last executing test programs: 21.660617946s ago: executing program 2 (id=115): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 21.588904429s ago: executing program 2 (id=117): unshare(0x24040400) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9) 21.448546023s ago: executing program 2 (id=124): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 21.390659386s ago: executing program 2 (id=125): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x20000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 21.289503339s ago: executing program 2 (id=127): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 18.545249959s ago: executing program 2 (id=151): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 18.479086161s ago: executing program 32 (id=151): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000540)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$eJzs3LFrE2EYx/HHpDZpSpsIIiioD7roEto4OGqQFsSAUpuiDsLVXjTkTMpdqETEZhFX/47i6Cao/0AXcXF3K4Lg0kE86d2lvbRpm7ZJk9rvB8r75p73x71NruVJILfy4N3zUsFJF4yqROIqEZG6rIqk1maBE8EY8eaDElaXq8O/v5+///DRnWwuNzGlOpmdvpZR1dGLn168en/pS3V45sPox5gspx6v/Mr8WB5cPrvyd/pZ0dGio+VKVQ2drVSqxqxl6lzRKaVV71mm4ZhaLDum3VQvWJX5+Zoa5bmRxLxtOo4a5ZqWzJpWK1q1a2o8NYplTafTOpKQYywiMtDGsvzS1JSR3bbsRju6KXTdUKuDtp2tty7mlw5hTwAAoM/s3P/7vf72/X9uxh/30v+f2b3/F6H/75J606Nd+n8cVdfDV79tZ41E8PfbjP4fAAAAAAAAAAAAAAAAAAAAAICjYNV1k67rJtfG4JD3OCYicRFxg3qPt4kuCb/+buhnl9f/Ro+2iw4LfXEvLmK9Xcgv5P3Rr2cLUhRLTBmTpPzxroeAP5+8nZsYU09KPluLQX5xIR+VWCPfkGqVv3Bq3M9rc/6kJMLnz0hSTrc+f6ZlflCuXA7l05KUr0+kIpbMedf1Rv71uOqtu7lN+SFvHQAAAAAA/4O0rtvy/t2rewvisrXu50OfD7iuu7jT5wOb3l8PyLl2blEJAAAAAAAOzKm9LBmWZdr7mMRE5ADxzk9cV6T324hKfzwbzZObItIH2zisSVxE/CO6n/jP9XhbKbeNNQMi0vOnZQ+TXv9nAgAAANBpG03/HkLf3nRxRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD/t3g+ssX5LqVHYIR46XfTQf0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgj/wLAAD//7KDHOI=") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x8584b4, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000004c0)='./bus/file0\x00', 0x2) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') 10.646734699s ago: executing program 5 (id=285): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x0) fcntl$getflags(r2, 0x401) 10.62226181s ago: executing program 5 (id=286): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004000) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x10, 0x9, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000760009eeff"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 9.710361781s ago: executing program 5 (id=294): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 9.325304603s ago: executing program 5 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x28f101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, 0x0) 9.277287685s ago: executing program 5 (id=310): unshare(0x28040680) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r2}}, 0x18) 8.915672867s ago: executing program 5 (id=318): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) write$cgroup_pid(r0, 0x0, 0x0) 8.864150958s ago: executing program 33 (id=318): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x2) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000100)='\f7', 0x2}], 0x1) write$cgroup_pid(r0, 0x0, 0x0) 2.469554959s ago: executing program 1 (id=463): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x2) 2.389381562s ago: executing program 1 (id=464): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=f', @ANYRESHEX]) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 2.389187871s ago: executing program 1 (id=465): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/175, 0xaf}, 0xd}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.319912374s ago: executing program 1 (id=467): r0 = timerfd_create(0x0, 0x0) r1 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000700)=[{r0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000380)={{0x0, 0x989680}}, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x702b, 0x6, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 1.435687943s ago: executing program 1 (id=500): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000580)=""/157, 0x9d}, {&(0x7f0000000700)=""/84, 0x54}, {0x0}, {&(0x7f0000002b80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/27, 0x1a}, {&(0x7f0000000080)=""/8, 0x8}, {&(0x7f0000000340)=""/213, 0xff6d}, {&(0x7f0000000bc0)=""/163, 0xa4}, {&(0x7f0000000c80)=""/73, 0x58}, {&(0x7f00000000c0)=""/36, 0x24}], 0xa, 0x4, 0x200) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 1.373160415s ago: executing program 1 (id=502): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) 948.595609ms ago: executing program 6 (id=516): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000040)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f088a8", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 814.704304ms ago: executing program 6 (id=518): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, 0x0}, 0x300060c1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8fea, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) close(r0) 778.709155ms ago: executing program 6 (id=508): r0 = socket(0x1e, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38099}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IKEY={0x8, 0x4, 0x1}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x9}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000400), 0x2000011a) recvmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)=""/4096, 0x1000}], 0x1}, 0x74e96c96}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x40, 0x0) close(r0) 688.727487ms ago: executing program 6 (id=509): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f00000006c0)={0x11, 0x0, r2, 0x1, 0x40, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "954a5b", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x14}, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x48, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x4, {{0x3, 0x2, 0x5, 0x3, 0x0, 0x0, 0x1, 0xc}, 0x2, {0x5, 0x45, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}}}}}}}, 0x0) 688.471107ms ago: executing program 6 (id=510): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x98}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r3 = dup2(r0, r2) close_range(r3, 0xffffffffffffffff, 0x0) 688.295238ms ago: executing program 6 (id=511): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) waitid(0x2, 0x0, 0xfffffffffffffffe, 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$xdp(0x2c, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000080)={r1, 0x3, r0, 0x80000005}) 557.133582ms ago: executing program 3 (id=520): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x80, 0x4, 0x9f, 0x9, 0x100, 0x7}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7, 0xad}}, @TCA_NETEM_RATE={0x14, 0x6, {0x67, 0x510f, 0x0, 0x9}}]}}}]}, 0x6c}}, 0x24040084) 527.883333ms ago: executing program 4 (id=522): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40054}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x82a0}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x24048060) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000200)='bridge0\x00') 481.672104ms ago: executing program 3 (id=523): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5, r0}) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, &(0x7f00000001c0)={[0x1]}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 384.254588ms ago: executing program 3 (id=525): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x0, @local}, 0x2, 0x0, 0x1}}, 0x26) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x60bd27, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) 383.979008ms ago: executing program 4 (id=526): setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) unshare(0x2040400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) dup3(r0, r1, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 383.784137ms ago: executing program 3 (id=527): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 302.94346ms ago: executing program 3 (id=529): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe7e7}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 302.75895ms ago: executing program 4 (id=530): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f00000002c0)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fdb62fb1fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce80700000000000000b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f0000000640)="$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") renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x4) syz_emit_ethernet(0x33, &(0x7f0000000000)=ANY=[@ANYBLOB="aa"], 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 302.61635ms ago: executing program 0 (id=531): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x1, 0x10000, 0x0, 0x2, 0x80000401, 0x0, 0x0, 0x0, 0x0, 0x200000000000bf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 274.032881ms ago: executing program 3 (id=532): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0x7ff}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 258.477952ms ago: executing program 4 (id=533): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x11a0d, 0x0, 0x43a1bd76, 0x5, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) preadv2(r2, 0x0, 0x0, 0xdec5, 0x7, 0x12) 189.341834ms ago: executing program 0 (id=534): ftruncate(0xffffffffffffffff, 0xc17a) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc048894) 189.103704ms ago: executing program 0 (id=535): socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@filter={'filter\x00', 0x4, 0x4, 0x370, 0xffffffff, 0x1d0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @loopback, [0xffffffff, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffff00], 'wlan1\x00', 'sit0\x00', {}, {0xff}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xff000000, 0x1ffffff01], 'sit0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x34}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, {0x2000010}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) 170.588615ms ago: executing program 4 (id=536): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x0) 102.863557ms ago: executing program 4 (id=537): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r1, 0x0, 0x8, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 53.401228ms ago: executing program 0 (id=538): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r2, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 35.288819ms ago: executing program 0 (id=539): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x44, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xc7}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 0s ago: executing program 0 (id=540): socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000003a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): [ 19.740876][ T28] audit: type=1400 audit(1780488909.122:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.763050][ T28] audit: type=1400 audit(1780488909.122:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.785908][ T28] audit: type=1400 audit(1780488909.122:105): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.809217][ T28] audit: type=1400 audit(1780488909.122:106): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.832491][ T28] audit: type=1400 audit(1780488909.122:107): avc: denied { read } for pid=3179 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.855560][ T28] audit: type=1400 audit(1780488909.122:108): avc: denied { read open } for pid=3179 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.881149][ T28] audit: type=1400 audit(1780488909.122:109): avc: denied { getattr } for pid=3179 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=488 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.906693][ T28] audit: type=1400 audit(1780488909.162:110): avc: denied { write } for pid=3178 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.929569][ T28] audit: type=1400 audit(1780488909.162:111): avc: denied { add_name } for pid=3178 comm="dhcpcd-run-hook" name="resolv.conf.lapb1.ipv4ll" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 19.952434][ T28] audit: type=1400 audit(1780488909.172:112): avc: denied { write } for pid=3189 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.87' (ED25519) to the list of known hosts. [ 24.055602][ T3283] cgroup: Unknown subsys name 'net' [ 24.139959][ T3283] cgroup: Unknown subsys name 'cpuset' [ 24.146065][ T3283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 24.279299][ T3286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.322789][ T3283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.714239][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 25.714254][ T28] audit: type=1400 audit(1780488915.092:140): avc: denied { execmem } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 25.883507][ T28] audit: type=1400 audit(1780488915.262:141): avc: denied { read } for pid=3295 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.909406][ T28] audit: type=1400 audit(1780488915.262:142): avc: denied { open } for pid=3295 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 25.946592][ T28] audit: type=1400 audit(1780488915.262:143): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 26.021043][ T28] audit: type=1400 audit(1780488915.292:144): avc: denied { module_request } for pid=3295 comm="syz-executor" kmod="netdev-nr4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 26.081307][ T28] audit: type=1400 audit(1780488915.292:145): avc: denied { sys_module } for pid=3296 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 26.376982][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.384250][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.391584][ T3297] bridge_slave_0: entered allmulticast mode [ 26.397999][ T3297] bridge_slave_0: entered promiscuous mode [ 26.421262][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.428503][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.435647][ T3297] bridge_slave_1: entered allmulticast mode [ 26.442260][ T3297] bridge_slave_1: entered promiscuous mode [ 26.491148][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.511087][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.538685][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.545871][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.553138][ T3296] bridge_slave_0: entered allmulticast mode [ 26.559517][ T3296] bridge_slave_0: entered promiscuous mode [ 26.582816][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.589964][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.597198][ T3296] bridge_slave_1: entered allmulticast mode [ 26.603664][ T3296] bridge_slave_1: entered promiscuous mode [ 26.610166][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.617217][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.624349][ T3295] bridge_slave_0: entered allmulticast mode [ 26.630945][ T3295] bridge_slave_0: entered promiscuous mode [ 26.637327][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.644413][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.651640][ T3298] bridge_slave_0: entered allmulticast mode [ 26.658252][ T3298] bridge_slave_0: entered promiscuous mode [ 26.669782][ T3297] team0: Port device team_slave_0 added [ 26.679298][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.686374][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.693568][ T3295] bridge_slave_1: entered allmulticast mode [ 26.700120][ T3295] bridge_slave_1: entered promiscuous mode [ 26.706479][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.713585][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.720791][ T3298] bridge_slave_1: entered allmulticast mode [ 26.727217][ T3298] bridge_slave_1: entered promiscuous mode [ 26.733609][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.740679][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.747827][ T3299] bridge_slave_0: entered allmulticast mode [ 26.754334][ T3299] bridge_slave_0: entered promiscuous mode [ 26.761208][ T3297] team0: Port device team_slave_1 added [ 26.779607][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.786694][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.793902][ T3299] bridge_slave_1: entered allmulticast mode [ 26.800480][ T3299] bridge_slave_1: entered promiscuous mode [ 26.811708][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.837417][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.847712][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.858071][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.871828][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.878811][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.904747][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.920195][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.930268][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.940319][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.949788][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.956758][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.982770][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.006051][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.022655][ T3296] team0: Port device team_slave_0 added [ 27.038170][ T3298] team0: Port device team_slave_0 added [ 27.048855][ T3296] team0: Port device team_slave_1 added [ 27.059535][ T3295] team0: Port device team_slave_0 added [ 27.066467][ T3295] team0: Port device team_slave_1 added [ 27.072645][ T3298] team0: Port device team_slave_1 added [ 27.083262][ T3299] team0: Port device team_slave_0 added [ 27.105910][ T3299] team0: Port device team_slave_1 added [ 27.116103][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.123222][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.149326][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.168703][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.175797][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.201883][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.216932][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.224024][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.250117][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.262887][ T3297] hsr_slave_0: entered promiscuous mode [ 27.268925][ T3297] hsr_slave_1: entered promiscuous mode [ 27.275314][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.282320][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.308281][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.319462][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.326451][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.352402][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.363408][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.370423][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.396447][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.417614][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.424595][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.450774][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.466778][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.473786][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.500356][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.539539][ T3296] hsr_slave_0: entered promiscuous mode [ 27.545494][ T3296] hsr_slave_1: entered promiscuous mode [ 27.551793][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 27.557531][ T3296] Cannot create hsr debugfs directory [ 27.598885][ T3299] hsr_slave_0: entered promiscuous mode [ 27.604968][ T3299] hsr_slave_1: entered promiscuous mode [ 27.610767][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 27.616677][ T3299] Cannot create hsr debugfs directory [ 27.628552][ T3295] hsr_slave_0: entered promiscuous mode [ 27.634672][ T3295] hsr_slave_1: entered promiscuous mode [ 27.640654][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 27.646406][ T3295] Cannot create hsr debugfs directory [ 27.653963][ T3298] hsr_slave_0: entered promiscuous mode [ 27.659999][ T3298] hsr_slave_1: entered promiscuous mode [ 27.665911][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 27.671674][ T3298] Cannot create hsr debugfs directory [ 27.852580][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.860998][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.876243][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.884542][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.892363][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.900864][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.908571][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.916957][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.935240][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.943775][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.951496][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.960041][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.967487][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.976363][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.983981][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.992671][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.024373][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.032961][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.041315][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.049812][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.057511][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.066215][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.074011][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.082679][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.124285][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.132878][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.140823][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.148913][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.156735][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.165229][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.172895][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.181530][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.220921][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.229405][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 28.237196][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.246358][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 28.254643][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.263270][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 28.276233][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.284729][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 28.305433][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.320849][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.344625][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.355391][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.367628][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.379224][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.386491][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.395201][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.402275][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.410912][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.417978][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.432034][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.439145][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.457540][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.468950][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.487633][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.496782][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.503871][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.512526][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.519608][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.537904][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.545069][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.564998][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.572114][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.589546][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.629309][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.653315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.660581][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.674198][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.681294][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.861968][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.921917][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.935077][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.943762][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.970629][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.092113][ T3296] veth0_vlan: entered promiscuous mode [ 29.107124][ T3297] veth0_vlan: entered promiscuous mode [ 29.124732][ T3299] veth0_vlan: entered promiscuous mode [ 29.130853][ T3296] veth1_vlan: entered promiscuous mode [ 29.137892][ T3297] veth1_vlan: entered promiscuous mode [ 29.146485][ T3299] veth1_vlan: entered promiscuous mode [ 29.174136][ T3298] veth0_vlan: entered promiscuous mode [ 29.187550][ T3299] veth0_macvtap: entered promiscuous mode [ 29.196289][ T3299] veth1_macvtap: entered promiscuous mode [ 29.203423][ T3298] veth1_vlan: entered promiscuous mode [ 29.223166][ T3296] veth0_macvtap: entered promiscuous mode [ 29.230887][ T3296] veth1_macvtap: entered promiscuous mode [ 29.239579][ T3297] veth0_macvtap: entered promiscuous mode [ 29.255148][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.270203][ T3297] veth1_macvtap: entered promiscuous mode [ 29.281768][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.294291][ T3298] veth0_macvtap: entered promiscuous mode [ 29.301892][ T3298] veth1_macvtap: entered promiscuous mode [ 29.311438][ T3295] veth0_vlan: entered promiscuous mode [ 29.317961][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.330129][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.338873][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.348406][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.362145][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.369758][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.381290][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.393397][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.402341][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.415224][ T3295] veth1_vlan: entered promiscuous mode [ 29.421471][ T68] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.431378][ T68] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.446260][ T28] audit: type=1400 audit(1780488918.822:146): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.0w8vzp/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.471447][ T28] audit: type=1400 audit(1780488918.822:147): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.494074][ T28] audit: type=1400 audit(1780488918.822:148): avc: denied { mounton } for pid=3299 comm="syz-executor" path="/root/syzkaller.0w8vzp/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.499733][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.519720][ T28] audit: type=1400 audit(1780488918.822:149): avc: denied { mount } for pid=3299 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.552033][ T3299] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.568100][ T68] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.576892][ T68] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.597909][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.611411][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.634430][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.645806][ T3502] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4'. [ 29.646878][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.676050][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.697118][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.706530][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.718947][ T3295] veth0_macvtap: entered promiscuous mode [ 29.742265][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.761982][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.780307][ T3295] veth1_macvtap: entered promiscuous mode [ 29.818189][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.837600][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.884929][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.900139][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.925547][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.942555][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.138191][ T3547] syzkaller1: entered promiscuous mode [ 30.145149][ T3547] syzkaller1: entered allmulticast mode [ 30.196886][ T3551] loop4: detected capacity change from 0 to 1024 [ 30.220156][ T3551] ======================================================= [ 30.220156][ T3551] WARNING: The mand mount option has been deprecated and [ 30.220156][ T3551] and is ignored by this kernel. Remove the mand [ 30.220156][ T3551] option from the mount to silence this warning. [ 30.220156][ T3551] ======================================================= [ 30.323506][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.336260][ T3557] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 30.370598][ T3551] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.392919][ T3551] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.21: lblock 3 mapped to illegal pblock 3 (length 3) [ 30.410649][ T3551] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 30.425844][ T3551] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.425844][ T3551] [ 30.439410][ T3551] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 3: comm syz.4.21: lblock 3 mapped to illegal pblock 3 (length 3) [ 30.490291][ T30] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 30.513863][ T30] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 34 with max blocks 34 with error 28 [ 30.529076][ T3571] loop1: detected capacity change from 0 to 512 [ 30.539997][ T30] EXT4-fs (loop4): This should not happen!! Data will be lost [ 30.539997][ T30] [ 30.549963][ T30] EXT4-fs (loop4): Total free blocks count 0 [ 30.556029][ T30] EXT4-fs (loop4): Free/Dirty block details [ 30.559287][ T3571] EXT4-fs (loop1): 1 truncate cleaned up [ 30.568049][ T30] EXT4-fs (loop4): free_blocks=0 [ 30.573337][ T30] EXT4-fs (loop4): dirty_blocks=64 [ 30.578539][ T30] EXT4-fs (loop4): Block reservation details [ 30.585265][ T3571] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.586796][ T3295] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 30.603092][ T3571] EXT4-fs (loop1): shut down requested (2) [ 30.620508][ T3571] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 30.652258][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.712416][ T3577] loop2: detected capacity change from 0 to 2048 [ 30.731251][ T3577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.753584][ T28] kauditd_printk_skb: 65 callbacks suppressed [ 30.753598][ T28] audit: type=1400 audit(1780488920.132:215): avc: denied { create } for pid=3584 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.808328][ T28] audit: type=1400 audit(1780488920.132:216): avc: denied { setopt } for pid=3584 comm="syz.4.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 30.841678][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.850803][ T28] audit: type=1400 audit(1780488920.132:217): avc: denied { block_suspend } for pid=3584 comm="syz.4.33" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 30.872108][ T28] audit: type=1400 audit(1780488920.232:218): avc: denied { read write } for pid=3586 comm="syz.4.35" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 30.896307][ T28] audit: type=1400 audit(1780488920.232:219): avc: denied { open } for pid=3586 comm="syz.4.35" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 30.964517][ T28] audit: type=1400 audit(1780488920.342:220): avc: denied { create } for pid=3590 comm="syz.2.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.004866][ T28] audit: type=1400 audit(1780488920.342:221): avc: denied { ioctl } for pid=3590 comm="syz.2.34" path="socket:[5165]" dev="sockfs" ino=5165 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 31.079364][ T28] audit: type=1400 audit(1780488920.452:222): avc: denied { create } for pid=3596 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.116807][ T28] audit: type=1400 audit(1780488920.462:223): avc: denied { write } for pid=3596 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 31.179289][ T28] audit: type=1400 audit(1780488920.552:224): avc: denied { setopt } for pid=3603 comm="syz.1.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.236942][ T3589] loop0: detected capacity change from 0 to 512 [ 31.259511][ T3589] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 31.276243][ T3589] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.36: bad orphan inode 15 [ 31.287705][ T3589] loop0: lost filesystem error report for type 5 error -117 [ 31.288320][ T3608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 31.289001][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 31.297577][ T3589] ext4_test_bit(bit=14, block=18) = 1 [ 31.304487][ C0] EXT4-fs (loop0): initial error at time 1780488920: ext4_orphan_get:1423 [ 31.304515][ C0] EXT4-fs (loop0): last error at time 1780488920: ext4_orphan_get:1423 [ 31.334109][ T3589] is_bad_inode(inode)=0 [ 31.338605][ T3589] NEXT_ORPHAN(inode)=1023 [ 31.343430][ T3589] max_ino=32 [ 31.346938][ T3589] i_nlink=0 [ 31.359126][ T3589] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.36: bg 0: block 161: padding at end of block bitmap is not set [ 31.374203][ T3589] loop0: lost filesystem error report for type 5 error -117 [ 31.376409][ T3589] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 31.398742][ T3589] loop0: lost filesystem error report for type 5 error -117 [ 31.402981][ T3589] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.424904][ T3589] ext2 filesystem being mounted at /5/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 31.474823][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.484487][ T3620] loop2: detected capacity change from 0 to 512 [ 31.487902][ T3619] smc: net device lo applied user defined pnetid SYZ2 [ 31.502551][ T3619] smc: net device lo erased user defined pnetid SYZ2 [ 31.524536][ T3620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.537602][ T3620] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.565350][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.705406][ T3636] loop2: detected capacity change from 0 to 8192 [ 31.755762][ T3644] netlink: 'syz.1.59': attribute type 4 has an invalid length. [ 31.763632][ T3644] netlink: 16 bytes leftover after parsing attributes in process `syz.1.59'. [ 31.777475][ T3645] loop0: detected capacity change from 0 to 512 [ 31.793465][ T3645] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.810863][ T3645] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 31.874558][ T3654] process 'syz.1.61' launched './file0' with NULL argv: empty string added [ 31.998783][ T3660] loop3: detected capacity change from 0 to 512 [ 32.032439][ T3660] EXT4-fs: Ignoring removed bh option [ 32.061470][ T3660] EXT4-fs: inline encryption not supported [ 32.080831][ T3660] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.133202][ T3660] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 32.214917][ T3660] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.62: bg 0: block 248: padding at end of block bitmap is not set [ 32.248805][ T3678] netlink: 40 bytes leftover after parsing attributes in process `syz.1.72'. [ 32.254543][ T3660] loop3: lost filesystem error report for type 5 error -117 [ 32.259388][ T3660] EXT4-fs error (device loop3): ext4_acquire_dquot:7034: comm syz.3.62: Failed to acquire dquot type 1 [ 32.271899][ T3678] Zero length message leads to an empty skb [ 32.277957][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 32.277976][ C1] EXT4-fs (loop3): last error at time 1780488921: ext4_validate_block_bitmap:441 [ 32.304564][ T3660] loop3: lost filesystem error report for type 5 error -28 [ 32.305135][ T3660] EXT4-fs (loop3): 1 truncate cleaned up [ 32.363774][ T3660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 32.422537][ T3690] netlink: 'syz.4.75': attribute type 13 has an invalid length. [ 32.600010][ T3697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 32.611786][ T3697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 32.622334][ T3697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 32.648093][ T3697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.80'. [ 32.951104][ T3721] team1: entered promiscuous mode [ 32.970980][ T3721] team1: entered allmulticast mode [ 32.992485][ T3721] 8021q: adding VLAN 0 to HW filter on device team1 [ 33.310861][ T3651] syz.3.62 (3651) used greatest stack depth: 10216 bytes left [ 33.330125][ T3652] syz.3.62 (3652) used greatest stack depth: 9648 bytes left [ 33.354401][ T3660] syz.3.62 (3660) used greatest stack depth: 9128 bytes left [ 33.962213][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 34.409002][ T3775] syz.0.110 uses obsolete (PF_INET,SOCK_PACKET) [ 34.424329][ T3779] netlink: 'syz.2.109': attribute type 13 has an invalid length. [ 34.892583][ T3813] netlink: 'syz.3.123': attribute type 15 has an invalid length. [ 34.911910][ T3813] __nla_validate_parse: 1 callbacks suppressed [ 34.911928][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 34.969777][ T3813] netlink: 'syz.3.123': attribute type 15 has an invalid length. [ 34.969777][ T68] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 34.969838][ T68] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 34.992235][ T3813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 35.044948][ T68] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 35.065704][ T68] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 35.288432][ T3826] serio: Serial port ttyS3 [ 35.900529][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 35.900544][ T28] audit: type=1400 audit(1780488925.282:291): avc: denied { write } for pid=3833 comm="syz.4.133" path="socket:[5544]" dev="sockfs" ino=5544 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 35.995147][ T28] audit: type=1326 audit(1780488925.372:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3841 comm="syz.4.137" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1142d3ce59 code=0x0 [ 37.270465][ T3866] loop3: detected capacity change from 0 to 512 [ 37.286654][ T3866] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 37.295725][ T3866] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 37.304491][ T3866] EXT4-fs (loop3): 1 truncate cleaned up [ 37.310868][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.733074][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.798841][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.865685][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.895936][ T3882] loop4: detected capacity change from 0 to 512 [ 37.931467][ T3882] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 37.966996][ T3882] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.154: iget: bad i_size value: 38620345925642 [ 37.974593][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.990456][ T3882] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 37.990758][ T3882] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.154: couldn't read orphan inode 15 (err -117) [ 37.999916][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 37.999934][ C1] EXT4-fs (loop4): initial error at time 1780488927: ext4_orphan_get:1397: inode 15 [ 37.999971][ C1] EXT4-fs (loop4): last error at time 1780488927: ext4_orphan_get:1397: inode 15 [ 38.067286][ T3882] loop4: lost filesystem error report for type 5 error -117 [ 38.068345][ T3882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.124988][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.143679][ T28] audit: type=1400 audit(1780488927.522:293): avc: denied { sqpoll } for pid=3893 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.186915][ T28] audit: type=1400 audit(1780488927.522:294): avc: denied { write } for pid=3881 comm="syz.4.154" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 38.248809][ T28] audit: type=1400 audit(1780488927.522:295): avc: denied { read append open } for pid=3881 comm="syz.4.154" path="/26/bus/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.321143][ T28] audit: type=1400 audit(1780488927.552:296): avc: denied { create } for pid=3893 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.350546][ T3882] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.154: bg 0: block 5: invalid block bitmap [ 38.359650][ T28] audit: type=1400 audit(1780488927.552:297): avc: denied { bind } for pid=3893 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.387621][ T37] bridge_slave_1: left allmulticast mode [ 38.393639][ T37] bridge_slave_1: left promiscuous mode [ 38.394830][ T3882] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 972 with error 28 [ 38.405425][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.436887][ T37] bridge_slave_0: left allmulticast mode [ 38.439510][ T28] audit: type=1400 audit(1780488927.552:298): avc: denied { listen } for pid=3893 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.442829][ T37] bridge_slave_0: left promiscuous mode [ 38.492925][ T28] audit: type=1400 audit(1780488927.552:299): avc: denied { accept } for pid=3893 comm="syz.1.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.524358][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.528745][ T3882] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.528745][ T3882] [ 38.558061][ T28] audit: type=1400 audit(1780488927.562:300): avc: denied { map } for pid=3881 comm="syz.4.154" path="/26/bus/cpuset.effective_mems" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 38.582278][ T3882] EXT4-fs (loop4): Total free blocks count 0 [ 38.595039][ T3882] EXT4-fs (loop4): Free/Dirty block details [ 38.606718][ T3882] EXT4-fs (loop4): free_blocks=0 [ 38.633560][ T3882] EXT4-fs (loop4): dirty_blocks=976 [ 38.657931][ T3882] EXT4-fs (loop4): Block reservation details [ 38.680207][ T3882] EXT4-fs (loop4): i_reserved_data_blocks=976 [ 38.743740][ T3913] loop1: detected capacity change from 0 to 1024 [ 38.763228][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.809329][ T3913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.825402][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.841179][ T3913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.159'. [ 38.856911][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.878868][ T37] bond0 (unregistering): Released all slaves [ 38.924040][ T3021] 8021q: adding VLAN 0 to HW filter on device eth1 [ 38.971305][ T3941] netlink: 'syz.1.164': attribute type 4 has an invalid length. [ 39.008426][ T37] hsr_slave_0: left promiscuous mode [ 39.039591][ T37] hsr_slave_1: left promiscuous mode [ 39.045585][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.063465][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.071770][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.079315][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.092852][ T37] veth1_macvtap: left promiscuous mode [ 39.098511][ T37] veth0_macvtap: left promiscuous mode [ 39.104419][ T37] veth1_vlan: left promiscuous mode [ 39.109791][ T37] veth0_vlan: left promiscuous mode [ 39.197634][ T37] team0 (unregistering): Port device team_slave_1 removed [ 39.207220][ T37] team0 (unregistering): Port device team_slave_0 removed [ 39.369477][ T3884] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.377445][ T3884] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.384771][ T3884] bridge_slave_0: entered allmulticast mode [ 39.392486][ T3884] bridge_slave_0: entered promiscuous mode [ 39.409362][ T3884] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.416671][ T3884] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.424533][ T3884] bridge_slave_1: entered allmulticast mode [ 39.431475][ T3884] bridge_slave_1: entered promiscuous mode [ 39.436448][ T3989] netlink: 67 bytes leftover after parsing attributes in process `syz.1.173'. [ 39.460916][ T3021] 8021q: adding VLAN 0 to HW filter on device eth2 [ 39.487803][ T3884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.501003][ T3884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.523675][ T3884] team0: Port device team_slave_0 added [ 39.588386][ T3884] team0: Port device team_slave_1 added [ 39.642717][ T3884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.667722][ T3884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.730984][ T3884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.736392][ T4016] loop4: detected capacity change from 0 to 512 [ 39.754952][ T3884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.769439][ T3884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 39.775056][ T4016] EXT4-fs: Ignoring removed oldalloc option [ 39.815880][ T3884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.828188][ T3021] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.839723][ T4016] EXT4-fs error (device loop4): ext4_iget_extra_inode:5128: inode #15: comm syz.4.179: corrupted in-inode xattr: invalid ea_ino [ 39.889053][ T4016] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 39.892102][ T4016] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.179: couldn't read orphan inode 15 (err -117) [ 39.898893][ T3884] hsr_slave_0: entered promiscuous mode [ 39.913247][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 39.913269][ C1] EXT4-fs (loop4): initial error at time 1780488929: ext4_iget_extra_inode:5128: inode 15 [ 39.913317][ C1] EXT4-fs (loop4): last error at time 1780488929: ext4_iget_extra_inode:5128: inode 15 [ 39.939126][ T4016] loop4: lost filesystem error report for type 5 error -117 [ 39.945655][ T3884] hsr_slave_1: entered promiscuous mode [ 39.959055][ T3884] debugfs: 'hsr0' already exists in 'hsr' [ 39.963659][ T4016] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.964879][ T3884] Cannot create hsr debugfs directory [ 40.060288][ T4028] loop0: detected capacity change from 0 to 128 [ 40.096445][ T4028] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.112439][ T3884] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.124748][ T3884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 40.132588][ T3884] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.142973][ T3884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 40.151656][ T4028] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.160810][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.162266][ T3884] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.184674][ T3884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 40.192440][ T3884] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.205978][ T3884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 40.223309][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.256299][ T3884] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.263508][ T3884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.270992][ T3884] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.278094][ T3884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.357995][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.369675][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.438259][ T3021] 8021q: adding VLAN 0 to HW filter on device eth4 [ 40.489825][ T3884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.521972][ T3884] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.541721][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.548797][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.579197][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.586453][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.685221][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.696508][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 40.841186][ T3884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.013621][ T3884] veth0_vlan: entered promiscuous mode [ 41.024657][ T3884] veth1_vlan: entered promiscuous mode [ 41.044649][ T3884] veth0_macvtap: entered promiscuous mode [ 41.052914][ T3884] veth1_macvtap: entered promiscuous mode [ 41.066210][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 41.066226][ T28] audit: type=1400 audit(1780488930.442:339): avc: denied { name_bind } for pid=4109 comm="syz.4.195" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 41.108128][ T3884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.123075][ T3884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.134935][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.143978][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.156439][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.166181][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.247755][ T28] audit: type=1400 audit(1780488930.622:340): avc: denied { write } for pid=23 comm="kworker/1:0" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=7458 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.334805][ T28] audit: type=1400 audit(1780488930.672:341): avc: denied { create } for pid=4117 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.397483][ T28] audit: type=1400 audit(1780488930.672:342): avc: denied { read } for pid=4117 comm="syz.0.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.452646][ T4128] netlink: 140 bytes leftover after parsing attributes in process `syz.5.201'. [ 41.916284][ T28] audit: type=1400 audit(1780488931.292:343): avc: denied { bind } for pid=4155 comm="syz.5.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 41.957596][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 41.963823][ T28] audit: type=1400 audit(1780488931.292:344): avc: denied { name_bind } for pid=4155 comm="syz.5.212" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.011095][ T4158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.213'. [ 42.032896][ T28] audit: type=1400 audit(1780488931.292:345): avc: denied { node_bind } for pid=4155 comm="syz.5.212" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 42.092841][ T28] audit: type=1400 audit(1780488931.292:346): avc: denied { listen } for pid=4155 comm="syz.5.212" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.241767][ T4163] loop4: detected capacity change from 0 to 128 [ 42.257947][ T4163] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.839313][ T4173] netlink: 4 bytes leftover after parsing attributes in process `syz.5.219'. [ 43.076184][ T4190] Illegal XDP return value 65535 on prog (id 36) dev N/A, expect packet loss! [ 43.094954][ T28] audit: type=1400 audit(1780488932.472:347): avc: denied { watch_reads } for pid=4195 comm="syz.5.229" path="/11" dev="tmpfs" ino=70 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 43.190769][ T28] audit: type=1400 audit(1780488932.572:348): avc: denied { load_policy } for pid=4197 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.251170][ T4201] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 43.298853][ T4201] SELinux: failed to load policy [ 43.411677][ T4213] netlink: 'syz.5.236': attribute type 4 has an invalid length. [ 43.589336][ T4225] loop4: detected capacity change from 0 to 1024 [ 43.645292][ T4225] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.734798][ T4225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 43.756694][ T4237] loop3: detected capacity change from 0 to 1024 [ 43.799968][ T4237] EXT4-fs: Ignoring removed orlov option [ 43.864012][ T4237] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.096693][ T4257] veth0: entered promiscuous mode [ 44.107296][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.117880][ T4257] bond0: entered promiscuous mode [ 44.124048][ T4257] bond_slave_0: entered promiscuous mode [ 44.130205][ T4257] bond_slave_1: entered promiscuous mode [ 44.155692][ T4259] loop3: detected capacity change from 0 to 1024 [ 44.167286][ T4256] bond0: left promiscuous mode [ 44.181160][ T4256] bond_slave_0: left promiscuous mode [ 44.196679][ T4259] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.226363][ T4256] bond_slave_1: left promiscuous mode [ 44.245761][ T4256] veth0: left promiscuous mode [ 44.254018][ T4259] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.446400][ T4272] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.253: Freeing blocks not in datazone - block = 0, count = 16 [ 44.523280][ T30] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 112: padding at end of block bitmap is not set [ 44.540094][ T4282] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 44.551159][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 44.574273][ T30] EXT4-fs (loop3): This should not happen!! Data will be lost [ 44.574273][ T30] [ 44.601933][ T30] EXT4-fs (loop3): Total free blocks count 0 [ 44.616397][ T30] EXT4-fs (loop3): Free/Dirty block details [ 44.627821][ T30] EXT4-fs (loop3): free_blocks=16 [ 44.634006][ T30] EXT4-fs (loop3): dirty_blocks=80 [ 44.639243][ T30] EXT4-fs (loop3): Block reservation details [ 44.645373][ T30] EXT4-fs (loop3): i_reserved_data_blocks=5 [ 44.652100][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3200 with max blocks 64 with error 28 [ 44.665131][ T3299] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 45.722860][ T4345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.286'. [ 46.576496][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 46.576514][ T28] audit: type=1400 audit(1780488935.952:376): avc: denied { create } for pid=4359 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.636879][ T28] audit: type=1400 audit(1780488935.962:377): avc: denied { bind } for pid=4359 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 46.702207][ T28] audit: type=1400 audit(1780488936.062:378): avc: denied { create } for pid=4371 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.745689][ T28] audit: type=1400 audit(1780488936.062:379): avc: denied { write } for pid=4371 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.780613][ T4378] netlink: 'syz.3.299': attribute type 6 has an invalid length. [ 46.804247][ T4378] netlink: 40 bytes leftover after parsing attributes in process `syz.3.299'. [ 46.813788][ T28] audit: type=1400 audit(1780488936.062:380): avc: denied { read } for pid=4371 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.070680][ T28] audit: type=1400 audit(1780488936.452:381): avc: denied { setopt } for pid=4402 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.122327][ T28] audit: type=1400 audit(1780488936.472:382): avc: denied { write } for pid=4402 comm="syz.1.311" path="socket:[7809]" dev="sockfs" ino=7809 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.184987][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 47.201281][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 47.237924][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.312'. [ 47.239121][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.254876][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 47.265045][ T68] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.279497][ T68] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.292139][ T68] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.327942][ T28] audit: type=1400 audit(1780488936.702:383): avc: denied { read } for pid=4408 comm="syz.1.315" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.373186][ T28] audit: type=1400 audit(1780488936.702:384): avc: denied { open } for pid=4408 comm="syz.1.315" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 47.441307][ T28] audit: type=1400 audit(1780488936.702:385): avc: denied { kexec_image_load } for pid=4408 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 47.470155][ T4416] loop3: detected capacity change from 0 to 512 [ 47.481186][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.517705][ T4416] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c098, mo2=0002] [ 47.525932][ T4416] System zones: 0-2, 18-18, 34-35 [ 47.540342][ T4416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.565778][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.569139][ T4416] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.656847][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.725658][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.735969][ T4444] syzkaller0: entered promiscuous mode [ 47.745374][ T4444] syzkaller0: entered allmulticast mode [ 47.760013][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.933394][ T12] bridge_slave_1: left allmulticast mode [ 47.939234][ T12] bridge_slave_1: left promiscuous mode [ 47.944985][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.959312][ T12] bridge_slave_0: left allmulticast mode [ 47.965305][ T12] bridge_slave_0: left promiscuous mode [ 47.975641][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.041072][ T4460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.333'. [ 48.155059][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.168211][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.189851][ T12] bond0 (unregistering): Released all slaves [ 48.260353][ T12] hsr_slave_0: left promiscuous mode [ 48.282671][ T12] hsr_slave_1: left promiscuous mode [ 48.309807][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.341351][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.370163][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.402773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.456847][ T12] veth1_macvtap: left promiscuous mode [ 48.471462][ T12] veth0_macvtap: left promiscuous mode [ 48.489795][ T12] veth1_vlan: left promiscuous mode [ 48.507354][ T12] veth0_vlan: left promiscuous mode [ 48.691447][ T12] team0 (unregistering): Port device team_slave_1 removed [ 48.703296][ T12] team0 (unregistering): Port device team_slave_0 removed [ 48.785428][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.987860][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.995183][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.002505][ T4425] bridge_slave_0: entered allmulticast mode [ 49.009872][ T4425] bridge_slave_0: entered promiscuous mode [ 49.018564][ T4545] sit0: entered promiscuous mode [ 49.035002][ T4545] netlink: 'syz.4.352': attribute type 1 has an invalid length. [ 49.042848][ T4545] netlink: 9 bytes leftover after parsing attributes in process `syz.4.352'. [ 49.053692][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.061168][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.068499][ T4425] bridge_slave_1: entered allmulticast mode [ 49.075371][ T4425] bridge_slave_1: entered promiscuous mode [ 49.109111][ T4425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.121420][ T4425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.168235][ T4425] team0: Port device team_slave_0 added [ 49.170812][ T4554] 9pnet: p9_errstr2errno: server reported unknown error ½p [ 49.182497][ T4425] team0: Port device team_slave_1 added [ 49.215665][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.222852][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.249500][ T4425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.261677][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.272234][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.298778][ T4425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.311350][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 49.349416][ T4425] hsr_slave_0: entered promiscuous mode [ 49.365404][ T4425] hsr_slave_1: entered promiscuous mode [ 49.374378][ T4425] debugfs: 'hsr0' already exists in 'hsr' [ 49.389318][ T4425] Cannot create hsr debugfs directory [ 49.535187][ T4425] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 49.551756][ T4425] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.568212][ T4425] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 49.588103][ T4425] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.604129][ T4425] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 49.614610][ T4425] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.629588][ T4425] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 49.642303][ T4425] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.651276][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 49.670260][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.677410][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.684836][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.691905][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.730713][ T4425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.750513][ T1018] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.762522][ T1018] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.784184][ T4425] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.795504][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.802607][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.815602][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.822756][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.858534][ T4425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 50.013389][ T4425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.047915][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 50.268009][ T4425] veth0_vlan: entered promiscuous mode [ 50.286557][ T4425] veth1_vlan: entered promiscuous mode [ 50.322855][ T4425] veth0_macvtap: entered promiscuous mode [ 50.343473][ T4425] veth1_macvtap: entered promiscuous mode [ 50.377610][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.401037][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.424707][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.434204][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.448550][ T30] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.459767][ T30] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.854139][ T4707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.385'. [ 51.235322][ T4721] batadv_slave_1: entered promiscuous mode [ 51.243001][ T4720] batadv_slave_1: left promiscuous mode [ 51.406614][ T4747] netlink: 12 bytes leftover after parsing attributes in process `syz.6.400'. [ 51.509784][ T4763] loop3: detected capacity change from 0 to 512 [ 51.533398][ T4763] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.546093][ T4763] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.610942][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.669236][ T28] kauditd_printk_skb: 64 callbacks suppressed [ 51.669279][ T28] audit: type=1400 audit(1780488941.052:450): avc: denied { setattr } for pid=4782 comm="syz.1.410" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 51.870371][ T4800] netlink: 'syz.4.416': attribute type 1 has an invalid length. [ 51.910447][ T4800] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.928822][ T4800] bond1: (slave geneve2): making interface the new active one [ 51.938111][ T4800] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 52.099354][ T28] audit: type=1400 audit(1780488941.472:451): avc: denied { create } for pid=4812 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.102349][ T4815] pimreg: entered allmulticast mode [ 52.167063][ T28] audit: type=1400 audit(1780488941.472:452): avc: denied { setopt } for pid=4812 comm="syz.3.421" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.226738][ T4815] syz_tun: entered allmulticast mode [ 52.243195][ T28] audit: type=1400 audit(1780488941.622:453): avc: denied { write } for pid=4810 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.245803][ T4831] netlink: 27 bytes leftover after parsing attributes in process `syz.0.422'. [ 52.276491][ T4815] syz_tun: left allmulticast mode [ 52.289428][ T4812] pimreg: left allmulticast mode [ 52.337371][ T28] audit: type=1400 audit(1780488941.712:454): avc: denied { write } for pid=4836 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.419511][ T28] audit: type=1400 audit(1780488941.792:455): avc: denied { allowed } for pid=4845 comm="syz.0.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.529593][ T28] audit: type=1400 audit(1780488941.912:456): avc: denied { setopt } for pid=4867 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 52.558871][ T28] audit: type=1400 audit(1780488941.932:457): avc: denied { execute } for pid=4867 comm="syz.1.431" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=8931 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 52.579179][ T4874] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.592937][ T4874] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.616533][ T28] audit: type=1400 audit(1780488941.992:458): avc: denied { write } for pid=4856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.663032][ T28] audit: type=1400 audit(1780488942.042:459): avc: denied { write } for pid=4879 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.801775][ T4897] loop6: detected capacity change from 0 to 512 [ 52.816435][ T4897] EXT4-fs: Ignoring removed oldalloc option [ 52.855154][ T4897] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.858690][ T4907] capability: warning: `syz.1.440' uses deprecated v2 capabilities in a way that may be insecure [ 52.885572][ T4897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.921452][ T4897] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.942489][ T4920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'. [ 52.952694][ T4920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.444'. [ 53.006985][ T4425] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.421465][ T4951] netlink: 'syz.1.458': attribute type 3 has an invalid length. [ 53.429716][ T4951] netlink: 'syz.1.458': attribute type 4 has an invalid length. [ 53.437406][ T4951] netlink: 9067 bytes leftover after parsing attributes in process `syz.1.458'. [ 53.811215][ T4958] loop0: detected capacity change from 0 to 512 [ 53.831711][ T4958] EXT4-fs: Ignoring removed oldalloc option [ 53.845925][ T4958] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.863276][ T4958] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.879291][ T4958] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.952316][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.013460][ T4970] loop0: detected capacity change from 0 to 4096 [ 54.023834][ T4970] EXT4-fs: Ignoring removed mblk_io_submit option [ 54.045950][ T4970] EXT4-fs: test_dummy_encryption option not supported [ 54.069565][ T4970] sctp: [Deprecated]: syz.0.466 (pid 4970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 54.069565][ T4970] Use struct sctp_sack_info instead [ 54.326234][ T4925] kexec: Could not allocate control_code_buffer [ 54.344360][ T5003] netlink: 20 bytes leftover after parsing attributes in process `syz.0.481'. [ 54.463744][ T5020] loop0: detected capacity change from 0 to 256 [ 54.542944][ T5029] loop0: detected capacity change from 0 to 2048 [ 54.572852][ T5029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.613187][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.716199][ T5040] loop0: detected capacity change from 0 to 128 [ 54.731177][ T5040] FAT-fs (loop0): Directory bread(block 162) failed [ 54.738251][ T5040] FAT-fs (loop0): Directory bread(block 163) failed [ 54.745427][ T5040] FAT-fs (loop0): Directory bread(block 164) failed [ 54.752397][ T5040] FAT-fs (loop0): Directory bread(block 165) failed [ 54.759421][ T5040] FAT-fs (loop0): Directory bread(block 166) failed [ 54.766145][ T5040] FAT-fs (loop0): Directory bread(block 167) failed [ 54.773458][ T5040] FAT-fs (loop0): Directory bread(block 168) failed [ 54.780690][ T5040] FAT-fs (loop0): Directory bread(block 169) failed [ 54.787403][ T5040] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.802273][ T5040] FAT-fs (loop0): Directory bread(block 162) failed [ 54.809492][ T5040] FAT-fs (loop0): Directory bread(block 163) failed [ 54.816835][ T5040] syz.0.496: attempt to access beyond end of device [ 54.816835][ T5040] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 54.830444][ T5040] syz.0.496: attempt to access beyond end of device [ 54.830444][ T5040] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 54.921024][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 55.342241][ T5064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.506'. [ 55.480138][ T5064] netlink: 60 bytes leftover after parsing attributes in process `syz.3.506'. [ 55.527045][ T5070] loop3: detected capacity change from 0 to 512 [ 55.533686][ T5070] EXT4-fs: Ignoring removed oldalloc option [ 55.552486][ T5070] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 55.569542][ T68] tipc: Subscription rejected, illegal request [ 55.572526][ T5070] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.588584][ T5070] ext4 filesystem being mounted at /106/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.642783][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.808525][ T5101] gretap1: entered allmulticast mode [ 55.817066][ T5101] team0: Port device gretap1 added [ 55.824175][ T5101] bridge0: port 3(team0) entered blocking state [ 55.836651][ T5101] bridge0: port 3(team0) entered disabled state [ 55.843241][ T5101] team0: entered allmulticast mode [ 55.853267][ T5101] team_slave_0: entered allmulticast mode [ 55.859203][ T5101] team_slave_1: entered allmulticast mode [ 55.866086][ T5101] team0: entered promiscuous mode [ 55.871389][ T5101] team_slave_0: entered promiscuous mode [ 55.877112][ T5101] team_slave_1: entered promiscuous mode [ 55.882900][ T5101] gretap1: entered promiscuous mode [ 55.888576][ T5101] bridge0: port 3(team0) entered blocking state [ 55.894871][ T5101] bridge0: port 3(team0) entered forwarding state [ 55.902634][ T5105] netlink: 'syz.0.524': attribute type 12 has an invalid length. [ 55.977113][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 55.988747][ T5116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.529'. [ 56.007609][ T30] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 56.007632][ T5116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.529'. [ 56.025632][ T30] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 56.034792][ T30] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 56.043878][ T30] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 56.104583][ T5126] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.111839][ T5126] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.265681][ T5122] loop3: detected capacity change from 0 to 4096 [ 56.278388][ T5122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.459359][ T5122] ================================================================== [ 56.467508][ T5122] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 56.474929][ T5122] [ 56.477262][ T5122] read-write to 0xffff888100609228 of 8 bytes by task 30 on cpu 1: [ 56.485155][ T5122] __xa_clear_mark+0xf5/0x1e0 [ 56.489868][ T5122] __folio_end_writeback+0xf4/0x360 [ 56.495089][ T5122] folio_end_writeback_no_dropbehind+0x6d/0x1d0 [ 56.501357][ T5122] folio_end_writeback+0x1c/0x70 [ 56.506319][ T5122] ext4_finish_bio+0x450/0x760 [ 56.511115][ T5122] ext4_release_io_end+0x9f/0x1f0 [ 56.516253][ T5122] ext4_end_io_end+0x18d/0x240 [ 56.521046][ T5122] ext4_end_io_rsv_work+0x15b/0x1f0 [ 56.526353][ T5122] process_scheduled_works+0x4f0/0x9c0 [ 56.531846][ T5122] worker_thread+0x58a/0x780 [ 56.536460][ T5122] kthread+0x22a/0x280 [ 56.540543][ T5122] ret_from_fork+0x146/0x330 [ 56.545163][ T5122] ret_from_fork_asm+0x1a/0x30 [ 56.549962][ T5122] [ 56.552299][ T5122] read to 0xffff888100609228 of 8 bytes by task 5122 on cpu 0: [ 56.559859][ T5122] xas_find_marked+0x213/0x620 [ 56.564655][ T5122] filemap_get_folios_tag+0xfa/0x430 [ 56.570008][ T5122] file_write_and_wait_range+0x20c/0x2f0 [ 56.575677][ T5122] mmb_fsync_noflush+0x48/0x140 [ 56.580551][ T5122] ext4_sync_file+0x1f1/0x6b0 [ 56.585243][ T5122] vfs_fsync_range+0xc5/0xe0 [ 56.589850][ T5122] ext4_buffered_write_iter+0x447/0x4c0 [ 56.595415][ T5122] ext4_file_write_iter+0xbff/0xfa0 [ 56.600640][ T5122] do_iter_readv_writev+0x4fd/0x5a0 [ 56.605867][ T5122] vfs_writev+0x2e1/0x900 [ 56.610214][ T5122] __se_sys_pwritev2+0xfc/0x1c0 [ 56.615095][ T5122] __x64_sys_pwritev2+0x67/0x80 [ 56.619977][ T5122] x64_sys_call+0xe07/0x3020 [ 56.624762][ T5122] do_syscall_64+0x12c/0x3b0 [ 56.629455][ T5122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.635357][ T5122] [ 56.637685][ T5122] value changed: 0xffffffffffffffe0 -> 0xffffffffffc00000 [ 56.644806][ T5122] [ 56.647136][ T5122] Reported by Kernel Concurrency Sanitizer on: [ 56.653289][ T5122] CPU: 0 UID: 0 PID: 5122 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.662587][ T5122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 56.672656][ T5122] ================================================================== [ 56.749202][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.949133][ T5053] Bluetooth: hci0: command 0x1003 tx timeout [ 56.949175][ T3599] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.144810][ T28] kauditd_printk_skb: 68 callbacks suppressed [ 60.144827][ T28] audit: type=1400 audit(1780489205.520:528): avc: denied { write } for pid=5146 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.174623][ T28] audit: type=1400 audit(1780489205.540:529): avc: denied { write } for pid=5157 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.516868][ T28] audit: type=1400 audit(1780489206.890:530): avc: denied { write } for pid=5160 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.541059][ T28] audit: type=1400 audit(1780489206.910:531): avc: denied { write } for pid=5171 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.604976][ T28] audit: type=1400 audit(1780489206.980:532): avc: denied { write } for pid=5174 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.628008][ T28] audit: type=1400 audit(1780489206.980:533): avc: denied { write } for pid=5185 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.694386][ T28] audit: type=1400 audit(1780489207.070:534): avc: denied { write } for pid=5188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.717428][ T28] audit: type=1400 audit(1780489207.070:535): avc: denied { write } for pid=5199 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1