last executing test programs: 7m37.345964076s ago: executing program 32 (id=1836): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000080)={[{@debug}, {@resuid={'resuid', 0x3d, 0xee01}}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) io_setup(0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone3(0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xa, 0x31, 0xffffffffffffffff, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000f00)='./dev\x00', &(0x7f00000014c0)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./dev/mapper/control\x00', 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000001540)="e67ab1415f2ce290f4681ef5c755f60473b17b7887d68440dd9005bc69f6c3c5238bebfbce42365029d64c6bdf5fc2251eda45a465e645e685865063ff", 0x3d, 0x800) ioctl(r3, 0xc138fd06, &(0x7f0000001580)="0400000000000000000032003801") futex(0x0, 0xb, 0x4, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) faccessat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1200) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 7m10.65136163s ago: executing program 33 (id=1987): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42040, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x12, r0, 0xc76ed000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mmap(&(0x7f000095f000/0x3000)=nil, 0x3000, 0x300000f, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000008000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m18.470468118s ago: executing program 34 (id=9542): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 1m5.466415341s ago: executing program 35 (id=9985): setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000680)=0x17, 0x4) 35.280755569s ago: executing program 36 (id=11052): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001140)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x418, 0xffffffff, 0xffffffff, 0x418, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [0x0, 0xffffffff], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x258, 0x298, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x0, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x10, 0x0, "ad7709a0e99ab50e6a4fe4b5a5fa04e695270a0ddf55b092d9995ca96b23"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x548) 33.970232761s ago: executing program 0 (id=11080): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, 0x0, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x11, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa06f313fc2837"], 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) getpid() prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 33.385353055s ago: executing program 8 (id=11092): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000200)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r2) getsockname$packet(r2, 0x0, &(0x7f0000000b00)) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x2c, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 33.306219337s ago: executing program 8 (id=11094): r0 = socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000200)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r0, 0x1}, 0x20) 33.229391459s ago: executing program 8 (id=11097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x10, 0x9}}]}}]}, 0x3c}}, 0x0) 33.16443214s ago: executing program 8 (id=11100): syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x80420c, &(0x7f0000000880)=ANY=[], 0x7, 0x37b, &(0x7f00000008c0)="$eJzs3U9oI1UcwPFf/k2TLNvkIIqC9OEi6GVoo2cxyC4IAZfuRtwVhNl2oiFjUjKhGhHbnjwq3j0JHkpvFjwUtGchF296EaG3XgQFK6gj8y+Z/OufmDRs+/1Ayct77zfzXual/CbtZI7f+vz9WsXWK0ZL4mklMRGRE5G8xCUUCx7jXlkT+eyHbtu2vHjj95+evfegnPYr1J3i/ZcKSqnFpe8++DgTdDtYkE7+nePfCkedfFBlq6qt6o2WMtSjxi8t45FlqvWqXdOVumuZhm2qat02m377N0GQ1djYaCujvn4zu9HUxFZGva1qZlu1GqrVbCvjXaNaV7quq5tZwVnKu6urRnHC4LUpDwYz0mwWjYSIZIZayrtzGRAAAJirwfw/7qb0Z+X/Ed38/6Eslkq3V5XbuZf/7z132Lrx5v5ikP8faEedJztPH/97/71qL/9/+Wd/W335v3s60cv/G/75QaUv/zftEfn/l3KB/H84I7pmJs3/8zMYCyazpA1Vxfqeufl/Nnj/enbe3lv2CuT/AAAAAAAAAAAAAAAAAAAAAAA8Dk4cJ+c4Ti58DH96lxAEz3EljTv+CyKSdo++w/G/yu49eChp78I99xhbn26WN8v+Y9DhUEQsMf9xBrlrI7zySLny8r21FcRvbZYTXkuxIlU3XlYkJ3lvPUXiHefO66XbK8oXxHcvU8pG4wuSkyei8d96q9ONL/THB/vX5IVbkXhdcvLjmjTEknUvsrf/T1aUeu2N0kB8xusnIr9e+kEBAAAAAGDKdNU18vxd18e1+98yUqx4HxOZsiw5+Xv0+f3yyPPzZO6Z5LxnDwAAAADA9WC3P6oZEjebXsGyRhUyMrZpCoVkX01KRIb6JMSytIHw1GlbTkRmeN7xaOLfweT/zuur8FW9SFT4jxTuwLtNwR1VZLLxhPP3amLJ5/8Imv666Lxi2+ItgO1oU1zOEZ4cHPySW6FGdr41djs7wUS6NeHHRtqY11nuDm8nfspKSA3VOLHJFsBTX3z95/TeIK/sByvgw7M771imsyXnOSgDBXcXw02pmf/iAQAAAHDpekl/WPNqtDl6I5HozXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFM0k6/0GyiM3/vCZU4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLv/AgAA//99b+/k") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 33.111139882s ago: executing program 8 (id=11102): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x0, 0xe8a2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000", 0x36}], 0x1) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 33.054037253s ago: executing program 0 (id=11104): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000340)) 32.946531606s ago: executing program 0 (id=11107): r0 = socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), &(0x7f0000000200)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r0, 0x1}, 0x20) 32.866422208s ago: executing program 0 (id=11111): syz_mount_image$vfat(&(0x7f0000000800), &(0x7f0000000840)='./file2\x00', 0x80420c, &(0x7f0000000880)=ANY=[], 0x7, 0x37b, &(0x7f00000008c0)="$eJzs3U9oI1UcwPFf/k2TLNvkIIqC9OEi6GVoo2cxyC4IAZfuRtwVhNl2oiFjUjKhGhHbnjwq3j0JHkpvFjwUtGchF296EaG3XgQFK6gj8y+Z/OufmDRs+/1Ayct77zfzXual/CbtZI7f+vz9WsXWK0ZL4mklMRGRE5G8xCUUCx7jXlkT+eyHbtu2vHjj95+evfegnPYr1J3i/ZcKSqnFpe8++DgTdDtYkE7+nePfCkedfFBlq6qt6o2WMtSjxi8t45FlqvWqXdOVumuZhm2qat02m377N0GQ1djYaCujvn4zu9HUxFZGva1qZlu1GqrVbCvjXaNaV7quq5tZwVnKu6urRnHC4LUpDwYz0mwWjYSIZIZayrtzGRAAAJirwfw/7qb0Z+X/Ed38/6Eslkq3V5XbuZf/7z132Lrx5v5ikP8faEedJztPH/97/71qL/9/+Wd/W335v3s60cv/G/75QaUv/zftEfn/l3KB/H84I7pmJs3/8zMYCyazpA1Vxfqeufl/Nnj/enbe3lv2CuT/AAAAAAAAAAAAAAAAAAAAAAA8Dk4cJ+c4Ti58DH96lxAEz3EljTv+CyKSdo++w/G/yu49eChp78I99xhbn26WN8v+Y9DhUEQsMf9xBrlrI7zySLny8r21FcRvbZYTXkuxIlU3XlYkJ3lvPUXiHefO66XbK8oXxHcvU8pG4wuSkyei8d96q9ONL/THB/vX5IVbkXhdcvLjmjTEknUvsrf/T1aUeu2N0kB8xusnIr9e+kEBAAAAAGDKdNU18vxd18e1+98yUqx4HxOZsiw5+Xv0+f3yyPPzZO6Z5LxnDwAAAADA9WC3P6oZEjebXsGyRhUyMrZpCoVkX01KRIb6JMSytIHw1GlbTkRmeN7xaOLfweT/zuur8FW9SFT4jxTuwLtNwR1VZLLxhPP3amLJ5/8Imv666Lxi2+ItgO1oU1zOEZ4cHPySW6FGdr41djs7wUS6NeHHRtqY11nuDm8nfspKSA3VOLHJFsBTX3z95/TeIK/sByvgw7M771imsyXnOSgDBXcXw02pmf/iAQAAAHDpekl/WPNqtDl6I5HozXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFM0k6/0GyiM3/vCZU4VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmLv/AgAA//99b+/k") mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 32.831692508s ago: executing program 0 (id=11113): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x60000040) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, 0x1c) 32.714314101s ago: executing program 8 (id=11115): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10) 32.714232221s ago: executing program 37 (id=11115): bpf$BPF_LINK_CREATE(0x8, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xd, 0x0, @void}, 0x10) 32.714170591s ago: executing program 0 (id=11117): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff1}, {0x0, 0xfff1}, {0x2, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4040000) 32.685512582s ago: executing program 38 (id=11117): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff1}, {0x0, 0xfff1}, {0x2, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4040000) 23.406481106s ago: executing program 6 (id=11267): dup(0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x10a) flock(r2, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) flock(r3, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 22.540101796s ago: executing program 6 (id=11294): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14040080}, 0x20000044) 22.466215148s ago: executing program 6 (id=11297): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$cgroup_freezer_state(r0, &(0x7f00000002c0), 0x2, 0x0) mkdir(&(0x7f0000000640)='./mytrace\x00', 0x1ff) write$cgroup_freezer_state(r1, &(0x7f00000000c0)='FROZEN\x00', 0x7) sendfile(r1, r1, 0x0, 0x8000002) 22.41894935s ago: executing program 6 (id=11299): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 22.363473171s ago: executing program 6 (id=11300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000a40), 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000200)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) syz_genetlink_get_family_id$smc(&(0x7f0000000a80), r2) getsockname$packet(r2, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b00)=0x14) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x24, r1, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000080) 22.145818616s ago: executing program 9 (id=11304): r0 = epoll_create1(0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000440)) shutdown(r2, 0x0) epoll_wait(r0, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000004c0)={0x2000200b}) 22.090412907s ago: executing program 6 (id=11305): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mapper/control\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000980)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 22.090163487s ago: executing program 39 (id=11305): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./dev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/mapper/control\x00', 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000880), &(0x7f00000008c0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000900)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x9a, &(0x7f0000000980)={@local, @random="d92691707f35", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x64, 0x2b, 0x0, @private2, @local, {[], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c184620753684186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) 21.99661772s ago: executing program 9 (id=11308): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000063e000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040000) r0 = io_uring_setup(0x40cf, &(0x7f0000000040)={0x0, 0x9c3d, 0xc000, 0x10c, 0xa0002f4}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(r0, &(0x7f0000001780), 0x0, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21.913818672s ago: executing program 9 (id=11309): r0 = socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05"], 0x48) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, 0x0, &(0x7f0000000200)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r0, 0x1}, 0x20) 21.846416713s ago: executing program 9 (id=11310): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 21.787599705s ago: executing program 9 (id=11312): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) close(0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x4044, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f0000000100)='27', 0x2) statx(r0, 0x0, 0x4000, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000a00)='X', 0x1, 0x804, &(0x7f0000000a40)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) 21.662505828s ago: executing program 1 (id=11315): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x5ecf, 0xc000, 0x7, 0x20002f6}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x5c8c, 0x0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x0, 0x0, 0x20000000}}) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 21.662396808s ago: executing program 1 (id=11316): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r2, &(0x7f0000000ec0)=""/4114, 0x1012) 21.623114619s ago: executing program 1 (id=11317): r0 = epoll_create1(0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000440)) shutdown(r2, 0x0) epoll_wait(r0, 0x0, 0x0, 0x101) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f00000004c0)={0x2000200b}) 21.57477623s ago: executing program 9 (id=11319): r0 = socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05"], 0x48) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r0, 0x1}, 0x20) 21.532432211s ago: executing program 1 (id=11321): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00') 21.523466111s ago: executing program 40 (id=11319): r0 = socket(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05"], 0x48) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r1, &(0x7f00000001c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r0, 0x1}, 0x20) 21.487777152s ago: executing program 1 (id=11323): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x181002, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000440)={0x49db, 0x0, 0xfff9, 0xbffb, 0x16, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[], 0xff6b) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000004c0)={0x0, 0x9, 0x0, 0x2, 0x12, "1b28000440800037dd15b21f54c23003103000"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000500)=0x44) 21.282403137s ago: executing program 1 (id=11326): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x20000044) 21.282330077s ago: executing program 41 (id=11326): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x14040080}, 0x20000044) 2.711290825s ago: executing program 7 (id=11737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={0x0}}, 0x0) 2.641948976s ago: executing program 7 (id=11739): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x1, 0x70bd28, 0x25dfd402, {0x0, 0x0, 0x0, r2, 0x64e98, 0x16ec1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20004, 0x1040}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) 2.581020548s ago: executing program 7 (id=11742): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x10a) flock(r3, 0x1) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(r4, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 2.412445373s ago: executing program 7 (id=11751): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000c40)='./proc\x00', &(0x7f0000000c80)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x0) mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f00000008c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f0000000940)='.\x00', &(0x7f0000000980)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(0x0, &(0x7f00000009c0)='./file0\x00', 0x0, 0x84000, 0x0) 2.358449783s ago: executing program 7 (id=11753): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000e3"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7000000}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x0, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='GPL\x00', 0x6, 0x100a, &(0x7f0000000540)=""/4106, 0x41100, 0x24}, 0x94) 2.182428088s ago: executing program 7 (id=11764): memfd_create(&(0x7f0000002980)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000002e80)=[{&(0x7f0000002ec0)=""/257, 0x101}], 0x1, &(0x7f0000003000)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, 0x0) 2.182093138s ago: executing program 42 (id=11764): memfd_create(&(0x7f0000002980)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0xc) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000002e80)=[{&(0x7f0000002ec0)=""/257, 0x101}], 0x1, &(0x7f0000003000)=[{&(0x7f0000003040)=""/4096, 0x1000}], 0x1, 0x0) 1.832722876s ago: executing program 4 (id=11776): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000800)={0x2, 0xfffe, @multicast1}, 0x10, &(0x7f0000000840)=[{&(0x7f0000000880)="be38", 0x2}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b00140000000000000000000a00"], 0x38}, 0x0) 1.783062808s ago: executing program 4 (id=11777): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000800)={0x1, &(0x7f0000000840)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f00000000c0)=[{}], 0x1, 0x6e, 0x0, 0x0) 1.616626792s ago: executing program 4 (id=11783): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents(r1, &(0x7f0000000ec0)=""/4114, 0x1012) 1.616100452s ago: executing program 4 (id=11784): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0x7f, 0x6, 0x1, "ec720d001ef6be99b473d27aef0100008000"}) dup3(0xffffffffffffffff, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 1.237374401s ago: executing program 3 (id=11796): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000140)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d23210"], 0x4a) 915.320948ms ago: executing program 3 (id=11802): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x180c8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x48400, 0x0) getdents64(r0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 832.00249ms ago: executing program 3 (id=11806): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 595.808066ms ago: executing program 2 (id=11807): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f0000000680)="$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") openat(0xffffffffffffff9c, &(0x7f0000000940)='./file1\x00', 0x181042, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x88040, 0x0) fsync(r0) 595.661786ms ago: executing program 4 (id=11808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000000800)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 458.22768ms ago: executing program 3 (id=11810): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) 457.89613ms ago: executing program 4 (id=11811): r0 = socket$inet6(0xa, 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x8, 0x800000000000000, 0xffffff7ffffffffc, 0x10001, 0x5, 0xffffffffffffffff, 0x8100000, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x10) setsockopt(r0, 0x1, 0x7, &(0x7f00000000c0), 0x0) 445.22056ms ago: executing program 5 (id=11812): r0 = syz_create_resource$binfmt(&(0x7f0000004640)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 409.410401ms ago: executing program 5 (id=11813): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000009c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000a00)='7', 0x1) openat$fault_inject(0xffffffffffffff9c, &(0x7f0000000a40)='/sys/kernel/debug/failslab/times\x00', 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x8, &(0x7f00000007c0)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2, r1}, 0xc) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f00000000c0)=ANY=[@ANYRES8=r3, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r3], 0x1, 0x3a2, &(0x7f00000001c0)="$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") r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) connect$inet(r4, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x1000400000dc, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) ftruncate(r5, 0x2000009) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000c00), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="b00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02fa00"/108], 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x0) personality(0xfe47fef9f5ff7379) sendfile(r4, r5, 0x0, 0x7ffff004) 409.083521ms ago: executing program 2 (id=11814): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x1004040, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/sda\x00', 0x101002, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000c00)={0x53, 0xfffffffffffffffd, 0x11, 0xfe, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000a80)="b5c9bf61c5eb954a11efe6089e103ade89", 0x0, 0x300, 0x10, 0x2, 0x0}) 363.721142ms ago: executing program 3 (id=11815): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x180c8, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000580)="$eJzs3bFqFFEUBuBjskmWNKYWiwEbq0WtbBeJIA4IK1No5UC0SUSYNKPVPIbP4CP5GKnSjZhZsklcbczm7s58Hyz3wM/Cuc3eLc6d+fDw8/HRl9NP7c/vMR5nMYpo2jbiILZiOzr35uvWRb0bVzUBAGya2aycpu6B1aqqabkTEXt/JMWPJA0BAAAAAAAAAADw35bN/8e5+X8A6DPz//1XVdNyf/7/7Trz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA65217v/3HJ3V/AMDtc/4DwPA4/wFgeJz/ADA8b9+9fz3N88NZlo0jzpq6qItu7fKXr/LDJ9mFg8W3zuq62L7Mn3Z5dj3fif15/mxpvhuPH3X57+zFm/xGvhdHq98+AAAAAAAAAAAAAAAAAAAArIVJdmnp/f7J5G95V115PsCN+/ujeDC6s20AAAAAAAAAAAAAAAAAAADARjv9+u24PDn5WCl6U8TztWjjrouItWijL0XqXyYAAAAAAAAAAAAAAAAAABiexaXf1J0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDqL9/+vroiIpu2k3i4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQY78CAAD//139ms4=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='.\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x48400, 0x0) getdents64(r0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000880)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 336.412552ms ago: executing program 5 (id=11816): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/kernel/reboot/type\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)='k', 0x1) 335.592372ms ago: executing program 2 (id=11817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x19) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000140)={'bond0\x00', @broadcast}) 202.479175ms ago: executing program 3 (id=11818): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6200}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0x7f, 0x6, 0x1, "ec720d001ef6be99b473d27aef0100008000"}) dup3(0xffffffffffffffff, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 202.239595ms ago: executing program 2 (id=11819): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000100)='syzkaller\x00', 0x8}, 0x94) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0xea, 0x200000a, 0x12, r1, 0x0) io_uring_setup(0x4b0d, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x2afc0, 0x1c1, 0x6}, 0x18) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000a40), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000a80)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x3, 0x3a, 'M', 0x3a, '^', 0x3a, './file0', 0x3a, [0x46]}, 0x2a) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0x6, &(0x7f0000000340)=ANY=[@ANYBLOB="050000000000000071113300000000008510000002000000850000007d00000095003300000000009500a50500000000"], &(0x7f0000000380)='GPL\x00', 0x5, 0x29e, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00'}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000000640)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 174.815456ms ago: executing program 5 (id=11820): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x8, 0x237dc104, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x180, 0x0, 0x0, 0xf}, 0x50) 141.735097ms ago: executing program 5 (id=11821): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) pipe(0x0) close(0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/tracing/trace_pipe\x00', 0x800, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x2000000008, 0x0) 107.132718ms ago: executing program 2 (id=11822): socket$packet(0x11, 0x2, 0x300) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) io_setup(0x0, &(0x7f0000000080)) 52.79019ms ago: executing program 5 (id=11823): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/kmsg\x00', 0x81, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x6000000d}) 0s ago: executing program 2 (id=11824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) kernel console output (not intermixed with test programs): in process `syz.8.10858'. [ 847.658030][T10446] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.687633][T10446] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.692298][ T935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=935 comm=syz.8.10860 [ 847.694927][ T935] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10860'. [ 847.777706][ T902] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.777785][ T902] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.777972][ T902] bridge_slave_0: entered allmulticast mode [ 847.778470][ T902] bridge_slave_0: entered promiscuous mode [ 847.807203][T10446] bridge_slave_1: left allmulticast mode [ 847.807230][T10446] bridge_slave_1: left promiscuous mode [ 847.807349][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.808215][T10446] bridge_slave_0: left allmulticast mode [ 847.808235][T10446] bridge_slave_0: left promiscuous mode [ 847.808371][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 847.809653][ T29] audit: type=1400 audit(1792494218.957:1905): avc: denied { shutdown } for pid=947 comm="syz.6.10865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 847.879537][T10446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.880965][T10446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.900495][T10446] bond0 (unregistering): Released all slaves [ 847.910360][ T902] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.910398][ T902] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.910480][ T902] bridge_slave_1: entered allmulticast mode [ 847.911025][ T902] bridge_slave_1: entered promiscuous mode [ 847.949525][T10446] tipc: Left network mode [ 847.961485][ T902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.972326][ T902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.994833][ T902] team0: Port device team_slave_0 added [ 847.996772][ T29] audit: type=1400 audit(1792494219.137:1906): avc: denied { wake_alarm } for pid=959 comm="syz.6.10870" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 848.012558][ T902] team0: Port device team_slave_1 added [ 848.014010][ T958] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10869'. [ 848.058328][ T962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=962 comm=syz.2.10871 [ 848.058595][ T962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10871'. [ 848.065272][ T902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.065289][ T902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.065319][ T902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.071080][ T902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.071096][ T902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.071124][ T902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.119508][T10446] hsr_slave_0: left promiscuous mode [ 848.129840][T10446] hsr_slave_1: left promiscuous mode [ 848.130396][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.130412][T10446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.138039][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.138059][T10446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.181289][T10446] veth1_macvtap: left promiscuous mode [ 848.181372][T10446] veth0_macvtap: left promiscuous mode [ 848.181414][T10446] veth1_vlan: left promiscuous mode [ 848.181464][T10446] veth0_vlan: left promiscuous mode [ 848.270655][ T987] loop2: detected capacity change from 0 to 512 [ 848.300143][ T29] audit: type=1400 audit(1792494219.437:1907): avc: denied { write } for pid=968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.328354][ T964] md: could not open device unknown-block(0,0). [ 848.328423][ T964] md: md_import_device returned -6 [ 848.362173][ T993] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 848.383760][T10446] team0 (unregistering): Port device team_slave_1 removed [ 848.387690][ T29] audit: type=1400 audit(1792494219.537:1908): avc: denied { write } for pid=994 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.387936][T10446] team0 (unregistering): Port device team_slave_0 removed [ 848.442348][ T999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=999 comm=syz.6.10881 [ 848.469457][ T3024] 8021q: adding VLAN 0 to HW filter on device eth17 [ 848.492564][ T902] hsr_slave_0: entered promiscuous mode [ 848.493101][ T902] hsr_slave_1: entered promiscuous mode [ 848.548171][ T1009] program syz.2.10885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 848.647009][ T29] audit: type=1400 audit(1792494219.787:1909): avc: denied { write } for pid=1010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 848.685661][ T1027] ptp ptp0: guarantee physical clock free running [ 848.722163][ T3024] 8021q: adding VLAN 0 to HW filter on device eth19 [ 848.730399][ T1036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=1036 comm=syz.2.10892 [ 848.898323][ T1071] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=1071 comm=syz.2.10904 [ 848.920129][ T1075] 9p: Bad value for 'rfdno' [ 849.103106][ T1111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=1111 comm=syz.2.10915 [ 849.177866][ T1124] loop0: detected capacity change from 0 to 128 [ 849.179070][ T1124] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 849.179400][ T1124] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 849.185766][T10446] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 849.214469][ T902] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 849.228886][ T902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 849.229726][ T902] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 849.235166][ T902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 849.238989][ T902] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 849.265627][ T902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 849.269689][ T902] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 849.281660][ T902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 849.309594][ T1142] FAULT_INJECTION: forcing a failure. [ 849.309594][ T1142] name failslab, interval 1, probability 0, space 0, times 0 [ 849.309691][ T1142] CPU: 1 UID: 0 PID: 1142 Comm: syz.0.10923 Not tainted syzkaller #0 PREEMPT(lazy) [ 849.309789][ T1142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 849.309806][ T1142] Call Trace: [ 849.309814][ T1142] [ 849.309906][ T1142] __dump_stack+0x1d/0x30 [ 849.309935][ T1142] dump_stack_lvl+0x95/0xd0 [ 849.310009][ T1142] dump_stack+0x15/0x1b [ 849.310030][ T1142] should_fail_ex+0x262/0x280 [ 849.310059][ T1142] should_failslab+0x8c/0xb0 [ 849.310091][ T1142] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 849.310208][ T1142] ? put_fs_context+0x4d6/0x530 [ 849.310238][ T1142] ? setup_mq_sysctls+0x49/0x3e0 [ 849.310285][ T1142] ? setup_mq_sysctls+0x49/0x3e0 [ 849.310322][ T1142] kmemdup_noprof+0x2b/0x70 [ 849.310384][ T1142] setup_mq_sysctls+0x49/0x3e0 [ 849.310480][ T1142] copy_ipcs+0x28b/0x460 [ 849.310514][ T1142] create_new_namespaces+0x121/0x420 [ 849.310567][ T1142] unshare_nsproxy_namespaces+0x115/0x150 [ 849.310641][ T1142] ksys_unshare+0x3a3/0x690 [ 849.310682][ T1142] __x64_sys_unshare+0x1f/0x30 [ 849.310708][ T1142] x64_sys_call+0x1e33/0x2550 [ 849.310738][ T1142] do_syscall_64+0x112/0x360 [ 849.310905][ T1142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.310932][ T1142] RIP: 0033:0x7fdc8050e559 [ 849.310953][ T1142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.311026][ T1142] RSP: 002b:00007fdc7ef67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 849.311052][ T1142] RAX: ffffffffffffffda RBX: 00007fdc80795fa0 RCX: 00007fdc8050e559 [ 849.311070][ T1142] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 849.311086][ T1142] RBP: 00007fdc805a5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 849.311102][ T1142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.311147][ T1142] R13: 00007fdc80796038 R14: 00007fdc80795fa0 R15: 00007ffd3a84ad18 [ 849.311197][ T1142] [ 849.498705][ T902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.514166][ T902] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.519927][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.519968][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.527574][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.527611][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.592143][ T1174] program syz.0.10932 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.631659][ T1180] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 849.681740][ T1192] ip_tables: iptables: counters copy to user failed while replacing table [ 849.714402][ T1196] loop2: detected capacity change from 0 to 128 [ 849.804776][ T902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.840566][ T1221] program syz.8.10943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 849.867503][ T1225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1225 comm=syz.8.10944 [ 849.867794][ T1225] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10944'. [ 849.951691][ T902] veth0_vlan: entered promiscuous mode [ 849.956407][ T902] veth1_vlan: entered promiscuous mode [ 849.967593][ T902] veth0_macvtap: entered promiscuous mode [ 849.969450][ T902] veth1_macvtap: entered promiscuous mode [ 849.975740][ T902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.979853][ T902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 849.988022][ T1240] FAULT_INJECTION: forcing a failure. [ 849.988022][ T1240] name failslab, interval 1, probability 0, space 0, times 0 [ 849.988055][ T1240] CPU: 1 UID: 0 PID: 1240 Comm: syz.8.10948 Not tainted syzkaller #0 PREEMPT(lazy) [ 849.988083][ T1240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 849.988097][ T1240] Call Trace: [ 849.988106][ T1240] [ 849.988115][ T1240] __dump_stack+0x1d/0x30 [ 849.988181][ T1240] dump_stack_lvl+0x95/0xd0 [ 849.988303][ T1240] dump_stack+0x15/0x1b [ 849.988326][ T1240] should_fail_ex+0x262/0x280 [ 849.988357][ T1240] should_failslab+0x8c/0xb0 [ 849.988392][ T1240] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 849.988518][ T1240] ? put_fs_context+0x4d6/0x530 [ 849.988544][ T1240] ? setup_mq_sysctls+0x49/0x3e0 [ 849.988575][ T1240] ? setup_mq_sysctls+0x49/0x3e0 [ 849.988684][ T1240] kmemdup_noprof+0x2b/0x70 [ 849.988771][ T1240] setup_mq_sysctls+0x49/0x3e0 [ 849.988803][ T1240] copy_ipcs+0x28b/0x460 [ 849.988858][ T1240] create_new_namespaces+0x121/0x420 [ 849.988919][ T1240] unshare_nsproxy_namespaces+0x115/0x150 [ 849.988953][ T1240] ksys_unshare+0x3a3/0x690 [ 849.989033][ T1240] __x64_sys_unshare+0x1f/0x30 [ 849.989077][ T1240] x64_sys_call+0x1e33/0x2550 [ 849.989103][ T1240] do_syscall_64+0x112/0x360 [ 849.989133][ T1240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.989296][ T1240] RIP: 0033:0x7f513cfae559 [ 849.989341][ T1240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.989361][ T1240] RSP: 002b:00007f513ba07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 849.989384][ T1240] RAX: ffffffffffffffda RBX: 00007f513d235fa0 RCX: 00007f513cfae559 [ 849.989400][ T1240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000028000600 [ 849.989495][ T1240] RBP: 00007f513d045ad8 R08: 0000000000000000 R09: 0000000000000000 [ 849.989510][ T1240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 849.989525][ T1240] R13: 00007f513d236038 R14: 00007f513d235fa0 R15: 00007fffae628078 [ 849.989544][ T1240] [ 850.044265][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.044494][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.044745][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.044829][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.048302][ T1243] netlink: 'syz.8.10949': attribute type 4 has an invalid length. [ 850.211723][ T1255] program syz.8.10953 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 850.304537][ T1276] netlink: 'syz.8.10959': attribute type 4 has an invalid length. [ 850.353784][ T1282] syzkaller0: entered promiscuous mode [ 850.353808][ T1282] syzkaller0: entered allmulticast mode [ 850.466772][ T1289] md: could not open device unknown-block(0,0). [ 850.466797][ T1289] md: md_import_device returned -6 [ 850.725310][ T1324] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10980'. [ 850.782662][ T1333] ip_tables: iptables: counters copy to user failed while replacing table [ 850.990170][ T1360] ip_tables: iptables: counters copy to user failed while replacing table [ 851.239020][ T1377] loop5: detected capacity change from 0 to 128 [ 851.239679][ T1377] FAT-fs (loop5): data area starts beyond volume (33 > 0) [ 851.239731][ T1377] FAT-fs (loop5): Can't find a valid FAT filesystem [ 851.347523][ T1391] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11012'. [ 851.567312][ T1419] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11025'. [ 851.797776][ T1436] xt_hashlimit: size too large, truncated to 1048576 [ 851.797796][ T1436] xt_hashlimit: invalid rate [ 851.920842][ T1440] FAULT_INJECTION: forcing a failure. [ 851.920842][ T1440] name failslab, interval 1, probability 0, space 0, times 0 [ 851.920878][ T1440] CPU: 1 UID: 0 PID: 1440 Comm: syz.0.11034 Not tainted syzkaller #0 PREEMPT(lazy) [ 851.920955][ T1440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 851.920970][ T1440] Call Trace: [ 851.920979][ T1440] [ 851.920988][ T1440] __dump_stack+0x1d/0x30 [ 851.921063][ T1440] dump_stack_lvl+0x95/0xd0 [ 851.921089][ T1440] dump_stack+0x15/0x1b [ 851.921111][ T1440] should_fail_ex+0x262/0x280 [ 851.921139][ T1440] ? alloc_empty_file+0x70/0x1e0 [ 851.921209][ T1440] should_failslab+0x8c/0xb0 [ 851.921242][ T1440] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 851.921277][ T1440] ? alloc_empty_file+0x70/0x1e0 [ 851.921304][ T1440] alloc_empty_file+0x70/0x1e0 [ 851.921395][ T1440] alloc_file_clone+0x39/0xa0 [ 851.921423][ T1440] create_pipe_files+0x290/0x440 [ 851.921452][ T1440] __do_pipe_flags+0x44/0x140 [ 851.921484][ T1440] do_pipe2+0x61/0x140 [ 851.921508][ T1440] ? switch_fpu_return+0xe7/0x1b0 [ 851.921561][ T1440] __x64_sys_pipe+0x21/0x30 [ 851.921618][ T1440] x64_sys_call+0x24fd/0x2550 [ 851.921729][ T1440] do_syscall_64+0x112/0x360 [ 851.921763][ T1440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 851.921838][ T1440] RIP: 0033:0x7fdc8050e559 [ 851.921858][ T1440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 851.921880][ T1440] RSP: 002b:00007fdc7ef67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 851.921907][ T1440] RAX: ffffffffffffffda RBX: 00007fdc80795fa0 RCX: 00007fdc8050e559 [ 851.921937][ T1440] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 851.921953][ T1440] RBP: 00007fdc805a5ad8 R08: 0000000000000000 R09: 0000000000000000 [ 851.921967][ T1440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 851.921993][ T1440] R13: 00007fdc80796038 R14: 00007fdc80795fa0 R15: 00007ffd3a84ad18 [ 851.922011][ T1440] [ 852.241831][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 852.241852][ T29] audit: type=1400 audit(1792494223.377:1932): avc: denied { setattr } for pid=1444 comm="syz.8.11036" name="secretmem" dev="secretmem" ino=97859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 852.291656][ T1447] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11037'. [ 852.358418][ T1459] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11042'. [ 852.437702][ T1461] md: could not open device unknown-block(0,0). [ 852.437720][ T1461] md: md_import_device returned -6 [ 852.509795][ T1473] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11048'. [ 852.806051][ T32] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.974303][ T1483] rxe_eth0 speed is unknown, defaulting to 1000 [ 853.015474][ T1495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11055'. [ 853.163228][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.163267][ T1483] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.163537][ T1483] bridge_slave_0: entered allmulticast mode [ 853.163991][ T1483] bridge_slave_0: entered promiscuous mode [ 853.165337][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.165368][ T1483] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.165543][ T1483] bridge_slave_1: entered allmulticast mode [ 853.165954][ T1483] bridge_slave_1: entered promiscuous mode [ 853.178780][ T1483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.179998][ T1483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.192767][ T1483] team0: Port device team_slave_0 added [ 853.193773][ T1483] team0: Port device team_slave_1 added [ 853.204118][ T1483] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 853.204134][ T1483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.204176][ T1483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.204791][ T1483] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.204804][ T1483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.204830][ T1483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.234599][ T1483] hsr_slave_0: entered promiscuous mode [ 853.235107][ T1483] hsr_slave_1: entered promiscuous mode [ 853.236431][ T1483] debugfs: 'hsr0' already exists in 'hsr' [ 853.236447][ T1483] Cannot create hsr debugfs directory [ 853.403295][ T1516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1516 comm=syz.2.11061 [ 853.403480][ T1516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11061'. [ 853.409135][ T1512] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11059'. [ 853.468387][ T32] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.490118][ T1483] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 853.496328][ T1526] loop0: detected capacity change from 0 to 128 [ 853.507058][ T1483] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 853.507638][ T1483] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 853.507673][ T1526] FAT-fs (loop0): data area starts beyond volume (33 > 0) [ 853.507698][ T1526] FAT-fs (loop0): Can't find a valid FAT filesystem [ 853.541599][ T1483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 853.544304][ T1483] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 853.553917][ T1483] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 853.564155][ T32] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.566395][ T1483] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 853.568531][ T1483] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 853.595809][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.595848][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.619795][ T32] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 853.667960][ T1483] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.685862][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.707123][ T1483] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.717267][ T1540] md: could not open device unknown-block(0,0). [ 853.717287][ T1540] md: md_import_device returned -6 [ 853.736878][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.736913][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.770907][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.770944][T10446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.797481][ T32] bridge_slave_1: left allmulticast mode [ 853.797504][ T32] bridge_slave_1: left promiscuous mode [ 853.797654][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.799983][ T32] bridge_slave_0: left allmulticast mode [ 853.800018][ T32] bridge_slave_0: left promiscuous mode [ 853.800099][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.903353][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.905263][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.906297][ T32] bond0 (unregistering): Released all slaves [ 853.960807][ T1563] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11075'. [ 854.013438][ T32] hsr_slave_0: left promiscuous mode [ 854.015338][ T32] hsr_slave_1: left promiscuous mode [ 854.015861][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 854.015952][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.018103][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.018120][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.063583][ T32] veth1_macvtap: left promiscuous mode [ 854.063621][ T32] veth0_macvtap: left promiscuous mode [ 854.063704][ T32] veth1_vlan: left promiscuous mode [ 854.063744][ T32] veth0_vlan: left promiscuous mode [ 854.174760][ T32] team0 (unregistering): Port device team_slave_1 removed [ 854.181189][ T32] team0 (unregistering): Port device team_slave_0 removed [ 854.186398][ T29] audit: type=1400 audit(1792494225.327:1933): avc: denied { write } for pid=1574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.260294][ T29] audit: type=1400 audit(1792494225.397:1934): avc: denied { write } for pid=1594 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.276776][ T29] audit: type=1326 audit(1792494225.407:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1588 comm="syz.0.11080" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc8050e559 code=0x0 [ 854.305756][ T3024] 8021q: adding VLAN 0 to HW filter on device eth17 [ 854.496231][ T29] audit: type=1400 audit(1792494225.637:1936): avc: denied { write } for pid=1609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.518187][ T29] audit: type=1400 audit(1792494225.647:1937): avc: denied { write } for pid=1633 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.535342][ T1483] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.536436][ T3024] 8021q: adding VLAN 0 to HW filter on device eth18 [ 854.605374][ T1623] md: could not open device unknown-block(0,0). [ 854.605417][ T1623] md: md_import_device returned -6 [ 854.708725][ T1657] netlink: 'syz.2.11091': attribute type 4 has an invalid length. [ 854.734540][ T1664] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1664 comm=syz.8.11092 [ 854.764263][ T29] audit: type=1400 audit(1792494225.907:1938): avc: denied { write } for pid=1643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.820698][ T29] audit: type=1400 audit(1792494225.957:1939): avc: denied { write } for pid=1673 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 854.889815][ T3024] 8021q: adding VLAN 0 to HW filter on device eth19 [ 854.900118][ T1483] veth0_vlan: entered promiscuous mode [ 854.908484][ T1483] veth1_vlan: entered promiscuous mode [ 854.937911][ T1483] veth0_macvtap: entered promiscuous mode [ 854.943724][ T1483] veth1_macvtap: entered promiscuous mode [ 854.955845][ T1483] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.965232][ T1690] loop8: detected capacity change from 0 to 128 [ 854.968648][ T1690] FAT-fs (loop8): data area starts beyond volume (33 > 0) [ 854.968673][ T1690] FAT-fs (loop8): Can't find a valid FAT filesystem [ 854.995262][ T1483] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.032108][ T32] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.032420][ T32] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.032461][ T32] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.032529][ T32] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.067515][ T1696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1696 comm=syz.2.11103 [ 855.204473][ T1725] loop0: detected capacity change from 0 to 128 [ 855.207295][ T1725] FAT-fs (loop0): data area starts beyond volume (33 > 0) [ 855.207319][ T1725] FAT-fs (loop0): Can't find a valid FAT filesystem [ 855.236088][ T29] audit: type=1400 audit(1792494226.387:1940): avc: denied { write } for pid=1699 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.288468][ T29] audit: type=1400 audit(1792494226.427:1941): avc: denied { write } for pid=1732 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 855.333818][ T3024] 8021q: adding VLAN 0 to HW filter on device eth20 [ 855.363626][T10446] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.417988][T10446] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.456825][ T1745] loop2: detected capacity change from 0 to 512 [ 855.503170][T10446] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.568241][T10446] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 855.633204][ T1770] netlink: 'syz.2.11125': attribute type 4 has an invalid length. [ 855.676665][ T1739] rxe_eth0 speed is unknown, defaulting to 1000 [ 855.690979][T10446] bridge_slave_1: left allmulticast mode [ 855.691002][T10446] bridge_slave_1: left promiscuous mode [ 855.691107][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.699625][T10446] bridge_slave_0: left allmulticast mode [ 855.699725][T10446] bridge_slave_0: left promiscuous mode [ 855.699834][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.735821][ T1779] loop9: detected capacity change from 0 to 512 [ 855.797464][T10446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 855.798836][T10446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 855.799544][T10446] bond0 (unregistering): Released all slaves [ 855.846460][T10446] tipc: Left network mode [ 855.862785][ T1789] loop2: detected capacity change from 0 to 256 [ 855.916471][ T1748] rxe_eth0 speed is unknown, defaulting to 1000 [ 855.988078][T10446] hsr_slave_0: left promiscuous mode [ 855.988377][T10446] hsr_slave_1: left promiscuous mode [ 855.988915][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.988932][T10446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.989364][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.989377][T10446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.995075][T10446] veth1_macvtap: left promiscuous mode [ 855.995103][T10446] veth0_macvtap: left promiscuous mode [ 855.995168][T10446] veth1_vlan: left promiscuous mode [ 855.995256][T10446] veth0_vlan: left promiscuous mode [ 856.271145][T10446] team0 (unregistering): Port device team_slave_1 removed [ 856.306229][T10446] team0 (unregistering): Port device team_slave_0 removed [ 856.971051][ T1739] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.971089][ T1739] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.971236][ T1739] bridge_slave_0: entered allmulticast mode [ 856.971731][ T1739] bridge_slave_0: entered promiscuous mode [ 856.980029][ T1739] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.980067][ T1739] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.980134][ T1739] bridge_slave_1: entered allmulticast mode [ 856.980653][ T1739] bridge_slave_1: entered promiscuous mode [ 857.028910][ T1802] infiniband syz0: set active [ 857.028929][ T1802] infiniband syz0: added bridge_slave_1 [ 857.046628][ T1739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.055785][ T1739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.079798][ T1802] RDS/IB: syz0: added [ 857.079820][ T1802] smc: adding ib device syz0 with port count 1 [ 857.079836][ T1802] smc: ib device syz0 port 1 has no pnetid [ 857.086917][T10446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.109663][ T1739] team0: Port device team_slave_0 added [ 857.110920][ T1826] loop9: detected capacity change from 0 to 512 [ 857.116202][ T1739] team0: Port device team_slave_1 added [ 857.147284][T10446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.222357][ T3024] 8021q: adding VLAN 0 to HW filter on device eth21 [ 857.223262][ T1739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.223358][ T1739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.223394][ T1739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.228154][T10446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.294255][ T1739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.294271][ T1739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.294301][ T1739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.394168][T10446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.398051][ T1748] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.398085][ T1748] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.398295][ T1748] bridge_slave_0: entered allmulticast mode [ 857.398907][ T1748] bridge_slave_0: entered promiscuous mode [ 857.416659][ T1748] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.416699][ T1748] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.416886][ T1748] bridge_slave_1: entered allmulticast mode [ 857.417454][ T1748] bridge_slave_1: entered promiscuous mode [ 857.422494][ T1739] hsr_slave_0: entered promiscuous mode [ 857.422913][ T1739] hsr_slave_1: entered promiscuous mode [ 857.476258][ T1748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.485098][ T1748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.565470][ T1748] team0: Port device team_slave_0 added [ 857.567561][ T1748] team0: Port device team_slave_1 added [ 857.624212][ T1748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.624231][ T1748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.624259][ T1748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 857.624977][ T1748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 857.624988][ T1748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 857.625035][ T1748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 857.637670][T10446] bridge_slave_1: left allmulticast mode [ 857.637692][T10446] bridge_slave_1: left promiscuous mode [ 857.637918][T10446] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.638866][T10446] bridge_slave_0: left allmulticast mode [ 857.638887][T10446] bridge_slave_0: left promiscuous mode [ 857.639034][T10446] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.673068][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 857.673087][ T29] audit: type=1400 audit(1792494228.817:1974): avc: denied { write } for pid=1843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.731549][ T29] audit: type=1400 audit(1792494228.867:1975): avc: denied { write } for pid=1856 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 857.781492][T10446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.783811][T10446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.784578][T10446] bond0 (unregistering): Released all slaves [ 857.791870][ T3024] 8021q: adding VLAN 0 to HW filter on device eth22 [ 857.858101][T10446] tipc: Left network mode [ 857.860409][ T1748] hsr_slave_0: entered promiscuous mode [ 857.860727][ T1748] hsr_slave_1: entered promiscuous mode [ 857.860951][ T1748] debugfs: 'hsr0' already exists in 'hsr' [ 857.860966][ T1748] Cannot create hsr debugfs directory [ 858.291480][ T1879] netlink: 'syz.9.11143': attribute type 1 has an invalid length. [ 858.443154][ T29] audit: type=1400 audit(1792494229.587:1976): avc: denied { write } for pid=1863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.515092][ T29] audit: type=1400 audit(1792494229.647:1977): avc: denied { write } for pid=1887 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.541762][ T3024] 8021q: adding VLAN 0 to HW filter on device eth23 [ 858.750472][T10446] hsr_slave_0: left promiscuous mode [ 858.751314][T10446] hsr_slave_1: left promiscuous mode [ 858.766806][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 858.766828][T10446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 858.767906][T10446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 858.767923][T10446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 858.771210][ T29] audit: type=1400 audit(1792494229.907:1978): avc: denied { write } for pid=1891 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.826010][T10446] veth1_macvtap: left promiscuous mode [ 858.826042][T10446] veth0_macvtap: left promiscuous mode [ 858.826083][T10446] veth1_vlan: left promiscuous mode [ 858.826191][T10446] veth0_vlan: left promiscuous mode [ 858.856009][ T29] audit: type=1400 audit(1792494229.997:1979): avc: denied { write } for pid=1907 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 858.980543][T10446] team0 (unregistering): Port device team_slave_1 removed [ 858.990117][T10446] team0 (unregistering): Port device team_slave_0 removed [ 859.023315][ T3024] 8021q: adding VLAN 0 to HW filter on device eth24 [ 859.024693][ T1917] bridge_slave_0: default FDB implementation only supports local addresses [ 859.186519][ T29] audit: type=1400 audit(1792494230.327:1980): avc: denied { write } for pid=1925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.246222][ T29] audit: type=1400 audit(1792494230.387:1981): avc: denied { write } for pid=1944 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.264119][ T1739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 859.285683][ T1739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.303846][ T3024] 8021q: adding VLAN 0 to HW filter on device eth26 [ 859.310403][ T1739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 859.315107][ T1739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.317217][ T1739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 859.343284][ T1739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.345410][ T1739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 859.348420][ T1739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.384148][ T1955] netlink: 'syz.9.11157': attribute type 5 has an invalid length. [ 859.384182][ T1955] __nla_validate_parse: 4 callbacks suppressed [ 859.384196][ T1955] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11157'. [ 859.462442][ T1739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.487551][ T1958] team0: Device veth0_vlan failed to register rx_handler [ 859.529789][ T1739] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.538422][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.538462][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.542259][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.542391][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.574964][ T1739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 859.595333][ T29] audit: type=1400 audit(1792494230.737:1982): avc: denied { write } for pid=1956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.638618][ T1748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 859.652634][ T1748] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 859.653272][ T1748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 859.661347][ T29] audit: type=1400 audit(1792494230.797:1983): avc: denied { write } for pid=1973 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 859.662169][ T1748] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 859.676828][ T1748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 859.714827][ T1748] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 859.715619][ T1748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 859.719334][ T1748] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 859.720181][ T3024] 8021q: adding VLAN 0 to HW filter on device eth27 [ 859.847918][ T1739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 859.871648][ T1748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.904740][ T1748] 8021q: adding VLAN 0 to HW filter on device team0 [ 859.916451][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.916488][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 859.927205][T10217] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.927241][T10217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 860.240848][ T1739] veth0_vlan: entered promiscuous mode [ 860.254359][ T3024] 8021q: adding VLAN 0 to HW filter on device eth25 [ 860.259353][ T1739] veth1_vlan: entered promiscuous mode [ 860.293719][ T1748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 860.310228][ T1739] veth0_macvtap: entered promiscuous mode [ 860.318941][ T1739] veth1_macvtap: entered promiscuous mode [ 860.366805][ T1739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.381277][ T1739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.422654][T10217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.423604][ T32] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.423871][ T32] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.423919][ T32] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.532848][ T1748] veth0_vlan: entered promiscuous mode [ 860.547896][ T1748] veth1_vlan: entered promiscuous mode [ 860.601196][ T1748] veth0_macvtap: entered promiscuous mode [ 860.611205][ T1748] veth1_macvtap: entered promiscuous mode [ 860.636545][ T1748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 860.654701][ T1748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 860.672889][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.673433][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.673691][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.674005][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 860.749524][ T3024] 8021q: adding VLAN 0 to HW filter on device eth28 [ 860.849100][ T2086] loop1: detected capacity change from 0 to 512 [ 861.061422][ T2110] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 861.149262][ T2118] .: renamed from bond0 (while UP) [ 861.260119][ T2134] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2134 comm=syz.1.11185 [ 861.260328][ T2134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11185'. [ 861.489600][ T2166] sit2: entered promiscuous mode [ 861.489668][ T2166] sit2: entered allmulticast mode [ 861.503459][ T2166] team0: Device sit2 is of different type [ 861.616132][ T2177] EXT4-fs: test_dummy_encryption option not supported [ 861.653093][ T2153] FAULT_INJECTION: forcing a failure. [ 861.653093][ T2153] name failslab, interval 1, probability 0, space 0, times 0 [ 861.653131][ T2153] CPU: 1 UID: 0 PID: 2153 Comm: syz.1.11192 Not tainted syzkaller #0 PREEMPT(lazy) [ 861.653218][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 861.653246][ T2153] Call Trace: [ 861.653255][ T2153] [ 861.653266][ T2153] __dump_stack+0x1d/0x30 [ 861.653295][ T2153] dump_stack_lvl+0x95/0xd0 [ 861.653355][ T2153] dump_stack+0x15/0x1b [ 861.653379][ T2153] should_fail_ex+0x262/0x280 [ 861.653412][ T2153] ? __se_sys_timerfd_create+0xe2/0x2a0 [ 861.653444][ T2153] should_failslab+0x8c/0xb0 [ 861.653519][ T2153] __kmalloc_cache_noprof+0x7a/0x400 [ 861.653558][ T2153] ? __se_sys_timerfd_create+0xe2/0x2a0 [ 861.653590][ T2153] __se_sys_timerfd_create+0xe2/0x2a0 [ 861.653638][ T2153] __x64_sys_timerfd_create+0x31/0x40 [ 861.653706][ T2153] x64_sys_call+0x1ddb/0x2550 [ 861.653737][ T2153] do_syscall_64+0x112/0x360 [ 861.653771][ T2153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.653856][ T2153] RIP: 0033:0x7f2e6257e559 [ 861.653876][ T2153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.653897][ T2153] RSP: 002b:00007f2e60fd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 861.653957][ T2153] RAX: ffffffffffffffda RBX: 00007f2e62805fa0 RCX: 00007f2e6257e559 [ 861.653975][ T2153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 861.654047][ T2153] RBP: 00007f2e62615ad8 R08: 0000000000000000 R09: 0000000000000000 [ 861.654093][ T2153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 861.654108][ T2153] R13: 00007f2e62806038 R14: 00007f2e62805fa0 R15: 00007ffe7f627d38 [ 861.654130][ T2153] [ 862.323708][ T2255] netlink: 'syz.2.11209': attribute type 4 has an invalid length. [ 862.790533][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 862.790552][ T29] audit: type=1400 audit(1792494233.927:2006): avc: denied { write } for pid=2319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.836074][ T29] audit: type=1400 audit(1792494233.977:2007): avc: denied { write } for pid=2332 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.952471][ T2347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2347 comm=syz.6.11227 [ 862.952675][ T2347] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11227'. [ 862.972269][ T29] audit: type=1400 audit(1792494234.117:2008): avc: denied { write } for pid=2336 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 862.999915][ T29] audit: type=1400 audit(1792494234.137:2009): avc: denied { write } for pid=2353 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.123291][ T29] audit: type=1400 audit(1792494234.267:2010): avc: denied { write } for pid=2355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.171138][ T29] audit: type=1400 audit(1792494234.307:2011): avc: denied { write } for pid=2375 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.313102][ T2400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2400 comm=syz.1.11238 [ 863.313302][ T2400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11238'. [ 863.384420][ T29] audit: type=1400 audit(1792494234.527:2012): avc: denied { write } for pid=2381 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.438311][ T29] audit: type=1400 audit(1792494234.577:2013): avc: denied { write } for pid=2416 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.560193][ T29] audit: type=1400 audit(1792494234.697:2014): avc: denied { write } for pid=2424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.605505][ T29] audit: type=1400 audit(1792494234.747:2015): avc: denied { write } for pid=2443 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.681623][ T2449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2449 comm=syz.9.11249 [ 863.683009][ T2449] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11249'. [ 864.358939][ T2509] loop2: detected capacity change from 0 to 128 [ 864.370495][ T2509] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 864.372747][ T2509] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 864.375886][ T2509] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 864.375910][ T2509] FAT-fs (loop2): Filesystem has been set read-only [ 864.377560][ T2509] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 864.451245][ T2515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2515 comm=syz.6.11261 [ 864.452608][ T2515] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11261'. [ 865.068562][ T2580] tc_dump_action: action bad kind [ 865.304574][ T2618] EXT4-fs (sda1): re-mounted 4f91c6db-4997-4bb4-91b8-7e83a20c1bf1. [ 865.653085][ T2669] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 866.312904][ T2736] loop4: detected capacity change from 0 to 2048 [ 866.430179][ T2722] rxe_eth0 speed is unknown, defaulting to 1000 [ 866.692612][ T2722] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.692655][ T2722] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.698757][ T2722] bridge_slave_0: entered allmulticast mode [ 866.699279][ T2722] bridge_slave_0: entered promiscuous mode [ 866.706751][ T2722] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.706788][ T2722] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.707023][ T2722] bridge_slave_1: entered allmulticast mode [ 866.707579][ T2722] bridge_slave_1: entered promiscuous mode [ 866.727414][ T2722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 866.734739][ T2722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 866.761218][ T2722] team0: Port device team_slave_0 added [ 866.763274][ T2722] team0: Port device team_slave_1 added [ 866.797067][ T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 866.800225][ T2722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 866.800240][ T2722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.800313][ T2722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.800874][ T2722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.800919][ T2722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.800944][ T2722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.936624][ T2722] hsr_slave_0: entered promiscuous mode [ 866.937086][ T2722] hsr_slave_1: entered promiscuous mode [ 866.937398][ T2722] debugfs: 'hsr0' already exists in 'hsr' [ 866.937414][ T2722] Cannot create hsr debugfs directory [ 866.948463][ T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.000512][ T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.090293][ T2771] rxe_eth0 speed is unknown, defaulting to 1000 [ 867.125948][ T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.221675][ T41] bridge_slave_1: left allmulticast mode [ 867.221700][ T41] bridge_slave_1: left promiscuous mode [ 867.222076][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.233575][ T41] bridge_slave_0: left allmulticast mode [ 867.233599][ T41] bridge_slave_0: left promiscuous mode [ 867.233700][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.318855][ T41] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.333036][ T41] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.336099][ T41] . (unregistering): Released all slaves [ 867.349302][ T2785] rxe_eth0 speed is unknown, defaulting to 1000 [ 867.732744][ T2849] loop2: detected capacity change from 0 to 512 [ 867.828756][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 867.828829][ T29] audit: type=1400 audit(1792494238.967:2058): avc: denied { write } for pid=2848 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.097941][ T29] audit: type=1400 audit(1792494239.237:2059): avc: denied { write } for pid=2851 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.165499][ T29] audit: type=1326 audit(1792494239.307:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2863 comm="syz.4.11339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c791ee559 code=0x0 [ 868.170421][ T29] audit: type=1400 audit(1792494239.307:2061): avc: denied { write } for pid=2862 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.219585][ T2867] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11339'. [ 868.220737][ T41] hsr_slave_0: left promiscuous mode [ 868.221077][ T41] hsr_slave_1: left promiscuous mode [ 868.221452][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.221470][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.224155][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.224200][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.246958][ T41] veth1_macvtap: left promiscuous mode [ 868.247000][ T41] veth0_macvtap: left promiscuous mode [ 868.247055][ T41] veth1_vlan: left promiscuous mode [ 868.247097][ T41] veth0_vlan: left promiscuous mode [ 868.350828][ T2871] netlink: 33 bytes leftover after parsing attributes in process `syz.2.11341'. [ 868.350853][ T2871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11341'. [ 868.371494][ T41] team0 (unregistering): Port device team_slave_1 removed [ 868.379097][ T41] team0 (unregistering): Port device team_slave_0 removed [ 868.524631][ T2771] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.524669][ T2771] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.524755][ T2771] bridge_slave_0: entered allmulticast mode [ 868.525281][ T2771] bridge_slave_0: entered promiscuous mode [ 868.546692][ T29] audit: type=1400 audit(1792494239.687:2062): avc: denied { write } for pid=2873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.576349][ T29] audit: type=1400 audit(1792494239.717:2063): avc: denied { write } for pid=2900 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.579205][ T2771] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.579328][ T2771] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.579434][ T2771] bridge_slave_1: entered allmulticast mode [ 868.579972][ T2771] bridge_slave_1: entered promiscuous mode [ 868.607521][ T2785] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.607557][ T2785] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.607697][ T2785] bridge_slave_0: entered allmulticast mode [ 868.608351][ T2785] bridge_slave_0: entered promiscuous mode [ 868.609713][ T2785] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.609744][ T2785] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.609827][ T2785] bridge_slave_1: entered allmulticast mode [ 868.610369][ T2785] bridge_slave_1: entered promiscuous mode [ 868.644465][ T2785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.650122][ T2785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.673806][ T2785] team0: Port device team_slave_0 added [ 868.676217][ T2785] team0: Port device team_slave_1 added [ 868.702832][ T2785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.702848][ T2785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.702878][ T2785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.704427][ T2785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.704440][ T2785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.704467][ T2785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.753555][ T2785] hsr_slave_0: entered promiscuous mode [ 868.753961][ T2785] hsr_slave_1: entered promiscuous mode [ 868.754188][ T2785] debugfs: 'hsr0' already exists in 'hsr' [ 868.754204][ T2785] Cannot create hsr debugfs directory [ 868.788441][ T29] audit: type=1400 audit(1792494239.917:2064): avc: denied { write } for pid=2908 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.846589][ T29] audit: type=1400 audit(1792494239.967:2065): avc: denied { write } for pid=2921 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 868.885253][ T2771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.889293][ T2771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.929779][ T2771] team0: Port device team_slave_0 added [ 868.939191][ T2771] team0: Port device team_slave_1 added [ 868.962125][ T2771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.962140][ T2771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.962166][ T2771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.962656][ T2771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.962670][ T2771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.962754][ T2771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.001965][ T29] audit: type=1400 audit(1792494240.127:2066): avc: denied { write } for pid=2924 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.024153][ T29] audit: type=1400 audit(1792494240.167:2067): avc: denied { write } for pid=2935 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 869.097266][ T2722] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 869.116212][ T2722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.120361][ T2771] hsr_slave_0: entered promiscuous mode [ 869.120942][ T2771] hsr_slave_1: entered promiscuous mode [ 869.121253][ T2771] debugfs: 'hsr0' already exists in 'hsr' [ 869.121271][ T2771] Cannot create hsr debugfs directory [ 869.136132][ T2722] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 869.143818][ T2722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.159298][ T2722] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 869.170362][ T2722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.187844][ T41] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.197322][ T2722] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 869.214000][ T2722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.239871][ T41] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.284901][ T41] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.361461][ T41] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.459403][ T2722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.461846][ T2785] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 869.472869][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 869.496775][ T2785] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 869.498902][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 869.506560][ T2785] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 869.510602][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 869.533266][ T2785] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 869.536876][ T2785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.557556][ T41] bridge_slave_1: left allmulticast mode [ 869.557579][ T41] bridge_slave_1: left promiscuous mode [ 869.557743][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.558589][ T41] bridge_slave_0: left allmulticast mode [ 869.558608][ T41] bridge_slave_0: left promiscuous mode [ 869.558719][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.617197][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.618282][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.619035][ T41] bond0 (unregistering): Released all slaves [ 869.645512][ T2722] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.657171][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.657204][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.661234][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.661272][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.705267][ T2785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.745832][ T2785] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.751811][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.751857][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.760714][ T3451] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.760759][ T3451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.792518][ T41] hsr_slave_0: left promiscuous mode [ 869.794445][ T41] hsr_slave_1: left promiscuous mode [ 869.794981][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 869.794999][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.795371][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 869.795386][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.800249][ T41] veth1_macvtap: left promiscuous mode [ 869.800339][ T41] veth0_macvtap: left promiscuous mode [ 869.800410][ T41] veth1_vlan: left promiscuous mode [ 869.888915][ T41] team0 (unregistering): Port device team_slave_1 removed [ 869.891749][ T41] team0 (unregistering): Port device team_slave_0 removed [ 869.940255][ T3024] 8021q: adding VLAN 0 to HW filter on device eth1 [ 870.089674][ T2722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.132538][ T2785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 870.133518][ T3024] 8021q: adding VLAN 0 to HW filter on device eth3 [ 870.224553][ T2722] veth0_vlan: entered promiscuous mode [ 870.227547][ T2722] veth1_vlan: entered promiscuous mode [ 870.240069][ T2722] veth0_macvtap: entered promiscuous mode [ 870.241762][ T2722] veth1_macvtap: entered promiscuous mode [ 870.248668][ T2722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.253099][ T2722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.273170][ T346] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.273873][ T346] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.275747][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.275797][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.398498][ T3024] 8021q: adding VLAN 0 to HW filter on device eth2 [ 870.466996][ T3122] netlink: 33 bytes leftover after parsing attributes in process `syz.3.11358'. [ 870.467020][ T3122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11358'. [ 870.494847][ T2785] veth0_vlan: entered promiscuous mode [ 870.497617][ T2785] veth1_vlan: entered promiscuous mode [ 870.518964][ T2785] veth0_macvtap: entered promiscuous mode [ 870.529253][ T2785] veth1_macvtap: entered promiscuous mode [ 870.546830][ T2785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 870.550472][ T2785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 870.592530][ T41] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.592785][ T41] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.592971][ T41] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.593089][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.684751][ T3024] 8021q: adding VLAN 0 to HW filter on device eth4 [ 870.788914][ T2771] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 870.793658][ T2771] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 870.809663][ T2771] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 870.811813][ T2771] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 870.829792][ T2771] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 870.839478][ T2771] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 870.849409][ T2771] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 870.860651][ T2771] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 870.920137][ T41] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.937150][ T2771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.951998][ T2771] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.956390][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.956431][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.965223][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.965258][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.998997][ T41] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.058899][ T41] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.156521][ T3220] program syz.3.11374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 871.174730][ T41] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 871.311660][ T3224] loop5: detected capacity change from 0 to 512 [ 871.619561][ T41] bridge_slave_1: left allmulticast mode [ 871.619668][ T41] bridge_slave_1: left promiscuous mode [ 871.619925][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.621627][ T41] bridge_slave_0: left allmulticast mode [ 871.621643][ T41] bridge_slave_0: left promiscuous mode [ 871.625834][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.943684][ T3257] netlink: 'syz.2.11378': attribute type 4 has an invalid length. [ 871.961328][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.974937][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.977082][ T41] bond0 (unregistering): Released all slaves [ 872.061598][ T3269] program syz.5.11384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.105126][ T3277] netlink: 33 bytes leftover after parsing attributes in process `syz.2.11385'. [ 872.105147][ T3277] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11385'. [ 872.106550][ T41] hsr_slave_0: left promiscuous mode [ 872.108598][ T41] hsr_slave_1: left promiscuous mode [ 872.109397][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 872.109417][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.120410][ T3282] FAULT_INJECTION: forcing a failure. [ 872.120410][ T3282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.120499][ T3282] CPU: 1 UID: 0 PID: 3282 Comm: syz.3.11386 Not tainted syzkaller #0 PREEMPT(lazy) [ 872.120526][ T3282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 872.120540][ T3282] Call Trace: [ 872.120548][ T3282] [ 872.120556][ T3282] __dump_stack+0x1d/0x30 [ 872.120585][ T3282] dump_stack_lvl+0x95/0xd0 [ 872.120661][ T3282] dump_stack+0x15/0x1b [ 872.120683][ T3282] should_fail_ex+0x262/0x280 [ 872.120726][ T3282] should_fail+0xb/0x20 [ 872.120803][ T3282] should_fail_usercopy+0x1a/0x20 [ 872.120835][ T3282] _copy_from_user+0x1c/0xb0 [ 872.120925][ T3282] keyctl_pkey_params_get_2+0x7c/0x3e0 [ 872.120999][ T3282] keyctl_pkey_e_d_s+0x54/0x260 [ 872.121025][ T3282] __se_sys_keyctl+0x5fb/0xb70 [ 872.121182][ T3282] ? __se_sys_futex+0x2f6/0x370 [ 872.121214][ T3282] ? xfd_validate_state+0x45/0xf0 [ 872.121292][ T3282] ? restore_fpregs_from_fpstate+0x61/0x110 [ 872.121318][ T3282] __x64_sys_keyctl+0x67/0x80 [ 872.121348][ T3282] x64_sys_call+0x1fe0/0x2550 [ 872.121412][ T3282] do_syscall_64+0x112/0x360 [ 872.121443][ T3282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.121510][ T3282] RIP: 0033:0x7f5b4506e559 [ 872.121528][ T3282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.121550][ T3282] RSP: 002b:00007f5b43ac7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 872.121576][ T3282] RAX: ffffffffffffffda RBX: 00007f5b452f5fa0 RCX: 00007f5b4506e559 [ 872.121627][ T3282] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000001b [ 872.121641][ T3282] RBP: 00007f5b45105ad8 R08: 0000000000000000 R09: 0000000000000000 [ 872.121656][ T3282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.121670][ T3282] R13: 00007f5b452f6038 R14: 00007f5b452f5fa0 R15: 00007ffea7b8cef8 [ 872.121715][ T3282] [ 872.134400][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 872.134420][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.172005][ T41] veth1_macvtap: left promiscuous mode [ 872.172061][ T41] veth0_macvtap: left promiscuous mode [ 872.172105][ T41] veth1_vlan: left promiscuous mode [ 872.172230][ T41] veth0_vlan: left promiscuous mode [ 872.309565][ T41] team0 (unregistering): Port device team_slave_1 removed [ 872.326938][ T41] team0 (unregistering): Port device team_slave_0 removed [ 872.342798][ T3451] smc: removing ib device syz0 [ 872.420779][ T3299] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 872.437763][ T2771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.443285][ T2874] infiniband syz0: ib_query_port failed (-19) [ 872.560444][ T3305] netlink: 'syz.2.11394': attribute type 4 has an invalid length. [ 872.804201][ T3339] rxe_eth0 speed is unknown, defaulting to 1000 [ 872.845750][ T3348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11400'. [ 872.934140][ T2771] veth0_vlan: entered promiscuous mode [ 872.943872][ T2771] veth1_vlan: entered promiscuous mode [ 872.976657][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 872.976675][ T29] audit: type=1400 audit(1792494244.117:2088): avc: denied { write } for pid=3341 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 872.979966][ T2771] veth0_macvtap: entered promiscuous mode [ 873.018889][ T2771] veth1_macvtap: entered promiscuous mode [ 873.021509][ T3363] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 873.045799][ T29] audit: type=1400 audit(1792494244.187:2089): avc: denied { write } for pid=3364 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.082656][ T2771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 873.084415][ T2771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 873.172006][ T41] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.172197][ T41] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.172270][ T41] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.172307][ T41] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 873.253454][ T29] audit: type=1400 audit(1792494244.397:2090): avc: denied { write } for pid=3368 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.256246][ T3383] netlink: 'syz.2.11406': attribute type 4 has an invalid length. [ 873.334918][ T29] audit: type=1400 audit(1792494244.477:2091): avc: denied { write } for pid=3391 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.339331][ T3388] loop7: detected capacity change from 0 to 2048 [ 873.373627][ T3388] loop7: p1 p2 < > p3 p4 [ 873.373643][ T3388] loop7: partition table partially beyond EOD, truncated [ 873.373717][ T3388] loop7: p1 start 83886080 is beyond EOD, truncated [ 873.373735][ T3388] loop7: p2 start 4294902784 is beyond EOD, truncated [ 873.373751][ T3388] loop7: p3 start 3724543488 is beyond EOD, truncated [ 873.373785][ T3388] loop7: p4 size 8192 extends beyond EOD, truncated [ 873.446945][ T2807] udevd[2807]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 873.535860][ T29] audit: type=1400 audit(1792494244.677:2092): avc: denied { write } for pid=3401 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.588608][ T29] audit: type=1400 audit(1792494244.727:2093): avc: denied { write } for pid=3424 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.684273][ T3432] netlink: 'syz.3.11418': attribute type 4 has an invalid length. [ 873.752570][ T3439] bridge_slave_0: left allmulticast mode [ 873.752598][ T3439] bridge_slave_0: left promiscuous mode [ 873.752738][ T3439] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.790422][ T3439] bridge_slave_1: left allmulticast mode [ 873.790489][ T3439] bridge_slave_1: left promiscuous mode [ 873.790657][ T3439] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.813684][ T3439] bond0: (slave bond_slave_0): Releasing backup interface [ 873.820951][ T3439] bond0: (slave bond_slave_1): Releasing backup interface [ 873.841145][ T3439] team0: Port device team_slave_0 removed [ 873.864477][ T3439] team0: Port device team_slave_1 removed [ 873.865453][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 873.865531][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.868082][ T29] audit: type=1400 audit(1792494245.007:2094): avc: denied { write } for pid=3438 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 873.891675][ T3439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 873.891729][ T3439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.898333][ T3439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 873.922092][ T29] audit: type=1400 audit(1792494245.047:2095): avc: denied { write } for pid=3459 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.143900][ T3473] loop3: detected capacity change from 0 to 512 [ 874.220564][ T3455] vlan0: entered promiscuous mode [ 874.261390][ T3455] team0: Port device vlan0 added [ 874.516673][ T29] audit: type=1400 audit(1792494245.657:2096): avc: denied { write } for pid=3462 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.565375][ T3485] FAULT_INJECTION: forcing a failure. [ 874.565375][ T3485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 874.565408][ T3485] CPU: 1 UID: 0 PID: 3485 Comm: syz.7.11427 Not tainted syzkaller #0 PREEMPT(lazy) [ 874.565439][ T3485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 874.565482][ T3485] Call Trace: [ 874.565556][ T3485] [ 874.565564][ T3485] __dump_stack+0x1d/0x30 [ 874.565635][ T3485] dump_stack_lvl+0x95/0xd0 [ 874.565662][ T3485] dump_stack+0x15/0x1b [ 874.565687][ T3485] should_fail_ex+0x262/0x280 [ 874.565717][ T3485] should_fail+0xb/0x20 [ 874.565760][ T3485] should_fail_usercopy+0x1a/0x20 [ 874.565797][ T3485] _copy_to_user+0x20/0xa0 [ 874.565855][ T3485] xt_data_to_user+0x5f/0x150 [ 874.565959][ T3485] xt_target_to_user+0xc3/0xf0 [ 874.565983][ T3485] do_ipt_get_ctl+0xaeb/0xcb0 [ 874.566061][ T3485] ? _raw_spin_unlock_bh+0x17/0x20 [ 874.566129][ T3485] ? release_sock+0x10c/0x180 [ 874.566172][ T3485] ? sockopt_release_sock+0x41/0x50 [ 874.566265][ T3485] ? rcu_read_unlock_special+0xa0/0x210 [ 874.566328][ T3485] nf_getsockopt+0x190/0x1b0 [ 874.566389][ T3485] ip_getsockopt+0x137/0x180 [ 874.566503][ T3485] udp_getsockopt+0xa5/0x230 [ 874.566566][ T3485] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 874.566595][ T3485] sock_common_getsockopt+0x60/0x70 [ 874.566639][ T3485] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 874.566670][ T3485] do_sock_getsockopt+0x2f5/0x570 [ 874.566700][ T3485] ? raw_irqentry_exit_cond_resched+0x49/0x60 [ 874.566746][ T3485] __x64_sys_getsockopt+0x11d/0x1a0 [ 874.566812][ T3485] x64_sys_call+0x1032/0x2550 [ 874.566843][ T3485] do_syscall_64+0x112/0x360 [ 874.566880][ T3485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.566919][ T3485] RIP: 0033:0x7f691804e559 [ 874.566940][ T3485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.566960][ T3485] RSP: 002b:00007f6916aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 874.566987][ T3485] RAX: ffffffffffffffda RBX: 00007f69182d5fa0 RCX: 00007f691804e559 [ 874.567005][ T3485] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000005 [ 874.567054][ T3485] RBP: 00007f69180e5ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 874.567071][ T3485] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 874.567158][ T3485] R13: 00007f69182d6038 R14: 00007f69182d5fa0 R15: 00007fff9434cc88 [ 874.567179][ T3485] [ 874.732535][ T29] audit: type=1400 audit(1792494245.877:2097): avc: denied { write } for pid=3491 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 874.840995][ T3500] netlink: 'syz.7.11432': attribute type 4 has an invalid length. [ 874.850038][ T3500] netlink: 'syz.7.11432': attribute type 4 has an invalid length. [ 875.078326][ T3526] loop5: detected capacity change from 0 to 512 [ 875.106602][ T3530] loop7: detected capacity change from 0 to 512 [ 875.283957][ T3552] loop7: detected capacity change from 0 to 128 [ 875.513000][ T3585] ./dev/sda1: Can't lookup blockdev [ 875.659904][ T3599] netlink: 20 bytes leftover after parsing attributes in process `syz.7.11458'. [ 875.858715][ T3629] ./dev/sda1: Can't lookup blockdev [ 875.903884][ T3634] FAULT_INJECTION: forcing a failure. [ 875.903884][ T3634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 875.903922][ T3634] CPU: 1 UID: 0 PID: 3634 Comm: syz.5.11467 Not tainted syzkaller #0 PREEMPT(lazy) [ 875.903999][ T3634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 875.904014][ T3634] Call Trace: [ 875.904075][ T3634] [ 875.904082][ T3634] __dump_stack+0x1d/0x30 [ 875.904108][ T3634] dump_stack_lvl+0x95/0xd0 [ 875.904207][ T3634] dump_stack+0x15/0x1b [ 875.904232][ T3634] should_fail_ex+0x262/0x280 [ 875.904279][ T3634] should_fail+0xb/0x20 [ 875.904372][ T3634] should_fail_usercopy+0x1a/0x20 [ 875.904404][ T3634] _copy_from_user+0x1c/0xb0 [ 875.904434][ T3634] memdup_user+0x5e/0xd0 [ 875.904527][ T3634] strndup_user+0x68/0xb0 [ 875.904557][ T3634] __se_sys_mount+0x4d/0x2e0 [ 875.904604][ T3634] ? restore_fpregs_from_fpstate+0x61/0x110 [ 875.904636][ T3634] __x64_sys_mount+0x67/0x80 [ 875.904660][ T3634] x64_sys_call+0xc3b/0x2550 [ 875.904684][ T3634] do_syscall_64+0x112/0x360 [ 875.904776][ T3634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 875.904821][ T3634] RIP: 0033:0x7f3894bce559 [ 875.904916][ T3634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 875.904940][ T3634] RSP: 002b:00007f3893627028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 875.904968][ T3634] RAX: ffffffffffffffda RBX: 00007f3894e55fa0 RCX: 00007f3894bce559 [ 875.904987][ T3634] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000000 [ 875.905005][ T3634] RBP: 00007f3894c65ad8 R08: 0000000000000000 R09: 0000000000000000 [ 875.905154][ T3634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 875.905170][ T3634] R13: 00007f3894e56038 R14: 00007f3894e55fa0 R15: 00007ffdc04aadf8 [ 875.905217][ T3634] [ 875.970318][ T3647] bridge0: port 3(syz_tun) entered blocking state [ 875.970354][ T3647] bridge0: port 3(syz_tun) entered disabled state [ 875.970517][ T3647] syz_tun: entered allmulticast mode [ 875.971080][ T3647] syz_tun: entered promiscuous mode [ 875.971214][ T3647] bridge0: port 3(syz_tun) entered blocking state [ 875.971244][ T3647] bridge0: port 3(syz_tun) entered forwarding state [ 876.039882][ T3652] syzkaller0: tun_chr_ioctl cmd 62744 [ 876.320665][ T3668] loop5: detected capacity change from 0 to 512 [ 876.789470][ T3688] loop3: detected capacity change from 0 to 128 [ 876.831561][ T3690] loop4: detected capacity change from 0 to 512 [ 876.843683][ T3692] sit1: entered promiscuous mode [ 876.843720][ T3692] sit1: entered allmulticast mode [ 876.925408][ T3692] team0: Device sit1 is of different type [ 877.079259][ T3735] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11491'. [ 877.092332][ T3734] loop7: detected capacity change from 0 to 512 [ 877.145347][ T3741] batadv_slave_1: entered promiscuous mode [ 877.145574][ T3739] batadv_slave_1: left promiscuous mode [ 877.312998][ T3765] loop7: detected capacity change from 0 to 256 [ 877.330494][ T3765] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 877.347891][ T3765] FAT-fs (loop7): error, invalid FAT chain (i_pos 196, last_block 8) [ 877.347922][ T3765] FAT-fs (loop7): Filesystem has been set read-only [ 877.347946][ T3765] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2056) [ 877.976739][ T3797] FAULT_INJECTION: forcing a failure. [ 877.976739][ T3797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 877.976832][ T3797] CPU: 1 UID: 0 PID: 3797 Comm: syz.5.11510 Not tainted syzkaller #0 PREEMPT(lazy) [ 877.976862][ T3797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 877.976877][ T3797] Call Trace: [ 877.976885][ T3797] [ 877.976894][ T3797] __dump_stack+0x1d/0x30 [ 877.976977][ T3797] dump_stack_lvl+0x95/0xd0 [ 877.977004][ T3797] dump_stack+0x15/0x1b [ 877.977110][ T3797] should_fail_ex+0x262/0x280 [ 877.977146][ T3797] should_fail+0xb/0x20 [ 877.977173][ T3797] should_fail_usercopy+0x1a/0x20 [ 877.977252][ T3797] _copy_to_user+0x20/0xa0 [ 877.977289][ T3797] do_ipt_get_ctl+0xa23/0xcb0 [ 877.977353][ T3797] ? _raw_spin_unlock_bh+0x17/0x20 [ 877.977416][ T3797] ? release_sock+0x10c/0x180 [ 877.977444][ T3797] ? sockopt_release_sock+0x41/0x50 [ 877.977475][ T3797] ? __rcu_read_unlock+0x4e/0x70 [ 877.977571][ T3797] nf_getsockopt+0x190/0x1b0 [ 877.977610][ T3797] ip_getsockopt+0x137/0x180 [ 877.977650][ T3797] udp_getsockopt+0xa5/0x230 [ 877.977735][ T3797] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 877.977764][ T3797] sock_common_getsockopt+0x60/0x70 [ 877.977785][ T3797] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 877.977824][ T3797] do_sock_getsockopt+0x2f5/0x570 [ 877.977860][ T3797] __x64_sys_getsockopt+0x11d/0x1a0 [ 877.977895][ T3797] x64_sys_call+0x1032/0x2550 [ 877.977944][ T3797] do_syscall_64+0x112/0x360 [ 877.977981][ T3797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.978024][ T3797] RIP: 0033:0x7f3894bce559 [ 877.978045][ T3797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.978068][ T3797] RSP: 002b:00007f3893627028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 877.978093][ T3797] RAX: ffffffffffffffda RBX: 00007f3894e55fa0 RCX: 00007f3894bce559 [ 877.978110][ T3797] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000005 [ 877.978127][ T3797] RBP: 00007f3894c65ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 877.978220][ T3797] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 877.978237][ T3797] R13: 00007f3894e56038 R14: 00007f3894e55fa0 R15: 00007ffdc04aadf8 [ 877.978259][ T3797] [ 878.007421][ T3802] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11512'. [ 878.330942][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 878.330963][ T29] audit: type=1400 audit(1792494249.467:2117): avc: denied { write } for pid=3796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.383435][ T3834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11523'. [ 878.390214][ T29] audit: type=1400 audit(1792494249.527:2118): avc: denied { write } for pid=3838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.398075][ T3837] audit: audit_lost=77 audit_rate_limit=0 audit_backlog_limit=64 [ 878.398139][ T3837] audit: out of memory in audit_log_start [ 878.402398][ T3840] set_capacity_and_notify: 2 callbacks suppressed [ 878.402466][ T3840] loop4: detected capacity change from 0 to 512 [ 878.646954][ T29] audit: type=1400 audit(1792494249.787:2119): avc: denied { write } for pid=3845 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.706671][ T3875] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(3) [ 878.736717][ T29] audit: type=1400 audit(1792494249.877:2120): avc: denied { write } for pid=3876 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.908884][ T29] audit: type=1400 audit(1792494250.047:2121): avc: denied { write } for pid=3885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 878.957275][ T3920] loop5: detected capacity change from 0 to 512 [ 878.965276][ T29] audit: type=1400 audit(1792494250.107:2122): avc: denied { write } for pid=3921 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.188412][ T29] audit: type=1400 audit(1792494250.327:2123): avc: denied { write } for pid=3925 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.217911][ T29] audit: type=1400 audit(1792494250.357:2124): avc: denied { write } for pid=3954 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.605368][ T4003] ./dev/sda1: Can't lookup blockdev [ 879.841783][ T4021] loop2: detected capacity change from 0 to 512 [ 880.241661][ T4068] ./dev/sda1: Can't lookup blockdev [ 880.417167][ T4087] FAULT_INJECTION: forcing a failure. [ 880.417167][ T4087] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.417213][ T4087] CPU: 0 UID: 0 PID: 4087 Comm: syz.7.11584 Not tainted syzkaller #0 PREEMPT(lazy) [ 880.417295][ T4087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 880.417309][ T4087] Call Trace: [ 880.417316][ T4087] [ 880.417326][ T4087] __dump_stack+0x1d/0x30 [ 880.417357][ T4087] dump_stack_lvl+0x95/0xd0 [ 880.417403][ T4087] dump_stack+0x15/0x1b [ 880.417429][ T4087] should_fail_ex+0x262/0x280 [ 880.417463][ T4087] should_fail+0xb/0x20 [ 880.417552][ T4087] should_fail_usercopy+0x1a/0x20 [ 880.417708][ T4087] _copy_to_user+0x20/0xa0 [ 880.417758][ T4087] do_ipt_get_ctl+0xa23/0xcb0 [ 880.417814][ T4087] ? _raw_spin_unlock_bh+0x17/0x20 [ 880.417876][ T4087] ? release_sock+0x10c/0x180 [ 880.417898][ T4087] ? sockopt_release_sock+0x41/0x50 [ 880.417975][ T4087] ? __rcu_read_unlock+0x4e/0x70 [ 880.418011][ T4087] nf_getsockopt+0x190/0x1b0 [ 880.418049][ T4087] ip_getsockopt+0x137/0x180 [ 880.418092][ T4087] udp_getsockopt+0xa5/0x230 [ 880.418115][ T4087] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 880.418144][ T4087] sock_common_getsockopt+0x60/0x70 [ 880.418195][ T4087] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 880.418220][ T4087] do_sock_getsockopt+0x2f5/0x570 [ 880.418252][ T4087] __x64_sys_getsockopt+0x11d/0x1a0 [ 880.418280][ T4087] x64_sys_call+0x1032/0x2550 [ 880.418313][ T4087] do_syscall_64+0x112/0x360 [ 880.418401][ T4087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.418429][ T4087] RIP: 0033:0x7f691804e559 [ 880.418449][ T4087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.418467][ T4087] RSP: 002b:00007f6916aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 880.418491][ T4087] RAX: ffffffffffffffda RBX: 00007f69182d5fa0 RCX: 00007f691804e559 [ 880.418571][ T4087] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000005 [ 880.418585][ T4087] RBP: 00007f69180e5ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 880.418599][ T4087] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 880.418613][ T4087] R13: 00007f69182d6038 R14: 00007f69182d5fa0 R15: 00007fff9434cc88 [ 880.418633][ T4087] [ 880.736615][ T4109] loop3: detected capacity change from 0 to 512 [ 880.856381][ T4129] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 880.922567][ T4136] FAULT_INJECTION: forcing a failure. [ 880.922567][ T4136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.922601][ T4136] CPU: 0 UID: 0 PID: 4136 Comm: syz.3.11595 Not tainted syzkaller #0 PREEMPT(lazy) [ 880.922663][ T4136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 880.922700][ T4136] Call Trace: [ 880.922709][ T4136] [ 880.922718][ T4136] __dump_stack+0x1d/0x30 [ 880.922763][ T4136] dump_stack_lvl+0x95/0xd0 [ 880.922788][ T4136] dump_stack+0x15/0x1b [ 880.922814][ T4136] should_fail_ex+0x262/0x280 [ 880.922849][ T4136] should_fail+0xb/0x20 [ 880.922884][ T4136] should_fail_usercopy+0x1a/0x20 [ 880.922923][ T4136] _copy_to_user+0x20/0xa0 [ 880.922963][ T4136] do_ipt_get_ctl+0x9f3/0xcb0 [ 880.923008][ T4136] ? _raw_spin_unlock_bh+0x17/0x20 [ 880.923048][ T4136] ? release_sock+0x10c/0x180 [ 880.923075][ T4136] ? sockopt_release_sock+0x41/0x50 [ 880.923101][ T4136] ? __rcu_read_unlock+0x4e/0x70 [ 880.923181][ T4136] nf_getsockopt+0x190/0x1b0 [ 880.923291][ T4136] ip_getsockopt+0x137/0x180 [ 880.923322][ T4136] udp_getsockopt+0xa5/0x230 [ 880.923402][ T4136] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 880.923429][ T4136] sock_common_getsockopt+0x60/0x70 [ 880.923519][ T4136] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 880.923582][ T4136] do_sock_getsockopt+0x2f5/0x570 [ 880.923615][ T4136] __x64_sys_getsockopt+0x11d/0x1a0 [ 880.923650][ T4136] x64_sys_call+0x1032/0x2550 [ 880.923739][ T4136] do_syscall_64+0x112/0x360 [ 880.923768][ T4136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.923790][ T4136] RIP: 0033:0x7f5b4506e559 [ 880.923846][ T4136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.923870][ T4136] RSP: 002b:00007f5b43ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 880.923897][ T4136] RAX: ffffffffffffffda RBX: 00007f5b452f5fa0 RCX: 00007f5b4506e559 [ 880.923914][ T4136] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000005 [ 880.923928][ T4136] RBP: 00007f5b45105ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 880.923943][ T4136] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 880.924017][ T4136] R13: 00007f5b452f6038 R14: 00007f5b452f5fa0 R15: 00007ffea7b8cef8 [ 880.924041][ T4136] [ 881.461211][ T4179] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 881.673668][ T4210] FAULT_INJECTION: forcing a failure. [ 881.673668][ T4210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 881.673702][ T4210] CPU: 1 UID: 0 PID: 4210 Comm: syz.3.11611 Not tainted syzkaller #0 PREEMPT(lazy) [ 881.673736][ T4210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 881.673752][ T4210] Call Trace: [ 881.673759][ T4210] [ 881.673842][ T4210] __dump_stack+0x1d/0x30 [ 881.673923][ T4210] dump_stack_lvl+0x95/0xd0 [ 881.673949][ T4210] dump_stack+0x15/0x1b [ 881.673995][ T4210] should_fail_ex+0x262/0x280 [ 881.674029][ T4210] should_fail+0xb/0x20 [ 881.674123][ T4210] should_fail_usercopy+0x1a/0x20 [ 881.674158][ T4210] _copy_to_user+0x20/0xa0 [ 881.674216][ T4210] xt_obj_to_user+0x8d/0x120 [ 881.674258][ T4210] xt_target_to_user+0x5f/0xf0 [ 881.674285][ T4210] do_ipt_get_ctl+0xaeb/0xcb0 [ 881.674396][ T4210] ? _raw_spin_unlock_bh+0x17/0x20 [ 881.674432][ T4210] ? release_sock+0x10c/0x180 [ 881.674459][ T4210] ? sockopt_release_sock+0x41/0x50 [ 881.674487][ T4210] ? update_cfs_rq_load_avg+0x1e3/0x200 [ 881.674535][ T4210] ? __rb_insert_augmented+0x76/0x2c0 [ 881.674564][ T4210] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 881.674587][ T4210] ? hrtimer_active+0xe4/0x110 [ 881.674649][ T4210] nf_getsockopt+0x190/0x1b0 [ 881.674684][ T4210] ip_getsockopt+0x137/0x180 [ 881.674719][ T4210] udp_getsockopt+0xa5/0x230 [ 881.674747][ T4210] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 881.674777][ T4210] sock_common_getsockopt+0x60/0x70 [ 881.674798][ T4210] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 881.674822][ T4210] do_sock_getsockopt+0x2f5/0x570 [ 881.674929][ T4210] ? __schedule+0x7a2/0xd40 [ 881.674968][ T4210] __x64_sys_getsockopt+0x11d/0x1a0 [ 881.675050][ T4210] x64_sys_call+0x1032/0x2550 [ 881.675081][ T4210] do_syscall_64+0x112/0x360 [ 881.675203][ T4210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.675242][ T4210] RIP: 0033:0x7f5b4506e559 [ 881.675263][ T4210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.675285][ T4210] RSP: 002b:00007f5b43ac7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 881.675313][ T4210] RAX: ffffffffffffffda RBX: 00007f5b452f5fa0 RCX: 00007f5b4506e559 [ 881.675331][ T4210] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000005 [ 881.675347][ T4210] RBP: 00007f5b45105ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 881.675429][ T4210] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 881.675445][ T4210] R13: 00007f5b452f6038 R14: 00007f5b452f5fa0 R15: 00007ffea7b8cef8 [ 881.675465][ T4210] [ 881.951964][ T4229] loop4: detected capacity change from 0 to 512 [ 882.348115][ T4282] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 882.480234][ T4299] loop4: detected capacity change from 0 to 512 [ 882.775798][ T4340] FAULT_INJECTION: forcing a failure. [ 882.775798][ T4340] name failslab, interval 1, probability 0, space 0, times 0 [ 882.775840][ T4340] CPU: 1 UID: 0 PID: 4340 Comm: syz.4.11637 Not tainted syzkaller #0 PREEMPT(lazy) [ 882.775870][ T4340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 882.775891][ T4340] Call Trace: [ 882.775899][ T4340] [ 882.775908][ T4340] __dump_stack+0x1d/0x30 [ 882.775937][ T4340] dump_stack_lvl+0x95/0xd0 [ 882.775990][ T4340] dump_stack+0x15/0x1b [ 882.776015][ T4340] should_fail_ex+0x262/0x280 [ 882.776050][ T4340] ? proc_fill_super+0x48/0x3c0 [ 882.776084][ T4340] should_failslab+0x8c/0xb0 [ 882.776120][ T4340] __kmalloc_cache_noprof+0x7a/0x400 [ 882.776155][ T4340] ? proc_fill_super+0x48/0x3c0 [ 882.776325][ T4340] proc_fill_super+0x48/0x3c0 [ 882.776360][ T4340] ? __pfx_proc_fill_super+0x10/0x10 [ 882.776399][ T4340] get_tree_nodev+0x83/0x100 [ 882.776431][ T4340] proc_get_tree+0x1c/0x30 [ 882.776507][ T4340] vfs_get_tree+0x57/0x1d0 [ 882.776542][ T4340] do_new_mount+0x288/0x730 [ 882.776566][ T4340] ? security_capable+0x7b/0x90 [ 882.776599][ T4340] path_mount+0x4ad/0xb90 [ 882.776627][ T4340] __se_sys_mount+0x28c/0x2e0 [ 882.776656][ T4340] __x64_sys_mount+0x67/0x80 [ 882.776754][ T4340] x64_sys_call+0xc3b/0x2550 [ 882.776791][ T4340] do_syscall_64+0x112/0x360 [ 882.776867][ T4340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.776893][ T4340] RIP: 0033:0x7f5c791ee559 [ 882.776912][ T4340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.776934][ T4340] RSP: 002b:00007f5c77c47028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 882.776964][ T4340] RAX: ffffffffffffffda RBX: 00007f5c79475fa0 RCX: 00007f5c791ee559 [ 882.776981][ T4340] RDX: 0000200000000940 RSI: 0000200000000900 RDI: 0000000000000000 [ 882.776997][ T4340] RBP: 00007f5c79285ad8 R08: 0000000000000000 R09: 0000000000000000 [ 882.777011][ T4340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 882.777024][ T4340] R13: 00007f5c79476038 R14: 00007f5c79475fa0 R15: 00007ffe1153e048 [ 882.777043][ T4340] [ 882.993615][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11638'. [ 882.993664][ T4349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11638'. [ 883.319350][ T4397] FAULT_INJECTION: forcing a failure. [ 883.319350][ T4397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.319461][ T4397] CPU: 1 UID: 0 PID: 4397 Comm: syz.7.11652 Not tainted syzkaller #0 PREEMPT(lazy) [ 883.319492][ T4397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 883.319546][ T4397] Call Trace: [ 883.319553][ T4397] [ 883.319562][ T4397] __dump_stack+0x1d/0x30 [ 883.319588][ T4397] dump_stack_lvl+0x95/0xd0 [ 883.319613][ T4397] dump_stack+0x15/0x1b [ 883.319633][ T4397] should_fail_ex+0x262/0x280 [ 883.319702][ T4397] should_fail+0xb/0x20 [ 883.319744][ T4397] should_fail_usercopy+0x1a/0x20 [ 883.319781][ T4397] _copy_to_user+0x20/0xa0 [ 883.319871][ T4397] do_ipt_get_ctl+0x9f3/0xcb0 [ 883.319902][ T4397] ? _raw_spin_unlock_bh+0x17/0x20 [ 883.319933][ T4397] ? release_sock+0x10c/0x180 [ 883.320021][ T4397] ? sockopt_release_sock+0x41/0x50 [ 883.320052][ T4397] ? __rcu_read_unlock+0x4e/0x70 [ 883.320124][ T4397] nf_getsockopt+0x190/0x1b0 [ 883.320237][ T4397] ip_getsockopt+0x137/0x180 [ 883.320278][ T4397] udp_getsockopt+0xa5/0x230 [ 883.320309][ T4397] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 883.320399][ T4397] sock_common_getsockopt+0x60/0x70 [ 883.320425][ T4397] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 883.320448][ T4397] do_sock_getsockopt+0x2f5/0x570 [ 883.320594][ T4397] __x64_sys_getsockopt+0x11d/0x1a0 [ 883.320629][ T4397] x64_sys_call+0x1032/0x2550 [ 883.320664][ T4397] do_syscall_64+0x112/0x360 [ 883.320691][ T4397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.320721][ T4397] RIP: 0033:0x7f691804e559 [ 883.320743][ T4397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.320761][ T4397] RSP: 002b:00007f6916aa7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 883.320822][ T4397] RAX: ffffffffffffffda RBX: 00007f69182d5fa0 RCX: 00007f691804e559 [ 883.320840][ T4397] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000004 [ 883.320856][ T4397] RBP: 00007f69180e5ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 883.320872][ T4397] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 883.320888][ T4397] R13: 00007f69182d6038 R14: 00007f69182d5fa0 R15: 00007fff9434cc88 [ 883.320906][ T4397] [ 883.370738][ T4401] syzkaller0: entered promiscuous mode [ 883.370760][ T4401] syzkaller0: entered allmulticast mode [ 883.488229][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 883.488248][ T29] audit: type=1400 audit(1792494254.627:2226): avc: denied { write } for pid=4391 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.548897][ T29] audit: type=1400 audit(1792494254.677:2227): avc: denied { write } for pid=4417 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.682126][ T4440] FAULT_INJECTION: forcing a failure. [ 883.682126][ T4440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.682160][ T4440] CPU: 1 UID: 0 PID: 4440 Comm: syz.2.11664 Not tainted syzkaller #0 PREEMPT(lazy) [ 883.682224][ T4440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 883.682238][ T4440] Call Trace: [ 883.682246][ T4440] [ 883.682254][ T4440] __dump_stack+0x1d/0x30 [ 883.682284][ T4440] dump_stack_lvl+0x95/0xd0 [ 883.682311][ T4440] dump_stack+0x15/0x1b [ 883.682463][ T4440] should_fail_ex+0x262/0x280 [ 883.682498][ T4440] should_fail+0xb/0x20 [ 883.682528][ T4440] should_fail_usercopy+0x1a/0x20 [ 883.682622][ T4440] _copy_to_user+0x20/0xa0 [ 883.682660][ T4440] do_ipt_get_ctl+0x9f3/0xcb0 [ 883.682705][ T4440] ? _raw_spin_unlock_bh+0x17/0x20 [ 883.682752][ T4440] ? release_sock+0x10c/0x180 [ 883.682779][ T4440] ? sockopt_release_sock+0x41/0x50 [ 883.682869][ T4440] ? __rcu_read_unlock+0x4e/0x70 [ 883.682906][ T4440] nf_getsockopt+0x190/0x1b0 [ 883.682938][ T4440] ip_getsockopt+0x137/0x180 [ 883.683067][ T4440] udp_getsockopt+0xa5/0x230 [ 883.683097][ T4440] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 883.683124][ T4440] sock_common_getsockopt+0x60/0x70 [ 883.683211][ T4440] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 883.683234][ T4440] do_sock_getsockopt+0x2f5/0x570 [ 883.683267][ T4440] __x64_sys_getsockopt+0x11d/0x1a0 [ 883.683304][ T4440] x64_sys_call+0x1032/0x2550 [ 883.683341][ T4440] do_syscall_64+0x112/0x360 [ 883.683448][ T4440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.683515][ T4440] RIP: 0033:0x7f6ccb98e559 [ 883.683535][ T4440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.683565][ T4440] RSP: 002b:00007f6cca3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 883.683671][ T4440] RAX: ffffffffffffffda RBX: 00007f6ccbc15fa0 RCX: 00007f6ccb98e559 [ 883.683690][ T4440] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000004 [ 883.683708][ T4440] RBP: 00007f6ccba25ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 883.683724][ T4440] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 883.683749][ T4440] R13: 00007f6ccbc16038 R14: 00007f6ccbc15fa0 R15: 00007fff51f74cd8 [ 883.683773][ T4440] [ 883.744589][ T29] audit: type=1400 audit(1792494254.877:2228): avc: denied { write } for pid=4424 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 883.806498][ T29] audit: type=1400 audit(1792494254.947:2229): avc: denied { write } for pid=4448 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.082176][ T4483] FAULT_INJECTION: forcing a failure. [ 884.082176][ T4483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.082214][ T4483] CPU: 0 UID: 0 PID: 4483 Comm: syz.2.11677 Not tainted syzkaller #0 PREEMPT(lazy) [ 884.082283][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 884.082296][ T4483] Call Trace: [ 884.082303][ T4483] [ 884.082312][ T4483] __dump_stack+0x1d/0x30 [ 884.082337][ T4483] dump_stack_lvl+0x95/0xd0 [ 884.082416][ T4483] dump_stack+0x15/0x1b [ 884.082441][ T4483] should_fail_ex+0x262/0x280 [ 884.082476][ T4483] should_fail+0xb/0x20 [ 884.082582][ T4483] should_fail_usercopy+0x1a/0x20 [ 884.082610][ T4483] _copy_to_user+0x20/0xa0 [ 884.082694][ T4483] xt_data_to_user+0x5f/0x150 [ 884.082726][ T4483] xt_target_to_user+0xc3/0xf0 [ 884.082753][ T4483] do_ipt_get_ctl+0xaeb/0xcb0 [ 884.082783][ T4483] ? _raw_spin_unlock_bh+0x17/0x20 [ 884.082959][ T4483] ? release_sock+0x10c/0x180 [ 884.082985][ T4483] ? sockopt_release_sock+0x41/0x50 [ 884.083054][ T4483] ? __rcu_read_unlock+0x4e/0x70 [ 884.083122][ T4483] nf_getsockopt+0x190/0x1b0 [ 884.083161][ T4483] ip_getsockopt+0x137/0x180 [ 884.083264][ T4483] udp_getsockopt+0xa5/0x230 [ 884.083292][ T4483] ? selinux_socket_getsockopt+0x1ab/0x1e0 [ 884.083316][ T4483] sock_common_getsockopt+0x60/0x70 [ 884.083337][ T4483] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 884.083366][ T4483] do_sock_getsockopt+0x2f5/0x570 [ 884.083400][ T4483] __x64_sys_getsockopt+0x11d/0x1a0 [ 884.083464][ T4483] x64_sys_call+0x1032/0x2550 [ 884.083515][ T4483] do_syscall_64+0x112/0x360 [ 884.083544][ T4483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.083570][ T4483] RIP: 0033:0x7f6ccb98e559 [ 884.083729][ T4483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.083748][ T4483] RSP: 002b:00007f6cca3e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 884.083776][ T4483] RAX: ffffffffffffffda RBX: 00007f6ccbc15fa0 RCX: 00007f6ccb98e559 [ 884.083794][ T4483] RDX: 0000000000000041 RSI: 0000000000000000 RDI: 0000000000000004 [ 884.083852][ T4483] RBP: 00007f6ccba25ad8 R08: 00002000000001c0 R09: 0000000000000000 [ 884.083943][ T4483] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 884.083961][ T4483] R13: 00007f6ccbc16038 R14: 00007f6ccbc15fa0 R15: 00007fff51f74cd8 [ 884.083983][ T4483] [ 884.463048][ T29] audit: type=1400 audit(1792494255.607:2230): avc: denied { write } for pid=4501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.522554][ T29] audit: type=1400 audit(1792494255.667:2231): avc: denied { write } for pid=4538 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.554268][ T3024] 8021q: adding VLAN 0 to HW filter on device eth5 [ 884.663953][ T29] audit: type=1400 audit(1792494255.807:2232): avc: denied { write } for pid=4548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.710979][ T29] audit: type=1400 audit(1792494255.847:2233): avc: denied { write } for pid=4570 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.751207][ T3024] 8021q: adding VLAN 0 to HW filter on device eth6 [ 884.778485][ T4583] ./dev/sda1: Can't lookup blockdev [ 884.800592][ T4584] loop5: detected capacity change from 0 to 512 [ 884.888821][ T29] audit: type=1400 audit(1792494256.027:2234): avc: denied { write } for pid=4585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.938552][ T29] audit: type=1400 audit(1792494256.077:2235): avc: denied { write } for pid=4611 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 884.978168][ T3024] 8021q: adding VLAN 0 to HW filter on device eth7 [ 885.060708][ T4634] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 885.203461][ T3024] 8021q: adding VLAN 0 to HW filter on device eth8 [ 885.289550][ T4677] loop3: detected capacity change from 0 to 256 [ 885.298547][ T4677] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 885.299969][ T4677] FAT-fs (loop3): error, invalid FAT chain (i_pos 196, last_block 8) [ 885.299994][ T4677] FAT-fs (loop3): Filesystem has been set read-only [ 885.300093][ T4677] FAT-fs (loop3): error, corrupted file size (i_pos 196, 2056) [ 885.425437][ T4700] syzkaller0: entered promiscuous mode [ 885.425461][ T4700] syzkaller0: entered allmulticast mode [ 885.430325][ T3024] 8021q: adding VLAN 0 to HW filter on device eth9 [ 885.652895][ T3024] 8021q: adding VLAN 0 to HW filter on device eth10 [ 885.853907][ T4781] loop4: detected capacity change from 0 to 512 [ 885.861139][ T3024] 8021q: adding VLAN 0 to HW filter on device eth11 [ 885.889886][ T41] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.938642][ T41] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 885.986054][ T41] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.048753][ T3024] 8021q: adding VLAN 0 to HW filter on device eth12 [ 886.067659][ T41] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.096057][ T4808] FAULT_INJECTION: forcing a failure. [ 886.096057][ T4808] name failslab, interval 1, probability 0, space 0, times 0 [ 886.096094][ T4808] CPU: 1 UID: 0 PID: 4808 Comm: syz.3.11770 Not tainted syzkaller #0 PREEMPT(lazy) [ 886.096171][ T4808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.096240][ T4808] Call Trace: [ 886.096256][ T4808] [ 886.096266][ T4808] __dump_stack+0x1d/0x30 [ 886.096340][ T4808] dump_stack_lvl+0x95/0xd0 [ 886.096363][ T4808] dump_stack+0x15/0x1b [ 886.096384][ T4808] should_fail_ex+0x262/0x280 [ 886.096455][ T4808] ? __alloc_skb+0x2e0/0x6f0 [ 886.096480][ T4808] should_failslab+0x8c/0xb0 [ 886.096518][ T4808] kmem_cache_alloc_node_noprof+0x82/0x400 [ 886.096563][ T4808] ? __alloc_skb+0x2e0/0x6f0 [ 886.096586][ T4808] __alloc_skb+0x2e0/0x6f0 [ 886.096607][ T4808] ? __alloc_skb+0x209/0x6f0 [ 886.096628][ T4808] tc_ctl_action+0x663/0x8b0 [ 886.096740][ T4808] ? save_fpregs_to_fpstate+0x100/0x150 [ 886.096857][ T4808] ? __mutex_lock_slowpath+0xa/0x10 [ 886.096881][ T4808] ? __pfx_tc_ctl_action+0x10/0x10 [ 886.096906][ T4808] rtnetlink_rcv_msg+0x6a7/0x720 [ 886.097038][ T4808] netlink_rcv_skb+0x11e/0x220 [ 886.097099][ T4808] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 886.097143][ T4808] rtnetlink_rcv+0x1c/0x30 [ 886.097180][ T4808] netlink_unicast+0x665/0x740 [ 886.097239][ T4808] netlink_sendmsg+0x5ef/0x740 [ 886.097330][ T4808] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.097358][ T4808] ____sys_sendmsg+0x532/0x580 [ 886.097453][ T4808] ___sys_sendmsg+0x195/0x1e0 [ 886.097492][ T4808] __x64_sys_sendmsg+0xd4/0x160 [ 886.097521][ T4808] x64_sys_call+0x22ab/0x2550 [ 886.097549][ T4808] do_syscall_64+0x112/0x360 [ 886.097652][ T4808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.097674][ T4808] RIP: 0033:0x7f5b4506e559 [ 886.097695][ T4808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.097714][ T4808] RSP: 002b:00007f5b43ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.097803][ T4808] RAX: ffffffffffffffda RBX: 00007f5b452f5fa0 RCX: 00007f5b4506e559 [ 886.097826][ T4808] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000004 [ 886.097842][ T4808] RBP: 00007f5b45105ad8 R08: 0000000000000000 R09: 0000000000000000 [ 886.097857][ T4808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.097870][ T4808] R13: 00007f5b452f6038 R14: 00007f5b452f5fa0 R15: 00007ffea7b8cef8 [ 886.097893][ T4808] [ 886.189468][ T4819] syzkaller0: entered promiscuous mode [ 886.189490][ T4819] syzkaller0: entered allmulticast mode [ 886.338380][ T41] bridge_slave_1: left allmulticast mode [ 886.338410][ T41] bridge_slave_1: left promiscuous mode [ 886.338607][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.353590][ T41] bridge_slave_0: left allmulticast mode [ 886.353614][ T41] bridge_slave_0: left promiscuous mode [ 886.353752][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 886.438660][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 886.440111][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 886.440842][ T41] bond0 (unregistering): Released all slaves [ 886.525324][ T4807] rxe_eth0 speed is unknown, defaulting to 1000 [ 886.545198][ T4859] FAULT_INJECTION: forcing a failure. [ 886.545198][ T4859] name failslab, interval 1, probability 0, space 0, times 0 [ 886.545231][ T4859] CPU: 1 UID: 0 PID: 4859 Comm: syz.3.11786 Not tainted syzkaller #0 PREEMPT(lazy) [ 886.545261][ T4859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.545278][ T4859] Call Trace: [ 886.545287][ T4859] [ 886.545297][ T4859] __dump_stack+0x1d/0x30 [ 886.545328][ T4859] dump_stack_lvl+0x95/0xd0 [ 886.545407][ T4859] dump_stack+0x15/0x1b [ 886.545427][ T4859] should_fail_ex+0x262/0x280 [ 886.545455][ T4859] ? __se_sys_timerfd_create+0xe2/0x2a0 [ 886.545564][ T4859] should_failslab+0x8c/0xb0 [ 886.545712][ T4859] __kmalloc_cache_noprof+0x7a/0x400 [ 886.545747][ T4859] ? __se_sys_timerfd_create+0xe2/0x2a0 [ 886.545777][ T4859] __se_sys_timerfd_create+0xe2/0x2a0 [ 886.545807][ T4859] __x64_sys_timerfd_create+0x31/0x40 [ 886.545872][ T4859] x64_sys_call+0x1ddb/0x2550 [ 886.545943][ T4859] do_syscall_64+0x112/0x360 [ 886.545978][ T4859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.546034][ T4859] RIP: 0033:0x7f5b4506e559 [ 886.546050][ T4859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.546092][ T4859] RSP: 002b:00007f5b43ac7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 886.546113][ T4859] RAX: ffffffffffffffda RBX: 00007f5b452f5fa0 RCX: 00007f5b4506e559 [ 886.546132][ T4859] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 886.546144][ T4859] RBP: 00007f5b45105ad8 R08: 0000000000000000 R09: 0000000000000000 [ 886.546157][ T4859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.546247][ T4859] R13: 00007f5b452f6038 R14: 00007f5b452f5fa0 R15: 00007ffea7b8cef8 [ 886.546265][ T4859] [ 886.737021][ T4866] loop3: detected capacity change from 0 to 512 [ 886.751909][ T41] hsr_slave_0: left promiscuous mode [ 886.753558][ T41] hsr_slave_1: left promiscuous mode [ 886.754103][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 886.754122][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.755143][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 886.755157][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.759309][ T41] veth1_macvtap: left promiscuous mode [ 886.759446][ T41] veth0_macvtap: left promiscuous mode [ 886.759492][ T41] veth1_vlan: left promiscuous mode [ 886.759529][ T41] veth0_vlan: left promiscuous mode [ 886.876817][ T4883] FAULT_INJECTION: forcing a failure. [ 886.876817][ T4883] name failslab, interval 1, probability 0, space 0, times 0 [ 886.876855][ T4883] CPU: 0 UID: 0 PID: 4883 Comm: syz.2.11797 Not tainted syzkaller #0 PREEMPT(lazy) [ 886.876887][ T4883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 886.876965][ T4883] Call Trace: [ 886.876975][ T4883] [ 886.876985][ T4883] __dump_stack+0x1d/0x30 [ 886.877017][ T4883] dump_stack_lvl+0x95/0xd0 [ 886.877044][ T4883] dump_stack+0x15/0x1b [ 886.877081][ T4883] should_fail_ex+0x262/0x280 [ 886.877173][ T4883] should_failslab+0x8c/0xb0 [ 886.877281][ T4883] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 886.877316][ T4883] ? xfd_validate_state+0x45/0xf0 [ 886.877413][ T4883] ? __d_alloc+0x34/0x320 [ 886.877444][ T4883] ? __d_alloc+0x34/0x320 [ 886.877476][ T4883] ? __rcu_read_unlock+0x4e/0x70 [ 886.877576][ T4883] __d_alloc+0x34/0x320 [ 886.877603][ T4883] ? d_alloc_pseudo+0x13/0x80 [ 886.877630][ T4883] d_alloc_pseudo+0x1e/0x80 [ 886.877656][ T4883] alloc_path_pseudo+0xa4/0x140 [ 886.877832][ T4883] alloc_file_pseudo+0x55/0x120 [ 886.877857][ T4883] anon_inode_getfile_fmode+0xa5/0x140 [ 886.877962][ T4883] __se_sys_timerfd_create+0x1f6/0x2a0 [ 886.878039][ T4883] __x64_sys_timerfd_create+0x31/0x40 [ 886.878079][ T4883] x64_sys_call+0x1ddb/0x2550 [ 886.878104][ T4883] do_syscall_64+0x112/0x360 [ 886.878163][ T4883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.878191][ T4883] RIP: 0033:0x7f6ccb98e559 [ 886.878211][ T4883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.878231][ T4883] RSP: 002b:00007f6cca3e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 886.878311][ T4883] RAX: ffffffffffffffda RBX: 00007f6ccbc15fa0 RCX: 00007f6ccb98e559 [ 886.878328][ T4883] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 886.878344][ T4883] RBP: 00007f6ccba25ad8 R08: 0000000000000000 R09: 0000000000000000 [ 886.878427][ T4883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 886.878442][ T4883] R13: 00007f6ccbc16038 R14: 00007f6ccbc15fa0 R15: 00007fff51f74cd8 [ 886.878462][ T4883] [ 886.916721][ T41] team0 (unregistering): Port device team_slave_1 removed [ 886.923566][ T41] team0 (unregistering): Port device team_slave_0 removed [ 887.221285][ T4919] loop3: detected capacity change from 0 to 512 [ 887.252010][ T3024] 8021q: adding VLAN 0 to HW filter on device eth13 [ 887.290215][ T4807] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.290321][ T4807] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.290384][ T4807] bridge_slave_0: entered allmulticast mode [ 887.290790][ T4807] bridge_slave_0: entered promiscuous mode [ 887.318001][ T4807] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.318038][ T4807] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.318295][ T4807] bridge_slave_1: entered allmulticast mode [ 887.318817][ T4807] bridge_slave_1: entered promiscuous mode [ 887.358169][ T4807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 887.359200][ T4807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 887.369587][ T4807] team0: Port device team_slave_0 added [ 887.370587][ T4807] team0: Port device team_slave_1 added [ 887.380014][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 887.380030][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.380072][ T4807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.380622][ T4807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.380636][ T4807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.380712][ T4807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.396551][ T4807] hsr_slave_0: entered promiscuous mode [ 887.397026][ T4807] hsr_slave_1: entered promiscuous mode [ 887.397300][ T4807] debugfs: 'hsr0' already exists in 'hsr' [ 887.397316][ T4807] Cannot create hsr debugfs directory [ 887.527165][ T4939] loop2: detected capacity change from 0 to 256 [ 887.533169][ T4939] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 887.707695][ T3024] 8021q: adding VLAN 0 to HW filter on device eth14 [ 887.709695][ T4962] loop5: detected capacity change from 0 to 512 [ 887.732404][ T4962] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11813'. [ 887.732807][ T4962] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11813'. [ 887.732831][ T4962] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11813'. [ 887.732848][ T4962] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11813'. [ 887.814518][ T4972] loop3: detected capacity change from 0 to 512 [ 887.826358][ T4970] syzkaller1: tun_chr_ioctl cmd 35108 [ 887.933562][ T3024] 8021q: adding VLAN 0 to HW filter on device eth15 [ 887.976416][ T4807] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 887.992314][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 887.993466][ T4807] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 887.996647][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 887.997558][ T4807] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 888.001035][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 888.006739][ T4998] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 888.064962][ T4807] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 888.065057][ T5007] ================================================================== [ 888.065096][ T5007] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 888.065131][ T5007] [ 888.065137][ T5007] write to 0xffffffff86e9e778 of 88 bytes by task 4807 on cpu 1: [ 888.065163][ T5007] prb_reserve+0x6fb/0xaf0 [ 888.065188][ T5007] vprintk_store+0x54e/0x910 [ 888.065237][ T5007] vprintk_emit+0x1a4/0x610 [ 888.065266][ T5007] dev_vprintk_emit+0x242/0x2a0 [ 888.065297][ T5007] dev_printk_emit+0x84/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 888.065326][ T5007] __netdev_printk+0x34b/0x370 [ 888.065407][ T5007] netdev_info+0xa6/0xd0 [ 888.065439][ T5007] netif_change_name+0x6ba/0x720 [ 888.065509][ T5007] do_setlink+0x728/0x2860 [ 888.065528][ T5007] rtnl_newlink+0x115a/0x1510 [ 888.065558][ T5007] rtnetlink_rcv_msg+0x64b/0x720 [ 888.065594][ T5007] netlink_rcv_skb+0x11e/0x220 [ 888.065619][ T5007] rtnetlink_rcv+0x1c/0x30 [ 888.065652][ T5007] netlink_unicast+0x665/0x740 [ 888.065674][ T5007] netlink_sendmsg+0x5ef/0x740 [ 888.065698][ T5007] __sys_sendto+0x411/0x470 [ 888.065724][ T5007] __x64_sys_sendto+0x76/0x90 [ 888.065750][ T5007] x64_sys_call+0x200c/0x2550 [ 888.065776][ T5007] do_syscall_64+0x112/0x360 [ 888.065807][ T5007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.065833][ T5007] [ 888.065841][ T5007] read to 0xffffffff86e9e778 of 8 bytes by task 5007 on cpu 0: [ 888.065861][ T5007] _prb_read_valid+0x325/0x930 [ 888.065889][ T5007] prb_first_valid_seq+0x35/0x70 [ 888.065917][ T5007] devkmsg_open+0x174/0x1b0 [ 888.065947][ T5007] memory_open+0xfa/0x120 [ 888.066006][ T5007] chrdev_open+0x2eb/0x3a0 [ 888.066029][ T5007] do_dentry_open+0x496/0xa40 [ 888.066054][ T5007] vfs_open_consume+0x46/0x1f0 [ 888.066078][ T5007] path_openat+0xc16/0x11c0 [ 888.066105][ T5007] do_file_open+0x16c/0x290 [ 888.066134][ T5007] do_sys_openat2+0xa1/0x140 [ 888.066169][ T5007] __x64_sys_openat+0xf2/0x120 [ 888.066193][ T5007] x64_sys_call+0x1f72/0x2550 [ 888.066218][ T5007] do_syscall_64+0x112/0x360 [ 888.066245][ T5007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.066268][ T5007] [ 888.066274][ T5007] value changed: 0x00000000000021d5 -> 0x00000000000041d5 [ 888.066287][ T5007] [ 888.066292][ T5007] Reported by Kernel Concurrency Sanitizer on: [ 888.066305][ T5007] CPU: 0 UID: 0 PID: 5007 Comm: syz.5.11823 Not tainted syzkaller #0 PREEMPT(lazy) [ 888.066332][ T5007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 888.066346][ T5007] ================================================================== [ 888.069151][ T4807] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 888.356706][ T3024] 8021q: adding VLAN 0 to HW filter on device eth16 [ 888.401732][T30345] bridge0: port 3(syz_tun) entered disabled state [ 888.409707][T30345] syz_tun (unregistering): left allmulticast mode [ 888.409731][T30345] syz_tun (unregistering): left promiscuous mode [ 888.409761][T30345] bridge0: port 3(syz_tun) entered disabled state [ 888.496290][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 888.496309][ T29] audit: type=1400 audit(1792494259.637:2262): avc: denied { write } for pid=5035 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.609151][ T29] audit: type=1400 audit(1792494259.747:2263): avc: denied { write } for pid=5037 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.664987][ T29] audit: type=1400 audit(1792494259.807:2264): avc: denied { write } for pid=5048 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.777200][ T29] audit: type=1400 audit(1792494259.917:2265): avc: denied { write } for pid=5050 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.813966][ T29] audit: type=1400 audit(1792494259.957:2266): avc: denied { write } for pid=5061 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.849713][ T41] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.895469][ T41] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.925911][ T29] audit: type=1400 audit(1792494260.067:2267): avc: denied { write } for pid=5063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 888.965439][ T41] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.965985][ T29] audit: type=1400 audit(1792494260.107:2268): avc: denied { write } for pid=5074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.007601][ T41] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.041366][ T29] audit: type=1400 audit(1792494260.177:2269): avc: denied { write } for pid=5076 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.065113][ T29] audit: type=1400 audit(1792494260.207:2270): avc: denied { write } for pid=5087 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.121365][ T41] bridge_slave_1: left allmulticast mode [ 889.121395][ T41] bridge_slave_1: left promiscuous mode [ 889.121591][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.141112][ T41] bridge_slave_0: left allmulticast mode [ 889.141139][ T41] bridge_slave_0: left promiscuous mode [ 889.141323][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.160765][ T29] audit: type=1400 audit(1792494260.287:2271): avc: denied { write } for pid=5089 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 889.223479][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.224823][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.225469][ T41] bond0 (unregistering): Released all slaves [ 889.287946][ T41] hsr_slave_0: left promiscuous mode [ 889.288396][ T41] hsr_slave_1: left promiscuous mode [ 889.288901][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.288917][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.289352][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.289368][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.297838][ T41] veth1_macvtap: left promiscuous mode [ 889.297868][ T41] veth0_macvtap: left promiscuous mode [ 889.297911][ T41] veth1_vlan: left promiscuous mode [ 889.298008][ T41] veth0_vlan: left promiscuous mode [ 889.383726][ T41] team0 (unregistering): Port device team_slave_1 removed [ 889.386130][ T41] team0 (unregistering): Port device team_slave_0 removed [ 889.822847][ T41] bridge_slave_1: left allmulticast mode [ 889.822929][ T41] bridge_slave_1: left promiscuous mode [ 889.823032][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.823694][ T41] bridge_slave_0: left allmulticast mode [ 889.823707][ T41] bridge_slave_0: left promiscuous mode [ 889.823872][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.863501][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.879119][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.879799][ T41] bond0 (unregistering): Released all slaves [ 889.937435][ T41] hsr_slave_0: left promiscuous mode [ 889.937852][ T41] hsr_slave_1: left promiscuous mode [ 889.938298][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.938587][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.988969][ T41] team0 (unregistering): Port device team_slave_1 removed [ 890.000623][ T41] team0 (unregistering): Port device team_slave_0 removed [ 890.034993][ T3024] 8021q: adding VLAN 0 to HW filter on device eth17 [ 890.134691][ T3024] 8021q: adding VLAN 0 to HW filter on device eth18 [ 890.249086][ T3024] 8021q: adding VLAN 0 to HW filter on device eth19 [ 890.275810][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.315153][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.365570][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.367058][ T3024] 8021q: adding VLAN 0 to HW filter on device eth20 [ 890.405403][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.520666][ T41] bond0 (unregistering): Released all slaves [ 890.522456][ T3024] 8021q: adding VLAN 0 to HW filter on device eth21 [ 890.576060][ T41] hsr_slave_0: left promiscuous mode [ 890.576507][ T41] hsr_slave_1: left promiscuous mode [ 890.579537][ T41] veth1_macvtap: left promiscuous mode [ 890.579565][ T41] veth0_macvtap: left promiscuous mode [ 890.579606][ T41] veth1_vlan: left promiscuous mode [ 890.625779][ T41] team0 (unregistering): Port device vlan0 removed [ 890.684194][ T3024] 8021q: adding VLAN 0 to HW filter on device eth22 [ 890.795415][ T3024] 8021q: adding VLAN 0 to HW filter on device eth23 [ 890.899792][ T3024] 8021q: adding VLAN 0 to HW filter on device eth24 [ 891.012708][ T3024] 8021q: adding VLAN 0 to HW filter on device eth29 [ 891.113030][ T3024] 8021q: adding VLAN 0 to HW filter on device eth30 [ 891.235335][ T3024] 8021q: adding VLAN 0 to HW filter on device eth31 [ 891.338123][ T3024] 8021q: adding VLAN 0 to HW filter on device eth32 [ 892.676741][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.714886][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.764927][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.804720][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 892.853222][ T41] bridge_slave_1: left allmulticast mode [ 892.853248][ T41] bridge_slave_1: left promiscuous mode [ 892.853376][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.854238][ T41] bridge_slave_0: left allmulticast mode [ 892.854260][ T41] bridge_slave_0: left promiscuous mode [ 892.854378][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.914661][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.915986][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.916926][ T41] bond0 (unregistering): Released all slaves [ 892.974640][ T41] hsr_slave_0: left promiscuous mode [ 892.974978][ T41] hsr_slave_1: left promiscuous mode [ 892.975414][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 892.975432][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.975767][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 892.975780][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.978205][ T41] veth1_macvtap: left promiscuous mode [ 892.978232][ T41] veth0_macvtap: left promiscuous mode [ 892.978342][ T41] veth1_vlan: left promiscuous mode [ 892.978429][ T41] veth0_vlan: left promiscuous mode [ 893.094092][ T41] team0 (unregistering): Port device team_slave_1 removed [ 893.096448][ T41] team0 (unregistering): Port device team_slave_0 removed [ 893.122673][ T3024] 8021q: adding VLAN 0 to HW filter on device eth33 [ 893.247699][ T3024] 8021q: adding VLAN 0 to HW filter on device eth34 [ 893.351626][ T3024] 8021q: adding VLAN 0 to HW filter on device eth35 [ 893.368980][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.416073][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.445647][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.479962][ T3024] 8021q: adding VLAN 0 to HW filter on device eth36 [ 893.495178][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.550181][ T41] bridge_slave_1: left allmulticast mode [ 893.550263][ T41] bridge_slave_1: left promiscuous mode [ 893.550383][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.551216][ T41] bridge_slave_0: left allmulticast mode [ 893.551346][ T41] bridge_slave_0: left promiscuous mode [ 893.551488][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.613140][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.614481][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.615495][ T41] bond0 (unregistering): Released all slaves [ 893.698982][ T41] hsr_slave_0: left promiscuous mode [ 893.699361][ T41] hsr_slave_1: left promiscuous mode [ 893.699815][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.699829][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.700410][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.700426][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.707688][ T41] veth1_macvtap: left promiscuous mode [ 893.707715][ T41] veth0_macvtap: left promiscuous mode [ 893.707778][ T41] veth1_vlan: left promiscuous mode [ 893.707861][ T41] veth0_vlan: left promiscuous mode [ 893.722916][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 893.722964][ T29] audit: type=1400 audit(1792494264.867:2317): avc: denied { write } for pid=5468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.763350][ T29] audit: type=1400 audit(1792494264.897:2318): avc: denied { write } for pid=5479 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.842309][ T41] team0 (unregistering): Port device team_slave_1 removed [ 893.844532][ T41] team0 (unregistering): Port device team_slave_0 removed [ 893.869802][ T3024] 8021q: adding VLAN 0 to HW filter on device eth37 [ 893.950568][ T29] audit: type=1400 audit(1792494265.087:2319): avc: denied { write } for pid=5483 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.981836][ T29] audit: type=1400 audit(1792494265.127:2320): avc: denied { write } for pid=5494 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 893.994123][ T3024] 8021q: adding VLAN 0 to HW filter on device eth38 [ 894.073875][ T29] audit: type=1400 audit(1792494265.217:2321): avc: denied { write } for pid=5497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.113161][ T29] audit: type=1400 audit(1792494265.257:2322): avc: denied { write } for pid=5508 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.127151][ T3024] 8021q: adding VLAN 0 to HW filter on device eth39 [ 894.219573][ T29] audit: type=1400 audit(1792494265.357:2323): avc: denied { write } for pid=5512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.253910][ T29] audit: type=1400 audit(1792494265.397:2324): avc: denied { write } for pid=5523 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 894.286223][ T3024] 8021q: adding VLAN 0 to HW filter on device eth40 [ 895.585782][ T29] audit: type=1400 audit(1792494266.727:2325): avc: denied { write } for pid=5534 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 895.623757][ T29] audit: type=1400 audit(1792494266.767:2326): avc: denied { write } for pid=5545 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1