last executing test programs: 55.13564825s ago: executing program 3 (id=543): unshare(0x60000600) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0xe8, 0x0, 0x8aa, 0x0, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x8000, 0x5, 0x6}}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) 54.740705144s ago: executing program 3 (id=550): unshare(0x24020400) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x22002, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffdffb) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 54.637966815s ago: executing program 3 (id=551): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") connect$inet6(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) setns(0xffffffffffffffff, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x18011b1, 0x0) 54.380478858s ago: executing program 3 (id=556): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00') 54.348785608s ago: executing program 3 (id=559): socket$inet6_sctp(0xa, 0x801, 0x84) socket$inet6(0xa, 0x3, 0x7) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 54.268735379s ago: executing program 3 (id=560): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 54.260685929s ago: executing program 32 (id=560): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x4000) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) syz_usb_connect$uac1(0x0, 0xb1, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 9.479254065s ago: executing program 2 (id=1391): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000201ff"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 9.378658816s ago: executing program 2 (id=1393): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x3003, 0x0, 0x0, 0x5, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x50) 9.235912278s ago: executing program 2 (id=1395): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000840)={0x20080522}, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x8fd, 0x10}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 9.217773458s ago: executing program 2 (id=1396): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8d9844, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 9.163357358s ago: executing program 2 (id=1397): socket$inet_tcp(0x2, 0x1, 0x0) open(0x0, 0x80ff, 0x88) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x80) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/snmp\x00') perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x0, 0x8}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x7fffffffffffffff) 8.913968011s ago: executing program 2 (id=1400): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) 8.909037481s ago: executing program 33 (id=1400): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0xc0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) acct(&(0x7f0000000100)='./file1\x00') acct(0x0) acct(0x0) 3.127155645s ago: executing program 1 (id=1480): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) recvmsg$unix(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/122, 0x7a}], 0x1, 0x0, 0x7a}, 0x0) sendmmsg$unix(r1, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}], 0x1, 0x24048080) 2.970137627s ago: executing program 1 (id=1482): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x491, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000180)={0x17c04, 0xffffffffffffffff, 0x9a, 0x77a2ef10, 0x800005, 0x10}) 2.464791763s ago: executing program 1 (id=1483): bind$can_raw(0xffffffffffffffff, &(0x7f0000000300), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2.373100654s ago: executing program 1 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) syz_clone(0x82800000, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2.320872444s ago: executing program 1 (id=1487): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002100)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x5}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)='o', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x462}, 0x8) 2.082573137s ago: executing program 1 (id=1497): r0 = io_uring_setup(0x66b, &(0x7f00000002c0)={0x0, 0x398e, 0x1000, 0x0, 0x12c}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x101}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r1, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 2.082492997s ago: executing program 34 (id=1497): r0 = io_uring_setup(0x66b, &(0x7f00000002c0)={0x0, 0x398e, 0x1000, 0x0, 0x12c}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x101}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r1, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1.84461856s ago: executing program 6 (id=1505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd29, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {}, {0xfff3, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x8a}, @TCA_ROUTE4_TO={0x8, 0x2, 0x92}]}}]}, 0x44}, 0x1, 0x4000000, 0x0, 0x50}, 0x0) 1.77230263s ago: executing program 4 (id=1507): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.720671041s ago: executing program 6 (id=1508): r0 = syz_clone(0x88206100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') syz_read_part_table(0x4074, &(0x7f0000000400)="$eJzszzFKK1EUBuB/kjcvowwEQStBDBZ2MnZWs4v0kjVYWag4O7EUF+A+3IOlLiESZKIxtoEg31cczpmfM/fesN3e+6ZafiqSPM+e9pIcT9I1zWf4r893vrab85S71SB1kqv1n08fN3p3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg24y+9YOV5DZJ93J92s/VovxflNlhups2F3VSHYyT+2HK9qjIfjI5++WMYfKapEjylmQ63txzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/5HJlGv2M6765W199OEnXlst0Pv9gd44JAABhGAhmxCAmMRkstPudgf92nD3JfdtXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04kAEAAAAQ5m+dR/sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4KQAA//9ggxZC") fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000140)='ns/uts\x00') 1.720525681s ago: executing program 4 (id=1509): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000940)=ANY=[@ANYBLOB='trans=unix,\x00']) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) 1.698497021s ago: executing program 5 (id=1510): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x236, &(0x7f0000000000)="$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") syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) 1.630730892s ago: executing program 5 (id=1511): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x8, 0x7}, 0x0, 0x0, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) 1.316481756s ago: executing program 6 (id=1513): syz_mount_image$vfat(&(0x7f00000003c0), &(0x7f00000000c0)='./file1\x00', 0x200c846, &(0x7f0000001180)=ANY=[@ANYBLOB='rodir,utf8=0,nonumtail=0,uni_xlate=1,utf8=1,shortname=mixed,utf8=0,shortname=mixed,shortname=winnt,iocharset=mn,shortname=winnt,uni_xlate=1,iocharset=default,shortname=lower,shortname=mixed,\x00\x00\x00\x00\x00\x00\x00'], 0x25, 0x372, &(0x7f0000001300)="$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") r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x10800, 0x11a) fcntl$notify(r1, 0x402, 0xc0000011) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1.299228506s ago: executing program 5 (id=1514): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x11503, 0x6536d5ef40a93725}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x80000001}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x410c0}, 0x4000020) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 1.276552316s ago: executing program 0 (id=1515): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'netpci0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r1) 1.248440686s ago: executing program 6 (id=1516): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.160567637s ago: executing program 5 (id=1517): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x63f6, 0x100, 0x5, 0x12}, 0x0, 0x0, 0x0) 961.840709ms ago: executing program 6 (id=1518): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000008000000080009000200000008000b"], 0x24}, 0x1, 0x0, 0x0, 0x40811}, 0x20) 923.00024ms ago: executing program 0 (id=1520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xd, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_route={{0xa}, {0x44, 0x2, [@TCA_ROUTE4_POLICE={0x40, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8001, 0xffffffffffffffff, 0x8, 0x7, 0xfffffffe, {0x81, 0x0, 0x100, 0x943, 0x3}, {0x9, 0x1, 0x2, 0x4, 0xe80, 0x9}, 0x1, 0x0, 0xff}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 832.896351ms ago: executing program 6 (id=1521): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x101}}, {@debug}, {@journal_dev={'journal_dev', 0x3d, 0x7}}]}, 0x1, 0x5fd, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 832.752361ms ago: executing program 4 (id=1522): rseq(&(0x7f0000001080), 0x20, 0x0, 0x0) socket(0x29, 0x1, 0x7) writev(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x802}, 0x0, 0x0, 0xffffffffffffffff, 0xb) syz_clone(0x29080, 0x0, 0x0, 0x0, 0x0, 0x0) 587.795593ms ago: executing program 4 (id=1523): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000300)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@noblock_validity}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000140)='./file0\x00', &(0x7f0000001900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 564.266134ms ago: executing program 0 (id=1524): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x191, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x1, @perf_config_ext={0x3, 0x5}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip6tnl0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'veth1_to_bridge\x00'}}, 0x1e) 523.430394ms ago: executing program 0 (id=1525): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000400)={0x0, 0x120c000, 0x800, 0x0, 0x1}, 0x20) 336.780986ms ago: executing program 5 (id=1526): preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mount$9p_fd(0x0, 0x0, 0x0, 0x311880, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 252.940997ms ago: executing program 0 (id=1527): sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newrule={0x44, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xa}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'macsec0\x00'}, @FRA_SRC={0x14, 0x2, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x40002, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 85.455359ms ago: executing program 4 (id=1528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvmmsg(r0, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x2, 0x40018022, 0x0) 84.943149ms ago: executing program 5 (id=1529): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.04417ms ago: executing program 0 (id=1530): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0) flock(r0, 0x1) r1 = open(&(0x7f0000000180)='.\x00', 0x8080, 0x12e) flock(r1, 0x1) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x0) flock(r2, 0x1) 0s ago: executing program 4 (id=1531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, 0xfffffffe}, 0x20) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x8, @loopback, 0x1}}, 0x0, 0x0, 0x41, 0x0, "b208405cce4456e4fc8f2dabd194ff3763f799f91cf7e5e8260998f956ec57c24451db07550335ebf4a3d0168ccaa268e928f39cd7494c2b19ebef230a3373685fbacfcf3b6e9633bd997a9bfcf08f67"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0xffff}, 0x1c) kernel console output (not intermixed with test programs): m 00000000-0000-0000-0000-000000000000. [ 51.520204][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.570088][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.589082][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.598134][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.606973][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.615291][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.635308][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.656271][ T4333] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 51.886111][ T4356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.909996][ T4356] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.966245][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.069329][ T4366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 52.082062][ T4366] netlink: 48 bytes leftover after parsing attributes in process `syz.0.362'. [ 52.110724][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.336531][ T4388] infiniband syz!: RDMA CMA: cma_listen_on_dev, error -98 [ 52.435560][ T4402] netlink: 16 bytes leftover after parsing attributes in process `syz.0.379'. [ 52.631591][ T4411] Invalid argument reading file caps for ./file0 [ 52.928505][ T4429] xt_hashlimit: size too large, truncated to 1048576 [ 53.194584][ T28] kauditd_printk_skb: 138 callbacks suppressed [ 53.194600][ T28] audit: type=1400 audit(1777979148.564:508): avc: denied { write } for pid=4440 comm="syz.1.397" name="snmp" dev="proc" ino=4026532418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.249427][ T4445] netlink: 68 bytes leftover after parsing attributes in process `syz.4.399'. [ 53.264064][ T4443] batadv_slave_1: entered promiscuous mode [ 53.285062][ T4443] macsec1: entered promiscuous mode [ 53.295280][ T4443] macsec1: entered allmulticast mode [ 53.304944][ T4443] batadv_slave_1: entered allmulticast mode [ 53.315858][ T4443] batadv_slave_1: left allmulticast mode [ 53.328655][ T4443] batadv_slave_1: left promiscuous mode [ 54.051126][ T4470] Driver unsupported XDP return value 0 on prog (id 63) dev N/A, expect packet loss! [ 54.281243][ T28] audit: type=1326 audit(1777979149.644:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.332653][ T28] audit: type=1326 audit(1777979149.644:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.358631][ T28] audit: type=1326 audit(1777979149.644:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.406779][ T28] audit: type=1326 audit(1777979149.644:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.443649][ T28] audit: type=1326 audit(1777979149.644:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.501489][ T28] audit: type=1326 audit(1777979149.644:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.535218][ T28] audit: type=1326 audit(1777979149.644:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.563131][ T28] audit: type=1326 audit(1777979149.774:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4486 comm="syz.0.417" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcd4ac3cdd9 code=0x7ffc0000 [ 54.738095][ T28] audit: type=1400 audit(1777979150.104:517): avc: denied { read } for pid=4509 comm="syz.0.426" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 54.828933][ T4514] netlink: 24 bytes leftover after parsing attributes in process `syz.2.429'. [ 54.859735][ T4514] netlink: 67 bytes leftover after parsing attributes in process `syz.2.429'. [ 54.875989][ T4517] set_capacity_and_notify: 1 callbacks suppressed [ 54.876062][ T4517] loop4: detected capacity change from 0 to 512 [ 54.914008][ T4517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.945328][ T4517] ext4 filesystem being mounted at /87/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.993187][ T4529] loop2: detected capacity change from 0 to 1024 [ 55.037808][ T4529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.071469][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.107856][ T4537] loop3: detected capacity change from 0 to 128 [ 55.124771][ T4539] validate_nla: 46 callbacks suppressed [ 55.124802][ T4539] netlink: 'syz.4.439': attribute type 4 has an invalid length. [ 55.190783][ T4537] syz.3.438: attempt to access beyond end of device [ 55.190783][ T4537] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 55.216938][ T4537] syz.3.438: attempt to access beyond end of device [ 55.216938][ T4537] loop3: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 55.249255][ T4537] Buffer I/O error on dev loop3, logical block 70, lost async page write [ 55.262251][ T4540] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 55.278114][ T4537] syz.3.438: attempt to access beyond end of device [ 55.278114][ T4537] loop3: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 55.301651][ T4540] EXT4-fs (loop2): Remounting filesystem read-only [ 55.324622][ T4537] Buffer I/O error on dev loop3, logical block 71, lost async page write [ 55.352538][ T4537] syz.3.438: attempt to access beyond end of device [ 55.352538][ T4537] loop3: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 55.367006][ T4537] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 55.375942][ T4537] syz.3.438: attempt to access beyond end of device [ 55.375942][ T4537] loop3: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 55.398347][ T4540] syz.2.434 (4540) used greatest stack depth: 8576 bytes left [ 55.407765][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.450925][ T4554] loop4: detected capacity change from 0 to 1024 [ 55.478072][ T4554] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.514964][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.619401][ T23] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 55.638689][ T23] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.839832][ T4594] loop4: detected capacity change from 0 to 256 [ 55.978444][ T4601] loop4: detected capacity change from 0 to 128 [ 56.047465][ T4608] loop2: detected capacity change from 0 to 128 [ 56.054605][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 56.065203][ T4607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.470'. [ 56.090617][ T4608] syz.2.469: attempt to access beyond end of device [ 56.090617][ T4608] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 56.150831][ T4608] syz.2.469: attempt to access beyond end of device [ 56.150831][ T4608] loop2: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 56.165892][ T4608] Buffer I/O error on dev loop2, logical block 70, lost async page write [ 56.178103][ T4608] syz.2.469: attempt to access beyond end of device [ 56.178103][ T4608] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 56.193603][ T4608] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 56.204221][ T4608] syz.2.469: attempt to access beyond end of device [ 56.204221][ T4608] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 56.218702][ T4608] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 56.228174][ T4616] netlink: 'syz.1.473': attribute type 1 has an invalid length. [ 56.237316][ T4608] syz.2.469: attempt to access beyond end of device [ 56.237316][ T4608] loop2: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 56.302053][ T4622] loop3: detected capacity change from 0 to 4096 [ 56.313925][ T4622] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.527170][ T4639] loop0: detected capacity change from 0 to 512 [ 56.548939][ T4639] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.574691][ T4639] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.604021][ T4639] EXT4-fs error (device loop0): ext4_empty_dir:3082: inode #12: comm syz.0.484: invalid size [ 56.666829][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.109453][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.156543][ T4660] netlink: 'syz.3.490': attribute type 4 has an invalid length. [ 57.225227][ T4667] sock: sock_set_timeout: `syz.0.493' (pid 4667) tries to set negative timeout [ 57.315732][ T4674] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.343826][ T4678] loop1: detected capacity change from 0 to 1024 [ 57.362670][ T4678] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.380533][ T4678] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.400334][ T4674] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.425131][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 57.439049][ T4674] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.549074][ T4674] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.602110][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.618892][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.631916][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.641184][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.736962][ T4705] random: crng reseeded on system resumption [ 57.849455][ T4704] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 57.875298][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 57.887684][ T4704] FAT-fs (loop1): Filesystem has been set read-only [ 57.896876][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 57.935477][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 57.959608][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 57.985905][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.003819][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.025229][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.040922][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.061450][ T4704] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.083620][ T4702] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 58.272870][ T10] IPVS: starting estimator thread 0... [ 58.278948][ T4742] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 58.394339][ T4744] IPVS: using max 2256 ests per chain, 112800 per kthread [ 58.465041][ T4756] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.531: corrupted in-inode xattr: invalid ea_ino [ 58.489509][ T4756] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.490891][ T4756] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.531: couldn't read orphan inode 15 (err -117) [ 58.500428][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 58.500452][ C0] EXT4-fs (loop4): initial error at time 1777979153: ext4_iget_extra_inode:5128: inode 15 [ 58.500479][ C0] EXT4-fs (loop4): last error at time 1777979153: ext4_iget_extra_inode:5128: inode 15 [ 58.544598][ T4756] loop4: lost filesystem error report for type 5 error -117 [ 58.545306][ T4756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.582780][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.852367][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 58.852420][ T28] audit: type=1400 audit(1777979154.214:553): avc: denied { write } for pid=4773 comm="syz.2.539" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 58.958058][ T4780] mmap: syz.2.541 (4780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.290014][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.365461][ T4799] EXT4-fs (loop2): shut down requested (1) [ 59.407702][ T28] audit: type=1400 audit(1777979154.774:554): avc: denied { read write } for pid=4810 comm="syz.3.550" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.434567][ T28] audit: type=1400 audit(1777979154.774:555): avc: denied { open } for pid=4810 comm="syz.3.550" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.490267][ T28] audit: type=1400 audit(1777979154.794:556): avc: denied { ioctl } for pid=4810 comm="syz.3.550" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 59.539590][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.551361][ T4814] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 59.618731][ T4814] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 59.649476][ T4821] batman_adv: batadv0: Adding interface: macsec1 [ 59.665787][ T28] audit: type=1400 audit(1777979155.024:557): avc: denied { remount } for pid=4813 comm="syz.3.551" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 59.697833][ T4821] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.753307][ T4821] batman_adv: batadv0: Interface activated: macsec1 [ 59.792762][ T30] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.877009][ T30] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.945949][ T30] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.996611][ T30] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.008855][ T4847] set_capacity_and_notify: 4 callbacks suppressed [ 60.008919][ T4847] loop4: detected capacity change from 0 to 128 [ 60.063795][ T4847] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000) [ 60.084533][ T4847] FAT-fs (loop4): Filesystem has been set read-only [ 60.150180][ T30] bridge_slave_1: left allmulticast mode [ 60.166993][ T30] bridge_slave_1: left promiscuous mode [ 60.174467][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.186041][ T30] bridge_slave_0: left allmulticast mode [ 60.192353][ T30] bridge_slave_0: left promiscuous mode [ 60.199079][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.368387][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 60.382271][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 60.395651][ T28] audit: type=1400 audit(1777979155.764:558): avc: denied { write } for pid=4857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.431516][ T30] bond0 (unregistering): Released all slaves [ 60.454292][ T4855] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.469239][ T28] audit: type=1400 audit(1777979155.834:559): avc: denied { write } for pid=4868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.522430][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 60.559673][ T30] hsr_slave_0: left promiscuous mode [ 60.565892][ T4870] loop4: detected capacity change from 0 to 4096 [ 60.575764][ T30] hsr_slave_1: left promiscuous mode [ 60.582424][ T4870] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.603265][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.611405][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 60.621007][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.632135][ T28] audit: type=1400 audit(1777979155.994:560): avc: denied { write } for pid=4869 comm="syz.4.569" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 60.648908][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 60.669135][ T30] veth1_macvtap: left promiscuous mode [ 60.686529][ T30] veth0_macvtap: left promiscuous mode [ 60.695412][ T30] veth1_vlan: left promiscuous mode [ 60.700867][ T30] veth0_vlan: left promiscuous mode [ 60.820191][ T30] team0 (unregistering): Port device team_slave_1 removed [ 60.840579][ T30] team0 (unregistering): Port device team_slave_0 removed [ 60.885002][ T28] audit: type=1400 audit(1777979156.244:561): avc: denied { read } for pid=4877 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 60.939077][ T4855] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.003128][ T4855] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.082447][ T4855] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.144551][ T28] audit: type=1400 audit(1777979156.504:562): avc: denied { write } for pid=4886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.193295][ T4838] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.202712][ T4838] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.215892][ T4838] bridge_slave_0: entered allmulticast mode [ 61.226259][ T4838] bridge_slave_0: entered promiscuous mode [ 61.239693][ T4838] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.247878][ T4838] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.255378][ T4838] bridge_slave_1: entered allmulticast mode [ 61.262173][ T4838] bridge_slave_1: entered promiscuous mode [ 61.295570][ T4838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.308271][ T4838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.327422][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.337501][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 61.359323][ T4838] team0: Port device team_slave_0 added [ 61.377692][ T4838] team0: Port device team_slave_1 added [ 61.383813][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.410362][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.419044][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.429354][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.444372][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.481414][ T4838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.498084][ T4838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.505335][ T4838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 61.533129][ T4838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.543262][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.621585][ T4838] hsr_slave_0: entered promiscuous mode [ 61.634226][ T4838] hsr_slave_1: entered promiscuous mode [ 61.715665][ T4921] loop4: detected capacity change from 0 to 512 [ 61.739488][ T4921] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.761891][ T4921] ext4 filesystem being mounted at /118/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.823927][ T4838] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 61.840013][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.855369][ T4838] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 61.867428][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.879203][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.893259][ T4838] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 61.909452][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.933922][ T4934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.580'. [ 61.944549][ T4838] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 61.979286][ T4838] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 62.032717][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 62.159966][ T4838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.198729][ T4838] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.235029][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.242484][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.267475][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.275171][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.429082][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 62.628492][ T4838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.675161][ T4999] netlink: 'syz.2.589': attribute type 39 has an invalid length. [ 62.845148][ T4838] veth0_vlan: entered promiscuous mode [ 62.861817][ T4838] veth1_vlan: entered promiscuous mode [ 62.890478][ T4838] veth0_macvtap: entered promiscuous mode [ 62.902948][ T5024] netlink: 92 bytes leftover after parsing attributes in process `syz.0.596'. [ 62.921241][ T4838] veth1_macvtap: entered promiscuous mode [ 62.939601][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.956917][ T4838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.971307][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.981622][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.991587][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.008487][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.095454][ T5044] sch_tbf: peakrate 1 is lower than or equals to rate 5 ! [ 63.563534][ T5062] netlink: 'syz.4.604': attribute type 29 has an invalid length. [ 63.572705][ T5062] netlink: 'syz.4.604': attribute type 29 has an invalid length. [ 63.964411][ T5075] loop1: detected capacity change from 0 to 512 [ 63.997535][ T5075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.011180][ T5075] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.034717][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 64.034735][ T28] audit: type=1400 audit(1777979159.404:585): avc: denied { write } for pid=5074 comm="syz.1.609" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.117139][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.144007][ T5084] loop5: detected capacity change from 0 to 512 [ 64.167785][ T5084] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.220371][ T28] audit: type=1400 audit(1777979159.584:586): avc: denied { write } for pid=5083 comm="syz.5.613" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.416599][ T5103] loop0: detected capacity change from 0 to 4096 [ 64.443610][ T28] audit: type=1400 audit(1777979159.804:587): avc: denied { write } for pid=5102 comm="syz.0.621" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 64.664064][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.684623][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 64.740198][ T28] audit: type=1326 audit(1777979160.104:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4850cdd9 code=0x7ffc0000 [ 64.796637][ T28] audit: type=1326 audit(1777979160.104:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4850cdd9 code=0x7ffc0000 [ 64.835466][ T28] audit: type=1326 audit(1777979160.134:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4850cdd9 code=0x7ffc0000 [ 64.878027][ T28] audit: type=1326 audit(1777979160.134:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4850cdd9 code=0x7ffc0000 [ 64.907187][ T28] audit: type=1326 audit(1777979160.134:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efd4850cdd9 code=0x7ffc0000 [ 64.968201][ T28] audit: type=1326 audit(1777979160.134:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4850cdd9 code=0x7ffc0000 [ 65.024326][ T28] audit: type=1326 audit(1777979160.134:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5106 comm="syz.4.622" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd4850cdd9 code=0x7ffc0000 [ 65.094669][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.249796][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.629'. [ 65.259317][ T5124] netlink: 'syz.1.629': attribute type 30 has an invalid length. [ 65.272973][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.286960][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.306229][ T5122] netlink: 7 bytes leftover after parsing attributes in process `syz.0.628'. [ 65.320935][ T5122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'. [ 65.334537][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.343827][ T5122] netlink: 28 bytes leftover after parsing attributes in process `syz.0.628'. [ 65.353761][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.383692][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.440458][ T5132] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.467226][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 65.516675][ T5132] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.576992][ T5132] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.636144][ T5132] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.713101][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.742918][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.767934][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.781537][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.945597][ T5162] loop0: detected capacity change from 0 to 512 [ 65.990143][ T5162] ext4 filesystem being mounted at /141/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.054427][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.106125][ T5178] loop2: detected capacity change from 0 to 128 [ 66.122788][ T5178] ext4 filesystem being mounted at /122/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 66.162324][ T5178] EXT4-fs (loop2): shut down requested (2) [ 66.164668][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.244078][ T5183] netlink: 'syz.0.653': attribute type 39 has an invalid length. [ 66.299650][ T5187] loop1: detected capacity change from 0 to 512 [ 66.305550][ T5185] loop2: detected capacity change from 0 to 1024 [ 66.319317][ T5187] EXT4-fs: test_dummy_encryption option not supported [ 66.370373][ T5185] IPVS: persistence engine module ip_vs_pe_€ not found [ 66.774620][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.786568][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.174449][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.334671][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.486639][ T5225] loop5: detected capacity change from 0 to 512 [ 67.494476][ T3592] Bluetooth: hci0: command 0x1003 tx timeout [ 67.494481][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 67.515137][ T5225] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 67.533830][ T5225] EXT4-fs (loop5): 1 truncate cleaned up [ 67.556105][ T5229] loop4: detected capacity change from 0 to 512 [ 67.563095][ T5229] EXT4-fs: test_dummy_encryption option not supported [ 67.626468][ T5232] loop4: detected capacity change from 0 to 256 [ 67.737075][ T5238] loop2: detected capacity change from 0 to 1024 [ 67.746943][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 67.813889][ T5243] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.878230][ T5243] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.958985][ T5243] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.029325][ T5243] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.106205][ T36] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.124703][ T36] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.145360][ T36] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.160815][ T36] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.485502][ T5274] loop1: detected capacity change from 0 to 512 [ 68.511356][ T5274] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.544241][ T5274] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.693: corrupted xattr block 33: invalid ea_ino [ 68.577320][ T5274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 68.586837][ T5274] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.693: corrupted xattr block 33: invalid ea_ino [ 68.603997][ T5274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 68.611286][ T5283] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.693: corrupted xattr block 33: invalid ea_ino [ 68.614807][ T5274] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.693: corrupted xattr block 33: invalid ea_ino [ 68.648393][ T5274] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 68.664938][ T5283] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 68.683423][ T5283] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.693: corrupted xattr block 33: invalid ea_ino [ 68.699563][ T5286] loop5: detected capacity change from 0 to 512 [ 68.709375][ T5283] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 68.710982][ T5286] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 68.729727][ T5286] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 68.769197][ T5286] EXT4-fs (loop5): orphan cleanup on readonly fs [ 68.800206][ T5286] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #13: comm syz.5.696: iget: bad i_size value: 12154761577498 [ 68.840430][ T5286] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 68.840644][ T5286] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.696: couldn't read orphan inode 13 (err -117) [ 68.849925][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 68.849951][ C1] EXT4-fs (loop5): initial error at time 1777979165: ext4_orphan_get:1397: inode 13 [ 68.849993][ C1] EXT4-fs (loop5): last error at time 1777979165: ext4_orphan_get:1397: inode 13 [ 68.924397][ T5286] loop5: lost filesystem error report for type 5 error -117 [ 69.135273][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 69.135290][ T28] audit: type=1400 audit(1777979165.495:615): avc: denied { bind } for pid=5315 comm="syz.2.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.263706][ T5324] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.711: inode has both inline data and extents flags [ 69.293358][ T5324] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 69.293636][ T5324] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.711: couldn't read orphan inode 15 (err -117) [ 69.303161][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 69.303185][ C0] EXT4-fs (loop1): initial error at time 1777979165: ext4_orphan_get:1397: inode 15 [ 69.303216][ C0] EXT4-fs (loop1): last error at time 1777979165: ext4_orphan_get:1397: inode 15 [ 69.343459][ T5324] loop1: lost filesystem error report for type 5 error -117 [ 69.352355][ T28] audit: type=1400 audit(1777979165.705:616): avc: denied { map } for pid=5327 comm="syz.4.712" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 69.432155][ T5332] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 69.460822][ T5331] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 88 [ 69.487847][ T5332] EXT4-fs (loop2): 1 truncate cleaned up [ 69.495390][ T28] audit: type=1400 audit(1777979165.855:617): avc: denied { mount } for pid=5334 comm="syz.4.716" name="/" dev="autofs" ino=11593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 69.529164][ T28] audit: type=1400 audit(1777979165.885:618): avc: denied { write } for pid=5329 comm="syz.2.715" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.589770][ T28] audit: type=1400 audit(1777979165.945:619): avc: denied { write } for pid=5329 comm="syz.2.715" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.687931][ T5342] net_ratelimit: 7 callbacks suppressed [ 69.687948][ T5342] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 69.814412][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.886106][ T5350] ext4 filesystem being mounted at /143/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.944222][ T5350] EXT4-fs: Cannot change journaled quota options when quota turned on [ 69.952770][ T28] audit: type=1400 audit(1777979166.295:620): avc: denied { remount } for pid=5349 comm="syz.0.723" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.010840][ T5357] netlink: 27 bytes leftover after parsing attributes in process `syz.4.726'. [ 70.144617][ T5366] netlink: 104 bytes leftover after parsing attributes in process `syz.0.729'. [ 70.388314][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.719206][ T5399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.728198][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.765976][ T28] audit: type=1400 audit(1777979167.105:621): avc: denied { getopt } for pid=5400 comm="syz.1.746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.802154][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 70.812363][ T28] audit: type=1400 audit(1777979167.115:622): avc: denied { create } for pid=5402 comm="syz.0.745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 70.834572][ T5408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.748'. [ 71.013887][ T5414] set_capacity_and_notify: 3 callbacks suppressed [ 71.021249][ T5414] loop2: detected capacity change from 0 to 8192 [ 71.277047][ T5439] loop0: detected capacity change from 0 to 512 [ 71.290488][ T5439] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.317091][ T5439] EXT4-fs (loop0): 1 truncate cleaned up [ 71.329348][ T5439] EXT4-fs mount: 24 callbacks suppressed [ 71.329366][ T5439] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.360315][ T28] audit: type=1400 audit(1777979167.715:623): avc: denied { write } for pid=5437 comm="syz.0.754" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.414445][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.424949][ T28] audit: type=1400 audit(1777979167.785:624): avc: denied { write } for pid=5437 comm="syz.0.754" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.577380][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.990578][ T5375] Set syz1 is full, maxelem 65536 reached [ 72.051070][ T5466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.766'. [ 72.084001][ T5466] netlink: 32 bytes leftover after parsing attributes in process `syz.4.766'. [ 72.122783][ T5470] loop0: detected capacity change from 0 to 1024 [ 72.180282][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.198651][ T5482] batadv_slave_0: entered promiscuous mode [ 72.205026][ T5470] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.255851][ T5482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'. [ 72.268829][ T5482] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.283525][ T5482] batadv_slave_0 (unregistering): left promiscuous mode [ 72.283665][ T5470] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm syz.0.768: lblock 8 mapped to illegal pblock 8 (length 8) [ 72.302247][ T5482] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.312728][ T5470] EXT4-fs error (device loop0): ext4_ext_remove_space:2969: inode #15: comm syz.0.768: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 72.365263][ T5489] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.768: lblock 0 mapped to illegal pblock 0 (length 5) [ 72.398818][ T5489] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 72.434758][ T5489] EXT4-fs (loop0): This should not happen!! Data will be lost [ 72.434758][ T5489] [ 72.454694][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.541611][ T3306] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 72.564091][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.640456][ T5507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'. [ 72.676021][ T5507] netlink: 20 bytes leftover after parsing attributes in process `syz.1.781'. [ 72.858365][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.187162][ T5549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 73.201887][ T36] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.210851][ T36] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.220326][ T36] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.229398][ T36] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.503621][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.631177][ T5579] loop5: detected capacity change from 0 to 4096 [ 73.685115][ T5579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.971318][ T5606] netlink: 'syz.2.804': attribute type 1 has an invalid length. [ 74.051067][ T5606] bond1: entered promiscuous mode [ 74.063230][ T5614] netlink: 'syz.1.806': attribute type 1 has an invalid length. [ 74.081768][ T5606] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.151153][ T5615] bond1: (slave veth3): making interface the new active one [ 74.172390][ T5615] veth3: entered promiscuous mode [ 74.191348][ T5615] bond1: (slave veth3): Enslaving as an active interface with an up link [ 74.242621][ T5614] bond1: entered promiscuous mode [ 74.264934][ T5614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 74.328686][ T5618] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.368290][ T5618] bond1: (slave bond2): making interface the new active one [ 74.395231][ T5618] bond2: entered promiscuous mode [ 74.423799][ T5618] bond1: (slave bond2): Enslaving as an active interface with an up link [ 74.500291][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 74.500307][ T28] audit: type=1400 audit(1777979170.855:643): avc: denied { write } for pid=5625 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.619735][ T28] audit: type=1400 audit(1777979170.975:644): avc: denied { write } for pid=5641 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.694919][ T3379] net_ratelimit: 3 callbacks suppressed [ 74.694938][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.711712][ T28] audit: type=1400 audit(1777979171.055:645): avc: denied { connect } for pid=5647 comm="syz.1.815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 74.770988][ T5651] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 74.801583][ T5655] loop1: detected capacity change from 0 to 256 [ 74.855913][ T28] audit: type=1400 audit(1777979171.215:646): avc: denied { watch watch_reads } for pid=5652 comm="syz.1.817" path="/168/file0/file0/file0" dev="loop1" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 74.953122][ T5658] loop0: detected capacity change from 0 to 512 [ 75.003443][ T5658] EXT4-fs (loop0): 1 truncate cleaned up [ 75.026691][ T5658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.058233][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.085589][ T28] audit: type=1400 audit(1777979171.445:647): avc: denied { write } for pid=5656 comm="syz.0.818" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.574666][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.835245][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.889033][ T5692] __nla_validate_parse: 5 callbacks suppressed [ 75.889053][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.831'. [ 75.910511][ T5692] syz_tun: refused to change device tx_queue_len [ 75.998025][ T5697] loop4: detected capacity change from 0 to 4096 [ 76.013258][ T5697] EXT4-fs: inline encryption not supported [ 76.026079][ T5697] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e042c018, mo2=0003] [ 76.035359][ T28] audit: type=1400 audit(1777979172.385:648): avc: denied { execute_no_trans } for pid=5700 comm="syz.2.835" path="/171/file0" dev="tmpfs" ino=891 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 76.066176][ T5697] System zones: 0-5 [ 76.071661][ T5697] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.090319][ T28] audit: type=1400 audit(1777979172.455:649): avc: denied { write } for pid=5696 comm="syz.4.832" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 76.188027][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.257807][ T28] audit: type=1400 audit(1777979172.615:650): avc: denied { bind } for pid=5712 comm="syz.1.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.377140][ T28] audit: type=1400 audit(1777979172.735:651): avc: denied { watch } for pid=5718 comm="syz.1.843" path="/syzcgroup/unified/syz1" dev="cgroup2" ino=77 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 76.495592][ T5723] loop2: detected capacity change from 0 to 164 [ 76.522631][ T28] audit: type=1400 audit(1777979172.875:652): avc: denied { mount } for pid=5722 comm="syz.2.844" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 76.549471][ T5723] rock: directory entry would overflow storage [ 76.557395][ T5723] rock: sig=0x4d4e, size=5, remaining=4 [ 76.570984][ T5723] isofs: isofs_export_get_parent(): child directory not normalized! [ 76.588131][ T5728] isofs: isofs_export_get_parent(): child directory not normalized! [ 76.620771][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.629159][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.637624][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.970609][ T5747] loop0: detected capacity change from 0 to 512 [ 77.042629][ T5747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.086378][ T5747] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.095055][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.465330][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.492050][ T5753] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.575778][ T5765] loop5: detected capacity change from 0 to 512 [ 77.601318][ T5765] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 77.632508][ T5769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.866'. [ 77.646169][ T5769] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 77.658992][ T5765] EXT4-fs (loop5): 1 orphan inode deleted [ 77.665418][ T5765] EXT4-fs (loop5): 1 truncate cleaned up [ 77.670357][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.673418][ T5765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.862118][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.016936][ T5800] loop0: detected capacity change from 0 to 128 [ 78.034715][ T5800] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.048784][ T5800] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.108839][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.120263][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.148185][ T5809] syz_tun: entered allmulticast mode [ 78.402730][ T5829] netlink: 'syz.5.891': attribute type 10 has an invalid length. [ 78.433486][ T3379] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 78.463000][ T3379] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.612654][ T5829] team0: Port device veth0_to_hsr added [ 78.704470][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.996835][ T5857] 8021q: adding VLAN 0 to HW filter on device eth0 [ 79.007403][ T5857] 8021q: adding VLAN 0 to HW filter on device eth1 [ 79.017222][ T5857] 8021q: adding VLAN 0 to HW filter on device eth2 [ 79.032633][ T5857] 8021q: adding VLAN 0 to HW filter on device eth3 [ 79.312448][ T5877] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.320724][ T5877] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.427845][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.468902][ T5877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.598578][ T36] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.615918][ T36] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.626838][ T36] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.636638][ T36] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.650991][ T36] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.661549][ T36] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.696093][ T36] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 79.712582][ T36] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.734390][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.738236][ T5900] loop1: detected capacity change from 0 to 128 [ 79.760570][ T5902] loop5: detected capacity change from 0 to 512 [ 79.803050][ T5902] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.826888][ T5902] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.924950][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.966293][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.134478][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.774402][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.950244][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 80.950263][ T28] audit: type=1326 audit(1777979177.305:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5979 comm="syz.4.954" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd4850cdd9 code=0x0 [ 81.814610][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.974393][ T3592] Bluetooth: hci0: command 0x1003 tx timeout [ 81.974393][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.018602][ T5989] loop4: detected capacity change from 0 to 512 [ 82.022019][ T28] audit: type=1326 audit(1777979178.375:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fe95cdd9 code=0x7ffc0000 [ 82.064916][ T28] audit: type=1326 audit(1777979178.375:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fe95cdd9 code=0x7ffc0000 [ 82.091296][ T28] audit: type=1326 audit(1777979178.395:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fe95cdd9 code=0x7ffc0000 [ 82.130715][ T28] audit: type=1326 audit(1777979178.395:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fe95cdd9 code=0x7ffc0000 [ 82.160439][ T28] audit: type=1326 audit(1777979178.395:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13fe95cdd9 code=0x7ffc0000 [ 82.170688][ T5989] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.208492][ T28] audit: type=1326 audit(1777979178.405:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13fe91d60e code=0x7ffc0000 [ 82.224683][ T5989] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.235714][ T28] audit: type=1326 audit(1777979178.405:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f13fe95e0d7 code=0x7ffc0000 [ 82.272962][ T28] audit: type=1326 audit(1777979178.405:674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f13fe95cdd9 code=0x7ffc0000 [ 82.298864][ T28] audit: type=1326 audit(1777979178.405:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5982 comm="syz.5.957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f13fe95e0d7 code=0x7ffc0000 [ 82.391325][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.855230][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.184377][ T3081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.362802][ T6057] loop2: detected capacity change from 0 to 4096 [ 83.384445][ T6057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.574425][ T6068] syzkaller1: entered promiscuous mode [ 83.580112][ T6068] syzkaller1: entered allmulticast mode [ 83.894506][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.070032][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.115203][ T6070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6070 comm=syz.0.989 [ 84.147521][ T6074] xt_hashlimit: size too large, truncated to 1048576 [ 84.186670][ T6075] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.219143][ T6080] loop4: detected capacity change from 0 to 512 [ 84.231951][ T6080] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 84.272069][ T6080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.289296][ T6080] ext4 filesystem being mounted at /200/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.296047][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.398824][ T6087] syzkaller0: entered promiscuous mode [ 84.404517][ T6087] syzkaller0: entered allmulticast mode [ 84.466093][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.518797][ T6092] loop2: detected capacity change from 0 to 512 [ 84.520674][ T6094] loop4: detected capacity change from 0 to 256 [ 84.550507][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.566438][ T6092] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.598967][ T6100] loop1: detected capacity change from 0 to 512 [ 84.605796][ T6100] EXT4-fs: Ignoring removed mblk_io_submit option [ 84.623546][ T6100] EXT4-fs error (device loop1): ext4_iget_extra_inode:5128: inode #15: comm syz.1.999: corrupted in-inode xattr: e_value size too large [ 84.646290][ T6100] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.646566][ T6100] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.999: couldn't read orphan inode 15 (err -117) [ 84.659377][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 84.659419][ C0] EXT4-fs (loop1): initial error at time 1777979181: ext4_iget_extra_inode:5128: inode 15 [ 84.659469][ C0] EXT4-fs (loop1): last error at time 1777979181: ext4_iget_extra_inode:5128: inode 15 [ 84.730741][ T6100] loop1: lost filesystem error report for type 5 error -117 [ 84.734521][ T6100] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.829024][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.840065][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.934542][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.126740][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 85.777425][ T6142] loop1: detected capacity change from 0 to 512 [ 85.803655][ T6142] EXT4-fs: Ignoring removed oldalloc option [ 85.830789][ T6142] EXT4-fs (loop1): 1 truncate cleaned up [ 85.861319][ T6142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.923954][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.971090][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 85.971171][ T28] audit: type=1400 audit(1777979182.325:707): avc: denied { mounton } for pid=6156 comm="syz.2.1022" path="/proc/465/task" dev="proc" ino=13824 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 85.974800][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.224491][ T3081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.722274][ T6177] loop0: detected capacity change from 0 to 128 [ 86.848404][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1034'. [ 86.865711][ T3081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.939922][ T28] audit: type=1400 audit(1777979183.285:708): avc: denied { nlmsg_write } for pid=6182 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 87.014629][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.335086][ T3081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.345334][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.353129][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.387212][ T6226] loop4: detected capacity change from 0 to 512 [ 87.416864][ T6226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.430216][ T6226] ext4 filesystem being mounted at /209/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.447575][ T6226] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1049: bg 0: block 505: padding at end of block bitmap is not set [ 87.470390][ T6226] Quota error (device loop4): write_blk: dquota write failed [ 87.479369][ T6226] Quota error (device loop4): find_free_dqentry: Can't write quota data block 5 [ 87.497489][ T6226] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 87.508366][ T6226] EXT4-fs error (device loop4): ext4_acquire_dquot:7034: comm syz.4.1049: Failed to acquire dquot type 1 [ 87.517560][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.531486][ T6219] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.598307][ T36] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.608866][ T36] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.618250][ T36] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.628252][ T36] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.637532][ T36] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.647170][ T36] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.657137][ T36] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.666738][ T36] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.737063][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.055145][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.070328][ T6244] loop0: detected capacity change from 0 to 1024 [ 88.097811][ T6244] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 88.149936][ T28] audit: type=1400 audit(1777979184.505:709): avc: denied { write } for pid=6243 comm="syz.0.1056" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.268527][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 88.319416][ T6266] loop2: detected capacity change from 0 to 2048 [ 88.381168][ T28] audit: type=1400 audit(1777979184.735:710): avc: denied { write } for pid=6271 comm="syz.0.1062" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 88.421311][ T6266] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.460393][ T28] audit: type=1400 audit(1777979184.815:711): avc: denied { write } for pid=6265 comm="syz.2.1064" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 88.493406][ T6264] loop5: detected capacity change from 0 to 128 [ 88.517756][ T6264] vfat: Unknown parameter 'shor4name' [ 88.671283][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.789719][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.813391][ T6284] geneve2: entered promiscuous mode [ 88.839867][ T6284] geneve2: entered allmulticast mode [ 88.862516][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.871235][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.898149][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.932084][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.948112][ T28] audit: type=1400 audit(1777979185.285:712): avc: denied { write } for pid=6298 comm="syz.5.1076" path="socket:[14041]" dev="sockfs" ino=14041 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.094499][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.113882][ T6316] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 89.132867][ T6317] loop5: detected capacity change from 0 to 2048 [ 89.166777][ T6317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.186548][ T28] audit: type=1400 audit(1777979185.545:713): avc: denied { write } for pid=6314 comm="syz.5.1083" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.218392][ T6316] loop4: detected capacity change from 0 to 128 [ 89.251403][ T6316] vfat: Unknown parameter 'shor4name' [ 89.272741][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.709052][ T6354] loop2: detected capacity change from 0 to 128 [ 89.716960][ T6354] EXT4-fs: Ignoring removed nobh option [ 89.740159][ T6354] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 89.757020][ T6354] ext4 filesystem being mounted at /220/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.820905][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.893699][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 89.910410][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 89.933844][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1103'. [ 89.948864][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1103'. [ 90.114093][ T6383] loop2: detected capacity change from 0 to 256 [ 90.135780][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.158924][ T6383] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 90.202147][ T6383] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 90.218070][ T6383] FAT-fs (loop2): Filesystem has been set read-only [ 90.348318][ T6388] loop4: detected capacity change from 0 to 1024 [ 90.368309][ T6391] netlink: 'syz.1.1112': attribute type 2 has an invalid length. [ 90.379149][ T6388] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.390086][ T6388] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 90.399110][ T6388] System zones: 0-1, 3-36 [ 90.404642][ T6388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.447944][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.448721][ T6395] SELinux: failed to load policy [ 90.483754][ T6399] netlink: 35 bytes leftover after parsing attributes in process `syz.4.1124'. [ 90.494537][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 90.670411][ T6406] loop1: detected capacity change from 0 to 128 [ 90.691455][ T6406] vfat: Unknown parameter 'shor4name' [ 90.703932][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.974927][ T28] kauditd_printk_skb: 219 callbacks suppressed [ 90.974947][ T28] audit: type=1326 audit(1777979187.335:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.017037][ T28] audit: type=1326 audit(1777979187.365:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.047356][ T28] audit: type=1326 audit(1777979187.375:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.078148][ T28] audit: type=1326 audit(1777979187.375:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.130439][ T6434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.143892][ T28] audit: type=1326 audit(1777979187.375:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.171079][ T28] audit: type=1326 audit(1777979187.375:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.198696][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.211788][ T28] audit: type=1326 audit(1777979187.375:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.240239][ T28] audit: type=1326 audit(1777979187.375:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.266408][ T28] audit: type=1326 audit(1777979187.375:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.295215][ T28] audit: type=1326 audit(1777979187.375:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6412 comm="syz.4.1120" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7efd484cd60e code=0x7ffc0000 [ 91.374395][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.699097][ T6461] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1139'. [ 91.759629][ T6464] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 91.791946][ T6464] EXT4-fs (loop2): 1 truncate cleaned up [ 91.799172][ T6464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.824559][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.862006][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.214933][ T3415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.303626][ T6492] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 92.372317][ T6492] vfat: Unknown parameter 'shor4name' [ 92.614547][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.640433][ T6499] set_capacity_and_notify: 4 callbacks suppressed [ 92.640456][ T6499] loop1: detected capacity change from 0 to 512 [ 92.656511][ T6499] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 92.685269][ T6499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.706393][ T6499] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.112443][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.254829][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.313039][ T6539] loop0: detected capacity change from 0 to 2048 [ 93.340952][ T6539] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.474182][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.543708][ T6569] loop5: detected capacity change from 0 to 256 [ 93.563841][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1176'. [ 93.847661][ T6592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1190'. [ 93.877475][ T6592] netlink: 'syz.0.1190': attribute type 5 has an invalid length. [ 93.895153][ T6592] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1190'. [ 93.910788][ T6597] loop5: detected capacity change from 0 to 512 [ 93.956335][ T6597] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.971327][ T6597] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.001152][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.466975][ T6611] loop5: detected capacity change from 0 to 32768 [ 94.683746][ T6621] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1201'. [ 94.737650][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'. [ 94.766744][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'. [ 94.853328][ T6628] loop0: detected capacity change from 0 to 512 [ 94.866002][ T3407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.870710][ T6628] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 94.993683][ T6638] lo: entered promiscuous mode [ 95.035917][ T6636] lo: left promiscuous mode [ 95.143435][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 95.159109][ T6650] vxlan2: entered promiscuous mode [ 95.167211][ T36] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.178339][ T36] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.189381][ T36] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.200696][ T36] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.334642][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.097647][ T6659] geneve2: entered promiscuous mode [ 96.105626][ T6659] geneve2: entered allmulticast mode [ 96.147567][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.160167][ T6532] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.170933][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.183721][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.194608][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 96.264141][ T6662] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1219'. [ 96.374393][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.396462][ T6679] loop2: detected capacity change from 0 to 256 [ 96.819242][ T6709] loop2: detected capacity change from 0 to 256 [ 96.892060][ T28] kauditd_printk_skb: 210 callbacks suppressed [ 96.892092][ T28] audit: type=1400 audit(1777979193.245:1153): avc: denied { setopt } for pid=6717 comm="syz.5.1245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 96.955440][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 96.965640][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 97.000434][ T12] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.000464][ T6722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 97.000486][ T6722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1246'. [ 97.073340][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.091365][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.119083][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.236342][ T6735] loop0: detected capacity change from 0 to 128 [ 97.281604][ T6744] loop2: detected capacity change from 0 to 512 [ 97.300204][ T6735] vfat: Unknown parameter 'shor4name' [ 97.348517][ T6744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.394509][ T6744] ext4 filesystem being mounted at /260/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.409033][ T28] audit: type=1400 audit(1777979193.765:1154): avc: denied { write } for pid=6743 comm="syz.2.1256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.434923][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.457359][ T28] audit: type=1400 audit(1777979193.805:1155): avc: denied { write } for pid=6743 comm="syz.2.1256" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.532216][ T6755] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.546145][ T28] audit: type=1400 audit(1777979193.865:1156): avc: denied { ioctl } for pid=6743 comm="syz.2.1256" path="/260/file2/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 97.576522][ T6755] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.618138][ T28] audit: type=1400 audit(1777979193.975:1157): avc: denied { write } for pid=6754 comm="syz.0.1260" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.643657][ T6755] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1260: lblock 0 mapped to illegal pblock 0 (length 1) [ 97.653077][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.661816][ T6755] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 97.686896][ T6755] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.686896][ T6755] [ 97.706940][ T6766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1265'. [ 97.721778][ T6767] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1260: bg 0: block 112: padding at end of block bitmap is not set [ 97.770786][ T6767] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 97.796763][ T6755] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1260: lblock 0 mapped to illegal pblock 0 (length 3) [ 97.812242][ T6767] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.812242][ T6767] [ 97.822965][ T6767] EXT4-fs (loop0): Total free blocks count 0 [ 97.829556][ T6767] EXT4-fs (loop0): Free/Dirty block details [ 97.836378][ T6767] EXT4-fs (loop0): free_blocks=0 [ 97.842613][ T6767] EXT4-fs (loop0): dirty_blocks=64 [ 97.876202][ T6767] EXT4-fs (loop0): Block reservation details [ 97.895527][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.911880][ T6780] xt_hashlimit: size too large, truncated to 1048576 [ 97.920583][ T6755] EXT4-fs warning (device loop0): ext4_convert_unwritten_extents:5075: inode #15: block 0: len 3: ext4_ext_map_blocks returned -117 [ 97.983353][ T3306] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 98.019365][ T6786] bond3: entered promiscuous mode [ 98.231377][ T6801] set_capacity_and_notify: 1 callbacks suppressed [ 98.231434][ T6801] loop2: detected capacity change from 0 to 256 [ 98.250071][ T6801] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 98.274416][ T6801] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.334779][ T6799] geneve2: entered promiscuous mode [ 98.345083][ T6799] geneve2: entered allmulticast mode [ 98.471413][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.473249][ T30] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.496923][ T28] audit: type=1400 audit(1777979194.855:1158): avc: denied { ioctl } for pid=6802 comm="syz.1.1278" path="socket:[15858]" dev="sockfs" ino=15858 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 98.524842][ T6803] syzkaller1: entered promiscuous mode [ 98.530663][ T6803] syzkaller1: entered allmulticast mode [ 98.537967][ T30] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.549169][ T30] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.564440][ T30] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 98.888113][ T6839] loop1: detected capacity change from 0 to 512 [ 98.909984][ T6839] EXT4-fs warning (device loop1): ext4_multi_mount_protect:314: fsck is running on the filesystem [ 98.924435][ T6839] EXT4-fs warning (device loop1): ext4_multi_mount_protect:314: MMP failure info: last update time: 1756377954, last update node: nogikhp920.muc.corp.google.com, last update device: loop12 [ 99.015240][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.273312][ T6874] loop5: detected capacity change from 0 to 1024 [ 99.324042][ T6874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.350449][ T6874] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.435485][ T28] audit: type=1400 audit(1777979195.795:1159): avc: denied { write } for pid=6872 comm="syz.5.1309" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.443082][ T6874] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.1309: lblock 0 mapped to illegal pblock 0 (length 1) [ 99.475948][ T3379] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 99.498161][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.513186][ T3379] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 99.529362][ T6874] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 99.574042][ T6874] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.574042][ T6874] [ 99.628070][ T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 99.665969][ T6897] loop2: detected capacity change from 0 to 1024 [ 99.688353][ T6892] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 12 with max blocks 4 with error 28 [ 99.689675][ T6895] EXT4-fs error (device loop5): ext4_map_blocks:833: inode #15: comm syz.5.1309: lblock 0 mapped to illegal pblock 0 (length 3) [ 99.736864][ T6892] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.736864][ T6892] [ 99.757703][ T6897] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 99.764731][ T6892] EXT4-fs (loop5): Total free blocks count 0 [ 99.794415][ T6895] EXT4-fs warning (device loop5): ext4_convert_unwritten_extents:5075: inode #15: block 0: len 3: ext4_ext_map_blocks returned -117 [ 99.796376][ T6892] EXT4-fs (loop5): Free/Dirty block details [ 99.810111][ T6897] ext4 filesystem being mounted at /267/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.847648][ T28] audit: type=1400 audit(1777979196.205:1160): avc: denied { write } for pid=6896 comm="syz.2.1319" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 99.848152][ T6897] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: block 3: comm syz.2.1319: lblock 3 mapped to illegal pblock 3 (length 1) [ 99.887796][ T6892] EXT4-fs (loop5): free_blocks=0 [ 99.894063][ T6892] EXT4-fs (loop5): dirty_blocks=64 [ 99.901436][ T6892] EXT4-fs (loop5): Block reservation details [ 99.908617][ T6895] EXT4-fs error (device loop5): ext4_ext_remove_space:2969: inode #15: comm syz.5.1309: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 99.953535][ T28] audit: type=1400 audit(1777979196.305:1161): avc: denied { map } for pid=6896 comm="syz.2.1319" path="/267/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.957286][ T6897] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 100.009921][ T4838] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 100.055812][ T6897] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.055812][ T6897] [ 100.143688][ T6897] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #15: comm syz.2.1319: lblock 0 mapped to illegal pblock 0 (length 3) [ 100.182321][ T6897] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 100.204391][ T6897] EXT4-fs (loop2): This should not happen!! Data will be lost [ 100.204391][ T6897] [ 100.254899][ T3303] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 100.279267][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 100.294561][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.324938][ T6911] loop5: detected capacity change from 0 to 1024 [ 100.366210][ T6911] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 100.389695][ T6911] System zones: 0-1, 3-36 [ 100.398084][ T6911] EXT4-fs error (device loop5): ext4_orphan_get:1423: comm syz.5.1324: bad orphan inode 134217728 [ 100.422618][ T6911] loop5: lost filesystem error report for type 5 error -117 [ 100.423396][ T6911] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.451829][ T28] audit: type=1400 audit(1777979196.805:1162): avc: denied { write } for pid=6910 comm="syz.5.1324" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.534907][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.691213][ T6913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6913 comm=syz.4.1325 [ 100.708268][ T6929] loop2: detected capacity change from 0 to 512 [ 100.751911][ T6929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.773227][ T6929] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 100.840605][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.278553][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.388200][ T6959] loop1: detected capacity change from 0 to 1024 [ 101.427409][ T6959] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.446965][ T6959] ext4 filesystem being mounted at /279/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.462231][ T6959] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1341: lblock 0 mapped to illegal pblock 0 (length 1) [ 101.477794][ T6959] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 101.501853][ T6959] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.501853][ T6959] [ 101.528610][ T6964] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1341: bg 0: block 112: padding at end of block bitmap is not set [ 101.558316][ T6964] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 101.576871][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.585832][ T6964] EXT4-fs (loop1): This should not happen!! Data will be lost [ 101.585832][ T6964] [ 101.598197][ T6959] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.1341: lblock 0 mapped to illegal pblock 0 (length 3) [ 101.612947][ T6964] EXT4-fs (loop1): Total free blocks count 0 [ 101.620505][ T6964] EXT4-fs (loop1): Free/Dirty block details [ 101.628359][ T6959] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:5075: inode #15: block 0: len 3: ext4_ext_map_blocks returned -117 [ 101.644584][ T6964] EXT4-fs (loop1): free_blocks=0 [ 101.650006][ T6964] EXT4-fs (loop1): dirty_blocks=64 [ 101.657230][ T6964] EXT4-fs (loop1): Block reservation details [ 101.701327][ T3300] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 101.768052][ T6970] loop4: detected capacity change from 0 to 136 [ 101.801636][ T6970] Attempt to read inode for relocated directory [ 101.817506][ T6970] syz.4.1344: attempt to access beyond end of device [ 101.817506][ T6970] loop4: rw=524288, sector=335544428, nr_sectors = 4 limit=136 [ 101.848624][ T6970] syz.4.1344: attempt to access beyond end of device [ 101.848624][ T6970] loop4: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 101.869767][ T6970] syz.4.1344: attempt to access beyond end of device [ 101.869767][ T6970] loop4: rw=0, sector=335544428, nr_sectors = 4 limit=136 [ 101.911206][ T6978] loop0: detected capacity change from 0 to 512 [ 101.957846][ T6974] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1346'. [ 101.958670][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 101.958716][ T28] audit: type=1400 audit(1777979198.315:1166): avc: denied { map } for pid=6980 comm="syz.5.1349" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.018631][ T28] audit: type=1400 audit(1777979198.315:1167): avc: denied { read write } for pid=6980 comm="syz.5.1349" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=16528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 102.057135][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.116717][ T28] audit: type=1400 audit(1777979198.475:1168): avc: denied { kexec_image_load } for pid=6989 comm="syz.5.1353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 102.614357][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.875790][ T7002] loop1: detected capacity change from 0 to 128 [ 103.189865][ T7012] EXT4-fs: Ignoring removed orlov option [ 103.230556][ T7012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.261862][ T28] audit: type=1400 audit(1777979199.615:1169): avc: denied { setattr } for pid=7011 comm="syz.5.1363" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.314624][ T28] audit: type=1400 audit(1777979199.665:1170): avc: denied { write } for pid=7011 comm="syz.5.1363" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.357899][ T28] audit: type=1400 audit(1777979199.665:1171): avc: denied { write } for pid=7011 comm="syz.5.1363" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 103.385874][ T28] audit: type=1400 audit(1777979199.665:1172): avc: denied { rename } for pid=7011 comm="syz.5.1363" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.426855][ T28] audit: type=1400 audit(1777979199.675:1173): avc: denied { unlink } for pid=7011 comm="syz.5.1363" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 103.456251][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.643400][ T7015] set_capacity_and_notify: 1 callbacks suppressed [ 103.643422][ T7015] loop4: detected capacity change from 0 to 32768 [ 103.659433][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.716833][ T7015] loop4: p1 p3 < > [ 103.842148][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 103.851681][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 103.925897][ T7034] loop4: detected capacity change from 0 to 256 [ 103.949579][ T7026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7026 comm=syz.5.1366 [ 104.053011][ T7042] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 104.068380][ T6955] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.116873][ T7046] loop0: detected capacity change from 0 to 256 [ 104.269082][ T28] audit: type=1400 audit(1777979200.625:1174): avc: denied { setopt } for pid=7052 comm="syz.2.1378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.341070][ T28] audit: type=1400 audit(1777979200.695:1175): avc: denied { watch watch_reads } for pid=7059 comm="syz.1.1381" path="/292/file1" dev="tmpfs" ino=1528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.447066][ T7065] loop0: detected capacity change from 0 to 256 [ 104.478212][ T7065] FAT-fs (loop0): Directory bread(block 64) failed [ 104.492186][ T7065] FAT-fs (loop0): Directory bread(block 65) failed [ 104.501512][ T7065] FAT-fs (loop0): Directory bread(block 66) failed [ 104.508828][ T7065] FAT-fs (loop0): Directory bread(block 67) failed [ 104.516862][ T7065] FAT-fs (loop0): Directory bread(block 68) failed [ 104.524155][ T7065] FAT-fs (loop0): Directory bread(block 69) failed [ 104.532663][ T7065] FAT-fs (loop0): Directory bread(block 70) failed [ 104.541067][ T7065] FAT-fs (loop0): Directory bread(block 71) failed [ 104.568539][ T2079] Bluetooth: hci0: Frame reassembly failed (-84) [ 104.578334][ T7065] FAT-fs (loop0): Directory bread(block 72) failed [ 104.586924][ T7065] FAT-fs (loop0): Directory bread(block 73) failed [ 104.599529][ T7080] loop2: detected capacity change from 0 to 256 [ 104.677318][ T7086] IPVS: Error connecting to the multicast addr [ 104.704520][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.757855][ T7090] loop0: detected capacity change from 0 to 1024 [ 104.768152][ T7090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 104.780795][ T7090] System zones: 0-1, 3-36 [ 104.801529][ T7090] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1403: bad orphan inode 134217728 [ 104.817211][ T7090] loop0: lost filesystem error report for type 5 error -117 [ 104.817702][ T7090] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.094977][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.158073][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.171168][ T36] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.239026][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.265567][ T36] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.317550][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.343701][ T36] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.416903][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.429831][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.432483][ T36] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.535267][ T36] bridge_slave_1: left allmulticast mode [ 105.541922][ T36] bridge_slave_1: left promiscuous mode [ 105.548185][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.563154][ T36] bridge_slave_0: left allmulticast mode [ 105.575332][ T36] bridge_slave_0: left promiscuous mode [ 105.590283][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.734702][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.750659][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.780750][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.792577][ T36] bond0 (unregistering): Released all slaves [ 105.802077][ T36] bond1 (unregistering): (slave veth3): Releasing backup interface [ 105.810944][ T36] veth3: left promiscuous mode [ 105.820678][ T36] bond1 (unregistering): Released all slaves [ 105.877252][ T36] hsr_slave_0: left promiscuous mode [ 105.886405][ T36] hsr_slave_1: left promiscuous mode [ 105.898938][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.911451][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.920441][ T36] batman_adv: batadv0: Interface deactivated: macsec1 [ 105.927514][ T36] batman_adv: batadv0: Removing interface: macsec1 [ 105.939201][ T36] veth1_macvtap: left promiscuous mode [ 105.947173][ T36] veth0_macvtap: left promiscuous mode [ 105.961245][ T36] veth1_vlan: left promiscuous mode [ 105.970123][ T36] veth0_vlan: left promiscuous mode [ 106.111640][ T36] team0 (unregistering): Port device team_slave_1 removed [ 106.123498][ T36] team0 (unregistering): Port device team_slave_0 removed [ 106.169200][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 106.341645][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.352804][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.360460][ T7112] bridge_slave_0: entered allmulticast mode [ 106.367937][ T7112] bridge_slave_0: entered promiscuous mode [ 106.381405][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.391292][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.399075][ T7112] bridge_slave_1: entered allmulticast mode [ 106.406004][ T7112] bridge_slave_1: entered promiscuous mode [ 106.425472][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.437642][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.464093][ T7112] team0: Port device team_slave_0 added [ 106.472084][ T7112] team0: Port device team_slave_1 added [ 106.491650][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.499159][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.527144][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.538743][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 106.546857][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.554118][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 106.581355][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.614346][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 106.615588][ T3592] Bluetooth: hci0: command 0x1003 tx timeout [ 106.639096][ T7112] hsr_slave_0: entered promiscuous mode [ 106.647383][ T7112] hsr_slave_1: entered promiscuous mode [ 106.654625][ T7112] debugfs: 'hsr0' already exists in 'hsr' [ 106.666959][ T7112] Cannot create hsr debugfs directory [ 106.784714][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.817138][ T7112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 106.886257][ T7112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.905047][ T7112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 106.929469][ T7112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.953586][ T7112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 106.974020][ T7112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.986682][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 106.986707][ T28] audit: type=1400 audit(1777979203.345:1188): avc: denied { write } for pid=7230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.002100][ T7112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 107.058182][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1430'. [ 107.072453][ T7112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 107.083085][ T7235] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1430'. [ 107.092876][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 107.134132][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.141464][ T7112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.149084][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.156381][ T7112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.236818][ T2079] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.245498][ T2079] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.333305][ T28] audit: type=1400 audit(1777979203.685:1189): avc: denied { write } for pid=7246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.371342][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.400015][ T7112] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.410543][ T28] audit: type=1400 audit(1777979203.745:1190): avc: denied { write } for pid=7268 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.440616][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.447790][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.475428][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 107.496539][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.503776][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.542741][ T7273] loop0: detected capacity change from 0 to 128 [ 107.560323][ T7273] syz.0.1437: attempt to access beyond end of device [ 107.560323][ T7273] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 107.588516][ T7273] syz.0.1437: attempt to access beyond end of device [ 107.588516][ T7273] loop0: rw=2049, sector=140, nr_sectors = 2 limit=128 [ 107.612564][ T7273] Buffer I/O error on dev loop0, logical block 70, lost async page write [ 107.631755][ T7273] syz.0.1437: attempt to access beyond end of device [ 107.631755][ T7273] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 107.656826][ T7273] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 107.666354][ T7273] syz.0.1437: attempt to access beyond end of device [ 107.666354][ T7273] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 107.693054][ T7273] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 107.702073][ T7273] syz.0.1437: attempt to access beyond end of device [ 107.702073][ T7273] loop0: rw=2049, sector=146, nr_sectors = 104 limit=128 [ 107.737485][ T7272] syz.0.1437: attempt to access beyond end of device [ 107.737485][ T7272] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 107.753246][ T7272] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 107.814360][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.836407][ T7112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.069677][ T7112] veth0_vlan: entered promiscuous mode [ 108.096155][ T28] audit: type=1400 audit(1777979204.445:1191): avc: denied { write } for pid=7308 comm="syz.5.1440" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.120088][ T7112] veth1_vlan: entered promiscuous mode [ 108.135567][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 108.165883][ T7112] veth0_macvtap: entered promiscuous mode [ 108.184342][ T28] audit: type=1400 audit(1777979204.445:1192): avc: denied { open } for pid=7308 comm="syz.5.1440" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 108.195764][ T7112] veth1_macvtap: entered promiscuous mode [ 108.262935][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.286964][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.319996][ T2079] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.341647][ T2079] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.366852][ T2079] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.393293][ T2079] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.447249][ T28] audit: type=1400 audit(1777979204.805:1193): avc: denied { mounton } for pid=7112 comm="syz-executor" path="/root/syzkaller.9bAbKi/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=17818 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 108.514919][ T28] audit: type=1400 audit(1777979204.835:1194): avc: denied { mount } for pid=7112 comm="syz-executor" name="/" dev="gadgetfs" ino=4761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 108.854467][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.002678][ T7331] loop1: detected capacity change from 0 to 256 [ 109.078357][ T7331] FAT-fs (loop1): codepage cp863 not found [ 109.185052][ T7336] loop0: detected capacity change from 0 to 4096 [ 109.208166][ T7336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.231575][ T7338] loop1: detected capacity change from 0 to 2048 [ 109.254639][ T7338] EXT4-fs: Ignoring removed i_version option [ 109.281095][ T7338] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.309790][ T28] audit: type=1400 audit(1777979205.665:1195): avc: denied { write } for pid=7335 comm="syz.0.1450" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.360935][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.433503][ T28] audit: type=1400 audit(1777979205.715:1196): avc: denied { write } for pid=7337 comm="syz.1.1451" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 109.493916][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.525152][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.544385][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.554847][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.566445][ T7348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.594128][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.729526][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'. [ 109.766928][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1457'. [ 109.853006][ T28] audit: type=1400 audit(1777979206.205:1197): avc: denied { bind } for pid=7371 comm="syz.5.1465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 110.000939][ T7375] loop1: detected capacity change from 0 to 8192 [ 110.119818][ T3300] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 110.128444][ T3300] FAT-fs (loop1): Filesystem has been set read-only [ 110.752723][ T7387] loop1: detected capacity change from 0 to 1024 [ 110.773974][ T7387] EXT4-fs: Ignoring removed orlov option [ 110.796062][ T7387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.848286][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1474'. [ 110.909107][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1474'. [ 110.945222][ T3393] net_ratelimit: 158 callbacks suppressed [ 110.945243][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.993109][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.062365][ T7412] loop4: detected capacity change from 0 to 1024 [ 111.078203][ T7412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 111.091443][ T7412] System zones: 0-1, 3-36 [ 111.096776][ T7412] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1481: bad orphan inode 134217728 [ 111.108756][ T7412] loop4: lost filesystem error report for type 5 error -117 [ 111.109353][ T7412] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.171868][ T7417] loop1: detected capacity change from 0 to 512 [ 111.178751][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.225820][ T7417] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.1482: inode has both inline data and extents flags [ 111.257180][ T7417] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 111.257872][ T7417] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1482: couldn't read orphan inode 15 (err -117) [ 111.269125][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 111.269145][ C1] EXT4-fs (loop1): initial error at time 1777979207: ext4_orphan_get:1397: inode 15 [ 111.269177][ C1] EXT4-fs (loop1): last error at time 1777979207: ext4_orphan_get:1397: inode 15 [ 111.372345][ T7417] loop1: lost filesystem error report for type 5 error -117 [ 111.373653][ T7417] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.617962][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.679706][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.816037][ T7431] dvmrp8: entered allmulticast mode [ 111.868213][ T10] kernel read not supported for file /input/event0 (pid: 10 comm: kworker/0:1) [ 111.937840][ T7440] loop6: detected capacity change from 0 to 512 [ 111.974430][ T3393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.056325][ T7449] loop5: detected capacity change from 0 to 4096 [ 112.087465][ T7449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.123552][ T7455] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 112.204628][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.308863][ T7476] netlink: 'syz.5.1503': attribute type 3 has an invalid length. [ 112.322298][ T7476] netlink: 'syz.5.1503': attribute type 1 has an invalid length. [ 112.361327][ T7476] netlink: 216 bytes leftover after parsing attributes in process `syz.5.1503'. [ 112.413611][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 112.413627][ T28] audit: type=1400 audit(1777979208.765:1212): avc: denied { mounton } for pid=7486 comm="syz.4.1509" path=2F3238392FE91F7189591E9233614B dev="tmpfs" ino=1520 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 112.456625][ T7489] loop5: detected capacity change from 0 to 512 [ 112.495598][ T7492] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.526136][ T7492] ext4 filesystem being mounted at /290/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 112.548404][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1511'. [ 112.583456][ T28] audit: type=1400 audit(1777979208.935:1213): avc: denied { write } for pid=7491 comm="syz.0.1519" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 112.672991][ T7496] team1: entered promiscuous mode [ 112.678738][ T7496] team1: entered allmulticast mode [ 112.685161][ T7496] 8021q: adding VLAN 0 to HW filter on device team1 [ 112.698745][ T3306] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.744757][ T7490] loop6: p1 p3 < > [ 112.869835][ T7508] gretap1: entered promiscuous mode [ 112.919305][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 112.921552][ T3292] udevd[3292]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 112.969592][ T7519] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 112.985835][ T7519] EXT4-fs error (device loop5): ext4_orphan_get:1397: inode #15: comm syz.5.1517: iget: bad i_size value: 38620345925642 [ 112.999202][ T7519] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 112.999450][ T7519] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.1517: couldn't read orphan inode 15 (err -117) [ 113.008751][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 113.008778][ C1] EXT4-fs (loop5): initial error at time 1777979209: ext4_orphan_get:1397: inode 15 [ 113.008836][ C1] EXT4-fs (loop5): last error at time 1777979209: ext4_orphan_get:1397: inode 15 [ 113.048782][ T917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.057253][ T7519] loop5: lost filesystem error report for type 5 error -117 [ 113.061733][ T7519] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.082501][ T7459] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.082636][ T7459] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.098027][ T7459] bridge_slave_0: entered allmulticast mode [ 113.104910][ T28] audit: type=1400 audit(1777979209.455:1214): avc: denied { write } for pid=7518 comm="syz.5.1517" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.129515][ T7459] bridge_slave_0: entered promiscuous mode [ 113.140205][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.156480][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.163977][ T7459] bridge_slave_1: entered allmulticast mode [ 113.170818][ T7459] bridge_slave_1: entered promiscuous mode [ 113.195142][ T7459] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.215441][ T7459] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.258856][ T7528] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 113.268193][ T7528] System zones: 0-1, 3-36 [ 113.274076][ T7459] team0: Port device team_slave_0 added [ 113.284660][ T7519] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1517: bg 0: block 5: invalid block bitmap [ 113.294867][ T7459] team0: Port device team_slave_1 added [ 113.302441][ T7528] EXT4-fs error (device loop6): ext4_orphan_get:1423: comm syz.6.1521: bad orphan inode 134217728 [ 113.315937][ T7528] loop6: lost filesystem error report for type 5 error -117 [ 113.317755][ T7519] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 700 with error 28 [ 113.325539][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 113.325562][ C1] EXT4-fs (loop6): initial error at time 1777979209: ext4_orphan_get:1423 [ 113.325601][ C1] EXT4-fs (loop6): last error at time 1777979209: ext4_orphan_get:1423 [ 113.366982][ T7519] EXT4-fs (loop5): This should not happen!! Data will be lost [ 113.366982][ T7519] [ 113.373105][ T7528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.377701][ T7519] EXT4-fs (loop5): Total free blocks count 0 [ 113.377726][ T7519] EXT4-fs (loop5): Free/Dirty block details [ 113.403373][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.411929][ T7519] EXT4-fs (loop5): free_blocks=0 [ 113.417328][ T7519] EXT4-fs (loop5): dirty_blocks=704 [ 113.433241][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.434439][ T7519] EXT4-fs (loop5): Block reservation details [ 113.472620][ T7459] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.484918][ T7459] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.492198][ T7459] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.519548][ T7519] EXT4-fs (loop5): i_reserved_data_blocks=704 [ 113.526288][ T28] audit: type=1400 audit(1777979209.895:1215): avc: denied { write } for pid=7527 comm="syz.6.1521" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.561389][ T7534] EXT4-fs: Ignoring removed orlov option [ 113.577459][ T7534] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.594993][ T7534] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.1523: corrupted in-inode xattr: e_value size too large [ 113.610236][ T7534] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 113.610359][ T7459] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.619938][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 113.619961][ C1] EXT4-fs (loop4): initial error at time 1777979209: ext4_iget_extra_inode:5128: inode 15 [ 113.619994][ C1] EXT4-fs (loop4): last error at time 1777979209: ext4_iget_extra_inode:5128: inode 15 [ 113.625197][ T7534] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.1523: couldn't read orphan inode 15 (err -117) [ 113.704507][ T28] audit: type=1400 audit(1777979210.065:1216): avc: denied { setopt } for pid=7538 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 113.720835][ T7534] loop4: lost filesystem error report for type 5 error -117 [ 113.727250][ T7459] hsr_slave_0: entered promiscuous mode [ 113.743106][ T7459] hsr_slave_1: entered promiscuous mode [ 113.749614][ T7459] debugfs: 'hsr0' already exists in 'hsr' [ 113.753944][ T7534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.755945][ T7459] Cannot create hsr debugfs directory [ 113.781772][ T28] audit: type=1400 audit(1777979210.145:1217): avc: denied { write } for pid=7533 comm="syz.4.1523" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.807836][ T4838] EXT4-fs warning (device loop5): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 113.821600][ T7534] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #2: block 12: comm syz.4.1523: lblock 3 mapped to illegal pblock 12 (length 1) [ 113.822515][ T28] audit: type=1400 audit(1777979210.145:1218): avc: denied { write } for pid=7533 comm="syz.4.1523" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 113.858444][ T4838] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.867936][ T28] audit: type=1400 audit(1777979210.145:1219): avc: denied { create } for pid=7533 comm="syz.4.1523" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 113.953527][ T28] audit: type=1400 audit(1777979210.165:1220): avc: denied { write } for pid=7533 comm="syz.4.1523" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.000893][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.035055][ T28] audit: type=1400 audit(1777979210.165:1221): avc: denied { write } for pid=7533 comm="syz.4.1523" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 114.058090][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.152115][ T7528] ================================================================== [ 114.160550][ T7528] BUG: KCSAN: data-race in filemap_read / filemap_read [ 114.167566][ T7528] [ 114.169931][ T7528] write to 0xffff88810b2cf8e0 of 8 bytes by task 7539 on cpu 1: [ 114.177693][ T7528] filemap_read+0x98d/0xa10 [ 114.182250][ T7528] generic_file_read_iter+0x79/0x330 [ 114.187581][ T7528] ext4_file_read_iter+0x1cc/0x290 [ 114.192740][ T7528] copy_splice_read+0x471/0x6c0 [ 114.197648][ T7528] splice_direct_to_actor+0x28f/0x670 [ 114.203259][ T7528] do_splice_direct+0x119/0x1a0 [ 114.208175][ T7528] do_sendfile+0x382/0x650 [ 114.212662][ T7528] __x64_sys_sendfile64+0x105/0x150 [ 114.217918][ T7528] x64_sys_call+0x2dc4/0x3020 [ 114.222638][ T7528] do_syscall_64+0x12c/0x3b0 [ 114.227272][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.233368][ T7528] [ 114.235715][ T7528] read to 0xffff88810b2cf8e0 of 8 bytes by task 7528 on cpu 0: [ 114.243310][ T7528] filemap_read+0x6f/0xa10 [ 114.247773][ T7528] generic_file_read_iter+0x79/0x330 [ 114.253095][ T7528] ext4_file_read_iter+0x1cc/0x290 [ 114.258246][ T7528] copy_splice_read+0x471/0x6c0 [ 114.263132][ T7528] splice_direct_to_actor+0x28f/0x670 [ 114.268650][ T7528] do_splice_direct+0x119/0x1a0 [ 114.273555][ T7528] do_sendfile+0x382/0x650 [ 114.278000][ T7528] __x64_sys_sendfile64+0x105/0x150 [ 114.283265][ T7528] x64_sys_call+0x2dc4/0x3020 [ 114.288049][ T7528] do_syscall_64+0x12c/0x3b0 [ 114.292689][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.298624][ T7528] [ 114.300974][ T7528] value changed: 0x0000000000000189 -> 0x000000000000018a [ 114.308283][ T7528] [ 114.310631][ T7528] Reported by Kernel Concurrency Sanitizer on: [ 114.316819][ T7528] CPU: 0 UID: 0 PID: 7528 Comm: syz.6.1521 Not tainted syzkaller #0 PREEMPT(full) [ 114.326306][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 114.336412][ T7528] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 114.372605][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.556205][ T7539] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.613445][ T6731] syz_tun (unregistering): left allmulticast mode [ 114.703831][ T58] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.776439][ T58] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.856185][ T58] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.916199][ T58] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.976686][ T58] bridge_slave_1: left allmulticast mode [ 114.982487][ T58] bridge_slave_1: left promiscuous mode [ 114.988524][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.996658][ T58] bridge_slave_0: left allmulticast mode [ 115.002335][ T58] bridge_slave_0: left promiscuous mode [ 115.008323][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.016835][ T58] dvmrp8: left allmulticast mode [ 115.106954][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.117566][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.127622][ T58] bond0 (unregistering): Released all slaves [ 115.179548][ T58] hsr_slave_0: left promiscuous mode [ 115.185406][ T58] hsr_slave_1: left promiscuous mode [ 115.191361][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.198891][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.206883][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.214461][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.226750][ T58] veth1_macvtap: left promiscuous mode [ 115.232461][ T58] veth0_macvtap: left promiscuous mode [ 115.238504][ T58] veth1_vlan: left promiscuous mode [ 115.243803][ T58] veth0_vlan: left promiscuous mode [ 115.319496][ T58] team0 (unregistering): Port device veth0_to_hsr removed [ 115.333467][ T58] team0 (unregistering): Port device team_slave_1 removed [ 115.343883][ T58] team0 (unregistering): Port device team_slave_0 removed [ 115.379651][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 115.496745][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 115.607552][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 115.733346][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 115.758311][ T58] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.808020][ T58] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.867845][ T58] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.917569][ T58] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.977510][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.987857][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 116.047018][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.057989][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 116.118668][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 116.129342][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.140447][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 116.187410][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.197927][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 116.268881][ T58] bridge_slave_1: left allmulticast mode [ 116.274840][ T58] bridge_slave_1: left promiscuous mode [ 116.280601][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.289456][ T58] bridge_slave_0: left allmulticast mode [ 116.296183][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.306636][ T58] bridge_slave_1: left allmulticast mode [ 116.312802][ T58] bridge_slave_1: left promiscuous mode [ 116.318773][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.326948][ T58] bridge_slave_0: left allmulticast mode [ 116.332699][ T58] bridge_slave_0: left promiscuous mode [ 116.338580][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.347658][ T58] bridge_slave_1: left allmulticast mode [ 116.353331][ T58] bridge_slave_1: left promiscuous mode [ 116.359233][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.367441][ T58] bridge_slave_0: left allmulticast mode [ 116.373110][ T58] bridge_slave_0: left promiscuous mode [ 116.378993][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.486877][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.497440][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.507167][ T58] bond0 (unregistering): Released all slaves [ 116.556844][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.567306][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.577032][ T58] bond0 (unregistering): Released all slaves [ 116.656813][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.667156][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.677081][ T58] bond0 (unregistering): Released all slaves [ 116.686218][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 116.719848][ T58] tipc: Disabling bearer [ 116.725599][ T58] tipc: Left network mode [ 116.736508][ T58] hsr_slave_0: left promiscuous mode [ 116.742797][ T58] hsr_slave_1: left promiscuous mode [ 116.749512][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.757434][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.766647][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.774171][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.785602][ T58] hsr_slave_0: left promiscuous mode [ 116.792003][ T58] hsr_slave_1: left promiscuous mode [ 116.797803][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.805687][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.816191][ T58] hsr_slave_0: left promiscuous mode [ 116.822590][ T58] hsr_slave_1: left promiscuous mode [ 116.829121][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.837236][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.846422][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.853904][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.869932][ T58] veth1_macvtap: left promiscuous mode [ 116.875751][ T58] veth0_macvtap: left promiscuous mode [ 116.881458][ T58] veth1_vlan: left promiscuous mode [ 116.887392][ T58] veth0_vlan: left promiscuous mode [ 116.893311][ T58] veth1_macvtap: left promiscuous mode [ 116.899894][ T58] veth0_macvtap: left promiscuous mode [ 116.905658][ T58] veth1_vlan: left promiscuous mode [ 116.911811][ T58] veth0_vlan: left promiscuous mode [ 117.028482][ T58] team0 (unregistering): Port device team_slave_1 removed [ 117.040253][ T58] team0 (unregistering): Port device team_slave_0 removed [ 117.100950][ T58] team0 (unregistering): Port device team_slave_1 removed [ 117.111065][ T58] team0 (unregistering): Port device team_slave_0 removed [ 117.171176][ T58] team0 (unregistering): Port device team_slave_1 removed [ 117.181774][ T58] team0 (unregistering): Port device team_slave_0 removed [ 117.217254][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 117.332615][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 117.431415][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 117.431433][ T28] audit: type=1400 audit(1777979213.785:1241): avc: denied { write } for pid=7678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.468405][ T28] audit: type=1400 audit(1777979213.825:1242): avc: denied { write } for pid=7689 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.502900][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 117.587769][ T28] audit: type=1400 audit(1777979213.945:1243): avc: denied { write } for pid=7692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.626123][ T28] audit: type=1400 audit(1777979213.985:1244): avc: denied { write } for pid=7703 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.663718][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 117.739017][ T28] audit: type=1400 audit(1777979214.095:1245): avc: denied { write } for pid=7706 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.773258][ T28] audit: type=1400 audit(1777979214.125:1246): avc: denied { write } for pid=7717 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.872290][ T28] audit: type=1400 audit(1777979214.225:1247): avc: denied { write } for pid=7720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.908325][ T28] audit: type=1400 audit(1777979214.265:1248): avc: denied { write } for pid=7731 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.038650][ T28] audit: type=1400 audit(1777979214.395:1249): avc: denied { write } for pid=7735 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.073904][ T28] audit: type=1400 audit(1777979214.425:1250): avc: denied { write } for pid=7746 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.109211][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 118.228620][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20