last executing test programs: 3m36.202324855s ago: executing program 32 (id=341): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'ipvlan1\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37, 0x8001, 0xfffffffffffffffa}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0}) 2m59.107823452s ago: executing program 33 (id=1358): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000280)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x3, 0x589, &(0x7f00000083c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x2) 2m28.266032055s ago: executing program 34 (id=2009): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000a40)='\t', 0x1, 0x240058d4, &(0x7f0000000300)={0x11, 0x8100, r2, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) 1m26.710909211s ago: executing program 35 (id=3251): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)={0x8000200d}) epoll_wait(r1, &(0x7f0000000400)=[{}], 0x1, 0xdb) 1m22.764041157s ago: executing program 36 (id=3316): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$9p(r0, &(0x7f0000000100)="d5c0", 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) 1m22.194233301s ago: executing program 2 (id=3333): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@nodiscard}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x6}}, {@data_err_ignore}, {@debug}]}, 0xff, 0x45c, &(0x7f0000000d80)="$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") chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) capset(&(0x7f0000010000)={0x19980330}, &(0x7f0000000140)={0x2, 0x0, 0x8001, 0x3, 0xfffffff9, 0x200800}) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000001000)=0x2, 0x4) 1m21.938380797s ago: executing program 2 (id=3337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x2, {0x2, 0x0, 0x0, 0x4, 0xfe, 0x0, 0x0, 0x6, 0x1400}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd29, 0x0, {0x2, 0x0, 0x0, 0x4, 0xfc, 0x0, 0x0, 0x8}}, 0x1c}}, 0x40008000) 1m21.81217731s ago: executing program 2 (id=3339): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 1m20.893436932s ago: executing program 2 (id=3355): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 1m20.831455264s ago: executing program 2 (id=3357): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) bind$xdp(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1m20.548586371s ago: executing program 2 (id=3360): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000000)='-(\x00', 0x180, &(0x7f0000000080)={@align=0x1, {0x2, 0x4, 0x1066ee15, 0xee33}}, 0x5, &(0x7f00000000c0), 0x0}, {[0x6, 0x5, 0x9, 0x2]}, 0x3, 0xc7, &(0x7f0000000280)=""/199}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m20.545933501s ago: executing program 37 (id=3360): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000000)='-(\x00', 0x180, &(0x7f0000000080)={@align=0x1, {0x2, 0x4, 0x1066ee15, 0xee33}}, 0x5, &(0x7f00000000c0), 0x0}, {[0x6, 0x5, 0x9, 0x2]}, 0x3, 0xc7, &(0x7f0000000280)=""/199}) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") creat(0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 55.385199086s ago: executing program 7 (id=3757): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000001b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x93) renameat2(0xffffffffffffff9c, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2) 55.310880598s ago: executing program 7 (id=3758): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000540)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x0, 0x1, 0x4}, 0x2}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="00010100004000", 0x7}, {&(0x7f0000000080)='%y', 0x2}], 0x2}, 0x4004) readv(r0, &(0x7f00000002c0), 0x44) 54.43049516s ago: executing program 7 (id=3771): r0 = fsopen(&(0x7f0000000040)='mqueue\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) fchdir(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 54.380121421s ago: executing program 7 (id=3774): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cf, &(0x7f0000000480)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f00000002c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 54.153714116s ago: executing program 7 (id=3778): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)='\t', 0x1, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) 53.438903784s ago: executing program 7 (id=3791): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001440)="d9", 0x1, 0x8d0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 53.438787744s ago: executing program 38 (id=3791): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="17000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, &(0x7f0000001440)="d9", 0x1, 0x8d0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) syz_clone(0x40005100, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 47.372664542s ago: executing program 9 (id=3892): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000100000063016c000000000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 47.341666543s ago: executing program 9 (id=3895): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf4, 0x1, 0x0, 0x0, 0x0, 0x80036, 0x17018, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffbff8, 0x0, @perf_bp={0x0}, 0x24210, 0x2, 0x0, 0x3, 0x0, 0x6, 0x40, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x0, &(0x7f0000000100)={[{@nodelalloc}]}, 0x1, 0xb92, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) 46.763572247s ago: executing program 9 (id=3910): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000002140)=""/4081, 0xff1}], 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 46.442615455s ago: executing program 9 (id=3921): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/../file0/../file0\x00', 0x0, 0x8c000, 0x0) 46.401587256s ago: executing program 9 (id=3922): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x4, 0x1}, 0x10) bind$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2a, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x4080) 46.21973549s ago: executing program 9 (id=3926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 46.21967615s ago: executing program 39 (id=3926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 38.839792841s ago: executing program 0 (id=4030): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000f4b000/0x1000)=nil, &(0x7f0000d3f000/0x4000)=nil, &(0x7f0000e7e000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f4c000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00007fd000/0x800000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x40040) r0 = io_uring_setup(0x2ddf, &(0x7f0000000040)={0x0, 0x100aeb9, 0xd000, 0x20000a, 0x2fc}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xfff3}, {0x10}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x15}, 0x4008000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 38.699077014s ago: executing program 0 (id=4037): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2, 0x0, 0x1c00}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 38.48986567s ago: executing program 0 (id=4042): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0xfffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf00c010", @ANYRES64=r0], 0xb2) 38.366980793s ago: executing program 0 (id=4045): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 38.285333855s ago: executing program 0 (id=4047): mkdir(&(0x7f0000000540)='./bus\x00', 0x198) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x2) chdir(&(0x7f00000003c0)='./bus\x00') unlinkat(r0, &(0x7f0000000040)='./bus\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 38.121997468s ago: executing program 0 (id=4050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x1, 0xfffffff9}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x1, 0x1000}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8d5e}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 38.107466839s ago: executing program 40 (id=4050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x0, 0x4, 0x0, 0x1, 0xfffffff9}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffffb, 0x0, 0x1, 0x1000}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x8d5e}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x20040000, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x1}, 0x1c) 23.710880801s ago: executing program 5 (id=4286): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', './file0', [], 0xa, "f68f"}, 0xd) write$binfmt_aout(r1, &(0x7f0000001340)={{0x108, 0x3, 0x81, 0x33e, 0x30a, 0x1, 0x63, 0x80}}, 0x20) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xc}, 0x8080, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 23.649669282s ago: executing program 5 (id=4291): socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x3, 0x830b}, 0x0, 0x2, 0xfffffffe, 0x5, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) 23.603365363s ago: executing program 5 (id=4292): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xf7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 23.553696914s ago: executing program 5 (id=4295): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 23.212409033s ago: executing program 5 (id=4300): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000080)=0x2000000, 0xd8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 22.818917952s ago: executing program 5 (id=4304): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x93, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000023f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 22.818831142s ago: executing program 41 (id=4304): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000100)=0x93, 0x4) sendmmsg$inet6(r0, &(0x7f0000000400)=[{{&(0x7f0000000240)={0xa, 0x4e23, 0x800, @mcast2}, 0x1c, 0x0}}], 0x1, 0x60040000) recvmmsg(r0, &(0x7f0000023f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/129, 0x81}, 0xdb30}], 0x1, 0x40002042, 0x0) 2.700918894s ago: executing program 6 (id=4659): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2000, 0x1a8) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) fchdir(r1) openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) 2.583070517s ago: executing program 6 (id=4660): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x25, 0x301, 0x70bd28, 0x25dfdbfb, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24008002) 1.899943044s ago: executing program 6 (id=4661): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 1.360230737s ago: executing program 1 (id=4669): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x7, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffc}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 1.273482529s ago: executing program 1 (id=4671): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) exit(0x1000) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 1.130307032s ago: executing program 8 (id=4676): timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)=0x0) clock_gettime(0x2, &(0x7f0000000040)={0x0, 0x0}) timer_settime(r0, 0x1, &(0x7f0000000100)={{}, {r1, r2+10000000}}, 0x0) syz_read_part_table(0x407c, &(0x7f0000008140)="$eJzs079KemEYB/BHh98ParHoAt4tAqnjnySnqGhoMAenxgoLQQzSwqWlu+mSuoCuw8AM5FSDFgTx+UzPOd/3efku7+rL00FEFHbuBr1x5BQjYjKd9osRhYioz5JC/ujwutc/v+j237aK+ZiFlb74//A4G/4tfufmWsRpioiV0fPG0Xfa8Uf83zqb/5xMfXzfyzk5bKX2cStljUa1U6mmd7VUyz7fyLJsLvmhGktZL3Wuxum+ezvs3QzS7natnNqXo1TZK6dKs1n/xWYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDKDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rZPo3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG4FAAD//xQHINw=") 1.020651446s ago: executing program 4 (id=4679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000130005002cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="12030040000000000a000100"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 1.016865186s ago: executing program 3 (id=4680): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000340)={0x2b, 0x10, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x18, {0x3, 0x4, 0x79, 0x7, [0x8, 0x96ea]}}, @generic={0x47, 0x7, "e237ce087318f2"}, @calipso={0x7, 0x48, {0x1, 0x10, 0x74, 0xd8da, [0x750e, 0x3, 0x10000, 0xb17, 0x82c, 0x6, 0x3, 0x4]}}, @calipso={0x7, 0x8, {0x0, 0x0, 0x51, 0xf}}]}, 0x88) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f00000000c0)=@srh={0x2c, 0xe, 0x4, 0x7, 0x0, 0x48, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @private0, @local, @remote, @mcast2, @private0]}, 0x78) 964.648667ms ago: executing program 3 (id=4681): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xfffff7ffffffffff, 0xffffffffffffffff, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 922.932137ms ago: executing program 6 (id=4682): bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 885.168949ms ago: executing program 4 (id=4683): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x40, r2, 0x1, 0x70bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xffffffffffffffff}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 737.212262ms ago: executing program 4 (id=4684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e24, 0x89f3, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "b5d4c27c5c778dd0", "5f128fd81908609c81286d4f6a539024ffb7007ed672afb4be7aec5ca3d27dbf", '\x00', "b690a3fabf2cb970"}, 0x38) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000640)="d6", 0x12}], 0x1) 704.252283ms ago: executing program 8 (id=4685): io_uring_setup(0x20, &(0x7f00000000c0)={0x0, 0x0, 0x40, 0x80000000, 0xfefffffd}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x2c, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x6, 0x4, 0x0, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}, 0x0) 700.786873ms ago: executing program 4 (id=4686): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000600000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000080), 0x1103, r1}, 0x38) 644.760084ms ago: executing program 4 (id=4687): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/4, 0x4}], 0x3bc, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 640.045404ms ago: executing program 8 (id=4688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) recvmsg(r0, &(0x7f0000002940)={&(0x7f0000000100)=@llc, 0x80, 0x0}, 0x100) write(r0, 0x0, 0x0) 636.004835ms ago: executing program 3 (id=4689): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r0, r1, &(0x7f00000001c0), 0x8) fcntl$addseals(r1, 0x409, 0x8) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000000, 0x13, r1, 0xeff74000) 573.418526ms ago: executing program 3 (id=4690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000600)={@fallback=r0, r0, 0x2f}, 0x20) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x7, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 540.194787ms ago: executing program 8 (id=4691): unshare(0x4000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc_mnt\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x64, 0x0, 0xfc, 0x1, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x0, 0x3d, 0x64, 0x0, 0x5, 0x1, 0x0, @private=0xa010102, @loopback}}}}}}, 0x0) 486.860449ms ago: executing program 3 (id=4692): prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0xb, &(0x7f0000000080)={0x36, 0x208, 0xfffffff3}) 434.874249ms ago: executing program 8 (id=4693): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x1, &(0x7f0000006380)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x800, r1, &(0x7f00000004c0)="fd1060984073c1b9", 0x8, 0x4, 0x0, 0x1, r1}]) io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r1}]) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 428.719ms ago: executing program 4 (id=4694): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x30000019}) epoll_wait(r1, &(0x7f0000000180)=[{}], 0x1, 0x496a) poll(&(0x7f00000000c0)=[{r1, 0x8283}], 0x1, 0x50c00000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x2) 393.48137ms ago: executing program 1 (id=4695): rseq(0x0, 0x0, 0x1, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)=@in6={0xa, 0x4e23, 0xd, @local, 0x7}, 0x80, 0x0}, 0x40040) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x922bac8556bdad8e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac141400340008"], 0x2c}}, 0x88d0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 385.447321ms ago: executing program 3 (id=4696): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xe) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x14, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x0, "", [{{0x9, 0x4, 0x0, 0xaf, 0x1, 0x3, 0x1, 0x2, 0x1, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x612}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0xf, 0x9}}}}}]}}]}}, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x11) 351.753922ms ago: executing program 6 (id=4697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e900172f8db0049d28b31c32a790343c48040000db", 0x2a}, {&(0x7f0000000180)="24f5bbd11cb3", 0x6}, {&(0x7f0000000240)="a43b2eaab4000000000080006558", 0xe}, {&(0x7f0000000540)="4e348eab", 0x4}, {&(0x7f0000000280)="70b28afa5cf6d8415cd1b25f0a7843", 0xf}], 0x5) 286.934393ms ago: executing program 1 (id=4698): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3100000000140004800800024000000000080001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c400000000328000480"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100004800c"], 0x34}}, 0x0) 279.494194ms ago: executing program 1 (id=4699): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 256.160024ms ago: executing program 1 (id=4700): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 197.424126ms ago: executing program 6 (id=4701): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@delalloc}, {@nodioread_nolock}, {@noquota}, {@jqfmt_vfsv1}, {@usrjquota}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xc00) open(&(0x7f00000000c0)='./bus\x00', 0x147c7c, 0x0) ftruncate(r0, 0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x2, 0x4}}, 0x20) 0s ago: executing program 8 (id=4702): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x0, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) getpgrp(0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) kernel console output (not intermixed with test programs): mode: writeback. [ 204.470939][ T28] audit: type=1400 audit(1785202338.261:1383): avc: denied { rename } for pid=13249 comm="syz.7.3581" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 204.521858][ T28] audit: type=1400 audit(1785202338.261:1384): avc: denied { rmdir } for pid=13249 comm="syz.7.3581" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 204.544428][T13259] ext4 filesystem being mounted at /311/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.556597][ T28] audit: type=1400 audit(1785202338.261:1385): avc: denied { rename } for pid=13249 comm="syz.7.3581" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 204.601666][ T28] audit: type=1400 audit(1785202338.261:1386): avc: denied { unlink } for pid=13249 comm="syz.7.3581" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 204.658424][T13259] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 204.676986][T13259] EXT4-fs (loop7): Remounting filesystem read-only [ 204.720904][ T28] audit: type=1400 audit(1785202338.655:1387): avc: denied { write } for pid=13257 comm="syz.7.3584" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.773897][ T8621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.013498][T13253] loop3: detected capacity change from 0 to 4096 [ 205.043435][T13253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.033360][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.200295][T13335] loop9: detected capacity change from 0 to 512 [ 206.241843][T13335] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #14: comm syz.9.3611: invalid orphan symlink nlink 1 [ 206.294767][T13335] loop9: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 206.294940][T13335] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.3611: couldn't read orphan inode 14 (err -117) [ 206.304174][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 206.304199][ C1] EXT4-fs (loop9): initial error at time 1785202340: ext4_orphan_get:1399: inode 14 [ 206.304238][ C1] EXT4-fs (loop9): last error at time 1785202340: ext4_orphan_get:1399: inode 14 [ 206.384270][T13335] loop9: lost filesystem error report for type 5 error -117 [ 206.385103][T13335] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.428286][T13335] ext4 filesystem being mounted at /52/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.802517][T13358] loop8: detected capacity change from 0 to 4096 [ 206.841631][T12224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.858062][T13358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.026788][T13376] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 207.068697][T13383] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3621'. [ 207.086977][T13376] bond0 (unregistering): Released all slaves [ 207.118796][T13383] netlink: 'syz.3.3621': attribute type 2 has an invalid length. [ 207.128333][T13383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3621'. [ 207.376193][T13388] loop3: detected capacity change from 0 to 256 [ 207.440954][T13388] netlink: 'syz.3.3624': attribute type 21 has an invalid length. [ 207.452341][T13388] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3624'. [ 207.519889][T12617] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.529198][T13388] netlink: 'syz.3.3624': attribute type 4 has an invalid length. [ 207.542202][T13388] netlink: 'syz.3.3624': attribute type 3 has an invalid length. [ 207.551741][T13388] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3624'. [ 207.621120][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 207.657653][T13408] loop8: detected capacity change from 0 to 2048 [ 207.665735][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3632'. [ 207.701856][T13408] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.779374][T13408] loop8: detected capacity change from 2048 to 0 [ 207.786722][T13408] EXT4-fs error (device loop8): __ext4_find_entry:1615: inode #2: comm syz.8.3631: reading directory lblock 0 [ 207.820529][T13408] buffer_io_error: 18 callbacks suppressed [ 207.820546][T13408] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 207.834836][T13408] EXT4-fs (loop8): I/O error while writing superblock [ 207.854138][T12617] EXT4-fs error (device loop8): ext4_get_inode_loc:5024: inode #2: block 4: comm syz-executor: unable to read itable block [ 207.867310][T12617] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 207.875846][T12617] EXT4-fs (loop8): I/O error while writing superblock [ 207.882701][T12617] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6435: IO failure [ 207.891676][T12617] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 207.933200][T12617] EXT4-fs (loop8): I/O error while writing superblock [ 207.959166][T12617] EXT4-fs error (device loop8): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 207.990692][T12617] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 208.015637][T12617] EXT4-fs (loop8): I/O error while writing superblock [ 208.228297][ T8548] EXT4-fs error (device loop8): __ext4_get_inode_loc_noinmem:5009: inode #2: block 4: comm kworker/u8:116: unable to read itable block [ 208.247928][ T8548] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 208.266009][ T8548] EXT4-fs (loop8): I/O error while writing superblock [ 208.282223][T12617] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.313834][T12617] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 208.339977][T12617] EXT4-fs (loop8): I/O error while writing superblock [ 208.349291][T13411] Buffer I/O error on dev loop8, logical block 64, lost sync page write [ 208.579556][ T8548] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.663851][ T8548] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.721899][ T8548] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.785670][ T8548] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.870638][ T8548] bridge_slave_1: left allmulticast mode [ 208.880610][ T8548] bridge_slave_1: left promiscuous mode [ 208.892578][ T8548] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.934472][T13478] loop7: detected capacity change from 0 to 512 [ 208.958578][ T8548] bridge_slave_0: left allmulticast mode [ 208.964296][T13478] EXT4-fs error (device loop7): ext4_map_blocks:791: inode #11: block 992: comm syz.7.3660: lblock 6 mapped to illegal pblock 992 (length 1) [ 208.964354][T13478] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 208.968233][T13478] ------------[ cut here ]------------ [ 208.978858][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 208.978877][ C0] EXT4-fs (loop7): initial error at time 1785202342: ext4_map_blocks:791: inode 11: block 992 [ 208.978929][ C0] EXT4-fs (loop7): last error at time 1785202342: ext4_map_blocks:791: inode 11: block 992 [ 209.002299][ T8548] bridge_slave_0: left promiscuous mode [ 209.010405][T13478] EA inode 11 i_nlink=2 [ 209.010439][T13478] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.7.3660/13478 [ 209.039034][ T8548] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.041031][T13478] Modules linked in: [ 209.041097][T13478] CPU: 0 UID: 0 PID: 13478 Comm: syz.7.3660 Not tainted syzkaller #0 PREEMPT(lazy) [ 209.061606][T13478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 209.071747][T13478] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 209.078475][T13478] Code: 86 ba 96 ff 49 8d 7e 40 4c 8d 2d fb 98 5a 05 e8 26 a0 b5 ff 49 8b 6e 40 4c 89 e7 e8 5a 9b b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 01 02 da 03 90 90 90 90 90 90 90 [ 209.098188][T13478] RSP: 0018:ffffc900119637f8 EFLAGS: 00010246 [ 209.104440][T13478] RAX: ffff88812fb98b30 RBX: ffff88811a4785a8 RCX: ffffffff81c29d46 [ 209.112607][T13478] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff871d3630 [ 209.120680][T13478] RBP: 000000000000000b R08: 000188811a47855b R09: 0000000000000000 [ 209.128713][T13478] R10: ffffc90011963728 R11: 0001c90011963728 R12: ffff88811a478558 [ 209.136775][T13478] R13: ffffffff871d3630 R14: ffff88811a478510 R15: 0000000000000001 [ 209.144789][T13478] FS: 00007f0acada76c0(0000) GS:ffff8882ae8cc000(0000) knlGS:0000000000000000 [ 209.153803][T13478] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.160452][T13478] CR2: 000055aae45ff570 CR3: 0000000131f58000 CR4: 00000000003506f0 [ 209.168545][T13478] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 209.176548][T13478] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 209.184690][T13478] Call Trace: [ 209.188075][T13478] [ 209.191071][T13478] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 209.197076][T13478] ext4_xattr_delete_inode+0x6b5/0x790 [ 209.202671][T13478] ext4_evict_inode+0xb18/0xdf0 [ 209.207615][T13478] ? __pfx_ext4_evict_inode+0x10/0x10 [ 209.213204][T13478] evict+0x2a5/0x510 [ 209.217162][T13478] iput+0x430/0x5a0 [ 209.221097][T13478] ext4_process_orphan+0x1a4/0x1c0 [ 209.226275][T13478] ext4_orphan_cleanup+0x6a6/0xa10 [ 209.231465][T13478] ? ext4_register_li_request+0x14c/0x440 [ 209.237245][T13478] ext4_fill_super+0x33ab/0x3760 [ 209.242385][T13478] ? set_blocksize+0x14c/0x270 [ 209.247233][T13478] ? __pfx_ext4_fill_super+0x10/0x10 [ 209.252697][T13478] get_tree_bdev_flags+0x291/0x300 [ 209.257852][T13478] ? __pfx_ext4_fill_super+0x10/0x10 [ 209.263286][T13478] get_tree_bdev+0x1f/0x30 [ 209.267745][T13478] ext4_get_tree+0x1c/0x30 [ 209.272239][T13478] vfs_get_tree+0x57/0x1d0 [ 209.276752][T13478] do_new_mount+0x288/0x8d0 [ 209.281386][T13478] path_mount+0x4ad/0xb90 [ 209.285797][T13478] __se_sys_mount+0x28c/0x2e0 [ 209.290523][T13478] __x64_sys_mount+0x67/0x80 [ 209.295235][T13478] x64_sys_call+0x2d61/0x3020 [ 209.299991][T13478] do_syscall_64+0x136/0x3c0 [ 209.304669][T13478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.311168][T13478] RIP: 0033:0x7f0acc34f10a [ 209.316107][T13478] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.331119][ T28] kauditd_printk_skb: 17 callbacks suppressed [ 209.331160][ T28] audit: type=1400 audit(1785202343.015:1403): avc: denied { write } for pid=13489 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.335883][T13478] RSP: 002b:00007f0acada6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 209.372424][T13478] RAX: ffffffffffffffda RBX: 00007f0acada6ee0 RCX: 00007f0acc34f10a [ 209.380430][T13478] RDX: 00002000000009c0 RSI: 0000200000000540 RDI: 00007f0acada6ea0 [ 209.388576][T13478] RBP: 00002000000009c0 R08: 00007f0acada6ee0 R09: 0000000000800718 [ 209.396836][T13478] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000540 [ 209.404968][T13478] R13: 00007f0acada6ea0 R14: 000000000000048d R15: 0000200000000200 [ 209.413016][T13478] [ 209.416177][T13478] ---[ end trace 0000000000000000 ]--- [ 209.424117][T13478] EXT4-fs (loop7): 1 orphan inode deleted [ 209.430932][T13478] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 209.667238][ T8621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.715925][ T8548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.746314][ T8548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.762523][ T8548] bond0 (unregistering): Released all slaves [ 209.785786][T13510] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.944081][ T8548] hsr_slave_0: left promiscuous mode [ 209.966195][ T8548] hsr_slave_1: left promiscuous mode [ 209.986511][ T8548] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.996007][ T8548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.009788][ T8548] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.020016][ T8548] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.048864][ T28] audit: type=1400 audit(1785202343.698:1404): avc: denied { ioctl } for pid=13540 comm="syz.7.3677" path="socket:[38921]" dev="sockfs" ino=38921 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 210.080145][ T8548] veth1_macvtap: left promiscuous mode [ 210.086139][ T8548] veth0_macvtap: left promiscuous mode [ 210.087705][ T28] audit: type=1400 audit(1785202343.736:1405): avc: denied { write } for pid=13519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.091895][ T8548] veth1_vlan: left promiscuous mode [ 210.120507][ T8548] veth0_vlan: left promiscuous mode [ 210.162254][ T28] audit: type=1400 audit(1785202343.811:1406): avc: denied { write } for pid=13544 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.241806][ T8548] team0 (unregistering): Port device team_slave_1 removed [ 210.258104][ T8548] team0 (unregistering): Port device team_slave_0 removed [ 210.524819][T13566] ÿÿÿÿ: renamed from bridge_slave_1 [ 210.535966][ T28] audit: type=1400 audit(1785202344.148:1407): avc: denied { write } for pid=13553 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.609932][ T28] audit: type=1400 audit(1785202344.223:1408): avc: denied { write } for pid=13572 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.694786][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 210.764688][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.774951][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.783070][T13486] bridge_slave_0: entered allmulticast mode [ 210.797126][T13486] bridge_slave_0: entered promiscuous mode [ 210.823319][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.851724][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.877054][T13486] bridge_slave_1: entered allmulticast mode [ 210.896704][T13486] bridge_slave_1: entered promiscuous mode [ 210.925287][T13596] loop9: detected capacity change from 0 to 256 [ 210.949055][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.984018][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.021622][ T28] audit: type=1400 audit(1785202344.597:1409): avc: denied { write } for pid=13588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.054141][T13486] team0: Port device team_slave_0 added [ 211.084982][T13486] team0: Port device team_slave_1 added [ 211.094168][T13605] printk: legacy console [ttyGS0] disabled [ 211.127925][ T28] audit: type=1400 audit(1785202344.709:1410): avc: denied { write } for pid=13606 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.144794][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.187108][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.231834][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.243921][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 211.260458][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.329295][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 211.405918][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.540654][T13486] hsr_slave_0: entered promiscuous mode [ 211.546984][T13486] hsr_slave_1: entered promiscuous mode [ 211.553169][T13486] debugfs: 'hsr0' already exists in 'hsr' [ 211.559111][T13486] Cannot create hsr debugfs directory [ 211.788255][ T28] audit: type=1326 audit(1785202345.327:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13620 comm="syz.7.3693" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0acc34de99 code=0x0 [ 211.881179][ T28] audit: type=1400 audit(1785202345.383:1412): avc: denied { write } for pid=13617 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.965920][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 212.484225][T13676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3702'. [ 212.675499][ T8545] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.684528][ T8545] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.713638][ T8545] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 212.742432][ T8545] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 213.749387][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3715'. [ 213.805077][T13486] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 213.832856][T13486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 213.848126][T13486] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 213.871223][T13486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 213.893065][T13761] syzkaller1: entered promiscuous mode [ 213.922557][T13761] syzkaller1: entered allmulticast mode [ 213.953078][T13486] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 213.978228][T13486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 213.989657][T13486] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 214.000642][T13486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 214.111142][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.130616][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.182227][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.189488][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.213717][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.220848][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.231845][T13756] loop7: detected capacity change from 0 to 4096 [ 214.271416][T13756] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.551927][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.881134][T13486] veth0_vlan: entered promiscuous mode [ 214.904552][T13486] veth1_vlan: entered promiscuous mode [ 214.923968][T13486] veth0_macvtap: entered promiscuous mode [ 214.932518][T13486] veth1_macvtap: entered promiscuous mode [ 214.944553][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.958277][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.988125][ T154] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.997178][ T154] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.532288][ T154] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.562527][ T154] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.583087][T13849] cgroup: noprefix used incorrectly [ 215.662452][ T8621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.730555][ T8568] netdevsim netdevsim9 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.739630][ T8568] netdevsim netdevsim9 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.766243][ T8568] netdevsim netdevsim9 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.779827][ T8568] netdevsim netdevsim9 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 215.923556][T13873] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=13873 comm=syz.8.3669 [ 215.966354][T13873] netlink: 'syz.8.3669': attribute type 12 has an invalid length. [ 215.975683][T13873] netlink: 'syz.8.3669': attribute type 4 has an invalid length. [ 216.897740][T13900] sock: sock_set_timeout: `syz.9.3759' (pid 13900) tries to set negative timeout [ 216.999835][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 216.999854][ T28] audit: type=1400 audit(1785202350.202:1425): avc: denied { setopt } for pid=13909 comm="syz.0.3764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 217.125715][ T28] audit: type=1400 audit(1785202350.324:1426): avc: denied { write } for pid=13924 comm="syz.0.3770" name="c.1" dev="configfs" ino=37582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.210062][T13934] loop7: detected capacity change from 0 to 512 [ 217.222797][T13934] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 217.238644][T13934] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3774: bg 0: block 255: padding at end of block bitmap is not set [ 217.258465][T13934] loop7: lost filesystem error report for type 5 error -117 [ 217.261328][T13934] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 217.268700][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 217.268721][ C1] EXT4-fs (loop7): initial error at time 1785202350: ext4_validate_block_bitmap:441 [ 217.268750][ C1] EXT4-fs (loop7): last error at time 1785202350: ext4_validate_block_bitmap:441 [ 217.271086][T13940] PM: suspend entry (deep) [ 217.307234][T13934] loop7: lost filesystem error report for type 5 error -117 [ 217.310996][T13934] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.3774: invalid indirect mapped block 1 (level 1) [ 217.332492][T13934] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 217.334122][T13934] EXT4-fs (loop7): 1 truncate cleaned up [ 217.357380][T13934] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 217.376159][T13942] 9p: Bad value for 'wfdno' [ 217.378445][ T28] audit: type=1400 audit(1785202350.558:1427): avc: denied { write } for pid=13933 comm="syz.7.3774" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.416207][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.427015][ T28] audit: type=1400 audit(1785202350.586:1428): avc: denied { write } for pid=8621 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.456492][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.467648][ T28] audit: type=1400 audit(1785202350.633:1429): avc: denied { write } for pid=8621 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.490169][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.497119][ T8548] Filesystems sync: 0.177 seconds [ 217.503364][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.518732][ T28] audit: type=1400 audit(1785202350.670:1430): avc: denied { write } for pid=8621 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.544810][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.557084][ T28] audit: type=1400 audit(1785202350.680:1431): avc: denied { write } for pid=8621 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.583180][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.594009][T13940] Freezing user space processes [ 217.601001][ T28] audit: type=1400 audit(1785202350.717:1432): avc: denied { write } for pid=8621 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.623769][ T28] audit: type=1400 audit(1785202350.754:1433): avc: denied { write } for pid=8621 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.660276][T13940] Freezing user space processes completed (elapsed 0.057 seconds) [ 217.668336][T13940] OOM killer disabled. [ 217.672413][T13940] Freezing remaining freezable tasks [ 217.679412][T13940] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 217.687798][T13940] printk: Suspending console(s) (use no_console_suspend to debug) [ 217.705854][T13940] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 217.705934][T13940] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 217.737570][T13940] PM: Some devices failed to suspend, or early wake event detected [ 217.799292][T13940] OOM killer enabled. [ 217.803287][T13940] Restarting tasks: Starting [ 217.808868][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.833641][ T28] audit: type=1400 audit(1785202350.960:1434): avc: denied { write } for pid=8621 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 217.851584][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.856162][T13940] Restarting tasks: Done [ 217.873637][T13940] random: crng reseeded on system resumption [ 217.880818][T13940] PM: suspend exit [ 217.884832][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 217.911422][ T8621] EXT4-fs error (device loop7): ext4_empty_dir:3082: inode #11: comm syz-executor: invalid size [ 218.066099][ T8621] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.525675][T13970] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.532959][T13970] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.541070][T13970] bridge_slave_0: entered allmulticast mode [ 218.547802][T13970] bridge_slave_0: entered promiscuous mode [ 218.554920][T13970] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.562030][T13970] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.569287][T13970] bridge_slave_1: entered allmulticast mode [ 218.576106][T13970] bridge_slave_1: entered promiscuous mode [ 218.595655][T13970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.606605][T13970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.627537][T13970] team0: Port device team_slave_0 added [ 218.634332][T13970] team0: Port device team_slave_1 added [ 218.651069][T13970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.658243][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.684263][T13970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.695624][T13970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.702637][T13970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.728846][T13970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.757344][T13970] hsr_slave_0: entered promiscuous mode [ 218.763488][T13970] hsr_slave_1: entered promiscuous mode [ 218.769488][T13970] debugfs: 'hsr0' already exists in 'hsr' [ 218.775286][T13970] Cannot create hsr debugfs directory [ 219.067206][T13970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 219.076195][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.085129][T13970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 219.093824][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.102054][T13970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 219.111795][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.120591][T13970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 219.129926][T13970] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.176016][T13970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.191148][T13970] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.201962][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.209070][ T8549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.222089][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.229315][ T8585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.376115][T13970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.528912][T13970] veth0_vlan: entered promiscuous mode [ 219.538541][T13970] veth1_vlan: entered promiscuous mode [ 219.562077][T13970] veth0_macvtap: entered promiscuous mode [ 219.572846][T13970] veth1_macvtap: entered promiscuous mode [ 219.589147][T13970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.603926][T13970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.618753][ T8568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.627567][ T8568] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.637922][ T8568] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.647470][ T8568] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.728562][T14115] loop9: detected capacity change from 0 to 256 [ 219.748219][T14115] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.410390][T14141] loop3: detected capacity change from 0 to 512 [ 220.541169][T14141] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3796: bg 0: block 104: invalid block bitmap [ 220.560250][T14141] loop3: lost filesystem error report for type 5 error -117 [ 220.572083][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 220.572104][ C0] EXT4-fs (loop3): initial error at time 1785202353: ext4_validate_block_bitmap:432 [ 220.572154][ C0] EXT4-fs (loop3): last error at time 1785202353: ext4_validate_block_bitmap:432 [ 220.605594][T14141] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 220.635619][T14141] loop3: lost filesystem error report for type 5 error -117 [ 220.642828][T14141] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.3796: invalid indirect mapped block 1 (level 1) [ 220.688534][T14141] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.700806][T14141] EXT4-fs (loop3): 1 truncate cleaned up [ 220.793038][T14141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.809393][T14190] loop4: detected capacity change from 0 to 2048 [ 220.903636][T14190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 220.943364][T14190] EXT4-fs error (device loop4): ext4_find_extent:904: inode #2: comm syz.4.3807: inode has invalid extent depth: 8 [ 220.968625][T14190] EXT4-fs (loop4): Remounting filesystem read-only [ 220.991302][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.004576][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.091420][T14226] loop8: detected capacity change from 0 to 1024 [ 221.112409][T14226] EXT4-fs: Ignoring removed orlov option [ 221.152326][ T3384] Process accounting resumed [ 221.176154][T14226] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.503491][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.806968][T14274] loop9: detected capacity change from 0 to 512 [ 221.860954][T14274] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 221.882765][T14274] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.3827: bad orphan inode 131083 [ 221.907150][T14274] loop9: lost filesystem error report for type 5 error -117 [ 221.943439][T14274] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.998668][T14288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3832'. [ 222.027063][T12224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.290350][T14325] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3850'. [ 222.309358][T14325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.329729][T14325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.352770][T14325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.372379][T14325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.523834][T14310] loop3: detected capacity change from 0 to 4096 [ 222.569909][T14310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.614601][ T28] kauditd_printk_skb: 128 callbacks suppressed [ 222.614615][ T28] audit: type=1400 audit(1785202355.461:1563): avc: denied { write } for pid=14309 comm="syz.3.3843" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.822019][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.900494][T14349] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.907906][T14349] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.984139][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 223.058118][T14381] netlink: 26 bytes leftover after parsing attributes in process `syz.8.3867'. [ 223.407327][T14406] PM: suspend entry (deep) [ 223.471495][ T8549] Filesystems sync: 0.055 seconds [ 223.591455][ T28] audit: type=1400 audit(1785202356.369:1564): avc: denied { read write } for pid=14417 comm="syz.3.3884" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 223.608371][T12341] udevd[12341]: inotify_add_watch(7, /dev/loop32, 10) failed: No such file or directory [ 223.629296][ T28] audit: type=1400 audit(1785202356.369:1565): avc: denied { open } for pid=14417 comm="syz.3.3884" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 223.656440][ T28] audit: type=1400 audit(1785202356.369:1566): avc: denied { ioctl } for pid=14417 comm="syz.3.3884" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 223.754098][ T8545] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.763118][ T8545] netdevsim netdevsim9 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.778519][ T8545] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.796384][T14406] Freezing user space processes [ 223.802214][ T8545] netdevsim netdevsim9 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.811556][ T8545] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.821035][ T8545] netdevsim netdevsim9 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.830390][ T8545] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.840558][ T8545] netdevsim netdevsim9 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 223.866853][T14406] Freezing user space processes completed (elapsed 0.061 seconds) [ 223.874983][T14406] OOM killer disabled. [ 223.879096][T14406] Freezing remaining freezable tasks [ 223.886173][T14406] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 223.894631][T14406] printk: Suspending console(s) (use no_console_suspend to debug) [ 223.922491][T14406] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 223.922559][T14406] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 223.957317][T14406] PM: Some devices failed to suspend, or early wake event detected [ 224.033846][T14406] OOM killer enabled. [ 224.037862][T14406] Restarting tasks: Starting [ 224.063068][T14406] Restarting tasks: Done [ 224.078091][T14406] random: crng reseeded on system resumption [ 224.099302][T14406] PM: suspend exit [ 224.485559][T14449] loop9: detected capacity change from 0 to 4096 [ 224.565717][T14449] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.578538][T14457] loop4: detected capacity change from 0 to 32768 [ 224.599228][ T28] audit: type=1400 audit(1785202357.314:1567): avc: denied { write } for pid=14447 comm="syz.9.3895" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.635322][T14457] loop4: p1 p3 < > [ 224.650815][T14476] loop8: detected capacity change from 0 to 1024 [ 224.698776][T14478] 9p: Bad value for 'wfdno' [ 224.717968][T14476] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.744498][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 224.755645][T12344] udevd[12344]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 224.780350][ T28] audit: type=1400 audit(1785202357.483:1568): avc: denied { write } for pid=14481 comm="syz.0.3908" path="socket:[41898]" dev="sockfs" ino=41898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 224.821198][T12224] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.832299][ T28] audit: type=1400 audit(1785202357.539:1569): avc: denied { write } for pid=14475 comm="syz.8.3905" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 225.017900][ T8457] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 225.032685][ T8457] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 225.067162][ T8457] EXT4-fs (loop8): This should not happen!! Data will be lost [ 225.067162][ T8457] [ 225.077239][ T8457] EXT4-fs (loop8): Total free blocks count 0 [ 225.083859][ T8457] EXT4-fs (loop8): Free/Dirty block details [ 225.104703][ T8457] EXT4-fs (loop8): free_blocks=20480 [ 225.115199][ T8457] EXT4-fs (loop8): dirty_blocks=64 [ 225.124082][ T8457] EXT4-fs (loop8): Block reservation details [ 225.138666][ T8457] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 225.150053][ T8457] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 16 with error 28 [ 225.166877][T13486] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 225.225441][ T8457] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 225.235090][ T8457] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 225.268646][ T8457] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 225.278712][T14508] syz.3.3919 (14508) used greatest stack depth: 9480 bytes left [ 225.289530][ T8457] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 225.710991][T14527] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.727693][T14527] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.740124][T14527] bridge_slave_0: entered allmulticast mode [ 225.751498][T14527] bridge_slave_0: entered promiscuous mode [ 225.766565][T14527] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.797433][T14527] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.818678][T14527] bridge_slave_1: entered allmulticast mode [ 225.832920][T14527] bridge_slave_1: entered promiscuous mode [ 226.196887][T14550] 9p: Bad value for 'wfdno' [ 226.202519][ T28] audit: type=1400 audit(1785202358.812:1570): avc: denied { mounton } for pid=14549 comm="syz.8.3933" path="/36/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 226.345735][T14527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.357296][T14527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.426458][T14527] team0: Port device team_slave_0 added [ 226.434611][T14527] team0: Port device team_slave_1 added [ 226.447805][T14552] tipc: Started in network mode [ 226.459185][T14552] tipc: Node identity ac1414aa, cluster identity 4711 [ 226.483134][T14552] tipc: Enabled bearer , priority 10 [ 226.528402][T14527] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.542484][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.594226][T14527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.595157][ T28] audit: type=1400 audit(1785202359.177:1571): avc: denied { watch watch_reads } for pid=14568 comm="syz.0.3942" path="/proc/1912/task/1913/ns" dev="proc" ino=43125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 226.618502][T14527] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.640262][T14527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.689330][T14527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.731139][T14527] hsr_slave_0: entered promiscuous mode [ 226.737515][T14527] hsr_slave_1: entered promiscuous mode [ 226.763347][T14527] debugfs: 'hsr0' already exists in 'hsr' [ 226.769409][T14527] Cannot create hsr debugfs directory [ 226.887645][T14567] loop8: detected capacity change from 0 to 4096 [ 226.924565][T14567] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.944422][ T28] audit: type=1400 audit(1785202359.513:1572): avc: denied { write } for pid=14566 comm="syz.8.3940" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 227.061849][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.215452][T14527] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.234960][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 227.251391][T14527] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.270907][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 227.292544][T14527] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 227.304530][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 227.313141][T14527] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 227.332109][T14527] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 227.466910][T14632] netlink: 'syz.8.3954': attribute type 1 has an invalid length. [ 227.487307][T14527] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.510528][T14632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 227.524875][T14527] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.575481][T14638] bond1: (slave geneve2): making interface the new active one [ 227.605598][ T3413] hid_parser_main: 18 callbacks suppressed [ 227.605623][ T3413] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 227.640393][ T3413] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.661916][T14638] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 227.702245][ T8453] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.715607][ T8453] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.752175][T14369] tipc: Node number set to 2886997162 [ 227.758380][ T8453] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.790110][ T8453] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 227.811614][ T8453] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.818886][ T8453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.857987][ T8453] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.865243][ T8453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.204750][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 228.204774][ T28] audit: type=1400 audit(1785202360.693:1582): avc: denied { write } for pid=14668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.278473][ T28] audit: type=1400 audit(1785202360.749:1583): avc: denied { write } for pid=14696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.461993][T14527] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.481700][ T28] audit: type=1400 audit(1785202360.955:1584): avc: denied { write } for pid=14700 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.544911][ T28] audit: type=1400 audit(1785202361.011:1585): avc: denied { write } for pid=14718 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.794868][ T28] audit: type=1400 audit(1785202361.235:1586): avc: denied { write } for pid=14727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.849881][T14527] veth0_vlan: entered promiscuous mode [ 228.859466][T14527] veth1_vlan: entered promiscuous mode [ 228.868263][ T28] audit: type=1400 audit(1785202361.310:1587): avc: denied { write } for pid=14764 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.899341][T14527] veth0_macvtap: entered promiscuous mode [ 228.912575][T14527] veth1_macvtap: entered promiscuous mode [ 228.926257][T14527] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.939130][T14527] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.952694][ T8453] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.962220][ T8453] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.974918][ T8453] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.988359][ T8453] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.081135][T14789] loop4: detected capacity change from 0 to 128 [ 229.109751][T14790] loop3: detected capacity change from 0 to 256 [ 229.133612][T14789] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 229.147194][ T28] audit: type=1400 audit(1785202361.563:1588): avc: denied { create } for pid=14796 comm="syz.5.3927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 229.165353][T14797] loop5: detected capacity change from 0 to 512 [ 229.203603][T14789] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.216144][ T28] audit: type=1400 audit(1785202361.610:1589): avc: denied { write } for pid=14770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.239555][T14797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 229.253640][ T28] audit: type=1400 audit(1785202361.675:1590): avc: denied { write } for pid=14787 comm="syz.4.3985" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 229.287776][T14797] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.3927: bad orphan inode 131083 [ 229.301663][T14797] loop5: lost filesystem error report for type 5 error -117 [ 229.321569][T14797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.376920][ T28] audit: type=1400 audit(1785202361.787:1591): avc: denied { write } for pid=14804 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.407260][T14527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.423425][T13970] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.571366][T14820] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3976'. [ 229.611359][T14820] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.3976'. [ 229.980193][T14887] loop0: detected capacity change from 0 to 512 [ 230.009424][T14887] EXT4-fs: Ignoring removed orlov option [ 230.036849][T14887] EXT4-fs: Ignoring removed mblk_io_submit option [ 230.076182][T14887] EXT4-fs error (device loop0): ext4_iget_extra_inode:5180: inode #15: comm syz.0.3991: corrupted in-inode xattr: e_value size too large [ 230.104741][T14895] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3992'. [ 230.135011][T14887] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 230.135274][T14887] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.3991: couldn't read orphan inode 15 (err -117) [ 230.144569][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 230.144601][ C0] EXT4-fs (loop0): initial error at time 1785202362: ext4_iget_extra_inode:5180: inode 15 [ 230.144646][ C0] EXT4-fs (loop0): last error at time 1785202362: ext4_iget_extra_inode:5180: inode 15 [ 230.203358][T14887] loop0: lost filesystem error report for type 5 error -117 [ 230.205460][T14887] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.256395][T14910] loop5: detected capacity change from 0 to 128 [ 230.301193][T14910] Invalid ELF header len 1 [ 230.456589][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.573837][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3997'. [ 230.778014][T14969] netlink: 'syz.3.4000': attribute type 26 has an invalid length. [ 231.190109][T14949] loop0: detected capacity change from 0 to 512 [ 231.316287][T14949] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3994: bg 0: block 104: invalid block bitmap [ 231.338342][T14949] loop0: lost filesystem error report for type 5 error -117 [ 231.339769][T14949] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 231.341166][T14994] loop5: detected capacity change from 0 to 512 [ 231.347898][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 231.348051][ C0] EXT4-fs (loop0): initial error at time 1785202363: ext4_validate_block_bitmap:432 [ 231.348571][ C0] EXT4-fs (loop0): last error at time 1785202363: ext4_validate_block_bitmap:432 [ 231.385979][T15044] netlink: 'syz.8.4007': attribute type 39 has an invalid length. [ 231.395678][T14949] loop0: lost filesystem error report for type 5 error -117 [ 231.404576][T14949] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.3994: invalid indirect mapped block 1 (level 1) [ 231.426171][T14949] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 231.429826][T14949] EXT4-fs (loop0): 1 truncate cleaned up [ 231.432337][T14994] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 231.447972][T14949] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.462218][T14994] EXT4-fs (loop5): orphan cleanup on readonly fs [ 231.484890][T14994] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.4003: bad orphan inode 15 [ 231.496215][T14994] loop5: lost filesystem error report for type 5 error -117 [ 231.497906][T14994] ext4_test_bit(bit=14, block=5) = 0 [ 231.505897][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 231.506031][ C1] EXT4-fs (loop5): initial error at time 1785202363: ext4_orphan_get:1425 [ 231.506144][ C1] EXT4-fs (loop5): last error at time 1785202363: ext4_orphan_get:1425 [ 231.554237][T14994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 231.566377][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.588673][T15047] loop0: detected capacity change from 0 to 256 [ 231.598662][T15047] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 231.602084][T14994] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 231.646317][T14527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.758840][T15050] loop8: detected capacity change from 0 to 512 [ 231.777231][T15050] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 231.791319][T15050] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.4009: bad orphan inode 131083 [ 231.801920][T15050] loop8: lost filesystem error report for type 5 error -117 [ 231.804171][T15050] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.837045][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.996631][T15068] netlink: 'syz.8.4016': attribute type 6 has an invalid length. [ 232.220312][T15087] PM: suspend entry (deep) [ 232.247257][T15077] loop0: detected capacity change from 0 to 512 [ 232.289563][ T8453] Filesystems sync: 0.060 seconds [ 232.331781][T15077] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 232.335835][T15087] Freezing user space processes [ 232.348274][T15077] EXT4-fs (loop0): orphan cleanup on readonly fs [ 232.354749][T15077] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.4020: bad orphan inode 15 [ 232.365095][T15077] loop0: lost filesystem error report for type 5 error -117 [ 232.365349][T15077] ext4_test_bit(bit=14, block=5) = 0 [ 232.372808][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 232.372839][ C0] EXT4-fs (loop0): initial error at time 1785202364: ext4_orphan_get:1425 [ 232.372893][ C0] EXT4-fs (loop0): last error at time 1785202364: ext4_orphan_get:1425 [ 232.403951][T15077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 232.424731][T15087] Freezing user space processes completed (elapsed 0.074 seconds) [ 232.432713][T15087] OOM killer disabled. [ 232.436843][T15087] Freezing remaining freezable tasks [ 232.443908][T15087] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 232.452248][T15087] printk: Suspending console(s) (use no_console_suspend to debug) [ 232.472922][T15087] alarmtimer alarmtimer.0.auto: PM: dpm_run_callback(): platform_pm_suspend returns -16 [ 232.473029][T15087] alarmtimer alarmtimer.0.auto: PM: failed to suspend: error -16 [ 232.496055][T15087] PM: Some devices failed to suspend, or early wake event detected [ 232.569942][T15087] OOM killer enabled. [ 232.573921][T15087] Restarting tasks: Starting [ 232.623185][T15087] Restarting tasks: Done [ 232.627532][T15087] random: crng reseeded on system resumption [ 232.640318][T15090] loop3: detected capacity change from 0 to 4096 [ 232.648610][T15077] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 232.664705][T15087] PM: suspend exit [ 232.683320][T15090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.738065][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.750042][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.844405][T15109] loop5: detected capacity change from 0 to 128 [ 232.855700][T15107] loop3: detected capacity change from 0 to 512 [ 232.873341][T15111] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4036'. [ 232.887271][T15107] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.4033: inode has both inline data and extents flags [ 232.901360][T15107] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 232.902200][T15107] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4033: couldn't read orphan inode 15 (err -117) [ 232.911400][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 232.911419][ C0] EXT4-fs (loop3): initial error at time 1785202365: ext4_orphan_get:1399: inode 15 [ 232.911471][ C0] EXT4-fs (loop3): last error at time 1785202365: ext4_orphan_get:1399: inode 15 [ 232.954107][T15107] loop3: lost filesystem error report for type 5 error -117 [ 232.955584][T15107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.013468][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.044071][T15120] loop5: detected capacity change from 0 to 128 [ 233.127382][T15127] sg_write: data in/out 463004/136 bytes for SCSI command 0x0-- guessing data in; [ 233.127382][T15127] program syz.0.4042 not setting count and/or reply_len properly [ 233.170334][T15129] loop5: detected capacity change from 0 to 256 [ 233.209466][T15129] syz.5.4044: attempt to access beyond end of device [ 233.209466][T15129] loop5: rw=2049, sector=1768, nr_sectors = 4 limit=256 [ 233.234495][T15133] syzkaller1: entered promiscuous mode [ 233.237954][T15129] syz.5.4044: attempt to access beyond end of device [ 233.237954][T15129] loop5: rw=8390657, sector=1772, nr_sectors = 4 limit=256 [ 233.246829][T15133] syzkaller1: entered allmulticast mode [ 233.255768][T15129] Buffer I/O error on dev loop5, logical block 443, lost async page write [ 233.268748][T15129] syz.5.4044: attempt to access beyond end of device [ 233.268748][T15129] loop5: rw=2049, sector=1776, nr_sectors = 24 limit=256 [ 233.298834][T15134] syz.5.4044: attempt to access beyond end of device [ 233.298834][T15134] loop5: rw=8390657, sector=1768, nr_sectors = 4 limit=256 [ 233.328502][T15129] syz.5.4044: attempt to access beyond end of device [ 233.328502][T15129] loop5: rw=2049, sector=1832, nr_sectors = 32 limit=256 [ 233.347216][T15134] Buffer I/O error on dev loop5, logical block 442, lost async page write [ 233.356130][T15129] syz.5.4044: attempt to access beyond end of device [ 233.356130][T15129] loop5: rw=2049, sector=1896, nr_sectors = 32 limit=256 [ 233.371050][T15129] syz.5.4044: attempt to access beyond end of device [ 233.371050][T15129] loop5: rw=2049, sector=1960, nr_sectors = 40 limit=256 [ 233.836778][T15146] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.844197][T15146] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.851540][T15146] bridge_slave_0: entered allmulticast mode [ 233.858348][T15146] bridge_slave_0: entered promiscuous mode [ 233.873331][T15146] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.880528][T15146] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.887927][T15146] bridge_slave_1: entered allmulticast mode [ 233.894597][T15146] bridge_slave_1: entered promiscuous mode [ 233.916168][T15146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.927754][T15146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.955923][T15146] team0: Port device team_slave_0 added [ 233.972715][T15146] team0: Port device team_slave_1 added [ 234.003383][T15146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.011946][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.037979][T15146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.049617][T15146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.056616][T15146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.082625][T15146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.131194][T15146] hsr_slave_0: entered promiscuous mode [ 234.137407][T15146] hsr_slave_1: entered promiscuous mode [ 234.143326][T15146] debugfs: 'hsr0' already exists in 'hsr' [ 234.149089][T15146] Cannot create hsr debugfs directory [ 236.844751][T15156] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.858098][T15146] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.893682][T15146] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 236.917078][T15146] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.938413][T15146] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 236.949283][T15196] loop8: detected capacity change from 0 to 1024 [ 236.965950][T15146] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.978232][T15196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 237.001479][T15146] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 237.025704][T15207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.030668][T15146] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 237.054829][T15196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.073264][T15146] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 237.091791][T15207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.110829][T15196] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.138352][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 237.138385][ T28] audit: type=1400 audit(1785202369.049:1617): avc: denied { write } for pid=15195 comm="syz.8.4063" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 237.173985][T15196] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm syz.8.4063: lblock 0 mapped to illegal pblock 0 (length 1) [ 237.189330][T15146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.206700][T15196] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 237.222868][T15146] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.233402][T15196] EXT4-fs (loop8): This should not happen!! Data will be lost [ 237.233402][T15196] [ 237.244854][ T8576] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.251968][ T8576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.263082][ T8576] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.270249][ T8576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.293493][ T28] audit: type=1400 audit(1785202369.190:1618): avc: denied { write } for pid=15203 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.325212][ T8576] EXT4-fs error (device loop8): ext4_map_blocks:833: inode #15: comm kworker/u8:144: lblock 0 mapped to illegal pblock 0 (length 1) [ 237.339174][ T8576] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 237.364396][ T8576] EXT4-fs (loop8): This should not happen!! Data will be lost [ 237.364396][ T8576] [ 237.376627][T13486] EXT4-fs warning (device loop8): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 237.398354][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 237.408553][ T28] audit: type=1400 audit(1785202369.293:1619): avc: denied { write } for pid=15230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.625192][ T28] audit: type=1400 audit(1785202369.508:1620): avc: denied { write } for pid=15238 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.665728][T15146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.706267][ T28] audit: type=1400 audit(1785202369.573:1621): avc: denied { write } for pid=15258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.742898][T15262] netlink: 'syz.4.4071': attribute type 1 has an invalid length. [ 237.821851][T15262] gretap1: entered allmulticast mode [ 237.834377][T15237] loop8: detected capacity change from 0 to 512 [ 237.844809][T15262] bond1: (slave gretap1): making interface the new active one [ 237.858464][T15262] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 237.941291][T15146] veth0_vlan: entered promiscuous mode [ 237.957992][T15146] veth1_vlan: entered promiscuous mode [ 237.961561][T15237] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 237.981392][T15146] veth0_macvtap: entered promiscuous mode [ 238.005492][T15237] EXT4-fs (loop8): orphan cleanup on readonly fs [ 238.007148][T15146] veth1_macvtap: entered promiscuous mode [ 238.025372][T15146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.034535][T15146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.053129][ T8575] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.063790][ T28] audit: type=1400 audit(1785202369.920:1622): avc: denied { write } for pid=15264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.092995][T15237] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.4068: bad orphan inode 15 [ 238.104570][ T8575] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.119228][T15237] loop8: lost filesystem error report for type 5 error -117 [ 238.124010][ T8575] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.131402][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 238.131425][ C0] EXT4-fs (loop8): initial error at time 1785202369: ext4_orphan_get:1425 [ 238.131452][ C0] EXT4-fs (loop8): last error at time 1785202369: ext4_orphan_get:1425 [ 238.138580][T15237] ext4_test_bit(bit=14, block=5) = 0 [ 238.147724][ T8575] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.166961][ T28] audit: type=1400 audit(1785202370.013:1623): avc: denied { write } for pid=15287 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.282814][T15237] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 238.378517][ T28] audit: type=1400 audit(1785202370.210:1624): avc: denied { write } for pid=15289 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.389268][T15237] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 238.484718][ T28] audit: type=1400 audit(1785202370.313:1625): avc: denied { write } for pid=15316 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.529317][T15318] loop4: detected capacity change from 0 to 1024 [ 238.546114][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.580092][T15318] EXT4-fs: Ignoring removed bh option [ 238.620675][T15318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.652407][ T28] audit: type=1400 audit(1785202370.472:1626): avc: denied { write } for pid=15317 comm="syz.4.4080" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.702419][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.735414][T15334] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4083'. [ 238.746115][T15331] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.4083'. [ 239.706689][T15419] bridge_slave_0: left allmulticast mode [ 239.707305][T15429] xt_CT: No such helper "snmp_trap" [ 239.715909][T15419] bridge_slave_0: left promiscuous mode [ 239.724612][T15419] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.748191][T15419] bridge_slave_1: left allmulticast mode [ 239.759778][T15419] bridge_slave_1: left promiscuous mode [ 239.777476][T15419] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.205841][T15419] bond0: (slave bond_slave_0): Releasing backup interface [ 240.223954][T15419] bond0: (slave bond_slave_1): Releasing backup interface [ 240.256038][T15419] team0: Port device team_slave_0 removed [ 240.270529][T15419] team0: Port device team_slave_1 removed [ 240.279068][T15419] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.287530][T15419] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.310610][T15419] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.318646][T15419] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.334017][T15419] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.501845][T15479] loop4: detected capacity change from 0 to 512 [ 240.529543][T15479] EXT4-fs (loop4): 1 truncate cleaned up [ 240.541569][T15479] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.648690][T15490] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4116: bg 0: block 465: padding at end of block bitmap is not set [ 240.680848][T15492] loop5: detected capacity change from 0 to 512 [ 240.713949][T15490] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 240.752295][T15490] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.752295][T15490] [ 240.788375][T15490] EXT4-fs (loop4): Total free blocks count 0 [ 240.848911][T15490] EXT4-fs (loop4): Free/Dirty block details [ 240.898379][T15490] EXT4-fs (loop4): free_blocks=0 [ 240.949715][T15490] EXT4-fs (loop4): dirty_blocks=10 [ 241.005708][T15490] EXT4-fs (loop4): Block reservation details [ 241.050725][T15520] loop5: detected capacity change from 0 to 2048 [ 241.059203][T15490] EXT4-fs (loop4): i_reserved_data_blocks=10 [ 241.090123][T15520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 241.168014][T15520] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.4125: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 241.314978][T15545] syzkaller1: entered promiscuous mode [ 241.328208][T15545] syzkaller1: entered allmulticast mode [ 241.338100][T14527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.392758][T15548] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4133'. [ 241.457981][T15555] loop8: detected capacity change from 0 to 128 [ 241.520873][ T8576] Bluetooth: hci0: Frame reassembly failed (-84) [ 241.627240][T15570] netlink: 'syz.8.4138': attribute type 1 has an invalid length. [ 241.640610][T13970] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 241.673380][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.732212][T15580] netlink: 'syz.1.4142': attribute type 14 has an invalid length. [ 241.757963][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 241.785698][T15580] netlink: 'syz.1.4142': attribute type 14 has an invalid length. [ 241.786372][ T8540] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.805271][ T8540] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.813363][T15580] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 241.850650][ T8540] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.883142][ T8540] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.965478][T15611] loop4: detected capacity change from 0 to 512 [ 241.991633][T15616] netlink: 240 bytes leftover after parsing attributes in process `syz.8.4152'. [ 242.002676][T15611] EXT4-fs: Ignoring removed bh option [ 242.034358][T15611] EXT4-fs (loop4): 1 truncate cleaned up [ 242.049504][T15611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.094020][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.727822][T15678] loop8: detected capacity change from 0 to 256 [ 242.781168][T15682] netlink: 'syz.1.4176': attribute type 4 has an invalid length. [ 242.805972][T15682] netlink: 'syz.1.4176': attribute type 4 has an invalid length. [ 242.856834][T15676] loop4: detected capacity change from 0 to 512 [ 242.917337][T15676] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 242.934176][T15676] EXT4-fs (loop4): orphan cleanup on readonly fs [ 242.941978][T15676] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.4174: bad orphan inode 15 [ 242.954178][T15676] loop4: lost filesystem error report for type 5 error -117 [ 242.956208][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 242.971329][ C0] EXT4-fs (loop4): initial error at time 1785202374: ext4_orphan_get:1425 [ 242.980658][ C0] EXT4-fs (loop4): last error at time 1785202374: ext4_orphan_get:1425 [ 242.997310][T15676] ext4_test_bit(bit=14, block=5) = 0 [ 243.014851][T15676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 243.045883][T15676] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 243.251119][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.308444][T15693] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 243.349410][T15695] netlink: 147888 bytes leftover after parsing attributes in process `syz.5.4183'. [ 243.360883][T15697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 243.375327][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.382648][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.395231][T15697] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4184'. [ 243.404268][ T28] kauditd_printk_skb: 55 callbacks suppressed [ 243.404283][ T28] audit: type=1400 audit(1785202374.907:1682): avc: denied { getopt } for pid=15698 comm="syz.8.4185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 243.672332][ T5255] Bluetooth: hci0: command 0x1003 tx timeout [ 243.678730][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 243.703196][T15726] loop8: detected capacity change from 0 to 128 [ 243.731092][T15726] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 243.747219][T15726] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.761241][ T28] audit: type=1400 audit(1785202375.254:1683): avc: denied { write } for pid=15725 comm="syz.8.4199" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 243.987980][T15751] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 243.993232][T13486] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 244.026887][T15753] loop5: detected capacity change from 0 to 512 [ 244.049540][T15753] EXT4-fs: quotafile must be on filesystem root [ 244.219390][T15771] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4216'. [ 244.342935][T15776] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4219'. [ 244.362276][T15778] loop8: detected capacity change from 0 to 1024 [ 244.403255][T15778] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.471336][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.641738][T15793] loop4: detected capacity change from 0 to 512 [ 244.659818][T15793] EXT4-fs (loop4): 1 truncate cleaned up [ 244.666496][T15793] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.707693][ T28] audit: type=1400 audit(1785202376.133:1684): avc: denied { write } for pid=15792 comm="syz.4.4225" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.756906][T15798] loop5: detected capacity change from 0 to 512 [ 244.800814][T15798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.827575][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.837177][T15798] ext4 filesystem being mounted at /56/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.928896][T15804] loop1: detected capacity change from 0 to 256 [ 244.951246][T14527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.986635][T15806] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4230'. [ 245.129515][T15814] option changes via remount are deprecated (pid=15813 comm=syz.4.4234) [ 245.175718][ T28] audit: type=1326 audit(1785202376.573:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15815 comm="syz.3.4235" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf542fde99 code=0x0 [ 245.265460][T15825] usbip-vudc usbip-vudc.0: gadget not bound [ 245.335766][T15837] loop1: detected capacity change from 0 to 512 [ 245.377758][T15837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.408558][T15837] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.429805][T15843] loop4: detected capacity change from 0 to 2048 [ 245.437290][ T28] audit: type=1400 audit(1785202376.816:1686): avc: denied { write } for pid=15836 comm="syz.1.4244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.494071][ T28] audit: type=1400 audit(1785202376.816:1687): avc: denied { write } for pid=15836 comm="syz.1.4244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.502672][T15146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.517132][ T28] audit: type=1400 audit(1785202376.844:1688): avc: denied { write } for pid=15836 comm="syz.1.4244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.548643][ T28] audit: type=1400 audit(1785202376.844:1689): avc: denied { create } for pid=15836 comm="syz.1.4244" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 245.594319][T15843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.622128][T15843] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.622594][ T28] audit: type=1400 audit(1785202376.844:1690): avc: denied { write } for pid=15836 comm="syz.1.4244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.692160][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.704405][ T28] audit: type=1400 audit(1785202376.844:1691): avc: denied { write } for pid=15836 comm="syz.1.4244" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.985878][T15860] loop1: detected capacity change from 0 to 512 [ 245.997549][T15863] netlink: 27 bytes leftover after parsing attributes in process `syz.4.4252'. [ 246.011545][T15860] EXT4-fs (loop1): 1 truncate cleaned up [ 246.017714][T15860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.128437][T15146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.352271][T15878] netlink: 'syz.5.4259': attribute type 21 has an invalid length. [ 246.456275][T15889] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4264'. [ 246.469947][T15889] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.4264'. [ 246.543098][T15898] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4267'. [ 246.570872][T15898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.605729][T15898] bond1: (slave batadv1): Opening slave failed [ 246.615833][T15902] netlink: 'syz.1.4268': attribute type 2 has an invalid length. [ 246.648865][T15906] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4270'. [ 246.816029][T15904] loop5: detected capacity change from 0 to 32768 [ 246.879113][T15904] loop5: p1 p3 < > [ 246.961405][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 246.961550][T12341] udevd[12341]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 247.649838][T15926] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4280'. [ 247.662425][T15924] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.4277'. [ 247.733369][T15930] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4282: corrupted in-inode xattr: invalid ea_ino [ 247.761415][T15930] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 247.764866][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 247.780545][ C0] EXT4-fs (loop4): initial error at time 1785202378: ext4_iget_extra_inode:5180: inode 15 [ 247.790202][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 247.790547][ C0] EXT4-fs (loop4): last error at time 1785202378: ext4_iget_extra_inode:5180: inode 15 [ 247.796668][ T5255] Bluetooth: hci0: command 0x1003 tx timeout [ 247.806592][T15930] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4282: couldn't read orphan inode 15 (err -117) [ 247.827939][T15930] loop4: lost filesystem error report for type 5 error -117 [ 247.831030][T15930] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.886264][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.036900][T14375] IPVS: starting estimator thread 0... [ 248.057453][T15959] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.081674][T15959] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.136529][T15964] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 248.140459][T15960] IPVS: using max 2352 ests per chain, 117600 per kthread [ 248.157240][T15964] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.212679][T13970] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.222489][T15966] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Out of memory [ 248.238085][T15966] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Out of memory [ 248.263488][T15966] EXT4-fs error (device loop5): ext4_evict_inode:267: inode #19: comm syz.5.4295: mark_inode_dirty error [ 248.293597][T15966] loop5: lost file I/O error report for ino 19 type 5 pos 0x0 len 0x0 error -12 [ 248.293818][T15966] EXT4-fs warning (device loop5): ext4_evict_inode:270: couldn't mark inode dirty (err -12) [ 248.355287][T14527] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Out of memory [ 248.377613][T14527] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #2: comm syz-executor: mark_inode_dirty error [ 248.678848][ T8527] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.690426][T14527] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.766057][ T8527] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.840781][ T8527] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.914396][ T8527] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.135384][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 249.135403][ T28] audit: type=1400 audit(1785202380.279:1711): avc: denied { write } for pid=16000 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.193619][ T28] audit: type=1400 audit(1785202380.326:1712): avc: denied { write } for pid=16015 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.264262][ T8527] bond0 (unregistering): Released all slaves [ 249.287733][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 249.305202][ T28] audit: type=1400 audit(1785202380.438:1713): avc: denied { firmware_load } for pid=16013 comm="syz.8.4309" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 249.362370][ T8527] hsr_slave_0: left promiscuous mode [ 249.380020][ T8527] hsr_slave_1: left promiscuous mode [ 249.407257][ T8527] veth1_macvtap: left promiscuous mode [ 249.413962][ T8527] veth0_macvtap: left promiscuous mode [ 249.423479][ T8527] veth1_vlan: left promiscuous mode [ 249.434651][ T8527] veth0_vlan: left promiscuous mode [ 249.634614][T16028] __nla_validate_parse: 4 callbacks suppressed [ 249.634633][T16028] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4314'. [ 249.691814][T15983] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.720470][T15983] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.758940][T15983] bridge_slave_0: entered allmulticast mode [ 249.783361][T15983] bridge_slave_0: entered promiscuous mode [ 249.813776][ T28] audit: type=1400 audit(1785202380.906:1714): avc: denied { read } for pid=16039 comm="syz.4.4319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 249.834792][T15983] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.863795][T15983] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.880474][T15983] bridge_slave_1: entered allmulticast mode [ 249.890451][T15983] bridge_slave_1: entered promiscuous mode [ 249.929216][T15983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.941083][T15983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.980306][T15983] team0: Port device team_slave_0 added [ 250.026831][T15983] team0: Port device team_slave_1 added [ 250.074096][T15983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.082673][ T28] audit: type=1400 audit(1785202381.158:1715): avc: denied { write } for pid=16046 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.109093][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.153104][T15983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.185098][ T28] audit: type=1400 audit(1785202381.261:1716): avc: denied { write } for pid=16073 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.214245][T15983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.237046][T15983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.267623][T15983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.283048][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 250.357286][T15983] hsr_slave_0: entered promiscuous mode [ 250.366735][T15983] hsr_slave_1: entered promiscuous mode [ 250.390926][T15983] debugfs: 'hsr0' already exists in 'hsr' [ 250.413529][T15983] Cannot create hsr debugfs directory [ 250.633879][ T28] audit: type=1400 audit(1785202381.683:1717): avc: denied { write } for pid=16092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.696600][ T28] audit: type=1400 audit(1785202381.739:1718): avc: denied { write } for pid=16109 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 250.765734][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 250.946615][T16113] xt_hashlimit: size too large, truncated to 1048576 [ 251.080880][ T28] audit: type=1400 audit(1785202382.104:1719): avc: denied { write } for pid=16114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.106279][T15983] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 251.136706][T15983] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.151990][T15983] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 251.178826][T15983] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.193702][ T28] audit: type=1400 audit(1785202382.197:1720): avc: denied { write } for pid=16128 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.223814][T15983] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 251.242876][T16132] set_capacity_and_notify: 4 callbacks suppressed [ 251.242956][T16132] loop3: detected capacity change from 0 to 512 [ 251.251334][T15983] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.281319][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 251.289600][T15983] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 251.302302][T15983] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.321240][T16132] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 251.341553][T16132] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.4341: corrupted in-inode xattr: e_value size too large [ 251.387270][T16132] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 251.387452][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 251.403103][ C0] EXT4-fs (loop3): initial error at time 1785202382: ext4_iget_extra_inode:5180: inode 15 [ 251.413087][ C0] EXT4-fs (loop3): last error at time 1785202382: ext4_iget_extra_inode:5180: inode 15 [ 251.420857][T16132] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4341: couldn't read orphan inode 15 (err -117) [ 251.480527][T15983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.513432][T16132] loop3: lost filesystem error report for type 5 error -117 [ 251.521788][T16132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.543079][T15983] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.553753][ T8527] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.560869][ T8527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.575441][ T8582] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.582572][ T8582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.645952][T16148] loop1: detected capacity change from 0 to 256 [ 251.666548][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.813721][T16166] loop3: detected capacity change from 0 to 128 [ 251.864372][T15983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.291967][T15983] veth0_vlan: entered promiscuous mode [ 252.317826][T15983] veth1_vlan: entered promiscuous mode [ 252.383451][T15983] veth0_macvtap: entered promiscuous mode [ 252.414366][T15983] veth1_macvtap: entered promiscuous mode [ 252.449075][T15983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.482409][T15983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.507514][ T8582] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.518105][ T8582] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.546112][ T8582] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.569840][ T8582] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.982974][T14375] IPVS: starting estimator thread 0... [ 253.098844][T16211] IPVS: using max 2352 ests per chain, 117600 per kthread [ 253.903710][T16257] loop3: detected capacity change from 0 to 512 [ 253.920484][T16257] EXT4-fs (loop3): 1 truncate cleaned up [ 253.931456][T16257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.048474][T16268] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4382: bg 0: block 465: padding at end of block bitmap is not set [ 254.073953][T16268] EXT4-fs (loop3): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 10 with error 28 [ 254.109950][T16274] loop6: detected capacity change from 0 to 512 [ 254.135172][T16274] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.4388: iget: bad i_size value: 38620345925642 [ 254.157696][T16268] EXT4-fs (loop3): This should not happen!! Data will be lost [ 254.157696][T16268] [ 254.171223][T16274] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 254.172906][T16274] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.4388: couldn't read orphan inode 15 (err -117) [ 254.182149][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 254.182175][ C0] EXT4-fs (loop6): initial error at time 1785202384: ext4_orphan_get:1399: inode 15 [ 254.182202][ C0] EXT4-fs (loop6): last error at time 1785202384: ext4_orphan_get:1399: inode 15 [ 254.219899][T16274] loop6: lost filesystem error report for type 5 error -117 [ 254.219979][T16268] EXT4-fs (loop3): Total free blocks count 0 [ 254.233836][T16268] EXT4-fs (loop3): Free/Dirty block details [ 254.238690][T16274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.239796][T16268] EXT4-fs (loop3): free_blocks=0 [ 254.257532][T16268] EXT4-fs (loop3): dirty_blocks=10 [ 254.264377][T16268] EXT4-fs (loop3): Block reservation details [ 254.270490][T16268] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 254.283842][T16274] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.4388: bg 0: block 5: invalid block bitmap [ 254.300527][T16274] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 254.301237][T16277] loop1: detected capacity change from 0 to 1024 [ 254.331040][T16277] EXT4-fs: Ignoring removed bh option [ 254.336839][T16274] EXT4-fs (loop6): This should not happen!! Data will be lost [ 254.336839][T16274] [ 254.339900][T16282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4392'. [ 254.364114][T16274] EXT4-fs (loop6): Total free blocks count 0 [ 254.381406][T16277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.386816][T16274] EXT4-fs (loop6): Free/Dirty block details [ 254.429131][T16274] EXT4-fs (loop6): free_blocks=0 [ 254.440699][T16274] EXT4-fs (loop6): dirty_blocks=4 [ 254.454246][T16274] EXT4-fs (loop6): Block reservation details [ 254.467040][T16274] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 255.242318][T12380] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #13: comm syz-executor: data will be lost [ 255.254115][T15983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.268078][T15146] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.294517][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.454069][T16395] loop1: detected capacity change from 0 to 128 [ 255.463151][T16393] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.561800][T16406] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4405'. [ 255.689471][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 255.689490][ T28] audit: type=1400 audit(1785202386.408:1742): avc: denied { write } for pid=16415 comm="syz.4.4410" name="functions" dev="configfs" ino=4972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 255.756182][T16420] netlink: 'syz.8.4411': attribute type 1 has an invalid length. [ 255.797704][T16420] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.809881][T16403] loop6: detected capacity change from 0 to 512 [ 255.827283][T16420] bond2: (slave gretap1): making interface the new active one [ 255.842615][T16420] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 255.882354][T16403] EXT4-fs: Ignoring removed nobh option [ 255.922325][T16428] netlink: 6392 bytes leftover after parsing attributes in process `syz.8.4414'. [ 255.936299][T16428] netlink: 6392 bytes leftover after parsing attributes in process `syz.8.4414'. [ 255.963675][T16403] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.977582][T16403] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.013604][ T28] audit: type=1400 audit(1785202386.708:1743): avc: denied { write } for pid=16401 comm="syz.6.4404" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.442249][T16455] netlink: 'syz.3.4425': attribute type 1 has an invalid length. [ 256.486906][T16455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.530405][T15983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.554510][T16455] bond2: (slave gretap1): making interface the new active one [ 256.563398][T16455] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 256.658387][ T28] audit: type=1400 audit(1785202387.316:1744): avc: denied { read } for pid=16472 comm="syz.4.4432" name="idVendor" dev="configfs" ino=48702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 256.750929][ T28] audit: type=1400 audit(1785202387.400:1745): avc: denied { read } for pid=16479 comm="syz.6.4437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 256.920353][T16488] loop4: detected capacity change from 0 to 512 [ 256.929043][T16488] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 256.952201][T16488] EXT4-fs (loop4): 1 truncate cleaned up [ 256.958461][T16488] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.974670][ T28] audit: type=1400 audit(1785202387.606:1746): avc: denied { write } for pid=16487 comm="syz.4.4439" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.038266][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.096712][T16495] loop4: detected capacity change from 0 to 512 [ 257.113601][T16495] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.4441: Unimplemented hash flags: 0x0001 [ 257.137169][T16495] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4441: Corrupt directory, running e2fsck is recommended [ 257.162748][T16495] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 257.175037][T16495] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.4441: corrupted in-inode xattr: invalid ea_ino [ 257.200778][T16495] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 257.201423][T16495] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.4441: couldn't read orphan inode 15 (err -117) [ 257.222004][T16497] bridge_slave_0: left allmulticast mode [ 257.222569][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 257.230882][T16497] bridge_slave_0: left promiscuous mode [ 257.234671][ C1] EXT4-fs (loop4): initial error at time 1785202387: ext4_iget_extra_inode:5180: inode 15 [ 257.234721][ C1] EXT4-fs (loop4): last error at time 1785202387: ext4_iget_extra_inode:5180: inode 15 [ 257.261463][T16497] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.261683][T16495] loop4: lost filesystem error report for type 5 error -117 [ 257.270116][T16495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.296744][T16497] bridge_slave_1: left allmulticast mode [ 257.307878][T16497] bridge_slave_1: left promiscuous mode [ 257.317685][T16495] EXT4-fs (loop4): shut down requested (2) [ 257.324310][T16497] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.333028][T16495] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.4441: Unimplemented hash flags: 0x0001 [ 257.345006][T16495] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.4441: Corrupt directory, running e2fsck is recommended [ 257.365290][T16497] bond0: (slave bond_slave_0): Releasing backup interface [ 257.382934][T16497] bond0: (slave bond_slave_1): Releasing backup interface [ 257.390923][T13970] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.463182][T16497] team0: Port device team_slave_0 removed [ 257.501604][T16497] team0: Port device team_slave_1 removed [ 257.511434][T16497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.519468][T16497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.536703][T16497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.545151][T16497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.561569][T16497] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 257.837455][T16534] loop6: detected capacity change from 0 to 128 [ 257.850469][T16534] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 257.863817][T16534] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.885092][ T28] audit: type=1400 audit(1785202388.458:1747): avc: denied { write } for pid=16533 comm="syz.6.4459" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 257.933032][T15983] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 257.995749][T16541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.011561][T16541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.083447][T16541] can0: slcan on ptm0. [ 258.151913][T16540] can0 (unregistered): slcan off ptm0. [ 258.242538][ T28] audit: type=1400 audit(1785202388.804:1748): avc: denied { write } for pid=16547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.296262][ T28] audit: type=1400 audit(1785202388.851:1749): avc: denied { write } for pid=16567 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.325305][T16562] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 258.334588][T16562] SELinux: invalid class [ 258.339346][T16562] SELinux: failed to load policy [ 258.503619][ T28] audit: type=1400 audit(1785202389.038:1750): avc: denied { write } for pid=16577 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.576515][T16598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4475'. [ 258.594201][ T28] audit: type=1400 audit(1785202389.132:1751): avc: denied { write } for pid=16596 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.641806][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4475'. [ 259.412137][T16643] bridge_slave_0: left allmulticast mode [ 259.418342][T16643] bridge_slave_0: left promiscuous mode [ 259.424986][T16643] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.449589][T16643] bridge_slave_1: left allmulticast mode [ 259.455527][T16643] bridge_slave_1: left promiscuous mode [ 259.461718][T16643] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.478073][T16643] bond0: (slave bond_slave_0): Releasing backup interface [ 259.493532][T16643] bond0: (slave bond_slave_1): Releasing backup interface [ 259.517897][T16643] team0: Port device team_slave_0 removed [ 259.534405][T16643] team0: Port device team_slave_1 removed [ 259.544504][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.552807][T16643] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.564901][T16643] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.572453][T16643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.588790][T16643] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 259.737262][T16654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.750863][T16654] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 259.807200][T16654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.838464][T16654] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 259.907785][T16654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.929441][T16654] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 259.986175][T16654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.997106][T16654] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 260.051678][ T8582] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.060260][ T8582] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.076886][ T8582] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.085339][ T8582] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.099709][ T8582] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.117587][ T8582] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.156516][T16680] bridge_slave_0: left allmulticast mode [ 260.164267][T16680] bridge_slave_0: left promiscuous mode [ 260.170079][T16680] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.177152][T16684] xt_hashlimit: size too large, truncated to 1048576 [ 260.208791][T16680] bridge_slave_1: left allmulticast mode [ 260.214663][T16680] bridge_slave_1: left promiscuous mode [ 260.220430][T16680] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.584190][T16680] bond0: (slave bond_slave_0): Releasing backup interface [ 260.605062][T16680] bond0: (slave bond_slave_1): Releasing backup interface [ 260.663253][T16680] team0: Port device team_slave_0 removed [ 260.681437][T16680] team0: Port device team_slave_1 removed [ 260.688712][T16680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.703337][T16680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.717579][T16680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.725522][T16680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.738374][T16680] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 260.754576][ T8582] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 260.763285][ T8582] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 260.821700][T16694] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 260.857900][T16696] loop3: detected capacity change from 0 to 2048 [ 260.868319][T16694] bond2: (slave lo): Enslaving as an active interface with an up link [ 260.898237][T16696] loop3: p3 < > p4 < > [ 260.906804][T16696] loop3: partition table partially beyond EOD, truncated [ 260.914667][T16696] loop3: p3 start 4284289 is beyond EOD, truncated [ 260.931344][T16694] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 260.957012][ T3286] udevd[3286]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 260.982975][T16703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4519'. [ 261.138749][T16711] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4523'. [ 261.170414][T16711] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4523'. [ 261.824849][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 261.824942][ T28] audit: type=1400 audit(1785202392.154:1755): avc: denied { setopt } for pid=16733 comm="syz.3.4534" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 261.939817][T16744] loop4: detected capacity change from 0 to 256 [ 261.970298][T16744] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 262.004677][T16744] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 262.295634][ T28] audit: type=1400 audit(1785202392.594:1756): avc: denied { write } for pid=16763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.330350][ T28] audit: type=1400 audit(1785202392.631:1757): avc: denied { write } for pid=16775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.423816][ T28] audit: type=1400 audit(1785202392.706:1758): avc: denied { write } for pid=16778 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.457681][ T28] audit: type=1400 audit(1785202392.744:1759): avc: denied { write } for pid=16789 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.735183][ T28] audit: type=1400 audit(1785202392.996:1760): avc: denied { write } for pid=16792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.768998][ T28] audit: type=1400 audit(1785202393.043:1761): avc: denied { write } for pid=16803 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.331507][ T28] audit: type=1400 audit(1785202393.558:1762): avc: denied { write } for pid=16835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.418201][ T28] audit: type=1400 audit(1785202393.642:1763): avc: denied { write } for pid=16851 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.442041][T16852] loop6: detected capacity change from 0 to 1024 [ 263.462893][T16852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.526871][ T28] audit: type=1400 audit(1785202393.698:1764): avc: denied { write } for pid=16850 comm="syz.6.4561" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.559967][T15983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.180634][T16898] bridge_slave_0: left allmulticast mode [ 264.186450][T16898] bridge_slave_0: left promiscuous mode [ 264.192722][T16898] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.204799][T16899] netlink: 'syz.8.4579': attribute type 3 has an invalid length. [ 264.213211][T16899] netlink: 'syz.8.4579': attribute type 4 has an invalid length. [ 264.221182][T16899] netlink: 9067 bytes leftover after parsing attributes in process `syz.8.4579'. [ 265.035521][T16898] bridge_slave_1: left allmulticast mode [ 265.051488][T16898] bridge_slave_1: left promiscuous mode [ 265.065872][T16898] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.077431][T16898] bond0: (slave bond_slave_0): Releasing backup interface [ 265.093204][T16898] bond0: (slave bond_slave_1): Releasing backup interface [ 265.126920][T16907] netlink: 'syz.1.4591': attribute type 8 has an invalid length. [ 265.127012][T16906] loop3: detected capacity change from 0 to 256 [ 265.140939][T16907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4591'. [ 265.150986][T16898] team0: Port device team_slave_0 removed [ 265.159664][T16906] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 265.179071][T16906] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 265.192377][T16898] team0: Port device team_slave_1 removed [ 265.199686][T16898] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.213485][T16898] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.241192][T16898] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.275553][T16898] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.310083][T16898] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 265.361593][T16907] bond0: entered promiscuous mode [ 265.368744][T16907] gretap0: entered promiscuous mode [ 265.379870][T16907] bond0: left promiscuous mode [ 265.391848][T16907] gretap0: left promiscuous mode [ 266.060330][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4610'. [ 266.097886][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4610'. [ 266.133554][T16969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4610'. [ 266.149005][T16969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4610'. [ 266.279384][T16990] sg_write: data in/out 503296/136 bytes for SCSI command 0x0-- guessing data in; [ 266.279384][T16990] program syz.1.4621 not setting count and/or reply_len properly [ 267.313012][T17105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.330286][T17105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.569707][T17114] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.916169][T17123] loop3: detected capacity change from 0 to 1024 [ 267.926212][T17123] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.962852][T17123] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.978887][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 267.978901][ T28] audit: type=1400 audit(1785202397.909:1766): avc: denied { write } for pid=17122 comm="syz.3.4638" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 268.071844][T12380] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.268867][T17128] 8021q: adding VLAN 0 to HW filter on device eth0 [ 268.296137][T17128] 8021q: adding VLAN 0 to HW filter on device eth1 [ 268.318618][T17128] 8021q: adding VLAN 0 to HW filter on device eth2 [ 268.343416][T17128] 8021q: adding VLAN 0 to HW filter on device eth3 [ 269.109008][T17166] loop8: detected capacity change from 0 to 512 [ 269.198510][T17166] EXT4-fs: Ignoring removed nobh option [ 269.663057][T17166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.684074][T17166] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.732198][T17190] loop1: detected capacity change from 0 to 164 [ 269.755489][ T28] audit: type=1400 audit(1785202399.566:1767): avc: denied { write } for pid=17165 comm="syz.8.4654" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 269.805857][ T28] audit: type=1400 audit(1785202399.612:1768): avc: denied { mounton } for pid=17189 comm="syz.1.4662" path="/129/file2/file0" dev="loop1" ino=1984 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=dir permissive=1 [ 269.835292][T15146] iso9660: Corrupted directory entry in block 1 of inode 1920 [ 269.855343][T15146] iso9660: Corrupted directory entry in block 0 of inode 1984 [ 269.876270][ T28] audit: type=1400 audit(1785202399.612:1769): avc: denied { remount } for pid=17189 comm="syz.1.4662" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 269.903436][T15146] iso9660: Corrupted directory entry in block 0 of inode 1984 [ 269.920722][T15146] iso9660: Corrupted directory entry in block 1 of inode 1920 [ 269.935216][T17194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.960456][T17194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.978020][ T28] audit: type=1400 audit(1785202399.781:1770): avc: denied { getopt } for pid=17193 comm="syz.3.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 270.011427][T13486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.382722][T17221] netlink: 'syz.8.4674': attribute type 1 has an invalid length. [ 270.390672][T17221] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4674'. [ 270.568754][T17231] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 270.616649][T17231] 8021q: adding VLAN 0 to HW filter on device bond3 [ 270.690918][T17225] loop8: detected capacity change from 0 to 32768 [ 271.183343][T17271] netlink: 19 bytes leftover after parsing attributes in process `syz.1.4695'. [ 271.246925][T17273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.264280][T17273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.290053][T17284] IPv4: Oversized IP packet from 127.202.26.0 [ 271.385737][T17288] loop6: detected capacity change from 0 to 1024 [ 271.388169][T17273] can0: slcan on ptm1. [ 271.392767][T17288] EXT4-fs: Ignoring removed bh option [ 271.425296][T17288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 271.448639][T17286] loop1: detected capacity change from 0 to 512 [ 271.468185][T17288] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.490871][ T28] audit: type=1400 audit(1785202401.203:1771): avc: denied { write } for pid=17287 comm="syz.6.4701" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.511170][T17288] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.4701: lblock 3 mapped to illegal pblock 3 (length 3) [ 271.528602][T17272] can0 (unregistered): slcan off ptm1. [ 271.550771][T17288] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 271.569465][T17286] EXT4-fs: Invalid want_extra_isize 4 [ 271.582807][T17286] ================================================================== [ 271.585770][T17288] EXT4-fs (loop6): This should not happen!! Data will be lost [ 271.585770][T17288] [ 271.590943][T17286] BUG: KCSAN: data-race in blkdev_open / queue_limits_commit_update [ 271.608556][T17286] [ 271.610898][T17286] read to 0xffff8881019f2110 of 4 bytes by task 2981 on cpu 1: [ 271.618460][T17286] blkdev_open+0x153/0x280 [ 271.622894][T17286] do_dentry_open+0x49f/0xa60 [ 271.627594][T17286] vfs_open+0x37/0x1e0 [ 271.631688][T17286] path_openat+0x1b39/0x2000 [ 271.636296][T17286] do_file_open+0x16c/0x290 [ 271.640827][T17286] do_sys_openat2+0xa0/0x130 [ 271.645466][T17286] __x64_sys_openat+0xf2/0x120 [ 271.650293][T17286] x64_sys_call+0x1e39/0x3020 [ 271.655023][T17286] do_syscall_64+0x136/0x3c0 [ 271.659459][T17288] EXT4-fs error (device loop6): ext4_ext_remove_space:2969: inode #15: comm syz.6.4701: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 271.659651][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.678825][T17288] EXT4-fs error (device loop6) in ext4_setattr:6172: Corrupt filesystem [ 271.683616][T17286] [ 271.683633][T17286] write to 0xffff8881019f2080 of 192 bytes by task 17286 on cpu 0: [ 271.683658][T17286] queue_limits_commit_update+0x4b/0x160 [ 271.693876][ T28] audit: type=1400 audit(1785202401.390:1772): avc: denied { write } for pid=17287 comm="syz.6.4701" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 271.694328][T17286] lo_release+0x20d/0x3f0 [ 271.703038][T17299] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.4701: bg 0: block 112: padding at end of block bitmap is not set [ 271.707866][T17286] bdev_release+0x375/0x3d0 [ 271.707905][T17286] blkdev_release+0x15/0x20 [ 271.736559][T17288] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.4701: lblock 0 mapped to illegal pblock 0 (length 1) [ 271.748195][T17286] __fput+0x29e/0x630 [ 271.748236][T17286] fput_close_sync+0xad/0x190 [ 271.748271][T17286] __x64_sys_close+0x55/0xf0 [ 271.748302][T17286] x64_sys_call+0x275d/0x3020 [ 271.754035][T17288] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 271.757421][T17286] do_syscall_64+0x136/0x3c0 [ 271.757453][T17286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.757482][T17286] [ 271.757487][T17286] Reported by Kernel Concurrency Sanitizer on: [ 271.757505][T17286] CPU: 0 UID: 0 PID: 17286 Comm: syz.1.4700 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 271.757542][T17286] Tainted: [W]=WARN [ 271.757550][T17286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 271.757566][T17286] ================================================================== [ 271.854841][T17288] EXT4-fs (loop6): This should not happen!! Data will be lost [ 271.854841][T17288] [ 271.899676][ T28] audit: type=1400 audit(1785202401.568:1773): avc: denied { ioctl } for pid=17298 comm="syz.8.4702" path="socket:[50946]" dev="sockfs" ino=50946 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 271.959298][ T28] audit: type=1400 audit(1785202401.634:1774): avc: denied { write } for pid=17292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.984745][T15983] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 271.996732][T15983] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.017340][ T28] audit: type=1400 audit(1785202401.690:1775): avc: denied { write } for pid=17307 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1