last executing test programs: 12m0.920461638s ago: executing program 32 (id=372): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x14) 11m55.423638635s ago: executing program 33 (id=500): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x6a) close(r0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$tipc(0x1e, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000005c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11m50.129138006s ago: executing program 34 (id=597): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 11m46.991720524s ago: executing program 35 (id=646): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x0, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x5, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffd, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x8, 0x0, &(0x7f0000001040)) 11m28.100749234s ago: executing program 36 (id=1023): connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x40001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x80000}, 0x0, 0xfffeffffffffffff, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000006792634418e822c3549146dfc425ebd0b1135bf5e474"], 0xff9, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) 10m53.847849265s ago: executing program 37 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c"], 0xb8}, 0x1, 0x0, 0x0, 0x20008895}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x60000000, 0x0, 0x40008d0}, 0x40) 10m43.880303823s ago: executing program 38 (id=1658): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x1000000000000000, 0x0, 0xffffffffffffffff, 0x2, 0x401, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@empty, 0x0, 0x33}, 0x2, @in=@multicast1, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 10m30.083702306s ago: executing program 39 (id=1921): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000180)="090000000000d3574c1a957a0e00", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m25.448149321s ago: executing program 40 (id=1986): setns(0xc9, 0x0) r0 = socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x0, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 10m4.908106801s ago: executing program 41 (id=2359): openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x183942, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x42, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 9m56.903533621s ago: executing program 42 (id=2459): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 8m38.705611555s ago: executing program 43 (id=3310): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x10000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 7m58.487175445s ago: executing program 44 (id=4044): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001280)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f00000001c0)='./file2\x00', 0xe6c42, 0x20) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 7m23.760308437s ago: executing program 45 (id=4599): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, &(0x7f0000000a80), 0x0}, 0x20) 6m53.688122105s ago: executing program 4 (id=4961): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000100)={0x35, 0x0, 0x0, 0x6}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x89b, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x4, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd23}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m53.620288687s ago: executing program 4 (id=4962): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r0, 0x1) close(r0) 6m53.51107707s ago: executing program 4 (id=4963): r0 = fsopen(&(0x7f0000000400)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) close_range(r2, 0xffffffffffffffff, 0x0) 6m53.467387841s ago: executing program 4 (id=4965): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./tracing\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x70) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x267) 6m53.423870482s ago: executing program 4 (id=4966): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x10, 0x572, 0x8000, 0x6, "ff000d00009a468e0cd912098d00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r0, 0x5406, &(0x7f00000001c0)={0xfffe, 0x402, 0x5, 0x1, 0x14, "0900000009d794c1"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x9) 6m53.242153246s ago: executing program 4 (id=4969): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x189042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) 6m53.227867697s ago: executing program 46 (id=4969): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x32) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x189042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x0, 0x41) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x6c6882, 0x13d) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', r1, &(0x7f0000000000)='./file0\x00', 0x4) 3m12.060387885s ago: executing program 3 (id=7629): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x3e03) 3m10.928388543s ago: executing program 3 (id=7641): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000300)={0x418103, 0x20, 0xf}, 0x18) 3m10.444393075s ago: executing program 3 (id=7644): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./tracing\x00', 0x204858, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$eJzs3cFrHFUcB/Bf15q0tenmIIKC+NCLXpYk/gMu0oIYUGIj1YMwNRNddrobdpbKFrG9iTf/juLRmyCC51y8e/OWi8ceiiu7m6TZNTlY2EzLfj6QvF/m5cu82WWW32X2Hdz68U57t2zsZv2ovZfickTUHkWsRi2OXDgca+N6KU56EO/Ub/35+iefff5hc3Pz+lZKN5o3391IKV1749dvvv3pzd/6L33687VflmN/9YuDvzf+2n9l/9WDf25+3SpTq0ydbj9l6Xa3289uF3naaZXtRkofF3lW5qnVKfPe1Pxu0d3bG6Sss7NyZa+Xl2XKOoPUzgep30393iBlX2WtTmo0GmnlSiyWp7ne7YdbW1lzDovhHP0we+Dy9J+9XjMb3cPL/0luP5zrwgCAZ9Js/1+LS+PjFfX/Ry3K/+//Lyx6//809P+LYNT/Lx3ev9P0/wAAAAAAAAAAAAAA8Dx4NBzWh8Nh/Wic/al6fcyX93+xnXhw71JE8f3d7bvbk3Ey39yNVhSRx1rU43HE8FiMnxS88cHm9bU0thord+5P8qPxhen8etRjdTo/+j3Kr6eUhvdTms6/OP5Gi+P8RtTj5dPzG5Pzz+SX4u23TuQbUY8/voxuFLETo+yT/HfrKb3/0eZMfnn8fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAshkY6dur+/Y3GWfOT/PH++mtRj8en78+/dur+/BfjtYvVXjsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCkH99pZUeS98y8exBlTw0NVLez8i4i5neL3q3HW66yopFiOM6auHt6Tla9wXFT8wQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAVeLLpd9UrAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoErl4F47K4q8N8ei6msEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4nvwbAAD//xBWIbM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x59) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000280)=""/59, 0x5e) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 3m10.199375481s ago: executing program 3 (id=7649): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x9a101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3m10.114993793s ago: executing program 3 (id=7651): r0 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 3m8.996182341s ago: executing program 3 (id=7664): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 3m8.973154402s ago: executing program 47 (id=7664): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 2m36.263533425s ago: executing program 2 (id=8101): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x51) fallocate(r0, 0x0, 0x9, 0x10001) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x8000) fallocate(r1, 0x0, 0x0, 0x8800000) copy_file_range(r0, 0x0, r1, &(0x7f00000000c0)=0x40, 0x6, 0x0) 2m36.143867968s ago: executing program 2 (id=8103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000000440)="b25b", 0x2}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)='\b', 0x1}, {&(0x7f0000000100)="2a1b1a4552a31452d5c73c376f8a", 0xe}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce", 0x1}, {&(0x7f00000007c0)="f2", 0xfea9}, {&(0x7f0000002e40)="d4"}], 0x3}}, {{0x0, 0x0, &(0x7f0000000b40), 0x3}}, {{0x0, 0x57, &(0x7f0000000a40)=[{&(0x7f0000000340)='\x00', 0xffffffb6}], 0x1}}], 0x4, 0x4000084) 2m36.0788425s ago: executing program 2 (id=8105): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x10000}, 0x28) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 2m35.68493405s ago: executing program 2 (id=8115): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m34.818844301s ago: executing program 2 (id=8120): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing\x00', 0x1fb) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x3, 0x0, 0x9, 0xb5e}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m34.615849606s ago: executing program 2 (id=8123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800080004000600000014000000460a0f"], 0xfce) 2m25.296299748s ago: executing program 5 (id=8239): mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x10010, 0xffffffffffffffff, 0x66962000) r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000500)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) msgsnd(0x0, 0x0, 0xaf9, 0x800) 2m25.215125899s ago: executing program 5 (id=8241): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f00000000c0)='THAWED\x00', 0x7) 2m25.068375663s ago: executing program 5 (id=8243): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001080)=0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, r2, 0xfff7ffff, 0x4, 0x0, 0x2, "d92984c117aa9ab08a5f4c0e961711a0776094750a3200fecb7f510e65e3f5038d190efedbdf920000001900", 0xf}, 0x60) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfc, 0xf7, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) 2m24.987858045s ago: executing program 5 (id=8244): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 2m24.943239506s ago: executing program 5 (id=8245): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) socket$netlink(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x1) 2m24.753437071s ago: executing program 5 (id=8248): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001606fffe8000000000000000000000000000aafe8000000000000000000000000000aa4e234e22", @ANYRES32=0x2, @ANYRES32=0x1, @ANYBLOB="6dc1"], 0x0) 2m24.726661171s ago: executing program 48 (id=8248): r0 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @local, 0xb}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60000000001606fffe8000000000000000000000000000aafe8000000000000000000000000000aa4e234e22", @ANYRES32=0x2, @ANYRES32=0x1, @ANYBLOB="6dc1"], 0x0) 2m19.5634149s ago: executing program 49 (id=8123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) write$tun(r0, &(0x7f0000001840)=ANY=[@ANYBLOB="0800080004000600000014000000460a0f"], 0xfce) 17.66598492s ago: executing program 9 (id=9381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000000180018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x62, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 17.617674611s ago: executing program 9 (id=9383): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac140001"], 0x4a) 17.430394656s ago: executing program 9 (id=9386): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x20000406, &(0x7f0000000440)={[{@dioread_lock}, {@noblock_validity}, {@grpquota}, {@jqfmt_vfsold}, {@nolazytime}, {@grpjquota, 0x2e}, {@nogrpid}, {@resuid}, {@bh}, {@noload}], [], 0x2c}, 0x84, 0x4f0, &(0x7f0000001e00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f00000001c0)=@filename='./file0/../file0\x00', 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x188000, 0x85) getdents64(r0, 0x0, 0x4f) 16.930544428s ago: executing program 9 (id=9390): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036322c666c7573682c00ed65503ccec9beef4e3a71579390a78893cf794eabe67967531177a5a8a723cb36529bc238be0bc2df664dee9ab34c2269c61c143e0c11a83b8a7214e0a160bcc29b3c030bf99ccb18520651f6cb1a99bbe9b6f8235a156c38c8cb2a8312538163a9da8fb380c7caa6475b7003c0e3003e88bd4ef6abe8b7c2dad0d8e397576687df8ae41502420d0aba004f5b98e9a286"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_clone(0x2b02000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ftruncate(r0, 0x4a8e) 16.46715254s ago: executing program 9 (id=9408): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000c40)=ANY=[], 0x1458}, 0x20048811) recvmsg$kcm(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/102, 0x66}], 0x1}, 0x40) 16.280339335s ago: executing program 9 (id=9401): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x104, 0x1) getdents64(r2, 0x0, 0x4f) 16.241751356s ago: executing program 50 (id=9401): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x104, 0x1) getdents64(r2, 0x0, 0x4f) 5.369566886s ago: executing program 1 (id=9535): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) listen(r0, 0x8) 4.38638924s ago: executing program 1 (id=9541): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r1, &(0x7f0000000580)={&(0x7f0000000100)={0xa, 0x4e22, 0x8a49, @private1, 0x6}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000140)="80", 0x1}], 0x1}, 0x44010) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x20000c4, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 3.949636371s ago: executing program 7 (id=9536): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x7, @perf_config_ext={0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.859982693s ago: executing program 7 (id=9550): socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x50}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2, 0x20000}, 0x102065, 0x0, 0x0, 0x3, 0x7, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}, @ip_tos_u8={{0x11}}], 0x98}, 0x0) 3.764379616s ago: executing program 7 (id=9552): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="71054200030306060608"], 0xee) 3.478070533s ago: executing program 1 (id=9555): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c362023eb3d259266ec9c37865c6c1a4640ce1b1d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a294ce72c5e341c7535c9a0d39225720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4020000006a97444800", "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"}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="6e66732c646f733178666c6f7070792c646f733178666c6f7070792c756e695f786c6174653d302c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c696f636861727365743d63703836392c73686f72746e616d653d6d697865642c7574663800002c696f636861727365743d2c696f636861727365743d80736f383835392d362c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c000000000000"], 0x1, 0x38c, &(0x7f0000000380)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="8c", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f0000000000)="c1", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f00000002c0)=""/17, &(0x7f00000000c0)=0x11) 2.752202291s ago: executing program 1 (id=9560): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 2.632451914s ago: executing program 1 (id=9562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x46) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)={0x38, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x20000000) 2.468731458s ago: executing program 8 (id=9554): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x58560, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0xc8d, 0x4}, 0x11ecc8, 0x201222, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[], 0x0) 728.702181ms ago: executing program 1 (id=9557): syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x5000, 0x6, @loopback, 0x7}, 0x1c) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x1, 0x3}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 728.558831ms ago: executing program 6 (id=9558): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 725.817262ms ago: executing program 8 (id=9559): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000c27116a2a859690900ffffffffff81000002"], 0x2a) 725.549902ms ago: executing program 0 (id=9569): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) close(0x3) 709.739631ms ago: executing program 7 (id=9561): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_io_uring_setup(0x414b, &(0x7f00000000c0)={0x0, 0x287d, 0x0, 0x3, 0x2ce}, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 639.780104ms ago: executing program 0 (id=9563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x1e, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 639.052624ms ago: executing program 6 (id=9574): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x840) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="71054200030306060608"], 0xee) 594.492995ms ago: executing program 7 (id=9564): symlink(0x0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) listen(r0, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304006e22"], 0x54}}, 0x20044010) 491.696467ms ago: executing program 7 (id=9565): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 486.126137ms ago: executing program 0 (id=9566): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) 485.412077ms ago: executing program 6 (id=9578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x2}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000c27116a2a859690900ffffffffff81000002"], 0x2a) 484.991547ms ago: executing program 8 (id=9567): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="240000001800010000000000000000001d01060008000a00", @ANYRES32=r0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 372.64742ms ago: executing program 0 (id=9568): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r0, 0x10001) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) close_range(r1, 0xffffffffffffffff, 0x0) 371.05135ms ago: executing program 8 (id=9581): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x24, r1, 0x1, 0x70bd2d, 0x1e, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1f371693c3ceafd2}, 0x20000000) 369.23621ms ago: executing program 6 (id=9582): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{}, 0x0, &(0x7f0000000280)}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000140)=0x10, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @private=0xa010100}, 0x10) 305.088902ms ago: executing program 0 (id=9570): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x9, 0x3, 0x0, &(0x7f0000001d00)='GPL\x00', 0x4}, 0x94) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'wg2\x00', 0x2}, 0x18) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 237.478513ms ago: executing program 6 (id=9571): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001300)=0x46) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="3800000010003704000080000000000000000000", @ANYRES32=r3, @ANYBLOB="c3040500000000001800128008000100677470000c00028008000100", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)={0x38, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x20000000) 221.826374ms ago: executing program 8 (id=9572): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv(r1, &(0x7f00000002c0)=[{&(0x7f0000001b00)=""/4084, 0xff4}, {&(0x7f0000000340)=""/17, 0x11}], 0x2) 174.259145ms ago: executing program 0 (id=9573): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30"], 0x28}}, 0x0) 90.526487ms ago: executing program 6 (id=9575): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)}, 0x800) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 0s ago: executing program 8 (id=9576): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000140)=0x6, 0x4) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000180)=0xffffffffffffffff) recvfrom(r0, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) recvfrom(r0, 0x0, 0x0, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): 7][T22716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.288374][T22716] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.288423][T22716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.630205][T30766] loop8: detected capacity change from 0 to 1024 [ 635.649182][T30766] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 635.663899][T30766] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.8260: bg 0: block 112: padding at end of block bitmap is not set [ 635.726850][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 635.820037][T30674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.833785][T30780] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8263'. [ 635.878869][T30780] bond9: entered promiscuous mode [ 635.879154][T30780] 8021q: adding VLAN 0 to HW filter on device bond9 [ 635.933986][T30789] 8021q: adding VLAN 0 to HW filter on device bond9 [ 635.935109][T30789] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 635.956718][T30789] bond9: (slave ip6gre1): Error -95 calling set_mac_address [ 636.247893][T30674] veth0_vlan: entered promiscuous mode [ 636.259922][T30674] veth1_vlan: entered promiscuous mode [ 636.288613][T30674] veth0_macvtap: entered promiscuous mode [ 636.300098][T30674] veth1_macvtap: entered promiscuous mode [ 636.323453][T30674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.347150][T30674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 636.357809][T24392] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.357890][T24392] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.358097][T24392] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.358205][T24392] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.557835][ T29] kauditd_printk_skb: 8082 callbacks suppressed [ 637.557863][ T29] audit: type=1400 audit(28582.309:37073): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.557895][ T29] audit: type=1400 audit(28582.309:37074): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.558001][ T29] audit: type=1400 audit(28582.309:37075): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.564582][ T29] audit: type=1400 audit(28582.309:37076): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.564620][ T29] audit: type=1400 audit(28582.309:37077): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.564646][ T29] audit: type=1400 audit(28582.309:37078): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.564677][ T29] audit: type=1400 audit(28582.319:37079): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.564785][ T29] audit: type=1400 audit(28582.319:37080): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.587201][ T29] audit: type=1400 audit(28582.319:37081): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.587272][ T29] audit: type=1400 audit(28582.319:37082): avc: denied { write } for pid=28796 comm="syz-executor" name="inst1" dev="tracefs" ino=85928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 637.974611][T22699] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.059005][T22699] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.124327][T22699] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.198284][T22699] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.375294][T22699] bridge_slave_1: left allmulticast mode [ 638.375352][T22699] bridge_slave_1: left promiscuous mode [ 638.375448][T22699] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.404397][T22699] bridge_slave_0: left allmulticast mode [ 638.404422][T22699] bridge_slave_0: left promiscuous mode [ 638.404519][T22699] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.714384][T22699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.726459][T22699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.727781][T22699] bond0 (unregistering): Released all slaves [ 638.750199][T22699] bond1 (unregistering): (slave veth3): Releasing active interface [ 638.755937][T22699] bond1 (unregistering): Released all slaves [ 639.388936][T22699] hsr_slave_0: left promiscuous mode [ 639.394372][T22699] hsr_slave_1: left promiscuous mode [ 639.395191][T22699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.395238][T22699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.402978][T22699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.403063][T22699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.425073][T22699] veth1_macvtap: left promiscuous mode [ 639.425145][T22699] veth0_macvtap: left promiscuous mode [ 639.425378][T22699] veth1_vlan: left promiscuous mode [ 639.425627][T22699] veth0_vlan: left promiscuous mode [ 639.465091][T31003] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8280'. [ 639.501354][ T3562] Bluetooth: hci0: command 0x1003 tx timeout [ 639.501408][T23305] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 639.842003][T22699] team0 (unregistering): Port device team_slave_1 removed [ 639.869158][T22699] team0 (unregistering): Port device team_slave_0 removed [ 640.398239][T30952] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.398281][T30952] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.398430][T30952] bridge_slave_0: entered allmulticast mode [ 640.401351][T30952] bridge_slave_0: entered promiscuous mode [ 640.405148][T30952] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.405230][T30952] bridge0: port 2(bridge_slave_1) entered disabled state [ 640.405388][T30952] bridge_slave_1: entered allmulticast mode [ 640.406722][T30952] bridge_slave_1: entered promiscuous mode [ 640.478412][T30952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 640.490659][T30952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.540997][T30952] team0: Port device team_slave_0 added [ 640.548000][T30952] team0: Port device team_slave_1 added [ 640.564417][T30952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 640.564444][T30952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.597713][T30952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 640.598365][T30952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 640.598378][T30952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 640.598405][T30952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 640.757293][T30952] hsr_slave_0: entered promiscuous mode [ 640.757875][T30952] hsr_slave_1: entered promiscuous mode [ 640.758044][T30952] debugfs: 'hsr0' already exists in 'hsr' [ 640.758061][T30952] Cannot create hsr debugfs directory [ 640.982625][ T3021] 8021q: adding VLAN 0 to HW filter on device eth13 [ 641.576436][ T3021] 8021q: adding VLAN 0 to HW filter on device eth14 [ 641.812635][T30952] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 641.824987][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 641.832548][T30952] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 641.844954][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 641.852605][T30952] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 641.864490][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 641.870210][T30952] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 641.880308][T30952] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 642.057512][ T3021] 8021q: adding VLAN 0 to HW filter on device eth15 [ 642.112920][T30952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.156672][T30952] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.187603][T24406] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.187674][T24406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.206323][T24406] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.206378][T24406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.499969][T31174] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8314'. [ 642.616337][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 642.616367][ T29] audit: type=1400 audit(28587.369:37129): avc: denied { write } for pid=31182 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 642.736748][ T3021] 8021q: adding VLAN 0 to HW filter on device eth16 [ 642.775382][T30952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 642.936941][T31202] loop8: detected capacity change from 0 to 4096 [ 642.945301][T31202] EXT4-fs: Ignoring removed mblk_io_submit option [ 642.983430][T31202] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 643.003892][ T29] audit: type=1400 audit(28587.759:37130): avc: denied { write } for pid=31197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.031120][ T29] audit: type=1400 audit(28587.789:37131): avc: denied { write } for pid=31201 comm="syz.8.8323" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 643.129233][ T29] audit: type=1400 audit(28587.879:37132): avc: denied { write } for pid=31225 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.133788][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.135305][T30952] veth0_vlan: entered promiscuous mode [ 643.155514][T30952] veth1_vlan: entered promiscuous mode [ 643.212073][T30952] veth0_macvtap: entered promiscuous mode [ 643.223857][T30952] veth1_macvtap: entered promiscuous mode [ 643.253552][T30952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 643.265456][T30952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 643.321058][T22716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.321670][T22716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.321738][T22716] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.321805][T22716] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.459073][ T29] audit: type=1400 audit(28588.209:37133): avc: denied { write } for pid=31227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.503516][ T29] audit: type=1400 audit(28588.259:37134): avc: denied { write } for pid=31241 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.696241][ T29] audit: type=1400 audit(28588.449:37135): avc: denied { write } for pid=31243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.755785][ T29] audit: type=1400 audit(28588.509:37136): avc: denied { write } for pid=31254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.857976][ T29] audit: type=1400 audit(28588.609:37137): avc: denied { write } for pid=31256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.891154][ T29] audit: type=1400 audit(28588.639:37138): avc: denied { write } for pid=31267 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.501855][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 650.501886][ T29] audit: type=1400 audit(28595.259:37159): avc: denied { write } for pid=31393 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.592545][ T29] audit: type=1400 audit(28595.349:37160): avc: denied { write } for pid=31393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 650.648648][ T29] audit: type=1400 audit(28595.399:37161): avc: denied { write } for pid=31407 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 654.998156][ T29] audit: type=1400 audit(28599.749:37162): avc: denied { write } for pid=31415 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.032262][ T29] audit: type=1400 audit(28599.789:37163): avc: denied { write } for pid=31426 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.856736][ T29] audit: type=1400 audit(28600.609:37164): avc: denied { write } for pid=31429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 655.890273][ T29] audit: type=1400 audit(28600.649:37165): avc: denied { write } for pid=31440 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.255427][ T29] audit: type=1400 audit(28601.009:37166): avc: denied { write } for pid=31443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.290322][ T29] audit: type=1400 audit(28601.049:37167): avc: denied { write } for pid=31454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.628722][T31476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8333'. [ 656.629011][T31476] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8333'. [ 656.896338][ T29] audit: type=1400 audit(28601.649:37168): avc: denied { write } for pid=31477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 656.977863][ T29] audit: type=1400 audit(28601.729:37169): avc: denied { write } for pid=31496 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 657.133671][T31501] syzkaller0: entered promiscuous mode [ 657.133712][T31501] syzkaller0: entered allmulticast mode [ 657.143908][T31501] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 657.305874][T31503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8340'. [ 657.727340][T31525] loop1: detected capacity change from 0 to 2048 [ 657.756102][T31525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 657.839627][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 659.497623][T31579] netlink: 'syz.1.8368': attribute type 1 has an invalid length. [ 659.512236][T31579] gretap1: entered allmulticast mode [ 660.130956][T22665] rpcbind: server 127.0.0.1 not responding, timed out [ 660.667990][T31600] loop9: detected capacity change from 0 to 1024 [ 660.695277][T31600] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.708078][ T29] audit: type=1400 audit(28605.458:37170): avc: denied { watch watch_reads } for pid=31599 comm="syz.9.8377" path="/922/file1/file1" dev="loop9" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 660.732165][ T29] audit: type=1400 audit(28605.458:37171): avc: denied { write } for pid=31599 comm="syz.9.8377" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 660.732195][ T29] audit: type=1400 audit(28605.458:37172): avc: denied { write } for pid=31599 comm="syz.9.8377" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 660.732324][ T29] audit: type=1400 audit(28605.458:37173): avc: denied { write } for pid=31599 comm="syz.9.8377" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 660.811049][T31530] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 660.931655][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.160094][T31620] loop8: detected capacity change from 0 to 512 [ 661.167015][T31620] EXT4-fs: Ignoring removed nobh option [ 661.184515][T31620] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 661.201161][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 661.201258][ T29] audit: type=1400 audit(28605.958:37175): avc: denied { write } for pid=31619 comm="syz.8.8386" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 661.284553][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.407797][T31636] loop1: detected capacity change from 0 to 512 [ 661.432105][T31639] syzkaller0: entered promiscuous mode [ 661.432135][T31639] syzkaller0: entered allmulticast mode [ 661.439475][T31639] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 661.440121][T31636] SET target dimension over the limit! [ 661.622643][T31656] loop9: detected capacity change from 0 to 1024 [ 661.629891][T31656] EXT4-fs: Ignoring removed orlov option [ 661.666233][T31656] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 661.688119][ T29] audit: type=1326 audit(28606.438:37176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 661.688289][ T29] audit: type=1326 audit(28606.438:37177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 661.732211][ T29] audit: type=1326 audit(28606.488:37178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 661.732303][ T29] audit: type=1326 audit(28606.488:37179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 661.732428][ T29] audit: type=1326 audit(28606.488:37180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 661.793069][ T29] audit: type=1326 audit(28606.548:37181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 661.793216][ T29] audit: type=1326 audit(28606.548:37182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 661.850910][ T29] audit: type=1326 audit(28606.608:37183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd15ca0de42 code=0x7ffc0000 [ 661.906765][ T29] audit: type=1326 audit(28606.658:37184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31654 comm="syz.9.8399" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd15c9ce90e code=0x7ffc0000 [ 662.191858][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.431527][T31685] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8411'. [ 662.633094][T31704] loop9: detected capacity change from 0 to 512 [ 662.660246][T31704] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 663.036957][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 664.812396][T31810] netlink: 'syz.6.8453': attribute type 18 has an invalid length. [ 664.812475][T31810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8453'. [ 664.812544][T31810] netlink: 'syz.6.8453': attribute type 18 has an invalid length. [ 664.812561][T31810] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8453'. [ 665.288615][T31826] netlink: 'syz.6.8459': attribute type 39 has an invalid length. [ 665.392773][T31828] loop8: detected capacity change from 0 to 512 [ 665.425598][T31828] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.118481][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.166955][T31872] loop9: detected capacity change from 0 to 512 [ 666.207245][T31872] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.224700][T31874] loop8: detected capacity change from 0 to 512 [ 666.246743][T31874] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 666.269566][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 666.269622][ T29] audit: type=1400 audit(28611.028:37292): avc: denied { write } for pid=31871 comm="syz.9.8479" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.303549][T31872] EXT4-fs error (device loop9): ext4_get_first_dir_block:3547: inode #12: block 32: comm syz.9.8479: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 666.304008][ T29] audit: type=1400 audit(28611.058:37293): avc: denied { write } for pid=31871 comm="syz.9.8479" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.304097][ T29] audit: type=1400 audit(28611.058:37294): avc: denied { write } for pid=31871 comm="syz.9.8479" name="file7" dev="loop9" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 666.304231][ T29] audit: type=1400 audit(28611.058:37295): avc: denied { write } for pid=31871 comm="syz.9.8479" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.326792][T31872] EXT4-fs error (device loop9): ext4_get_first_dir_block:3550: inode #12: comm syz.9.8479: directory missing '.' [ 666.351877][ T29] audit: type=1400 audit(28611.108:37296): avc: denied { write } for pid=31873 comm="syz.8.8478" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.473141][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.531233][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 666.747436][T31890] loop9: detected capacity change from 0 to 128 [ 666.766042][T31890] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 666.766122][T31890] System zones: 1-3, 19-19, 35-36 [ 666.769977][T31890] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 666.823802][ T29] audit: type=1400 audit(28611.578:37297): avc: denied { write } for pid=31888 comm="syz.9.8483" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 666.905219][T16974] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 667.472195][ T29] audit: type=1400 audit(28612.228:37298): avc: denied { mount } for pid=31928 comm="syz.8.8500" name="/" dev="9p" ino=4750453181945741314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 668.478835][T31955] loop9: detected capacity change from 0 to 2048 [ 668.507405][T31955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.645752][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 668.730684][T31968] loop8: detected capacity change from 0 to 512 [ 668.742057][T31968] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 668.756178][T31968] EXT4-fs (loop8): 1 truncate cleaned up [ 668.764142][T31968] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.835647][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 669.264032][T31988] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8524'. [ 669.467546][ T29] audit: type=1326 audit(28614.218:37299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31994 comm="syz.8.8527" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x0 [ 669.650301][ T29] audit: type=1400 audit(28614.408:37300): avc: denied { write } for pid=31998 comm="syz.9.8528" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 669.868839][ T29] audit: type=1326 audit(28614.628:37301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32000 comm="syz.9.8529" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x0 [ 670.327565][T32015] loop8: detected capacity change from 0 to 512 [ 670.329822][T32015] EXT4-fs: Ignoring removed mblk_io_submit option [ 670.346703][T32015] EXT4-fs error (device loop8): ext4_xattr_inode_iget:473: comm syz.8.8533: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 670.346769][T32015] loop8: lost filesystem error report for type 5 error -117 [ 670.361886][T32015] EXT4-fs (loop8): Remounting filesystem read-only [ 670.361976][T32015] EXT4-fs (loop8): 1 orphan inode deleted [ 670.362489][T32015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.366492][T32015] netlink: 232 bytes leftover after parsing attributes in process `syz.8.8533'. [ 670.424890][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.471136][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8534'. [ 671.133692][T32065] loop1: detected capacity change from 0 to 8192 [ 671.142642][T32065] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 672.849973][T32119] syzkaller1: entered promiscuous mode [ 672.849998][T32119] syzkaller1: entered allmulticast mode [ 673.677028][T32151] sch_tbf: burst 9 is lower than device syzkaller0 mtu (1500) ! [ 673.961731][T32167] loop1: detected capacity change from 0 to 1024 [ 673.962182][T32167] EXT4-fs: Ignoring removed orlov option [ 673.984013][T32167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 674.043582][T32167] EXT4-fs error (device loop1): __ext4_new_inode:1289: comm syz.1.8591: failed to insert inode 12: doubly allocated? [ 674.056522][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 674.056541][ T29] audit: type=1400 audit(28618.798:37355): avc: denied { write } for pid=32165 comm="syz.1.8591" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 674.089947][T32167] EXT4-fs error (device loop1) in ext4_free_inode:363: Corrupt filesystem [ 674.128452][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 674.313250][ T29] audit: type=1326 audit(28619.068:37356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x7ffc0000 [ 674.313327][ T29] audit: type=1326 audit(28619.068:37357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 674.313370][ T29] audit: type=1326 audit(28619.068:37358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 674.314711][ T29] audit: type=1326 audit(28619.068:37359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 674.314838][ T29] audit: type=1326 audit(28619.068:37360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x7ffc0000 [ 674.315002][ T29] audit: type=1326 audit(28619.068:37361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 674.315156][ T29] audit: type=1326 audit(28619.068:37362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x7ffc0000 [ 674.315234][ T29] audit: type=1326 audit(28619.068:37363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 674.315363][ T29] audit: type=1326 audit(28619.068:37364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32187 comm="syz.8.8609" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 676.041551][T32237] loop1: detected capacity change from 0 to 8192 [ 676.276609][T32247] netlink: 'syz.8.8620': attribute type 13 has an invalid length. [ 676.737296][T24380] Bluetooth: hci0: Frame reassembly failed (-84) [ 676.777080][T32261] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8627'. [ 676.790615][T32261] ip6gre2: entered promiscuous mode [ 676.790699][T32261] ip6gre2: entered allmulticast mode [ 676.816745][T32261] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8627'. [ 678.245140][T32298] netlink: 'syz.1.8641': attribute type 13 has an invalid length. [ 678.312736][T32304] loop1: detected capacity change from 0 to 256 [ 678.321032][T32302] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8643'. [ 678.556935][T32316] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8648'. [ 678.768284][T23305] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 678.798648][T32326] VFS: Mount too revealing [ 680.117102][T32360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8667'. [ 680.117139][T32360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8667'. [ 680.546651][T32364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 680.546834][T32364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 680.635728][ T29] kauditd_printk_skb: 68 callbacks suppressed [ 680.635758][ T29] audit: type=1326 audit(28625.388:37433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 680.637628][ T29] audit: type=1326 audit(28625.388:37434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 680.641175][ T29] audit: type=1326 audit(28625.388:37435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 680.643093][ T29] audit: type=1326 audit(28625.398:37436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 680.643189][ T29] audit: type=1326 audit(28625.398:37437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 680.643389][ T29] audit: type=1326 audit(28625.398:37438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 680.645479][ T29] audit: type=1326 audit(28625.398:37439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 680.645585][ T29] audit: type=1326 audit(28625.398:37440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 680.703082][ T29] audit: type=1326 audit(28625.448:37441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 680.703177][ T29] audit: type=1326 audit(28625.448:37442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32378 comm="syz.1.8676" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 681.003607][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8681'. [ 681.003663][T32391] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8681'. [ 681.471448][T32413] Invalid argument reading file caps for ./file0 [ 681.693159][T32430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8698'. [ 682.395736][T22692] Bluetooth: hci0: Frame reassembly failed (-84) [ 682.464130][T32483] xt_hashlimit: size too large, truncated to 1048576 [ 684.142087][T32399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 684.447107][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 685.068169][T32539] loop8: detected capacity change from 0 to 256 [ 685.090459][T32539] FAT-fs (loop8): data area starts beyond volume (274 > 64) [ 685.090498][T32539] FAT-fs (loop8): Can't find a valid FAT filesystem [ 685.148509][T32546] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 685.206581][T32550] loop8: detected capacity change from 0 to 4096 [ 685.229226][T32550] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 685.363086][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.581368][T32574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8756'. [ 686.223406][T32610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8773'. [ 686.429505][T32625] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8777'. [ 686.932164][T32654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 686.932280][T32654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 687.212050][ T29] kauditd_printk_skb: 694 callbacks suppressed [ 687.212081][ T29] audit: type=1326 audit(28631.968:38137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 687.212129][ T29] audit: type=1326 audit(28631.968:38138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 687.269337][ T29] audit: type=1326 audit(28631.968:38139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 687.269411][ T29] audit: type=1326 audit(28631.968:38140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 687.269457][ T29] audit: type=1326 audit(28631.998:38141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 687.269487][ T29] audit: type=1326 audit(28631.998:38142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 687.269561][ T29] audit: type=1326 audit(28631.998:38144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32675 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f89539de90e code=0x7ffc0000 [ 687.269643][ T29] audit: type=1326 audit(28631.998:38143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 687.281778][T32648] syz.9.8798 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 687.281940][T32648] CPU: 0 UID: 0 PID: 32648 Comm: syz.9.8798 Not tainted syzkaller #0 PREEMPT(lazy) [ 687.282092][T32648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.282132][T32648] Call Trace: [ 687.282152][T32648] [ 687.282182][T32648] __dump_stack+0x1d/0x30 [ 687.282262][T32648] dump_stack_lvl+0x95/0xd0 [ 687.282332][T32648] dump_stack+0x15/0x1b [ 687.282416][T32648] dump_header+0x80/0x240 [ 687.282536][T32648] oom_kill_process+0x294/0x420 [ 687.282614][T32648] out_of_memory+0x981/0xbc0 [ 687.282734][T32648] try_charge_memcg+0x624/0xa10 [ 687.282888][T32648] charge_memcg+0x16f/0x220 [ 687.283001][T32648] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 687.283078][T32648] swap_cache_alloc_folio+0x47b/0x610 [ 687.283270][T32648] swap_cluster_readahead+0x2b1/0x450 [ 687.283346][T32648] swapin_readahead+0xd8/0x890 [ 687.283393][T32648] ? _raw_spin_unlock+0x9/0x30 [ 687.283484][T32648] ? swap_put_entries_cluster+0x49c/0x4c0 [ 687.283547][T32648] ? __entry_text_end+0x10a58/0x1020f9 [ 687.283624][T32648] ? __rcu_read_unlock+0x4e/0x70 [ 687.283796][T32648] ? swap_cache_get_folio+0x1f7/0x200 [ 687.283935][T32648] do_swap_page+0x2a2/0x1e60 [ 687.283967][T32648] ? mtree_range_walk+0x3e8/0x480 [ 687.284082][T32648] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 687.284177][T32648] handle_mm_fault+0xb05/0x3ae0 [ 687.284263][T32648] do_user_addr_fault+0x636/0x1060 [ 687.284385][T32648] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 687.284516][T32648] ? trace_page_fault_user+0x1f/0xa0 [ 687.284610][T32648] exc_page_fault+0x62/0xa0 [ 687.284706][T32648] asm_exc_page_fault+0x26/0x30 [ 687.284821][T32648] RIP: 0033:0x7fd15ca0ebff [ 687.284887][T32648] Code: e9 46 f6 ff ff 66 0f 1f 44 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 83 ec 28 31 f6 64 48 8b 04 25 28 00 00 00 <48> 89 44 24 18 8d 07 48 69 c0 83 de 1b 43 48 c1 e8 32 89 c1 69 c0 [ 687.284944][T32648] RSP: 002b:00007ffd42d96dc0 EFLAGS: 00010246 [ 687.285053][T32648] RAX: 85caa900bc1e0600 RBX: 00007fd15cc95fa0 RCX: 00000000000a7b98 [ 687.285097][T32648] RDX: 000000000000009e RSI: 0000000000000000 RDI: 00000000000003e8 [ 687.285136][T32648] RBP: 00007fd15cc97da0 R08: 0000000000000000 R09: 3fffffffffffffff [ 687.285174][T32648] R10: 4000000000000000 R11: 0000000000000293 R12: 00000000000a7e22 [ 687.285220][T32648] R13: 00007fd15cc9609c R14: 00000000000a7b50 R15: 00007fd15cc96090 [ 687.285291][T32648] [ 687.320174][ T29] audit: type=1326 audit(28632.048:38145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 687.320212][ T29] audit: type=1326 audit(28632.048:38146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32671 comm="syz.6.8796" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 687.337526][T32648] memory: usage 307200kB, limit 307200kB, failcnt 4703 [ 687.337576][T32648] memory+swap: usage 308140kB, limit 9007199254740988kB, failcnt 0 [ 687.337618][T32648] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 687.337658][T32648] Memory cgroup stats for /syz9: [ 687.338325][T32648] cache 0 [ 687.338353][T32648] rss 0 [ 687.338377][T32648] shmem 0 [ 687.338472][T32648] mapped_file 0 [ 687.338554][T32648] dirty 0 [ 687.338582][T32648] writeback 0 [ 687.338602][T32648] workingset_refault_anon 2869 [ 687.338632][T32648] workingset_refault_file 8 [ 687.338660][T32648] swap 962560 [ 687.338681][T32648] swapcached 52314112 [ 687.338703][T32648] pgpgin 344708 [ 687.338759][T32648] pgpgout 344707 [ 687.338779][T32648] pgfault 300128 [ 687.338808][T32648] pgmajfault 528 [ 687.338829][T32648] inactive_anon 0 [ 687.338850][T32648] active_anon 0 [ 687.338881][T32648] inactive_file 0 [ 687.348977][T32648] active_file 0 [ 687.349014][T32648] unevictable 0 [ 687.349036][T32648] hierarchical_memory_limit 314572800 [ 687.349066][T32648] hierarchical_memsw_limit 9223372036854771712 [ 687.349096][T32648] total_cache 0 [ 687.349117][T32648] total_rss 0 [ 687.349139][T32648] total_shmem 0 [ 687.349161][T32648] total_mapped_file 0 [ 687.349181][T32648] total_dirty 0 [ 687.349202][T32648] total_writeback 0 [ 687.349231][T32648] total_workingset_refault_anon 2869 [ 687.349318][T32648] total_workingset_refault_file 8 [ 687.349346][T32648] total_swap 962560 [ 687.349367][T32648] total_swapcached 52314112 [ 687.349391][T32648] total_pgpgin 344708 [ 687.349411][T32648] total_pgpgout 344707 [ 687.349433][T32648] total_pgfault 300128 [ 687.349459][T32648] total_pgmajfault 528 [ 687.349537][T32648] total_inactive_anon 0 [ 687.349558][T32648] total_active_anon 0 [ 687.349586][T32648] total_inactive_file 0 [ 687.349608][T32648] total_active_file 0 [ 687.349681][T32648] total_unevictable 0 [ 687.349709][T32648] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.8798,pid=32648,uid=0 [ 687.349971][T32648] Memory cgroup out of memory: Killed process 32648 (syz.9.8798) total-vm:96236kB, anon-rss:1236kB, file-rss:22228kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 687.375092][T16974] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 687.375323][T16974] CPU: 0 UID: 0 PID: 16974 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 687.375392][T16974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 687.375428][T16974] Call Trace: [ 687.375447][T16974] [ 687.375477][T16974] __dump_stack+0x1d/0x30 [ 687.375581][T16974] dump_stack_lvl+0x95/0xd0 [ 687.375682][T16974] dump_stack+0x15/0x1b [ 687.375755][T16974] dump_header+0x80/0x240 [ 687.375836][T16974] oom_kill_process+0x294/0x420 [ 687.375917][T16974] out_of_memory+0x981/0xbc0 [ 687.376060][T16974] try_charge_memcg+0x624/0xa10 [ 687.376203][T16974] charge_memcg+0x16f/0x220 [ 687.376278][T16974] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 687.376451][T16974] swap_cache_alloc_folio+0x47b/0x610 [ 687.376606][T16974] swap_cluster_readahead+0x3cd/0x450 [ 687.376692][T16974] swapin_readahead+0xd8/0x890 [ 687.376755][T16974] ? _raw_spin_unlock+0x9/0x30 [ 687.376864][T16974] ? swap_put_entries_cluster+0x49c/0x4c0 [ 687.376952][T16974] ? __entry_text_end+0x10a58/0x1020f9 [ 687.377030][T16974] ? __rcu_read_unlock+0x4e/0x70 [ 687.377204][T16974] ? swap_cache_get_folio+0x1f7/0x200 [ 687.377401][T16974] do_swap_page+0x2a2/0x1e60 [ 687.377519][T16974] ? __list_del_entry_valid_or_report+0x23/0x130 [ 687.377605][T16974] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 687.377701][T16974] handle_mm_fault+0xb05/0x3ae0 [ 687.377751][T16974] do_user_addr_fault+0x636/0x1060 [ 687.377782][T16974] ? trace_page_fault_user+0x1f/0xa0 [ 687.377853][T16974] exc_page_fault+0x62/0xa0 [ 687.377974][T16974] asm_exc_page_fault+0x26/0x30 [ 687.378031][T16974] RIP: 0033:0x7fd15c8dbf52 [ 687.378081][T16974] Code: ff ff ff ff e8 9f 05 13 00 39 c3 0f 84 af 04 00 00 4c 8b 25 60 97 ee 00 48 8b 05 61 97 ee 00 4c 89 fe bf 01 00 00 00 4d 89 e5 <48> 89 44 24 10 49 c1 e5 04 4d 29 e5 49 c1 e5 03 e8 09 af 12 00 85 [ 687.378145][T16974] RSP: 002b:00007ffd42d96ff0 EFLAGS: 00010202 [ 687.378193][T16974] RAX: 0000000000000032 RBX: 00000000000008f1 RCX: 00007fd15ca0ec33 [ 687.378230][T16974] RDX: 0000000000000000 RSI: 00007ffd42d97080 RDI: 0000000000000001 [ 687.378321][T16974] RBP: 00007ffd42d9702c R08: 0000000000000000 R09: 0000000000000000 [ 687.378359][T16974] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 687.378391][T16974] R13: 0000000000001388 R14: 00000000000a7b21 R15: 00007ffd42d97080 [ 687.378457][T16974] [ 687.433021][T16974] memory: usage 307200kB, limit 307200kB, failcnt 4710 [ 687.433073][T16974] memory+swap: usage 308104kB, limit 9007199254740988kB, failcnt 0 [ 687.433119][T16974] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 687.433277][T16974] Memory cgroup stats for /syz9: [ 687.433644][T16974] cache 0 [ 687.433666][T16974] rss 0 [ 687.433685][T16974] shmem 0 [ 687.433739][T16974] mapped_file 0 [ 687.433758][T16974] dirty 0 [ 687.452668][T16974] writeback 0 [ 687.452698][T16974] workingset_refault_anon 2869 [ 687.452727][T16974] workingset_refault_file 8 [ 687.452755][T16974] swap 962560 [ 687.452776][T16974] swapcached 52314112 [ 687.452797][T16974] pgpgin 344708 [ 687.452818][T16974] pgpgout 344707 [ 687.452845][T16974] pgfault 300128 [ 687.452875][T16974] pgmajfault 528 [ 687.452934][T16974] inactive_anon 0 [ 687.453018][T16974] active_anon 0 [ 687.453040][T16974] inactive_file 0 [ 687.453072][T16974] active_file 0 [ 687.453093][T16974] unevictable 0 [ 687.453156][T16974] hierarchical_memory_limit 314572800 [ 687.453180][T16974] hierarchical_memsw_limit 9223372036854771712 [ 687.453211][T16974] total_cache 0 [ 687.453240][T16974] total_rss 0 [ 687.453260][T16974] total_shmem 0 [ 687.453283][T16974] total_mapped_file 0 [ 687.453323][T16974] total_dirty 0 [ 687.453345][T16974] total_writeback 0 [ 687.453378][T16974] total_workingset_refault_anon 2869 [ 687.453401][T16974] total_workingset_refault_file 8 [ 687.453431][T16974] total_swap 962560 [ 687.453462][T16974] total_swapcached 52314112 [ 687.453497][T16974] total_pgpgin 344708 [ 687.453527][T16974] total_pgpgout 344707 [ 687.453557][T16974] total_pgfault 300128 [ 687.453587][T16974] total_pgmajfault 528 [ 687.453741][T16974] total_inactive_anon 0 [ 687.453764][T16974] total_active_anon 0 [ 687.453794][T16974] total_inactive_file 0 [ 687.453816][T16974] total_active_file 0 [ 687.453845][T16974] total_unevictable 0 [ 687.453918][T16974] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz9,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.7191,pid=27581,uid=0 [ 687.473596][T16974] Memory cgroup out of memory: Killed process 27581 (syz.9.7191) total-vm:94056kB, anon-rss:1236kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 690.171111][T32667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 690.440170][T32748] loop8: detected capacity change from 0 to 128 [ 690.631017][T32764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8833'. [ 690.648782][T32764] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8833'. [ 691.256016][ T339] LUN: removable file: (no medium) [ 691.339023][ T343] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8848'. [ 691.423102][ T344] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8848'. [ 691.599261][ T341] syzkaller0: entered promiscuous mode [ 691.599333][ T341] syzkaller0: entered allmulticast mode [ 691.784608][ T354] netlink: 'syz.8.8853': attribute type 4 has an invalid length. [ 691.794295][ T354] netlink: 'syz.8.8853': attribute type 4 has an invalid length. [ 692.109041][ T369] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=369 comm=syz.1.8859 [ 692.109137][ T369] netlink: 1135 bytes leftover after parsing attributes in process `syz.1.8859'. [ 692.218611][ T372] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8861'. [ 692.256056][T24380] Bluetooth: hci0: Frame reassembly failed (-84) [ 692.301544][ T380] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8861'. [ 692.688410][ T392] loop1: detected capacity change from 0 to 512 [ 692.732722][ T392] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.759298][ T390] loop8: detected capacity change from 0 to 4096 [ 692.768338][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 692.768422][ T29] audit: type=1400 audit(28637.518:38167): avc: denied { write } for pid=391 comm="syz.1.8867" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 692.809532][ T390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 692.835102][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.889166][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.543822][ T424] loop8: detected capacity change from 0 to 512 [ 693.560494][ T426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8876'. [ 693.579803][ T424] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.8878: bg 0: block 5: invalid block bitmap [ 693.579843][ T424] loop8: lost filesystem error report for type 5 error -117 [ 693.580101][ T424] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 693.580129][ T424] loop8: lost filesystem error report for type 5 error -117 [ 693.580594][ T424] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8878: invalid indirect mapped block 3 (level 2) [ 693.580711][ T424] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 693.585426][ T424] EXT4-fs (loop8): 1 orphan inode deleted [ 693.585544][ T424] EXT4-fs (loop8): 1 truncate cleaned up [ 693.586670][ T424] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.609725][ T426] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8876'. [ 693.618261][ T424] EXT4-fs (loop8): shut down requested (0) [ 693.618756][ T29] audit: type=1400 audit(28638.368:38168): avc: denied { write } for pid=420 comm="syz.8.8878" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 693.776248][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 694.296420][ T3562] Bluetooth: hci0: command 0x1003 tx timeout [ 694.296465][T23305] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 694.639386][ T461] netlink: 276 bytes leftover after parsing attributes in process `syz.6.8889'. [ 695.229584][ T474] X25: diagnostic #0 - 00 00 00 [ 695.559958][ T29] audit: type=1400 audit(28640.318:38169): avc: denied { write } for pid=480 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.744830][ T29] audit: type=1400 audit(28640.498:38170): avc: denied { write } for pid=506 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 695.767498][ T510] LUN: removable file: (no medium) [ 696.120967][ T526] netlink: 31 bytes leftover after parsing attributes in process `syz.9.8906'. [ 696.140892][ T29] audit: type=1400 audit(28640.898:38171): avc: denied { write } for pid=514 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.252973][ T29] audit: type=1400 audit(28641.008:38172): avc: denied { write } for pid=531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 696.620055][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8923'. [ 696.639097][ T545] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8923'. [ 697.357547][ T561] loop1: detected capacity change from 0 to 2048 [ 697.393717][ T561] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.418972][ T29] audit: type=1400 audit(28642.178:38173): avc: denied { write } for pid=560 comm="syz.1.8918" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 697.489198][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.548988][ T568] syzkaller0: entered promiscuous mode [ 697.549094][ T568] syzkaller0: entered allmulticast mode [ 697.729583][ T580] netlink: 31 bytes leftover after parsing attributes in process `syz.1.8922'. [ 698.085166][ T594] netlink: 'syz.1.8928': attribute type 1 has an invalid length. [ 698.103264][ T594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 698.128593][ T599] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8930'. [ 698.325305][ T617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8937'. [ 698.404592][ T617] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8937'. [ 699.451274][ T638] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.451309][ T638] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.451508][ T638] bridge_slave_0: entered allmulticast mode [ 699.452168][ T638] bridge_slave_0: entered promiscuous mode [ 699.481190][ T638] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.481225][ T638] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.481407][ T638] bridge_slave_1: entered allmulticast mode [ 699.481961][ T638] bridge_slave_1: entered promiscuous mode [ 699.525690][ T638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.536554][ T638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.560222][ T638] team0: Port device team_slave_0 added [ 699.568060][ T638] team0: Port device team_slave_1 added [ 699.586153][ T638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.586206][ T638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.586248][ T638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.642404][ T638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.642427][ T638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.642475][ T638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 699.708525][ T638] hsr_slave_0: entered promiscuous mode [ 699.714893][ T638] hsr_slave_1: entered promiscuous mode [ 699.715228][ T638] debugfs: 'hsr0' already exists in 'hsr' [ 699.715242][ T638] Cannot create hsr debugfs directory [ 699.721921][ T700] netlink: 31 bytes leftover after parsing attributes in process `syz.8.8943'. [ 700.106575][ T638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.156803][ T638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.201777][ T638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.271056][ T638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 700.352649][ T638] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 700.362629][ T638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 700.364169][ T638] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 700.373505][ T638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.375854][ T638] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 700.382163][ T638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 700.383678][ T638] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 700.387906][ T638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 700.467547][ T638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.484053][ T638] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.495702][T22705] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.495889][T22705] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.510482][T22666] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.510588][T22666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.745250][ T638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.886797][ T638] veth0_vlan: entered promiscuous mode [ 700.896872][ T638] veth1_vlan: entered promiscuous mode [ 700.921906][ T638] veth0_macvtap: entered promiscuous mode [ 700.929643][ T638] veth1_macvtap: entered promiscuous mode [ 700.950069][ T638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.962056][ T638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.019430][ T737] netlink: 'syz.9.8960': attribute type 1 has an invalid length. [ 701.039051][ T733] loop1: detected capacity change from 0 to 512 [ 701.082929][ T733] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.111360][ T737] 8021q: adding VLAN 0 to HW filter on device bond6 [ 701.121103][T22665] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.121162][T22665] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.121288][T22665] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.121326][T22665] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.162603][ T29] audit: type=1400 audit(28645.918:38174): avc: denied { write } for pid=732 comm="syz.1.8959" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 701.239819][ T745] bond6: (slave veth3): Enslaving as an active interface with a down link [ 701.290353][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.402921][ T29] audit: type=1326 audit(28646.158:38175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 701.410209][ T29] audit: type=1326 audit(28646.168:38176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 701.410370][ T29] audit: type=1326 audit(28646.168:38177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 701.467854][ T29] audit: type=1326 audit(28646.218:38178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 701.467959][ T29] audit: type=1326 audit(28646.218:38179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 701.468053][ T29] audit: type=1326 audit(28646.218:38180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 701.474606][ T29] audit: type=1326 audit(28646.228:38181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 701.474702][ T29] audit: type=1326 audit(28646.228:38182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 701.474789][ T29] audit: type=1326 audit(28646.228:38183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=761 comm="syz.6.8955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 701.650853][ T766] loop9: detected capacity change from 0 to 1024 [ 701.682958][ T766] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 701.701013][ T766] EXT4-fs error (device loop9): ext4_validate_block_bitmap:445: comm syz.9.8957: bg 0: block 112: padding at end of block bitmap is not set [ 701.752646][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 701.831144][ T772] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8958'. [ 701.858455][ T772] bond7: entered promiscuous mode [ 701.858743][ T772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 701.917556][ T772] 8021q: adding VLAN 0 to HW filter on device bond7 [ 701.918096][ T772] bond7: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 701.939366][ T772] bond7: (slave ip6gre3): Error -95 calling set_mac_address [ 702.140684][ T785] loop9: detected capacity change from 0 to 512 [ 702.141126][ T785] EXT4-fs: inline encryption not supported [ 702.157400][ T785] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 702.177885][ T785] EXT4-fs (loop9): orphan cleanup on readonly fs [ 702.177921][ T785] EXT4-fs error (device loop9): ext4_orphan_get:1403: comm syz.9.8976: inode #15: comm syz.9.8976: iget: illegal inode # [ 702.178007][ T785] loop9: lost filesystem error report for type 5 error -117 [ 702.178589][ T785] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.8976: couldn't read orphan inode 15 (err -117) [ 702.178684][ T785] loop9: lost filesystem error report for type 5 error -117 [ 702.180257][ T785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 702.249991][ T785] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 702.250404][ T785] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 702.320250][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 703.538282][T22666] Bluetooth: hci0: Frame reassembly failed (-84) [ 703.630839][ T830] loop1: detected capacity change from 0 to 512 [ 703.651609][ T830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 703.754335][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 704.012385][ T738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.420580][ T849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8990'. [ 704.442128][ T849] ip6gre1: entered promiscuous mode [ 704.442177][ T849] ip6gre1: entered allmulticast mode [ 704.467617][ T849] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8990'. [ 704.568968][ T854] netlink: 'syz.1.9002': attribute type 1 has an invalid length. [ 704.618337][ T854] 8021q: adding VLAN 0 to HW filter on device bond2 [ 704.727866][ T858] bond2: (slave veth3): Enslaving as an active interface with a down link [ 705.034347][ T867] loop8: detected capacity change from 0 to 512 [ 705.060197][ T867] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 705.123567][ T864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.123701][ T864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.359877][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 705.565423][T23305] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 705.950985][ T888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9004'. [ 705.966151][ T888] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9004'. [ 706.548189][ T902] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9018'. [ 707.197016][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 707.197044][ T29] audit: type=1326 audit(28651.958:38281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 707.197092][ T29] audit: type=1326 audit(28651.958:38282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 707.197132][ T29] audit: type=1326 audit(28651.958:38283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 707.255610][ T29] audit: type=1326 audit(28651.958:38284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 707.255734][ T29] audit: type=1326 audit(28651.958:38285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 707.255896][ T29] audit: type=1326 audit(28651.958:38286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 707.255990][ T29] audit: type=1326 audit(28651.958:38287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 707.256079][ T29] audit: type=1326 audit(28651.958:38288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 707.256154][ T29] audit: type=1326 audit(28651.958:38289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x7ffc0000 [ 707.256273][ T29] audit: type=1326 audit(28651.958:38290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=952 comm="syz.1.9021" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f912d8ee0d9 code=0x7ffc0000 [ 707.694605][ T981] syzkaller0: entered promiscuous mode [ 707.694637][ T981] syzkaller0: entered allmulticast mode [ 707.918663][ T995] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9017'. [ 707.935221][ T995] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9017'. [ 708.310337][ T1006] netlink: 'syz.8.9023': attribute type 1 has an invalid length. [ 708.351369][ T1006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 708.518240][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9027'. [ 708.518308][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9027'. [ 708.518532][ T1020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9027'. [ 712.067522][ T1121] loop9: detected capacity change from 0 to 1024 [ 712.068395][ T1121] EXT4-fs: Ignoring removed mblk_io_submit option [ 712.068537][ T1121] EXT4-fs: Ignoring removed orlov option [ 712.075050][ T1121] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 712.101776][ T1121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.268565][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 712.429099][ T1140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9068'. [ 712.453749][ T1144] netlink: 'syz.6.9070': attribute type 1 has an invalid length. [ 712.464956][ T1140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9068'. [ 712.514502][T24406] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.514554][T24406] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.514636][T24406] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.514675][T24406] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 712.561548][ T1144] gretap0: entered allmulticast mode [ 712.587513][ T1144] bond10: (slave gretap0): making interface the new active one [ 712.603141][ T1144] bond10: (slave gretap0): Enslaving as an active interface with an up link [ 712.684020][ T1152] loop9: detected capacity change from 0 to 4096 [ 712.692499][ T1152] EXT4-fs: Ignoring removed mblk_io_submit option [ 712.729607][ T1152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 712.759510][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 712.759613][ T29] audit: type=1400 audit(28657.518:38298): avc: denied { write } for pid=1151 comm="syz.9.9072" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 712.831918][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.126126][ T29] audit: type=1326 audit(28657.888:38299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 713.135323][ T29] audit: type=1326 audit(28657.898:38300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 713.135451][ T29] audit: type=1326 audit(28657.898:38301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 713.147081][ T29] audit: type=1326 audit(28657.908:38302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 713.151759][ T29] audit: type=1326 audit(28657.908:38303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 713.151842][ T29] audit: type=1326 audit(28657.908:38304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 713.157831][ T29] audit: type=1326 audit(28657.918:38305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 713.158004][ T29] audit: type=1326 audit(28657.918:38306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 713.179603][ T29] audit: type=1326 audit(28657.938:38307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1176 comm="syz.9.9093" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 713.463053][ T1181] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9083'. [ 713.843414][T22666] Bluetooth: hci0: Frame reassembly failed (-84) [ 714.733284][ T1232] loop8: detected capacity change from 0 to 512 [ 714.772530][ T1232] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 714.987235][T11348] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 715.894080][ T3562] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 716.286702][T22737] rpcbind: server 127.0.0.1 not responding, timed out [ 718.167472][ T1325] loop1: detected capacity change from 0 to 512 [ 718.174164][ T1325] EXT4-fs: Ignoring removed bh option [ 718.189471][ T1325] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.189511][ T1325] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 718.189541][ T1325] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9133: Corrupt directory, running e2fsck is recommended [ 718.229649][ T1325] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 718.229719][ T1325] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.9133: corrupted in-inode xattr: e_name out of bounds [ 718.229813][ T1325] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 718.232494][ T1325] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.9133: couldn't read orphan inode 15 (err -117) [ 718.232591][ T1325] loop1: lost filesystem error report for type 5 error -117 [ 718.233822][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 718.233879][ C1] EXT4-fs (loop1): initial error at time 28662: ext4_iget_extra_inode:5210: inode 15 [ 718.233963][ C1] EXT4-fs (loop1): last error at time 28662: ext4_orphan_get:1408 [ 718.236048][ T1325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 718.304256][ T1325] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.304386][ T1325] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 718.304445][ T1325] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9133: Corrupt directory, running e2fsck is recommended [ 718.344897][ T1325] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.344982][ T1325] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 718.345034][ T1325] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9133: Corrupt directory, running e2fsck is recommended [ 718.387366][ T1325] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.387441][ T1325] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 718.387543][ T1325] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.9133: Corrupt directory, running e2fsck is recommended [ 718.435191][ T1325] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 718.491615][ T1325] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 3: comm syz.1.9133: path /181/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 718.492514][ T1325] EXT4-fs error (device loop1): ext4_readdir:280: inode #2: block 8: comm syz.1.9133: path /181/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 718.603121][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 718.851353][ T1337] syzkaller0: entered promiscuous mode [ 718.851386][ T1337] syzkaller0: entered allmulticast mode [ 719.711355][ T1361] netlink: 'syz.1.9160': attribute type 39 has an invalid length. [ 725.756919][ T1438] Set syz1 is full, maxelem 4 reached [ 725.991064][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 725.991086][ T29] audit: type=1326 audit(28670.748:38353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x7ffc0000 [ 725.991115][ T29] audit: type=1326 audit(28670.748:38354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 725.991176][ T29] audit: type=1326 audit(28670.748:38355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 726.018760][ T29] audit: type=1326 audit(28670.778:38356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 726.018887][ T29] audit: type=1326 audit(28670.778:38357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x7ffc0000 [ 726.019029][ T29] audit: type=1326 audit(28670.778:38358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 726.027194][ T29] audit: type=1326 audit(28670.788:38359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x7ffc0000 [ 726.027288][ T29] audit: type=1326 audit(28670.788:38360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 726.055170][ T29] audit: type=1326 audit(28670.808:38361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f1168046f31 code=0x7ffc0000 [ 726.055271][ T29] audit: type=1326 audit(28670.808:38362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1450 comm="syz.8.9187" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f116727e0d9 code=0x7ffc0000 [ 726.395090][ T1456] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9190'. [ 726.481370][ T1461] loop1: detected capacity change from 0 to 512 [ 726.504458][ T1461] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 726.526727][ T1461] EXT4-fs (loop1): 1 truncate cleaned up [ 726.538050][ T1461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 726.653359][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 727.607547][ T1499] loop1: detected capacity change from 0 to 512 [ 727.613821][ T1499] EXT4-fs: Ignoring removed nobh option [ 727.645563][ T1499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.840068][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 728.348908][ T1522] loop8: detected capacity change from 0 to 512 [ 728.419299][ T1528] loop8: detected capacity change from 0 to 512 [ 729.404682][T22704] Bluetooth: hci0: Frame reassembly failed (-84) [ 730.199104][ T1565] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.199184][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.204127][ T1565] bridge_slave_0: entered allmulticast mode [ 730.205063][ T1565] bridge_slave_0: entered promiscuous mode [ 730.210610][ T1565] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.213715][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.214037][ T1565] bridge_slave_1: entered allmulticast mode [ 730.215015][ T1565] bridge_slave_1: entered promiscuous mode [ 730.285324][ T1565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 730.293696][ T1565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.340997][ T1565] team0: Port device team_slave_0 added [ 730.348876][ T1565] team0: Port device team_slave_1 added [ 730.402368][ T1565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.402404][ T1565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.402451][ T1565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.410326][ T1565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.410371][ T1565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.410478][ T1565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.543963][ T1565] hsr_slave_0: entered promiscuous mode [ 730.548476][ T1565] hsr_slave_1: entered promiscuous mode [ 730.548942][ T1565] debugfs: 'hsr0' already exists in 'hsr' [ 730.548981][ T1565] Cannot create hsr debugfs directory [ 730.988979][ T1565] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 730.989021][ T1565] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.068870][ T1565] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 731.068916][ T1565] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.139286][ T1565] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 731.139359][ T1565] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.185054][ T1589] lo: entered allmulticast mode [ 731.191765][ T1589] lo: left allmulticast mode [ 731.213057][ T1565] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 731.213144][ T1565] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.365464][ T1565] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 731.374726][ T1565] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 731.382422][ T1565] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 731.397314][ T1565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 731.406012][ T1565] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 731.420148][ T1565] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 731.427802][ T1565] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 731.442368][ T1565] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 731.482709][ T3562] Bluetooth: hci0: command 0x1003 tx timeout [ 731.482829][T23305] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 731.624083][ T1565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.656540][ T1565] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.674043][T22717] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.674115][T22717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.701492][T22704] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.701599][T22704] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.087789][ T1565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.313530][ T1565] veth0_vlan: entered promiscuous mode [ 732.320405][ T1565] veth1_vlan: entered promiscuous mode [ 732.339354][ T1565] veth0_macvtap: entered promiscuous mode [ 732.346651][ T1565] veth1_macvtap: entered promiscuous mode [ 732.357591][ T1565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.370013][ T1565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 732.393485][T22704] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.393563][T22704] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.393688][T22704] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.393843][T22704] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 732.500174][ T1639] syzkaller1: entered promiscuous mode [ 732.500278][ T1639] syzkaller1: entered allmulticast mode [ 733.398854][ T1666] lo: entered allmulticast mode [ 733.408656][ T1666] lo: left allmulticast mode [ 733.657133][T22717] Bluetooth: hci0: Frame reassembly failed (-84) [ 734.175243][ T1677] loop9: detected capacity change from 0 to 512 [ 734.181048][ T1677] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 734.191529][ T1677] EXT4-fs (loop9): 1 truncate cleaned up [ 734.192606][ T1677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 734.504453][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 734.554713][ T1683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9256'. [ 734.580568][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 734.580612][ T29] audit: type=1326 audit(28679.338:38513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 734.580737][ T29] audit: type=1326 audit(28679.338:38514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 734.580833][ T29] audit: type=1326 audit(28679.338:38515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 734.587592][ T29] audit: type=1326 audit(28679.348:38516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 734.587691][ T29] audit: type=1326 audit(28679.348:38517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 734.587778][ T29] audit: type=1326 audit(28679.348:38518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 734.589981][ T1683] bond1: entered promiscuous mode [ 734.590344][ T1683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.597715][ T29] audit: type=1326 audit(28679.358:38519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 734.597801][ T29] audit: type=1326 audit(28679.358:38520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 734.651446][ T29] audit: type=1326 audit(28679.408:38521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 734.651554][ T29] audit: type=1326 audit(28679.408:38522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1684 comm="syz.9.9253" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 734.745371][ T1683] 8021q: adding VLAN 0 to HW filter on device bond1 [ 734.777268][ T1683] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 734.816549][ T1683] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 735.722413][T23305] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 736.605606][ T1673] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 737.861368][ T1750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9285'. [ 739.806507][ T1776] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9293'. [ 739.806714][ T1776] netlink: 12 bytes leftover after parsing attributes in process `syz.9.9293'. [ 743.276218][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 743.276259][ T29] audit: type=1400 audit(28688.037:38581): avc: denied { write } for pid=1782 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.355997][ T29] audit: type=1400 audit(28688.117:38582): avc: denied { write } for pid=1782 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 743.403657][ T29] audit: type=1400 audit(28688.167:38583): avc: denied { write } for pid=1796 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 745.220994][ T29] audit: type=1326 audit(28689.977:38584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.9.9299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 745.221158][ T29] audit: type=1326 audit(28689.977:38585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.9.9299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 745.221522][ T29] audit: type=1326 audit(28689.987:38586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.9.9299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 745.221664][ T29] audit: type=1326 audit(28689.987:38587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.9.9299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 745.221737][ T29] audit: type=1326 audit(28689.987:38588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.9.9299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 745.274112][ T29] audit: type=1326 audit(28690.037:38589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.9.9299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fd15d7d9f31 code=0x7ffc0000 [ 745.274237][ T29] audit: type=1326 audit(28690.037:38590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1800 comm="syz.9.9299" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fd15ca0e0d9 code=0x7ffc0000 [ 745.569890][ T1807] loop8: detected capacity change from 0 to 8192 [ 745.584511][ T1807] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 745.880196][ T1827] netlink: 28 bytes leftover after parsing attributes in process `syz.9.9306'. [ 745.992616][T22704] bridge_slave_1: left allmulticast mode [ 745.992650][T22704] bridge_slave_1: left promiscuous mode [ 745.992919][T22704] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.005393][T22704] bridge_slave_0: left allmulticast mode [ 746.005457][T22704] bridge_slave_0: left promiscuous mode [ 746.005845][T22704] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.315355][T22704] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.333962][T22704] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.345613][T22704] bond0 (unregistering): Released all slaves [ 746.633296][T22704] hsr_slave_0: left promiscuous mode [ 746.639397][T22704] hsr_slave_1: left promiscuous mode [ 746.640262][T22704] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 746.640290][T22704] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 746.661269][T22704] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 746.661292][T22704] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 746.688230][T22704] veth1_macvtap: left promiscuous mode [ 746.688266][T22704] veth0_macvtap: left promiscuous mode [ 746.688333][T22704] veth1_vlan: left promiscuous mode [ 746.688423][T22704] veth0_vlan: left promiscuous mode [ 747.064264][T22704] team0 (unregistering): Port device team_slave_1 removed [ 747.082958][T22704] team0 (unregistering): Port device team_slave_0 removed [ 751.994953][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 751.994991][ T29] audit: type=1400 audit(28696.757:38625): avc: denied { write } for pid=1864 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.085538][ T29] audit: type=1400 audit(28696.847:38626): avc: denied { write } for pid=1864 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.141713][ T29] audit: type=1400 audit(28696.907:38627): avc: denied { write } for pid=1878 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 752.947144][ T1905] loop1: detected capacity change from 0 to 2048 [ 752.947496][ T1905] ext4: Unknown parameter 'obj_user' [ 753.801133][ T1924] loop1: detected capacity change from 0 to 512 [ 753.830574][ T1924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 753.838882][ T29] audit: type=1400 audit(28698.597:38628): avc: denied { write } for pid=1920 comm="syz.1.9332" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 754.218026][ T1938] syzkaller0: entered promiscuous mode [ 754.218078][ T1938] syzkaller0: entered allmulticast mode [ 754.282899][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.605089][ T1954] loop8: detected capacity change from 0 to 512 [ 754.637917][ T1954] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 754.672175][ T29] audit: type=1400 audit(28699.427:38629): avc: denied { write } for pid=1952 comm="syz.8.9344" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 755.396806][ T1959] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #18: comm syz.8.9344: corrupted inode contents [ 755.396924][ T1959] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 755.397598][ T1959] EXT4-fs error (device loop8): ext4_dirty_inode:6731: inode #18: comm syz.8.9344: mark_inode_dirty error [ 755.397678][ T1959] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 755.398107][ T1959] EXT4-fs error (device loop8): ext4_do_update_inode:5801: inode #18: comm syz.8.9344: corrupted inode contents [ 755.398185][ T1959] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 755.398911][ T1959] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #18: comm syz.8.9344: mark_inode_dirty error [ 755.398992][ T1959] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 755.399411][ T1959] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2965: inode #18: comm syz.8.9344: mark inode dirty (error -117) [ 755.399496][ T1959] loop8: lost file I/O error report for ino 18 type 5 pos 0x0 len 0x0 error -117 [ 755.400084][ T1959] EXT4-fs warning (device loop8): ext4_evict_inode:288: xattr delete (err -117) [ 755.556896][ T1565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 755.698905][ T1886] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 757.462606][ T2027] loop8: detected capacity change from 0 to 1024 [ 757.501517][ T2027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.518372][ T29] audit: type=1400 audit(28702.277:38630): avc: denied { write } for pid=2025 comm="syz.8.9379" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.543866][ T29] audit: type=1400 audit(28702.307:38631): avc: denied { write } for pid=2025 comm="syz.8.9379" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.543916][ T29] audit: type=1400 audit(28702.307:38632): avc: denied { write } for pid=2025 comm="syz.8.9379" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.595334][ T2030] loop9: detected capacity change from 0 to 2048 [ 757.605087][ T2030] ext4: Unknown parameter 'obj_user' [ 757.622528][ T1565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.665388][ T29] audit: type=1326 audit(28702.427:38633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2038 comm="syz.1.9373" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=228 compat=0 ip=0x7f912e6b4f31 code=0x0 [ 759.765696][ T2071] loop1: detected capacity change from 0 to 1024 [ 759.785055][ T2073] loop9: detected capacity change from 0 to 512 [ 759.802457][ T2073] EXT4-fs: Ignoring removed bh option [ 759.809325][ T2071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 759.832476][ T2073] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 759.832514][ T2073] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 759.832538][ T2073] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.9386: Corrupt directory, running e2fsck is recommended [ 759.870478][ T29] audit: type=1400 audit(28704.637:38634): avc: denied { write } for pid=2070 comm="syz.1.9385" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 759.892556][ T2073] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 759.892608][ T2073] EXT4-fs error (device loop9): ext4_iget_extra_inode:5210: inode #15: comm syz.9.9386: corrupted in-inode xattr: e_name out of bounds [ 759.892640][ T2073] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 759.893154][ T2073] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.9386: couldn't read orphan inode 15 (err -117) [ 759.893299][ T2073] loop9: lost filesystem error report for type 5 error -117 [ 759.894550][ T2073] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 759.900916][ T2006] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 759.914409][ T29] audit: type=1400 audit(28704.677:38635): avc: denied { write } for pid=2070 comm="syz.1.9385" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 759.914518][ T29] audit: type=1400 audit(28704.677:38636): avc: denied { write } for pid=2070 comm="syz.1.9385" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 759.967905][ T2073] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 759.967931][ T2073] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 759.967951][ T2073] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.9386: Corrupt directory, running e2fsck is recommended [ 760.004385][ T2073] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 760.004465][ T2073] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 760.004526][ T2073] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.9386: Corrupt directory, running e2fsck is recommended [ 760.032067][ T2073] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 760.032164][ T2073] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it [ 760.032283][ T2073] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.9386: Corrupt directory, running e2fsck is recommended [ 760.067754][ T2073] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 760.101107][ T2073] EXT4-fs error (device loop9): ext4_readdir:280: inode #2: block 3: comm syz.9.9386: path /1117/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 760.103043][ T2073] EXT4-fs error (device loop9): ext4_readdir:280: inode #2: block 8: comm syz.9.9386: path /1117/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 760.183796][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.263704][T16974] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 760.358853][ T2091] loop9: detected capacity change from 0 to 512 [ 760.399375][ T29] audit: type=1400 audit(28705.157:38637): avc: denied { write } for pid=2081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.470416][ T29] audit: type=1400 audit(28705.237:38638): avc: denied { write } for pid=2104 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 760.569124][ T29] audit: type=1326 audit(28705.327:38639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2113 comm="syz.8.9406" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7fbfbe51ef31 code=0x7ffc0000 [ 760.819081][ T2137] netlink: 'syz.8.9412': attribute type 18 has an invalid length. [ 760.819104][ T2137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9412'. [ 760.830070][ T2137] netlink: 'syz.8.9412': attribute type 18 has an invalid length. [ 760.830123][ T2137] netlink: 4 bytes leftover after parsing attributes in process `syz.8.9412'. [ 760.840200][T24395] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.840335][T24395] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.840436][T24395] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 760.840613][T24395] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.224400][T22717] IPVS: starting estimator thread 0... [ 761.237720][ T2169] netlink: 232 bytes leftover after parsing attributes in process `syz.0.9413'. [ 761.311441][ T2171] IPVS: using max 432 ests per chain, 21600 per kthread [ 761.374434][ T2175] xt_hashlimit: size too large, truncated to 1048576 [ 761.564596][ T2147] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.564632][ T2147] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.564777][ T2147] bridge_slave_0: entered allmulticast mode [ 761.566408][ T2147] bridge_slave_0: entered promiscuous mode [ 761.571179][ T2147] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.571266][ T2147] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.571453][ T2147] bridge_slave_1: entered allmulticast mode [ 761.572546][ T2147] bridge_slave_1: entered promiscuous mode [ 761.608526][ T2147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.612486][ T2147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.641911][ T2147] team0: Port device team_slave_0 added [ 761.643117][ T2147] team0: Port device team_slave_1 added [ 761.664314][ T2147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.664335][ T2147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.664401][ T2147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.665364][ T2147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.665378][ T2147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.665480][ T2147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.776642][ T2147] hsr_slave_0: entered promiscuous mode [ 761.777099][ T2147] hsr_slave_1: entered promiscuous mode [ 761.789842][ T2147] debugfs: 'hsr0' already exists in 'hsr' [ 761.789865][ T2147] Cannot create hsr debugfs directory [ 762.274379][ T2147] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 762.285017][ T2147] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 762.293352][ T2147] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 762.302250][ T2147] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 762.310422][ T2147] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 762.320155][ T2147] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 762.327950][ T2147] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 762.336973][ T2147] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 762.416142][ T2147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.435767][ T2147] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.448326][T22717] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.448377][T22717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.463566][T22717] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.463621][T22717] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.551399][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 762.551473][ T29] audit: type=1400 audit(28707.317:38691): avc: denied { write } for pid=2239 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.843563][ T2147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 762.883388][ T29] audit: type=1400 audit(28707.647:38692): avc: denied { write } for pid=2248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 762.959218][ T29] audit: type=1400 audit(28707.717:38693): avc: denied { write } for pid=2274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.194456][ T29] audit: type=1400 audit(28707.957:38694): avc: denied { write } for pid=2279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.218723][ T2147] veth0_vlan: entered promiscuous mode [ 763.234859][ T2147] veth1_vlan: entered promiscuous mode [ 763.256711][ T29] audit: type=1400 audit(28708.017:38695): avc: denied { write } for pid=2300 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.298674][ T2147] veth0_macvtap: entered promiscuous mode [ 763.308138][ T2147] veth1_macvtap: entered promiscuous mode [ 763.353872][ T2147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 763.368716][ T2147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 763.429978][T24395] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.431567][T22698] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.431685][T22698] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.431791][T22698] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.613983][ T29] audit: type=1400 audit(28708.377:38696): avc: denied { write } for pid=2302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.642839][ T2322] loop7: detected capacity change from 0 to 512 [ 763.661009][ T2322] EXT4-fs: Ignoring removed bh option [ 763.678202][ T2322] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 763.678245][ T2322] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 763.678276][ T2322] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.9402: Corrupt directory, running e2fsck is recommended [ 763.691199][ T2322] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -117 [ 763.692814][ T2322] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #15: comm syz.7.9402: corrupted in-inode xattr: e_name out of bounds [ 763.692896][ T2322] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 763.697085][ T2322] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.9402: couldn't read orphan inode 15 (err -117) [ 763.697166][ T2322] loop7: lost filesystem error report for type 5 error -117 [ 763.698542][ T2322] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 763.788466][ T2322] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 763.788512][ T2322] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 763.788578][ T2322] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.9402: Corrupt directory, running e2fsck is recommended [ 763.816815][ T2322] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 763.816922][ T2322] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 763.816997][ T2322] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.9402: Corrupt directory, running e2fsck is recommended [ 763.849728][ T2322] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 763.849803][ T2322] EXT4-fs warning (device loop7): dx_probe:849: Enable large directory feature to access it [ 763.849864][ T2322] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.9402: Corrupt directory, running e2fsck is recommended [ 763.890222][ T2322] EXT4-fs warning (device loop7): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 763.913834][ T29] audit: type=1400 audit(28708.677:38697): avc: denied { write } for pid=2330 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.932204][ T2322] EXT4-fs error (device loop7): ext4_readdir:280: inode #2: block 3: comm syz.7.9402: path /0/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 763.936116][ T2322] EXT4-fs error (device loop7): ext4_readdir:280: inode #2: block 8: comm syz.7.9402: path /0/file0: bad entry in directory: inode out of bounds - offset=0, inode=16810477, rec_len=1024, size=1024 fake=0 [ 764.038957][ T2147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 764.271552][ T29] audit: type=1400 audit(28709.037:38698): avc: denied { write } for pid=2335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.363376][ T29] audit: type=1400 audit(28709.127:38699): avc: denied { write } for pid=2358 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 764.519099][ T2365] loop7: detected capacity change from 0 to 512 [ 764.522045][ T2365] EXT4-fs: Ignoring removed nobh option [ 764.543962][ T2365] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 764.564735][ T2365] EXT4-fs (loop7): 1 truncate cleaned up [ 764.575053][ T2365] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 764.605261][ T29] audit: type=1400 audit(28709.367:38700): avc: denied { write } for pid=2364 comm="syz.7.9439" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 764.842573][ T2147] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.401898][ T2440] loop8: detected capacity change from 0 to 2048 [ 765.427782][ T2440] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 765.481496][ T1565] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 765.513422][ T2452] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 765.513533][ T2452] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.885074][ T2486] loop1: detected capacity change from 0 to 512 [ 765.892463][ T2486] EXT4-fs: Ignoring removed nobh option [ 765.899434][ T2486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 765.914149][ T2486] EXT4-fs (loop1): 1 truncate cleaned up [ 765.914651][ T2486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.174103][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.208896][ T2492] loop1: detected capacity change from 0 to 512 [ 766.211782][ T2492] EXT4-fs: Ignoring removed mblk_io_submit option [ 766.221215][ T2492] EXT4-fs error (device loop1): ext4_xattr_inode_iget:473: comm syz.1.9457: EA inode 11 has unexpected i_nlink=0 ref_count=1 [ 766.221391][ T2492] loop1: lost filesystem error report for type 5 error -117 [ 766.221828][ T2492] EXT4-fs (loop1): Remounting filesystem read-only [ 766.221954][ T2492] EXT4-fs (loop1): 1 orphan inode deleted [ 766.222970][ T2492] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 766.243827][ T2492] netlink: 232 bytes leftover after parsing attributes in process `syz.1.9457'. [ 766.281239][T24395] IPVS: starting estimator thread 0... [ 766.281360][T30674] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.379509][ T2494] IPVS: using max 432 ests per chain, 21600 per kthread [ 767.221406][ T2528] loop1: detected capacity change from 0 to 128 [ 767.706329][ T2380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 767.981461][T24404] IPVS: starting estimator thread 0... [ 767.990877][ T2553] netlink: 232 bytes leftover after parsing attributes in process `syz.6.9476'. [ 768.069366][ T2556] IPVS: using max 432 ests per chain, 21600 per kthread [ 768.891477][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 768.891506][ T29] audit: type=1326 audit(28713.657:38715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2583 comm="syz.7.9490" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=228 compat=0 ip=0x7fca403c4f31 code=0x0 [ 769.784748][ T29] audit: type=1326 audit(28714.547:38716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 769.784794][ T29] audit: type=1326 audit(28714.547:38717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 769.784850][ T29] audit: type=1326 audit(28714.547:38718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 769.862856][ T29] audit: type=1326 audit(28714.627:38719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 769.863000][ T29] audit: type=1326 audit(28714.627:38720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 769.888641][ T29] audit: type=1326 audit(28714.647:38721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 769.888771][ T29] audit: type=1326 audit(28714.647:38722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 769.888840][ T29] audit: type=1326 audit(28714.647:38723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7f8953c7ef31 code=0x7ffc0000 [ 769.888868][ T29] audit: type=1326 audit(28714.647:38724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2621 comm="syz.6.9504" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8953a1e0d9 code=0x7ffc0000 [ 771.634404][ T2666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9521'. [ 772.811699][ T2687] xt_hashlimit: size too large, truncated to 1048576 [ 773.509996][ T2724] loop8: detected capacity change from 0 to 8192 [ 773.740275][ T2729] loop1: detected capacity change from 0 to 256 [ 773.749436][ T2729] FAT-fs (loop1): data area starts beyond volume (274 > 64) [ 773.749489][ T2729] FAT-fs (loop1): Can't find a valid FAT filesystem [ 774.383771][ T2736] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 776.432970][ T2717] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 776.574819][ T2769] xt_hashlimit: size too large, truncated to 1048576 [ 776.851669][ T2786] loop7: detected capacity change from 0 to 8192 [ 777.166287][ T2805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9573'. [ 777.434992][ T2786] ================================================================== [ 777.435038][ T2786] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 777.435086][ T2786] [ 777.435093][ T2786] write to 0xffff8881004a967c of 4 bytes by task 2797 on cpu 1: [ 777.435112][ T2786] xas_set_mark+0x12b/0x140 [ 777.435140][ T2786] __folio_start_writeback+0x16b/0x370 [ 777.435177][ T2786] __mpage_writepages+0xd92/0x1370 [ 777.435210][ T2786] fat_writepages+0x26/0x30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 777.435238][ T2786] do_writepages+0x1b9/0x300 [ 777.435263][ T2786] file_write_and_wait_range+0x178/0x2f0 [ 777.435304][ T2786] simple_fsync_noflush+0x42/0x120 [ 777.435366][ T2786] fat_file_fsync+0x7e/0x100 [ 777.435395][ T2786] vfs_fsync_range+0xc5/0xe0 [ 777.435411][ T2786] generic_file_write_iter+0x1a3/0x1f0 [ 777.435441][ T2786] iter_file_splice_write+0x6a0/0xa60 [ 777.435481][ T2786] direct_splice_actor+0x158/0x280 [ 777.435519][ T2786] splice_direct_to_actor+0x2f9/0x680 [ 777.435550][ T2786] do_splice_direct+0x119/0x1a0 [ 777.435587][ T2786] do_sendfile+0x37d/0x640 [ 777.435631][ T2786] __x64_sys_sendfile64+0x105/0x150 [ 777.435688][ T2786] x64_sys_call+0x1015/0x2550 [ 777.435716][ T2786] do_syscall_64+0x112/0x360 [ 777.435741][ T2786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.435768][ T2786] [ 777.435776][ T2786] read to 0xffff8881004a967c of 4 bytes by task 2786 on cpu 0: [ 777.435799][ T2786] __writeback_single_inode+0x208/0x790 [ 777.435839][ T2786] writeback_single_inode+0x16d/0x410 [ 777.435867][ T2786] sync_inode_metadata+0x6e/0xa0 [ 777.435900][ T2786] simple_fsync_noflush+0xdb/0x120 [ 777.435943][ T2786] fat_file_fsync+0x7e/0x100 [ 777.435976][ T2786] vfs_fsync_range+0xc5/0xe0 [ 777.435994][ T2786] generic_file_write_iter+0x1a3/0x1f0 [ 777.436018][ T2786] iter_file_splice_write+0x6a0/0xa60 [ 777.436054][ T2786] direct_splice_actor+0x158/0x280 [ 777.436092][ T2786] splice_direct_to_actor+0x2f9/0x680 [ 777.436124][ T2786] do_splice_direct+0x119/0x1a0 [ 777.436156][ T2786] do_sendfile+0x37d/0x640 [ 777.436198][ T2786] __x64_sys_sendfile64+0x105/0x150 [ 777.436238][ T2786] x64_sys_call+0x1015/0x2550 [ 777.436263][ T2786] do_syscall_64+0x112/0x360 [ 777.436286][ T2786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.436328][ T2786] [ 777.436342][ T2786] value changed: 0x05000021 -> 0x02000021 [ 777.436387][ T2786] [ 777.436391][ T2786] Reported by Kernel Concurrency Sanitizer on: [ 777.436404][ T2786] CPU: 0 UID: 0 PID: 2786 Comm: syz.7.9565 Not tainted syzkaller #0 PREEMPT(lazy) [ 777.436431][ T2786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 777.436454][ T2786] ================================================================== [ 777.496232][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 777.496281][ T29] audit: type=1400 audit(28722.257:38745): avc: denied { write } for pid=3285 comm="syz-executor" path="pipe:[1516]" dev="pipefs" ino=1516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 778.173242][T26738] bridge0: port 3(syz_tun) entered disabled state [ 778.185299][T26738] syz_tun (unregistering): left allmulticast mode [ 778.185350][T26738] syz_tun (unregistering): left promiscuous mode [ 778.185402][T26738] bridge0: port 3(syz_tun) entered disabled state [ 778.200174][T24395] smc: removing ib device syz1 [ 778.216733][T30717] syz1: Port: 1 Link DOWN [ 778.256365][T22717] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.256428][T22717] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.348387][T22717] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.348461][T22717] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.390840][T22717] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.390914][T22717] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.474490][T22717] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 778.474572][T22717] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.690480][T22717] bridge_slave_1: left allmulticast mode [ 778.690539][T22717] bridge_slave_1: left promiscuous mode [ 778.690797][T22717] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.735508][T22717] bridge_slave_0: left allmulticast mode [ 778.735581][T22717] bridge_slave_0: left promiscuous mode [ 778.735803][T22717] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.941790][T22717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 778.952005][T22717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 778.957465][T22717] bond0 (unregistering): Released all slaves [ 778.970285][ T29] audit: type=1400 audit(28723.737:38746): avc: denied { write } for pid=2815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.029136][ T29] audit: type=1400 audit(28723.797:38747): avc: denied { write } for pid=2826 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.094478][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 779.125675][T22717] hsr_slave_0: left promiscuous mode [ 779.131403][T22717] hsr_slave_1: left promiscuous mode [ 779.132307][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.132330][T22717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 779.133536][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.133578][T22717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 779.145947][T22717] veth1_macvtap: left promiscuous mode [ 779.146026][T22717] veth0_macvtap: left promiscuous mode [ 779.146258][T22717] veth1_vlan: left promiscuous mode [ 779.146366][T22717] veth0_vlan: left promiscuous mode [ 779.304026][T22717] team0 (unregistering): Port device team_slave_1 removed [ 779.312640][T22717] team0 (unregistering): Port device team_slave_0 removed [ 779.436550][ T29] audit: type=1400 audit(28724.197:38748): avc: denied { write } for pid=2829 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.480855][ T29] audit: type=1400 audit(28724.247:38749): avc: denied { write } for pid=2840 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.519173][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 779.621405][ T29] audit: type=1400 audit(28724.387:38750): avc: denied { write } for pid=2843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.666484][ T29] audit: type=1400 audit(28724.427:38751): avc: denied { write } for pid=2854 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.704744][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 779.723571][T22717] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.752476][T22717] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.811489][T22717] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.839819][ T29] audit: type=1400 audit(28724.607:38752): avc: denied { write } for pid=2857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.864959][T22717] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.885762][ T29] audit: type=1400 audit(28724.647:38753): avc: denied { write } for pid=2868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.934985][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 779.962652][T22717] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.011439][T22717] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.073811][T22717] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.101201][ T29] audit: type=1400 audit(28724.867:38754): avc: denied { write } for pid=2872 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.141961][T22717] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 780.163251][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 780.226131][T22717] bridge_slave_1: left allmulticast mode [ 780.226171][T22717] bridge_slave_1: left promiscuous mode [ 780.226531][T22717] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.238229][T22717] bridge_slave_0: left allmulticast mode [ 780.238363][T22717] bridge_slave_0: left promiscuous mode [ 780.238640][T22717] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.263475][T22717] bridge_slave_1: left allmulticast mode [ 780.263525][T22717] bridge_slave_1: left promiscuous mode [ 780.263801][T22717] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.275428][T22717] bridge_slave_0: left allmulticast mode [ 780.275482][T22717] bridge_slave_0: left promiscuous mode [ 780.275749][T22717] bridge0: port 1(bridge_slave_0) entered disabled state [ 780.425631][T22717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.437500][T22717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.447346][T22717] bond0 (unregistering): Released all slaves [ 780.477230][T22717] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 780.486840][T22717] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.497777][T22717] bond0 (unregistering): Released all slaves [ 780.506013][T22717] bond1 (unregistering): Released all slaves [ 780.515436][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 780.636312][T22717] hsr_slave_0: left promiscuous mode [ 780.642031][T22717] hsr_slave_1: left promiscuous mode [ 780.642798][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.642841][T22717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.655656][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.655726][T22717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.689816][T22717] hsr_slave_0: left promiscuous mode [ 780.695446][T22717] hsr_slave_1: left promiscuous mode [ 780.696100][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.696122][T22717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.702780][T22717] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.702825][T22717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.731874][T22717] veth1_macvtap: left promiscuous mode [ 780.731931][T22717] veth0_macvtap: left promiscuous mode [ 780.732019][T22717] veth1_vlan: left promiscuous mode [ 780.732182][T22717] veth0_vlan: left promiscuous mode [ 780.754923][T22717] veth1_macvtap: left promiscuous mode [ 780.754993][T22717] veth0_macvtap: left promiscuous mode [ 780.755130][T22717] veth1_vlan: left promiscuous mode [ 780.755239][T22717] veth0_vlan: left promiscuous mode [ 780.900643][T22717] team0 (unregistering): Port device team_slave_1 removed [ 780.908695][T22717] team0 (unregistering): Port device team_slave_0 removed [ 780.978930][T22717] team0 (unregistering): Port device team_slave_1 removed [ 780.986437][T22717] team0 (unregistering): Port device team_slave_0 removed [ 781.023235][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 781.168294][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 781.329075][ T3021] 8021q: adding VLAN 0 to HW filter on device eth21 [ 781.394611][T22717] IPVS: stop unused estimator thread 0... [ 781.494839][ T3021] 8021q: adding VLAN 0 to HW filter on device eth22 [ 781.643463][ T3021] 8021q: adding VLAN 0 to HW filter on device eth23 [ 781.794560][ T3021] 8021q: adding VLAN 0 to HW filter on device eth24