last executing test programs: 9.600167843s ago: executing program 0 (id=1205): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000002480)={'syz', 0x3}, &(0x7f00000024c0)='\x00', 0x0) 8.367978147s ago: executing program 2 (id=1207): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) fcntl$lock(r2, 0x24, &(0x7f0000000040)={0x0, 0x2, 0x4000000000060d2, 0xfffffffffffffffa}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000102, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x26ead31a, 0x8000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) pwritev2(r5, &(0x7f0000001180)=[{&(0x7f0000001080)='M', 0x1}], 0x1, 0xe94, 0x3, 0x2) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x40884) 8.295148468s ago: executing program 0 (id=1208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.562926883s ago: executing program 0 (id=1212): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) 6.953438845s ago: executing program 2 (id=1213): close(0x3) io_uring_setup(0x5f2b, &(0x7f0000000000)={0x0, 0x33b4, 0x22, 0x0, 0x2b5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 6.787310398s ago: executing program 0 (id=1215): fsopen(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='Q', 0x1, 0x200980) 5.732021538s ago: executing program 3 (id=1217): sched_setscheduler(0x0, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 5.731713099s ago: executing program 4 (id=1218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) 5.608307691s ago: executing program 4 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 4.954982714s ago: executing program 2 (id=1220): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x2000000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x20000) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ipvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x20048004) 4.935920934s ago: executing program 1 (id=1221): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 4.842851186s ago: executing program 3 (id=1222): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.764324707s ago: executing program 1 (id=1223): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001640)={0xfc, {"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", 0x1000}}, 0x1066) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) truncate(0x0, 0x2) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000540)={0x2020}, 0x2020) syz_open_dev$tty20(0xc, 0x4, 0x0) 4.713037199s ago: executing program 4 (id=1224): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 3.6157643s ago: executing program 3 (id=1225): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') getdents64(r0, &(0x7f0000001780)=""/120, 0x78) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) 3.59963749s ago: executing program 2 (id=1226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 3.537324551s ago: executing program 3 (id=1227): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r0}, 0x18) syz_io_uring_setup(0x893, &(0x7f0000000280)={0x0, 0xaee4, 0x8, 0x1, 0x220}, &(0x7f0000000000), &(0x7f0000000340)) 3.520732552s ago: executing program 2 (id=1228): ftruncate(0xffffffffffffffff, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005a80)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c61636c2c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474722c6673796e635f6d6f64653d706f7369782c646973636172645f756e69743d7365676d656e742c6261636b67726f756e645f67633d6f6e2c6e6f696e6c696e655f78617474722c646973636172645f756e69743d626c6f636b2c6673796e635f6d6f64653d7374726963742c617467632c657874656e745f63616368652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303031343033302c00271d57a599b8b169a579679e220c689eaaec4fa6229021e75c68a687d319b615573b0b0ceefba8e2e2419434463974ef8174b66469344931de0ccad650792761"], 0x1, 0x550b, &(0x7f0000000540)="$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") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000}, 0x4048001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) 3.450704083s ago: executing program 4 (id=1229): ftruncate(0xffffffffffffffff, 0x80079a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="200000001000010700000000e9ffffff0a0000000c0002006e6c3830323131"], 0x20}}, 0x400c0) 3.437409733s ago: executing program 0 (id=1230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) preadv2(r6, &(0x7f0000000040)=[{&(0x7f0000000100)=""/65, 0x41}], 0x1, 0x2, 0x0, 0x1) 3.428345593s ago: executing program 1 (id=1231): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x13c) 3.350476355s ago: executing program 3 (id=1232): close(0x3) io_uring_setup(0x5f2b, &(0x7f0000000000)={0x0, 0x33b4, 0x22, 0x0, 0x2b5}) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 3.148125159s ago: executing program 1 (id=1233): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 1.368401504s ago: executing program 3 (id=1234): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0xa5, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@delalloc}, {@sysvgroups}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x3}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbf4, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1.132617479s ago: executing program 4 (id=1235): socket$inet6_tcp(0xa, 0x1, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) 321.598325ms ago: executing program 0 (id=1236): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x2000000, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r3, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x20000) syz_open_procfs(0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'ipvlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc1}, 0x2400c800) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x200000c0}, 0x20048004) 312.040814ms ago: executing program 1 (id=1237): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0xffffffffffffffff) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x6, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0x8, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 128.640918ms ago: executing program 2 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 30.83678ms ago: executing program 1 (id=1239): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0xa5, 0x55a8, &(0x7f00000014c0)="$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") syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000680)={[{@delalloc}, {@sysvgroups}, {@nodioread_nolock}, {@test_dummy_encryption_v1}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x3}}, {@minixdf}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbf4, &(0x7f0000001740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000280)={0x2020}, 0x2020) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000180), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 0s ago: executing program 4 (id=1240): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {}, 0x0, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.251' (ED25519) to the list of known hosts. [ 26.788627][ T28] audit: type=1400 audit(1757084039.443:64): avc: denied { mounton } for pid=274 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.790164][ T274] cgroup: Unknown subsys name 'net' [ 26.811337][ T28] audit: type=1400 audit(1757084039.443:65): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.838640][ T28] audit: type=1400 audit(1757084039.473:66): avc: denied { unmount } for pid=274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.838849][ T274] cgroup: Unknown subsys name 'devices' [ 26.949575][ T274] cgroup: Unknown subsys name 'hugetlb' [ 26.955205][ T274] cgroup: Unknown subsys name 'rlimit' [ 27.099986][ T28] audit: type=1400 audit(1757084039.753:67): avc: denied { setattr } for pid=274 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.123220][ T28] audit: type=1400 audit(1757084039.753:68): avc: denied { mounton } for pid=274 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.148046][ T28] audit: type=1400 audit(1757084039.753:69): avc: denied { mount } for pid=274 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.160307][ T276] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.180913][ T28] audit: type=1400 audit(1757084039.833:70): avc: denied { relabelto } for pid=276 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.206331][ T28] audit: type=1400 audit(1757084039.833:71): avc: denied { write } for pid=276 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.271048][ T28] audit: type=1400 audit(1757084039.923:72): avc: denied { read } for pid=274 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.296658][ T28] audit: type=1400 audit(1757084039.923:73): avc: denied { open } for pid=274 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.296842][ T274] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.726755][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.733890][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.741659][ T282] device bridge_slave_0 entered promiscuous mode [ 28.767443][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.774495][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.782118][ T282] device bridge_slave_1 entered promiscuous mode [ 28.831566][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.838689][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.846279][ T283] device bridge_slave_0 entered promiscuous mode [ 28.869433][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.876504][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.884130][ T283] device bridge_slave_1 entered promiscuous mode [ 28.929738][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.936811][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.944457][ T284] device bridge_slave_0 entered promiscuous mode [ 28.972734][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.979900][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.987626][ T284] device bridge_slave_1 entered promiscuous mode [ 29.072655][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.079788][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.087382][ T285] device bridge_slave_0 entered promiscuous mode [ 29.111130][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.118222][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.125880][ T286] device bridge_slave_0 entered promiscuous mode [ 29.132950][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.140055][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.148818][ T285] device bridge_slave_1 entered promiscuous mode [ 29.168241][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.175330][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.182867][ T286] device bridge_slave_1 entered promiscuous mode [ 29.312379][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.319475][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.326773][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.333833][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.353596][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.360700][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.368077][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.375125][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.464164][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.471306][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.478637][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.485685][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.496372][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.503488][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.510820][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.517877][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.534035][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.541158][ T284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.548528][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.555589][ T284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.580693][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.588209][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.595380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.603729][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.611252][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.618695][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.625956][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.633680][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.641006][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.648339][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.655834][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.664006][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.671536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.687665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.696122][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.704501][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.711560][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.719516][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.728134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.736329][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.743400][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.762230][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.770759][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.779109][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.786183][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.807166][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.814765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.822408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.830972][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.839429][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.846499][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.854198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.862857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.871166][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.878219][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.902890][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.911453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.919845][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.926889][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.934487][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.942204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.949950][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.967252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.975572][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.983768][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.991992][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.000054][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.008622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.016691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.024874][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.036655][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.044384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.069627][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.077733][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.086160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.094759][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.101847][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.109317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.118186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.126465][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.133524][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.141233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.149664][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.158117][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.166431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.194209][ T283] device veth0_vlan entered promiscuous mode [ 30.202902][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.211862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.220017][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.228743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.237081][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.245686][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.252815][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.260300][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.268885][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.277038][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.284117][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.291551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.299781][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.308565][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.316129][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.326873][ T282] device veth0_vlan entered promiscuous mode [ 30.337376][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.345600][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.353944][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.362016][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.374162][ T285] device veth0_vlan entered promiscuous mode [ 30.388092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.396309][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.403952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.411812][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.420157][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.428379][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.436459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.448788][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.460717][ T282] device veth1_macvtap entered promiscuous mode [ 30.471981][ T285] device veth1_macvtap entered promiscuous mode [ 30.479551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.488130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.495949][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.504422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.529756][ T283] device veth1_macvtap entered promiscuous mode [ 30.538737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.548806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.557094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.564758][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.572513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.581038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.589719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.598242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.606608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.615013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.626934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.639633][ T286] device veth0_vlan entered promiscuous mode [ 30.653455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.662135][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.673999][ T284] device veth0_vlan entered promiscuous mode [ 30.681285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.689856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.698504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.720981][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.728890][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 30.732251][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.743676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.754175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.781756][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.797504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.820964][ T284] device veth1_macvtap entered promiscuous mode [ 30.835835][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.844216][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.854319][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.875382][ T286] device veth1_macvtap entered promiscuous mode [ 30.917396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.930585][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.940087][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.948878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.957688][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.983388][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.994216][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.082060][ T353] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 31.228158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.309758][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.432131][ T360] serio: Serial port ttyS3 [ 31.545563][ T361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=361 comm=syz.1.2 [ 31.695136][ T365] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 31.757824][ T353] syz.0.6 (353) used greatest stack depth: 22232 bytes left [ 31.799162][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 31.799183][ T28] audit: type=1400 audit(1757084044.433:115): avc: denied { create } for pid=364 comm="syz.3.10" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.839694][ T28] audit: type=1400 audit(1757084044.433:116): avc: denied { map } for pid=364 comm="syz.3.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.863861][ T28] audit: type=1400 audit(1757084044.433:117): avc: denied { read write } for pid=364 comm="syz.3.10" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 31.904124][ T28] audit: type=1400 audit(1757084044.553:118): avc: denied { write } for pid=364 comm="syz.3.10" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 32.298475][ T374] serio: Serial port ptm0 [ 32.386535][ T374] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 32.436270][ T379] netlink: 'syz.1.12': attribute type 4 has an invalid length. [ 32.487919][ T374] syz.1.12 (374) used greatest stack depth: 20672 bytes left [ 32.536142][ T28] audit: type=1400 audit(1757084045.183:119): avc: denied { read write } for pid=382 comm="syz.1.15" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.589646][ T28] audit: type=1400 audit(1757084045.213:120): avc: denied { open } for pid=382 comm="syz.1.15" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.662201][ T28] audit: type=1400 audit(1757084045.213:121): avc: denied { ioctl } for pid=382 comm="syz.1.15" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.718557][ T28] audit: type=1400 audit(1757084045.303:122): avc: denied { create } for pid=372 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.947294][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.965784][ T28] audit: type=1400 audit(1757084045.313:123): avc: denied { create } for pid=372 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.066747][ T28] audit: type=1400 audit(1757084045.313:124): avc: denied { write } for pid=372 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.187222][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 33.200704][ T24] usb 2-1: config 2 interface 0 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 33.223587][ T24] usb 2-1: config 2 interface 0 has no altsetting 0 [ 33.241389][ T24] usb 2-1: New USB device found, idVendor=04e2, idProduct=141a, bcdDevice=ca.10 [ 33.256693][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.284516][ T24] usb 2-1: Product: syz [ 33.289429][ T392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18'. [ 33.303900][ T24] usb 2-1: Manufacturer: syz [ 33.308789][ T24] usb 2-1: SerialNumber: syz [ 33.567814][ T24] usb 2-1: USB disconnect, device number 2 [ 33.580402][ T411] serio: Serial port ptm0 [ 33.767215][ T309] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 33.870261][ T417] syz.0.28[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.872733][ T417] syz.0.28[417] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.029278][ T346] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 35.167878][ T309] usb 4-1: Using ep0 maxpacket: 16 [ 35.174407][ T309] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 35.205155][ T309] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 35.219250][ T426] syz.0.31[426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.219335][ T426] syz.0.31[426] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.260843][ T309] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 35.281464][ T346] usb 5-1: Using ep0 maxpacket: 32 [ 35.288801][ T346] usb 5-1: config 6 has an invalid interface number: 250 but max is 0 [ 35.313455][ T346] usb 5-1: config 6 has no interface number 0 [ 35.356017][ T420] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 35.376023][ T430] loop0: detected capacity change from 0 to 512 [ 35.382787][ T346] usb 5-1: config 6 interface 250 has no altsetting 0 [ 35.392793][ T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.406367][ T346] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=a9.d1 [ 35.415937][ T309] usb 4-1: config 0 descriptor?? [ 35.421759][ T346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.425447][ T430] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 35.430110][ T346] usb 5-1: Product: syz [ 35.430129][ T346] usb 5-1: Manufacturer: syz [ 35.430148][ T346] usb 5-1: SerialNumber: syz [ 35.457046][ T430] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.649394][ T346] snd-usb-audio: probe of 5-1:6.250 failed with error -71 [ 35.664756][ T346] usb 5-1: USB disconnect, device number 2 [ 37.208694][ T451] syz.1.36[451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.208780][ T451] syz.1.36[451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.787874][ T24] usb 4-1: USB disconnect, device number 2 [ 38.834658][ T456] syz.3.38 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.994959][ T282] EXT4-fs (loop0): unmounting filesystem. [ 39.104006][ T460] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 39.377676][ T467] tipc: Started in network mode [ 39.382726][ T467] tipc: Node identity 1ee1514e98a3, cluster identity 4711 [ 39.390772][ T467] tipc: Enabled bearer , priority 0 [ 39.398834][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 39.398847][ T28] audit: type=1400 audit(1757084052.053:154): avc: denied { ioctl } for pid=466 comm="syz.4.42" path="socket:[16134]" dev="sockfs" ino=16134 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.437975][ T467] device syzkaller0 entered promiscuous mode [ 39.480244][ T467] tipc: Resetting bearer [ 39.488155][ T466] tipc: Resetting bearer [ 39.495822][ T466] tipc: Disabling bearer [ 39.625432][ T469] loop0: detected capacity change from 0 to 40427 [ 39.635346][ T469] F2FS-fs (loop0): fault_injection options not supported [ 39.644106][ T469] F2FS-fs (loop0): invalid crc value [ 39.735178][ T469] F2FS-fs (loop0): Found nat_bits in checkpoint [ 39.839478][ T479] syz.4.43[479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.840796][ T479] syz.4.43[479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.890524][ T469] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 41.984263][ T486] serio: Serial port ptm0 [ 42.028269][ T28] audit: type=1400 audit(1757084054.683:155): avc: denied { ioctl } for pid=468 comm="syz.0.37" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16141 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 42.030116][ T483] netlink: 'syz.3.44': attribute type 4 has an invalid length. [ 42.153800][ T282] syz-executor: attempt to access beyond end of device [ 42.153800][ T282] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 42.197262][ T28] audit: type=1400 audit(1757084054.773:156): avc: denied { read } for pid=468 comm="syz.0.37" path="/8/file1/file1" dev="loop0" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.280958][ T489] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 42.657673][ T491] serio: Serial port ttyS3 [ 42.738941][ T493] loop0: detected capacity change from 0 to 512 [ 42.772488][ T493] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 42.782045][ T493] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.946631][ T502] syz.4.49[502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.946723][ T502] syz.4.49[502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 43.487247][ T302] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 44.836605][ T516] syz.3.53 (516) used greatest stack depth: 20600 bytes left [ 44.877271][ T302] usb 5-1: Using ep0 maxpacket: 16 [ 44.900777][ T302] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 44.957196][ T302] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 44.994334][ T302] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 45.051224][ T302] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.080964][ T302] usb 5-1: config 0 descriptor?? [ 45.266981][ T28] audit: type=1400 audit(1757084057.913:157): avc: denied { create } for pid=524 comm="syz.3.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.757897][ T282] EXT4-fs (loop0): unmounting filesystem. [ 46.047713][ T28] audit: type=1400 audit(1757084058.693:158): avc: denied { compute_member } for pid=532 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 46.347544][ T543] syz.0.58[543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.347626][ T543] syz.0.58[543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.226772][ T24] usb 5-1: USB disconnect, device number 3 [ 49.433047][ T559] serio: Serial port ptm0 [ 49.495320][ T563] syz.4.64[563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.495643][ T563] syz.4.64[563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.397128][ C0] sched: RT throttling activated [ 50.401682][ T562] tipc: Started in network mode [ 50.437829][ T562] tipc: Node identity ba3d1346304e, cluster identity 4711 [ 50.445089][ T562] tipc: Enabled bearer , priority 0 [ 50.473773][ T568] loop3: detected capacity change from 0 to 16 [ 50.495607][ T570] serio: Serial port ptm0 [ 50.510871][ T562] tipc: Resetting bearer [ 50.520756][ T561] tipc: Disabling bearer [ 50.527667][ T568] erofs: (device loop3): mounted with root inode @ nid 36. [ 50.566978][ T573] loop4: detected capacity change from 0 to 256 [ 50.588268][ T575] loop1: detected capacity change from 0 to 16 [ 50.598423][ T573] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 50.618868][ T28] audit: type=1400 audit(1757084063.273:159): avc: denied { remove_name } for pid=572 comm="syz.4.69" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.625740][ T575] erofs: (device loop1): mounted with root inode @ nid 36. [ 50.674698][ T28] audit: type=1400 audit(1757084063.323:160): avc: denied { rename } for pid=572 comm="syz.4.69" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.744131][ T28] audit: type=1400 audit(1757084063.323:161): avc: denied { rmdir } for pid=572 comm="syz.4.69" name="file0" dev="loop4" ino=1048601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 51.731818][ T586] serio: Serial port ptm0 [ 51.863560][ T589] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 51.918018][ T589] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 51.929040][ T589] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 51.984531][ T586] netlink: 'syz.0.74': attribute type 4 has an invalid length. [ 53.489123][ T627] loop2: detected capacity change from 0 to 2048 [ 53.523018][ T627] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 53.558137][ T28] audit: type=1400 audit(1757084066.213:162): avc: denied { mounton } for pid=626 comm="syz.2.86" path="/17/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.612991][ T284] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 53.636954][ T284] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 53.664479][ T284] EXT4-fs (loop2): unmounting filesystem. [ 53.668468][ T28] audit: type=1400 audit(1757084066.313:163): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 53.704204][ T28] audit: type=1400 audit(1757084066.343:164): avc: denied { read write } for pid=634 comm="syz.3.89" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.728259][ T28] audit: type=1400 audit(1757084066.343:165): avc: denied { open } for pid=634 comm="syz.3.89" path="/dev/uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 53.791648][ T28] audit: type=1400 audit(1757084066.353:166): avc: denied { create } for pid=634 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 53.819306][ T28] audit: type=1400 audit(1757084066.353:167): avc: denied { create } for pid=634 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.836588][ T640] loop4: detected capacity change from 0 to 16 [ 53.912847][ T640] erofs: (device loop4): mounted with root inode @ nid 36. [ 54.135581][ T648] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 55.280285][ T666] syz.3.94[666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.280613][ T666] syz.3.94[666] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.343248][ T683] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 57.502276][ T693] loop0: detected capacity change from 0 to 512 [ 57.532730][ T690] device erspan1 entered promiscuous mode [ 57.574444][ T693] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 57.609753][ T693] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.660938][ T702] loop1: detected capacity change from 0 to 16 [ 57.741513][ T704] syz.3.106[704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.741861][ T704] syz.3.106[704] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.556563][ T702] erofs: (device loop1): mounted with root inode @ nid 36. [ 59.360343][ T282] EXT4-fs (loop0): unmounting filesystem. [ 60.520400][ T715] syz.3.110[715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.520579][ T715] syz.3.110[715] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.065894][ T28] audit: type=1400 audit(1757084075.713:168): avc: denied { read } for pid=722 comm="syz.0.112" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.126093][ T727] serio: Serial port ptm0 [ 63.130839][ T28] audit: type=1400 audit(1757084075.753:169): avc: denied { open } for pid=722 comm="syz.0.112" path="net:[4026532292]" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.166271][ T28] audit: type=1400 audit(1757084075.753:170): avc: denied { create } for pid=722 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.222199][ T727] netlink: 'syz.4.113': attribute type 4 has an invalid length. [ 63.258997][ T28] audit: type=1400 audit(1757084075.773:171): avc: denied { read } for pid=722 comm="syz.0.112" path="socket:[17818]" dev="sockfs" ino=17818 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.282779][ T739] loop4: detected capacity change from 0 to 512 [ 63.351986][ T743] syz.2.116[743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.352336][ T743] syz.2.116[743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 63.390436][ T739] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 63.522530][ T739] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.025002][ T758] device erspan1 entered promiscuous mode [ 65.278884][ T286] EXT4-fs (loop4): unmounting filesystem. [ 65.359157][ T769] loop4: detected capacity change from 0 to 512 [ 65.398478][ T769] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.121: casefold flag without casefold feature [ 65.426948][ T769] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.121: couldn't read orphan inode 15 (err -117) [ 65.440161][ T769] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 65.491177][ T765] loop2: detected capacity change from 0 to 40427 [ 65.516962][ T765] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 65.533276][ T765] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 65.542554][ T765] F2FS-fs (loop2): invalid crc value [ 65.549159][ T765] F2FS-fs (loop2): Found nat_bits in checkpoint [ 65.590054][ T765] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 65.597296][ T765] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.297174][ T286] EXT4-fs (loop4): unmounting filesystem. [ 66.378471][ T790] overlayfs: conflicting lowerdir path [ 67.404118][ T797] loop3: detected capacity change from 0 to 512 [ 67.537947][ T797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 67.547403][ T352] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 67.567301][ T797] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.700267][ T808] loop2: detected capacity change from 0 to 16 [ 67.798178][ T352] usb 5-1: Using ep0 maxpacket: 8 [ 67.805757][ T352] usb 5-1: config 2 interface 0 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 67.819670][ T808] erofs: (device loop2): mounted with root inode @ nid 36. [ 67.850661][ T352] usb 5-1: config 2 interface 0 has no altsetting 0 [ 67.972582][ T352] usb 5-1: New USB device found, idVendor=04e2, idProduct=141a, bcdDevice=ca.10 [ 67.981861][ T352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.990193][ T352] usb 5-1: Product: syz [ 67.994461][ T352] usb 5-1: Manufacturer: syz [ 67.999804][ T352] usb 5-1: SerialNumber: syz [ 68.150106][ T812] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 68.207570][ T812] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 68.218626][ T812] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 68.318056][ T285] EXT4-fs (loop3): unmounting filesystem. [ 68.342473][ T352] usb 5-1: USB disconnect, device number 4 [ 68.467934][ T820] netlink: 12 bytes leftover after parsing attributes in process `syz.3.138'. [ 68.481349][ T820] bridge1: port 1(veth0_to_bond) entered blocking state [ 68.488395][ T820] bridge1: port 1(veth0_to_bond) entered disabled state [ 68.495831][ T820] device veth0_to_bond entered promiscuous mode [ 68.506429][ T820] bridge1: port 2(vlan2) entered blocking state [ 68.512949][ T820] bridge1: port 2(vlan2) entered disabled state [ 68.521909][ T820] device vlan2 entered promiscuous mode [ 69.332088][ T28] audit: type=1400 audit(1757084081.763:172): avc: denied { read } for pid=815 comm="syz.1.137" name="file0" dev="incremental-fs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.364631][ T28] audit: type=1400 audit(1757084081.763:173): avc: denied { open } for pid=815 comm="syz.1.137" path="/30/file0/file0" dev="incremental-fs" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.590237][ T839] loop0: detected capacity change from 0 to 512 [ 69.719934][ T839] EXT4-fs (loop0): too many log groups per flexible block group [ 69.729871][ T839] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 69.752609][ T837] loop3: detected capacity change from 0 to 40427 [ 69.762488][ T839] EXT4-fs (loop0): mount failed [ 69.771402][ T837] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 69.779292][ T837] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 69.788509][ T837] F2FS-fs (loop3): invalid crc value [ 69.795353][ T837] F2FS-fs (loop3): Found nat_bits in checkpoint [ 69.864150][ T837] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 69.872681][ T837] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 69.875745][ T850] loop0: detected capacity change from 0 to 512 [ 69.939869][ T850] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 69.949972][ T850] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.044289][ T867] 9pnet_fd: Insufficient options for proto=fd [ 71.051900][ T282] EXT4-fs (loop0): unmounting filesystem. [ 71.173839][ T875] 9pnet_fd: Insufficient options for proto=fd [ 71.650275][ T869] syz.0.154[869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.650347][ T869] syz.0.154[869] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.751848][ T882] loop0: detected capacity change from 0 to 512 [ 72.001364][ T889] syz.2.156[889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.001446][ T889] syz.2.156[889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.964683][ T882] EXT4-fs (loop0): too many log groups per flexible block group [ 73.983871][ T882] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 73.992226][ T882] EXT4-fs (loop0): mount failed [ 73.997450][ T888] overlayfs: conflicting lowerdir path [ 74.008721][ T28] audit: type=1400 audit(1757084086.663:174): avc: denied { setopt } for pid=891 comm="syz.1.159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.131873][ T896] loop1: detected capacity change from 0 to 512 [ 74.186287][ T880] loop4: detected capacity change from 0 to 40427 [ 74.196084][ T880] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 74.282867][ T896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 74.310370][ T896] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.345152][ T880] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 74.494246][ T880] F2FS-fs (loop4): invalid crc value [ 74.547096][ T880] F2FS-fs (loop4): Found nat_bits in checkpoint [ 74.615391][ T880] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 74.624713][ T880] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 75.016322][ T917] 9pnet_fd: Insufficient options for proto=fd [ 75.044106][ T919] loop0: detected capacity change from 0 to 512 [ 76.169326][ T919] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 76.183559][ T919] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.354646][ T939] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 78.789028][ T282] EXT4-fs (loop0): unmounting filesystem. [ 78.824420][ T947] 9pnet_fd: Insufficient options for proto=fd [ 78.857590][ T946] serio: Serial port ttyS3 [ 78.935492][ T283] EXT4-fs (loop1): unmounting filesystem. [ 78.970573][ T955] 9pnet_fd: Insufficient options for proto=fd [ 79.775500][ T968] loop3: detected capacity change from 0 to 2048 [ 79.791696][ T973] syz.0.183[973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.791827][ T973] syz.0.183[973] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.870302][ T977] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 80.001629][ T28] audit: type=1400 audit(1757084092.653:175): avc: denied { sqpoll } for pid=972 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 80.031366][ T979] netlink: 12 bytes leftover after parsing attributes in process `syz.1.184'. [ 80.139328][ T968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 80.167476][ T981] bridge1: port 1(veth0_to_bond) entered blocking state [ 80.185607][ T981] bridge1: port 1(veth0_to_bond) entered disabled state [ 80.194736][ T981] device veth0_to_bond entered promiscuous mode [ 80.201610][ T285] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 80.216626][ T285] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 80.220136][ T979] bridge1: port 2(vlan2) entered blocking state [ 80.231634][ T979] bridge1: port 2(vlan2) entered disabled state [ 80.238834][ T979] device vlan2 entered promiscuous mode [ 80.243514][ T285] EXT4-fs (loop3): unmounting filesystem. [ 80.291602][ T28] audit: type=1400 audit(1757084092.943:176): avc: denied { ioctl } for pid=989 comm="syz.1.187" path="socket:[18867]" dev="sockfs" ino=18867 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.336262][ T28] audit: type=1400 audit(1757084092.943:177): avc: denied { write } for pid=989 comm="syz.1.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 80.464004][ T996] 9pnet_fd: Insufficient options for proto=fd [ 81.335130][ T998] device erspan1 entered promiscuous mode [ 81.399842][ T1005] loop2: detected capacity change from 0 to 512 [ 81.427593][ T1005] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 81.440824][ T1005] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 81.487809][ T1005] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 81.507329][ T1012] syz.4.191[1012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.507412][ T1012] syz.4.191[1012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 81.522595][ T1005] EXT4-fs (loop2): 1 truncate cleaned up [ 81.567190][ T1005] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.106213][ T28] audit: type=1400 audit(1757084094.753:178): avc: denied { write } for pid=1004 comm="syz.2.193" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.140645][ T28] audit: type=1400 audit(1757084094.753:179): avc: denied { open } for pid=1004 comm="syz.2.193" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.176980][ T28] audit: type=1400 audit(1757084094.753:180): avc: denied { read } for pid=1004 comm="syz.2.193" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.217168][ T28] audit: type=1400 audit(1757084094.753:181): avc: denied { ioctl } for pid=1004 comm="syz.2.193" path="/39/file2/file1" dev="loop2" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 82.305183][ T1021] loop0: detected capacity change from 0 to 512 [ 82.326286][ T28] audit: type=1400 audit(1757084094.753:182): avc: denied { setattr } for pid=1004 comm="syz.2.193" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.373787][ T1021] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 82.386654][ T1021] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.472406][ T28] audit: type=1400 audit(1757084095.123:183): avc: denied { execute } for pid=1028 comm="syz.1.199" path="/40/file1" dev="tmpfs" ino=239 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 82.898902][ T1037] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 83.288350][ T284] EXT4-fs (loop2): unmounting filesystem. [ 83.331127][ T1042] 9pnet_fd: Insufficient options for proto=fd [ 83.435984][ T282] EXT4-fs (loop0): unmounting filesystem. [ 83.542967][ T1044] syz.3.202[1044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 83.543961][ T1044] syz.3.202[1044] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.610163][ T1071] 9pnet_fd: Insufficient options for proto=fd [ 87.183390][ T1078] tipc: Started in network mode [ 87.188401][ T1078] tipc: Node identity 7243e743fd9e, cluster identity 4711 [ 87.195590][ T1078] tipc: Enabled bearer , priority 0 [ 87.203448][ T1078] device syzkaller0 entered promiscuous mode [ 87.213210][ T1078] tipc: Resetting bearer [ 87.220303][ T1077] tipc: Resetting bearer [ 87.226795][ T1077] tipc: Disabling bearer [ 87.333074][ T1084] loop4: detected capacity change from 0 to 16 [ 87.363649][ T1084] erofs: (device loop4): mounted with root inode @ nid 36. [ 87.577178][ T718] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 87.668480][ T1095] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 87.680328][ T1095] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 87.691448][ T1095] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 87.807194][ T718] usb 2-1: Using ep0 maxpacket: 16 [ 87.815039][ T718] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 87.861684][ T1096] loop0: detected capacity change from 0 to 16 [ 87.868090][ T718] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 87.882531][ T1096] erofs: (device loop0): mounted with root inode @ nid 36. [ 87.889997][ T718] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 87.901342][ T718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.903374][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 87.910522][ T718] usb 2-1: config 0 descriptor?? [ 87.928109][ T1096] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 87.942038][ T718] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 88.419298][ T1101] syz.3.218[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 88.419713][ T1101] syz.3.218[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 89.521490][ T1108] loop4: detected capacity change from 0 to 512 [ 89.556769][ T1108] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 89.653152][ T1108] EXT4-fs (loop4): 1 truncate cleaned up [ 89.658344][ T1116] 9pnet: p9_errstr2errno: server reported unknown error @í0x0000000000000003 [ 89.663053][ T1108] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.334133][ T302] usb 2-1: USB disconnect, device number 3 [ 90.431226][ T1133] syz.2.226[1133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 90.431304][ T1133] syz.2.226[1133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.329792][ T1138] serio: Serial port ptm0 [ 91.553231][ T1147] loop0: detected capacity change from 0 to 16 [ 91.646417][ T1147] erofs: (device loop0): mounted with root inode @ nid 36. [ 91.761628][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 91.773991][ T1147] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 91.848578][ T1152] syz.2.233[1152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.848645][ T1152] syz.2.233[1152] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.891345][ T286] EXT4-fs (loop4): unmounting filesystem. [ 92.134867][ T1157] loop2: detected capacity change from 0 to 40427 [ 92.142286][ T1157] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 92.150202][ T1157] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 92.162800][ T1157] F2FS-fs (loop2): invalid crc value [ 92.170445][ T1157] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.208070][ T1157] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 92.215205][ T1157] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 92.984878][ T1173] 9pnet_fd: Insufficient options for proto=fd [ 93.077682][ T1176] overlayfs: missing 'lowerdir' [ 93.592329][ T1198] loop2: detected capacity change from 0 to 16 [ 93.633339][ T1198] erofs: (device loop2): mounted with root inode @ nid 36. [ 93.763114][ T1203] 9pnet_fd: Insufficient options for proto=fd [ 93.833217][ T1206] loop1: detected capacity change from 0 to 256 [ 93.927733][ T1208] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 93.978944][ T1208] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 93.989940][ T1208] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 94.039191][ T1206] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 94.194205][ T1210] netlink: 'syz.3.252': attribute type 4 has an invalid length. [ 94.216308][ T1212] loop1: detected capacity change from 0 to 16 [ 94.228742][ T1212] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.967190][ T1220] 9pnet_fd: Insufficient options for proto=fd [ 95.083845][ T1218] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 95.328454][ T1218] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 95.339418][ T1218] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 96.170319][ T1235] device erspan1 entered promiscuous mode [ 96.293179][ T1237] serio: Serial port ptm0 [ 96.309878][ T1229] loop2: detected capacity change from 0 to 40427 [ 96.322909][ T1229] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 96.338414][ T1229] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.355006][ T1229] F2FS-fs (loop2): invalid crc value [ 96.384629][ T1229] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.436712][ T1229] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.444062][ T1229] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.967384][ T28] audit: type=1400 audit(1757084109.613:184): avc: denied { read } for pid=1254 comm="syz.4.267" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.027807][ T28] audit: type=1400 audit(1757084109.653:185): avc: denied { open } for pid=1254 comm="syz.4.267" path="/dev/binderfs/binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.097544][ T28] audit: type=1400 audit(1757084109.673:186): avc: denied { ioctl } for pid=1254 comm="syz.4.267" path="/dev/binderfs/binder1" dev="binder" ino=14 ioctlcmd=0x6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.193249][ T1263] loop4: detected capacity change from 0 to 128 [ 97.200058][ T1263] ext4: Unknown parameter 'nouser_xattr' [ 97.215261][ T1263] loop4: detected capacity change from 0 to 512 [ 97.240632][ T1263] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.270: casefold flag without casefold feature [ 97.254390][ T1263] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.270: couldn't read orphan inode 15 (err -117) [ 97.318874][ T1271] loop1: detected capacity change from 0 to 512 [ 97.344881][ T1271] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 97.356292][ T1263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.383577][ T1271] EXT4-fs (loop1): 1 truncate cleaned up [ 97.389776][ T1271] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 98.267587][ T283] EXT4-fs (loop1): unmounting filesystem. [ 98.307043][ T1281] serio: Serial port ttyS3 [ 98.494684][ T1288] overlayfs: conflicting lowerdir path [ 98.841893][ T286] EXT4-fs (loop4): unmounting filesystem. [ 99.116215][ T1307] syz.4.282[1307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 99.116583][ T1307] syz.4.282[1307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.328999][ T1330] netlink: 'syz.4.291': attribute type 16 has an invalid length. [ 101.361268][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.369087][ T1330] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 101.413481][ T1330] device erspan1 left promiscuous mode [ 101.467396][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 101.496589][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.564666][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 101.587683][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.596344][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.604731][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.620495][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.629082][ T351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.868460][ T1343] loop2: detected capacity change from 0 to 40427 [ 101.875662][ T1343] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 101.883842][ T1343] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 101.903641][ T1343] F2FS-fs (loop2): invalid crc value [ 101.910911][ T1343] F2FS-fs (loop2): Found nat_bits in checkpoint [ 101.918639][ T1354] 9pnet_fd: Insufficient options for proto=fd [ 101.966422][ T1343] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 101.975679][ T1343] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 102.338782][ T1367] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 102.347680][ T1367] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 102.472255][ T1369] syz.0.299[1369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.472338][ T1369] syz.0.299[1369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.787219][ T28] audit: type=1400 audit(1757084117.213:187): avc: denied { bind } for pid=1378 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 105.051413][ T28] audit: type=1400 audit(1757084117.403:188): avc: denied { create } for pid=1378 comm="syz.0.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 105.289113][ T1404] syz.4.306[1404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 105.289506][ T1404] syz.4.306[1404] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.260229][ T1406] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 106.537273][ T28] audit: type=1400 audit(1757084118.913:189): avc: denied { unlink } for pid=1395 comm="syz.0.308" name="#27" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 106.749699][ T28] audit: type=1400 audit(1757084118.933:190): avc: denied { mount } for pid=1395 comm="syz.0.308" name="/" dev="overlay" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 106.877809][ T28] audit: type=1400 audit(1757084119.533:191): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 107.949336][ T1409] loop2: detected capacity change from 0 to 40427 [ 107.970017][ T1409] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 107.997176][ T1409] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 108.034089][ T1409] F2FS-fs (loop2): invalid crc value [ 108.097158][ T1432] loop1: detected capacity change from 0 to 1024 [ 108.106011][ T1432] EXT4-fs: Ignoring removed bh option [ 108.263326][ T1432] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 108.349034][ T1433] tipc: Enabled bearer , priority 0 [ 108.361868][ T1409] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.554652][ T1433] device syzkaller0 entered promiscuous mode [ 108.655681][ T1409] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 109.105139][ T1433] tipc: Resetting bearer [ 109.111401][ T1409] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 109.131759][ T1431] tipc: Resetting bearer [ 109.154822][ T283] EXT4-fs (loop1): unmounting filesystem. [ 109.181635][ T1431] tipc: Disabling bearer [ 110.813139][ T1449] syz.0.320[1449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.814449][ T1449] syz.0.320[1449] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.477626][ T1461] netlink: 'syz.2.322': attribute type 4 has an invalid length. [ 114.991247][ T1471] loop2: detected capacity change from 0 to 1024 [ 114.998918][ T1471] EXT4-fs: Ignoring removed bh option [ 115.108195][ T1472] syz.0.324[1472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.114817][ T1472] syz.0.324[1472] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.136740][ T1471] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 116.231505][ T284] EXT4-fs (loop2): unmounting filesystem. [ 116.531820][ T1494] loop3: detected capacity change from 0 to 512 [ 116.544854][ T1494] EXT4-fs: Ignoring removed orlov option [ 116.676832][ T1494] EXT4-fs (loop3): 1 orphan inode deleted [ 116.682719][ T1494] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 116.694270][ T1494] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.781843][ T1494] fuse: Bad value for 'fd' [ 116.795633][ T28] audit: type=1400 audit(1757084129.433:192): avc: denied { mounton } for pid=1487 comm="syz.3.331" path="/72/file1/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.818916][ T347] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.420750][ T347] usb 3-1: Using ep0 maxpacket: 16 [ 117.437019][ T347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.447426][ T37] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 117.471283][ T347] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 117.502448][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 117.542649][ T347] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.569086][ T285] EXT4-fs (loop3): unmounting filesystem. [ 117.575600][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.615786][ T347] usb 3-1: config 0 descriptor?? [ 117.624222][ T28] audit: type=1400 audit(1757084130.273:193): avc: denied { ioctl } for pid=1492 comm="syz.2.333" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 117.662358][ T347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 117.701639][ T28] audit: type=1400 audit(1757084130.323:194): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.763431][ T28] audit: type=1400 audit(1757084130.323:195): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 117.887167][ T28] audit: type=1400 audit(1757084130.323:196): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 118.232864][ T28] audit: type=1400 audit(1757084130.393:197): avc: denied { bpf } for pid=1507 comm="syz.4.337" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.277406][ T28] audit: type=1400 audit(1757084130.393:198): avc: denied { prog_load } for pid=1507 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 118.315939][ T28] audit: type=1400 audit(1757084130.403:199): avc: denied { perfmon } for pid=1505 comm="syz.3.336" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.370739][ T28] audit: type=1400 audit(1757084130.403:200): avc: denied { prog_run } for pid=1505 comm="syz.3.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 119.356953][ T302] usb 3-1: USB disconnect, device number 2 [ 120.803504][ T1542] loop1: detected capacity change from 0 to 512 [ 120.849919][ T1542] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.902889][ T1542] EXT4-fs (loop1): 1 truncate cleaned up [ 120.908770][ T1542] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 122.073758][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 122.073773][ T28] audit: type=1400 audit(1757084134.723:234): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 122.132449][ T28] audit: type=1400 audit(1757084134.773:235): avc: denied { write } for pid=1541 comm="syz.1.346" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.154822][ T28] audit: type=1400 audit(1757084134.773:236): avc: denied { open } for pid=1541 comm="syz.1.346" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.178021][ T28] audit: type=1400 audit(1757084134.773:237): avc: denied { read } for pid=1541 comm="syz.1.346" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.178305][ T283] EXT4-fs (loop1): unmounting filesystem. [ 122.200687][ T28] audit: type=1400 audit(1757084134.773:238): avc: denied { ioctl } for pid=1541 comm="syz.1.346" path="/67/file2/file1" dev="loop1" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.224453][ T1559] syz.2.350[1559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.231813][ T28] audit: type=1400 audit(1757084134.773:239): avc: denied { setattr } for pid=1541 comm="syz.1.346" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.233403][ T1559] syz.2.350[1559] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 122.243111][ T28] audit: type=1400 audit(1757084134.823:240): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 122.310129][ T28] audit: type=1400 audit(1757084134.953:241): avc: denied { create } for pid=1551 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 123.668793][ T1603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 123.922892][ T28] audit: type=1400 audit(1757084136.343:242): avc: denied { setopt } for pid=1589 comm="syz.1.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 125.423317][ T1626] syz.3.368[1626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.423757][ T1626] syz.3.368[1626] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.614828][ T28] audit: type=1400 audit(1757084138.263:243): avc: denied { read } for pid=1610 comm="syz.4.370" name="file0" dev="incremental-fs" ino=445 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 125.714826][ T1630] netlink: 8 bytes leftover after parsing attributes in process `syz.2.371'. [ 126.703653][ T1649] loop1: detected capacity change from 0 to 16 [ 127.050260][ T1649] erofs: (device loop1): mounted with root inode @ nid 36. [ 127.295821][ T1657] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 127.347695][ T1657] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 127.358780][ T1657] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 127.679163][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 127.679178][ T28] audit: type=1400 audit(1757084140.333:252): avc: denied { read write } for pid=282 comm="syz-executor" name="loop0" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.083763][ T28] audit: type=1400 audit(1757084140.353:253): avc: denied { open } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.229809][ T28] audit: type=1400 audit(1757084140.353:254): avc: denied { ioctl } for pid=285 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=121 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 128.620034][ T1669] tipc: Enabled bearer , priority 0 [ 128.661377][ T28] audit: type=1400 audit(1757084140.423:255): avc: denied { bpf } for pid=1659 comm="syz.2.383" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.686673][ T1669] device syzkaller0 entered promiscuous mode [ 128.694331][ T28] audit: type=1400 audit(1757084140.423:256): avc: denied { map_create } for pid=1659 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.731888][ T1669] tipc: Resetting bearer [ 128.742190][ T28] audit: type=1400 audit(1757084140.423:257): avc: denied { map_read map_write } for pid=1659 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.767405][ T1667] tipc: Resetting bearer [ 128.780579][ T28] audit: type=1400 audit(1757084140.473:258): avc: denied { prog_load } for pid=1659 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.800014][ T1667] tipc: Disabling bearer [ 128.809324][ T28] audit: type=1400 audit(1757084140.483:259): avc: denied { perfmon } for pid=1659 comm="syz.2.383" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 128.838667][ T28] audit: type=1400 audit(1757084140.483:260): avc: denied { prog_run } for pid=1659 comm="syz.2.383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 128.857842][ T28] audit: type=1400 audit(1757084140.503:261): avc: denied { mounton } for pid=1659 comm="syz.2.383" path="/73/file0" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 129.430976][ T1694] loop0: detected capacity change from 0 to 16 [ 129.500597][ T1694] erofs: (device loop0): mounted with root inode @ nid 36. [ 129.976468][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 130.490036][ T1694] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 130.914973][ T1711] syz.3.396[1711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 130.915358][ T1711] syz.3.396[1711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.243826][ T1706] loop2: detected capacity change from 0 to 40427 [ 131.309493][ T1706] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 131.329347][ T1706] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 131.358860][ T1706] F2FS-fs (loop2): invalid crc value [ 131.478127][ T1706] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.530003][ T1722] 9pnet_fd: Insufficient options for proto=fd [ 131.567007][ T1706] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 131.577355][ T1706] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.938140][ T1730] loop1: detected capacity change from 0 to 2048 [ 131.963377][ T1730] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 131.993073][ T1729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.404'. [ 132.068141][ T283] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 132.084663][ T283] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 132.255855][ T1739] overlayfs: conflicting lowerdir path [ 132.462174][ T283] EXT4-fs (loop1): unmounting filesystem. [ 132.500533][ T1744] 9pnet: p9_errstr2errno: server reported unknown error [ 133.149823][ T1747] loop4: detected capacity change from 0 to 40427 [ 133.159248][ T1747] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 133.167378][ T1747] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 133.193408][ T1747] F2FS-fs (loop4): invalid crc value [ 133.227748][ T1747] F2FS-fs (loop4): Found nat_bits in checkpoint [ 133.271776][ T1754] 9pnet_fd: Insufficient options for proto=fd [ 133.300083][ T1747] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 133.307668][ T1747] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 133.502835][ T1767] 9pnet_fd: Insufficient options for proto=fd [ 133.931755][ T1771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.417'. [ 133.996370][ T1765] loop3: detected capacity change from 0 to 40427 [ 134.005956][ T1765] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 134.018704][ T1765] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 134.028587][ T1765] F2FS-fs (loop3): invalid crc value [ 134.035886][ T1765] F2FS-fs (loop3): Found nat_bits in checkpoint [ 134.080026][ T1765] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 134.091317][ T1765] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 134.179314][ T1780] overlayfs: conflicting lowerdir path [ 134.785783][ T1790] overlayfs: conflicting lowerdir path [ 134.866010][ T1793] 9pnet_fd: Insufficient options for proto=fd [ 135.987401][ T1800] 9pnet_fd: Insufficient options for proto=fd [ 136.024055][ T1804] 9pnet_fd: Insufficient options for proto=fd [ 136.171618][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 136.171636][ T28] audit: type=1400 audit(1757084148.823:303): avc: denied { read } for pid=1809 comm="syz.0.430" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.272784][ T28] audit: type=1400 audit(1757084148.913:304): avc: denied { open } for pid=1809 comm="syz.0.430" path="net:[4026532292]" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.609740][ T28] audit: type=1400 audit(1757084149.043:305): avc: denied { create } for pid=1809 comm="syz.0.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.242942][ T1831] syz.4.426[1831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.243031][ T1831] syz.4.426[1831] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 137.314017][ T1833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.436'. [ 137.350294][ T1835] loop0: detected capacity change from 0 to 128 [ 137.383371][ T1835] ext4: Unknown parameter 'nouser_xattr' [ 137.424036][ T1836] bridge1: port 1(veth0_to_bond) entered disabled state [ 137.434787][ T1827] loop2: detected capacity change from 0 to 40427 [ 137.442224][ T1836] bridge2: port 1(veth0_to_bond) entered blocking state [ 137.462880][ T1835] loop0: detected capacity change from 0 to 512 [ 137.517626][ T1836] bridge2: port 1(veth0_to_bond) entered disabled state [ 137.629512][ T1827] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 137.957821][ T1827] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 137.970055][ T1827] F2FS-fs (loop2): invalid crc value [ 137.977957][ T1843] 9pnet_fd: Insufficient options for proto=fd [ 138.023415][ T1835] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.437: casefold flag without casefold feature [ 138.044463][ T1827] F2FS-fs (loop2): Found nat_bits in checkpoint [ 138.059456][ T1835] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.437: couldn't read orphan inode 15 (err -117) [ 138.091109][ T1835] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.147450][ T1827] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 138.152485][ T28] audit: type=1400 audit(1757084150.803:306): avc: denied { create } for pid=1855 comm="syz.4.443" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 138.164688][ T1827] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 138.424940][ T1861] loop4: detected capacity change from 0 to 1024 [ 138.431885][ T1861] EXT4-fs: Ignoring removed bh option [ 138.639487][ T1861] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.827214][ T28] audit: type=1400 audit(1757084151.463:307): avc: denied { read } for pid=1834 comm="syz.0.437" path="/88/file0/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 139.326371][ T1871] syz.3.445[1871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 139.326777][ T1871] syz.3.445[1871] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.098619][ T1860] overlayfs: conflicting lowerdir path [ 141.127659][ T286] EXT4-fs (loop4): unmounting filesystem. [ 142.150717][ T1883] syz.3.446[1883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.151042][ T1883] syz.3.446[1883] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.395658][ T1881] syz.4.447[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 142.409327][ T1881] syz.4.447[1881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.059889][ T1888] loop3: detected capacity change from 0 to 16 [ 144.095643][ T1888] erofs: (device loop3): mounted with root inode @ nid 36. [ 144.108117][ T282] EXT4-fs (loop0): unmounting filesystem. [ 144.118033][ T1891] syz.2.448[1891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.118098][ T1891] syz.2.448[1891] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.515775][ T1909] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 144.741329][ T1909] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 144.752484][ T1909] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 144.940761][ T1911] loop4: detected capacity change from 0 to 1024 [ 144.947554][ T1911] EXT4-fs: Ignoring removed bh option [ 145.014891][ T1914] syz.0.456[1914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 145.015339][ T1914] syz.0.456[1914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.415419][ T1911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 147.230001][ T286] EXT4-fs (loop4): unmounting filesystem. [ 147.251093][ T1923] loop1: detected capacity change from 0 to 512 [ 148.200771][ T1929] loop2: detected capacity change from 0 to 128 [ 148.213108][ T1929] ext4: Unknown parameter 'nouser_xattr' [ 148.225837][ T1923] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 148.590473][ T1929] loop2: detected capacity change from 0 to 512 [ 148.609913][ T1923] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.628335][ T1929] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.463: casefold flag without casefold feature [ 148.643055][ T1929] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.463: couldn't read orphan inode 15 (err -117) [ 148.660662][ T1929] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.683117][ T1921] loop3: detected capacity change from 0 to 40427 [ 148.690504][ T1921] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 148.698571][ T1921] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 148.708630][ T1921] F2FS-fs (loop3): invalid crc value [ 148.776375][ T1921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 148.945691][ T1949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.465'. [ 149.018875][ T28] audit: type=1400 audit(1757084161.613:308): avc: denied { create } for pid=1937 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.246830][ T28] audit: type=1400 audit(1757084161.633:309): avc: denied { setopt } for pid=1937 comm="syz.4.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 149.296791][ T1921] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 149.313469][ T1921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.741692][ T1963] loop4: detected capacity change from 0 to 512 [ 149.759317][ T1963] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 149.789295][ T1963] EXT4-fs (loop4): 1 truncate cleaned up [ 149.802204][ T1963] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 149.984634][ T28] audit: type=1400 audit(1757084162.633:310): avc: denied { write } for pid=1962 comm="syz.4.472" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.019364][ T28] audit: type=1400 audit(1757084162.663:311): avc: denied { ioctl } for pid=1962 comm="syz.4.472" path="/98/file2/file1" dev="loop4" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 150.061196][ T28] audit: type=1400 audit(1757084162.663:312): avc: denied { setattr } for pid=1962 comm="syz.4.472" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.126958][ T1960] loop0: detected capacity change from 0 to 40427 [ 150.146224][ T1960] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 150.176981][ T1960] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 150.197401][ T1960] F2FS-fs (loop0): invalid crc value [ 150.237730][ T1960] F2FS-fs (loop0): Found nat_bits in checkpoint [ 150.288085][ T284] EXT4-fs (loop2): unmounting filesystem. [ 150.306453][ T28] audit: type=1400 audit(1757084162.953:313): avc: denied { read } for pid=1970 comm="syz.2.473" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.331655][ T28] audit: type=1400 audit(1757084162.963:314): avc: denied { rmdir } for pid=283 comm="syz-executor" name="file1" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 150.332151][ T1960] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 150.354154][ T28] audit: type=1400 audit(1757084162.963:315): avc: denied { open } for pid=1970 comm="syz.2.473" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.362840][ T283] EXT4-fs (loop1): unmounting filesystem. [ 150.384835][ T28] audit: type=1400 audit(1757084162.963:316): avc: denied { ioctl } for pid=1970 comm="syz.2.473" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 150.389778][ T1960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 150.767698][ T28] audit: type=1400 audit(1757084163.383:317): avc: denied { mount } for pid=1978 comm="syz.3.475" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 150.800551][ T286] EXT4-fs (loop4): unmounting filesystem. [ 151.663764][ T1999] loop3: detected capacity change from 0 to 512 [ 151.695022][ T1999] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 151.701492][ T2006] tipc: Started in network mode [ 151.709229][ T2006] tipc: Node identity aaf62c0f4f2e, cluster identity 4711 [ 151.716749][ T2006] tipc: Enabled bearer , priority 0 [ 151.744530][ T1999] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.015640][ T2010] tipc: Resetting bearer [ 152.034109][ T1994] overlayfs: conflicting lowerdir path [ 152.045779][ T2006] device syzkaller0 entered promiscuous mode [ 152.054180][ T2006] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 152.072631][ T2012] loop4: detected capacity change from 0 to 512 [ 152.080422][ T2005] tipc: Resetting bearer [ 152.092589][ T2005] tipc: Disabling bearer [ 152.118969][ T2012] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.128215][ T2012] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.553821][ T285] EXT4-fs (loop3): unmounting filesystem. [ 152.563292][ T2021] loop2: detected capacity change from 0 to 512 [ 152.647589][ T2021] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 152.656589][ T2021] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.860332][ T2037] Zero length message leads to an empty skb [ 153.288377][ T286] EXT4-fs (loop4): unmounting filesystem. [ 154.917493][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 154.917548][ T28] audit: type=1400 audit(1757084166.943:322): avc: denied { write } for pid=2048 comm="syz.1.493" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 155.239959][ T284] EXT4-fs (loop2): unmounting filesystem. [ 155.242117][ T2065] loop0: detected capacity change from 0 to 512 [ 155.321042][ T2065] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 155.335537][ T2065] ext4 filesystem being mounted at /99/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.568415][ T2080] 9pnet_fd: Insufficient options for proto=fd [ 155.769732][ T2081] 9pnet_fd: Insufficient options for proto=fd [ 156.294553][ T28] audit: type=1400 audit(1757084168.943:323): avc: denied { execute } for pid=2084 comm="syz.2.504" path="/96/file1" dev="tmpfs" ino=569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 156.333243][ T282] EXT4-fs (loop0): unmounting filesystem. [ 156.790825][ T2095] syz.1.506[2095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.790909][ T2095] syz.1.506[2095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.865725][ T2102] netlink: 136 bytes leftover after parsing attributes in process `syz.2.508'. [ 158.212514][ T2102] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 158.316253][ T28] audit: type=1400 audit(1757084170.963:324): avc: denied { map } for pid=2106 comm="syz.2.510" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.369610][ T28] audit: type=1400 audit(1757084170.993:325): avc: denied { read write } for pid=2106 comm="syz.2.510" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=22188 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 158.878985][ T2127] loop0: detected capacity change from 0 to 512 [ 158.949733][ T2127] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 158.965384][ T2127] ext4 filesystem being mounted at /103/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.432708][ T2019] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 160.495517][ T282] EXT4-fs (loop0): unmounting filesystem. [ 160.573753][ T28] audit: type=1400 audit(1757084173.223:326): avc: denied { write } for pid=2136 comm="syz.1.519" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 161.567467][ T2162] syz.4.525[2162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 161.567549][ T2162] syz.4.525[2162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 163.927014][ T2176] syz.3.526[2176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.025515][ T2176] syz.3.526[2176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 164.354003][ T2167] loop1: detected capacity change from 0 to 40427 [ 164.386667][ T2167] F2FS-fs (loop1): fault_injection options not supported [ 164.400901][ T2167] F2FS-fs (loop1): invalid crc value [ 164.433803][ T2167] F2FS-fs (loop1): Found nat_bits in checkpoint [ 164.505909][ T2167] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 164.590477][ T2181] loop0: detected capacity change from 0 to 40427 [ 164.607777][ T2181] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 164.615590][ T2181] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 164.638145][ T2181] F2FS-fs (loop0): invalid crc value [ 164.720678][ T2181] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.733126][ T2189] loop4: detected capacity change from 0 to 512 [ 164.810832][ T2181] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 164.818513][ T2181] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 164.917368][ T28] audit: type=1400 audit(1757084177.533:327): avc: denied { ioctl } for pid=2165 comm="syz.1.530" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=22339 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 165.281364][ T28] audit: type=1400 audit(1757084177.693:328): avc: denied { write } for pid=2190 comm="syz.2.534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 165.345414][ T2189] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 165.362774][ T2189] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.748030][ T2204] overlayfs: failed to resolve './bus': -2 [ 166.885776][ T2209] loop2: detected capacity change from 0 to 16 [ 166.893922][ T286] EXT4-fs (loop4): unmounting filesystem. [ 166.907502][ T2209] erofs: (device loop2): mounted with root inode @ nid 36. [ 167.192736][ T2218] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 167.458301][ T2218] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 167.469292][ T2218] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] [ 167.917138][ T2221] 9pnet_fd: Insufficient options for proto=fd [ 168.035945][ T2227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.542'. [ 168.051278][ T2227] bridge1: port 1(veth0_to_bond) entered blocking state [ 168.058882][ T2227] bridge1: port 1(veth0_to_bond) entered disabled state [ 168.066399][ T2227] device veth0_to_bond entered promiscuous mode [ 168.303327][ T28] audit: type=1400 audit(1757084180.933:329): avc: denied { write } for pid=2234 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 169.327647][ T2245] loop2: detected capacity change from 0 to 512 [ 170.133422][ T2245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 170.142709][ T2245] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.156600][ T2256] serio: Serial port ptm0 [ 170.185776][ T2243] loop0: detected capacity change from 0 to 40427 [ 170.201446][ T2243] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 170.219041][ T2243] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 170.228481][ T2243] F2FS-fs (loop0): invalid crc value [ 170.271754][ T2264] fuse: Bad value for 'fd' [ 170.285892][ T2243] F2FS-fs (loop0): Found nat_bits in checkpoint [ 171.687990][ T284] EXT4-fs (loop2): unmounting filesystem. [ 171.695465][ T28] audit: type=1400 audit(1757084184.343:330): avc: denied { ioctl } for pid=2266 comm="syz.4.554" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 171.721862][ T2243] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 171.729031][ T2243] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 173.256661][ T2288] overlayfs: failed to resolve './bus': -2 [ 173.403998][ T2293] syz.2.556[2293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.404078][ T2293] syz.2.556[2293] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 173.971766][ T2303] bridge2: port 1(veth0_to_bond) entered disabled state [ 174.021203][ T2302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.563'. [ 174.252562][ T2315] loop0: detected capacity change from 0 to 512 [ 174.329238][ T2315] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 174.361226][ T2315] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.122627][ T2339] serio: Serial port ptm1 [ 175.181805][ T282] EXT4-fs (loop0): unmounting filesystem. [ 175.269808][ T2343] netlink: 44 bytes leftover after parsing attributes in process `syz.2.576'. [ 175.384902][ T28] audit: type=1400 audit(1757084188.033:331): avc: denied { setopt } for pid=2337 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.403737][ T2347] loop0: detected capacity change from 0 to 40427 [ 175.406236][ T28] audit: type=1400 audit(1757084188.033:332): avc: denied { write } for pid=2337 comm="syz.3.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 175.417976][ T2347] F2FS-fs (loop0): fault_injection options not supported [ 175.439450][ T2347] F2FS-fs (loop0): invalid crc value [ 175.461085][ T2347] F2FS-fs (loop0): Found nat_bits in checkpoint [ 175.496958][ T2355] syz.2.578[2355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.497042][ T2355] syz.2.578[2355] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 175.714531][ T2347] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 177.533930][ T282] syz-executor: attempt to access beyond end of device [ 177.533930][ T282] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 177.901823][ T2383] loop3: detected capacity change from 0 to 512 [ 177.948930][ T2383] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 177.962051][ T2387] netlink: 44 bytes leftover after parsing attributes in process `syz.2.588'. [ 177.977748][ T2383] ext4 filesystem being mounted at /112/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.045919][ T2395] loop4: detected capacity change from 0 to 512 [ 178.195531][ T2397] loop2: detected capacity change from 0 to 40427 [ 178.820113][ T2397] F2FS-fs (loop2): fault_injection options not supported [ 178.831665][ T2397] F2FS-fs (loop2): invalid crc value [ 179.047256][ T285] EXT4-fs (loop3): unmounting filesystem. [ 179.077873][ T2397] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.132313][ T2395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 179.141621][ T2395] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.175940][ T2397] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 181.168936][ T2421] syz.1.594[2421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 181.170007][ T2421] syz.1.594[2421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 186.122211][ T286] EXT4-fs (loop4): unmounting filesystem. [ 187.098518][ T2431] syz.1.597[2431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 187.099645][ T2431] syz.1.597[2431] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 188.010878][ T28] audit: type=1400 audit(1757084200.643:333): avc: denied { write } for pid=2460 comm="syz.1.607" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 188.267223][ T309] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.305211][ T2470] netlink: 'syz.0.611': attribute type 16 has an invalid length. [ 188.313988][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 188.325295][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 188.346279][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.413113][ T2470] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.568136][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 188.578876][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.593271][ T335] bridge1: port 1(veth0_to_bond) entered blocking state [ 188.600346][ T335] bridge1: port 1(veth0_to_bond) entered forwarding state [ 188.683412][ T2478] 9pnet_fd: Insufficient options for proto=fd [ 188.864612][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 188.910452][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.919165][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.936004][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.951779][ T309] usb 2-1: Using ep0 maxpacket: 8 [ 188.953975][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.958073][ T309] usb 2-1: config 162 has an invalid interface number: 197 but max is 0 [ 188.973200][ T309] usb 2-1: config 162 has no interface number 0 [ 188.973549][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.979562][ T309] usb 2-1: config 162 interface 197 has no altsetting 0 [ 188.996717][ T309] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 189.005979][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 189.013403][ T309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.022015][ T309] usb 2-1: Product: syz [ 189.026469][ T309] usb 2-1: Manufacturer: syz [ 189.031218][ T309] usb 2-1: SerialNumber: syz [ 191.017260][ T309] usb 2-1: USB disconnect, device number 4 [ 191.094285][ T2523] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 191.111139][ T28] audit: type=1400 audit(1757084203.763:334): avc: denied { read write } for pid=2521 comm="syz.1.625" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 191.157535][ T28] audit: type=1400 audit(1757084203.763:335): avc: denied { open } for pid=2521 comm="syz.1.625" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 192.207990][ T2538] netlink: 12 bytes leftover after parsing attributes in process `syz.4.630'. [ 192.249782][ T2538] bridge1: port 1(veth3) entered blocking state [ 192.262472][ T2538] bridge1: port 1(veth3) entered disabled state [ 192.273058][ T2538] device veth3 entered promiscuous mode [ 192.597026][ T2550] syz.4.633[2550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.597138][ T2550] syz.4.633[2550] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.193014][ T2560] loop3: detected capacity change from 0 to 512 [ 194.277579][ T2560] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 194.286790][ T2560] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.517443][ T2567] syz.1.637[2567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.517531][ T2567] syz.1.637[2567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.387839][ T2568] syz.2.639[2568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 195.401415][ T2568] syz.2.639[2568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.656348][ T285] EXT4-fs (loop3): unmounting filesystem. [ 197.722866][ T28] audit: type=1400 audit(1757084210.373:336): avc: denied { create } for pid=2578 comm="syz.1.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.754722][ T28] audit: type=1400 audit(1757084210.403:337): avc: denied { read } for pid=2578 comm="syz.1.643" path="socket:[24980]" dev="sockfs" ino=24980 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 200.042367][ T28] audit: type=1400 audit(1757084212.213:338): avc: denied { bpf } for pid=2592 comm="syz.1.646" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 200.189435][ T28] audit: type=1400 audit(1757084212.223:339): avc: denied { prog_load } for pid=2592 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 200.217456][ T28] audit: type=1400 audit(1757084212.223:340): avc: denied { perfmon } for pid=2592 comm="syz.1.646" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 200.241528][ T28] audit: type=1400 audit(1757084212.243:341): avc: denied { prog_run } for pid=2592 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 200.294729][ T28] audit: type=1400 audit(1757084212.523:342): avc: denied { create } for pid=2592 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 200.331784][ T2610] loop1: detected capacity change from 0 to 512 [ 200.357343][ T28] audit: type=1400 audit(1757084212.593:343): avc: denied { create } for pid=2592 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 200.379047][ T2610] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 200.391422][ T2610] EXT4-fs (loop1): 1 truncate cleaned up [ 200.397159][ T2610] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 200.506874][ T28] audit: type=1400 audit(1757084212.653:344): avc: denied { write } for pid=2592 comm="syz.1.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 201.109226][ T28] audit: type=1400 audit(1757084212.743:345): avc: denied { read write } for pid=285 comm="syz-executor" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 201.179630][ T283] EXT4-fs (loop1): unmounting filesystem. [ 201.474800][ T2625] loop2: detected capacity change from 0 to 40427 [ 201.491475][ T2625] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 201.599577][ T2634] loop1: detected capacity change from 0 to 512 [ 201.608122][ T2634] EXT4-fs: Ignoring removed orlov option [ 201.637530][ T2625] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 201.771029][ T2625] F2FS-fs (loop2): invalid crc value [ 201.849563][ T2634] EXT4-fs (loop1): 1 orphan inode deleted [ 201.855444][ T2634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 201.866869][ T2634] ext4 filesystem being mounted at /138/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.951888][ T2634] fuse: Bad value for 'fd' [ 202.116858][ T2638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 202.613047][ T10] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:1: Failed to release dquot type 1 [ 202.638261][ T2625] F2FS-fs (loop2): Found nat_bits in checkpoint [ 202.675907][ T283] EXT4-fs (loop1): unmounting filesystem. [ 202.732936][ T2625] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 202.740109][ T2625] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 202.770753][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 202.770768][ T28] audit: type=1400 audit(1757084215.423:376): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 202.870837][ T28] audit: type=1400 audit(1757084215.523:377): avc: denied { read write } for pid=2647 comm="syz.1.660" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 202.897991][ T28] audit: type=1400 audit(1757084215.523:378): avc: denied { open } for pid=2647 comm="syz.1.660" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 203.480858][ T2657] loop3: detected capacity change from 0 to 128 [ 203.488200][ T2657] ext4: Unknown parameter 'nouser_xattr' [ 203.766976][ T28] audit: type=1400 audit(1757084216.413:379): avc: denied { write } for pid=2624 comm="syz.2.656" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.800984][ T2660] overlayfs: conflicting lowerdir path [ 203.849014][ T28] audit: type=1400 audit(1757084216.413:380): avc: denied { add_name } for pid=2624 comm="syz.2.656" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 203.907984][ T28] audit: type=1400 audit(1757084216.413:381): avc: denied { create } for pid=2624 comm="syz.2.656" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.928767][ T28] audit: type=1400 audit(1757084216.443:382): avc: denied { mounton } for pid=2624 comm="syz.2.656" path="/129/file0/file0" dev="loop2" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 203.951721][ T28] audit: type=1400 audit(1757084216.443:383): avc: denied { write } for pid=2624 comm="syz.2.656" name="bus" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 204.288000][ T28] audit: type=1400 audit(1757084216.443:384): avc: denied { add_name } for pid=2624 comm="syz.2.656" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 204.327121][ T28] audit: type=1400 audit(1757084216.443:385): avc: denied { setattr } for pid=2624 comm="syz.2.656" name="work" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 204.446579][ T2659] loop4: detected capacity change from 0 to 40427 [ 204.466040][ T2659] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 204.474024][ T2659] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 204.483222][ T2659] F2FS-fs (loop4): invalid crc value [ 204.506945][ T2659] F2FS-fs (loop4): Found nat_bits in checkpoint [ 204.576581][ T2676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 204.581139][ T2659] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 204.603356][ T2659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.627657][ T2685] overlayfs: conflicting lowerdir path [ 205.802786][ T2695] loop2: detected capacity change from 0 to 16 [ 205.813269][ T2695] erofs: (device loop2): mounted with root inode @ nid 36. [ 205.826316][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 205.837703][ T2695] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 206.279535][ T2702] syz.1.672[2702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 206.279958][ T2702] syz.1.672[2702] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 207.363980][ T2704] 9pnet_fd: Insufficient options for proto=fd [ 207.420119][ T2706] loop1: detected capacity change from 0 to 4096 [ 207.447185][ T2706] EXT4-fs (loop1): Test dummy encryption mode enabled [ 207.460862][ T2706] EXT4-fs (loop1): unsupported descriptor size 255 [ 208.410285][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 208.410303][ T28] audit: type=1400 audit(1757084221.063:408): avc: denied { create } for pid=2715 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.491742][ T2721] syz.4.677[2721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.492058][ T2721] syz.4.677[2721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 209.428086][ T28] audit: type=1400 audit(1757084221.063:409): avc: denied { read } for pid=2717 comm="syz.3.678" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 209.475659][ T28] audit: type=1400 audit(1757084221.063:410): avc: denied { open } for pid=2717 comm="syz.3.678" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.276619][ T2727] overlayfs: conflicting lowerdir path [ 210.469068][ T28] audit: type=1400 audit(1757084221.063:411): avc: denied { ioctl } for pid=2717 comm="syz.3.678" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.493891][ T28] audit: type=1400 audit(1757084221.103:412): avc: denied { write } for pid=2715 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.544705][ T2733] syz.4.681[2733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.544786][ T2733] syz.4.681[2733] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.585462][ T28] audit: type=1400 audit(1757084221.103:413): avc: denied { read } for pid=2715 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 210.618366][ T28] audit: type=1400 audit(1757084221.173:414): avc: denied { create } for pid=2712 comm="syz.4.677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 210.640250][ T28] audit: type=1400 audit(1757084222.073:415): avc: denied { write } for pid=2717 comm="syz.3.678" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 210.650746][ T2736] tipc: Enabled bearer , priority 0 [ 210.664745][ T28] audit: type=1400 audit(1757084222.923:416): avc: denied { unlink } for pid=2705 comm="syz.1.674" name="#4d" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 210.728501][ T28] audit: type=1400 audit(1757084223.343:417): avc: denied { read } for pid=2734 comm="syz.2.683" dev="nsfs" ino=4026532479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 210.808914][ T2736] device syzkaller0 entered promiscuous mode [ 210.839921][ T2736] tipc: Resetting bearer [ 211.325511][ T2747] loop2: detected capacity change from 0 to 512 [ 211.344746][ T2747] EXT4-fs: Ignoring removed orlov option [ 211.882553][ T2735] tipc: Resetting bearer [ 212.094063][ T2747] EXT4-fs (loop2): 1 orphan inode deleted [ 212.099989][ T2747] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 212.111687][ T2747] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.254820][ T2744] fuse: Bad value for 'fd' [ 212.369659][ T2735] tipc: Disabling bearer [ 212.784912][ T309] tipc: Node number set to 2322797382 [ 212.791492][ T351] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 212.853617][ T284] EXT4-fs (loop2): unmounting filesystem. [ 212.944372][ T2762] loop4: detected capacity change from 0 to 16 [ 212.964331][ T2762] erofs: (device loop4): mounted with root inode @ nid 36. [ 212.973519][ T46] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 212.984576][ T2762] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 213.070915][ T2763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 213.451419][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 213.451440][ T28] audit: type=1400 audit(1757084226.053:432): avc: denied { create } for pid=2764 comm="syz.3.690" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.514236][ T28] audit: type=1400 audit(1757084226.053:433): avc: denied { map } for pid=2764 comm="syz.3.690" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.553952][ T28] audit: type=1400 audit(1757084226.053:434): avc: denied { read write } for pid=2764 comm="syz.3.690" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 213.714424][ T2779] loop3: detected capacity change from 0 to 4096 [ 213.733371][ T2779] EXT4-fs (loop3): Test dummy encryption mode enabled [ 213.741080][ T2779] EXT4-fs (loop3): unsupported descriptor size 255 [ 213.937217][ T28] audit: type=1400 audit(1757084226.483:435): avc: denied { mount } for pid=2774 comm="syz.4.692" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 214.656505][ T2781] overlayfs: conflicting lowerdir path [ 214.908288][ T28] audit: type=1400 audit(1757084227.563:436): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 214.942838][ T2788] loop4: detected capacity change from 0 to 16 [ 215.002311][ T2788] erofs: (device loop4): mounted with root inode @ nid 36. [ 215.147871][ T28] audit: type=1400 audit(1757084227.803:437): avc: denied { mount } for pid=2783 comm="syz.0.694" name="/" dev="incremental-fs" ino=796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.171966][ T2791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.695'. [ 215.253509][ T2793] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 215.285096][ T28] audit: type=1400 audit(1757084227.833:438): avc: denied { read } for pid=2783 comm="syz.0.694" name="file0" dev="incremental-fs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.309597][ T2793] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 215.320639][ T2793] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 215.421864][ T28] audit: type=1400 audit(1757084227.833:439): avc: denied { open } for pid=2783 comm="syz.0.694" path="/138/file0/file0" dev="incremental-fs" ino=797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 215.599960][ T2795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 215.919414][ T28] audit: type=1400 audit(1757084228.573:440): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 216.017546][ T2802] loop3: detected capacity change from 0 to 512 [ 216.026313][ T2802] EXT4-fs: Ignoring removed orlov option [ 216.152674][ T2802] EXT4-fs (loop3): 1 orphan inode deleted [ 216.158577][ T2802] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 216.168751][ T2802] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.182270][ T2802] fuse: Bad value for 'fd' [ 216.189172][ T8] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 216.207547][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 216.875554][ T2815] loop1: detected capacity change from 0 to 512 [ 216.959465][ T2815] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 216.989748][ T2815] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.071825][ T285] EXT4-fs (loop3): unmounting filesystem. [ 217.082586][ T2821] loop0: detected capacity change from 0 to 1024 [ 217.089553][ T2821] EXT4-fs: Ignoring removed bh option [ 217.107738][ T2821] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 217.152026][ T282] EXT4-fs (loop0): unmounting filesystem. [ 217.164814][ T2825] tipc: Enabled bearer , priority 0 [ 217.172918][ T2825] device syzkaller0 entered promiscuous mode [ 217.188700][ T2825] tipc: Resetting bearer [ 217.208668][ T2824] tipc: Resetting bearer [ 217.218201][ T2824] tipc: Disabling bearer [ 217.931962][ T283] EXT4-fs (loop1): unmounting filesystem. [ 218.461471][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 218.461498][ T28] audit: type=1400 audit(1757084231.113:462): avc: denied { ioctl } for pid=2839 comm="syz.2.710" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 218.608168][ T2842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 218.652463][ T2830] loop3: detected capacity change from 0 to 40427 [ 218.663823][ T2830] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 218.672089][ T2830] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 218.691498][ T2830] F2FS-fs (loop3): invalid crc value [ 218.699032][ T2830] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.751930][ T2830] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 218.759243][ T2830] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 218.769220][ T28] audit: type=1400 audit(1757084231.423:463): avc: denied { read write } for pid=2847 comm="syz.4.711" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 218.818522][ T28] audit: type=1400 audit(1757084231.423:464): avc: denied { open } for pid=2847 comm="syz.4.711" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 219.821296][ T2851] overlayfs: conflicting lowerdir path [ 219.868075][ T28] audit: type=1400 audit(1757084232.523:465): avc: denied { mount } for pid=2856 comm="syz.0.713" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 219.903206][ T28] audit: type=1400 audit(1757084232.553:466): avc: denied { sqpoll } for pid=2861 comm="syz.4.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 219.980705][ T28] audit: type=1400 audit(1757084232.633:467): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 220.788766][ T28] audit: type=1400 audit(1757084233.433:468): avc: denied { create } for pid=2858 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 220.808582][ T28] audit: type=1400 audit(1757084233.433:469): avc: denied { getopt } for pid=2858 comm="syz.2.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 221.718022][ T2869] loop0: detected capacity change from 0 to 1024 [ 221.725003][ T2869] EXT4-fs: Ignoring removed bh option [ 221.963208][ T2876] loop1: detected capacity change from 0 to 512 [ 221.970675][ T2876] EXT4-fs: Ignoring removed orlov option [ 222.708832][ T2880] syz.2.719[2880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.709211][ T2880] syz.2.719[2880] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 223.077613][ T2876] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 223.819953][ T2869] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 223.842467][ T282] EXT4-fs (loop0): unmounting filesystem. [ 224.149360][ T2888] loop1: detected capacity change from 0 to 512 [ 224.162512][ T2888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 224.211179][ T2888] EXT4-fs (loop1): 1 truncate cleaned up [ 224.219997][ T2888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 225.423475][ T28] audit: type=1400 audit(1757084238.033:470): avc: denied { write } for pid=2891 comm="syz.2.723" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 226.984930][ T28] audit: type=1400 audit(1757084238.153:471): avc: denied { write } for pid=2885 comm="syz.1.721" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.023151][ T2906] 9pnet_fd: Insufficient options for proto=fd [ 227.029558][ T28] audit: type=1400 audit(1757084238.193:472): avc: denied { ioctl } for pid=2885 comm="syz.1.721" path="/152/file2/file1" dev="loop1" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 227.091353][ T28] audit: type=1400 audit(1757084238.313:473): avc: denied { setattr } for pid=2885 comm="syz.1.721" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.226166][ T2914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.724'. [ 227.407226][ T283] EXT4-fs (loop1): unmounting filesystem. [ 227.424227][ T2918] loop1: detected capacity change from 0 to 512 [ 227.441442][ T2918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 227.451242][ T2918] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.467467][ T2923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.729'. [ 228.495150][ T2941] syz.4.733[2941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.496526][ T2941] syz.4.733[2941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 228.939910][ T2940] loop0: detected capacity change from 0 to 512 [ 228.964894][ T2940] EXT4-fs: Ignoring removed orlov option [ 232.731022][ T2935] fuse: Bad value for 'fd' [ 233.033428][ T2940] EXT4-fs warning (device loop0): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop0. [ 233.162849][ T283] EXT4-fs (loop1): unmounting filesystem. [ 233.168062][ T2949] loop4: detected capacity change from 0 to 512 [ 233.174909][ T2573] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 233.185929][ T2953] 9pnet_fd: Insufficient options for proto=fd [ 233.216655][ T28] audit: type=1400 audit(1757084245.863:474): avc: denied { mounton } for pid=2951 comm="syz.0.736" path="/148/file0" dev="tmpfs" ino=857 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 233.291121][ T2949] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 233.303048][ T2949] ext4 filesystem being mounted at /148/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.322956][ T2967] netlink: 28 bytes leftover after parsing attributes in process `syz.3.741'. [ 234.794673][ T286] EXT4-fs (loop4): unmounting filesystem. [ 234.831305][ T2984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 234.852601][ T2984] bridge2: port 1(veth5) entered blocking state [ 234.860557][ T2984] bridge2: port 1(veth5) entered disabled state [ 234.867696][ T2984] device veth5 entered promiscuous mode [ 234.945785][ T2979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 234.964351][ T2988] netlink: 'syz.4.748': attribute type 4 has an invalid length. [ 235.346934][ T2991] syz.2.747[2991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.347071][ T2991] syz.2.747[2991] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.316092][ T28] audit: type=1400 audit(3904567896.888:475): avc: denied { bind } for pid=2992 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 236.376223][ T28] audit: type=1400 audit(3904567896.968:476): avc: denied { write } for pid=2992 comm="syz.4.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 236.643590][ T28] audit: type=1400 audit(3904567897.258:477): avc: denied { write } for pid=3000 comm="syz.1.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 236.744320][ T3006] fuse: Bad value for 'fd' [ 236.767227][ T3004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.753'. [ 236.821873][ T3015] loop2: detected capacity change from 0 to 512 [ 236.858715][ T3015] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.876294][ T3015] EXT4-fs (loop2): 1 truncate cleaned up [ 236.882486][ T3015] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 237.578519][ T3033] syz.4.761[3033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.578876][ T3033] syz.4.761[3033] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.994983][ T284] EXT4-fs (loop2): unmounting filesystem. [ 241.008686][ T3052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.768'. [ 241.012719][ T3053] fuse: Bad value for 'fd' [ 242.294206][ T3075] loop1: detected capacity change from 0 to 512 [ 242.395348][ T3077] loop4: detected capacity change from 0 to 2048 [ 242.429289][ T3075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.454730][ T3075] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.504229][ T3083] loop3: detected capacity change from 0 to 1024 [ 242.539674][ T3077] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 242.560593][ T3083] EXT4-fs: Ignoring removed bh option [ 242.621725][ T28] audit: type=1400 audit(8199535199.269:478): avc: denied { mounton } for pid=3076 comm="syz.4.776" path="/156/file0/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 242.809794][ T286] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 243.032718][ T286] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 243.043581][ T3083] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 243.057442][ T28] audit: type=1400 audit(8199535199.709:479): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 243.099222][ T286] EXT4-fs (loop4): unmounting filesystem. [ 243.106934][ T285] EXT4-fs (loop3): unmounting filesystem. [ 243.147900][ T3094] netlink: 28 bytes leftover after parsing attributes in process `syz.0.780'. [ 243.470571][ T3098] loop4: detected capacity change from 0 to 128 [ 243.499476][ T3098] ext4: Unknown parameter 'nouser_xattr' [ 243.580973][ T283] EXT4-fs (loop1): unmounting filesystem. [ 243.933318][ T3112] loop0: detected capacity change from 0 to 16 [ 243.966891][ T3112] erofs: (device loop0): mounted with root inode @ nid 36. [ 244.004473][ T46] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 244.017706][ T3112] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 246.899473][ T3142] loop2: detected capacity change from 0 to 512 [ 246.906373][ T3142] EXT4-fs: Ignoring removed orlov option [ 247.149484][ T3142] EXT4-fs (loop2): 1 orphan inode deleted [ 247.155329][ T3142] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 247.210351][ T3142] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.243410][ T3142] fuse: Bad value for 'fd' [ 247.459308][ T3145] loop0: detected capacity change from 0 to 1024 [ 247.489879][ T3149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.794'. [ 247.522687][ T3145] EXT4-fs: Ignoring removed bh option [ 247.547622][ T3151] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000003 [ 247.587887][ T3145] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 247.854390][ T3159] loop3: detected capacity change from 0 to 512 [ 247.862952][ T3159] EXT4-fs: Ignoring removed orlov option [ 247.999704][ T3159] EXT4-fs (loop3): 1 orphan inode deleted [ 248.005543][ T3159] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 248.016300][ T3159] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.407194][ T335] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 248.417418][ T335] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 248.904059][ T3165] syz.1.800[3165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 248.904146][ T3165] syz.1.800[3165] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.118212][ T335] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 249.141053][ T335] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 249.168743][ T285] EXT4-fs (loop3): unmounting filesystem. [ 249.175113][ T282] EXT4-fs (loop0): unmounting filesystem. [ 249.181586][ T284] EXT4-fs (loop2): unmounting filesystem. [ 250.042641][ T3179] syz.4.802[3179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.044128][ T3179] syz.4.802[3179] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 251.025364][ T3189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.806'. [ 251.047495][ T3193] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000003 [ 251.121528][ T3196] loop2: detected capacity change from 0 to 1024 [ 251.147560][ T3196] EXT4-fs: Ignoring removed bh option [ 251.225479][ T3196] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 251.903659][ T3202] loop3: detected capacity change from 0 to 512 [ 251.910360][ T3202] EXT4-fs: Ignoring removed orlov option [ 252.254585][ T3202] EXT4-fs (loop3): 1 orphan inode deleted [ 252.260409][ T3202] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 252.269485][ T351] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 252.269511][ T3202] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.303081][ T3199] fuse: Bad value for 'fd' [ 252.310021][ T351] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 252.339614][ T3187] loop1: detected capacity change from 0 to 40427 [ 252.346967][ T3187] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 252.348591][ T284] EXT4-fs (loop2): unmounting filesystem. [ 252.354819][ T3187] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 252.384687][ T3187] F2FS-fs (loop1): invalid crc value [ 252.403372][ T3208] loop2: detected capacity change from 0 to 4096 [ 252.413293][ T3208] EXT4-fs (loop2): Test dummy encryption mode enabled [ 252.420724][ T3208] EXT4-fs (loop2): unsupported descriptor size 255 [ 252.475485][ T285] EXT4-fs (loop3): unmounting filesystem. [ 252.517341][ T3187] F2FS-fs (loop1): Found nat_bits in checkpoint [ 252.593916][ T3218] loop0: detected capacity change from 0 to 512 [ 252.685846][ T3222] overlayfs: conflicting lowerdir path [ 252.719618][ T3187] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 252.742009][ T3218] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 252.753549][ T3187] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 252.769080][ T3218] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.151077][ T3216] loop3: detected capacity change from 0 to 40427 [ 253.165797][ T3216] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 253.551711][ T3225] overlayfs: conflicting lowerdir path [ 253.562258][ T3216] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 253.587828][ T282] EXT4-fs (loop0): unmounting filesystem. [ 253.588501][ T3216] F2FS-fs (loop3): invalid crc value [ 253.602793][ T3216] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.643206][ T3216] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 253.650463][ T3216] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 254.003444][ T3236] loop0: detected capacity change from 0 to 16 [ 254.053315][ T3236] erofs: (device loop0): mounted with root inode @ nid 36. [ 254.271997][ T3239] overlayfs: failed to resolve './bus': -2 [ 254.620566][ T3240] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 254.630293][ T3240] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 254.641286][ T3240] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 255.021276][ T3249] netlink: 28 bytes leftover after parsing attributes in process `syz.2.820'. [ 255.114962][ T3255] loop1: detected capacity change from 0 to 1024 [ 255.146285][ T3255] EXT4-fs: Ignoring removed bh option [ 255.206300][ T3255] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 255.284697][ T283] EXT4-fs (loop1): unmounting filesystem. [ 255.310364][ T3263] tipc: Enabled bearer , priority 0 [ 255.317944][ T3263] device syzkaller0 entered promiscuous mode [ 255.327857][ T3263] tipc: Resetting bearer [ 255.397508][ T3267] loop2: detected capacity change from 0 to 512 [ 255.404546][ T3267] EXT4-fs: Ignoring removed orlov option [ 255.994364][ T3262] tipc: Resetting bearer [ 256.042166][ T3267] EXT4-fs (loop2): 1 orphan inode deleted [ 256.048054][ T3267] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 256.059438][ T3267] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.090738][ T3267] fuse: Bad value for 'fd' [ 256.311605][ T3272] loop1: detected capacity change from 0 to 512 [ 256.408797][ T346] tipc: Node number set to 2252493134 [ 256.439315][ T335] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 256.451938][ T335] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 256.465390][ T3272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 256.474825][ T3272] ext4 filesystem being mounted at /175/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.631577][ T3262] tipc: Disabling bearer [ 256.658400][ T284] EXT4-fs (loop2): unmounting filesystem. [ 262.543124][ T3304] loop3: detected capacity change from 0 to 1024 [ 262.558782][ T3304] EXT4-fs: Ignoring removed bh option [ 262.578806][ T3304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.680640][ T285] EXT4-fs (loop3): unmounting filesystem. [ 262.688158][ T283] EXT4-fs (loop1): unmounting filesystem. [ 262.958648][ T3318] syz.1.842[3318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 262.959111][ T3318] syz.1.842[3318] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.421026][ T3316] loop3: detected capacity change from 0 to 40427 [ 264.086331][ T3316] F2FS-fs (loop3): fault_injection options not supported [ 264.097357][ T3316] F2FS-fs (loop3): invalid crc value [ 264.174854][ T3323] overlayfs: failed to resolve './file1': -2 [ 264.490182][ T3316] F2FS-fs (loop3): Found nat_bits in checkpoint [ 264.557193][ T3316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 264.577775][ T3330] loop0: detected capacity change from 0 to 512 [ 265.675214][ T3342] loop4: detected capacity change from 0 to 512 [ 265.683834][ T3342] EXT4-fs: Ignoring removed orlov option [ 265.703480][ T3330] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 265.894224][ T3342] EXT4-fs (loop4): 1 orphan inode deleted [ 265.900102][ T3342] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 265.911522][ T3342] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.567236][ T3330] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.703826][ T3034] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 266.725903][ T3034] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 267.055083][ T3352] loop2: detected capacity change from 0 to 1024 [ 267.064877][ T3333] loop1: detected capacity change from 0 to 40427 [ 267.081091][ T286] EXT4-fs (loop4): unmounting filesystem. [ 267.092075][ T3352] EXT4-fs: Ignoring removed bh option [ 267.098492][ T3333] F2FS-fs (loop1): fault_injection options not supported [ 267.107146][ T3333] F2FS-fs (loop1): invalid crc value [ 267.141372][ T3356] loop4: detected capacity change from 0 to 512 [ 267.142205][ T3333] F2FS-fs (loop1): Found nat_bits in checkpoint [ 267.167221][ T282] EXT4-fs (loop0): unmounting filesystem. [ 267.178640][ T3352] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 267.207619][ T284] EXT4-fs (loop2): unmounting filesystem. [ 267.230172][ T3356] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 267.263999][ T3362] loop0: detected capacity change from 0 to 4096 [ 267.267491][ T3356] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.286134][ T3362] EXT4-fs (loop0): Test dummy encryption mode enabled [ 267.306786][ T3362] EXT4-fs (loop0): unsupported descriptor size 255 [ 267.313523][ T3333] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 269.464474][ T3373] overlayfs: conflicting lowerdir path [ 270.263549][ T3380] loop2: detected capacity change from 0 to 512 [ 270.270035][ T286] EXT4-fs (loop4): unmounting filesystem. [ 270.320299][ T3380] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.855: casefold flag without casefold feature [ 270.333244][ T3380] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.855: couldn't read orphan inode 15 (err -117) [ 270.346100][ T3380] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 270.814786][ T3389] syz.0.852[3389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.814873][ T3389] syz.0.852[3389] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 271.547416][ T28] audit: type=1400 audit(8199535228.207:480): avc: denied { setattr } for pid=3392 comm="syz.3.858" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.786669][ T3402] loop0: detected capacity change from 0 to 512 [ 272.741185][ T3402] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 272.750407][ T3402] ext4 filesystem being mounted at /170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.486766][ T282] EXT4-fs (loop0): unmounting filesystem. [ 273.494769][ T28] audit: type=1400 audit(8199535230.147:481): avc: denied { read } for pid=3377 comm="syz.2.855" path="/171/file0/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 273.691340][ T3424] syz.3.863[3424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.691628][ T3424] syz.3.863[3424] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.916126][ T3435] loop4: detected capacity change from 0 to 1024 [ 274.954402][ T3435] EXT4-fs: Ignoring removed bh option [ 275.005375][ T3435] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 275.044360][ T284] EXT4-fs (loop2): unmounting filesystem. [ 275.059009][ T3442] loop3: detected capacity change from 0 to 512 [ 275.059356][ T286] EXT4-fs (loop4): unmounting filesystem. [ 275.076077][ T3442] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 275.103440][ T3442] EXT4-fs (loop3): 1 truncate cleaned up [ 275.109857][ T3442] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 275.330916][ T3451] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 275.817131][ T2098] Bluetooth: hci0: command 0x1003 tx timeout [ 275.817162][ T2019] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 275.978493][ T285] EXT4-fs (loop3): unmounting filesystem. [ 276.146435][ T3464] loop0: detected capacity change from 0 to 512 [ 276.153613][ T3464] EXT4-fs: Ignoring removed orlov option [ 276.414894][ T3464] EXT4-fs (loop0): 1 orphan inode deleted [ 276.420758][ T3464] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 276.431932][ T3464] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 276.508365][ T3464] fuse: Bad value for 'fd' [ 276.627749][ T37] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 276.712141][ T37] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 277.176473][ T3472] tipc: Started in network mode [ 277.219427][ T3472] tipc: Node identity ee3932ac233c, cluster identity 4711 [ 277.291799][ T282] EXT4-fs (loop0): unmounting filesystem. [ 277.330834][ T3472] tipc: Enabled bearer , priority 0 [ 277.347825][ T3480] loop0: detected capacity change from 0 to 512 [ 277.430521][ T3472] tipc: Resetting bearer [ 277.516713][ T3480] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.878: casefold flag without casefold feature [ 277.579586][ T3470] tipc: Disabling bearer [ 277.645981][ T3480] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.878: couldn't read orphan inode 15 (err -117) [ 277.667095][ T3480] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 277.727876][ T3486] loop2: detected capacity change from 0 to 1024 [ 277.742868][ T3486] EXT4-fs: Ignoring removed bh option [ 277.823207][ T3486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 277.862471][ T284] EXT4-fs (loop2): unmounting filesystem. [ 279.702999][ T3517] netlink: 'syz.1.889': attribute type 16 has an invalid length. [ 279.721430][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.767981][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 279.784898][ T3520] syz.2.887[3520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 279.785234][ T3520] syz.2.887[3520] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 280.910256][ T3517] device erspan1 left promiscuous mode [ 280.941099][ T28] audit: type=1400 audit(8199535237.597:482): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 280.941524][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 281.006515][ T28] audit: type=1400 audit(8199535237.627:483): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.031821][ T28] audit: type=1400 audit(8199535237.627:484): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 281.143543][ T3537] loop1: detected capacity change from 0 to 16 [ 281.217158][ T3537] erofs: (device loop1): mounted with root inode @ nid 36. [ 281.234799][ T47] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 281.246334][ T3537] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 281.363031][ T28] audit: type=1400 audit(8199535237.657:485): avc: denied { create } for pid=3530 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 281.446695][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 281.452050][ T28] audit: type=1400 audit(8199535237.657:486): avc: denied { execmem } for pid=3532 comm="syz.2.893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 281.479133][ T28] audit: type=1400 audit(8199535237.777:487): avc: denied { create } for pid=3530 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 281.499644][ T28] audit: type=1400 audit(8199535237.787:488): avc: denied { bpf } for pid=3530 comm="syz.1.894" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 281.500370][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 281.529018][ T28] audit: type=1400 audit(8199535237.787:489): avc: denied { map_create } for pid=3530 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.575593][ T282] EXT4-fs (loop0): unmounting filesystem. [ 281.581575][ T28] audit: type=1400 audit(8199535237.797:490): avc: denied { prog_load } for pid=3530 comm="syz.1.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 281.616908][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 281.632056][ T3542] serio: Serial port ptm0 [ 281.634252][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 281.649531][ T28] audit: type=1400 audit(8199535237.807:491): avc: denied { mounton } for pid=3530 comm="syz.1.894" path="/186/file1" dev="tmpfs" ino=1050 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 281.667621][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 281.689281][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 281.796396][ T3535] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 281.797433][ T3546] loop3: detected capacity change from 0 to 512 [ 281.809192][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 281.927926][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 281.973073][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 282.186985][ T3556] loop1: detected capacity change from 0 to 16 [ 282.194216][ T3546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.213471][ T3546] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 282.241854][ T3556] erofs: (device loop1): mounted with root inode @ nid 36. [ 282.257549][ T335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 282.265196][ T335] bridge1: port 2(vlan2) entered blocking state [ 282.271493][ T335] bridge1: port 2(vlan2) entered forwarding state [ 282.732609][ T3561] 9p filesystem being mounted at /176/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 282.790944][ T285] EXT4-fs (loop3): unmounting filesystem. [ 282.925799][ T3573] loop3: detected capacity change from 0 to 512 [ 282.949116][ T3574] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 283.222537][ T3573] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 283.297182][ T3573] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.307827][ T3574] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 283.366362][ T3574] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 283.539547][ T3570] loop4: detected capacity change from 0 to 40427 [ 283.546647][ T3570] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 283.922994][ T3585] loop2: detected capacity change from 0 to 512 [ 283.929722][ T3585] EXT4-fs: Ignoring removed orlov option [ 283.953315][ T3570] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 284.260730][ T3585] EXT4-fs (loop2): 1 orphan inode deleted [ 284.266623][ T3585] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 284.277684][ T3585] ext4 filesystem being mounted at /182/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.365538][ T3585] fuse: Bad value for 'fd' [ 284.443970][ T3570] F2FS-fs (loop4): invalid crc value [ 285.087997][ T3591] loop0: detected capacity change from 0 to 16 [ 285.098741][ T3591] erofs: (device loop0): mounted with root inode @ nid 36. [ 285.111151][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 285.122758][ T3591] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 285.350955][ T3570] F2FS-fs (loop4): Found nat_bits in checkpoint [ 285.380131][ T3034] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:9: Failed to release dquot type 1 [ 285.452096][ T3570] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 285.460079][ T3570] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 285.468689][ T284] EXT4-fs (loop2): unmounting filesystem. [ 285.484670][ T285] EXT4-fs (loop3): unmounting filesystem. [ 285.567532][ T3602] tipc: Enabled bearer , priority 0 [ 285.585570][ T3602] device syzkaller0 entered promiscuous mode [ 285.613848][ T3602] tipc: Resetting bearer [ 285.624943][ T3601] tipc: Resetting bearer [ 285.753986][ T3601] tipc: Disabling bearer [ 285.968978][ T3609] loop3: detected capacity change from 0 to 512 [ 286.972357][ T3614] overlayfs: conflicting lowerdir path [ 287.155773][ T3609] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.186088][ T3609] ext4 filesystem being mounted at /182/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.675600][ T3627] loop0: detected capacity change from 0 to 2048 [ 287.677271][ T285] EXT4-fs (loop3): unmounting filesystem. [ 287.720066][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 287.720093][ T28] audit: type=1400 audit(8199535244.377:539): avc: denied { read write } for pid=3628 comm="syz.3.920" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.750266][ T28] audit: type=1400 audit(8199535244.377:540): avc: denied { open } for pid=3628 comm="syz.3.920" path="/dev/raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.755953][ T3627] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 287.774167][ T28] audit: type=1400 audit(8199535244.377:541): avc: denied { ioctl } for pid=3628 comm="syz.3.920" path="/dev/raw-gadget" dev="devtmpfs" ino=258 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.816143][ T28] audit: type=1400 audit(8199535244.467:542): avc: denied { mounton } for pid=3626 comm="syz.0.919" path="/179/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 287.853474][ T282] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 287.868509][ T282] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 287.887381][ T28] audit: type=1400 audit(8199535244.547:543): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 287.908108][ T3633] loop4: detected capacity change from 0 to 1024 [ 287.909168][ T282] EXT4-fs (loop0): unmounting filesystem. [ 287.915174][ T3633] EXT4-fs: Ignoring removed bh option [ 287.942171][ T3633] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 287.958809][ T286] EXT4-fs (loop4): unmounting filesystem. [ 287.976181][ T28] audit: type=1400 audit(8199535244.627:544): avc: denied { sqpoll } for pid=3638 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 288.052972][ T1221] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 288.082153][ T3642] loop0: detected capacity change from 0 to 512 [ 288.114447][ T3642] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 288.141727][ T3642] EXT4-fs (loop0): 1 truncate cleaned up [ 289.186238][ T3642] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 289.377445][ T3650] loop1: detected capacity change from 0 to 16 [ 289.987260][ T3655] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 290.032858][ T28] audit: type=1400 audit(8199535246.127:545): avc: denied { write } for pid=3640 comm="syz.0.923" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 290.058205][ T3650] erofs: (device loop1): mounted with root inode @ nid 36. [ 290.078534][ T47] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 290.089723][ T3649] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 290.253410][ T28] audit: type=1400 audit(8199535246.137:546): avc: denied { ioctl } for pid=3640 comm="syz.0.923" path="/181/file2/file1" dev="loop0" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 290.294100][ T282] EXT4-fs (loop0): unmounting filesystem. [ 290.341800][ T1221] usb 4-1: Using ep0 maxpacket: 8 [ 290.347600][ T28] audit: type=1400 audit(8199535246.147:547): avc: denied { setattr } for pid=3640 comm="syz.0.923" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 290.371095][ T1221] usb 4-1: config 162 has an invalid interface number: 197 but max is 0 [ 290.382016][ T1221] usb 4-1: config 162 has no interface number 0 [ 290.388389][ T1221] usb 4-1: config 162 interface 197 has no altsetting 0 [ 290.398328][ T3661] netlink: 44 bytes leftover after parsing attributes in process `syz.4.928'. [ 290.426071][ T3666] loop1: detected capacity change from 0 to 512 [ 290.440013][ T3662] 9pnet_fd: Insufficient options for proto=fd [ 290.455447][ T1221] usb 4-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 290.455500][ T3666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 290.464810][ T1221] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.487414][ T1221] usb 4-1: Product: syz [ 290.491638][ T1221] usb 4-1: Manufacturer: syz [ 290.496251][ T1221] usb 4-1: SerialNumber: syz [ 290.502959][ T3666] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 290.522351][ T3675] loop4: detected capacity change from 0 to 1024 [ 290.529839][ T28] audit: type=1400 audit(8199535247.187:548): avc: denied { ioctl } for pid=3670 comm="syz.2.931" path="/dev/input/event0" dev="devtmpfs" ino=260 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 290.533587][ T3675] EXT4-fs: Ignoring removed bh option [ 290.712452][ T3675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 291.191225][ T286] EXT4-fs (loop4): unmounting filesystem. [ 291.222402][ T1221] usb 4-1: USB disconnect, device number 3 [ 291.886467][ T283] EXT4-fs (loop1): unmounting filesystem. [ 292.036717][ T3700] loop0: detected capacity change from 0 to 16 [ 292.068382][ T3700] erofs: (device loop0): mounted with root inode @ nid 36. [ 292.385990][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 292.397413][ T3700] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 292.659413][ T3711] 9pnet_fd: Insufficient options for proto=fd [ 292.712199][ T3714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.943'. [ 292.857564][ T3723] loop0: detected capacity change from 0 to 512 [ 292.876900][ T3723] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.042558][ T3731] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 293.107835][ T3723] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.446869][ T282] EXT4-fs (loop0): unmounting filesystem. [ 293.511397][ T3736] tipc: Enabled bearer , priority 0 [ 293.518531][ T3736] device syzkaller0 entered promiscuous mode [ 293.526707][ T3735] tipc: Resetting bearer [ 293.536052][ T3735] tipc: Disabling bearer [ 293.572400][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 293.572417][ T28] audit: type=1400 audit(8199535250.227:552): avc: denied { ioctl } for pid=3738 comm="syz.0.951" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 293.634018][ T28] audit: type=1400 audit(8199535250.287:553): avc: denied { write } for pid=3738 comm="syz.0.951" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 293.756258][ T3745] loop3: detected capacity change from 0 to 512 [ 293.805462][ T3745] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 293.823351][ T3745] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 294.317365][ T28] audit: type=1400 audit(8199535250.727:554): avc: denied { mounton } for pid=3744 comm="syz.3.952" path="/187/file0/bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.447815][ T28] audit: type=1400 audit(8199535250.737:555): avc: denied { write } for pid=3744 comm="syz.3.952" name="bus" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.475876][ T28] audit: type=1400 audit(8199535250.737:556): avc: denied { add_name } for pid=3744 comm="syz.3.952" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.499641][ T28] audit: type=1400 audit(8199535250.737:557): avc: denied { create } for pid=3744 comm="syz.3.952" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.519959][ T28] audit: type=1400 audit(8199535250.747:558): avc: denied { setattr } for pid=3744 comm="syz.3.952" name="work" dev="loop3" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.541914][ T28] audit: type=1400 audit(8199535250.757:559): avc: denied { write open } for pid=3744 comm="syz.3.952" path=2F202864656C6574656429 dev="loop3" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 294.565637][ T28] audit: type=1400 audit(8199535250.767:560): avc: denied { create } for pid=3744 comm="syz.3.952" name="#7f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 294.591695][ T28] audit: type=1400 audit(8199535250.767:561): avc: denied { remove_name } for pid=3744 comm="syz.3.952" name="#7f" dev="loop3" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 294.647343][ T285] EXT4-fs (loop3): unmounting filesystem. [ 294.702234][ T3758] tipc: Enabled bearer , priority 0 [ 294.720093][ T3758] device syzkaller0 entered promiscuous mode [ 294.758571][ T3757] tipc: Resetting bearer [ 294.784687][ T3757] tipc: Disabling bearer [ 294.998995][ T3769] loop3: detected capacity change from 0 to 512 [ 295.008148][ T3769] EXT4-fs: Ignoring removed orlov option [ 295.835230][ T3770] loop4: detected capacity change from 0 to 16 [ 295.888698][ T3770] erofs: (device loop4): mounted with root inode @ nid 36. [ 295.903473][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 295.914944][ T3770] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 296.049984][ T3765] netlink: 44 bytes leftover after parsing attributes in process `syz.2.958'. [ 296.084247][ T3769] EXT4-fs (loop3): 1 orphan inode deleted [ 296.090790][ T3769] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 296.197888][ T3769] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.408081][ T3761] fuse: Bad value for 'fd' [ 296.415823][ T351] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:4: Failed to release dquot type 1 [ 296.487402][ T3785] loop2: detected capacity change from 0 to 512 [ 296.497395][ T3785] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.964: casefold flag without casefold feature [ 296.510642][ T3785] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.964: couldn't read orphan inode 15 (err -117) [ 296.529601][ T3788] netlink: 12 bytes leftover after parsing attributes in process `syz.1.965'. [ 296.552200][ T3785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 296.602985][ T285] EXT4-fs (loop3): unmounting filesystem. [ 296.647546][ T3793] loop0: detected capacity change from 0 to 512 [ 296.665793][ T3788] bridge3: port 1(veth5) entered blocking state [ 296.696360][ T3788] bridge3: port 1(veth5) entered disabled state [ 296.708191][ T3788] device veth5 entered promiscuous mode [ 296.725924][ T3793] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 296.736411][ T3793] ext4 filesystem being mounted at /188/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.509426][ T282] EXT4-fs (loop0): unmounting filesystem. [ 297.547123][ T3814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 297.567375][ T3814] bridge2: port 1(veth3) entered blocking state [ 297.573682][ T3814] bridge2: port 1(veth3) entered disabled state [ 297.588101][ T3814] device veth3 entered promiscuous mode [ 298.282112][ T284] EXT4-fs (loop2): unmounting filesystem. [ 298.778627][ T3829] netlink: 44 bytes leftover after parsing attributes in process `syz.2.973'. [ 299.128365][ T28] kauditd_printk_skb: 44 callbacks suppressed [ 299.128392][ T28] audit: type=1400 audit(8199535255.747:605): avc: denied { create } for pid=3832 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.362144][ T28] audit: type=1400 audit(8199535255.777:606): avc: denied { getopt } for pid=3832 comm="syz.2.978" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 299.448244][ T28] audit: type=1400 audit(8199535256.107:607): avc: denied { create } for pid=3846 comm="syz.4.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.641410][ T28] audit: type=1400 audit(8199535256.297:608): avc: denied { setopt } for pid=3846 comm="syz.4.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.707236][ T28] audit: type=1400 audit(8199535256.357:609): avc: denied { write } for pid=3846 comm="syz.4.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 299.746940][ T3853] loop2: detected capacity change from 0 to 512 [ 299.826508][ T3853] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 299.847444][ T3853] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 300.027573][ T284] EXT4-fs (loop2): unmounting filesystem. [ 300.102484][ T3859] netlink: 136 bytes leftover after parsing attributes in process `syz.2.984'. [ 300.138614][ T3859] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 300.188990][ T28] audit: type=1400 audit(8199535256.847:610): avc: denied { read write } for pid=284 comm="syz-executor" name="loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.315069][ T3869] loop3: detected capacity change from 0 to 16 [ 300.636010][ T3869] erofs: (device loop3): mounted with root inode @ nid 36. [ 300.655298][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 300.666733][ T3869] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 300.808140][ T28] audit: type=1400 audit(8199535256.847:611): avc: denied { open } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.837116][ T28] audit: type=1400 audit(8199535256.847:612): avc: denied { ioctl } for pid=284 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=120 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 300.887179][ T28] audit: type=1400 audit(8199535256.877:613): avc: denied { execmem } for pid=3865 comm="syz.2.987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 300.906680][ T28] audit: type=1400 audit(8199535256.957:614): avc: denied { create } for pid=3862 comm="syz.3.986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 300.970454][ T3873] bridge1: port 2(vlan2) entered disabled state [ 300.991901][ T3873] netlink: 44 bytes leftover after parsing attributes in process `syz.1.988'. [ 301.027259][ T3880] tipc: Enabled bearer , priority 0 [ 301.034426][ T3880] device syzkaller0 entered promiscuous mode [ 301.043513][ T3880] tipc: Resetting bearer [ 301.063149][ T3878] tipc: Resetting bearer [ 301.070083][ T3878] tipc: Disabling bearer [ 302.103189][ T3896] loop1: detected capacity change from 0 to 512 [ 302.162236][ T3896] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 302.180966][ T3896] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.310497][ T283] EXT4-fs (loop1): unmounting filesystem. [ 302.351967][ T3907] loop3: detected capacity change from 0 to 4096 [ 302.367893][ T3907] EXT4-fs (loop3): Test dummy encryption mode enabled [ 302.382723][ T3907] EXT4-fs (loop3): unsupported descriptor size 255 [ 303.369485][ T3913] overlayfs: conflicting lowerdir path [ 303.911480][ T3921] bridge1: port 1(veth0_to_bond) entered disabled state [ 303.962125][ T3920] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1003'. [ 305.472689][ T3936] loop2: detected capacity change from 0 to 16 [ 305.563924][ T3936] erofs: (device loop2): mounted with root inode @ nid 36. [ 305.578189][ T47] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 305.589591][ T3936] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 305.824594][ T3943] loop2: detected capacity change from 0 to 512 [ 305.889922][ T3943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 305.899082][ T3943] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 306.019221][ T3953] loop4: detected capacity change from 0 to 512 [ 306.046493][ T3953] ======================================================= [ 306.046493][ T3953] WARNING: The mand mount option has been deprecated and [ 306.046493][ T3953] and is ignored by this kernel. Remove the mand [ 306.046493][ T3953] option from the mount to silence this warning. [ 306.046493][ T3953] ======================================================= [ 306.218426][ T284] EXT4-fs (loop2): unmounting filesystem. [ 306.226456][ T3953] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 306.236529][ T3953] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.951178][ T286] EXT4-fs (loop4): unmounting filesystem. [ 307.208930][ T3977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1017'. [ 307.234777][ T3977] bridge4: port 1(veth7) entered blocking state [ 307.241290][ T3977] bridge4: port 1(veth7) entered disabled state [ 307.249565][ T3977] device veth7 entered promiscuous mode [ 307.305821][ T3982] loop4: detected capacity change from 0 to 4096 [ 307.451097][ T3982] EXT4-fs (loop4): Test dummy encryption mode enabled [ 307.496028][ T3982] EXT4-fs (loop4): unsupported descriptor size 255 [ 307.727173][ T28] kauditd_printk_skb: 47 callbacks suppressed [ 307.727189][ T28] audit: type=1400 audit(8199535264.377:662): avc: denied { read } for pid=3985 comm="syz.0.1021" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 307.760583][ T28] audit: type=1400 audit(8199535264.377:663): avc: denied { open } for pid=3985 comm="syz.0.1021" path="/dev/kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.299350][ T3984] overlayfs: conflicting lowerdir path [ 308.308659][ T28] audit: type=1400 audit(8199535264.377:664): avc: denied { ioctl } for pid=3985 comm="syz.0.1021" path="/dev/kvm" dev="devtmpfs" ino=83 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 308.355698][ T3980] loop1: detected capacity change from 0 to 40427 [ 308.363063][ T3980] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 308.370934][ T3980] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 308.380310][ T3980] F2FS-fs (loop1): invalid crc value [ 308.388608][ T3980] F2FS-fs (loop1): Found nat_bits in checkpoint [ 308.495815][ T28] audit: type=1400 audit(8199535265.147:665): avc: denied { write } for pid=3994 comm="syz.2.1023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 308.879571][ T3980] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 308.926167][ T4004] loop4: detected capacity change from 0 to 512 [ 308.939994][ T3980] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 309.436987][ T4004] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 309.442765][ T28] audit: type=1400 audit(8199535266.087:666): avc: denied { execute } for pid=4006 comm="syz.0.1026" path="/202/file1" dev="tmpfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 309.482766][ T4004] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 309.686765][ T28] audit: type=1400 audit(8199535266.337:667): avc: denied { mount } for pid=4017 comm="syz.3.1030" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 309.718740][ T286] EXT4-fs (loop4): unmounting filesystem. [ 309.795662][ T4021] overlayfs: missing 'lowerdir' [ 309.868517][ T4019] 9p filesystem being mounted at /204/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 309.907092][ T28] audit: type=1400 audit(8199535266.417:668): avc: denied { create } for pid=4018 comm="syz.0.1029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 309.928164][ T28] audit: type=1400 audit(8199535266.547:669): avc: denied { unmount } for pid=284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 310.647216][ T4028] 9pnet_fd: Insufficient options for proto=fd [ 310.715467][ T28] audit: type=1400 audit(8199535266.547:670): avc: denied { read } for pid=4023 comm="syz.4.1028" dev="nsfs" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.738219][ T28] audit: type=1400 audit(8199535266.547:671): avc: denied { open } for pid=4023 comm="syz.4.1028" path="net:[4026532578]" dev="nsfs" ino=4026532578 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 310.889097][ T4032] loop4: detected capacity change from 0 to 512 [ 310.897542][ T4032] EXT4-fs: Ignoring removed orlov option [ 311.444995][ T4032] EXT4-fs (loop4): 1 orphan inode deleted [ 311.450900][ T4032] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 311.461552][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 311.474268][ T4032] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 311.510649][ T4032] fuse: Bad value for 'fd' [ 311.692201][ T4038] loop3: detected capacity change from 0 to 512 [ 311.699388][ T4038] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 312.027351][ T4046] loop0: detected capacity change from 0 to 512 [ 312.033996][ T4046] EXT4-fs: Ignoring removed orlov option [ 312.062459][ T286] EXT4-fs (loop4): unmounting filesystem. [ 312.147253][ T4046] EXT4-fs (loop0): 1 orphan inode deleted [ 312.153077][ T4046] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 312.164028][ T4046] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 312.245831][ T4046] fuse: Bad value for 'fd' [ 312.282369][ T4038] EXT4-fs (loop3): 1 truncate cleaned up [ 312.305314][ T4038] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 312.826824][ T4044] loop2: detected capacity change from 0 to 1024 [ 312.855666][ T4044] EXT4-fs: Ignoring removed bh option [ 313.005647][ T4044] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 313.015372][ T2944] __quota_error: 3 callbacks suppressed [ 313.015391][ T2944] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 313.099643][ T28] audit: type=1400 audit(8199535269.737:674): avc: denied { write } for pid=4035 comm="syz.3.1033" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 313.344999][ T2944] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:8: Failed to release dquot type 1 [ 313.383462][ T282] EXT4-fs (loop0): unmounting filesystem. [ 313.396560][ T284] EXT4-fs (loop2): unmounting filesystem. [ 313.422394][ T28] audit: type=1400 audit(8199535269.747:675): avc: denied { ioctl } for pid=4035 comm="syz.3.1033" path="/205/file2/file1" dev="loop3" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 313.484241][ T28] audit: type=1400 audit(8199535269.747:676): avc: denied { setattr } for pid=4035 comm="syz.3.1033" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.510290][ T285] EXT4-fs (loop3): unmounting filesystem. [ 313.513567][ T4060] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.1038'. [ 315.347211][ T28] audit: type=1400 audit(8199535272.007:677): avc: denied { setattr } for pid=4072 comm="syz.1.1043" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 315.496407][ T4075] loop4: detected capacity change from 0 to 40427 [ 315.508812][ T4075] F2FS-fs (loop4): fault_injection options not supported [ 316.231258][ T4083] device erspan1 entered promiscuous mode [ 316.341410][ T4075] F2FS-fs (loop4): invalid crc value [ 316.608025][ T4075] F2FS-fs (loop4): Found nat_bits in checkpoint [ 316.655354][ T4075] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 316.837861][ T4095] loop0: detected capacity change from 0 to 512 [ 316.844904][ T4095] EXT4-fs: Ignoring removed orlov option [ 317.194625][ T28] audit: type=1400 audit(8199535273.607:678): avc: denied { write } for pid=4091 comm="syz.2.1048" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 317.289835][ T4095] EXT4-fs (loop0): 1 orphan inode deleted [ 317.295712][ T4095] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 317.306722][ T4095] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.334539][ T4095] fuse: Bad value for 'fd' [ 317.367867][ T4066] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 317.390356][ T4066] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:10: Failed to release dquot type 1 [ 317.801810][ T4106] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 317.814275][ T28] audit: type=1400 audit(8199535274.457:679): avc: denied { mount } for pid=4104 comm="syz.3.1050" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 317.874069][ T282] EXT4-fs (loop0): unmounting filesystem. [ 318.137200][ T28] audit: type=1400 audit(8199535274.747:680): avc: denied { ioctl } for pid=4069 comm="syz.4.1042" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=28212 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 318.370695][ T28] audit: type=1400 audit(8199535275.027:681): avc: denied { read } for pid=4069 comm="syz.4.1042" path="/204/file1/file1" dev="loop4" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 318.557379][ T28] audit: type=1400 audit(8199535275.217:682): avc: denied { unmount } for pid=285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 318.595394][ T4121] netlink: 'syz.3.1055': attribute type 16 has an invalid length. [ 318.619345][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.626920][ T4121] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 318.652275][ T4121] device erspan1 left promiscuous mode [ 318.660427][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 318.668938][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 318.677759][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 318.686218][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 318.694834][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 318.723348][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 318.804534][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 318.823087][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 318.831670][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 318.845119][ T37] bridge1: port 2(vlan2) entered blocking state [ 318.851545][ T37] bridge1: port 2(vlan2) entered forwarding state [ 319.901847][ T4140] syz.2.1058[4140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.902117][ T4140] syz.2.1058[4140] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.147548][ T28] audit: type=1400 audit(8199535276.577:683): avc: denied { create } for pid=4127 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 321.059537][ T4147] 9pnet_fd: Insufficient options for proto=fd [ 322.081373][ T4159] loop1: detected capacity change from 0 to 512 [ 322.103252][ T4159] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 322.191507][ T4159] EXT4-fs (loop1): 1 truncate cleaned up [ 322.200470][ T4159] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 322.549704][ T4170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1068'. [ 323.815750][ T4171] loop2: detected capacity change from 0 to 512 [ 323.824422][ T4171] EXT4-fs: Ignoring removed orlov option [ 324.394090][ T28] audit: type=1400 audit(8199535279.247:684): avc: denied { create } for pid=4164 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 324.432250][ T4174] loop0: detected capacity change from 0 to 512 [ 324.464425][ T28] audit: type=1400 audit(8199535279.307:685): avc: denied { setopt } for pid=4164 comm="syz.3.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 324.870189][ T286] syz-executor: attempt to access beyond end of device [ 324.870189][ T286] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 324.899717][ T4171] EXT4-fs (loop2): 1 orphan inode deleted [ 324.905557][ T4171] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 324.914963][ T4171] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.000095][ T4166] fuse: Bad value for 'fd' [ 325.006364][ T37] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 325.048441][ T4174] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 325.057494][ T37] EXT4-fs error (device loop2): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 325.074242][ T4174] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 325.091004][ T283] EXT4-fs (loop1): unmounting filesystem. [ 326.355350][ T4193] loop3: detected capacity change from 0 to 512 [ 326.393412][ T282] EXT4-fs (loop0): unmounting filesystem. [ 326.401423][ T4193] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.1073: casefold flag without casefold feature [ 326.403878][ T284] EXT4-fs (loop2): unmounting filesystem. [ 326.420871][ T4193] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.1073: couldn't read orphan inode 15 (err -117) [ 326.461366][ T4193] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 326.504855][ T4200] loop2: detected capacity change from 0 to 512 [ 326.579542][ T4200] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 326.588942][ T4200] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 326.660775][ T4205] syz.0.1074[4205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.661160][ T4205] syz.0.1074[4205] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.947295][ T4216] loop0: detected capacity change from 0 to 16 [ 328.028495][ T4216] erofs: (device loop0): mounted with root inode @ nid 36. [ 328.042124][ T47] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 328.053629][ T4216] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 328.375290][ T4219] loop4: detected capacity change from 0 to 512 [ 328.389708][ T4219] EXT4-fs: Ignoring removed orlov option [ 329.392045][ T4219] EXT4-fs (loop4): 1 orphan inode deleted [ 329.398430][ T4219] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 329.408281][ T4219] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.423284][ T37] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 329.433289][ T37] EXT4-fs error (device loop4): ext4_release_dquot:6837: comm kworker/u4:2: Failed to release dquot type 1 [ 329.459011][ T4217] fuse: Bad value for 'fd' [ 329.500050][ T4228] serio: Serial port ptm0 [ 329.536945][ T284] EXT4-fs (loop2): unmounting filesystem. [ 329.651318][ T286] EXT4-fs (loop4): unmounting filesystem. [ 329.690750][ T4237] loop4: detected capacity change from 0 to 512 [ 329.694653][ T4238] loop1: detected capacity change from 0 to 1024 [ 329.707500][ T4238] EXT4-fs: Ignoring removed bh option [ 329.762473][ T4238] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 329.773683][ T4242] netlink: 'syz.2.1086': attribute type 16 has an invalid length. [ 329.799872][ T4237] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 329.809692][ T283] EXT4-fs (loop1): unmounting filesystem. [ 329.847881][ T4237] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 329.859196][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.866857][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 329.886687][ T4242] device erspan1 left promiscuous mode [ 329.894126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 329.926162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 329.975801][ T28] audit: type=1400 audit(8199535286.627:686): avc: denied { ioctl } for pid=4231 comm="syz.0.1083" path="socket:[29847]" dev="sockfs" ino=29847 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.003256][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 330.011783][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 330.020231][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 330.029247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 330.038235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 330.046646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 330.055954][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 330.391597][ T28] audit: type=1400 audit(8199535286.787:687): avc: denied { bpf } for pid=4236 comm="syz.4.1085" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.416948][ T28] audit: type=1400 audit(8199535286.797:688): avc: denied { prog_load } for pid=4236 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.436040][ T28] audit: type=1400 audit(8199535286.797:689): avc: denied { perfmon } for pid=4236 comm="syz.4.1085" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 330.526939][ T28] audit: type=1400 audit(8199535286.797:690): avc: denied { prog_run } for pid=4236 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 330.549284][ T28] audit: type=1400 audit(8199535286.847:691): avc: denied { create } for pid=4236 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.579915][ T28] audit: type=1400 audit(8199535286.867:692): avc: denied { write } for pid=4236 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 330.606741][ T286] EXT4-fs (loop4): unmounting filesystem. [ 330.647315][ T28] audit: type=1400 audit(8199535286.877:693): avc: denied { create } for pid=4236 comm="syz.4.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 330.667491][ T28] audit: type=1400 audit(8199535286.937:694): avc: denied { setattr } for pid=4236 comm="syz.4.1085" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 330.865589][ T285] EXT4-fs (loop3): unmounting filesystem. [ 330.995134][ T4266] loop3: detected capacity change from 0 to 16 [ 331.003391][ T4266] erofs: (device loop3): mounted with root inode @ nid 36. [ 331.017173][ T47] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 331.028622][ T4266] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 331.197230][ T718] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 331.427362][ T718] usb 2-1: Using ep0 maxpacket: 8 [ 331.435072][ T718] usb 2-1: config 162 has an invalid interface number: 197 but max is 0 [ 331.495865][ T718] usb 2-1: config 162 has no interface number 0 [ 331.527513][ T718] usb 2-1: config 162 interface 197 has no altsetting 0 [ 331.556763][ T718] usb 2-1: New USB device found, idVendor=0c10, idProduct=0000, bcdDevice=95.a7 [ 331.591704][ T718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.621529][ T718] usb 2-1: Product: syz [ 331.640190][ T718] usb 2-1: Manufacturer: syz [ 331.653098][ T718] usb 2-1: SerialNumber: syz [ 331.949580][ T4275] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 332.028748][ T4278] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.1096'. [ 332.783022][ T4276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1095'. [ 333.108113][ T4285] loop0: detected capacity change from 0 to 1024 [ 333.117930][ T4285] EXT4-fs: Ignoring removed bh option [ 333.159066][ T4289] loop4: detected capacity change from 0 to 2048 [ 333.189624][ T4289] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 333.201117][ T4285] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.235913][ T282] EXT4-fs (loop0): unmounting filesystem. [ 333.245173][ T286] EXT4-fs (loop4): unmounting filesystem. [ 333.374233][ T4301] loop0: detected capacity change from 0 to 512 [ 333.406914][ T4301] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 333.732589][ T4301] ext4 filesystem being mounted at /217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.809290][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 335.809308][ T28] audit: type=1400 audit(8199535291.037:734): avc: denied { mounton } for pid=4300 comm="syz.0.1102" path="/217/file0/bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 335.842475][ T718] usb 2-1: USB disconnect, device number 5 [ 338.147688][ T4328] loop4: detected capacity change from 0 to 16 [ 338.221008][ T4328] erofs: (device loop4): mounted with root inode @ nid 36. [ 338.235097][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 338.246233][ T4328] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 338.246354][ T28] audit: type=1400 audit(8199535291.047:735): avc: denied { write } for pid=4300 comm="syz.0.1102" name="bus" dev="loop0" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 338.289456][ T28] audit: type=1400 audit(8199535291.047:736): avc: denied { add_name } for pid=4300 comm="syz.0.1102" name="work" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 338.314077][ T282] EXT4-fs (loop0): unmounting filesystem. [ 338.318032][ T28] audit: type=1400 audit(8199535291.057:737): avc: denied { setattr } for pid=4300 comm="syz.0.1102" name="work" dev="loop0" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 338.342194][ T28] audit: type=1400 audit(8199535291.067:738): avc: denied { write open } for pid=4300 comm="syz.0.1102" path=2F202864656C6574656429 dev="loop0" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.431340][ T4335] loop3: detected capacity change from 0 to 1024 [ 338.448107][ T4335] EXT4-fs: Ignoring removed bh option [ 338.481884][ T28] audit: type=1400 audit(8199535291.077:739): avc: denied { create } for pid=4300 comm="syz.0.1102" name="#97" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.502404][ T28] audit: type=1400 audit(8199535291.077:740): avc: denied { remove_name } for pid=4300 comm="syz.0.1102" name="#97" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 338.564683][ T28] audit: type=1400 audit(8199535291.077:741): avc: denied { rename } for pid=4300 comm="syz.0.1102" name="#97" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.680361][ T28] audit: type=1400 audit(8199535291.087:742): avc: denied { unlink } for pid=4300 comm="syz.0.1102" name="#97" dev="loop0" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 338.894888][ T4335] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 338.911947][ T28] audit: type=1400 audit(8199535291.097:743): avc: denied { unlink } for pid=4300 comm="syz.0.1102" name="#98" dev="loop0" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 338.949056][ T285] EXT4-fs (loop3): unmounting filesystem. [ 338.980405][ T4333] loop2: detected capacity change from 0 to 40427 [ 338.987716][ T4333] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 339.009013][ T4333] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 339.018792][ T4333] F2FS-fs (loop2): invalid crc value [ 339.025663][ T4333] F2FS-fs (loop2): Found nat_bits in checkpoint [ 339.055429][ T4333] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 339.063508][ T4333] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 339.991944][ T309] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 340.035709][ T4357] overlayfs: conflicting lowerdir path [ 340.059006][ T4360] loop1: detected capacity change from 0 to 512 [ 340.066023][ T4360] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.090713][ T4360] EXT4-fs (loop1): 1 truncate cleaned up [ 340.096651][ T4360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 340.217209][ T309] usb 4-1: Using ep0 maxpacket: 8 [ 340.417397][ T4369] syz.0.1119[4369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.417478][ T4369] syz.0.1119[4369] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.831578][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 343.869980][ T28] audit: type=1400 audit(8199535297.287:761): avc: denied { create } for pid=4361 comm="syz.0.1119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 343.874993][ T283] EXT4-fs (loop1): unmounting filesystem. [ 343.889967][ T309] usb 4-1: unable to read config index 0 descriptor/all [ 343.934596][ T309] usb 4-1: can't read configurations, error -71 [ 343.961407][ T28] audit: type=1400 audit(8199535298.147:762): avc: denied { write } for pid=4359 comm="syz.1.1118" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 344.048032][ T28] audit: type=1400 audit(8199535300.577:763): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 344.070757][ T28] audit: type=1400 audit(8199535300.627:764): avc: denied { read } for pid=4378 comm="syz.0.1127" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 344.284548][ T4387] fuse: Bad value for 'fd' [ 346.110943][ T4388] loop4: detected capacity change from 0 to 16 [ 346.501337][ T4389] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 346.523937][ T4388] erofs: (device loop4): mounted with root inode @ nid 36. [ 346.543279][ T47] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 346.554404][ T4386] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 347.167679][ T4398] serio: Serial port ptm1 [ 347.170971][ T4397] tipc: Enabled bearer , priority 0 [ 347.180299][ T4397] device syzkaller0 entered promiscuous mode [ 347.195160][ T4397] tipc: Resetting bearer [ 347.201779][ T28] audit: type=1400 audit(8199535300.627:765): avc: denied { open } for pid=4378 comm="syz.0.1127" path="net:[4026532292]" dev="nsfs" ino=4026532292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.254906][ T4400] syz.4.1129[4400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.255265][ T4400] syz.4.1129[4400] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 347.724156][ T4396] tipc: Resetting bearer [ 348.271632][ T28] audit: type=1400 audit(8199535300.627:766): avc: denied { create } for pid=4378 comm="syz.0.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 348.293867][ T4396] tipc: Disabling bearer [ 348.334042][ T3756] tipc: Node number set to 2413684547 [ 348.341039][ T28] audit: type=1400 audit(8199535300.707:767): avc: denied { write } for pid=4381 comm="syz.1.1124" name="uinput" dev="devtmpfs" ino=262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 348.378933][ T28] audit: type=1400 audit(8199535303.837:768): avc: denied { ioctl } for pid=4396 comm="syz.3.1130" path="socket:[30080]" dev="sockfs" ino=30080 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 348.413349][ T4409] 9p filesystem being mounted at /227/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 348.439953][ T4415] loop3: detected capacity change from 0 to 512 [ 348.575759][ T4415] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 348.585042][ T4415] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.448414][ T285] EXT4-fs (loop3): unmounting filesystem. [ 350.512824][ T4432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1139'. [ 350.641416][ T4434] loop3: detected capacity change from 0 to 4096 [ 350.650661][ T4435] bridge5: port 1(veth9) entered blocking state [ 350.656950][ T4435] bridge5: port 1(veth9) entered disabled state [ 350.892380][ T4434] EXT4-fs (loop3): Test dummy encryption mode enabled [ 350.902774][ T4435] device veth9 entered promiscuous mode [ 350.908728][ T4434] EXT4-fs (loop3): unsupported descriptor size 255 [ 351.002496][ T4443] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 351.172910][ T4432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1139'. [ 351.319531][ T4445] loop4: detected capacity change from 0 to 512 [ 351.350343][ T4445] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 351.369899][ T4445] EXT4-fs (loop4): 1 truncate cleaned up [ 351.375711][ T4445] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 352.092304][ T4451] syz.1.1143[4451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 352.093755][ T4451] syz.1.1143[4451] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 354.134086][ T28] audit: type=1400 audit(8199535309.747:769): avc: denied { ioctl } for pid=4444 comm="syz.4.1142" path="/221/file2/file1" dev="loop4" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 354.188595][ T4455] tipc: Enabled bearer , priority 0 [ 354.195647][ T4455] device syzkaller0 entered promiscuous mode [ 354.204732][ T4455] tipc: Resetting bearer [ 354.223036][ T286] EXT4-fs (loop4): unmounting filesystem. [ 354.242046][ T4454] tipc: Resetting bearer [ 354.249873][ T4457] loop0: detected capacity change from 0 to 512 [ 354.265109][ T4457] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 354.288060][ T4454] tipc: Disabling bearer [ 354.300173][ T4462] loop3: detected capacity change from 0 to 512 [ 354.340237][ T4457] EXT4-fs (loop0): 1 truncate cleaned up [ 354.346168][ T4457] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 354.362656][ T4462] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 354.371882][ T4462] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.549885][ T4472] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 355.882124][ T282] EXT4-fs (loop0): unmounting filesystem. [ 355.888238][ T285] EXT4-fs (loop3): unmounting filesystem. [ 356.014518][ T4479] loop2: detected capacity change from 0 to 512 [ 356.026695][ T4483] 9p filesystem being mounted at /238/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 356.114161][ T4477] loop3: detected capacity change from 0 to 40427 [ 356.133985][ T4477] F2FS-fs (loop3): fault_injection options not supported [ 356.161593][ T4477] F2FS-fs (loop3): invalid crc value [ 356.168967][ T4479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 356.281596][ T4479] ext4 filesystem being mounted at /230/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.602613][ T4496] loop0: detected capacity change from 0 to 512 [ 356.616454][ T4496] EXT4-fs: Ignoring removed orlov option [ 359.139538][ T4477] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 359.176951][ T4496] EXT4-fs (loop0): 1 orphan inode deleted [ 359.182911][ T4496] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 359.192065][ T449] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 359.204371][ T4496] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 359.253439][ T4494] fuse: Bad value for 'fd' [ 359.258932][ T28] audit: type=1400 audit(8199535315.907:770): avc: denied { mounton } for pid=4490 comm="syz.0.1155" path="/228/file1/file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 359.441435][ T449] EXT4-fs error (device loop0): ext4_release_dquot:6837: comm kworker/u4:5: Failed to release dquot type 1 [ 359.497991][ T282] EXT4-fs (loop0): unmounting filesystem. [ 359.703590][ T284] EXT4-fs (loop2): unmounting filesystem. [ 360.374489][ T4513] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1157'. [ 360.502415][ T4518] syz.0.1158[4518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 360.502509][ T4518] syz.0.1158[4518] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.167206][ T4531] loop1: detected capacity change from 0 to 512 [ 362.205335][ T4533] tipc: Enabled bearer , priority 0 [ 362.216025][ T4533] device syzkaller0 entered promiscuous mode [ 362.226242][ T4532] tipc: Resetting bearer [ 362.233532][ T4531] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 362.245982][ T4532] tipc: Disabling bearer [ 362.251912][ T4531] ext4 filesystem being mounted at /242/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 362.425102][ T28] audit: type=1400 audit(8199535319.077:771): avc: denied { write } for pid=4539 comm="syz.4.1166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 362.973224][ T4546] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1168'. [ 362.983066][ T4546] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 363.062871][ T283] EXT4-fs (loop1): unmounting filesystem. [ 363.141985][ T4558] loop3: detected capacity change from 0 to 512 [ 363.189292][ T4558] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 363.216493][ T4558] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.287395][ T4585] loop1: detected capacity change from 0 to 512 [ 366.294086][ T4585] EXT4-fs: Ignoring removed orlov option [ 366.673556][ T4585] EXT4-fs (loop1): 1 orphan inode deleted [ 366.679429][ T4585] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 366.690758][ T4585] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 366.787270][ T4585] fuse: Bad value for 'fd' [ 367.398418][ T335] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 367.417110][ T335] EXT4-fs error (device loop1): ext4_release_dquot:6837: comm kworker/u4:3: Failed to release dquot type 1 [ 367.546060][ T28] audit: type=1400 audit(8199535324.157:772): avc: denied { read } for pid=4587 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 367.583935][ T283] EXT4-fs (loop1): unmounting filesystem. [ 367.603415][ T285] EXT4-fs (loop3): unmounting filesystem. [ 367.615158][ T4597] loop0: detected capacity change from 0 to 512 [ 367.787747][ T4597] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 368.339699][ T4597] ext4 filesystem being mounted at /231/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.567322][ T4609] loop2: detected capacity change from 0 to 512 [ 368.581862][ T4066] Bluetooth: hci0: Frame reassembly failed (-84) [ 368.609072][ T4609] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 368.668521][ T4609] EXT4-fs (loop2): 1 truncate cleaned up [ 368.674287][ T4609] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 369.636166][ T282] EXT4-fs (loop0): unmounting filesystem. [ 369.896447][ T284] EXT4-fs (loop2): unmounting filesystem. [ 369.906050][ T4613] loop1: detected capacity change from 0 to 40427 [ 369.921852][ T4613] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 369.982319][ T4628] loop2: detected capacity change from 0 to 4096 [ 369.990988][ T4628] EXT4-fs (loop2): Test dummy encryption mode enabled [ 369.991715][ T4613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 369.998897][ T4628] EXT4-fs (loop2): unsupported descriptor size 255 Stopping sshd: stopped /usr/sbin/sshd (pid 194) OK Stopping crond: [ 370.099092][ T4613] F2FS-fs (loop1): invalid crc value stopped /usr/sbin/crond (pid 185) OK [ 370.347364][ T4641] syz.0.1189[4641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.347539][ T4641] syz.0.1189[4641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 372.049810][ T4642] loop3: detected capacity change from 0 to 512 [ 372.067987][ T4642] EXT4-fs: Ignoring removed orlov option [ 372.205584][ T3457] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 372.643135][ T4613] F2FS-fs (loop1): Found nat_bits in checkpoint [ 372.850900][ T4642] EXT4-fs (loop3): 1 orphan inode deleted [ 372.856810][ T4642] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 372.869340][ T4642] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.960849][ T4642] fuse: Bad value for 'fd' [ 373.317279][ T8] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 373.379848][ T4650] tipc: Enabled bearer , priority 0 [ 373.389887][ T4650] device syzkaller0 entered promiscuous mode [ 373.397624][ T4653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'. [ 373.398624][ T8] EXT4-fs error (device loop3): ext4_release_dquot:6837: comm kworker/u4:0: Failed to release dquot type 1 [ 373.430102][ T4649] tipc: Resetting bearer [ 373.436791][ T285] EXT4-fs (loop3): unmounting filesystem. [ 373.446648][ T4649] tipc: Disabling bearer [ 373.472925][ T4657] loop3: detected capacity change from 0 to 512 [ 373.484942][ T4653] bridge3: port 1(veth7) entered blocking state [ 373.494963][ T4653] bridge3: port 1(veth7) entered disabled state [ 373.509439][ T4653] device veth7 entered promiscuous mode [ 373.533040][ T28] audit: type=1400 audit(8199535330.187:773): avc: denied { create } for pid=4659 comm="syz.2.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 373.534243][ T4658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1194'. [ 373.566814][ T4657] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. Stopping dhcpcd.[ 373.580422][ T4657] ext4 filesystem being mounted at /238/file0 supports timestamps until 2038-01-19 (0x7fffffff) .. stopped /sbin/dhcpcd (pid 140) [ 373.692479][ T28] audit: type=1400 audit(8199535330.347:774): avc: denied { search } for pid=4669 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 373.741422][ T4674] 9pnet_fd: Insufficient options for proto=fd Stopping network: [ 373.967687][ T4689] netlink: 'syz.0.1201': attribute type 16 has an invalid length. [ 373.994690][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 374.026773][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 374.061211][ T4689] device erspan1 left promiscuous mode [ 374.072848][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 374.084783][ T3034] bridge2: port 1(veth3) entered blocking state [ 374.091103][ T3034] bridge2: port 1(veth3) entered forwarding state [ 374.101680][ T28] audit: type=1400 audit(8199535330.757:775): avc: denied { read write } for pid=4691 comm="ip" path="/dev/console" dev="rootfs" ino=1075 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 374.142141][ T3034] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 374.227622][ T28] audit: type=1400 audit(8199535330.887:776): avc: denied { write } for pid=141 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=489 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.271426][ T28] audit: type=1400 audit(8199535330.887:777): avc: denied { remove_name } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 374.409320][ T4700] loop2: detected capacity change from 0 to 16 [ 374.490562][ T4700] erofs: (device loop2): mounted with root inode @ nid 36. [ 374.540479][ T28] audit: type=1400 audit(8199535330.887:778): avc: denied { unlink } for pid=141 comm="dhcpcd" name="sock" dev="tmpfs" ino=491 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 374.727892][ T28] audit: type=1400 audit(8199535330.907:779): avc: denied { unlink } for pid=141 comm="dhcpcd" name="pid" dev="tmpfs" ino=490 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 OK Stopping iptables: [ 374.876534][ T28] audit: type=1400 audit(8199535331.527:780): avc: denied { read write } for pid=4704 comm="iptables" path="/dev/console" dev="rootfs" ino=1075 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 [ 374.933201][ T4706] loop4: detected capacity change from 0 to 512 [ 374.945351][ T4707] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 374.958606][ T4707] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -29 in[58, 4038] out[1851] [ 374.969717][ T4707] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117] OK [ 375.044038][ T28] audit: type=1400 audit(8199535331.667:781): avc: denied { search } for pid=4704 comm="iptables" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 375.173812][ T4706] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 375.205053][ T4706] ext4 filesystem being mounted at /233/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 375.382432][ T285] EXT4-fs (loop3): unmounting filesystem. Stopping system message bus: [ 376.615618][ T4721] loop2: detected capacity change from 0 to 512 [ 376.639865][ T4719] tipc: Enabled bearer , priority 0 [ 376.660518][ T4719] device syzkaller0 entered promiscuous mode [ 376.669062][ T4721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 376.728367][ T286] EXT4-fs (loop4): unmounting filesystem. [ 376.734301][ T4717] tipc: Resetting bearer [ 376.754772][ T4721] EXT4-fs (loop2): 1 truncate cleaned up [ 376.762029][ T4717] tipc: Disabling bearer [ 376.767303][ T4721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 377.806584][ T284] EXT4-fs (loop2): unmounting filesystem. [ 377.995584][ T4742] loop0: detected capacity change from 0 to 512 done [ 378.251939][ T4742] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1215: casefold flag without casefold feature [ 378.399601][ T4742] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1215: couldn't read orphan inode 15 (err -117) [ 378.421773][ T4742] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. killall: can't kill pid 4377: No such process killall: can't kill pid 4399: No such process killall: can't kill pid 4652: No such process [ 379.297701][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 379.297771][ T28] audit: type=1400 audit(8199535335.937:789): avc: denied { create } for pid=4768 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.546415][ T28] audit: type=1400 audit(8199535335.937:790): avc: denied { bind } for pid=4768 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 379.571101][ T28] audit: type=1400 audit(8199535335.947:791): avc: denied { setopt } for pid=4768 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 Stopping klogd: [ 379.610344][ T28] audit: type=1400 audit(8199535335.947:792): avc: denied { write } for pid=4768 comm="syz.4.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 OK Stopping acpid: [ 379.709140][ T28] audit: type=1400 audit(8199535336.367:793): avc: denied { read } for pid=4741 comm="syz.0.1215" path="/241/file0/file1" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 379.767230][ T28] audit: type=1400 audit(8199535336.397:794): avc: denied { write } for pid=87 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.822159][ T28] audit: type=1400 audit(8199535336.397:795): avc: denied { remove_name } for pid=87 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.861065][ T28] audit: type=1400 audit(8199535336.397:796): avc: denied { unlink } for pid=87 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 379.981085][ T4788] tipc: Enabled bearer , priority 0 [ 379.993129][ T4788] device syzkaller0 entered promiscuous mode [ 380.060491][ T4786] tipc: Resetting bearer [ 380.068660][ T4786] tipc: Disabling bearer [ 380.250658][ T4793] syz.1.1223[4793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! OK Stopping syslogd: [ 380.267658][ T4793] syz.1.1223[4793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 381.176876][ T28] audit: type=1400 audit(8199535337.827:797): avc: denied { bind } for pid=4797 comm="syz.3.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 stopped /sbin/syslogd (pid 84) OK [ 381.261717][ T28] audit: type=1400 audit(8199535337.827:798): avc: denied { write } for pid=4797 comm="syz.3.1225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 381.321366][ T282] EXT4-fs (loop0): unmounting filesystem. [ 381.479753][ T4809] loop2: detected capacity change from 0 to 40427 [ 381.499256][ T4812] 9pnet_fd: Insufficient options for proto=fd [ 381.549631][ T4809] F2FS-fs (loop2): fault_injection options not supported [ 381.558618][ T4809] F2FS-fs (loop2): invalid crc value [ 381.748892][ T4809] F2FS-fs (loop2): Found nat_bits in checkpoint [ 382.698735][ T4809] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 umount: can't remount debugfs read-only [ 384.490382][ T4838] tipc: Enabled bearer , priority 0 [ 384.534565][ T4838] device syzkaller0 entered promiscuous mode [ 384.574297][ T4836] tipc: Resetting bearer [ 384.612186][ T4836] tipc: Disabling bearer [ 384.636565][ T284] syz-executor: attempt to access beyond end of device [ 384.636565][ T284] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 384.740262][ T4830] loop3: detected capacity change from 0 to 40427 [ 384.760970][ T4830] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 384.769920][ T4830] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock Connection to 10.128.0.251 closed by remote host. [ 384.794463][ T4830] F2FS-fs (loop3): invalid crc value umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM [ 384.821447][ T4830] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 384.847101][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 384.847119][ T28] audit: type=1400 audit(8199535341.477:800): avc: denied { write } for pid=274 comm="syz-executor" path="pipe:[14876]" dev="pipefs" ino=14876 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 384.981332][ T4607] tipc: Left network mode [ 385.418174][ T4607] device veth3 left promiscuous mode [ 385.423567][ T4607] bridge2: port 1(veth3) entered disabled state [ 385.430551][ T4607] device veth0_to_bond left promiscuous mode [ 385.436597][ T4607] bridge1: port 1(veth0_to_bond) entered disabled state [ 385.444774][ T4607] device bridge_slave_1 left promiscuous mode [ 385.451054][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.458616][ T4607] device bridge_slave_0 left promiscuous mode [ 385.464733][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.473087][ T4607] device veth1_macvtap left promiscuous mode [ 385.479293][ T4607] device veth0_vlan left promiscuous mode [ 385.881685][ T4607] tipc: Left network mode [ 385.886138][ T4607] tipc: Left network mode [ 385.890643][ T4607] tipc: Left network mode [ 385.895050][ T4607] tipc: Left network mode Sent SIGKILL to all processes Requesting system poweroff [ 386.398243][ T4607] device bridge_slave_1 left promiscuous mode [ 386.404416][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.411918][ T4607] device bridge_slave_0 left promiscuous mode [ 386.418091][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.425719][ T4607] device vlan2 left promiscuous mode [ 386.431079][ T4607] device veth0_to_bond left promiscuous mode [ 386.437336][ T4607] bridge1: port 2(vlan2) entered disabled state [ 386.444371][ T4607] device bridge_slave_1 left promiscuous mode [ 386.450590][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.458234][ T4607] device bridge_slave_0 left promiscuous mode [ 386.464359][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.471998][ T4607] device veth7 left promiscuous mode [ 386.477440][ T4607] bridge3: port 1(veth7) entered disabled state [ 386.484141][ T4607] device veth5 left promiscuous mode [ 386.489530][ T4607] bridge2: port 1(veth5) entered disabled state [ 386.496247][ T4607] device veth3 left promiscuous mode [ 386.501633][ T4607] bridge1: port 1(veth3) entered disabled state [ 386.508876][ T4607] device bridge_slave_1 left promiscuous mode [ 386.515024][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.522695][ T4607] device bridge_slave_0 left promiscuous mode [ 386.528864][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.536560][ T4607] device veth9 left promiscuous mode [ 386.542175][ T4607] bridge5: port 1(veth9) entered disabled state [ 386.548949][ T4607] device veth7 left promiscuous mode [ 386.554388][ T4607] bridge4: port 1(veth7) entered disabled state [ 386.561179][ T4607] device veth5 left promiscuous mode [ 386.566498][ T4607] bridge3: port 1(veth5) entered disabled state [ 386.573623][ T4607] device vlan2 left promiscuous mode [ 386.578956][ T4607] device veth0_to_bond left promiscuous mode [ 386.585034][ T4607] bridge1: port 2(vlan2) entered disabled state [ 386.592240][ T4607] device bridge_slave_1 left promiscuous mode [ 386.598404][ T4607] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.606037][ T4607] device bridge_slave_0 left promiscuous mode [ 386.612305][ T4607] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.621298][ T4607] device veth1_macvtap left promiscuous mode [ 386.627400][ T4607] device veth0_vlan left promiscuous mode [ 386.633620][ T4607] device veth1_macvtap left promiscuous mode [ 386.639671][ T4607] device veth0_vlan left promiscuous mode [ 386.646099][ T4607] device veth1_macvtap left promiscuous mode [ 386.652241][ T4607] device veth0_vlan left promiscuous mode [ 386.658758][ T4607] device veth1_macvtap left promiscuous mode [ 386.664806][ T4607] device veth0_vlan left promiscuous mode [ 386.927689][ T4848] kvm: exiting hardware virtualization [ 386.934414][ T4848] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 386.941439][ T4848] ACPI: PM: Preparing to enter system sleep state S5 [ 386.948665][ T4848] reboot: Power down serialport: VM disconnected.