ T676] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 43.889923][ T676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 43.890381][ T40] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 43.937409][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 44.018994][ T28] audit: type=1400 audit(1718063293.229:184): avc: denied { map } for pid=675 comm="syz-executor.2" path="/root/syzkaller-testdir1637679392/syzkaller.KDrIuE/11/bus/bus" dev="loop2" ino=455 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.146858][ T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 44.157387][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 44.169630][ T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 44.179386][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 44.181141][ T688] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 44.199689][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 44.206417][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 44.215920][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.216100][ T686] syz-executor.2: attempt to access beyond end of device [ 44.216100][ T686] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 44.270097][ T24] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 44.289768][ T660] sddr09: could not read card info [ 44.300083][ T519] sd 2:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 44.309615][ T519] sd 2:0:0:0: [sdb] 0-byte physical blocks [ 44.310295][ T689] __nla_validate_parse: 1 callbacks suppressed [ 44.310323][ T689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 44.324739][ T519] sd 2:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 44.337701][ T519] sd 2:0:0:0: [sdb] Asking for cache data failed [ 44.339316][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 44.344116][ T519] sd 2:0:0:0: [sdb] Assuming drive cache: write through [ 44.359353][ T8] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 44.372553][ T519] sd 2:0:0:0: [sdb] Attached SCSI removable disk [ 44.386336][ T8] kworker/u4:0: attempt to access beyond end of device [ 44.386336][ T8] loop2: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 44.483475][ T24] scsi host1: usb-storage 2-1:1.0 [ 44.497205][ T24] usb 5-1: USB disconnect, device number 3 [ 44.964993][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 44.990159][ T383] udevd[383]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 45.585526][ T432] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 45.995318][ T721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 46.009090][ T720] loop4: detected capacity change from 0 to 256 [ 46.031370][ T695] sddr09: could not read card info [ 46.036486][ T519] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 46.043707][ T519] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 46.124672][ T724] loop2: detected capacity change from 0 to 16 [ 46.136206][ T724] erofs: (device loop2): mounted with root inode @ nid 36. [ 46.641574][ T331] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 46.651004][ T432] usb 2-1: USB disconnect, device number 3 [ 46.678017][ T519] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 46.743162][ T519] sd 1:0:0:0: [sdb] Asking for cache data failed [ 46.763800][ T519] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 46.802271][ T519] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 46.872949][ T728] loop2: detected capacity change from 0 to 1024 [ 46.909373][ T728] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 46.928458][ T352] udevd[352]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 46.938831][ T728] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.950834][ T728] EXT4-fs error (device loop2): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 46.969633][ T331] usb 4-1: Using ep0 maxpacket: 16 [ 46.996686][ T728] __quota_error: 1 callbacks suppressed [ 46.996706][ T728] Quota error (device loop2): write_blk: dquota write failed [ 47.015140][ T728] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 47.032914][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 47.051214][ T731] loop4: detected capacity change from 0 to 40427 [ 47.052399][ T728] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.069831][ T731] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 47.077293][ T731] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 47.082075][ T728] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.099857][ T331] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 47.108635][ T331] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 47.118490][ T331] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 47.118634][ T731] F2FS-fs (loop4): invalid crc value [ 47.128478][ T331] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 47.142840][ T728] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.153056][ T728] EXT4-fs error (device loop2): ext4_free_blocks:6197: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.166866][ T331] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 47.167436][ T731] F2FS-fs (loop4): Found nat_bits in checkpoint [ 47.176684][ T331] usb 4-1: config 1 interface 0 has no altsetting 0 [ 47.189267][ T728] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 47.226770][ T331] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 47.236286][ T331] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.244397][ T728] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 47.258470][ T728] EXT4-fs (loop2): 1 orphan inode deleted [ 47.303255][ T734] loop0: detected capacity change from 0 to 40427 [ 47.360589][ T731] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 47.380001][ T734] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 47.403763][ T731] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 47.422369][ T734] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 47.485536][ T734] F2FS-fs (loop0): invalid crc value [ 47.541726][ T734] F2FS-fs (loop0): Found nat_bits in checkpoint [ 47.561187][ T331] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 47.577937][ T728] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.610697][ T734] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 47.617554][ T734] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 47.649631][ T331] scsi host1: usb-storage 4-1:1.0 [ 47.666817][ T752] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 47.705402][ T753] syz-executor.0: attempt to access beyond end of device [ 47.705402][ T753] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 47.721748][ T28] audit: type=1326 audit(1718063296.939:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=732 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28bde7cf69 code=0x0 [ 47.756749][ T309] EXT4-fs (loop2): unmounting filesystem. [ 47.764023][ T519] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 47.775970][ T519] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 47.797426][ T519] kworker/u4:5: attempt to access beyond end of device [ 47.797426][ T519] loop0: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 47.857433][ T758] syz-executor.4: attempt to access beyond end of device [ 47.857433][ T758] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 48.039661][ T6] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 48.060559][ T308] syz-executor.4: attempt to access beyond end of device [ 48.060559][ T308] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 48.137674][ T763] loop0: detected capacity change from 0 to 16 [ 48.146036][ T763] erofs: (device loop0): mounted with root inode @ nid 36. [ 48.539560][ T6] usb 3-1: Using ep0 maxpacket: 16 [ 48.553215][ T770] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 48.659663][ T6] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 48.668555][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 48.678217][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 48.687892][ T6] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 48.697607][ T6] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 48.707469][ T6] usb 3-1: config 1 interface 0 has no altsetting 0 [ 48.714068][ T6] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 48.723050][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.731954][ T331] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 48.770232][ T6] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 48.859741][ T751] sddr09: could not read card info [ 48.864939][ T519] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 48.872492][ T519] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 48.878352][ T519] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 48.885475][ T519] sd 1:0:0:0: [sdb] Asking for cache data failed [ 48.891830][ T519] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 48.903794][ T519] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 48.990232][ T6] scsi host2: usb-storage 3-1:1.0 [ 49.061351][ T6] usb 4-1: USB disconnect, device number 3 [ 49.150100][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 49.186923][ T383] udevd[383]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 49.329589][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 49.600290][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 49.770206][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 49.775677][ T791] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 49.787732][ T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 49.799043][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 49.808769][ T24] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 49.818647][ T24] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 49.833416][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 49.839938][ T24] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 49.848725][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.899627][ T791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 49.900052][ T24] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 50.035703][ T331] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 50.986337][ T40] usb 3-1: USB disconnect, device number 5 [ 50.994868][ T779] sddr09: could not read card info [ 51.004683][ T808] loop4: detected capacity change from 0 to 1024 [ 51.008409][ T431] sd 2:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 51.022526][ T808] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.029057][ T431] sd 2:0:0:0: [sdb] 0-byte physical blocks [ 51.036525][ T808] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.044891][ T808] EXT4-fs error (device loop4): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.059222][ T431] sd 2:0:0:0: [sdb] Write Protect is off [ 51.066614][ T808] Quota error (device loop4): write_blk: dquota write failed [ 51.073891][ T431] sd 2:0:0:0: [sdb] Asking for cache data failed [ 51.074365][ T24] scsi host1: usb-storage 2-1:1.0 [ 51.094986][ T808] Quota error (device loop4): find_free_dqentry: Can't write quota data block 3 [ 51.110182][ T814] loop0: detected capacity change from 0 to 256 [ 51.116339][ T431] sd 2:0:0:0: [sdb] Assuming drive cache: write through [ 51.130465][ T808] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 51.155392][ T431] sd 2:0:0:0: [sdb] Attached SCSI removable disk [ 51.179690][ T808] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.239811][ T808] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 51.278416][ T808] EXT4-fs error (device loop4): ext4_free_blocks:6197: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 51.294296][ T811] loop2: detected capacity change from 0 to 40427 [ 51.301507][ T808] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 51.316762][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 51.329947][ T811] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 51.337525][ T811] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 51.360903][ T808] EXT4-fs (loop4): 1 orphan inode deleted [ 51.451885][ T811] F2FS-fs (loop2): invalid crc value [ 51.540652][ T811] F2FS-fs (loop2): Found nat_bits in checkpoint [ 51.597767][ T808] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 51.640191][ T811] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 51.647132][ T811] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 51.681157][ T823] EXT4-fs error (device loop4): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 51.690474][ T806] loop3: detected capacity change from 0 to 40427 [ 51.721421][ T806] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 51.729134][ T806] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 51.746208][ T308] EXT4-fs (loop4): unmounting filesystem. [ 51.752348][ T806] F2FS-fs (loop3): invalid crc value [ 51.760638][ T806] F2FS-fs (loop3): Found nat_bits in checkpoint [ 51.802766][ T806] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 51.809710][ T806] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 51.911404][ T834] syz-executor.2: attempt to access beyond end of device [ 51.911404][ T834] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.161620][ T507] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 52.304168][ T837] syz-executor.3: attempt to access beyond end of device [ 52.304168][ T837] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 52.321945][ T834] syz-executor.2 (834) used greatest stack depth: 21632 bytes left [ 52.348533][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 52.348547][ T28] audit: type=1326 audit(1718063301.559:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=805 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x0 [ 52.399766][ T812] sddr09: could not read card info [ 52.406327][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 52.419344][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 52.498239][ T8] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 52.550591][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 52.627656][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 52.644243][ T507] usb 2-1: USB disconnect, device number 4 [ 52.655485][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 52.683218][ T844] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 52.702247][ T309] syz-executor.2: attempt to access beyond end of device [ 52.702247][ T309] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 52.704069][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 52.727455][ T8] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 52.760030][ T8] kworker/u4:0: attempt to access beyond end of device [ 52.760030][ T8] loop3: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 52.986312][ T850] loop3: detected capacity change from 0 to 256 [ 53.104543][ T855] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 53.147433][ T28] audit: type=1326 audit(1718063302.359:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=856 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x0 [ 53.242168][ T855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 53.717016][ T28] audit: type=1326 audit(1718063302.929:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=856 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 53.971551][ T28] audit: type=1326 audit(1718063303.189:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=856 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 54.003521][ T28] audit: type=1326 audit(1718063303.189:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=856 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 54.027508][ T28] audit: type=1326 audit(1718063303.189:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=856 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 54.027783][ T874] loop2: detected capacity change from 0 to 256 [ 54.176107][ T880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 54.187418][ T880] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 54.439714][ T507] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 54.709570][ T507] usb 5-1: Using ep0 maxpacket: 16 [ 54.847615][ T507] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 54.894519][ T507] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 54.910638][ T507] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 54.920517][ T507] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 54.930249][ T507] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 54.940136][ T507] usb 5-1: config 1 interface 0 has no altsetting 0 [ 54.946591][ T507] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 54.955683][ T507] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.977981][ T892] loop1: detected capacity change from 0 to 256 [ 55.060802][ T507] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 55.163255][ T899] loop0: detected capacity change from 0 to 1024 [ 55.208656][ T899] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 55.211054][ T888] loop2: detected capacity change from 0 to 40427 [ 55.223765][ T899] EXT4-fs (loop0): orphan cleanup on readonly fs [ 55.248535][ T899] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.280145][ T888] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 55.287770][ T888] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 55.303500][ T507] scsi host1: usb-storage 5-1:1.0 [ 55.455880][ T899] Quota error (device loop0): write_blk: dquota write failed [ 55.469459][ T888] F2FS-fs (loop2): invalid crc value [ 55.492183][ T890] loop3: detected capacity change from 0 to 40427 [ 55.499388][ T899] Quota error (device loop0): find_free_dqentry: Can't write quota data block 3 [ 55.511558][ T899] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 55.519724][ T890] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 55.521754][ T899] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.529359][ T890] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 55.543871][ T28] audit: type=1400 audit(1718063304.759:193): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.551962][ T888] F2FS-fs (loop2): Found nat_bits in checkpoint [ 55.573541][ T899] EXT4-fs error (device loop0): ext4_free_blocks:6197: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 55.580191][ T890] F2FS-fs (loop3): invalid crc value [ 55.593486][ T899] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 55.612590][ T899] EXT4-fs (loop0): 1 orphan inode deleted [ 55.625637][ T899] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 55.636562][ T890] F2FS-fs (loop3): Found nat_bits in checkpoint [ 55.644270][ T888] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 55.653593][ T888] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 55.696205][ T890] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 55.703480][ T890] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 55.729306][ T913] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 55.758532][ T899] syz-executor.0 (899) used greatest stack depth: 21592 bytes left [ 55.765068][ T313] EXT4-fs (loop0): unmounting filesystem. [ 55.790506][ T915] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 55.866990][ T919] syz-executor.2: attempt to access beyond end of device [ 55.866990][ T919] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.056061][ T917] syz-executor.3: attempt to access beyond end of device [ 56.056061][ T917] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 56.107818][ T309] syz-executor.2: attempt to access beyond end of device [ 56.107818][ T309] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 56.214923][ T431] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 56.224028][ T431] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 56.253427][ T431] kworker/u4:4: attempt to access beyond end of device [ 56.253427][ T431] loop3: rw=1, sector=45104, nr_sectors = 8 limit=40427 [ 56.399887][ T507] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 56.400691][ T931] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 56.527169][ T934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 56.670977][ T331] usb 5-1: USB disconnect, device number 4 [ 56.699790][ T903] sddr09: could not read card info [ 56.704798][ T431] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 56.711728][ T431] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 56.717451][ T431] sd 1:0:0:0: [sdb] Write Protect is off [ 56.722953][ T431] sd 1:0:0:0: [sdb] Asking for cache data failed [ 56.729090][ T431] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 56.738157][ T431] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 57.091060][ T947] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 57.095663][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 57.449650][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 57.449674][ T28] audit: type=1326 audit(1718063306.649:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 57.528208][ T955] loop4: detected capacity change from 0 to 256 [ 57.552150][ T28] audit: type=1326 audit(1718063306.649:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 57.554879][ T957] loop0: detected capacity change from 0 to 1024 [ 57.575862][ T28] audit: type=1326 audit(1718063306.649:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 57.610318][ T957] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 57.626302][ T957] EXT4-fs (loop0): orphan cleanup on readonly fs [ 57.633949][ T28] audit: type=1326 audit(1718063306.649:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 57.658033][ T957] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.672503][ T957] Quota error (device loop0): write_blk: dquota write failed [ 57.679736][ T957] Quota error (device loop0): find_free_dqentry: Can't write quota data block 3 [ 57.684241][ T28] audit: type=1326 audit(1718063306.649:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 57.688796][ T957] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 57.722376][ T957] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 57.740396][ T957] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 57.765384][ T957] EXT4-fs error (device loop0): ext4_free_blocks:6197: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 57.782534][ T28] audit: type=1326 audit(1718063306.649:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=935 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7fc00000 [ 57.880745][ T957] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 58.011409][ T957] EXT4-fs (loop0): 1 orphan inode deleted [ 58.069925][ T957] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 58.148242][ T970] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 58.178388][ T972] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=10340 sclass=netlink_audit_socket pid=972 comm=syz-executor.3 [ 58.207955][ T313] EXT4-fs (loop0): unmounting filesystem. [ 58.597053][ T969] loop1: detected capacity change from 0 to 40427 [ 58.609701][ T969] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 58.627349][ T969] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 58.658109][ T969] F2FS-fs (loop1): invalid crc value [ 58.700768][ T969] F2FS-fs (loop1): Found nat_bits in checkpoint [ 58.819713][ T969] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 58.826581][ T969] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 58.836257][ T978] loop4: detected capacity change from 0 to 40427 [ 58.862448][ T978] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 58.870399][ T978] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 58.887238][ T978] F2FS-fs (loop4): invalid crc value [ 58.895397][ T976] loop0: detected capacity change from 0 to 40427 [ 58.906792][ T976] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 58.914735][ T976] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 58.923890][ T976] F2FS-fs (loop0): invalid crc value [ 58.942582][ T978] F2FS-fs (loop4): Found nat_bits in checkpoint [ 58.986516][ T976] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.998946][ T978] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 59.006086][ T978] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 59.128747][ T995] syz-executor.1: attempt to access beyond end of device [ 59.128747][ T995] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.222555][ T19] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 59.231836][ T976] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 59.238819][ T976] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 59.325196][ T312] syz-executor.1: attempt to access beyond end of device [ 59.325196][ T312] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 59.522839][ T1000] syz-executor.4: attempt to access beyond end of device [ 59.522839][ T1000] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 59.991421][ T1002] syz-executor.0: attempt to access beyond end of device [ 59.991421][ T1002] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 60.070617][ T308] syz-executor.4: attempt to access beyond end of device [ 60.070617][ T308] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 60.238640][ T313] syz-executor.0: attempt to access beyond end of device [ 60.238640][ T313] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 60.269563][ T19] usb 4-1: Using ep0 maxpacket: 16 [ 60.280017][ T1005] loop2: detected capacity change from 0 to 256 [ 60.320023][ T1007] loop2: detected capacity change from 0 to 1024 [ 60.332580][ T1007] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 60.341270][ T1007] EXT4-fs (loop2): orphan cleanup on readonly fs [ 60.359957][ T1007] EXT4-fs error (device loop2): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.374370][ T1007] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.396247][ T1010] loop1: detected capacity change from 0 to 256 [ 60.402693][ T19] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 60.412186][ T19] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 60.419942][ T1007] EXT4-fs error (device loop2): ext4_free_blocks:6197: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.422271][ T19] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 60.444741][ T19] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 60.454446][ T19] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 60.464171][ T19] usb 4-1: config 1 interface 0 has no altsetting 0 [ 60.470680][ T19] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 60.479634][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.488037][ T1007] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 60.509756][ T1007] EXT4-fs (loop2): 1 orphan inode deleted [ 60.525273][ T1012] loop4: detected capacity change from 0 to 256 [ 60.539959][ T19] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 60.604118][ T1007] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 60.968262][ T1021] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 61.171423][ T19] scsi host1: usb-storage 4-1:1.0 [ 61.237319][ T1007] syz-executor.2 (1007) used greatest stack depth: 21416 bytes left [ 61.250089][ T309] EXT4-fs (loop2): unmounting filesystem. [ 61.793220][ T1035] loop4: detected capacity change from 0 to 1024 [ 61.815764][ T1035] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 61.824069][ T1035] EXT4-fs (loop4): orphan cleanup on readonly fs [ 61.831325][ T1035] EXT4-fs error (device loop4): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.846027][ T1035] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.861064][ T1035] EXT4-fs error (device loop4): ext4_free_blocks:6197: comm syz-executor.4: Freeing blocks not in datazone - block = 0, count = 4096 [ 61.875101][ T1035] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.4: lblock 3 mapped to illegal pblock 3 (length 1) [ 61.889576][ T1035] EXT4-fs (loop4): 1 orphan inode deleted [ 61.895486][ T1035] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 61.963145][ T1035] EXT4-fs error (device loop4): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.4: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 62.042300][ T308] EXT4-fs (loop4): unmounting filesystem. [ 62.129076][ T19] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 62.198818][ T1048] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.210761][ T1048] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 62.223293][ T1050] loop2: detected capacity change from 0 to 256 [ 62.239959][ T382] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 62.532627][ T507] usb 4-1: USB disconnect, device number 4 [ 62.549562][ T1025] sddr09: could not read card info [ 62.555361][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 62.577629][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 62.588258][ T8] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 62.595389][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 62.601763][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 62.609573][ T19] usb 1-1: Using ep0 maxpacket: 16 [ 62.614807][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 62.633226][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 62.658482][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 62.729592][ T19] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 62.738523][ T19] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 62.748110][ T19] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 62.757688][ T19] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 62.767261][ T19] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 62.776786][ T19] usb 1-1: config 1 interface 0 has no altsetting 0 [ 62.783237][ T19] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 62.792075][ T19] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.840303][ T19] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 63.017513][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 63.017527][ T28] audit: type=1326 audit(1718063312.229:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1045 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f31ea07cf69 code=0x7fc00000 [ 63.110432][ T19] scsi host1: usb-storage 1-1:1.0 [ 63.126070][ T1064] loop3: detected capacity change from 0 to 1024 [ 63.140289][ T1068] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 63.183264][ T1064] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 63.192993][ T1064] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.200708][ T1064] EXT4-fs error (device loop3): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.214972][ T1064] Quota error (device loop3): write_blk: dquota write failed [ 63.222400][ T1064] Quota error (device loop3): find_free_dqentry: Can't write quota data block 3 [ 63.231447][ T1064] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.250019][ T1064] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.269784][ T1064] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.292929][ T1064] EXT4-fs error (device loop3): ext4_free_blocks:6197: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.314824][ T1072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 63.339860][ T1064] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 63.348086][ T1061] loop1: detected capacity change from 0 to 40427 [ 63.372024][ T1061] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 63.379926][ T1064] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 63.389738][ T1061] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 63.397786][ T1064] EXT4-fs (loop3): 1 orphan inode deleted [ 63.410068][ T1061] F2FS-fs (loop1): invalid crc value [ 63.435593][ T1064] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 63.445264][ T1061] F2FS-fs (loop1): Found nat_bits in checkpoint [ 63.461115][ T1078] loop4: detected capacity change from 0 to 256 [ 63.531029][ T1079] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 63.564020][ T1061] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 63.571047][ T1061] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 63.873281][ T1085] syz-executor.1: attempt to access beyond end of device [ 63.873281][ T1085] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 64.071989][ T316] EXT4-fs (loop3): unmounting filesystem. [ 64.117907][ T312] syz-executor.1: attempt to access beyond end of device [ 64.117907][ T312] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 64.160092][ T19] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 64.429672][ T1062] sddr09: could not read card info [ 64.440735][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 64.457272][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 64.508328][ T8] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 64.539424][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 64.558699][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 64.585901][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 64.624497][ T1098] loop1: detected capacity change from 0 to 1024 [ 64.637814][ T507] usb 1-1: USB disconnect, device number 4 [ 64.645306][ T1098] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 64.653819][ T1098] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.661077][ T1098] EXT4-fs error (device loop1): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.1: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.687612][ T1098] Quota error (device loop1): write_blk: dquota write failed [ 64.700362][ T1095] loop4: detected capacity change from 0 to 40427 [ 64.709398][ T1098] Quota error (device loop1): find_free_dqentry: Can't write quota data block 3 [ 64.719478][ T1095] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 64.731268][ T384] udevd[384]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 64.736084][ T1095] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 64.741867][ T28] audit: type=1326 audit(1718063313.959:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1089 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec427cf69 code=0x7ffc0000 [ 64.757577][ T1095] F2FS-fs (loop4): invalid crc value [ 64.774921][ T1101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=10340 sclass=netlink_audit_socket pid=1101 comm=syz-executor.3 [ 64.777294][ T1098] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 64.800001][ T1098] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.1: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.814587][ T1098] EXT4-fs error (device loop1): ext4_free_blocks:6197: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.829040][ T1095] F2FS-fs (loop4): Found nat_bits in checkpoint [ 64.849036][ T1098] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.1: lblock 3 mapped to illegal pblock 3 (length 1) [ 64.879803][ T1098] EXT4-fs (loop1): 1 orphan inode deleted [ 64.890635][ T383] udevd[383]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 64.908274][ T1095] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 64.916183][ T1095] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 64.950787][ T1098] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 65.265828][ T1109] EXT4-fs error (device loop1): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 65.980367][ T312] EXT4-fs (loop1): unmounting filesystem. [ 65.985569][ T308] syz-executor.4: attempt to access beyond end of device [ 65.985569][ T308] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 66.067987][ T1122] loop0: detected capacity change from 0 to 1024 [ 66.076298][ T1123] loop1: detected capacity change from 0 to 256 [ 66.108751][ T1122] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 66.119030][ T1122] EXT4-fs (loop0): orphan cleanup on readonly fs [ 66.153311][ T1122] EXT4-fs error (device loop0): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.183564][ T1122] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.200530][ T1122] EXT4-fs error (device loop0): ext4_free_blocks:6197: comm syz-executor.0: Freeing blocks not in datazone - block = 0, count = 4096 [ 66.220590][ T1122] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 66.711965][ T1122] EXT4-fs (loop0): 1 orphan inode deleted [ 66.875252][ T1122] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 67.015038][ T1137] loop2: detected capacity change from 0 to 16 [ 67.036514][ T1137] erofs: (device loop2): mounted with root inode @ nid 36. [ 67.261553][ T352] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 67.513845][ T1147] EXT4-fs error (device loop0): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 67.734530][ T1149] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.768704][ T1140] loop4: detected capacity change from 0 to 40427 [ 67.778636][ T313] EXT4-fs (loop0): unmounting filesystem. [ 67.786217][ T1140] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 67.793976][ T1140] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 67.811301][ T1140] F2FS-fs (loop4): invalid crc value [ 67.834919][ T1140] F2FS-fs (loop4): Found nat_bits in checkpoint [ 67.907417][ T1140] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 67.914475][ T1140] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 68.110270][ T1162] syz-executor.4: attempt to access beyond end of device [ 68.110270][ T1162] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 68.269585][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 68.320305][ T308] syz-executor.4: attempt to access beyond end of device [ 68.320305][ T308] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 68.379589][ T1026] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 68.415956][ T1165] loop1: detected capacity change from 0 to 40427 [ 68.439117][ T1165] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 68.446696][ T1165] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 68.458418][ T1165] F2FS-fs (loop1): invalid crc value [ 68.465112][ T1165] F2FS-fs (loop1): Found nat_bits in checkpoint [ 68.510892][ T1165] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 68.517827][ T1165] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 68.529561][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 68.606835][ T1173] loop2: detected capacity change from 0 to 1024 [ 68.632248][ T1026] usb 1-1: Using ep0 maxpacket: 16 [ 68.634298][ T1173] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 68.645628][ T1173] EXT4-fs (loop2): orphan cleanup on readonly fs [ 68.652503][ T1173] EXT4-fs error (device loop2): ext4_map_blocks:721: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.667012][ T1173] __quota_error: 17 callbacks suppressed [ 68.667026][ T1173] Quota error (device loop2): write_blk: dquota write failed [ 68.689674][ T1173] Quota error (device loop2): find_free_dqentry: Can't write quota data block 3 [ 68.714785][ T1173] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 68.725183][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 68.765725][ T24] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 68.807138][ T1173] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.826732][ T24] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 68.841159][ T1167] loop4: detected capacity change from 0 to 40427 [ 68.851584][ T24] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 68.862508][ T24] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 68.873031][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 68.880086][ T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 68.889208][ T1167] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 68.896884][ T1173] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 68.906869][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.911484][ T1167] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 68.915112][ T1173] EXT4-fs error (device loop2): ext4_free_blocks:6197: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096 [ 68.923564][ T1167] F2FS-fs (loop4): invalid crc value [ 68.938895][ T1173] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #3: block 3: comm syz-executor.2: lblock 3 mapped to illegal pblock 3 (length 1) [ 68.943273][ T1167] F2FS-fs (loop4): Found nat_bits in checkpoint [ 68.959166][ T1173] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 68.971379][ T1173] EXT4-fs (loop2): 1 orphan inode deleted [ 68.979736][ T1026] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 68.988504][ T1026] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 68.998286][ T1026] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 69.001221][ T24] ums-sddr09 4-1:1.0: USB Mass Storage device detected [ 69.007985][ T1026] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 69.023691][ T1167] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 69.024013][ T1026] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 69.031165][ T1167] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 69.040475][ T1026] usb 1-1: config 1 interface 0 has no altsetting 0 [ 69.054141][ T1026] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 69.076055][ T1026] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.097960][ T312] syz-executor.1: attempt to access beyond end of device [ 69.097960][ T312] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.148233][ T1173] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 69.169972][ T1026] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 69.286092][ T1187] EXT4-fs error (device loop2): ext4_search_dir:1548: inode #2: block 16: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 69.354944][ T24] scsi host1: usb-storage 4-1:1.0 [ 69.517842][ T1026] scsi host2: usb-storage 1-1:1.0 [ 69.560016][ T308] syz-executor.4: attempt to access beyond end of device [ 69.560016][ T308] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 69.655938][ T309] EXT4-fs (loop2): unmounting filesystem. [ 69.949670][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 70.400466][ T24] usb 3-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 70.411802][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 70.419045][ T432] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 70.524127][ T1208] loop1: detected capacity change from 0 to 16 [ 70.600152][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 70.609356][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.617308][ T24] usb 3-1: Product: Ч [ 70.621480][ T24] usb 3-1: Manufacturer: Л [ 70.625902][ T24] usb 3-1: SerialNumber: syz [ 70.631221][ T1208] erofs: (device loop1): mounted with root inode @ nid 36. [ 70.659669][ T1189] sddr09: could not read card info [ 70.701079][ T8] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 70.703880][ T1026] scsi 2:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 70.712604][ T8] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 70.723257][ T1210] loop4: detected capacity change from 0 to 256 [ 70.731350][ T8] sd 1:0:0:0: [sdb] Test WP failed, assume Write Enabled [ 70.738583][ T8] sd 1:0:0:0: [sdb] Asking for cache data failed [ 70.746639][ T8] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 70.758466][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 70.842531][ T1026] usb 4-1: USB disconnect, device number 5 [ 70.915791][ T352] udevd[352]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 70.956631][ T476] udevd[476]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 71.010501][ T382] usb 1-1: USB disconnect, device number 5 [ 71.039589][ T1191] sddr09: could not read card info [ 71.044737][ T431] sd 2:0:0:0: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 71.051945][ T431] sd 2:0:0:0: [sdc] 0-byte physical blocks [ 71.057647][ T431] sd 2:0:0:0: [sdc] Write Protect is off [ 71.063427][ T431] sd 2:0:0:0: [sdc] Asking for cache data failed [ 71.069811][ T431] sd 2:0:0:0: [sdc] Assuming drive cache: write through [ 71.085093][ T431] sd 2:0:0:0: [sdc] Attached SCSI removable disk [ 71.111459][ T352] udevd[352]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 71.141847][ T352] udevd[352]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 71.163621][ T1214] loop2: detected capacity change from 0 to 40427 [ 71.172692][ T1214] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 71.179152][ T1214] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 71.197675][ T1214] F2FS-fs (loop2): Found nat_bits in checkpoint [ 71.243953][ T1214] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 71.250946][ T1214] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 71.340365][ T24] usb 3-1: USB disconnect, device number 6 [ 71.509588][ T432] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 71.770110][ T1232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=10340 sclass=netlink_audit_socket pid=1232 comm=syz-executor.0 [ 72.030357][ T28] audit: type=1326 audit(1718063320.979:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bde7cf69 code=0x7ffc0000 [ 72.073608][ T28] audit: type=1326 audit(1718063320.989:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bde7cf69 code=0x7ffc0000 [ 72.159717][ T28] audit: type=1326 audit(1718063320.989:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f28bde7cf69 code=0x7ffc0000 [ 72.229666][ T432] usb 2-1: config 1 has an invalid descriptor of length 145, skipping remainder of the config [ 72.244905][ T28] audit: type=1326 audit(1718063320.989:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bde7cf69 code=0x7ffc0000 [ 72.262190][ T432] usb 2-1: config 1 interface 0 has no altsetting 0 [ 72.274754][ T28] audit: type=1326 audit(1718063320.989:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1228 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f28bde7cf69 code=0x7ffc0000 [ 72.329036][ T1235] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.344780][ T1235] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.449169][ T1251] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 72.469599][ T432] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.478456][ T432] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.506665][ T432] usb 2-1: Product: Ч [ 72.520110][ T432] usb 2-1: Manufacturer: Л [ 72.539595][ T432] usb 2-1: SerialNumber: syz [ 72.703819][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.711029][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.718369][ T1259] device bridge_slave_0 entered promiscuous mode [ 72.725603][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.732823][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.740330][ T1259] device bridge_slave_1 entered promiscuous mode [ 72.800713][ T1259] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.807564][ T1259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.814691][ T1259] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.821478][ T1259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.198683][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.232133][ T24] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.262203][ T24] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.301149][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.325105][ T333] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.330215][ T1220] loop1: detected capacity change from 0 to 40427 [ 73.331983][ T333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.346216][ T1220] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 73.352702][ T1220] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 73.356237][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.364381][ T1220] F2FS-fs (loop1): Found nat_bits in checkpoint [ 73.368763][ T333] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.381389][ T333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.394434][ T8] device bridge_slave_1 left promiscuous mode [ 73.401333][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.421960][ T8] device bridge_slave_0 left promiscuous mode [ 73.432933][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.437830][ T1220] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 73.447527][ T8] device veth1_macvtap left promiscuous mode [ 73.453886][ T8] device veth0_vlan left promiscuous mode [ 73.459919][ T1220] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 73.602693][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.612094][ T432] usb 2-1: USB disconnect, device number 5 [ 73.618018][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.634245][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.642811][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.655794][ T1259] device veth0_vlan entered promiscuous mode [ 73.662507][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.670888][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.683007][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.690614][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.703446][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.717521][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.726815][ T1259] device veth1_macvtap entered promiscuous mode [ 73.736372][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.744599][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.752938][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.772652][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.789927][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.806553][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 73.806569][ T28] audit: type=1400 audit(1718063323.019:268): avc: denied { mounton } for pid=1259 comm="syz-executor.3" path="/dev/binderfs" dev="devtmpfs" ino=370 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 73.907897][ T1321] loop3: detected capacity change from 0 to 512 [ 73.916121][ T1321] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.923978][ T1321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 73.939481][ T1307] loop0: detected capacity change from 0 to 32768 [ 73.941942][ T1321] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 73.954779][ T1321] ext4 filesystem being mounted at /root/syzkaller-testdir3469166148/syzkaller.5CmVj3/4/file1 supports timestamps until 2038 (0x7fffffff) [ 73.974359][ T1321] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor.3: corrupted xattr block 19 [ 73.989387][ T1321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 73.998496][ T28] audit: type=1400 audit(1718063323.209:269): avc: denied { remove_name } for pid=1320 comm="syz-executor.3" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.998584][ T1321] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor.3: corrupted xattr block 19 [ 74.021430][ T28] audit: type=1400 audit(1718063323.209:270): avc: denied { rename } for pid=1320 comm="syz-executor.3" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.033971][ T1321] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 74.066895][ T28] audit: type=1400 audit(1718063323.279:271): avc: denied { unlink } for pid=1320 comm="syz-executor.3" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 74.100009][ T1321] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 74.115114][ T1321] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.3: corrupted xattr block 19 [ 74.127719][ T1321] EXT4-fs warning (device loop3): ext4_evict_inode:299: xattr delete (err -117) [ 74.159155][ T1259] EXT4-fs (loop3): unmounting filesystem. [ 74.300546][ T1259] syz-executor.3 (1259) used greatest stack depth: 21160 bytes left [ 74.308575][ T1331] loop1: detected capacity change from 0 to 32768 [ 74.450509][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.457378][ T1347] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.464923][ T1347] device bridge_slave_0 entered promiscuous mode [ 74.489925][ T1347] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.496835][ T1347] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.504343][ T1347] device bridge_slave_1 entered promiscuous mode [ 74.524198][ T1364] loop1: detected capacity change from 0 to 512 [ 74.538313][ T1364] EXT4-fs: Ignoring removed mblk_io_submit option [ 74.545267][ T1364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 74.562492][ T1364] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.571642][ T1364] ext4 filesystem being mounted at /root/syzkaller-testdir3093048082/syzkaller.wcSRKe/35/file1 supports timestamps until 2038 (0x7fffffff) [ 74.588934][ T1364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 74.608744][ T1364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 74.617821][ T1364] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 74.637176][ T1364] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 74.644766][ T28] audit: type=1400 audit(1718063323.849:272): avc: denied { name_bind } for pid=1376 comm="syz-executor.2" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.647097][ T1364] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 74.668426][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 74.682390][ T1364] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2926: inode #15: comm syz-executor.1: corrupted xattr block 19 [ 74.715063][ T1364] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117) [ 74.739891][ T312] EXT4-fs (loop1): unmounting filesystem. [ 74.769834][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 74.777142][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 74.807856][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 74.816272][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 74.824689][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.831585][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.839771][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 74.847847][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 74.855981][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.862842][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.871605][ T28] audit: type=1400 audit(1718063324.089:273): avc: denied { write } for pid=1387 comm="syz-executor.4" name="dev" dev="proc" ino=4026532296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 74.900618][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 74.908140][ T1026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.919297][ T333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.968657][ T1347] device veth0_vlan entered promiscuous mode [ 74.982311][ T1347] device veth1_macvtap entered promiscuous mode [ 75.019622][ T28] audit: type=1400 audit(1718063324.229:274): avc: denied { execute } for pid=1415 comm="syz-executor.3" path=2F6D656D66643AC0873A2A18C16BA7875BA06F383449AA4BA5D30B86CA3C7FFD368D7DD8F247B8EA65299086E39608E0FAB1D84EB257CB8D7D336C6D38A537C9202864656C6574656429 dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 75.074625][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.092733][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.101689][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.109003][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.117090][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.127434][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.134631][ T28] audit: type=1400 audit(1718063324.239:275): avc: denied { create } for pid=1412 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.135906][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.165341][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.176175][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.341511][ T8] device bridge_slave_1 left promiscuous mode [ 75.347973][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.356622][ T8] device bridge_slave_0 left promiscuous mode [ 75.363333][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.375050][ T8] device veth1_macvtap left promiscuous mode [ 75.385792][ T8] device veth0_vlan left promiscuous mode [ 75.527907][ T28] audit: type=1400 audit(1718063324.739:276): avc: denied { ioctl } for pid=1427 comm="syz-executor.2" path="socket:[17832]" dev="sockfs" ino=17832 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 76.144487][ T28] audit: type=1400 audit(1718063325.359:277): avc: denied { create } for pid=1462 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.140954][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 79.140972][ T28] audit: type=1400 audit(1718063328.359:283): avc: denied { getopt } for pid=1696 comm="syz-executor.1" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.477061][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Dropping request. Check SNMP counters. [ 79.498186][ T1716] loop4: detected capacity change from 0 to 32768 [ 80.492442][ T28] audit: type=1400 audit(1718063329.709:284): avc: denied { read } for pid=1797 comm="syz-executor.4" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 80.689469][ C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 81.009156][ T28] audit: type=1400 audit(1718063330.219:285): avc: denied { write } for pid=1848 comm="syz-executor.2" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 82.066609][ T28] audit: type=1400 audit(1718063331.279:286): avc: denied { read } for pid=1926 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 82.704089][ T1961] overlayfs: missing 'lowerdir' [ 83.091023][ T28] audit: type=1400 audit(1718063332.309:287): avc: denied { ioctl } for pid=1978 comm="syz-executor.2" path="/dev/binderfs/binder-control" dev="binder" ino=2 ioctlcmd=0x5450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 83.311876][ T1983] loop3: detected capacity change from 0 to 32768 [ 84.340553][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 84.482605][ T2046] process 'syz-executor.3' launched './file0' with NULL argv: empty string added [ 84.571070][ T2058] loop3: detected capacity change from 0 to 512 [ 84.580261][ T2058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 84.590182][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 84.611615][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 12: comm syz-executor.3: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=19792, size=2048 fake=0 [ 84.632861][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 13: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 84.654918][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 14: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 84.675556][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 15: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 84.696198][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 16: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 84.717654][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 17: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 84.738258][ T2058] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 18: comm syz-executor.3: lblock 23 mapped to illegal pblock 18 (length 1) [ 84.753025][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 19: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 84.773681][ T2058] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 20: comm syz-executor.3: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0 [ 84.854784][ T2063] loop4: detected capacity change from 0 to 2048 [ 84.867921][ T2063] EXT4-fs (loop4): inodes count not valid: 64 vs 32 [ 85.424759][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 85.542938][ T28] audit: type=1400 audit(1718063334.759:288): avc: denied { block_suspend } for pid=2075 comm="syz-executor.1" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 85.566464][ T28] audit: type=1400 audit(1718063334.779:289): avc: denied { read } for pid=2075 comm="syz-executor.1" name="usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.618745][ T2074] loop2: detected capacity change from 0 to 40427 [ 85.628639][ T28] audit: type=1400 audit(1718063334.779:290): avc: denied { open } for pid=2075 comm="syz-executor.1" path="/dev/usbmon0" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 85.659259][ T2074] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 85.698153][ T2074] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 85.877147][ T2074] F2FS-fs (loop2): invalid crc value [ 85.899161][ T2095] loop4: detected capacity change from 0 to 512 [ 85.913251][ T2074] F2FS-fs (loop2): Found nat_bits in checkpoint [ 85.925006][ T2095] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #15: comm syz-executor.4: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 85.949351][ T2095] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 85.967166][ T2095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 85.976575][ T2095] ext4 filesystem being mounted at /root/syzkaller-testdir3765374469/syzkaller.I9n9Uj/94/file0 supports timestamps until 2038 (0x7fffffff) [ 85.983540][ T2074] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 85.997597][ T2074] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 86.002050][ T28] audit: type=1400 audit(1718063335.209:291): avc: denied { append } for pid=2094 comm="syz-executor.4" path="/root/syzkaller-testdir3765374469/syzkaller.I9n9Uj/94/file0/cpuset.effective_cpus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 86.046163][ T308] EXT4-fs (loop4): unmounting filesystem. [ 86.353920][ T28] audit: type=1400 audit(1718063335.569:292): avc: denied { ioctl } for pid=2131 comm="syz-executor.3" path="socket:[20577]" dev="sockfs" ino=20577 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.406220][ T2138] loop3: detected capacity change from 0 to 512 [ 86.418474][ T2134] loop1: detected capacity change from 0 to 2048 [ 86.432571][ T28] audit: type=1400 audit(1718063335.649:293): avc: denied { read } for pid=2139 comm="syz-executor.4" name="ppp" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.460433][ T2138] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz-executor.3: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 86.480512][ T28] audit: type=1400 audit(1718063335.649:294): avc: denied { open } for pid=2139 comm="syz-executor.4" path="/dev/ppp" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 86.503759][ T2138] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 15 (err -117) [ 86.504228][ T2134] EXT4-fs: Ignoring removed orlov option [ 86.537765][ T2134] EXT4-fs (loop1): Test dummy encryption mode enabled [ 86.544650][ T2138] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 86.556867][ T2134] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 86.558003][ T2138] ext4 filesystem being mounted at /root/syzkaller-testdir1764589564/syzkaller.WlyKGY/55/file0 supports timestamps until 2038 (0x7fffffff) [ 86.600819][ T2134] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 86.616302][ T1347] EXT4-fs (loop3): unmounting filesystem. [ 86.628972][ T28] audit: type=1400 audit(1718063335.839:295): avc: denied { create } for pid=2155 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.645321][ T2134] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 86.656671][ T2134] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 86.666503][ T309] syz-executor.2: attempt to access beyond end of device [ 86.666503][ T309] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 86.685948][ T28] audit: type=1400 audit(1718063335.869:296): avc: denied { write } for pid=2155 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.715583][ T28] audit: type=1400 audit(1718063335.879:297): avc: denied { relabelfrom } for pid=2153 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 86.745453][ T2134] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 86.975003][ T2183] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 87.296352][ T312] EXT4-fs (loop1): unmounting filesystem. [ 87.596469][ T2214] loop1: detected capacity change from 0 to 40427 [ 87.603920][ T2214] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 87.623785][ T2214] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 87.643945][ T2214] F2FS-fs (loop1): invalid crc value [ 87.675347][ T2214] F2FS-fs (loop1): Found nat_bits in checkpoint [ 87.764107][ T2214] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 87.779570][ T2214] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 87.989648][ T2226] syz-executor.1: attempt to access beyond end of device [ 87.989648][ T2226] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.260259][ T312] syz-executor.1: attempt to access beyond end of device [ 88.260259][ T312] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 88.369562][ T397] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.376897][ T331] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 88.406194][ T2232] loop4: detected capacity change from 0 to 2048 [ 88.431044][ T2232] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.448493][ T2238] loop1: detected capacity change from 0 to 128 [ 88.468746][ T2231] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 88.500775][ T308] EXT4-fs (loop4): unmounting filesystem. [ 88.544206][ T2244] loop4: detected capacity change from 0 to 256 [ 88.553174][ T2244] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 88.583864][ T2246] loop4: detected capacity change from 0 to 256 [ 88.601079][ T2246] exFAT-fs (loop4): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 88.619559][ T397] usb 1-1: Using ep0 maxpacket: 8 [ 88.624461][ T331] usb 3-1: Using ep0 maxpacket: 8 [ 88.800007][ T397] usb 1-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 88.811398][ T397] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 88.820616][ T397] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.960589][ T331] usb 3-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 88.970856][ T331] usb 3-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 88.978895][ T331] usb 3-1: Product: syz [ 88.983283][ T331] usb 3-1: Manufacturer: syz [ 88.988122][ T331] usb 3-1: SerialNumber: syz [ 89.010103][ T331] usb 3-1: config 0 descriptor?? [ 89.129807][ T397] usb 1-1: string descriptor 0 read error: -71 [ 89.138780][ T397] hub 1-1:32.0: USB hub found [ 89.239658][ T397] hub 1-1:32.0: config failed, can't read hub descriptor (err -22) [ 89.409212][ T2256] loop1: detected capacity change from 0 to 128 [ 89.418802][ T2256] EXT4-fs: Ignoring removed nobh option [ 89.426536][ T2256] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.436304][ T2256] ext4 filesystem being mounted at /root/syzkaller-testdir3093048082/syzkaller.wcSRKe/91/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 89.439990][ T397] usb 1-1: USB disconnect, device number 6 [ 89.492123][ T312] EXT4-fs (loop1): unmounting filesystem. [ 89.522957][ T2260] loop1: detected capacity change from 0 to 2048 [ 89.543570][ T2260] EXT4-fs: Ignoring removed orlov option [ 89.560073][ T2260] EXT4-fs (loop1): Test dummy encryption mode enabled [ 89.572100][ T2260] EXT4-fs error (device loop1): __ext4_fill_super:5386: inode #2: comm syz-executor.1: casefold flag without casefold feature [ 89.585465][ T2260] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 89.586178][ T2264] device vlan0 entered promiscuous mode [ 89.598218][ T2260] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 89.607890][ T2260] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.889547][ T432] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 90.309622][ T432] usb 5-1: config 0 has an invalid interface number: 33 but max is 1 [ 90.317696][ T432] usb 5-1: config 0 has no interface number 1 [ 90.323694][ T432] usb 5-1: config 0 interface 33 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 90.333314][ T432] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 90.390209][ T312] EXT4-fs (loop1): unmounting filesystem. [ 90.439812][ T2276] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.539628][ T432] usb 5-1: New USB device found, idVendor=2100, idProduct=9e54, bcdDevice=a5.9e [ 90.548547][ T432] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.556924][ T432] usb 5-1: Product: syz [ 90.561161][ T432] usb 5-1: Manufacturer: syz [ 90.565609][ T432] usb 5-1: SerialNumber: syz [ 90.573676][ T432] usb 5-1: config 0 descriptor?? [ 90.620410][ T432] ftdi_sio 5-1:0.33: FTDI USB Serial Device converter detected [ 90.632162][ T432] ftdi_sio ttyUSB0: unknown device type: 0xa59e [ 90.646969][ T432] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 90.662775][ T432] ftdi_sio ttyUSB1: unknown device type: 0xa59e [ 90.676244][ T2289] device veth1_macvtap left promiscuous mode [ 90.823886][ T507] usb 5-1: USB disconnect, device number 5 [ 90.831382][ T507] ftdi_sio 5-1:0.33: device disconnected [ 90.840311][ T507] ftdi_sio 5-1:0.0: device disconnected [ 90.850669][ T2278] syz-executor.0 (2278) used greatest stack depth: 20968 bytes left [ 90.895542][ T432] usb 3-1: USB disconnect, device number 7 [ 91.093965][ T2308] loop0: detected capacity change from 0 to 40427 [ 91.101161][ T2308] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 91.108732][ T2308] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 91.117814][ T2308] F2FS-fs (loop0): invalid crc value [ 91.126910][ T2308] F2FS-fs (loop0): Found nat_bits in checkpoint [ 91.176325][ T2308] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 91.183310][ T2308] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 91.245743][ T2330] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.266361][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 91.266377][ T28] audit: type=1400 audit(1718063340.479:319): avc: denied { create } for pid=2332 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.297952][ T28] audit: type=1400 audit(1718063340.479:320): avc: denied { write } for pid=2332 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 91.372666][ T2340] syz-executor.0: attempt to access beyond end of device [ 91.372666][ T2340] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.752250][ T28] audit: type=1400 audit(1718063340.969:321): avc: denied { name_bind } for pid=2362 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 91.836848][ T313] syz-executor.0: attempt to access beyond end of device [ 91.836848][ T313] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 92.640456][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Dropping request. Check SNMP counters. [ 92.655433][ T28] audit: type=1400 audit(1718063341.869:322): avc: denied { create } for pid=2395 comm="syz-executor.4" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 92.693911][ T28] audit: type=1400 audit(1718063341.889:323): avc: denied { ioctl } for pid=2395 comm="syz-executor.4" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=21016 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 93.407333][ T2416] loop0: detected capacity change from 0 to 2048 [ 93.469982][ T2416] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 93.553960][ T28] audit: type=1400 audit(1718063342.769:324): avc: denied { mount } for pid=2425 comm="syz-executor.3" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 93.620424][ T28] audit: type=1400 audit(1718063342.789:325): avc: denied { mounton } for pid=2425 comm="syz-executor.3" path="/root/syzkaller-testdir1764589564/syzkaller.WlyKGY/77/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 93.649809][ T2416] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 93.733067][ T431] ------------[ cut here ]------------ [ 93.738495][ T431] kernel BUG at fs/ext4/inode.c:2749! [ 93.744682][ T431] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 93.750582][ T431] CPU: 0 PID: 431 Comm: kworker/u4:4 Not tainted 6.1.78-syzkaller-00164-gac9706483e98 #0 [ 93.760209][ T431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 93.770106][ T431] Workqueue: writeback wb_workfn (flush-7:0) [ 93.775922][ T431] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 93.781481][ T431] Code: cd 80 ff 31 ff 89 de e8 83 cd 80 ff 45 84 f6 75 2a e8 e9 ca 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 d5 ca 80 ff <0f> 0b e8 ce ca 80 ff e8 d5 d6 0b ff e9 46 c3 ff ff e8 bf ca 80 ff [ 93.800920][ T431] RSP: 0018:ffffc90009da7000 EFLAGS: 00010293 [ 93.806815][ T431] RAX: ffffffff81f4a92b RBX: 0000008000000000 RCX: ffff888112691440 [ 93.814625][ T431] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 93.822439][ T431] RBP: ffffc90009da7410 R08: ffffffff81f4708b R09: ffffed1027bbc179 [ 93.830248][ T431] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810eaee000 [ 93.838147][ T431] R13: ffff88813dde0d00 R14: 000000c410000000 R15: ffffc90009da72e0 [ 93.846063][ T431] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 93.854824][ T431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 93.861248][ T431] CR2: 0000000020064000 CR3: 000000011363f000 CR4: 00000000003506b0 [ 93.869062][ T431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 93.876870][ T431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 93.884686][ T431] Call Trace: [ 93.887813][ T431] [ 93.890585][ T431] ? __die_body+0x62/0xb0 [ 93.894753][ T431] ? die+0x88/0xb0 [ 93.898315][ T431] ? do_trap+0x103/0x330 [ 93.902387][ T431] ? notify_die+0x1b0/0x280 [ 93.906816][ T431] ? ext4_writepages+0x3fab/0x3fd0 [ 93.911762][ T431] ? handle_invalid_op+0x95/0xc0 [ 93.916534][ T431] ? ext4_writepages+0x3fab/0x3fd0 [ 93.921486][ T431] ? exc_invalid_op+0x32/0x50 [ 93.925998][ T431] ? asm_exc_invalid_op+0x1b/0x20 [ 93.930859][ T431] ? ext4_writepages+0x70b/0x3fd0 [ 93.935731][ T431] ? ext4_writepages+0x3fab/0x3fd0 [ 93.940666][ T431] ? ext4_writepages+0x3fab/0x3fd0 [ 93.945714][ T431] ? dev_forward_skb+0x50/0x50 [ 93.950307][ T431] ? debug_smp_processor_id+0x17/0x20 [ 93.955517][ T431] ? ext4_read_folio+0x240/0x240 [ 93.960278][ T431] ? cpudl_cleanup+0x40/0x40 [ 93.964706][ T431] ? xas_load+0x39d/0x3b0 [ 93.968874][ T431] ? __update_load_avg_cfs_rq+0xb1/0x2f0 [ 93.974345][ T431] ? __kasan_check_write+0x14/0x20 [ 93.979296][ T431] ? enqueue_task_fair+0xe57/0x24c0 [ 93.984324][ T431] ? ext4_read_folio+0x240/0x240 [ 93.989098][ T431] do_writepages+0x385/0x620 [ 93.993525][ T431] ? __writepage+0x130/0x130 [ 93.997955][ T431] ? __kasan_check_write+0x14/0x20 [ 94.002899][ T431] __writeback_single_inode+0xdc/0xb80 [ 94.008194][ T431] writeback_sb_inodes+0xb32/0x1910 [ 94.013227][ T431] ? _raw_spin_lock+0xa4/0x1b0 [ 94.017829][ T431] ? queue_io+0x520/0x520 [ 94.021990][ T431] ? __writeback_inodes_wb+0x3f0/0x3f0 [ 94.027287][ T431] ? queue_io+0x3d0/0x520 [ 94.031450][ T431] ? memset+0x35/0x40 [ 94.035272][ T431] wb_writeback+0x3b9/0x9f0 [ 94.039612][ T431] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 94.045422][ T431] ? set_worker_desc+0x158/0x1c0 [ 94.050198][ T431] ? cpudl_cleanup+0x40/0x40 [ 94.054629][ T431] ? __kasan_check_write+0x14/0x20 [ 94.059572][ T431] wb_workfn+0x399/0x1030 [ 94.063745][ T431] ? inode_wait_for_writeback+0x280/0x280 [ 94.069292][ T431] ? native_set_ldt+0x130/0x130 [ 94.073980][ T431] ? kthread_data+0x53/0xc0 [ 94.078321][ T431] ? _raw_spin_unlock+0x4c/0x70 [ 94.083005][ T431] ? finish_task_switch+0x167/0x7b0 [ 94.088041][ T431] ? __kasan_check_read+0x11/0x20 [ 94.092899][ T431] ? read_word_at_a_time+0x12/0x20 [ 94.097846][ T431] ? strscpy+0x9c/0x260 [ 94.101842][ T431] process_one_work+0x73d/0xcb0 [ 94.106529][ T431] worker_thread+0xa60/0x1260 [ 94.111055][ T431] kthread+0x26d/0x300 [ 94.114948][ T431] ? worker_clr_flags+0x1a0/0x1a0 [ 94.119806][ T431] ? kthread_blkcg+0xd0/0xd0 [ 94.124233][ T431] ret_from_fork+0x1f/0x30 [ 94.128488][ T431] [ 94.131347][ T431] Modules linked in: 2024/06/10 23:49:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 94.340682][ T308] syz-executor.4 (308) used greatest stack depth: 20424 bytes left [ 94.377420][ T431] ---[ end trace 0000000000000000 ]--- [ 94.382879][ T431] RIP: 0010:ext4_writepages+0x3fab/0x3fd0 [ 94.388437][ T431] Code: cd 80 ff 31 ff 89 de e8 83 cd 80 ff 45 84 f6 75 2a e8 e9 ca 80 ff 49 bc 00 00 00 00 00 fc ff df e9 6e f6 ff ff e8 d5 ca 80 ff <0f> 0b e8 ce ca 80 ff e8 d5 d6 0b ff e9 46 c3 ff ff e8 bf ca 80 ff [ 94.409340][ T431] RSP: 0018:ffffc90009da7000 EFLAGS: 00010293 [ 94.411540][ T28] audit: type=1400 audit(1718063343.629:326): avc: denied { unmount } for pid=1347 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 94.437519][ T431] [ 94.439753][ T431] RAX: ffffffff81f4a92b RBX: 0000008000000000 RCX: ffff888112691440 [ 94.448552][ T431] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 94.456618][ T431] RBP: ffffc90009da7410 R08: ffffffff81f4708b R09: ffffed1027bbc179 [ 94.469189][ T431] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88810eaee000 [ 94.477515][ T431] R13: ffff88813dde0d00 R14: 000000c410000000 R15: ffffc90009da72e0 [ 94.485561][ T431] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 94.496921][ T431] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 94.503498][ T431] CR2: 0000001b2fd31000 CR3: 0000000136017000 CR4: 00000000003506b0 [ 94.511454][ T431] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 94.519636][ T431] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 94.527430][ T431] Kernel panic - not syncing: Fatal exception [ 94.533678][ T431] Kernel Offset: disabled [ 94.537808][ T431] Rebooting in 86400 seconds..