last executing test programs: 440.533499ms ago: executing program 2 (id=3): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xaa, 0x6}, 0x8800, 0xff, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xfffffda8, 0x0, &(0x7f00000000c0)="c1b9545dd30a1d31677b2d0bfa91", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd1c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = socket$inet6(0xa, 0x3, 0xff) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) sendmmsg(r2, &(0x7f000000b540)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0xfffffe00, @loopback, 0xc20}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000001600)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0, 0x0, &(0x7f0000004a40)=[{0x10, 0x116, 0x5}, {0x18, 0x1, 0x8, "14d09c"}, {0xd0, 0x84, 0x3fca46c6, "03eff63ebea9bd1bd4fa4bad9ac354c5c4c7d97adb8ceee2e3f49a82aee2d5b252740f881e2c29e894a72e213a4ac5d44ba9da11083d618a4b6920322120152a28ee49939a0b2e94dbd7216e83438d0911f96918956dd3b2b245df171c4c12abb907556443dae700b382136c196acb284ae2c7f3164910df151b31897b53253f45d0b447984ee8fac38af4e5fcd88910e3f9d2d71f6e18d3a4978ef9fad1b23ba8fc84723f903ccbbae7ee48e54f434071aacfb40ac872363552"}, {0x58, 0x109, 0xfffffffa, "0a9c303dbbd334c6fe83087536ae79cb074334eca00e235b5b946e9bdcdaa659ad7ca4bfb67b28305d6ad41e15e43260234d71071683ca26c5091bcd044dc6703f5df0"}, {0x58, 0x109, 0x1, "00522802e76c8be95a6f7d73c1dc28930b4521472b8f255fc12dcf6c4f294e135ef1af1050fba176f5db64838eb9b36789ed212d3aedd4510a57cdc629f93df376"}], 0x1a8}}], 0x2, 0x20000850) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES32=r1], &(0x7f0000000280)='syzkaller\x00', 0x2, 0xc4, &(0x7f00000002c0)=""/196}, 0x94) 297.738363ms ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000400)='0', 0x1, 0xfffffffffffffffb) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@nomblk_io_submit}]}, 0xfe, 0x47c, &(0x7f0000000540)="$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") lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x208000}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x3) r4 = fsmount(0xffffffffffffffff, 0x0, 0x86) fchdir(r4) setns(r4, 0x10000000) ioctl$KDGKBTYPE(r3, 0x4b33, &(0x7f0000000000)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$KDSETLED(r3, 0x4b32, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'ip6tnl0\x00', 0x10}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0xffffffff, 0x9, 0x44081, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000300000000000000f6ffffff18110000", @ANYRES32=r9, @ANYBLOB="00000000000000eab608000000bfa200001800000007020000f8ffffffb703000002000000000000000000000085000000030000009500000000000900"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r7, 0x800454e1, &(0x7f0000000380)=r10) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC=r5], 0xffdd) open_by_handle_at(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="10000000020001"], 0x0) 131.824417ms ago: executing program 1 (id=2): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8000, 0x40, 0x7, 0x41}}) inotify_init1(0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0xfd}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 79.735418ms ago: executing program 3 (id=4): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg$kcm(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)=""/168, 0xa8}], 0x1}, 0x10000) recvmsg$kcm(r0, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x200000, &(0x7f0000000100), 0x1, 0x51d, &(0x7f0000000c80)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x318, 0x4b7b5}}, 0x20}, 0x1, 0x0, 0x0, 0x24004804}, 0x8000002) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000001200)=0x2, 0x4) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="58bc0d25", @ANYRES16, @ANYBLOB="080029bd7000fddbdf2708000000440003800800030003000000080003000b00000008000300165d000008000300000000000800010000100000080003005018ae71080002"], 0x58}, 0x1, 0x0, 0x0, 0x4008010}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x4000}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r4}, './file0/file0\x00'}) 0s ago: executing program 2 (id=7): socket$inet6_udp(0xa, 0x2, 0x0) fsopen(&(0x7f0000000200)='mqueue\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) mkdir(&(0x7f00000002c0)='./file0\x00', 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SNAPSHOT_FREE(0xffffffffffffffff, 0x3305) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRESOCT=r3, @ANYRES32=r3], 0x38}, 0x1, 0x0, 0x0, 0x8c0}, 0x10) kernel console output (not intermixed with test programs): t=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.200699][ T29] audit: type=1400 audit(1788336618.425:99): avc: denied { noatsecure } for pid=3170 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.200736][ T29] audit: type=1400 audit(1788336618.425:100): avc: denied { write } for pid=3170 comm="sh" path="pipe:[2297]" dev="pipefs" ino=2297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.200773][ T29] audit: type=1400 audit(1788336618.435:101): avc: denied { rlimitinh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.200811][ T29] audit: type=1400 audit(1788336618.435:102): avc: denied { siginh } for pid=3170 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.478596][ T29] audit: type=1400 audit(1788336620.725:103): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.478659][ T29] audit: type=1400 audit(1788336620.725:104): avc: denied { search } for pid=3179 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.465948][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 26.465984][ T29] audit: type=1400 audit(1788336622.715:124): avc: denied { write } for pid=3264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.499909][ T29] audit: type=1400 audit(1788336622.755:125): avc: denied { write } for pid=3275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 31.579821][ T29] audit: type=1400 audit(1788336627.825:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.602987][ T29] audit: type=1400 audit(1788336627.855:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.605355][ T3286] cgroup: Unknown subsys name 'net' [ 31.610603][ T29] audit: type=1400 audit(1788336627.855:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.750889][ T3286] cgroup: Unknown subsys name 'cpuset' [ 31.757070][ T3286] cgroup: Unknown subsys name 'rlimit' [ 31.848416][ T29] audit: type=1400 audit(1788336628.095:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.871961][ T29] audit: type=1400 audit(1788336628.105:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.871997][ T29] audit: type=1400 audit(1788336628.105:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.872026][ T29] audit: type=1400 audit(1788336628.105:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.935942][ T29] audit: type=1400 audit(1788336628.185:133): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.959420][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.968153][ T29] audit: type=1400 audit(1788336628.205:134): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 31.968259][ T29] audit: type=1400 audit(1788336628.215:135): avc: denied { write } for pid=3289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 32.009289][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.372888][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.372972][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.373272][ T3298] bridge_slave_0: entered allmulticast mode [ 33.374266][ T3298] bridge_slave_0: entered promiscuous mode [ 33.377045][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.377181][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.377416][ T3298] bridge_slave_1: entered allmulticast mode [ 33.378609][ T3298] bridge_slave_1: entered promiscuous mode [ 33.457621][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.477254][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.498232][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.498273][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.498388][ T3297] bridge_slave_0: entered allmulticast mode [ 33.498815][ T3297] bridge_slave_0: entered promiscuous mode [ 33.537243][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.537354][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.537544][ T3297] bridge_slave_1: entered allmulticast mode [ 33.538911][ T3297] bridge_slave_1: entered promiscuous mode [ 33.549810][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.549908][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.550188][ T3299] bridge_slave_0: entered allmulticast mode [ 33.551377][ T3299] bridge_slave_0: entered promiscuous mode [ 33.566486][ T3298] team0: Port device team_slave_0 added [ 33.583354][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.583472][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.583664][ T3299] bridge_slave_1: entered allmulticast mode [ 33.585214][ T3299] bridge_slave_1: entered promiscuous mode [ 33.588838][ T3298] team0: Port device team_slave_1 added [ 33.636100][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.645757][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.645811][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.645917][ T3304] bridge_slave_0: entered allmulticast mode [ 33.646469][ T3304] bridge_slave_0: entered promiscuous mode [ 33.649552][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.649731][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.649898][ T3304] bridge_slave_1: entered allmulticast mode [ 33.651819][ T3304] bridge_slave_1: entered promiscuous mode [ 33.677455][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.689791][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.689901][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.690693][ T3302] bridge_slave_0: entered allmulticast mode [ 33.691906][ T3302] bridge_slave_0: entered promiscuous mode [ 33.707016][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.707684][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.707725][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.707817][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.720442][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.720546][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.720769][ T3302] bridge_slave_1: entered allmulticast mode [ 33.722630][ T3302] bridge_slave_1: entered promiscuous mode [ 33.735873][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.735915][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.736009][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.738862][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.780706][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.782489][ T3297] team0: Port device team_slave_0 added [ 33.784692][ T3297] team0: Port device team_slave_1 added [ 33.812844][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.836783][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.849570][ T3299] team0: Port device team_slave_0 added [ 33.871375][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.871412][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.871508][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.873045][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.873084][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.873171][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.881720][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.905837][ T3299] team0: Port device team_slave_1 added [ 33.922736][ T3304] team0: Port device team_slave_0 added [ 33.924752][ T3304] team0: Port device team_slave_1 added [ 33.950863][ T3298] hsr_slave_0: entered promiscuous mode [ 33.951917][ T3298] hsr_slave_1: entered promiscuous mode [ 33.984620][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.984763][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.984914][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.987380][ T3302] team0: Port device team_slave_0 added [ 34.000693][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.000734][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.000824][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.001968][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.002000][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.002094][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.004395][ T3302] team0: Port device team_slave_1 added [ 34.028336][ T3297] hsr_slave_0: entered promiscuous mode [ 34.029287][ T3297] hsr_slave_1: entered promiscuous mode [ 34.030749][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 34.030787][ T3297] Cannot create hsr debugfs directory [ 34.032579][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.032608][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.032689][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.095849][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.095898][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.095994][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.135689][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.135732][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.135848][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.170242][ T3304] hsr_slave_0: entered promiscuous mode [ 34.171111][ T3304] hsr_slave_1: entered promiscuous mode [ 34.171615][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 34.171668][ T3304] Cannot create hsr debugfs directory [ 34.183897][ T3299] hsr_slave_0: entered promiscuous mode [ 34.184843][ T3299] hsr_slave_1: entered promiscuous mode [ 34.185480][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 34.185522][ T3299] Cannot create hsr debugfs directory [ 34.390040][ T3302] hsr_slave_0: entered promiscuous mode [ 34.390836][ T3302] hsr_slave_1: entered promiscuous mode [ 34.391121][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.391139][ T3302] Cannot create hsr debugfs directory [ 34.568029][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.576791][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.584512][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.593260][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.603053][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.611952][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.619663][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.628613][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.629737][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.640906][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.642480][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.646846][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.651192][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.661223][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.664174][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.674657][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.705254][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.714311][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.724556][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.733441][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.734175][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.744705][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.754930][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.763506][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.787306][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.796244][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.800916][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.806591][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.822171][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.831027][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.833281][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.842866][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.878599][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.887045][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.887574][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.898398][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.909450][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.914651][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.923643][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.932235][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.960246][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.990827][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.004947][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.017423][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.024356][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.036495][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.036540][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.043019][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.043144][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.047142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.047296][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.067053][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.095074][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.095130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.106401][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.118036][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.133693][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.133823][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.137125][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.137322][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.165482][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.165537][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.183223][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.183268][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.222752][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.234612][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.252763][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.252842][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.270579][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.270670][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.472732][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.576098][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.597122][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.619968][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.655441][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.694071][ T3298] veth0_vlan: entered promiscuous mode [ 35.702867][ T3298] veth1_vlan: entered promiscuous mode [ 35.730467][ T3298] veth0_macvtap: entered promiscuous mode [ 35.740262][ T3298] veth1_macvtap: entered promiscuous mode [ 35.763367][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.779613][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.790806][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.792172][ T163] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.792290][ T163] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.811828][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.880023][ T3297] veth0_vlan: entered promiscuous mode [ 35.895242][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.901759][ T3297] veth1_vlan: entered promiscuous mode [ 35.923418][ T3299] veth0_vlan: entered promiscuous mode [ 35.940602][ T3299] veth1_vlan: entered promiscuous mode [ 35.968443][ T3297] veth0_macvtap: entered promiscuous mode [ 35.982651][ T3297] veth1_macvtap: entered promiscuous mode [ 36.015456][ T3299] veth0_macvtap: entered promiscuous mode [ 36.022713][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.024658][ T3302] veth0_vlan: entered promiscuous mode [ 36.036051][ T3299] veth1_macvtap: entered promiscuous mode [ 36.039968][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.056218][ T3302] veth1_vlan: entered promiscuous mode [ 36.063526][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.078909][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.099884][ T3506] loop2: detected capacity change from 0 to 512 [ 36.106691][ T3506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.106837][ T3506] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.121875][ T3506] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 36.134969][ T3506] EXT4-fs (loop2): 1 truncate cleaned up [ 36.135565][ T3506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.136577][ T3304] veth0_vlan: entered promiscuous mode [ 36.148306][ T3506] capability: warning: `syz.2.6' uses deprecated v2 capabilities in a way that may be insecure [ 36.185262][ T3302] veth0_macvtap: entered promiscuous mode [ 36.202956][ T3304] veth1_vlan: entered promiscuous mode [ 36.216442][ T3302] veth1_macvtap: entered promiscuous mode [ 36.254412][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.274644][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.284325][ T3304] veth0_macvtap: entered promiscuous mode [ 36.296826][ T3304] veth1_macvtap: entered promiscuous mode [ 36.320553][ T364] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.320716][ T364] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.321144][ T364] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.321280][ T364] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.343383][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.367158][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.388382][ T3302] ================================================================== [ 36.388416][ T3302] BUG: KCSAN: data-race in __follow_mount_rcu / d_set_mounted [ 36.388448][ T3302] [ 36.388454][ T3302] read to 0xffff8881004066c0 of 4 bytes by task 3509 on cpu 1: [ 36.388472][ T3302] __follow_mount_rcu+0x156/0x2a0 [ 36.388494][ T3302] step_into_slowpath+0x30c/0x4c0 [ 36.388515][ T3302] link_path_walk+0x947/0xdd0 [ 36.388536][ T3302] path_lookupat+0x53/0x4c0 [ 36.388560][ T3302] filename_lookup+0x18f/0x390 [ 36.388581][ T3302] vfs_statx+0x96/0x170 [ 36.388617][ T3302] vfs_fstatat+0x118/0x170 [ 36.388652][ T3302] __se_sys_newfstatat+0x55/0x3e0 [ 36.388673][ T3302] __x64_sys_newfstatat+0x55/0x70 [ 36.388694][ T3302] x64_sys_call+0xee6/0x2550 [ 36.388723][ T3302] do_syscall_64+0x112/0x360 [ 36.388750][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.388771][ T3302] [ 36.388777][ T3302] write to 0xffff8881004066c0 of 4 bytes by task 3302 on cpu 0: [ 36.388794][ T3302] d_set_mounted+0xff/0x160 [ 36.388817][ T3302] get_mountpoint+0x197/0x370 [ 36.388842][ T3302] attach_recursive_mnt+0x11a/0x1700 [ 36.388869][ T3302] graft_tree+0xf0/0x100 [ 36.388893][ T3302] do_loopback+0x247/0x480 [ 36.388923][ T3302] path_mount+0x3ea/0xb90 [ 36.388951][ T3302] __se_sys_mount+0x28c/0x2e0 [ 36.388985][ T3302] __x64_sys_mount+0x67/0x80 [ 36.389018][ T3302] x64_sys_call+0xc3b/0x2550 [ 36.389045][ T3302] do_syscall_64+0x112/0x360 [ 36.389075][ T3302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.389109][ T3302] [ 36.389114][ T3302] Reported by Kernel Concurrency Sanitizer on: [ 36.389143][ T3302] CPU: 0 UID: 0 PID: 3302 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 36.389171][ T3302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.389184][ T3302] ================================================================== [ 36.449868][ T3513] syz.1.2 (3513) used greatest stack depth: 10808 bytes left [ 36.469391][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.471938][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.539444][ T3520] loop3: detected capacity change from 0 to 512 [ 36.580754][ T364] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.581907][ T364] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.582016][ T364] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.583328][ T3520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 36.583508][ T3520] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.590705][ T3519] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 36.594880][ T3519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7'. [ 36.661442][ T3515] netlink: 'syz.3.4': attribute type 12 has an invalid length. [ 36.661499][ T3515] netlink: 'syz.3.4': attribute type 29 has an invalid length. [ 36.661538][ T3515] netlink: 148 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.661650][ T3515] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 36.661689][ T3515] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 36.661721][ T3515] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4'. [ 36.662048][ T364] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.674693][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 36.674734][ T29] audit: type=1400 audit(1788336632.925:171): avc: denied { write } for pid=3514 comm="syz.3.4" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 36.691450][ T364] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.692491][ T364] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.692670][ T364] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.692783][ T364] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.762343][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.809161][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 36.820341][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.840173][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0