last executing test programs: 2.280708045s ago: executing program 2 (id=3): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, 0x0) mmap$perf(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x1, 0x4000011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9d4, 0x7fffffff}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0xd557, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@ipv4_getnexthop={0x20, 0x6a, 0xf5c1404b35d587dd, 0x0, 0x0, {0x2, 0x2}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000804}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xaa, &(0x7f00000000c0)=""/170}, 0x94) mount(&(0x7f0000000100), 0x0, &(0x7f00000002c0)='9p\x00', 0x8c, 0x0) socket(0x10, 0x2, 0xffff04b2) bpf$MAP_CREATE(0x0, 0x0, 0x0) 2.124518931s ago: executing program 2 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x200000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x4000, 0x80000000, 0x2, 0x9, 0x800000, 0x40, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001e00)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001e40), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001ec0), 0x208e24b) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x30010, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x1e017000) 1.863629958s ago: executing program 2 (id=7): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r2 = gettid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x6, 0x7fc00100}]}) cachestat(0xffffffffffffffff, 0x0, 0x0, 0x0) tkill(r2, 0x7) close_range(r1, 0xffffffffffffffff, 0x0) setitimer(0x1, &(0x7f0000001d80)={{0x77359400}, {0x0, 0x2710}}, 0x0) 1.820482562s ago: executing program 3 (id=4): socket$kcm(0x2, 0x922000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x8000000, 0xe, 0x0, &(0x7f0000000900)="e68886dd0000000400ffffdd8600", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.003375206s ago: executing program 2 (id=8): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x6) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) syslog(0x3, &(0x7f0000000780)=""/186, 0xba) 957.165471ms ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x2000000000000f}, 0x11e454, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307201, 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2000080, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x122d, &(0x7f0000001280)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) fallocate(r0, 0x0, 0x0, 0x1000f4) sendfile(r0, r0, 0x0, 0x40000000800) 714.875476ms ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f00000049c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000004a00)='./proc\x00', &(0x7f0000004a40)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004a80)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000004ac0)='100', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x404c055}, 0x0) io_uring_setup(0x2bd2, &(0x7f0000004bc0)={0x0, 0x661f, 0x0, 0x1, 0x194}) epoll_create(0x7) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, 0x0) sendmsg$nl_route(r2, &(0x7f0000004c40)={0x0, 0x0, &(0x7f0000004c80)={&(0x7f0000004cc0)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0xbc2a4219f6b34c13}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) 72.018392ms ago: executing program 2 (id=10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x41, 0x0) r1 = dup(r0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)={0x90000009}) write$P9_RSTATFS(r1, &(0x7f00000001c0)={0x43, 0x9, 0x5, {0x7, 0x9, 0x1000001, 0x0, 0x9, 0x401, 0x4, 0x10, 0x1ff}}, 0x43) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r3 = syz_open_pts(r0, 0x80) dup3(r3, r0, 0x80000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000280)={0xffff, 0xd4, 0x3, 0x400c, 0x5, "73309be7b71700", 0x70000000, 0x1ff}) read(r0, &(0x7f00000002c0)=""/228, 0xe4) 0s ago: executing program 2 (id=11): syz_mount_image$ext4(&(0x7f00000016c0)='ext4\x00', &(0x7f0000001700)='./file1\x00', 0x200000, &(0x7f0000001740)={[{@noblock_validity}, {@init_itable}, {@sysvgroups}, {@resuid}, {@init_itable}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000001800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001d80)='./file1\x00', 0x88142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file1\x00', 0x101042, 0x65) pwrite64(r1, &(0x7f0000001e00)='2', 0x1, 0x84fed0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000001e40)='./file1\x00', 0x48042, 0x18c) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) statx(r2, 0x0, 0x1000, 0x40, &(0x7f00000021c0)) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000003b00)={'\x00', 0xff, 0x7f, 0x5, 0xfffffffffffff000, 0xffffffffffffffff}) getgroups(0x1, &(0x7f0000004000)=[0xffffffffffffffff]) fallocate(r2, 0x10, 0x6, 0x105ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. [ 28.967517][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 28.967533][ T29] audit: type=1400 audit(1793807634.873:126): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.967760][ T29] audit: type=1400 audit(1793807634.873:127): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.968221][ T3282] cgroup: Unknown subsys name 'net' [ 28.968441][ T29] audit: type=1400 audit(1793807634.873:128): avc: denied { unmount } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.083329][ T3282] cgroup: Unknown subsys name 'cpuset' [ 29.089551][ T3282] cgroup: Unknown subsys name 'rlimit' [ 29.208452][ T29] audit: type=1400 audit(1793807635.113:129): avc: denied { setattr } for pid=3282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.209358][ T29] audit: type=1400 audit(1793807635.113:130): avc: denied { create } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.209444][ T29] audit: type=1400 audit(1793807635.113:131): avc: denied { write } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.209687][ T29] audit: type=1400 audit(1793807635.113:132): avc: denied { read } for pid=3282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.236418][ T29] audit: type=1400 audit(1793807635.123:133): avc: denied { mounton } for pid=3282 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.236450][ T29] audit: type=1400 audit(1793807635.123:134): avc: denied { mount } for pid=3282 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.254052][ T3285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.257112][ T29] audit: type=1400 audit(1793807635.143:135): avc: denied { read } for pid=3017 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.309211][ T3282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.219240][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.219524][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.219754][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.251458][ T3300] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 31.307550][ T3292] infiniband rxe0: set active [ 31.307570][ T3292] infiniband rxe0: added rxe_eth0 [ 31.309670][ T900] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.322906][ T3293] rxe0: rxe_newlink: already configured on rxe_eth0 [ 31.352749][ T3293] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.357720][ T3301] rxe0: rxe_newlink: already configured on rxe_eth0 [ 31.362061][ T3292] RDS/IB: rxe0: added [ 31.362142][ T3292] smc: adding ib device rxe0 with port count 1 [ 31.362224][ T3292] smc: ib device rxe0 port 1 has no pnetid [ 31.392278][ T900] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.401184][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.446502][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.481680][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.481775][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.481931][ T3300] bridge_slave_0: entered allmulticast mode [ 31.482384][ T3300] bridge_slave_0: entered promiscuous mode [ 31.497186][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.498854][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.498884][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.499018][ T3300] bridge_slave_1: entered allmulticast mode [ 31.499478][ T3300] bridge_slave_1: entered promiscuous mode [ 31.527722][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.530565][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.555552][ T3300] team0: Port device team_slave_0 added [ 31.556418][ T3300] team0: Port device team_slave_1 added [ 31.568703][ T3299] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.593886][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.593900][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.593931][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.594679][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.594761][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.594786][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.640069][ T3300] hsr_slave_0: entered promiscuous mode [ 31.640468][ T3300] hsr_slave_1: entered promiscuous mode [ 31.694731][ T3292] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.794874][ T3293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.794949][ T3293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.795004][ T3293] bridge_slave_0: entered allmulticast mode [ 31.795518][ T3293] bridge_slave_0: entered promiscuous mode [ 31.833344][ T3293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.833376][ T3293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.833468][ T3293] bridge_slave_1: entered allmulticast mode [ 31.833830][ T3293] bridge_slave_1: entered promiscuous mode [ 31.844275][ T3293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.845561][ T3293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.881206][ T3293] team0: Port device team_slave_0 added [ 31.899585][ T3293] team0: Port device team_slave_1 added [ 31.899633][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.899662][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.899725][ T3299] bridge_slave_0: entered allmulticast mode [ 31.900138][ T3299] bridge_slave_0: entered promiscuous mode [ 31.947158][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.947263][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.947321][ T3299] bridge_slave_1: entered allmulticast mode [ 31.947714][ T3299] bridge_slave_1: entered promiscuous mode [ 31.948204][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.948215][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.948300][ T3293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.953687][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.953719][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.953853][ T3301] bridge_slave_0: entered allmulticast mode [ 31.954206][ T3301] bridge_slave_0: entered promiscuous mode [ 31.959692][ T3300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.964476][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.970347][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.970378][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.970432][ T3301] bridge_slave_1: entered allmulticast mode [ 31.970839][ T3301] bridge_slave_1: entered promiscuous mode [ 31.976451][ T3293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.976465][ T3293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.976490][ T3293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.976636][ T3300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.983624][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.992526][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.995607][ T3300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.009022][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.018319][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.023486][ T3300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.027442][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.028655][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.029821][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.055736][ T3299] team0: Port device team_slave_0 added [ 32.062263][ T3299] team0: Port device team_slave_1 added [ 32.068869][ T3301] team0: Port device team_slave_0 added [ 32.073284][ T3293] hsr_slave_0: entered promiscuous mode [ 32.074017][ T3293] hsr_slave_1: entered promiscuous mode [ 32.074366][ T3293] debugfs: 'hsr0' already exists in 'hsr' [ 32.074378][ T3293] Cannot create hsr debugfs directory [ 32.075299][ T3301] team0: Port device team_slave_1 added [ 32.093155][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.093169][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.093199][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.093800][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.093812][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.093961][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.113931][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.113967][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.114067][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.114115][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.117501][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.117515][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.117543][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.133774][ T3299] hsr_slave_0: entered promiscuous mode [ 32.134130][ T3299] hsr_slave_1: entered promiscuous mode [ 32.134332][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 32.134344][ T3299] Cannot create hsr debugfs directory [ 32.134671][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.134682][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.134734][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.206242][ T3301] hsr_slave_0: entered promiscuous mode [ 32.206748][ T3301] hsr_slave_1: entered promiscuous mode [ 32.206955][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.206967][ T3301] Cannot create hsr debugfs directory [ 32.310144][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.313763][ T3292] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.313796][ T3292] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.313846][ T3292] bridge_slave_0: entered allmulticast mode [ 32.314304][ T3292] bridge_slave_0: entered promiscuous mode [ 32.318356][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.318387][ T3292] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.318509][ T3292] bridge_slave_1: entered allmulticast mode [ 32.319013][ T3292] bridge_slave_1: entered promiscuous mode [ 32.352313][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.359147][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.578178][ T3292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.602965][ T3292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.606543][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.621293][ T3292] team0: Port device team_slave_0 added [ 32.622501][ T3292] team0: Port device team_slave_1 added [ 32.641449][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.641512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.647008][ T3293] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.651884][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.657998][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.658030][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.663474][ T3293] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.665936][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.671763][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.671775][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.671804][ T3292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.672287][ T3292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.672299][ T3292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.672377][ T3292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.676236][ T3293] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.679735][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.692023][ T3293] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.701146][ T3293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.757177][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.777449][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.784730][ T3292] hsr_slave_0: entered promiscuous mode [ 32.785171][ T3292] hsr_slave_1: entered promiscuous mode [ 32.785482][ T3292] debugfs: 'hsr0' already exists in 'hsr' [ 32.785495][ T3292] Cannot create hsr debugfs directory [ 32.793538][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.801943][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.814861][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.823838][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.825572][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.843216][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.848111][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.863894][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.868179][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.883144][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.891315][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.900352][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.905804][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.916067][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.919661][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.014258][ T3292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.017166][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 33.019769][ T3292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.021974][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 33.030364][ T3292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.039893][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 33.047635][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.047858][ T3292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.052673][ T3292] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 33.055862][ T3293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.061894][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.077031][ T3293] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.081320][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.086588][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.089272][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.089355][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.094555][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.094587][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.098639][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.098671][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.104158][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.104191][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.119259][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.146023][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.146056][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.157879][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.157912][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.246539][ T3292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.265168][ T3292] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.281600][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.281633][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.306749][ T73] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.306788][ T73] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.327233][ T3300] veth0_vlan: entered promiscuous mode [ 33.339776][ T3300] veth1_vlan: entered promiscuous mode [ 33.377366][ T3300] veth0_macvtap: entered promiscuous mode [ 33.382106][ T3300] veth1_macvtap: entered promiscuous mode [ 33.402506][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.409065][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.419624][ T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.419715][ T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.419897][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.419929][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.466234][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.523096][ T3293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.558352][ T3300] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.571015][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.640894][ T3301] veth0_vlan: entered promiscuous mode [ 33.649489][ T3301] veth1_vlan: entered promiscuous mode [ 33.673342][ T3301] veth0_macvtap: entered promiscuous mode [ 33.682620][ T3292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.686669][ T3301] veth1_macvtap: entered promiscuous mode [ 33.718903][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.729269][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.763896][ T3435] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.782935][ T3435] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.783191][ T3435] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.783468][ T3435] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.837372][ T3299] veth0_vlan: entered promiscuous mode [ 33.860425][ T3299] veth1_vlan: entered promiscuous mode [ 33.886317][ T3293] veth0_vlan: entered promiscuous mode [ 33.888423][ T3293] veth1_vlan: entered promiscuous mode [ 33.907389][ T3293] veth0_macvtap: entered promiscuous mode [ 33.908852][ T3293] veth1_macvtap: entered promiscuous mode [ 33.926199][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.927684][ T3293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.948524][ T73] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.948784][ T73] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.949026][ T73] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.002951][ T73] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.011453][ T3299] veth0_macvtap: entered promiscuous mode [ 34.013525][ T3292] veth0_vlan: entered promiscuous mode [ 34.024729][ T3299] veth1_macvtap: entered promiscuous mode [ 34.038938][ T3292] veth1_vlan: entered promiscuous mode [ 34.055577][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.064369][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 34.064385][ T29] audit: type=1400 audit(1793807639.973:169): avc: denied { create } for pid=3513 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.066688][ T29] audit: type=1400 audit(1793807639.973:170): avc: denied { map_read map_write } for pid=3513 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.070055][ T29] audit: type=1400 audit(1793807639.973:171): avc: denied { prog_run } for pid=3513 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.088839][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.107949][ T3292] veth0_macvtap: entered promiscuous mode [ 34.121321][ T3292] veth1_macvtap: entered promiscuous mode [ 34.123394][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.123449][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.123549][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.123597][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.124165][ T29] audit: type=1400 audit(1793807640.033:172): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 34.888372][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.891470][ T3292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.164920][ T29] audit: type=1400 audit(1793807641.073:173): avc: denied { allowed } for pid=3524 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 35.167523][ T29] audit: type=1400 audit(1793807641.073:174): avc: denied { create } for pid=3524 comm="syz.3.9" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 35.178296][ T3525] FAULT_INJECTION: forcing a failure. [ 35.178296][ T3525] name failslab, interval 1, probability 0, space 0, times 1 [ 35.178455][ T3525] CPU: 1 UID: 0 PID: 3525 Comm: syz.3.9 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.178593][ T3525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 35.178617][ T3525] Call Trace: [ 35.178624][ T3525] [ 35.178631][ T3525] __dump_stack+0x1d/0x30 [ 35.178660][ T3525] dump_stack_lvl+0x95/0xd0 [ 35.178719][ T3525] dump_stack+0x15/0x1b [ 35.178740][ T3525] should_fail_ex+0x259/0x270 [ 35.178768][ T3525] should_failslab+0x8c/0xb0 [ 35.178853][ T3525] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 35.178936][ T3525] ? debugfs_alloc_inode+0x34/0x40 [ 35.178966][ T3525] ? debugfs_alloc_inode+0x34/0x40 [ 35.179015][ T3525] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 35.179074][ T3525] debugfs_alloc_inode+0x34/0x40 [ 35.179154][ T3525] alloc_inode+0x40/0x170 [ 35.179178][ T3525] new_inode+0x1d/0xe0 [ 35.179207][ T3525] __debugfs_create_file+0x97/0x2b0 [ 35.179231][ T3525] debugfs_create_file_full+0x3f/0x60 [ 35.179312][ T3525] ? __pfx_batadv_meshif_init_early+0x10/0x10 [ 35.179379][ T3525] ref_tracker_dir_debugfs+0x10e/0x1e0 [ 35.179478][ T3525] alloc_netdev_mqs+0x1a9/0xa50 [ 35.179511][ T3525] rtnl_create_link+0x239/0x720 [ 35.179541][ T3525] rtnl_newlink_create+0x17a/0x4a0 [ 35.179650][ T3525] rtnl_newlink+0x1255/0x1510 [ 35.179691][ T3525] ? get_page_from_freelist+0x7f9/0x1990 [ 35.179711][ T3525] ? __css_rstat_updated+0xbb/0x280 [ 35.179794][ T3525] ? __memcg_slab_free_hook+0x154/0x340 [ 35.179899][ T3525] ? __rcu_read_unlock+0x4e/0x70 [ 35.179924][ T3525] ? avc_has_perm_noaudit+0xac/0x160 [ 35.179953][ T3525] ? cred_has_capability+0x224/0x2a0 [ 35.179976][ T3525] ? selinux_capable+0x31/0x40 [ 35.180072][ T3525] ? security_capable+0x7b/0x90 [ 35.180094][ T3525] ? ns_capable+0x80/0xb0 [ 35.180121][ T3525] ? __pfx_rtnl_newlink+0x10/0x10 [ 35.180297][ T3525] rtnetlink_rcv_msg+0x64b/0x720 [ 35.180326][ T3525] ? __copy_skb_header+0x22f/0x2b0 [ 35.180395][ T3525] netlink_rcv_skb+0x11e/0x220 [ 35.180419][ T3525] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 35.180453][ T3525] rtnetlink_rcv+0x1c/0x30 [ 35.180480][ T3525] netlink_unicast+0x665/0x740 [ 35.180550][ T3525] netlink_sendmsg+0x5ef/0x740 [ 35.180639][ T3525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 35.180693][ T3525] ____sys_sendmsg+0x54a/0x590 [ 35.180717][ T3525] ___sys_sendmsg+0x195/0x1e0 [ 35.180751][ T3525] __x64_sys_sendmsg+0xd4/0x160 [ 35.180776][ T3525] x64_sys_call+0x22ab/0x2550 [ 35.180805][ T3525] do_syscall_64+0x112/0x360 [ 35.180837][ T3525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.180870][ T3525] RIP: 0033:0x7feab579fb19 [ 35.180887][ T3525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.180905][ T3525] RSP: 002b:00007feab41ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 35.180924][ T3525] RAX: ffffffffffffffda RBX: 00007feab5a25fa0 RCX: 00007feab579fb19 [ 35.180940][ T3525] RDX: 0000000020000840 RSI: 0000200000004c40 RDI: 0000000000000007 [ 35.180957][ T3525] RBP: 00007feab5837b70 R08: 0000000000000000 R09: 0000000000000000 [ 35.181020][ T3525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.181071][ T3525] R13: 00007feab5a26038 R14: 00007feab5a25fa0 R15: 00007ffde653e2f8 [ 35.181090][ T3525] [ 35.191174][ T3525] debugfs: out of free dentries, can not create file 'netdev@ffff88811b39c600' [ 35.874098][ T3531] loop2: detected capacity change from 0 to 1024 [ 35.875689][ T3531] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.912857][ T29] audit: type=1400 audit(1793807641.783:175): avc: denied { write } for pid=3530 comm="syz.2.11" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 35.938520][ T3526] loop4: detected capacity change from 0 to 8192 [ 35.938963][ T3531] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.939131][ T29] audit: type=1400 audit(1793807641.843:176): avc: denied { mount } for pid=3530 comm="syz.2.11" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.948905][ T3525] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 35.961619][ T29] audit: type=1400 audit(1793807641.863:177): avc: denied { mount } for pid=3520 comm="syz.4.5" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 35.972867][ T29] audit: type=1400 audit(1793807641.873:178): avc: denied { write } for pid=3530 comm="syz.2.11" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 35.998423][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044337][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.044904][ T41] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.045020][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.108962][ T3283] ================================================================== [ 36.109008][ T3283] BUG: KCSAN: data-race in _copy_to_iter / fat12_ent_put [ 36.109045][ T3283] [ 36.109052][ T3283] read-write to 0xffff88810857e0bc of 1 bytes by task 3526 on cpu 1: [ 36.109071][ T3283] fat12_ent_put+0xc4/0x180 [ 36.109100][ T3283] __fat_alloc_clusters+0x55d/0xd80 [ 36.109128][ T3283] fat_alloc_chain+0x25/0x30 [ 36.109154][ T3283] fat_get_block+0x252/0x5e0 [ 36.109186][ T3283] __block_write_begin_int+0x421/0x1060 [ 36.109224][ T3283] cont_write_begin+0x5bf/0x920 [ 36.109259][ T3283] fat_write_begin+0x52/0xe0 [ 36.109293][ T3283] cont_write_begin+0x18d/0x920 [ 36.109328][ T3283] fat_write_begin+0x52/0xe0 [ 36.109358][ T3283] generic_cont_expand_simple+0xb0/0x150 [ 36.109396][ T3283] fat_cont_expand+0x3e/0x170 [ 36.109427][ T3283] fat_fallocate+0x168/0x1a0 [ 36.109457][ T3283] vfs_fallocate+0x3ac/0x400 [ 36.109475][ T3283] __x64_sys_fallocate+0x7a/0xd0 [ 36.109495][ T3283] x64_sys_call+0x1e1d/0x2550 [ 36.109524][ T3283] do_syscall_64+0x112/0x360 [ 36.109556][ T3283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.109580][ T3283] [ 36.109587][ T3283] read to 0xffff88810857e000 of 512 bytes by task 3283 on cpu 0: [ 36.109606][ T3283] _copy_to_iter+0x130/0xea0 [ 36.109635][ T3283] copy_page_to_iter+0x174/0x210 [ 36.109664][ T3283] filemap_read+0x3f8/0xad0 [ 36.109688][ T3283] blkdev_read_iter+0x29c/0x390 [ 36.109709][ T3283] vfs_read+0x699/0x7c0 [ 36.109739][ T3283] ksys_read+0xdc/0x1a0 [ 36.109771][ T3283] __x64_sys_read+0x40/0x50 [ 36.109804][ T3283] x64_sys_call+0x2135/0x2550 [ 36.109833][ T3283] do_syscall_64+0x112/0x360 [ 36.109867][ T3283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.109899][ T3283] [ 36.109904][ T3283] Reported by Kernel Concurrency Sanitizer on: [ 36.109916][ T3283] CPU: 0 UID: 0 PID: 3283 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 36.109944][ T3283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 36.109959][ T3283] ================================================================== [ 36.232201][ T3525] syz.3.9 (3525) used greatest stack depth: 10136 bytes left [ 36.445657][ T3300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.491847][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 43.537344][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 43.537427][ T29] audit: type=1400 audit(1793807649.443:188): avc: denied { write } for pid=3544 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.578028][ T29] audit: type=1400 audit(1793807649.483:189): avc: denied { write } for pid=3555 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1