last executing test programs: 2.189204657s ago: executing program 0 (id=60): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaeaaaaaaaaaaaa86dd606410a600080001fe8000000000000000000000000000120000000000000000000000000000000132"], 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setns(0xc9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 2.05735009s ago: executing program 0 (id=62): r0 = socket(0x10, 0x803, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x1, 0x2) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.981484072s ago: executing program 0 (id=63): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.420981106s ago: executing program 1 (id=81): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) ptrace$getsig(0x4202, r0, 0xfffffffffffffff8, 0x0) 1.346478187s ago: executing program 3 (id=87): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="9380000068820000140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0xe36f0090c2f86fcf}, 0x4054) 1.088246124s ago: executing program 0 (id=91): perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x94e4, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0xfffffffa, 0x4, @perf_bp={0x0, 0x6}, 0x19183, 0x1, 0x5, 0xb, 0xa, 0x904813a5, 0x4, 0x0, 0x0, 0x0, 0xffffffffffff0000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./dev\x00', &(0x7f0000000480)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc178fd0b, &(0x7f0000000138)="0400000000000000000000007801") 1.056958165s ago: executing program 3 (id=92): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in6=@local, 0x4e1f, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x200000004, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0x0, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x3502, 0x1, 0x8, 0x0, 0x9}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.035713115s ago: executing program 0 (id=95): sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x28543634fae43ad, 0xfffffff8, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8886}, 0x20004880) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="120000000c0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000500), 0x0}, 0x20) 1.001429986s ago: executing program 3 (id=96): r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0xfffffffe, 0x2, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r1, 0x7fffdfe, 0xcf28, 0x87, 0x0, 0x0) 993.821346ms ago: executing program 0 (id=97): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700), 0x0, 0x2, 0x0, 0x0, 0x22, 0x8}) 536.742097ms ago: executing program 4 (id=108): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 522.076847ms ago: executing program 1 (id=109): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}}, 0x24040084) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x5, @empty, 'vcan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 476.976928ms ago: executing program 2 (id=110): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x55b7, 0x520, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x6, 0x8, 0x20001, 0x1, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/mptcp/available_schedulers\x00', 0x0, 0x0) read(r0, 0x0, 0x0) 469.252829ms ago: executing program 1 (id=111): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x80000000000000, 0x1113a, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000008, 0x2, @perf_config_ext={0x0, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) 424.449ms ago: executing program 4 (id=112): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f00000027c0)=[{0x0}, {&(0x7f0000002640)="f5f2de", 0x3}], 0x2}}], 0x1, 0x0) 396.09235ms ago: executing program 2 (id=113): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x1f, r1, 0x1, 0xffffffff}, 0x10) 373.581491ms ago: executing program 4 (id=114): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0xfd, 0xfd, 0x7ffc0001}]}) open_by_handle_at(0xffffffffffffffff, 0x0, 0x4000) 343.835732ms ago: executing program 2 (id=115): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x300}}) 317.449462ms ago: executing program 2 (id=116): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f0000000380)='configfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000004c0)='j\x95\'\x8aC\x16\xca\\', &(0x7f0000000c40)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xeb\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83w\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffxi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xbd\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000580)='\xe6usek\v\xf6u%\x9b\x00\x00\xad\xde\x00\x00\x00\x00\x01\x80\x00\x00\xcf\x9b\x9f\b\xb6\xfe\xc8\xda~-\xf5S>\xb8\x86\xfc\x9cVR\x82\x9a\xbdp\xbd\x83u\xf9Z\xd2\xcb\xcdF\xd0#N7\x17\xfc\x1e\xf1\x97\xffyi\xe0KE}]\x8e\xca\xe3+\xc8\x98\x03\x91\x88(\bn\x7f\x0e\x85\xa5\xb4\n?_\xc9\xef\xe0Q\xdb\xb6\xa5\x81t\x06\xda\x95\x935\xf1\x18\xac\x00\xf0\xff\xff\xdf\xb5\xa1\x06\xfd\x01\x00\x00\x00\x0f\xf8\xe3\x8a\x1f\x9c\xf3\xc5\x1f\xf9\xbf[\xd13\xb3\xd3j\r6\x7f', &(0x7f00000001c0)='y', 0x1) close(r0) 311.333483ms ago: executing program 1 (id=117): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e22, 0x8, @private2, 0xa8}}}, 0x84) ptrace(0x10, r0) ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r0, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) 285.069803ms ago: executing program 1 (id=118): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc4, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x4, @perf_config_ext={0x7, 0x8}, 0x100002, 0x401, 0x9000, 0x5, 0x6, 0x20002, 0x4, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) 272.587763ms ago: executing program 4 (id=119): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 246.164894ms ago: executing program 2 (id=120): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000040)=0x1, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c80)={0x34, r2, 0x1, 0x8, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010100}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 226.839825ms ago: executing program 4 (id=121): perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f0000000640), &(0x7f0000000680)=r1}, 0x20) 206.650615ms ago: executing program 2 (id=122): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x2}, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1a72a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xc}, 0x209, 0x6, 0x0, 0x3, 0x87c, 0x20005, 0xc, 0x0, 0x0, 0x0, 0x4c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0005006d04000012b0000000000000000000000600ff090113de57ed0901150026ff00750895068100090191"], 0x132) close_range(r0, r0, 0x0) 155.222206ms ago: executing program 3 (id=123): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0xffff, 0x9, 0xa, 0x52, 0x44a6, 0x5, 0x5, 0x8, r2}, &(0x7f0000000240)=0x20) 154.800306ms ago: executing program 4 (id=124): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r1, 0x108000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 122.701757ms ago: executing program 1 (id=125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000600), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 76.985158ms ago: executing program 3 (id=126): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 0s ago: executing program 3 (id=127): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0xb}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @local}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x6, 0x7, 0x6, 0x4f, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @private=0xa010101}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): [ 19.994160][ T29] audit: type=1400 audit(1788164007.424:99): avc: denied { noatsecure } for pid=3171 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.994197][ T29] audit: type=1400 audit(1788164007.424:100): avc: denied { write } for pid=3171 comm="sh" path="pipe:[2210]" dev="pipefs" ino=2210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.994219][ T29] audit: type=1400 audit(1788164007.424:101): avc: denied { rlimitinh } for pid=3171 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.994240][ T29] audit: type=1400 audit(1788164007.424:102): avc: denied { siginh } for pid=3171 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.713303][ T29] audit: type=1400 audit(1788164008.144:103): avc: denied { search } for pid=3181 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 20.713354][ T29] audit: type=1400 audit(1788164008.144:104): avc: denied { search } for pid=3181 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.355801][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 22.355847][ T29] audit: type=1400 audit(1788164009.794:122): avc: denied { write } for pid=3251 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.385303][ T29] audit: type=1400 audit(1788164009.804:123): avc: denied { write } for pid=3262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.110190][ T29] audit: type=1400 audit(1788164010.544:124): avc: denied { write } for pid=3266 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.133231][ T29] audit: type=1400 audit(1788164010.564:125): avc: denied { write } for pid=3277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 28.121678][ T29] audit: type=1400 audit(1788164015.554:126): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.144940][ T29] audit: type=1400 audit(1788164015.594:127): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.145655][ T3287] cgroup: Unknown subsys name 'net' [ 28.145971][ T29] audit: type=1400 audit(1788164015.594:128): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.284768][ T3287] cgroup: Unknown subsys name 'cpuset' [ 28.290992][ T3287] cgroup: Unknown subsys name 'rlimit' [ 28.400542][ T29] audit: type=1400 audit(1788164015.834:129): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.415437][ T29] audit: type=1400 audit(1788164015.834:130): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.415465][ T29] audit: type=1400 audit(1788164015.834:131): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.415535][ T29] audit: type=1400 audit(1788164015.834:132): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.420845][ T29] audit: type=1400 audit(1788164015.834:133): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 28.513158][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.513445][ T29] audit: type=1400 audit(1788164015.954:134): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.513852][ T29] audit: type=1400 audit(1788164015.954:135): avc: denied { write } for pid=3292 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.604633][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.845401][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.845447][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.845575][ T3299] bridge_slave_0: entered allmulticast mode [ 29.846042][ T3299] bridge_slave_0: entered promiscuous mode [ 29.859290][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.859323][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.859392][ T3303] bridge_slave_0: entered allmulticast mode [ 29.859953][ T3303] bridge_slave_0: entered promiscuous mode [ 29.861079][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.861110][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.861211][ T3303] bridge_slave_1: entered allmulticast mode [ 29.861571][ T3303] bridge_slave_1: entered promiscuous mode [ 29.886433][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.886467][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.886624][ T3299] bridge_slave_1: entered allmulticast mode [ 29.886991][ T3299] bridge_slave_1: entered promiscuous mode [ 29.924205][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.940070][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.941088][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.942429][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.961427][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.961462][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.961536][ T3298] bridge_slave_0: entered allmulticast mode [ 29.961945][ T3298] bridge_slave_0: entered promiscuous mode [ 29.975965][ T3303] team0: Port device team_slave_0 added [ 29.976973][ T3303] team0: Port device team_slave_1 added [ 29.977096][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.977126][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.977257][ T3305] bridge_slave_0: entered allmulticast mode [ 29.977660][ T3305] bridge_slave_0: entered promiscuous mode [ 29.978613][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.978642][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.978710][ T3298] bridge_slave_1: entered allmulticast mode [ 29.979286][ T3298] bridge_slave_1: entered promiscuous mode [ 29.994346][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.994380][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.994512][ T3305] bridge_slave_1: entered allmulticast mode [ 29.994902][ T3305] bridge_slave_1: entered promiscuous mode [ 30.005245][ T3299] team0: Port device team_slave_0 added [ 30.015882][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.016950][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.017919][ T3299] team0: Port device team_slave_1 added [ 30.033183][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.034444][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.039290][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.039302][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.039327][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.039824][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.039836][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.039861][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.053149][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.053163][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.053222][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.053658][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.053669][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.053693][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.064274][ T3298] team0: Port device team_slave_0 added [ 30.070765][ T3298] team0: Port device team_slave_1 added [ 30.080559][ T3305] team0: Port device team_slave_0 added [ 30.081594][ T3305] team0: Port device team_slave_1 added [ 30.093571][ T3303] hsr_slave_0: entered promiscuous mode [ 30.094282][ T3303] hsr_slave_1: entered promiscuous mode [ 30.103968][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.103983][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.104009][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.123116][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.123131][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.123243][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.126850][ T3299] hsr_slave_0: entered promiscuous mode [ 30.127252][ T3299] hsr_slave_1: entered promiscuous mode [ 30.127455][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 30.127477][ T3299] Cannot create hsr debugfs directory [ 30.132197][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.132211][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.132237][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.132795][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.132868][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.132893][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.178870][ T3298] hsr_slave_0: entered promiscuous mode [ 30.179292][ T3298] hsr_slave_1: entered promiscuous mode [ 30.179762][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 30.179776][ T3298] Cannot create hsr debugfs directory [ 30.199488][ T3305] hsr_slave_0: entered promiscuous mode [ 30.199797][ T3305] hsr_slave_1: entered promiscuous mode [ 30.200057][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 30.200073][ T3305] Cannot create hsr debugfs directory [ 30.211037][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.211070][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.211201][ T3304] bridge_slave_0: entered allmulticast mode [ 30.211858][ T3304] bridge_slave_0: entered promiscuous mode [ 30.213152][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.213181][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.213324][ T3304] bridge_slave_1: entered allmulticast mode [ 30.213886][ T3304] bridge_slave_1: entered promiscuous mode [ 30.320975][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.334722][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.376523][ T3304] team0: Port device team_slave_0 added [ 30.386216][ T3304] team0: Port device team_slave_1 added [ 30.414960][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.414983][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.415010][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.415596][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.415608][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.415632][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.468103][ T3303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.470317][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.470839][ T3303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.476517][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.482225][ T3303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.488958][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.505675][ T3303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.515604][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.516808][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.526428][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.529534][ T3304] hsr_slave_0: entered promiscuous mode [ 30.529913][ T3304] hsr_slave_1: entered promiscuous mode [ 30.530227][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 30.530241][ T3304] Cannot create hsr debugfs directory [ 30.535873][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.559026][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.571156][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.575558][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.585276][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.592564][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.597000][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.604848][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.609384][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.609420][ T3303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.609567][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.609597][ T3303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.621029][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.629474][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.639811][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.642110][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 30.655019][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.661993][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 30.677140][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.677180][ T3299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.677311][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.677419][ T3299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.678571][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.686407][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 30.686876][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.691989][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 30.703031][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.729420][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.739970][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.746891][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.018580][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.027255][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.071541][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.080366][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.126100][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.148594][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.157292][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.157798][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.166721][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.169461][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.173813][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.181622][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.188715][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.190430][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.198902][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.198999][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.210756][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.210792][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.225729][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.228175][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.255425][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.257416][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.269424][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.269447][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.275479][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.275518][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.282148][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.282182][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.298152][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.298242][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.300558][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.300594][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.309014][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.332409][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.353617][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.353654][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.357290][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.357331][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.379106][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.412589][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.437060][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.437160][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.440581][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.440611][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.483445][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.650920][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.673049][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.706993][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.739332][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.784557][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.863862][ T3299] veth0_vlan: entered promiscuous mode [ 31.871469][ T3305] veth0_vlan: entered promiscuous mode [ 31.885125][ T3299] veth1_vlan: entered promiscuous mode [ 31.900939][ T3303] veth0_vlan: entered promiscuous mode [ 31.902516][ T3305] veth1_vlan: entered promiscuous mode [ 31.912785][ T3303] veth1_vlan: entered promiscuous mode [ 31.940338][ T3305] veth0_macvtap: entered promiscuous mode [ 31.942077][ T3305] veth1_macvtap: entered promiscuous mode [ 31.948246][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.951903][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.970198][ T3299] veth0_macvtap: entered promiscuous mode [ 31.984676][ T3299] veth1_macvtap: entered promiscuous mode [ 32.003595][ T3298] veth0_vlan: entered promiscuous mode [ 32.011275][ T3303] veth0_macvtap: entered promiscuous mode [ 32.013441][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.019963][ T3298] veth1_vlan: entered promiscuous mode [ 32.022240][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.025922][ T356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.026605][ T356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.026684][ T356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.026798][ T356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.076260][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.080047][ T3303] veth1_macvtap: entered promiscuous mode [ 32.104549][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105092][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105131][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.105223][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.108170][ T3298] veth0_macvtap: entered promiscuous mode [ 32.112908][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.115969][ T3298] veth1_macvtap: entered promiscuous mode [ 32.118253][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.138912][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.142833][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.205769][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.205937][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.206009][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.206252][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.206437][ T38] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.215333][ T3503] FAULT_INJECTION: forcing a failure. [ 32.215333][ T3503] name failslab, interval 1, probability 0, space 0, times 1 [ 32.215368][ T3503] CPU: 0 UID: 0 PID: 3503 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(lazy) [ 32.215397][ T3503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.215410][ T3503] Call Trace: [ 32.215426][ T3503] [ 32.215435][ T3503] __dump_stack+0x1d/0x30 [ 32.215465][ T3503] dump_stack_lvl+0x95/0xd0 [ 32.215488][ T3503] dump_stack+0x15/0x1b [ 32.215554][ T3503] should_fail_ex+0x262/0x280 [ 32.215577][ T3503] ? prepare_creds+0x38/0x550 [ 32.215679][ T3503] should_failslab+0x8c/0xb0 [ 32.215706][ T3503] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 32.215732][ T3503] ? prepare_creds+0x38/0x550 [ 32.215841][ T3503] prepare_creds+0x38/0x550 [ 32.215866][ T3503] cap_task_prctl+0x2a4/0x6b0 [ 32.215902][ T3503] security_task_prctl+0x85/0x160 [ 32.215934][ T3503] __se_sys_prctl+0x6c/0x13b0 [ 32.215963][ T3503] __x64_sys_prctl+0x67/0x80 [ 32.216049][ T3503] x64_sys_call+0x2421/0x2550 [ 32.216074][ T3503] do_syscall_64+0x112/0x360 [ 32.216135][ T3503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.216158][ T3503] RIP: 0033:0x7fa2f0f9e159 [ 32.216175][ T3503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.216193][ T3503] RSP: 002b:00007fa2ef9f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 32.216270][ T3503] RAX: ffffffffffffffda RBX: 00007fa2f1225fa0 RCX: 00007fa2f0f9e159 [ 32.216298][ T3503] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000008 [ 32.216311][ T3503] RBP: 00007fa2f1035024 R08: 0000000000000000 R09: 0000000000000000 [ 32.216324][ T3503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 32.216337][ T3503] R13: 00007fa2f1226038 R14: 00007fa2f1225fa0 R15: 00007ffd484df7f8 [ 32.216355][ T3503] [ 32.264382][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.264558][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.264593][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.329751][ T3304] veth0_vlan: entered promiscuous mode [ 32.343902][ T3304] veth1_vlan: entered promiscuous mode [ 32.449257][ T3304] veth0_macvtap: entered promiscuous mode [ 32.465874][ T3304] veth1_macvtap: entered promiscuous mode [ 32.501298][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.525025][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.574449][ T38] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.575014][ T38] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.575080][ T38] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.575112][ T38] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.657156][ T3407] kernel write not supported for file bpf-prog (pid: 3407 comm: kworker/1:4) [ 32.709583][ T3540] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 32.779149][ T3545] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 32.963618][ T3561] : renamed from bond0 (while UP) [ 33.027338][ T3564] Zero length message leads to an empty skb [ 33.065087][ T3571] loop2: detected capacity change from 0 to 1024 [ 33.081919][ T3571] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #13: comm syz.2.32: iget: bad i_size value: -360287970189638630 [ 33.081963][ T3571] loop2: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 33.095227][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 33.095253][ C1] EXT4-fs (loop2): initial error at time 1788164020: ext4_orphan_get:1403: inode 13 [ 33.095287][ C1] EXT4-fs (loop2): last error at time 1788164020: ext4_orphan_get:1403: inode 13 [ 33.127262][ T3571] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.32: couldn't read orphan inode 13 (err -117) [ 33.127295][ T3571] loop2: lost filesystem error report for type 5 error -117 [ 33.127897][ T3571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.128102][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 33.128116][ T29] audit: type=1400 audit(1788164020.564:236): avc: denied { mount } for pid=3570 comm="syz.2.32" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.136707][ T29] audit: type=1400 audit(1788164020.574:237): avc: denied { read } for pid=3578 comm="syz.0.33" name="control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.136734][ T29] audit: type=1400 audit(1788164020.574:238): avc: denied { open } for pid=3578 comm="syz.0.33" path="/6/dev/mapper/control" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.150536][ T29] audit: type=1400 audit(1788164020.584:239): avc: denied { ioctl } for pid=3578 comm="syz.0.33" path="/6/dev/mapper/control" dev="devtmpfs" ino=247 ioctlcmd=0xfd09 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 33.167020][ T29] audit: type=1400 audit(1788164020.604:240): avc: denied { write } for pid=3570 comm="syz.2.32" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.167090][ T3571] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 33.167120][ T3571] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 33.167192][ T3571] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.32: Failed to acquire dquot type 0 [ 33.234562][ T29] audit: type=1400 audit(1788164020.674:241): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 33.341207][ T3585] loop1: detected capacity change from 0 to 256 [ 33.350287][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.362006][ T3588] loop0: detected capacity change from 0 to 128 [ 33.370472][ T3588] ======================================================= [ 33.370472][ T3588] WARNING: The mand mount option has been deprecated and [ 33.370472][ T3588] and is ignored by this kernel. Remove the mand [ 33.370472][ T3588] option from the mount to silence this warning. [ 33.370472][ T3588] ======================================================= [ 33.375432][ T29] audit: type=1400 audit(1788164020.814:242): avc: denied { mount } for pid=3584 comm="syz.1.38" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.381368][ T3588] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 33.383428][ T3588] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.400264][ T29] audit: type=1400 audit(1788164020.834:243): avc: denied { write } for pid=3586 comm="syz.0.36" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 33.461860][ T3591] loop2: detected capacity change from 0 to 1024 [ 33.463038][ T3591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.463145][ T3591] EXT4-fs: inline encryption not supported [ 33.463162][ T3591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.499763][ T3591] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842e028, mo2=0002] [ 33.500262][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 33.500325][ T3591] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.525974][ T3591] EXT4-fs error (device loop2): ext4_map_blocks:832: inode #15: comm syz.2.37: lblock 0 mapped to illegal pblock 0 (length 6) [ 33.526612][ T3591] EXT4-fs (loop2): Remounting filesystem read-only [ 33.558985][ T3303] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.658722][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.735416][ T3603] mmap: syz.2.41 (3603) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.841700][ T3618] Illegal XDP return value 4294967274 on prog (id 6) dev syz_tun, expect packet loss! [ 33.912094][ T3626] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 33.925567][ T3613] syz.0.46 (3613) used greatest stack depth: 10792 bytes left [ 34.023648][ T3636] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 34.218238][ T3646] netlink: 'syz.0.62': attribute type 1 has an invalid length. [ 34.233818][ T3646] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.389286][ T3653] process 'syz.4.64' launched './file1' with NULL argv: empty string added [ 34.578860][ T3669] loop3: detected capacity change from 0 to 512 [ 34.592184][ T3669] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.70: inode has both inline data and extents flags [ 34.592300][ T3669] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.605707][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 34.605732][ C0] EXT4-fs (loop3): initial error at time 1788164022: ext4_orphan_get:1403: inode 15 [ 34.605764][ C0] EXT4-fs (loop3): last error at time 1788164022: ext4_orphan_get:1403: inode 15 [ 34.607285][ T3669] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.70: couldn't read orphan inode 15 (err -117) [ 34.607329][ T3669] loop3: lost filesystem error report for type 5 error -117 [ 34.607876][ T3669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.694619][ T3677] loop4: detected capacity change from 0 to 512 [ 34.698471][ T3677] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.711443][ T3677] EXT4-fs (loop4): invalid journal inode [ 34.711483][ T3677] EXT4-fs (loop4): can't get journal size [ 34.726327][ T3677] EXT4-fs (loop4): 1 truncate cleaned up [ 34.726763][ T3677] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.759124][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.815710][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.942812][ T3706] bridge_slave_0: left allmulticast mode [ 34.942841][ T3706] bridge_slave_0: left promiscuous mode [ 34.942974][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.966607][ T3706] bridge_slave_1: left allmulticast mode [ 34.966675][ T3706] bridge_slave_1: left promiscuous mode [ 34.966810][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.988292][ T3706] bond0: (slave bond_slave_0): Releasing backup interface [ 34.998419][ T3706] bond0: (slave bond_slave_1): Releasing backup interface [ 35.010508][ T3706] team0: Port device team_slave_0 removed [ 35.019139][ T3706] team0: Port device team_slave_1 removed [ 35.020273][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.020300][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.042727][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.042815][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.052841][ T3706] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 35.066352][ T3707] batman_adv: batadv0: Adding interface: macvtap1 [ 35.066368][ T3707] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.066397][ T3707] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 35.066580][ T3711] bridge0: port 1(syz_tun) entered blocking state [ 35.066613][ T3711] bridge0: port 1(syz_tun) entered disabled state [ 35.066743][ T3711] syz_tun: entered allmulticast mode [ 35.067339][ T3711] syz_tun: entered promiscuous mode [ 35.067530][ T3711] bridge0: port 1(syz_tun) entered blocking state [ 35.067560][ T3711] bridge0: port 1(syz_tun) entered forwarding state [ 35.479536][ T3740] tun0: tun_chr_ioctl cmd 1074025675 [ 35.479633][ T3740] tun0: persist enabled [ 35.490125][ T3740] tun0: tun_chr_ioctl cmd 1074025675 [ 35.490156][ T3740] tun0: persist disabled [ 35.512118][ T3742] loop4: detected capacity change from 0 to 2048 [ 35.531478][ T3742] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 35.584433][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 35.633133][ T3751] loop4: detected capacity change from 0 to 128 [ 35.639076][ T3751] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 35.639109][ T3751] System zones: 1-3, 19-19, 35-36 [ 35.639707][ T3751] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 35.639879][ T3751] ext4 filesystem being mounted at /26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 35.723529][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.154340][ T24] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x1 [ 36.154380][ T24] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x0 [ 36.154474][ T24] logitech-hidpp-device 0005:046D:B012.0001: unknown main item tag 0x0 [ 36.156901][ T3788] loop4: detected capacity change from 0 to 4096 [ 36.182210][ T24] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 36.207655][ T3788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.296552][ T3788] ================================================================== [ 36.296596][ T3788] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 36.296639][ T3788] [ 36.296644][ T3788] read-write to 0xffff88811a86bfd8 of 8 bytes by interrupt on cpu 1: [ 36.296663][ T3788] __xa_clear_mark+0xf5/0x1e0 [ 36.296693][ T3788] __folio_end_writeback+0xe7/0x530 [ 36.296721][ T3788] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 36.296744][ T3788] folio_end_writeback+0x1c/0x70 [ 36.296764][ T3788] ext4_finish_bio+0x454/0x770 [ 36.296784][ T3788] ext4_end_bio+0x281/0x3a0 [ 36.296801][ T3788] bio_endio+0x390/0x570 [ 36.296823][ T3788] blk_update_request+0x33a/0x710 [ 36.296846][ T3788] blk_mq_end_request+0x26/0x50 [ 36.296868][ T3788] lo_complete_rq+0x98/0x130 [ 36.296899][ T3788] blk_done_softirq+0x77/0xb0 [ 36.296932][ T3788] handle_softirqs+0xcc/0x2a0 [ 36.296962][ T3788] run_ksoftirqd+0x1c/0x30 [ 36.296986][ T3788] smpboot_thread_fn+0x32f/0x520 [ 36.297007][ T3788] kthread+0x223/0x270 [ 36.297028][ T3788] ret_from_fork+0x146/0x330 [ 36.297059][ T3788] ret_from_fork_asm+0x1a/0x30 [ 36.297086][ T3788] [ 36.297093][ T3788] read to 0xffff88811a86bfd8 of 8 bytes by task 3788 on cpu 0: [ 36.297111][ T3788] xas_find_marked+0x211/0x650 [ 36.297140][ T3788] filemap_get_folios_tag+0xf7/0x400 [ 36.297161][ T3788] file_write_and_wait_range+0x20c/0x2f0 [ 36.297196][ T3788] ext4_sync_file+0x114/0x5c0 [ 36.297220][ T3788] vfs_fsync_range+0xc5/0xe0 [ 36.297241][ T3788] ext4_buffered_write_iter+0x427/0x480 [ 36.297265][ T3788] ext4_file_write_iter+0xc4a/0x1020 [ 36.297287][ T3788] do_iter_readv_writev+0x4f6/0x5a0 [ 36.297321][ T3788] vfs_writev+0x2d3/0x8c0 [ 36.297354][ T3788] __se_sys_pwritev2+0xfc/0x1c0 [ 36.297384][ T3788] __x64_sys_pwritev2+0x67/0x80 [ 36.297414][ T3788] x64_sys_call+0x899/0x2550 [ 36.297441][ T3788] do_syscall_64+0x112/0x360 [ 36.297466][ T3788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.297489][ T3788] [ 36.297493][ T3788] value changed: 0xffffffffffffff80 -> 0xfffffffffff00000 [ 36.297507][ T3788] [ 36.297511][ T3788] Reported by Kernel Concurrency Sanitizer on: [ 36.297523][ T3788] CPU: 0 UID: 0 PID: 3788 Comm: syz.4.124 Not tainted syzkaller #0 PREEMPT(lazy) [ 36.297550][ T3788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.297564][ T3788] ================================================================== [ 36.446979][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.492659][ T3797] fido_id[3797]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.676737][ T3426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.168648][ T3426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.262339][ T3426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.326646][ T3426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.401931][ T3426] bridge_slave_1: left allmulticast mode [ 38.401987][ T3426] bridge_slave_1: left promiscuous mode [ 38.402097][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.408340][ T3426] bridge_slave_0: left allmulticast mode [ 38.408358][ T3426] bridge_slave_0: left promiscuous mode [ 38.408472][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.489227][ T3426] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.500164][ T3426] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.513109][ T3426] bond0 (unregistering): Released all slaves [ 38.548669][ T3426] hsr_slave_0: left promiscuous mode [ 38.556701][ T3426] hsr_slave_1: left promiscuous mode [ 38.557186][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.557202][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.557900][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 38.557921][ T29] audit: type=1400 audit(1788164025.994:331): avc: denied { write } for pid=3799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.562700][ T3426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.562782][ T3426] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.571230][ T3426] batman_adv: batadv0: Removing interface: macvtap1 [ 38.582596][ T29] audit: type=1400 audit(1788164026.014:332): avc: denied { write } for pid=3810 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.597541][ T3426] veth1_macvtap: left promiscuous mode [ 38.597570][ T3426] veth0_macvtap: left promiscuous mode [ 38.597654][ T3426] veth1_vlan: left promiscuous mode [ 38.597686][ T3426] veth0_vlan: left promiscuous mode [ 38.714337][ T3426] team0 (unregistering): Port device team_slave_1 removed [ 38.721903][ T3426] team0 (unregistering): Port device team_slave_0 removed [ 38.755359][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.841814][ T29] audit: type=1400 audit(1788164026.274:333): avc: denied { write } for pid=3813 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.862302][ T29] audit: type=1400 audit(1788164026.294:334): avc: denied { write } for pid=3824 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.877730][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 38.963564][ T29] audit: type=1400 audit(1788164026.394:335): avc: denied { write } for pid=3827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.983953][ T29] audit: type=1400 audit(1788164026.414:336): avc: denied { write } for pid=3838 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.999773][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.089603][ T29] audit: type=1400 audit(1788164026.524:337): avc: denied { write } for pid=3841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.110101][ T29] audit: type=1400 audit(1788164026.544:338): avc: denied { write } for pid=3852 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.125166][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4