last executing test programs: 14.322872927s ago: executing program 3 (id=308): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14.22000327s ago: executing program 3 (id=312): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x100800, 0x0) r1 = epoll_create1(0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x7a000000, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x30000009}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 13.348266251s ago: executing program 3 (id=332): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x440004, @ipv4={'\x00', '\xff\xff', @loopback}, 0xffff8000}, 0x1c) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) 13.331264471s ago: executing program 3 (id=333): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000013c0)='./proc\x00', &(0x7f0000001400)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000001480)='3', 0x4e) fallocate(r0, 0x0, 0x0, 0x8fffb) 13.169554005s ago: executing program 3 (id=334): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 12.657140047s ago: executing program 3 (id=340): r0 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r0, 0x560e, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r1, 0x400261f3, &(0x7f0000000000)) 12.597644249s ago: executing program 32 (id=340): r0 = dup(0xffffffffffffffff) ioctl$TIOCL_SETVESABLANK(r0, 0x560e, &(0x7f0000000140)) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r1 = socket(0x8, 0x5, 0x7fff) ioctl$sock_SIOCOUTQNSD(r1, 0x400261f3, &(0x7f0000000000)) 8.959587676s ago: executing program 4 (id=375): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8c, 0xfffffffffffff356}, 0x0, 0x80000000, 0x0, 0x8, 0xae7, 0x9, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 8.739346831s ago: executing program 4 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x701, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002700)=""/4075, 0xfeb}, {&(0x7f00000003c0)=""/9, 0x9}], 0x2}, 0x2020) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 8.626692404s ago: executing program 4 (id=383): msgsnd(0x0, 0x0, 0x8, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, @perf_bp={0x0, 0x9}, 0x6000, 0x10428f, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x7fffffff}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 8.101268886s ago: executing program 4 (id=385): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001340)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001380)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000013c0)='./proc\x00', &(0x7f0000001400)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001440)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000001480)='3', 0x4e) fallocate(r0, 0x0, 0x0, 0x8fffb) 7.670336107s ago: executing program 4 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ipvlan0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000380)={@remote, r3}, 0x14) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd24, 0x2000, {0x0, 0x0, 0x74, r3, {0x5, 0x1}, {0x1, 0xfff2}, {0xfff2, 0x10}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) close(r2) 7.396863443s ago: executing program 4 (id=394): unshare(0x2040400) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001140)={r2, 0xfffffffffffffdbe, &(0x7f0000001180)}, 0x10) 7.381514874s ago: executing program 33 (id=394): unshare(0x2040400) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001140)={r2, 0xfffffffffffffdbe, &(0x7f0000001180)}, 0x10) 2.907477861s ago: executing program 5 (id=466): fchmodat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0xfffffffb) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x5) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46eaf) 2.480930761s ago: executing program 1 (id=469): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000380)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000005c0)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000600)=0x7f, 0x4) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10) 2.462409951s ago: executing program 1 (id=470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x1, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) 2.031446982s ago: executing program 2 (id=484): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0), 0xfc, 0x57d, &(0x7f0000001500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1) 2.016538692s ago: executing program 5 (id=485): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x25) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x100) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.804982367s ago: executing program 2 (id=488): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0}, 0xc0, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 1.556299723s ago: executing program 6 (id=491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0x7, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 1.490257825s ago: executing program 6 (id=493): mmap$IORING_OFF_SQ_RING(0x0, 0x6, 0x1000001, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x400454a4, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) tkill(0x0, 0x3b) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$peeksig(0x4212, r0, &(0x7f00000004c0)={0x3, 0x1}, 0x0) 1.477633475s ago: executing program 1 (id=494): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000040)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) write$binfmt_elf64(r2, &(0x7f00000001c0)=ANY=[], 0x37) sendfile(r1, r2, &(0x7f0000000200), 0x4) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x7, 0x200) close_range(r0, r1, 0x0) 1.384941127s ago: executing program 0 (id=496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x304}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "db0127ff", "16dea6d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f00000018c0), r0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000001a00)=0x8, 0x4) 1.370035698s ago: executing program 0 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x1c, r2, 0x209, 0x70bd29, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x24}}, 0x0) 1.304084159s ago: executing program 0 (id=498): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0x8000009, 0x3, 0xffffff12, 0x0, "0000000000ffdd000000ff0300"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x82, "000000f7ff000000012c000000000057bd69f8"}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x3, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_pts(r0, 0x0) read(r1, &(0x7f0000000c80)=""/4122, 0xc2c) 1.198955102s ago: executing program 1 (id=499): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x105604, 0x10000, 0xfffffffb, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) pselect6(0x40, &(0x7f0000000700)={0x0, 0x2, 0x1000, 0xffffffffffffffff, 0x801, 0x100, 0x3}, 0x0, &(0x7f0000000740)={0x1e, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) bind$rds(r0, &(0x7f0000000140)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000280)=""/111, 0x6f}], 0x1, &(0x7f0000000300)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) 1.122308164s ago: executing program 5 (id=500): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x80) unshare(0x40200) r0 = semget(0x0, 0x2, 0x39c) semop(r0, &(0x7f00000001c0)=[{0x1, 0x8001, 0x1000}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r0, &(0x7f0000000200)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x2, 0x1800}], 0x2) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) unshare(0x40400) 1.104818374s ago: executing program 2 (id=501): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="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", 0x1f2}, {&(0x7f00000006c0)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88cf1b612298d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e519e8", 0xa7}, {&(0x7f0000000780)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000000840)="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", 0xc0d}, {&(0x7f0000004a40)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b805b34d0056282b7ed43e9c6efe6245152417b356ca23162493370e9055e9320279b93aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a000000809658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2", 0xb5}], 0x5}}], 0x1, 0x40c0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000004540)={&(0x7f0000ffe000/0x2000)=nil, 0x20, 0x0, 0x0, 0x0, 0x0, 0x20, 0x7ffffffe, 0x0}, &(0x7f0000004580)=0x40) 1.088181404s ago: executing program 2 (id=502): flistxattr(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x388, 0x7ffffffffd) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xf}, 0x100600, 0x2, 0xfffffffc, 0x1, 0x0, 0x8000, 0x3, 0x0, 0x0, 0x0, 0x1000000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ptrace$pokeuser(0x6, r0, 0x388, 0x5) 1.008427016s ago: executing program 5 (id=503): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0), 0xfc, 0x57d, &(0x7f0000001500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1) 1.007934306s ago: executing program 2 (id=513): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r1, r4) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000140)={r3, 0x2}, 0x8) 882.939719ms ago: executing program 5 (id=504): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 583.183287ms ago: executing program 6 (id=505): unshare(0x22020400) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 582.789237ms ago: executing program 6 (id=506): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'geneve0\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='27', 0x2) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x58, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10043}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x2, 0xc}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 566.332917ms ago: executing program 6 (id=507): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000140)='pipefs\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x40042, 0x1) close(r1) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000700), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 510.167148ms ago: executing program 5 (id=508): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_create_resource$futex(&(0x7f0000000080)=0x1) futex(r1, 0x9, 0x1, 0x0, r1, 0x2) 339.905892ms ago: executing program 0 (id=509): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)={'a', ' *:* ', 'rm\x00'}, 0x9) write$cgroup_devices(r1, &(0x7f0000000000)={'b', ' *:* ', 'rm\x00'}, 0x9) 331.127772ms ago: executing program 1 (id=510): syz_open_dev$usbmon(0x0, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400"], 0x50) read$eventfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x2804f1e, &(0x7f0000000640)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000680)="$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") 233.898785ms ago: executing program 6 (id=511): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) mount(0x0, 0x0, 0x0, 0x48, 0x0) setns(0xffffffffffffffff, 0x24020000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 233.660435ms ago: executing program 0 (id=512): r0 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, 0x0, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) sendmsg$kcm(r0, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000001040)="1a", 0x100000}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x20010) close(r0) 194.575966ms ago: executing program 0 (id=514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = epoll_create1(0x0) r3 = fcntl$dupfd(r0, 0x406, r2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000880)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f00000008c0)={0xa0000013}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000900)) 118.499798ms ago: executing program 2 (id=515): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'pim6reg\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'batadv_slave_1\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) r1 = socket$inet6(0xa, 0x3, 0x3c) r2 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x23) syz_emit_ethernet(0x12, &(0x7f0000000100)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @private=0xa010102}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) connect$inet6(r1, &(0x7f0000000ac0)={0xa, 0x4e28, 0x3, @loopback, 0x7}, 0x1c) writev(r1, &(0x7f0000000b00)=[{&(0x7f0000000b40)=',', 0xffdf}], 0x1) 0s ago: executing program 1 (id=516): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000001c0), 0xfc, 0x57d, &(0x7f0000001500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x1) kernel console output (not intermixed with test programs): [ 23.962027][ T29] audit: type=1400 audit(1792664616.414:103): avc: denied { search } for pid=3184 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.962068][ T29] audit: type=1400 audit(1792664616.414:104): avc: denied { search } for pid=3184 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.863915][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 25.863934][ T29] audit: type=1400 audit(1792664618.314:120): avc: denied { write } for pid=3241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.900506][ T29] audit: type=1400 audit(1792664618.354:121): avc: denied { write } for pid=3252 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.840921][ T29] audit: type=1400 audit(1792664619.294:122): avc: denied { write } for pid=3256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.874317][ T29] audit: type=1400 audit(1792664619.324:123): avc: denied { write } for pid=3267 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.949946][ T29] audit: type=1400 audit(1792664619.404:124): avc: denied { write } for pid=3270 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.985874][ T29] audit: type=1400 audit(1792664619.444:125): avc: denied { write } for pid=3281 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.109' (ED25519) to the list of known hosts. [ 30.083939][ T29] audit: type=1400 audit(1792664622.534:126): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.084278][ T29] audit: type=1400 audit(1792664622.534:127): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.084909][ T3288] cgroup: Unknown subsys name 'net' [ 30.085307][ T29] audit: type=1400 audit(1792664622.534:128): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.256417][ T3288] cgroup: Unknown subsys name 'cpuset' [ 30.262685][ T3288] cgroup: Unknown subsys name 'rlimit' [ 30.345374][ T29] audit: type=1400 audit(1792664622.794:129): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.403124][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.445269][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.131714][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 31.131734][ T29] audit: type=1400 audit(1792664623.584:140): avc: denied { execmem } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.261538][ T29] audit: type=1400 audit(1792664623.714:141): avc: denied { read } for pid=3300 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.261668][ T29] audit: type=1400 audit(1792664623.714:142): avc: denied { open } for pid=3300 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 31.261964][ T29] audit: type=1400 audit(1792664623.714:143): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.334378][ T29] audit: type=1400 audit(1792664623.784:144): avc: denied { module_request } for pid=3300 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 31.385131][ T29] audit: type=1400 audit(1792664623.834:145): avc: denied { sys_module } for pid=3300 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 31.575266][ T29] audit: type=1400 audit(1792664624.024:146): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 31.602431][ T29] audit: type=1400 audit(1792664624.054:147): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 31.603209][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.603640][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.603889][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.613967][ T3303] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.614195][ T29] audit: type=1400 audit(1792664624.064:148): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 31.695745][ T3304] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.720074][ T3300] infiniband rxe0: set active [ 31.720096][ T3300] infiniband rxe0: added rxe_eth0 [ 31.739747][ T3302] rxe0: rxe_newlink: already configured on rxe_eth0 [ 31.747053][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.752303][ T3300] RDS/IB: rxe0: added [ 31.752330][ T3300] smc: adding ib device rxe0 with port count 1 [ 31.752346][ T3300] smc: ib device rxe0 port 1 has no pnetid [ 31.787050][ T3307] rxe0: rxe_newlink: already configured on rxe_eth0 [ 31.788580][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.788877][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.829556][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.863538][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.909183][ T3302] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.946449][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.946501][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.946607][ T3303] bridge_slave_0: entered allmulticast mode [ 31.947447][ T3303] bridge_slave_0: entered promiscuous mode [ 31.953995][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.954028][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.954167][ T3303] bridge_slave_1: entered allmulticast mode [ 31.954730][ T3303] bridge_slave_1: entered promiscuous mode [ 32.016157][ T3307] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.025086][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.042145][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.085985][ T3303] team0: Port device team_slave_0 added [ 32.095493][ T3303] team0: Port device team_slave_1 added [ 32.147091][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.147125][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.147656][ T3304] bridge_slave_0: entered allmulticast mode [ 32.148234][ T3304] bridge_slave_0: entered promiscuous mode [ 32.149513][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.149625][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.149801][ T3304] bridge_slave_1: entered allmulticast mode [ 32.151046][ T3304] bridge_slave_1: entered promiscuous mode [ 32.152487][ T3300] rxe_eth0 speed is unknown, defaulting to 1000 [ 32.157470][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.157517][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.157619][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.213748][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.213790][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.213892][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.282584][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.309056][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.350934][ T3304] team0: Port device team_slave_0 added [ 32.355102][ T3303] hsr_slave_0: entered promiscuous mode [ 32.355509][ T3303] hsr_slave_1: entered promiscuous mode [ 32.373554][ T3304] team0: Port device team_slave_1 added [ 32.418255][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.418276][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.418316][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.432301][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.432356][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.432462][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.506976][ T3304] hsr_slave_0: entered promiscuous mode [ 32.507966][ T3304] hsr_slave_1: entered promiscuous mode [ 32.508577][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 32.508627][ T3304] Cannot create hsr debugfs directory [ 32.629336][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.629420][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.629482][ T3302] bridge_slave_0: entered allmulticast mode [ 32.629979][ T3302] bridge_slave_0: entered promiscuous mode [ 32.663124][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.663157][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.663267][ T3302] bridge_slave_1: entered allmulticast mode [ 32.663757][ T3302] bridge_slave_1: entered promiscuous mode [ 32.695401][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.695440][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.695517][ T3307] bridge_slave_0: entered allmulticast mode [ 32.696806][ T3307] bridge_slave_0: entered promiscuous mode [ 32.723385][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.723457][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.723520][ T3307] bridge_slave_1: entered allmulticast mode [ 32.724046][ T3307] bridge_slave_1: entered promiscuous mode [ 32.742330][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.764518][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.812744][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.812866][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.812983][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.813046][ T3300] bridge_slave_0: entered allmulticast mode [ 32.813496][ T3300] bridge_slave_0: entered promiscuous mode [ 32.819775][ T3302] team0: Port device team_slave_0 added [ 32.821779][ T3302] team0: Port device team_slave_1 added [ 32.858014][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.858090][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.858366][ T3300] bridge_slave_1: entered allmulticast mode [ 32.859779][ T3300] bridge_slave_1: entered promiscuous mode [ 32.863884][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.913975][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.916814][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.920249][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.926036][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.941096][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.952591][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.952606][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.952643][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.953369][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.953385][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.953492][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.957423][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.966983][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.970464][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.982873][ T3307] team0: Port device team_slave_0 added [ 32.993270][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.001392][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.015260][ T3307] team0: Port device team_slave_1 added [ 33.059024][ T3300] team0: Port device team_slave_0 added [ 33.107048][ T3300] team0: Port device team_slave_1 added [ 33.107409][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.107422][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.107458][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.110001][ T3302] hsr_slave_0: entered promiscuous mode [ 33.110404][ T3302] hsr_slave_1: entered promiscuous mode [ 33.110820][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.110835][ T3302] Cannot create hsr debugfs directory [ 33.129580][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.129626][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.129764][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.144927][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.144976][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.145130][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.168338][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.168382][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.168505][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.169025][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.175533][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.215547][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.224509][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.244507][ T3307] hsr_slave_0: entered promiscuous mode [ 33.245474][ T3307] hsr_slave_1: entered promiscuous mode [ 33.246570][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 33.246620][ T3307] Cannot create hsr debugfs directory [ 33.261919][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.269296][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.294244][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.313150][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.395754][ T3300] hsr_slave_0: entered promiscuous mode [ 33.396607][ T3300] hsr_slave_1: entered promiscuous mode [ 33.397720][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.397765][ T3300] Cannot create hsr debugfs directory [ 33.533233][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.535252][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.537466][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.546510][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.559069][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.569356][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.584896][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.585405][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.590823][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.622685][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.623276][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.625229][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.649040][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.651152][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.677441][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.679045][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.681163][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.681890][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.684095][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.718316][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.718390][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.744040][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.756419][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.756458][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.758455][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.758490][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.780792][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.780945][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.800594][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.800705][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.801845][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.819115][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.822435][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.843468][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.853896][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.858293][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.863598][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.878195][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.951941][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.978929][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.986106][ T119] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.986142][ T119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.007837][ T119] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.007878][ T119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.044994][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.060353][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.063963][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.081427][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.095520][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.095561][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.117239][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.122299][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.122336][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.153760][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.153798][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.180100][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.180144][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.276820][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.356771][ T3303] veth0_vlan: entered promiscuous mode [ 34.362818][ T3303] veth1_vlan: entered promiscuous mode [ 34.414403][ T3303] veth0_macvtap: entered promiscuous mode [ 34.423369][ T3303] veth1_macvtap: entered promiscuous mode [ 34.434887][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.451390][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.469469][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.476248][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.478902][ T119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.479074][ T119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.479216][ T119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.545276][ T29] audit: type=1400 audit(1792664626.994:149): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.fxYQYD/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 34.606826][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.634917][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.687814][ T3303] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.758069][ T3302] veth0_vlan: entered promiscuous mode [ 34.763976][ T3302] veth1_vlan: entered promiscuous mode [ 34.764923][ T3504] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2'. [ 34.817624][ T3304] veth0_vlan: entered promiscuous mode [ 34.834808][ T3304] veth1_vlan: entered promiscuous mode [ 34.841849][ T3302] veth0_macvtap: entered promiscuous mode [ 34.843689][ T3307] veth0_vlan: entered promiscuous mode [ 34.857350][ T3302] veth1_macvtap: entered promiscuous mode [ 34.861753][ T3307] veth1_vlan: entered promiscuous mode [ 34.882003][ T3300] veth0_vlan: entered promiscuous mode [ 34.896843][ T3300] veth1_vlan: entered promiscuous mode [ 34.898882][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.921885][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.923666][ T3304] veth0_macvtap: entered promiscuous mode [ 34.940809][ T3304] veth1_macvtap: entered promiscuous mode [ 34.952379][ T3300] veth0_macvtap: entered promiscuous mode [ 34.958527][ T3300] veth1_macvtap: entered promiscuous mode [ 34.975553][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.977947][ T3307] veth0_macvtap: entered promiscuous mode [ 34.983979][ T3307] veth1_macvtap: entered promiscuous mode [ 34.995406][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.995815][ T54] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.995970][ T54] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.996173][ T54] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.999887][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.043035][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.044974][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.046269][ T119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.047617][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048160][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048500][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048704][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.088026][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.122252][ T54] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137452][ T119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137569][ T119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137607][ T119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137678][ T119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137772][ T119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137805][ T119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.137845][ T119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.382937][ T3527] VFS: Mount too revealing [ 35.418609][ T3535] netlink: 7 bytes leftover after parsing attributes in process `syz.3.4'. [ 35.605126][ T3554] process 'syz.4.17' launched './file0' with NULL argv: empty string added [ 35.767575][ T3566] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 35.821399][ T3568] syz.0.23 uses obsolete (PF_INET,SOCK_PACKET) [ 35.887690][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 35.887785][ T3575] netlink: 8 bytes leftover after parsing attributes in process `syz.2.26'. [ 35.918323][ T3547] syz.1.13 (3547) used greatest stack depth: 11144 bytes left [ 36.078073][ T3572] loop3: detected capacity change from 0 to 128 [ 36.158901][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 36.158917][ T29] audit: type=1400 audit(1792664628.614:239): avc: denied { create } for pid=3584 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.195537][ T29] audit: type=1400 audit(1792664628.644:241): avc: denied { connect } for pid=3584 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 36.240877][ T29] audit: type=1400 audit(1792664628.694:242): avc: denied { name_bind } for pid=3588 comm="syz.0.32" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 36.258323][ T29] audit: type=1400 audit(1792664628.644:240): avc: denied { mount } for pid=3570 comm="syz.3.24" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.297267][ T3591] bridge1: entered promiscuous mode [ 36.297290][ T3591] bridge1: entered allmulticast mode [ 36.298704][ T3591] team0: Port device bridge1 added [ 36.318255][ T3591] bridge0: port 3(team0) entered blocking state [ 36.318335][ T3591] bridge0: port 3(team0) entered disabled state [ 36.318673][ T3591] team0: entered allmulticast mode [ 36.318710][ T3591] team_slave_0: entered allmulticast mode [ 36.318725][ T3591] team_slave_1: entered allmulticast mode [ 36.321540][ T3591] team0: entered promiscuous mode [ 36.321594][ T3591] team_slave_0: entered promiscuous mode [ 36.321786][ T3591] team_slave_1: entered promiscuous mode [ 36.322714][ T3591] bridge0: port 3(team0) entered blocking state [ 36.322804][ T3591] bridge0: port 3(team0) entered forwarding state [ 36.323535][ T29] audit: type=1400 audit(1792664628.774:243): avc: denied { ioctl } for pid=3590 comm="syz.2.33" path="socket:[5596]" dev="sockfs" ino=5596 ioctlcmd=0x89a2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.405544][ T29] audit: type=1400 audit(1792664628.864:244): avc: denied { bind } for pid=3593 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.414346][ T29] audit: type=1400 audit(1792664628.864:245): avc: denied { setopt } for pid=3593 comm="syz.4.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.460535][ T3572] syz.3.24 (3572) used greatest stack depth: 10784 bytes left [ 36.460999][ T29] audit: type=1400 audit(1792664628.914:246): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.842361][ T29] audit: type=1400 audit(1792664629.294:247): avc: denied { associate } for pid=3608 comm="syz.2.40" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 36.843604][ T3605] mmap: syz.3.36 (3605): VmData 29208576 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 36.879431][ T29] audit: type=1400 audit(1792664629.334:248): avc: denied { mounton } for pid=3606 comm="syz.2.40" path="/proc/24/task" dev="proc" ino=4530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 36.923998][ T3607] rxe_eth0 speed is unknown, defaulting to 1000 [ 37.519865][ T3647] netlink: 28 bytes leftover after parsing attributes in process `syz.3.57'. [ 42.861325][ T3407] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.878530][ T29] kauditd_printk_skb: 687 callbacks suppressed [ 42.878546][ T29] audit: type=1400 audit(1792664635.334:936): avc: denied { write } for pid=3690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.922736][ T29] audit: type=1400 audit(1792664635.374:937): avc: denied { write } for pid=3693 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.079162][ T29] audit: type=1400 audit(1792664635.534:938): avc: denied { write } for pid=3696 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.139804][ T29] audit: type=1400 audit(1792664635.594:939): avc: denied { write } for pid=3696 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.186198][ T29] audit: type=1400 audit(1792664635.644:940): avc: denied { write } for pid=3710 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.356298][ T29] audit: type=1400 audit(1792664636.814:941): avc: denied { setopt } for pid=3715 comm="syz.0.68" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.356494][ T3719] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 44.357442][ T29] audit: type=1400 audit(1792664636.814:942): avc: denied { connect } for pid=3715 comm="syz.0.68" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.358185][ T29] audit: type=1400 audit(1792664636.814:943): avc: denied { write } for pid=3715 comm="syz.0.68" laddr=fe80::ac14:140d lport=60 faddr=ff02::1 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.452895][ T29] audit: type=1400 audit(1792664636.904:944): avc: denied { read write } for pid=3717 comm="syz.3.71" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.452938][ T29] audit: type=1400 audit(1792664636.904:945): avc: denied { open } for pid=3717 comm="syz.3.71" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.490825][ T3727] ip_tables: iptables: counters copy to user failed while replacing table [ 44.515855][ T3727] ip_tables: iptables: counters copy to user failed while replacing table [ 44.598400][ T3737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.77'. [ 44.674799][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 44.674831][ T3741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.78'. [ 44.858310][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 44.858336][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.3.88'. [ 44.858511][ T3758] capability: warning: `syz.2.86' uses deprecated v2 capabilities in a way that may be insecure [ 45.000956][ T3778] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.001032][ T3778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 45.001048][ T3778] IPv6: NLM_F_CREATE should be set when creating new route [ 45.070676][ T3785] loop1: detected capacity change from 0 to 164 [ 45.082289][ T3785] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 45.095649][ T3785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 45.105561][ T3785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.96'. [ 45.735727][ T3843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.120'. [ 45.936180][ T3851] Zero length message leads to an empty skb [ 46.027104][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 46.027154][ T3858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 46.255975][ T51] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.256050][ T51] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.256105][ T51] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.256223][ T51] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 46.274397][ T3873] bridge0: port 3(vlan2) entered blocking state [ 46.274534][ T3873] bridge0: port 3(vlan2) entered disabled state [ 46.274611][ T3873] vlan2: entered allmulticast mode [ 46.274630][ T3873] geneve0: entered allmulticast mode [ 46.277409][ T3873] vlan2: entered promiscuous mode [ 46.277459][ T3873] geneve0: entered promiscuous mode [ 46.711361][ T3906] io-wq is not configured for unbound workers [ 47.009974][ T3928] capability: warning: `syz.1.157' uses 32-bit capabilities (legacy support in use) [ 48.058397][ T3953] netlink: 'syz.4.166': attribute type 30 has an invalid length. [ 48.155399][ T3953] netlink: 'syz.4.166': attribute type 30 has an invalid length. [ 48.175774][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.175820][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.175883][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.175911][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 48.203667][ T3953] syz.4.166 (3953) used greatest stack depth: 10440 bytes left [ 48.233373][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 48.233392][ T29] audit: type=1400 audit(1792664640.684:990): avc: denied { append } for pid=3954 comm="syz.4.167" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 48.238106][ T29] audit: type=1400 audit(1792664640.694:991): avc: denied { read } for pid=3954 comm="syz.4.167" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.238196][ T29] audit: type=1400 audit(1792664640.694:992): avc: denied { open } for pid=3954 comm="syz.4.167" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.319680][ T29] audit: type=1326 audit(1792664640.774:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3956 comm="syz.4.168" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f792badf559 code=0x0 [ 48.472256][ T3825] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.535868][ T29] audit: type=1400 audit(1792664640.994:994): avc: denied { create } for pid=3963 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 48.556323][ T29] audit: type=1400 audit(1792664640.994:995): avc: denied { setopt } for pid=3963 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 48.654485][ T29] audit: type=1400 audit(1792664641.104:996): avc: denied { connect } for pid=3974 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 48.818637][ T3988] loop0: detected capacity change from 0 to 1024 [ 48.833953][ T3988] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.835187][ T29] audit: type=1400 audit(1792664641.284:997): avc: denied { mount } for pid=3987 comm="syz.0.182" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.869248][ T29] audit: type=1400 audit(1792664641.304:998): avc: denied { write } for pid=3987 comm="syz.0.182" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.869324][ T29] audit: type=1400 audit(1792664641.304:999): avc: denied { add_name } for pid=3987 comm="syz.0.182" name="memory.events.local" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.012439][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.061022][ T4015] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 1, id = 0 [ 49.155245][ T4021] rxe_eth0 speed is unknown, defaulting to 1000 [ 52.486996][ T4142] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 52.667737][ T4166] netlink: 'syz.4.212': attribute type 1 has an invalid length. [ 52.700991][ T4166] gretap1: entered allmulticast mode [ 52.703132][ T4166] bond1: (slave gretap1): making interface the new active one [ 52.703503][ T4166] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 52.765877][ T4172] bridge_slave_0: left allmulticast mode [ 52.765925][ T4172] bridge_slave_0: left promiscuous mode [ 52.766076][ T4172] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.768620][ T4172] bridge_slave_1: left allmulticast mode [ 52.768644][ T4172] bridge_slave_1: left promiscuous mode [ 52.768893][ T4172] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.814701][ T4172] bond0: (slave bond_slave_0): Releasing backup interface [ 52.829544][ T4172] bond0: (slave bond_slave_1): Releasing backup interface [ 52.842461][ T4172] team0: Port device team_slave_0 removed [ 52.851993][ T4172] team0: Port device team_slave_1 removed [ 52.854667][ T4172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.854831][ T4172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.863697][ T4172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.863748][ T4172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.895473][ T4172] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 53.245704][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 53.245721][ T29] audit: type=1400 audit(1792664645.694:1044): avc: denied { kexec_image_load } for pid=4186 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 54.083102][ T4201] netlink: 'syz.3.226': attribute type 1 has an invalid length. [ 54.106697][ T4201] gretap1: entered allmulticast mode [ 54.110237][ T4201] bond1: (slave gretap1): making interface the new active one [ 54.112558][ T4201] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 54.142840][ T4201] syz.3.226 (4201) used greatest stack depth: 10344 bytes left [ 54.186525][ T29] audit: type=1400 audit(1792664646.644:1045): avc: denied { write } for pid=4204 comm="syz.2.227" lport=51736 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 54.239537][ T29] audit: type=1400 audit(1792664646.694:1046): avc: denied { mount } for pid=4209 comm="syz.3.229" name="/" dev="hugetlbfs" ino=5115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 54.524874][ T4187] kexec: Could not allocate control_code_buffer [ 54.862216][ T4226] loop4: detected capacity change from 0 to 2048 [ 56.578775][ T4233] xt_hashlimit: size too large, truncated to 1048576 [ 56.735496][ T4248] netlink: 'syz.1.242': attribute type 1 has an invalid length. [ 56.748097][ T4211] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 56.813464][ T4248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.830965][ T4254] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 56.831682][ T4252] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 56.871256][ T4254] gretap1: entered allmulticast mode [ 56.873345][ T4254] bond1: (slave gretap1): making interface the new active one [ 56.873718][ T4254] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 57.052218][ T4263] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1, syncid = 1, id = 0 [ 57.232986][ T29] audit: type=1400 audit(1792664649.684:1047): avc: denied { setopt } for pid=4273 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.158983][ T4257] kexec: Could not allocate control_code_buffer [ 60.096517][ T4282] __nla_validate_parse: 7 callbacks suppressed [ 60.096533][ T4282] netlink: 16 bytes leftover after parsing attributes in process `syz.1.256'. [ 60.096551][ T4282] netlink: 100 bytes leftover after parsing attributes in process `syz.1.256'. [ 60.146721][ T4286] netlink: 'syz.0.257': attribute type 1 has an invalid length. [ 60.193916][ T4286] gretap1: entered allmulticast mode [ 60.203199][ T4286] bond1: (slave gretap1): making interface the new active one [ 60.203614][ T4286] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 60.607451][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 60.607992][ T4311] netlink: 'syz.0.265': attribute type 30 has an invalid length. [ 60.617904][ T4312] rxe_eth0 speed is unknown, defaulting to 1000 [ 61.308143][ T4321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.271'. [ 61.350304][ T4321] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4321 comm=syz.4.271 [ 61.350365][ T4321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.271'. [ 61.400904][ T4311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 61.410394][ T4311] netlink: 'syz.0.265': attribute type 30 has an invalid length. [ 61.630407][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.630604][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.669266][ T4311] syz.0.265 (4311) used greatest stack depth: 10184 bytes left [ 62.034818][ T29] audit: type=1400 audit(1792664654.484:1048): avc: denied { bind } for pid=4351 comm="syz.0.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.109787][ T29] audit: type=1400 audit(1792664654.564:1049): avc: denied { read write } for pid=4353 comm="syz.2.285" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.109825][ T29] audit: type=1400 audit(1792664654.564:1050): avc: denied { open } for pid=4353 comm="syz.2.285" path="/dev/ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.111501][ T29] audit: type=1400 audit(1792664654.564:1051): avc: denied { ioctl } for pid=4353 comm="syz.2.285" path="/dev/ppp" dev="devtmpfs" ino=139 ioctlcmd=0x40047438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.449520][ T4371] erspan1: entered promiscuous mode [ 62.527895][ T4378] FAULT_INJECTION: forcing a failure. [ 62.527895][ T4378] name failslab, interval 1, probability 0, space 0, times 1 [ 62.527973][ T4378] CPU: 0 UID: 0 PID: 4378 Comm: syz.1.294 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.528012][ T4378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 62.528041][ T4378] Call Trace: [ 62.528052][ T4378] [ 62.528067][ T4378] __dump_stack+0x1d/0x30 [ 62.528121][ T4378] dump_stack_lvl+0x95/0xd0 [ 62.528157][ T4378] dump_stack+0x15/0x1b [ 62.528189][ T4378] should_fail_ex+0x262/0x280 [ 62.528243][ T4378] ? asymmetric_key_generate_id+0x63/0x140 [ 62.528333][ T4378] should_failslab+0x8c/0xb0 [ 62.528365][ T4378] __kmalloc_noprof+0xb6/0x4b0 [ 62.528460][ T4378] ? asymmetric_key_generate_id+0x63/0x140 [ 62.528501][ T4378] asymmetric_key_generate_id+0x63/0x140 [ 62.528554][ T4378] x509_key_preparse+0x296/0x420 [ 62.528602][ T4378] asymmetric_key_preparse+0x68/0xb0 [ 62.528664][ T4378] __key_create_or_update+0x29e/0x820 [ 62.528695][ T4378] ? ktime_get_real_seconds+0x15/0x30 [ 62.528750][ T4378] key_create_or_update+0x42/0x60 [ 62.528777][ T4378] __se_sys_add_key+0x2a5/0x360 [ 62.528873][ T4378] __x64_sys_add_key+0x67/0x80 [ 62.528964][ T4378] x64_sys_call+0x1fa9/0x2550 [ 62.529068][ T4378] do_syscall_64+0x112/0x360 [ 62.529118][ T4378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.529166][ T4378] RIP: 0033:0x7f7a6ee4f559 [ 62.529273][ T4378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.529305][ T4378] RSP: 002b:00007f7a6d89f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 62.529330][ T4378] RAX: ffffffffffffffda RBX: 00007f7a6f0d5fa0 RCX: 00007f7a6ee4f559 [ 62.529348][ T4378] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 62.529364][ T4378] RBP: 00007f7a6eee6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 62.529381][ T4378] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 62.529421][ T4378] R13: 00007f7a6f0d6038 R14: 00007f7a6f0d5fa0 R15: 00007ffe34b89568 [ 62.529484][ T4378] [ 62.530280][ T29] audit: type=1326 audit(1792664654.984:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c973f559 code=0x7ffc0000 [ 62.530458][ T29] audit: type=1326 audit(1792664654.984:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c973f559 code=0x7ffc0000 [ 62.531999][ T29] audit: type=1326 audit(1792664654.984:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c973f559 code=0x7ffc0000 [ 62.532059][ T29] audit: type=1326 audit(1792664654.984:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c973f559 code=0x7ffc0000 [ 62.533026][ T29] audit: type=1326 audit(1792664654.984:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa2c973f559 code=0x7ffc0000 [ 62.533066][ T29] audit: type=1326 audit(1792664654.984:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4379 comm="syz.0.293" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2c973f559 code=0x7ffc0000 [ 63.172842][ T4400] FAULT_INJECTION: forcing a failure. [ 63.172842][ T4400] name failslab, interval 1, probability 0, space 0, times 0 [ 63.172890][ T4400] CPU: 1 UID: 0 PID: 4400 Comm: syz.3.302 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.172965][ T4400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.172984][ T4400] Call Trace: [ 63.172993][ T4400] [ 63.173004][ T4400] __dump_stack+0x1d/0x30 [ 63.173042][ T4400] dump_stack_lvl+0x95/0xd0 [ 63.173078][ T4400] dump_stack+0x15/0x1b [ 63.173218][ T4400] should_fail_ex+0x262/0x280 [ 63.173283][ T4400] ? pidfs_register_pid_gfp+0x85/0x160 [ 63.173386][ T4400] should_failslab+0x8c/0xb0 [ 63.173411][ T4400] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 63.173466][ T4400] ? selinux_netlbl_socket_post_create+0xc7/0x100 [ 63.173617][ T4400] ? pidfs_register_pid_gfp+0x85/0x160 [ 63.173643][ T4400] ? selinux_socket_post_create+0x219/0x290 [ 63.173674][ T4400] pidfs_register_pid_gfp+0x85/0x160 [ 63.173766][ T4400] __pidfs_register_pids+0x3b/0x90 [ 63.173801][ T4400] unix_socketpair+0x163/0x6b0 [ 63.173837][ T4400] __sys_socketpair+0x225/0x430 [ 63.173956][ T4400] __x64_sys_socketpair+0x52/0x60 [ 63.174038][ T4400] x64_sys_call+0x1bf7/0x2550 [ 63.174084][ T4400] do_syscall_64+0x112/0x360 [ 63.174136][ T4400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.174189][ T4400] RIP: 0033:0x7f57a1a8f559 [ 63.174227][ T4400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.174255][ T4400] RSP: 002b:00007f57a04df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 63.174286][ T4400] RAX: ffffffffffffffda RBX: 00007f57a1d15fa0 RCX: 00007f57a1a8f559 [ 63.174312][ T4400] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 63.174353][ T4400] RBP: 00007f57a1b26b20 R08: 0000000000000000 R09: 0000000000000000 [ 63.174412][ T4400] R10: 0000200000003740 R11: 0000000000000246 R12: 0000000000000000 [ 63.174433][ T4400] R13: 00007f57a1d16038 R14: 00007f57a1d15fa0 R15: 00007fff282425e8 [ 63.174464][ T4400] [ 63.535021][ T4409] ip_tables: iptables: counters copy to user failed while replacing table [ 63.589885][ T4414] FAULT_INJECTION: forcing a failure. [ 63.589885][ T4414] name failslab, interval 1, probability 0, space 0, times 0 [ 63.590005][ T4414] CPU: 0 UID: 0 PID: 4414 Comm: syz.0.307 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.590037][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.590052][ T4414] Call Trace: [ 63.590061][ T4414] [ 63.590070][ T4414] __dump_stack+0x1d/0x30 [ 63.590144][ T4414] dump_stack_lvl+0x95/0xd0 [ 63.590175][ T4414] dump_stack+0x15/0x1b [ 63.590198][ T4414] should_fail_ex+0x262/0x280 [ 63.590242][ T4414] ? load_msg+0xa6/0x2e0 [ 63.590339][ T4414] should_failslab+0x8c/0xb0 [ 63.590381][ T4414] __kmalloc_noprof+0xb6/0x4b0 [ 63.590402][ T4414] ? load_msg+0xa6/0x2e0 [ 63.590481][ T4414] load_msg+0xa6/0x2e0 [ 63.590511][ T4414] do_msgsnd+0xe4/0xba0 [ 63.590535][ T4414] ? newque+0x1ff/0x240 [ 63.590571][ T4414] ? xfd_validate_state+0x45/0xf0 [ 63.590629][ T4414] __x64_sys_msgsnd+0xa8/0xc0 [ 63.590677][ T4414] x64_sys_call+0x227f/0x2550 [ 63.590721][ T4414] do_syscall_64+0x112/0x360 [ 63.590756][ T4414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.590782][ T4414] RIP: 0033:0x7fa2c973f559 [ 63.590803][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.590822][ T4414] RSP: 002b:00007fa2c818f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 63.590872][ T4414] RAX: ffffffffffffffda RBX: 00007fa2c99c5fa0 RCX: 00007fa2c973f559 [ 63.590886][ T4414] RDX: 0000000000002000 RSI: 0000200000000280 RDI: 0000000000000001 [ 63.590899][ T4414] RBP: 00007fa2c97d6b20 R08: 0000000000000000 R09: 0000000000000000 [ 63.590912][ T4414] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 63.590929][ T4414] R13: 00007fa2c99c6038 R14: 00007fa2c99c5fa0 R15: 00007ffd31855768 [ 63.591024][ T4414] [ 63.845471][ T4427] loop0: detected capacity change from 0 to 2048 [ 63.889534][ T4443] syzkaller1: entered promiscuous mode [ 63.889558][ T4443] syzkaller1: entered allmulticast mode [ 63.937135][ T4448] FAULT_INJECTION: forcing a failure. [ 63.937135][ T4448] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.937188][ T4448] CPU: 0 UID: 0 PID: 4448 Comm: syz.0.320 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.937289][ T4448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 63.937334][ T4448] Call Trace: [ 63.937341][ T4448] [ 63.937381][ T4448] __dump_stack+0x1d/0x30 [ 63.937416][ T4448] dump_stack_lvl+0x95/0xd0 [ 63.937447][ T4448] dump_stack+0x15/0x1b [ 63.937475][ T4448] should_fail_ex+0x262/0x280 [ 63.937600][ T4448] should_fail+0xb/0x20 [ 63.937684][ T4448] should_fail_usercopy+0x1a/0x20 [ 63.937708][ T4448] _copy_to_user+0x20/0xa0 [ 63.937735][ T4448] xt_obj_to_user+0x8d/0x120 [ 63.937840][ T4448] xt_target_to_user+0x5f/0xf0 [ 63.937875][ T4448] do_ip6t_get_ctl+0xae2/0xcb0 [ 63.937966][ T4448] ? _raw_spin_unlock_irqrestore+0x9/0x30 [ 63.938004][ T4448] ? __rcu_read_unlock+0x4e/0x70 [ 63.938026][ T4448] nf_getsockopt+0x190/0x1b0 [ 63.938052][ T4448] ipv6_getsockopt+0x170/0x1e0 [ 63.938114][ T4448] udpv6_getsockopt+0xa5/0x230 [ 63.938145][ T4448] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 63.938176][ T4448] sock_common_getsockopt+0x60/0x70 [ 63.938279][ T4448] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 63.938307][ T4448] do_sock_getsockopt+0x2f5/0x570 [ 63.938364][ T4448] __x64_sys_getsockopt+0x11d/0x1a0 [ 63.938454][ T4448] x64_sys_call+0x1032/0x2550 [ 63.938483][ T4448] do_syscall_64+0x112/0x360 [ 63.938591][ T4448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.938624][ T4448] RIP: 0033:0x7fa2c973f559 [ 63.938644][ T4448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.938725][ T4448] RSP: 002b:00007fa2c818f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 63.938758][ T4448] RAX: ffffffffffffffda RBX: 00007fa2c99c5fa0 RCX: 00007fa2c973f559 [ 63.938777][ T4448] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000004 [ 63.938833][ T4448] RBP: 00007fa2c97d6b20 R08: 0000200000000c00 R09: 0000000000000000 [ 63.938851][ T4448] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000000 [ 63.938868][ T4448] R13: 00007fa2c99c6038 R14: 00007fa2c99c5fa0 R15: 00007ffd31855768 [ 63.938894][ T4448] [ 64.219748][ T4463] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 64.219770][ T4463] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 64.219792][ T4463] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.326'. [ 64.220127][ T4463] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 64.220144][ T4463] netlink: 'syz.2.326': attribute type 4 has an invalid length. [ 64.220158][ T4463] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.326'. [ 64.535233][ T4477] loop2: detected capacity change from 0 to 2048 [ 64.568835][ T4481] loop3: detected capacity change from 0 to 512 [ 64.584148][ T4481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.584289][ T4481] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.599101][ T4481] FAULT_INJECTION: forcing a failure. [ 64.599101][ T4481] name failslab, interval 1, probability 0, space 0, times 0 [ 64.599205][ T4481] CPU: 1 UID: 0 PID: 4481 Comm: syz.3.333 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.599276][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 64.599369][ T4481] Call Trace: [ 64.599378][ T4481] [ 64.599389][ T4481] __dump_stack+0x1d/0x30 [ 64.599425][ T4481] dump_stack_lvl+0x95/0xd0 [ 64.599459][ T4481] dump_stack+0x15/0x1b [ 64.599487][ T4481] should_fail_ex+0x262/0x280 [ 64.599543][ T4481] ? mb_cache_entry_create+0xee/0x530 [ 64.599573][ T4481] should_failslab+0x8c/0xb0 [ 64.599598][ T4481] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 64.599729][ T4481] ? mb_cache_entry_create+0xee/0x530 [ 64.599924][ T4481] mb_cache_entry_create+0xee/0x530 [ 64.600038][ T4481] ext4_xattr_get+0x28e/0x470 [ 64.600176][ T4481] ext4_xattr_security_get+0x32/0x40 [ 64.600349][ T4481] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 64.600503][ T4481] __vfs_getxattr+0x2ad/0x2c0 [ 64.600611][ T4481] cap_inode_need_killpriv+0x2e/0x50 [ 64.600700][ T4481] security_inode_need_killpriv+0x32/0x60 [ 64.600851][ T4481] file_remove_privs_flags+0x11f/0x320 [ 64.600970][ T4481] ? inode_dio_wait+0xe5/0x110 [ 64.601091][ T4481] ? ext4_convert_inline_data+0x6d/0x360 [ 64.601232][ T4481] ? do_futex+0x391/0x460 [ 64.601366][ T4481] file_modified+0x18/0x50 [ 64.601539][ T4481] ext4_fallocate+0x18c/0x320 [ 64.601637][ T4481] vfs_fallocate+0x3ac/0x400 [ 64.601702][ T4481] __x64_sys_fallocate+0x7a/0xd0 [ 64.601781][ T4481] x64_sys_call+0x1e1d/0x2550 [ 64.601882][ T4481] do_syscall_64+0x112/0x360 [ 64.601987][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.602066][ T4481] RIP: 0033:0x7f57a1a8f559 [ 64.602118][ T4481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.602179][ T4481] RSP: 002b:00007f57a04df028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 64.602279][ T4481] RAX: ffffffffffffffda RBX: 00007f57a1d15fa0 RCX: 00007f57a1a8f559 [ 64.602329][ T4481] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 64.602370][ T4481] RBP: 00007f57a1b26b20 R08: 0000000000000000 R09: 0000000000000000 [ 64.602410][ T4481] R10: 000000000008fffb R11: 0000000000000246 R12: 0000000000000000 [ 64.602444][ T4481] R13: 00007f57a1d16038 R14: 00007f57a1d15fa0 R15: 00007fff282425e8 [ 64.602513][ T4481] [ 64.780310][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.781548][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.782260][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.783167][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.784013][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.784612][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.785365][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.786295][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.786907][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 64.787753][ T3307] EXT4-fs error (device loop3): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 65.049013][ T4488] netlink: 'syz.4.336': attribute type 10 has an invalid length. [ 65.135594][ T4488] team0: Port device vlan1 added [ 65.199538][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.214665][ T4119] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.269830][ T4488] syz.4.336 (4488) used greatest stack depth: 9928 bytes left [ 65.272739][ T4119] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.365279][ T4119] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.467027][ T4119] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.579965][ T4504] rxe_eth0 speed is unknown, defaulting to 1000 [ 65.585994][ T4119] bridge_slave_1: left allmulticast mode [ 65.586051][ T4119] bridge_slave_1: left promiscuous mode [ 65.586411][ T4119] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.603487][ T4119] bridge_slave_0: left allmulticast mode [ 65.603595][ T4119] bridge_slave_0: left promiscuous mode [ 65.603889][ T4119] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.728122][ T4119] bond1 (unregistering): (slave gretap1): Releasing active interface [ 65.760312][ T4119] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.763215][ T4119] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.764508][ T4119] bond0 (unregistering): Released all slaves [ 65.773313][ T4119] bond1 (unregistering): Released all slaves [ 65.800889][ T4119] IPVS: stopping backup sync thread 4015 ... [ 65.884585][ T4119] hsr_slave_0: left promiscuous mode [ 65.885003][ T4119] hsr_slave_1: left promiscuous mode [ 65.885504][ T4119] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.885563][ T4119] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.888863][ T4119] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.888914][ T4119] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.904090][ T4119] veth1_macvtap: left promiscuous mode [ 65.904114][ T4119] veth0_macvtap: left promiscuous mode [ 65.904176][ T4119] veth1_vlan: left promiscuous mode [ 65.904307][ T4119] veth0_vlan: left promiscuous mode [ 66.005129][ T4119] team0 (unregistering): Port device team_slave_1 removed [ 66.013899][ T4119] team0 (unregistering): Port device team_slave_0 removed [ 66.048571][ T3027] 8021q: adding VLAN 0 to HW filter on device eth1 [ 66.112353][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.112395][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.112458][ T4504] bridge_slave_0: entered allmulticast mode [ 66.112982][ T4504] bridge_slave_0: entered promiscuous mode [ 66.140588][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.140620][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.140732][ T4504] bridge_slave_1: entered allmulticast mode [ 66.141145][ T4504] bridge_slave_1: entered promiscuous mode [ 66.179741][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.180983][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.211253][ T4504] team0: Port device team_slave_0 added [ 66.212274][ T4504] team0: Port device team_slave_1 added [ 66.235398][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.235416][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.235514][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.249309][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.249461][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.249544][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.250739][ T3027] 8021q: adding VLAN 0 to HW filter on device eth2 [ 66.327676][ T4504] hsr_slave_0: entered promiscuous mode [ 66.328735][ T4504] hsr_slave_1: entered promiscuous mode [ 66.330992][ T4504] debugfs: 'hsr0' already exists in 'hsr' [ 66.331044][ T4504] Cannot create hsr debugfs directory [ 66.429128][ T4504] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 66.431416][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.431988][ T4504] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 66.433844][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.434658][ T4504] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 66.439521][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.442512][ T4504] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 66.447540][ T4504] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.498494][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.498536][ T4504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.498624][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.498662][ T4504] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.541893][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.550147][ T4504] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.567716][ T3027] 8021q: adding VLAN 0 to HW filter on device eth3 [ 66.707001][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.710939][ T3027] 8021q: adding VLAN 0 to HW filter on device eth4 [ 66.836889][ T4504] veth0_vlan: entered promiscuous mode [ 66.839884][ T4504] veth1_vlan: entered promiscuous mode [ 66.861285][ T4504] veth0_macvtap: entered promiscuous mode [ 66.863094][ T4504] veth1_macvtap: entered promiscuous mode [ 66.877557][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.889356][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.916978][ T4121] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917157][ T4121] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917250][ T4121] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.917480][ T4121] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.987761][ T4627] loop1: detected capacity change from 0 to 1024 [ 67.015171][ T4627] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.120216][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.870068][ T29] kauditd_printk_skb: 472 callbacks suppressed [ 67.870087][ T29] audit: type=1326 audit(1792664660.324:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.870221][ T29] audit: type=1326 audit(1792664660.324:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.870503][ T29] audit: type=1326 audit(1792664660.324:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.870587][ T29] audit: type=1326 audit(1792664660.324:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.871990][ T29] audit: type=1326 audit(1792664660.324:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.872080][ T29] audit: type=1326 audit(1792664660.324:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.872414][ T29] audit: type=1326 audit(1792664660.324:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.872529][ T29] audit: type=1326 audit(1792664660.324:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.872605][ T29] audit: type=1326 audit(1792664660.324:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 67.874497][ T29] audit: type=1326 audit(1792664660.324:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4641 comm="syz.1.349" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7a6ee4f559 code=0x7ffc0000 [ 68.773377][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.773534][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.078578][ T4740] netlink: 104 bytes leftover after parsing attributes in process `syz.0.377'. [ 69.801330][ T4774] loop4: detected capacity change from 0 to 512 [ 69.814879][ T4774] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.814950][ T4774] ext4 filesystem being mounted at /82/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.856668][ T4774] FAULT_INJECTION: forcing a failure. [ 69.856668][ T4774] name failslab, interval 1, probability 0, space 0, times 0 [ 69.856706][ T4774] CPU: 1 UID: 0 PID: 4774 Comm: syz.4.385 Not tainted syzkaller #0 PREEMPT(lazy) [ 69.856747][ T4774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 69.856814][ T4774] Call Trace: [ 69.856821][ T4774] [ 69.856834][ T4774] __dump_stack+0x1d/0x30 [ 69.856859][ T4774] dump_stack_lvl+0x95/0xd0 [ 69.857034][ T4774] dump_stack+0x15/0x1b [ 69.857055][ T4774] should_fail_ex+0x262/0x280 [ 69.857097][ T4774] ? mb_cache_entry_create+0xee/0x530 [ 69.857148][ T4774] should_failslab+0x8c/0xb0 [ 69.857236][ T4774] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 69.857285][ T4774] ? mb_cache_entry_create+0xee/0x530 [ 69.857331][ T4774] mb_cache_entry_create+0xee/0x530 [ 69.857385][ T4774] ext4_xattr_get+0x28e/0x470 [ 69.857432][ T4774] ext4_xattr_security_get+0x32/0x40 [ 69.857507][ T4774] ? __pfx_ext4_xattr_security_get+0x10/0x10 [ 69.857535][ T4774] __vfs_getxattr+0x2ad/0x2c0 [ 69.857625][ T4774] cap_inode_need_killpriv+0x2e/0x50 [ 69.857652][ T4774] security_inode_need_killpriv+0x32/0x60 [ 69.857677][ T4774] file_remove_privs_flags+0x11f/0x320 [ 69.857723][ T4774] ? inode_dio_wait+0xe5/0x110 [ 69.857835][ T4774] ? ext4_convert_inline_data+0x6d/0x360 [ 69.857867][ T4774] ? do_futex+0x391/0x460 [ 69.857902][ T4774] file_modified+0x18/0x50 [ 69.858010][ T4774] ext4_fallocate+0x18c/0x320 [ 69.858048][ T4774] vfs_fallocate+0x3ac/0x400 [ 69.858139][ T4774] __x64_sys_fallocate+0x7a/0xd0 [ 69.858167][ T4774] x64_sys_call+0x1e1d/0x2550 [ 69.858264][ T4774] do_syscall_64+0x112/0x360 [ 69.858312][ T4774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.858356][ T4774] RIP: 0033:0x7f792badf559 [ 69.858374][ T4774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.858393][ T4774] RSP: 002b:00007f792a52f028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 69.858416][ T4774] RAX: ffffffffffffffda RBX: 00007f792bd65fa0 RCX: 00007f792badf559 [ 69.858434][ T4774] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 69.858491][ T4774] RBP: 00007f792bb76b20 R08: 0000000000000000 R09: 0000000000000000 [ 69.858509][ T4774] R10: 000000000008fffb R11: 0000000000000246 R12: 0000000000000000 [ 69.858527][ T4774] R13: 00007f792bd66038 R14: 00007f792bd65fa0 R15: 00007fff1f105128 [ 69.858556][ T4774] [ 70.118244][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.118635][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.118886][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.119271][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.119604][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.119996][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.120372][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.123167][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.123641][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.130065][ T3304] EXT4-fs error (device loop4): ext4_empty_dir:3087: inode #12: comm syz-executor: Directory hole found for htree leaf block 0 [ 70.337982][ T4784] bridge0: port 3(team0) entered disabled state [ 70.338215][ T4784] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.338371][ T4784] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.376853][ T4787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.376874][ T4787] block device autoloading is deprecated and will be removed. [ 70.407225][ T3399] kernel read not supported for file /per_cpu/cpu0/trace_pipe_raw (pid: 3399 comm: kworker/1:5) [ 70.408811][ T4787] md: md1 stopped. [ 70.430212][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.465104][ T4119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.465221][ T4119] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.533371][ T4119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.533418][ T4119] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.594779][ T4119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.594837][ T4119] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.659741][ T4119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.659832][ T4119] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.834231][ T4822] netlink: 'syz.5.402': attribute type 10 has an invalid length. [ 70.869936][ T4119] bond1 (unregistering): (slave gretap1): Releasing active interface [ 70.908688][ T4119] bond0 (unregistering): Released all slaves [ 70.912898][ T4119] bond1 (unregistering): Released all slaves [ 71.052136][ T4822] team0: Port device vlan1 added [ 71.091547][ T4801] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.093877][ T4822] syz.5.402 (4822) used greatest stack depth: 9480 bytes left [ 71.093927][ T3027] 8021q: adding VLAN 0 to HW filter on device eth5 [ 71.135000][ T4119] hsr_slave_0: left promiscuous mode [ 71.135725][ T4119] hsr_slave_1: left promiscuous mode [ 71.152826][ T4119] veth1_macvtap: left promiscuous mode [ 71.152857][ T4119] veth0_macvtap: left promiscuous mode [ 71.152956][ T4119] veth1_vlan: left promiscuous mode [ 71.153071][ T4119] veth0_vlan: left promiscuous mode [ 71.244393][ T4119] team0 (unregistering): Port device vlan1 removed [ 71.309770][ T4839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.310012][ T4839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.427914][ T4854] netlink: 'syz.5.408': attribute type 3 has an invalid length. [ 71.427996][ T4854] netlink: 'syz.5.408': attribute type 1 has an invalid length. [ 71.428011][ T4854] netlink: 198012 bytes leftover after parsing attributes in process `syz.5.408'. [ 71.566942][ T3027] 8021q: adding VLAN 0 to HW filter on device eth6 [ 71.631613][ T4801] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.631649][ T4801] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.631705][ T4801] bridge_slave_0: entered allmulticast mode [ 71.632293][ T4801] bridge_slave_0: entered promiscuous mode [ 71.641753][ T4801] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.641848][ T4801] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.642023][ T4801] bridge_slave_1: entered allmulticast mode [ 71.647137][ T4801] bridge_slave_1: entered promiscuous mode [ 71.692417][ T4801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.694621][ T4801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.737925][ T4801] team0: Port device team_slave_0 added [ 71.749854][ T4801] team0: Port device team_slave_1 added [ 71.783069][ T4882] netlink: 'syz.0.414': attribute type 10 has an invalid length. [ 71.938826][ T4882] team0: Port device vlan1 added [ 71.940691][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.940705][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.940742][ T4801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.941541][ T4801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.941557][ T4801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.941611][ T4801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.041253][ T3027] 8021q: adding VLAN 0 to HW filter on device eth7 [ 72.068558][ T4801] hsr_slave_0: entered promiscuous mode [ 72.069071][ T4801] hsr_slave_1: entered promiscuous mode [ 72.069433][ T4801] debugfs: 'hsr0' already exists in 'hsr' [ 72.069450][ T4801] Cannot create hsr debugfs directory [ 72.376283][ T3027] 8021q: adding VLAN 0 to HW filter on device eth8 [ 72.420745][ T4801] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 72.440455][ T4801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.443659][ T4801] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 72.466413][ T4801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.469073][ T4801] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 72.472021][ T131] kernel write not supported for file bpf-prog (pid: 131 comm: kworker/0:2) [ 72.498357][ T4801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.508776][ T4801] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 72.527385][ T4801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.541076][ T4930] ip_tables: iptables: counters copy to user failed while replacing table [ 72.676555][ T4801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.691562][ T4801] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.701941][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.701982][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.708830][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.708958][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.869697][ T4960] FAULT_INJECTION: forcing a failure. [ 72.869697][ T4960] name failslab, interval 1, probability 0, space 0, times 0 [ 72.869733][ T4960] CPU: 0 UID: 0 PID: 4960 Comm: syz.1.430 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.869832][ T4960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 72.869847][ T4960] Call Trace: [ 72.869859][ T4960] [ 72.869867][ T4960] __dump_stack+0x1d/0x30 [ 72.869909][ T4960] dump_stack_lvl+0x95/0xd0 [ 72.869954][ T4960] dump_stack+0x15/0x1b [ 72.869977][ T4960] should_fail_ex+0x262/0x280 [ 72.870017][ T4960] ? __kernfs_new_node+0x70/0x440 [ 72.870049][ T4960] should_failslab+0x8c/0xb0 [ 72.870071][ T4960] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 72.870176][ T4960] ? __kernfs_new_node+0x70/0x440 [ 72.870208][ T4960] __kernfs_new_node+0x70/0x440 [ 72.870238][ T4960] ? __rcu_read_unlock+0x4e/0x70 [ 72.870259][ T4960] ? up_write+0x19/0x60 [ 72.870356][ T4960] ? kernfs_link_sibling+0x2f5/0x320 [ 72.870386][ T4960] ? __rcu_read_unlock+0x4e/0x70 [ 72.870410][ T4960] kernfs_new_node+0x107/0x140 [ 72.870441][ T4960] __kernfs_create_file+0x4b/0x180 [ 72.870537][ T4960] ? __pfx_dev_attr_show+0x10/0x10 [ 72.870568][ T4960] ? __pfx_dev_attr_store+0x10/0x10 [ 72.870598][ T4960] sysfs_add_file_mode_ns+0x132/0x1b0 [ 72.870698][ T4960] internal_create_group+0x43e/0x9e0 [ 72.870725][ T4960] ? kernfs_add_one+0xf4/0x310 [ 72.870797][ T4960] sysfs_create_groups+0x3f/0xf0 [ 72.870825][ T4960] device_add_attrs+0x64/0x3f0 [ 72.870846][ T4960] ? kobject_put+0x108/0x180 [ 72.870930][ T4960] device_add+0x37a/0x790 [ 72.870952][ T4960] rfkill_register+0x136/0x5c0 [ 72.871064][ T4960] nfc_register_device+0x103/0x1a0 [ 72.871181][ T4960] nci_register_device+0x480/0x510 [ 72.871230][ T4960] virtual_ncidev_open+0xca/0x130 [ 72.871319][ T4960] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 72.871363][ T4960] misc_open+0x1df/0x220 [ 72.871397][ T4960] chrdev_open+0x2eb/0x3a0 [ 72.871478][ T4960] do_dentry_open+0x496/0xa40 [ 72.871517][ T4960] ? __pfx_chrdev_open+0x10/0x10 [ 72.871551][ T4960] vfs_open_consume+0x46/0x1f0 [ 72.871607][ T4960] path_openat+0xc16/0x11c0 [ 72.871710][ T4960] do_file_open+0x16c/0x290 [ 72.871750][ T4960] do_sys_openat2+0xa1/0x140 [ 72.871902][ T4960] __x64_sys_openat+0xf2/0x120 [ 72.871946][ T4960] x64_sys_call+0x1f72/0x2550 [ 72.872051][ T4960] do_syscall_64+0x112/0x360 [ 72.872097][ T4960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.872121][ T4960] RIP: 0033:0x7f7a6ee4f559 [ 72.872206][ T4960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.872232][ T4960] RSP: 002b:00007f7a6d89f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 72.872262][ T4960] RAX: ffffffffffffffda RBX: 00007f7a6f0d5fa0 RCX: 00007f7a6ee4f559 [ 72.872329][ T4960] RDX: 0000000000000002 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 72.872409][ T4960] RBP: 00007f7a6eee6b20 R08: 0000000000000000 R09: 0000000000000000 [ 72.872453][ T4960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.872472][ T4960] R13: 00007f7a6f0d6038 R14: 00007f7a6f0d5fa0 R15: 00007ffe34b89568 [ 72.872501][ T4960] [ 72.876331][ T29] kauditd_printk_skb: 1027 callbacks suppressed [ 72.876347][ T29] audit: type=1326 audit(1792664665.334:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.878569][ T29] audit: type=1326 audit(1792664665.334:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.879842][ T29] audit: type=1326 audit(1792664665.334:2569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.883499][ T29] audit: type=1326 audit(1792664665.334:2570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.886851][ T29] audit: type=1326 audit(1792664665.334:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.888520][ T29] audit: type=1326 audit(1792664665.334:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.889835][ T29] audit: type=1326 audit(1792664665.334:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.893308][ T29] audit: type=1326 audit(1792664665.354:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.895227][ T29] audit: type=1326 audit(1792664665.354:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 72.897999][ T29] audit: type=1326 audit(1792664665.354:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4952 comm="syz.2.428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f673b28fd8e code=0x7ffc0000 [ 73.162890][ T4973] netlink: 104 bytes leftover after parsing attributes in process `syz.1.432'. [ 73.544740][ T4801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.709414][ T4801] veth0_vlan: entered promiscuous mode [ 73.712328][ T4801] veth1_vlan: entered promiscuous mode [ 73.742090][ T4801] veth0_macvtap: entered promiscuous mode [ 73.745497][ T4801] veth1_macvtap: entered promiscuous mode [ 73.763644][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.765307][ T4801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.782975][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.783200][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.783249][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.783324][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.873746][ T5006] __vm_enough_memory: pid: 5006, comm: syz.6.396, bytes: 11727659683840 not enough memory for the allocation [ 73.928550][ T5014] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.928724][ T5014] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.624382][ T5057] loop2: detected capacity change from 0 to 512 [ 74.635969][ T5057] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 74.635987][ T5057] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 74.636005][ T5057] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 74.680192][ T5057] EXT4-fs (loop2): 1 truncate cleaned up [ 74.680930][ T5057] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.276920][ T5087] loop6: detected capacity change from 0 to 1024 [ 75.300043][ T5087] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.323472][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 75.323491][ T5091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.477'. [ 75.446525][ T4801] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.454530][ T5100] syz_tun: entered allmulticast mode [ 75.499055][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.572630][ T5105] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 75.719247][ T5127] loop0: detected capacity change from 0 to 512 [ 75.881555][ T5134] loop2: detected capacity change from 0 to 1024 [ 75.923247][ T5134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.087241][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.304474][ T5155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.491'. [ 76.317259][ T5154] loop0: detected capacity change from 0 to 512 [ 76.317943][ T5154] EXT4-fs: Ignoring removed nobh option [ 76.325915][ T5154] EXT4-fs error (device loop0) in ext4_process_orphan:346: Out of memory [ 76.326006][ T5154] loop0: lost filesystem error report for type 5 error -12 [ 76.330681][ T5154] EXT4-fs (loop0): 2 truncates cleaned up [ 76.331697][ T5154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.459120][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.891796][ T5188] loop5: detected capacity change from 0 to 1024 [ 76.910972][ T5188] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.007389][ T4504] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.281178][ T5201] FAULT_INJECTION: forcing a failure. [ 77.281178][ T5201] name failslab, interval 1, probability 0, space 0, times 0 [ 77.281215][ T5201] CPU: 0 UID: 0 PID: 5201 Comm: syz.6.506 Not tainted syzkaller #0 PREEMPT(lazy) [ 77.281321][ T5201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.281338][ T5201] Call Trace: [ 77.281347][ T5201] [ 77.281357][ T5201] __dump_stack+0x1d/0x30 [ 77.281389][ T5201] dump_stack_lvl+0x95/0xd0 [ 77.281425][ T5201] dump_stack+0x15/0x1b [ 77.281448][ T5201] should_fail_ex+0x262/0x280 [ 77.281487][ T5201] ? garp_init_applicant+0x78/0x2a0 [ 77.281531][ T5201] should_failslab+0x8c/0xb0 [ 77.281557][ T5201] __kmalloc_cache_noprof+0x5d/0x3e0 [ 77.281580][ T5201] ? garp_init_applicant+0x78/0x2a0 [ 77.281664][ T5201] ? __list_add_valid_or_report+0x38/0xe0 [ 77.281702][ T5201] garp_init_applicant+0x78/0x2a0 [ 77.281743][ T5201] vlan_gvrp_init_applicant+0x1c/0x30 [ 77.281816][ T5201] register_vlan_dev+0x12f/0x470 [ 77.281870][ T5201] vlan_newlink+0x32a/0x370 [ 77.281899][ T5201] ? __pfx_vlan_newlink+0x10/0x10 [ 77.281927][ T5201] rtnl_newlink_create+0x1e4/0x4a0 [ 77.281969][ T5201] ? security_capable+0x7b/0x90 [ 77.282007][ T5201] ? netlink_ns_capable+0x86/0xa0 [ 77.282045][ T5201] rtnl_newlink+0x1255/0x1510 [ 77.282152][ T5201] ? try_charge_memcg+0x269/0xae0 [ 77.282185][ T5201] ? __memcg_slab_free_hook+0x154/0x340 [ 77.282288][ T5201] ? __rcu_read_unlock+0x4e/0x70 [ 77.282311][ T5201] ? avc_has_perm_noaudit+0xac/0x160 [ 77.282415][ T5201] ? cred_has_capability+0x224/0x2a0 [ 77.282462][ T5201] ? selinux_capable+0x31/0x40 [ 77.282485][ T5201] ? security_capable+0x7b/0x90 [ 77.282587][ T5201] ? ns_capable+0x80/0xb0 [ 77.282612][ T5201] ? __pfx_rtnl_newlink+0x10/0x10 [ 77.282637][ T5201] rtnetlink_rcv_msg+0x64b/0x720 [ 77.282690][ T5201] netlink_rcv_skb+0x11e/0x220 [ 77.282736][ T5201] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 77.282766][ T5201] rtnetlink_rcv+0x1c/0x30 [ 77.282790][ T5201] netlink_unicast+0x665/0x740 [ 77.282961][ T5201] netlink_sendmsg+0x5ef/0x740 [ 77.282999][ T5201] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.283074][ T5201] ____sys_sendmsg+0x532/0x580 [ 77.283104][ T5201] ___sys_sendmsg+0x195/0x1e0 [ 77.283145][ T5201] __x64_sys_sendmsg+0xd4/0x160 [ 77.283168][ T5201] x64_sys_call+0x22ab/0x2550 [ 77.283214][ T5201] do_syscall_64+0x112/0x360 [ 77.283247][ T5201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.283273][ T5201] RIP: 0033:0x7f2c8a45f559 [ 77.283293][ T5201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.283320][ T5201] RSP: 002b:00007f2c88eb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.283344][ T5201] RAX: ffffffffffffffda RBX: 00007f2c8a6e5fa0 RCX: 00007f2c8a45f559 [ 77.283362][ T5201] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 77.283410][ T5201] RBP: 00007f2c8a4f6b20 R08: 0000000000000000 R09: 0000000000000000 [ 77.283425][ T5201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.283438][ T5201] R13: 00007f2c8a6e6038 R14: 00007f2c8a6e5fa0 R15: 00007ffca0ba5118 [ 77.283477][ T5201] [ 77.761051][ T5209] loop1: detected capacity change from 0 to 512 [ 77.814921][ T5209] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.510: iget: bad extended attribute block 134217728 [ 77.815041][ T5209] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 77.815642][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 77.815681][ C1] EXT4-fs (loop1): initial error at time 1792664670: ext4_orphan_get:1403: inode 15 [ 77.815862][ C1] EXT4-fs (loop1): last error at time 1792664670: ext4_orphan_get:1403 [ 77.815892][ T2977] ================================================================== [ 77.815933][ T2977] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve_in_last [ 77.816010][ T2977] [ 77.816015][ T2977] write to 0xffffffff86e718f8 of 8 bytes by interrupt on cpu 1: [ 77.816037][ T2977] prb_reserve_in_last+0x9c7/0xae0 [ 77.816075][ T2977] vprintk_store+0x45b/0x910 [ 77.816115][ T2977] vprintk_emit+0x1a4/0x610 [ 77.816152][ T2977] vprintk_default+0x26/0x30 [ 77.816193][ T2977] vprintk+0x1d/0x30 [ 77.816228][ T2977] _printk+0x79/0xa0 [ 77.816252][ T2977] print_daily_error_info+0x24a/0x300 [ 77.816282][ T2977] call_timer_fn+0x36/0x250 [ 77.816310][ T2977] __run_timer_base+0x40c/0x5f0 [ 77.816334][ T2977] run_timer_softirq+0x31/0x70 [ 77.816358][ T2977] handle_softirqs+0x109/0x310 [ 77.816382][ T2977] __irq_exit_rcu+0x40/0xf0 [ 77.816410][ T2977] sysvec_apic_timer_interrupt+0x74/0x80 [ 77.816447][ T2977] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 77.816478][ T2977] blk_mq_submit_bio+0xdcb/0x1210 [ 77.816504][ T2977] __submit_bio+0x54/0x3d0 [ 77.816537][ T2977] submit_bio_noacct_nocheck+0x153/0x620 [ 77.816570][ T2977] submit_bio_noacct+0x738/0x970 [ 77.816599][ T2977] submit_bio+0x2a4/0x2c0 [ 77.816628][ T2977] __bh_submit+0x373/0x3b0 [ 77.816671][ T2977] bh_submit+0x26/0x30 [ 77.816711][ T2977] ext4_commit_super+0x197/0x260 [ 77.816734][ T2977] ext4_handle_error+0x46f/0x570 [ 77.816758][ T2977] __ext4_error_inode+0x1af/0x3a0 [ 77.816778][ T2977] __ext4_iget+0x1024/0x2360 [ 77.816820][ T2977] ext4_orphan_get+0x157/0x410 [ 77.816847][ T2977] ext4_orphan_cleanup+0x6a6/0xab0 [ 77.816874][ T2977] ext4_fill_super+0x33f2/0x37c0 [ 77.816889][ C1] : inode 15 [ 77.816899][ T2977] get_tree_bdev_flags+0x291/0x300 [ 77.816912][ C1] [ 77.816927][ T2977] get_tree_bdev+0x1f/0x30 [ 77.816950][ T2977] ext4_get_tree+0x1c/0x30 [ 77.816973][ T2977] vfs_get_tree+0x57/0x1d0 [ 77.816998][ T2977] do_new_mount+0x288/0x730 [ 77.817029][ T2977] path_mount+0x4ad/0xb90 [ 77.817057][ T2977] __se_sys_mount+0x28c/0x2e0 [ 77.817089][ T2977] __x64_sys_mount+0x67/0x80 [ 77.817121][ T2977] x64_sys_call+0xc3b/0x2550 [ 77.817155][ T2977] do_syscall_64+0x112/0x360 [ 77.817196][ T2977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.817230][ T2977] [ 77.817238][ T2977] read to 0xffffffff86e718f0 of 16 bytes by task 2977 on cpu 0: [ 77.817260][ T2977] _prb_read_valid+0x183/0x930 [ 77.817299][ T2977] prb_read_valid+0x3c/0x60 [ 77.817334][ T2977] syslog_print+0x253/0x550 [ 77.817372][ T2977] do_syslog+0x52b/0x7f0 [ 77.817409][ T2977] __x64_sys_syslog+0x41/0x50 [ 77.817448][ T2977] x64_sys_call+0x1d36/0x2550 [ 77.817482][ T2977] do_syscall_64+0x112/0x360 [ 77.817523][ T2977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.817551][ T2977] [ 77.817556][ T2977] Reported by Kernel Concurrency Sanitizer on: [ 77.817569][ T2977] CPU: 0 UID: 0 PID: 2977 Comm: klogd Not tainted syzkaller #0 PREEMPT(lazy) [ 77.817599][ T2977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 77.817616][ T2977] ================================================================== [ 77.833736][ T5209] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.510: couldn't read orphan inode 15 (err -117) [ 77.833836][ T5209] loop1: lost filesystem error report for type 5 error -117 [ 77.849082][ T5209] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.944586][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.974283][ T5221] xt_hashlimit: size too large, truncated to 1048576 [ 78.162898][ T5225] loop1: detected capacity change from 0 to 1024 [ 78.190600][ T5225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.245311][ T29] kauditd_printk_skb: 1022 callbacks suppressed [ 78.245335][ T29] audit: type=1400 audit(1792664670.694:3599): avc: denied { write } for pid=5224 comm="syz.1.516" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.359928][ T29] audit: type=1400 audit(1792664670.814:3600): avc: denied { write } for pid=5215 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.405927][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.425404][ T29] audit: type=1400 audit(1792664670.874:3601): avc: denied { write } for pid=5238 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.614552][ T29] audit: type=1400 audit(1792664671.064:3602): avc: denied { write } for pid=5243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.649539][ T29] audit: type=1400 audit(1792664671.104:3603): avc: denied { write } for pid=5254 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.744182][ T29] audit: type=1400 audit(1792664671.194:3604): avc: denied { write } for pid=5258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.779072][ T29] audit: type=1400 audit(1792664671.234:3605): avc: denied { write } for pid=5269 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.264797][ T29] audit: type=1400 audit(1792664671.714:3606): avc: denied { write } for pid=5274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.298102][ T29] audit: type=1400 audit(1792664671.754:3607): avc: denied { write } for pid=5285 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.101744][ T29] audit: type=1400 audit(1792664675.554:3608): avc: denied { write } for pid=5288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.648519][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 83.648538][ T29] audit: type=1400 audit(1792664676.104:3610): avc: denied { write } for pid=5302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.692890][ T29] audit: type=1400 audit(1792664676.144:3611): avc: denied { write } for pid=5313 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.799226][ T29] audit: type=1400 audit(1792664676.254:3612): avc: denied { write } for pid=5316 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.835467][ T29] audit: type=1400 audit(1792664676.284:3613): avc: denied { write } for pid=5327 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.013854][ T29] audit: type=1400 audit(1792664676.464:3614): avc: denied { write } for pid=5330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.055379][ T29] audit: type=1400 audit(1792664676.504:3615): avc: denied { write } for pid=5341 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1