last executing test programs: 2.297972533s ago: executing program 2 (id=70): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setuid(0xee00) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 2.222384439s ago: executing program 2 (id=72): r0 = eventfd2(0x0, 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_io_uring_setup(0x78ec, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x2292, &(0x7f0000000640), &(0x7f0000000400)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) 1.272274707s ago: executing program 2 (id=89): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904ff81000000fe000000000000000800040001000000", 0x24) 1.210751291s ago: executing program 0 (id=91): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) socket(0x0, 0x3, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) io_pgetevents(r1, 0x6, 0x6, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = syz_io_uring_setup(0x78ec, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_setup(0x2292, &(0x7f0000000640), &(0x7f0000000400)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0xb15, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001340)=[&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r0}]) 824.052803ms ago: executing program 1 (id=101): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5}]}, 0x24}}, 0x0) 801.751655ms ago: executing program 1 (id=102): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x4b47, 0x0) 774.782247ms ago: executing program 3 (id=103): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x541b, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) timerfd_gettime(r2, &(0x7f0000001200)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) sendto$inet6(r0, &(0x7f0000000100)="08c8432a04daeb3fb3e8b12478872227aa", 0x11, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001240)=""/4063, &(0x7f0000001180)=0xfdf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x98}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 695.857233ms ago: executing program 3 (id=106): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r0, 0x6, 0x25, &(0x7f00000001c0)=0x500, 0x4) 669.099066ms ago: executing program 0 (id=107): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = io_uring_setup(0x1cba, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 604.286811ms ago: executing program 0 (id=108): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r1 = dup(r0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) r4 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x3, 0x7ad, &(0x7f0000001840)="$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") fallocate(r4, 0x3, 0x0, 0x10000) open(0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x3, 0xfffd) ftruncate(r2, 0xee72) sendfile(r1, r2, 0x0, 0x8000fffffffe) vmsplice(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) r5 = fcntl$dupfd(r2, 0x0, r2) r6 = dup3(r1, r5, 0x0) r7 = syz_io_uring_setup(0x2ddd, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000180)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000340)=0x0, &(0x7f0000000700)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r7, 0x381b, 0x0, 0x0, 0x0, 0x0) write$P9_RCLUNK(r6, 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1b) 549.455885ms ago: executing program 4 (id=109): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7, 0x3030, 0xffffffffffffffff, 0x79f26000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x86}}, &(0x7f0000000000)='GPL\x00'}, 0x80) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x8, 0x30f, &(0x7f00000004c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/227, 0x14}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, '\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 431.867685ms ago: executing program 1 (id=110): unshare(0x20000400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/176, 0xb0}], 0x1, 0x0, 0x0, 0x0) 335.165173ms ago: executing program 0 (id=111): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00028008"], 0x34}}, 0x0) 307.620355ms ago: executing program 4 (id=112): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) unshare(0x20000600) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r3) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x401070cd, 0x0) ioctl$TCFLSH(r0, 0x5608, 0x2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) mlockall(0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001280)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x11, 0x10, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000c0ffffff000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000009500000000000000bf91000000000000b70200000000"], &(0x7f00000013c0)='GPL\x00', 0x6, 0x28, &(0x7f0000001400)=""/40, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001440)={0x0, 0xb, 0xde5}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001480)=[{0x5, 0x1, 0xd, 0x3}], 0x10, 0x1}, 0x90) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000580)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) socket$key(0xf, 0x3, 0x2) syz_open_dev$vcsa(&(0x7f0000001580), 0x0, 0x40000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000010000000000000000000000b708000000000000dbaab8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300004e2fee54c7527e7853a297ad5972759be74922fb868970270c51cad70269b58ed8790fe1f6a5e6a6c3d5e953f994e7f0e0486a41df27db5d39223a1a733ac3156bfd12d2ea002c8d7d4889152deeead4f1f448efa9ccd00a43fee131cb8a7539b7a5a73e2142948538", @ANYRES16=0x0, @ANYBLOB="0000000000000000b705000008000000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{0x1}, &(0x7f00000015c0), &(0x7f0000001600)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r6 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[], 0x0, 0x235, &(0x7f00000002c0)="$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") openat(r6, &(0x7f0000000080)='./file0\x00', 0x2040, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 306.722835ms ago: executing program 1 (id=113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, 0x1, 0x4, 0x201, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_CMD={0x5}]}, 0x24}}, 0x0) 275.617058ms ago: executing program 1 (id=114): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 261.988249ms ago: executing program 4 (id=115): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x6000000, [{}]}]}}, &(0x7f0000000f40)=""/4096, 0x2e, 0x1000, 0x1}, 0x20) 241.68015ms ago: executing program 3 (id=116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 236.353871ms ago: executing program 4 (id=117): syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x7}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCFLSH(0xffffffffffffffff, 0x541b, 0x0) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) timerfd_gettime(r2, &(0x7f0000001200)) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) sendto$inet6(r0, &(0x7f0000000100)="08c8432a04daeb3fb3e8b12478872227aa", 0x11, 0x94, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000001240)=""/4063, &(0x7f0000001180)=0xfdf) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x98}}, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bpf(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) 206.350303ms ago: executing program 3 (id=118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x12}, [@FIB_RULE_POLICY=@FRA_FWMARK={0x8, 0xa, 0xffffffff}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 205.819003ms ago: executing program 4 (id=119): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) semctl$SEM_STAT_ANY(0x0, 0x3, 0x14, &(0x7f0000000380)=""/130) semget$private(0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) stat(0x0, 0x0) capget(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) munlockall() fstat(0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) semget$private(0x0, 0x0, 0x401) 192.418794ms ago: executing program 1 (id=120): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x7, 0x0, 0x0, 0x0, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x89f0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5452, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000840), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0xe, 0x4, &(0x7f0000000280)=@raw=[@ldst={0x0, 0x3, 0x1, 0xb, 0x7, 0xc, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @generic={0x0, 0x8, 0x0, 0x458, 0xbfbf751}], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0xcb, &(0x7f0000000500)=""/203, 0x41000, 0x4, '\x00', 0x0, 0x3e, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x69}, 0x10, r3, 0xffffffffffffffff, 0x1, &(0x7f0000000a00)=[r0], &(0x7f0000000a40)=[{0x0, 0x4, 0x0, 0x7}], 0x10, 0x8a}, 0x90) 102.139312ms ago: executing program 4 (id=121): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_CONTROL(r0, 0x4b47, 0x0) 90.226092ms ago: executing program 3 (id=122): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000006500)={[{@dots}, {@dots}, {@dots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@fat=@quiet}, {@nodots}, {@dots}, {@fat=@showexec}, {@dots}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@fat=@nfs}, {@dots}, {@fat=@tz_utc}, {@fat=@errors_continue}, {@nodots}, {@fat=@nocase}, {@fat=@check_strict}, {@dots}]}, 0xfd, 0x1bf, &(0x7f0000000680)="$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") mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 680.82µs ago: executing program 0 (id=123): unshare(0x20000400) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/176, 0xb0}], 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=124): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x7, 0x3030, 0xffffffffffffffff, 0x79f26000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x86}}, &(0x7f0000000000)='GPL\x00'}, 0x80) ftruncate(0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x8, 0x30f, &(0x7f00000004c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) readv(r1, &(0x7f00000013c0)=[{&(0x7f0000001400)=""/227, 0x14}], 0x1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000), 0xe) listen(r2, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, '\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 15.688761][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 15.688775][ T29] audit: type=1400 audit(1720836710.967:76): avc: denied { transition } for pid=2963 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.692515][ T29] audit: type=1400 audit(1720836710.967:77): avc: denied { noatsecure } for pid=2963 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.695040][ T29] audit: type=1400 audit(1720836710.967:78): avc: denied { write } for pid=2963 comm="sh" path="pipe:[1522]" dev="pipefs" ino=1522 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 15.698064][ T29] audit: type=1400 audit(1720836710.967:79): avc: denied { rlimitinh } for pid=2963 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.700527][ T29] audit: type=1400 audit(1720836710.967:80): avc: denied { siginh } for pid=2963 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 17.889670][ T29] audit: type=1400 audit(1720836713.167:81): avc: denied { read } for pid=2767 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 22.781643][ T29] audit: type=1400 audit(1720836718.057:82): avc: denied { mounton } for pid=3073 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.782593][ T3073] cgroup: Unknown subsys name 'net' [ 22.804337][ T29] audit: type=1400 audit(1720836718.057:83): avc: denied { mount } for pid=3073 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.831663][ T29] audit: type=1400 audit(1720836718.087:84): avc: denied { unmount } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.964845][ T3073] cgroup: Unknown subsys name 'rlimit' [ 23.087848][ T29] audit: type=1400 audit(1720836718.367:85): avc: denied { create } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.108345][ T29] audit: type=1400 audit(1720836718.367:86): avc: denied { write } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.123427][ T3074] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.128691][ T29] audit: type=1400 audit(1720836718.367:87): avc: denied { read } for pid=3073 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.147953][ T3073] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.157515][ T29] audit: type=1400 audit(1720836718.367:88): avc: denied { mounton } for pid=3073 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.191013][ T29] audit: type=1400 audit(1720836718.367:89): avc: denied { mount } for pid=3073 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.214331][ T29] audit: type=1400 audit(1720836718.417:90): avc: denied { relabelto } for pid=3074 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.239859][ T29] audit: type=1400 audit(1720836718.417:91): avc: denied { write } for pid=3074 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.605754][ T3081] chnl_net:caif_netlink_parms(): no params data found [ 24.663553][ T3088] chnl_net:caif_netlink_parms(): no params data found [ 24.674369][ T3081] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.681487][ T3081] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.688748][ T3081] bridge_slave_0: entered allmulticast mode [ 24.695262][ T3081] bridge_slave_0: entered promiscuous mode [ 24.703867][ T3081] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.710907][ T3081] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.718055][ T3081] bridge_slave_1: entered allmulticast mode [ 24.724416][ T3081] bridge_slave_1: entered promiscuous mode [ 24.733806][ T3092] chnl_net:caif_netlink_parms(): no params data found [ 24.761458][ T3086] chnl_net:caif_netlink_parms(): no params data found [ 24.785272][ T3081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.807408][ T3081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.841910][ T3088] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.848969][ T3088] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.856149][ T3088] bridge_slave_0: entered allmulticast mode [ 24.862437][ T3088] bridge_slave_0: entered promiscuous mode [ 24.880271][ T3081] team0: Port device team_slave_0 added [ 24.886069][ T3088] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.893317][ T3088] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.901011][ T3088] bridge_slave_1: entered allmulticast mode [ 24.907359][ T3088] bridge_slave_1: entered promiscuous mode [ 24.923158][ T3092] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.930270][ T3092] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.937897][ T3092] bridge_slave_0: entered allmulticast mode [ 24.944136][ T3092] bridge_slave_0: entered promiscuous mode [ 24.950862][ T3081] team0: Port device team_slave_1 added [ 24.974078][ T3086] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.981124][ T3086] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.988209][ T3086] bridge_slave_0: entered allmulticast mode [ 24.994539][ T3086] bridge_slave_0: entered promiscuous mode [ 25.001069][ T3092] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.008125][ T3092] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.015228][ T3092] bridge_slave_1: entered allmulticast mode [ 25.021427][ T3092] bridge_slave_1: entered promiscuous mode [ 25.037634][ T3088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.046871][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.053886][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.079821][ T3081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.092350][ T3086] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.099503][ T3086] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.106627][ T3086] bridge_slave_1: entered allmulticast mode [ 25.113229][ T3086] bridge_slave_1: entered promiscuous mode [ 25.124635][ T3088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.133904][ T3081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.140827][ T3081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.166721][ T3081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.210085][ T3086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.220181][ T3092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.231676][ T3092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.241250][ T3088] team0: Port device team_slave_0 added [ 25.248776][ T3081] hsr_slave_0: entered promiscuous mode [ 25.254789][ T3081] hsr_slave_1: entered promiscuous mode [ 25.261462][ T3086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.275407][ T3091] chnl_net:caif_netlink_parms(): no params data found [ 25.290570][ T3088] team0: Port device team_slave_1 added [ 25.314782][ T3092] team0: Port device team_slave_0 added [ 25.325166][ T3086] team0: Port device team_slave_0 added [ 25.339403][ T3092] team0: Port device team_slave_1 added [ 25.349259][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.356205][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.382090][ T3088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.393440][ T3086] team0: Port device team_slave_1 added [ 25.410912][ T3088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.417878][ T3088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.443753][ T3088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.462544][ T3092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.469523][ T3092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.495447][ T3092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.508435][ T3092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.515403][ T3092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.541322][ T3092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.558907][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.565900][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.591782][ T3086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.617756][ T3086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.624770][ T3086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.650671][ T3086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.678583][ T3088] hsr_slave_0: entered promiscuous mode [ 25.684440][ T3088] hsr_slave_1: entered promiscuous mode [ 25.690402][ T3088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.698010][ T3088] Cannot create hsr debugfs directory [ 25.712839][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.719945][ T3091] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.727113][ T3091] bridge_slave_0: entered allmulticast mode [ 25.733669][ T3091] bridge_slave_0: entered promiscuous mode [ 25.754655][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.761800][ T3091] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.769666][ T3091] bridge_slave_1: entered allmulticast mode [ 25.775861][ T3091] bridge_slave_1: entered promiscuous mode [ 25.784375][ T3086] hsr_slave_0: entered promiscuous mode [ 25.790332][ T3086] hsr_slave_1: entered promiscuous mode [ 25.796222][ T3086] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.803793][ T3086] Cannot create hsr debugfs directory [ 25.818181][ T3092] hsr_slave_0: entered promiscuous mode [ 25.824702][ T3092] hsr_slave_1: entered promiscuous mode [ 25.830369][ T3092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.837994][ T3092] Cannot create hsr debugfs directory [ 25.865515][ T3091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.875765][ T3091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.933214][ T3091] team0: Port device team_slave_0 added [ 25.939648][ T3091] team0: Port device team_slave_1 added [ 25.986863][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.993907][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.019845][ T3091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.032792][ T3091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.039779][ T3091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.065728][ T3091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.078638][ T3081] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.091323][ T3081] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.112165][ T3081] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.120729][ T3081] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.140509][ T3091] hsr_slave_0: entered promiscuous mode [ 26.146571][ T3091] hsr_slave_1: entered promiscuous mode [ 26.152269][ T3091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.159818][ T3091] Cannot create hsr debugfs directory [ 26.198345][ T3088] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.206734][ T3088] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.224384][ T3088] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.244970][ T3088] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.269694][ T3092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.284594][ T3092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.292922][ T3092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.310772][ T3092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.346036][ T3086] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.354938][ T3086] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.372455][ T3081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.383931][ T3086] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.399172][ T3091] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.407563][ T3086] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.420204][ T3081] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.427327][ T3091] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.436081][ T3091] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.450458][ T3091] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.459829][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.466949][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.499124][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.506246][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.521999][ T3092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.554618][ T3092] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.568548][ T3088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.589927][ T3088] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.597911][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.605030][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.623983][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.631045][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.660519][ T3092] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.671075][ T3092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.691111][ T3159] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.698188][ T3159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.707376][ T3159] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.714511][ T3159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.756725][ T3081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.768385][ T3091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.784264][ T3092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.796367][ T3086] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.807185][ T3091] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.821997][ T3088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.838365][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.845449][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.860264][ T3086] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.885861][ T3160] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.892904][ T3160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.901681][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.908794][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.920044][ T3160] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.927122][ T3160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.947395][ T3086] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.957792][ T3086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.995744][ T3092] veth0_vlan: entered promiscuous mode [ 27.027636][ T3092] veth1_vlan: entered promiscuous mode [ 27.060711][ T3092] veth0_macvtap: entered promiscuous mode [ 27.067767][ T3081] veth0_vlan: entered promiscuous mode [ 27.075798][ T3081] veth1_vlan: entered promiscuous mode [ 27.085132][ T3092] veth1_macvtap: entered promiscuous mode [ 27.101148][ T3086] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.121044][ T3088] veth0_vlan: entered promiscuous mode [ 27.132085][ T3092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.156880][ T3092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.168048][ T3081] veth0_macvtap: entered promiscuous mode [ 27.176644][ T3088] veth1_vlan: entered promiscuous mode [ 27.185973][ T3081] veth1_macvtap: entered promiscuous mode [ 27.197952][ T3092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.206879][ T3092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.215660][ T3092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.224437][ T3092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.236887][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.247482][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.258261][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.269576][ T3081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.280093][ T3081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.291461][ T3081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.303847][ T3091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.315331][ T3088] veth0_macvtap: entered promiscuous mode [ 27.322124][ T3081] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.330899][ T3081] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.339660][ T3081] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.348351][ T3081] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.369650][ T3088] veth1_macvtap: entered promiscuous mode [ 27.382928][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.393422][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.403212][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.413648][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.424819][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.434007][ T3086] veth0_vlan: entered promiscuous mode [ 27.448016][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.458595][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.468497][ T3088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.478910][ T3088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.491949][ T3088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.502905][ T3086] veth1_vlan: entered promiscuous mode [ 27.523626][ T3088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.532328][ T3088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.537145][ T3216] loop3: detected capacity change from 0 to 2048 [ 27.541066][ T3088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.556087][ T3088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.579427][ T3216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 27.614779][ T3086] veth0_macvtap: entered promiscuous mode [ 27.638997][ T3086] veth1_macvtap: entered promiscuous mode [ 27.660998][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.671422][ T3228] netlink: 'syz.0.6': attribute type 28 has an invalid length. [ 27.671435][ T3228] netlink: 'syz.0.6': attribute type 4 has an invalid length. [ 27.671445][ T3228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6'. [ 27.695374][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.705193][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.715691][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.725510][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 27.735974][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.767471][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.791876][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.802345][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.812217][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.822700][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.832522][ T3086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 27.843046][ T3086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 27.858170][ T3086] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.888631][ T3091] veth0_vlan: entered promiscuous mode [ 27.895013][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 27.895036][ T29] audit: type=1400 audit(1720836723.177:143): avc: denied { create } for pid=3240 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.897910][ T3091] veth1_vlan: entered promiscuous mode [ 27.914029][ T3081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 27.943807][ T3086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.945249][ T29] audit: type=1400 audit(1720836723.217:144): avc: denied { bind } for pid=3240 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.952494][ T3086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.971425][ T29] audit: type=1400 audit(1720836723.217:145): avc: denied { listen } for pid=3240 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 27.980102][ T3086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.999185][ T29] audit: type=1400 audit(1720836723.217:146): avc: denied { write } for pid=3240 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.007855][ T3086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.050900][ T29] audit: type=1400 audit(1720836723.317:147): avc: denied { accept } for pid=3240 comm="syz.0.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.071013][ T3091] veth0_macvtap: entered promiscuous mode [ 28.097063][ T3091] veth1_macvtap: entered promiscuous mode [ 28.120262][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.130702][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.135648][ T3249] loop1: detected capacity change from 0 to 128 [ 28.140521][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.148888][ T29] audit: type=1400 audit(1720836723.387:148): avc: denied { create } for pid=3246 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.157098][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.176533][ T29] audit: type=1400 audit(1720836723.397:149): avc: denied { ioctl } for pid=3246 comm="syz.0.11" path="socket:[2935]" dev="sockfs" ino=2935 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 28.186246][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.218906][ T3249] ======================================================= [ 28.218906][ T3249] WARNING: The mand mount option has been deprecated and [ 28.218906][ T3249] and is ignored by this kernel. Remove the mand [ 28.218906][ T3249] option from the mount to silence this warning. [ 28.218906][ T3249] ======================================================= [ 28.221080][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.259651][ T3249] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.265830][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.279229][ T3249] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 28.288281][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.316125][ T29] audit: type=1326 audit(1720836723.597:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3248 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde470c3bd9 code=0x7ffc0000 [ 28.336318][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.339331][ T29] audit: type=1326 audit(1720836723.597:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3248 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fde470c3bd9 code=0x7ffc0000 [ 28.356976][ T3255] loop0: detected capacity change from 0 to 256 [ 28.369585][ T29] audit: type=1326 audit(1720836723.597:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3248 comm="syz.1.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde470c3bd9 code=0x7ffc0000 [ 28.417010][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.427478][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.437321][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.447744][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.457600][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.468099][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.478002][ T3091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.488456][ T3091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.502086][ T3091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.510168][ T3088] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.524138][ T3091] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.530497][ T3258] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3258 comm=syz.3.15 [ 28.532840][ T3091] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.554055][ T3091] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.562779][ T3091] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.728630][ T3266] loop2: detected capacity change from 0 to 8192 [ 28.811030][ T3283] loop4: detected capacity change from 0 to 128 [ 28.874124][ T3075] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 28.914448][ T3293] loop4: detected capacity change from 0 to 128 [ 28.932653][ T3290] loop3: detected capacity change from 0 to 512 [ 28.949429][ T3290] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz.3.24: corrupted in-inode xattr: bad e_name length [ 28.971735][ T3290] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz.3.24: couldn't read orphan inode 15 (err -117) [ 28.986547][ T3290] EXT4-fs (loop3): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.067565][ T3306] loop4: detected capacity change from 0 to 1024 [ 29.108738][ T3306] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.126937][ T3306] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.178948][ T3306] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.29: corrupted xattr block 128: invalid ea_ino [ 29.231053][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 29.257398][ T3318] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3318 comm=syz.0.33 [ 29.282374][ T3306] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.29: corrupted xattr block 128: invalid ea_ino [ 29.313478][ T3324] loop1: detected capacity change from 0 to 128 [ 29.315695][ T3306] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 29.343499][ T3306] EXT4-fs error (device loop4): ext4_xattr_block_find:1871: inode #15: comm syz.4.29: corrupted xattr block 128: invalid ea_ino [ 29.363711][ T3075] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 29.485065][ T3333] loop1: detected capacity change from 0 to 128 [ 29.615486][ T3341] loop0: detected capacity change from 0 to 256 [ 29.646949][ T3337] loop2: detected capacity change from 0 to 8192 [ 29.853105][ T3091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.981446][ T3355] loop4: detected capacity change from 0 to 128 [ 30.069050][ T3081] EXT4-fs (loop3): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 30.120818][ T3371] loop4: detected capacity change from 0 to 128 [ 30.137097][ T3371] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 30.152484][ T3371] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 30.190218][ T3091] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.269910][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 30.392452][ T3397] loop2: detected capacity change from 0 to 1024 [ 30.416823][ T3397] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.440569][ T3397] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.465962][ T3397] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.58: corrupted xattr block 128: invalid ea_ino [ 30.534806][ T3397] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 30.553518][ T3397] EXT4-fs error (device loop2): ext4_xattr_block_get:596: inode #15: comm syz.2.58: corrupted xattr block 128: invalid ea_ino [ 30.572375][ T3383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 30.582048][ T3397] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 30.593858][ T3397] EXT4-fs error (device loop2): ext4_xattr_block_find:1871: inode #15: comm syz.2.58: corrupted xattr block 128: invalid ea_ino [ 30.633480][ T3409] loop4: detected capacity change from 0 to 128 [ 30.672540][ T3405] loop0: detected capacity change from 0 to 8192 [ 30.710689][ T3420] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 30.715324][ T3421] loop1: detected capacity change from 0 to 512 [ 30.732163][ T3421] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz.1.63: corrupted in-inode xattr: bad e_name length [ 30.747107][ T3421] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz.1.63: couldn't read orphan inode 15 (err -117) [ 30.759482][ T3421] EXT4-fs (loop1): mounted filesystem 00000004-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.964125][ T3434] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3434 comm=syz.4.67 [ 31.099241][ T3449] loop0: detected capacity change from 0 to 256 [ 31.157928][ T3086] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.241489][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 31.332654][ T3476] loop7: detected capacity change from 0 to 16384 [ 31.386109][ T3088] EXT4-fs (loop1): unmounting filesystem 00000004-0000-0000-0000-000000000000. [ 31.419927][ T3474] bridge0: entered promiscuous mode [ 31.425377][ T3474] bridge0: entered allmulticast mode [ 31.460372][ T3481] openvswitch: netlink: IP tunnel dst address not specified [ 31.502166][ T3481] syz.3.76 (3481) used greatest stack depth: 11176 bytes left [ 31.569501][ T3485] loop1: detected capacity change from 0 to 8192 [ 31.652482][ T3496] loop3: detected capacity change from 0 to 128 [ 31.697078][ T3496] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.749371][ T3496] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.760090][ T3503] block device autoloading is deprecated and will be removed. [ 31.775251][ T3503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.813769][ T3081] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.820561][ T3514] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3514 comm=syz.4.84 [ 31.998505][ T3533] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.299174][ T3558] loop3: detected capacity change from 0 to 128 [ 32.352985][ T3551] loop4: detected capacity change from 0 to 2048 [ 32.369277][ T3529] TCP: TCP_TX_DELAY enabled [ 32.374058][ T3075] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 32.392708][ T3564] loop2: detected capacity change from 0 to 128 [ 32.410335][ T3551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.428231][ T3564] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.466624][ T3574] syz.3.93 uses obsolete (PF_INET,SOCK_PACKET) [ 32.486491][ T3564] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 32.569771][ T3091] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.609290][ T3086] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.630720][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 32.677983][ T3608] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 32.886904][ T3636] loop0: detected capacity change from 0 to 2048 [ 32.908494][ T3636] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.923834][ T3642] loop4: detected capacity change from 0 to 128 [ 33.119808][ T3092] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.198558][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 33.256838][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 33.256852][ T29] audit: type=1326 audit(1720836728.537:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.286690][ T29] audit: type=1326 audit(1720836728.537:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.309943][ T29] audit: type=1326 audit(1720836728.537:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.319728][ T3694] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 33.333386][ T29] audit: type=1326 audit(1720836728.537:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.362194][ T3698] loop3: detected capacity change from 0 to 256 [ 33.363878][ T29] audit: type=1326 audit(1720836728.537:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.382442][ C1] hrtimer: interrupt took 37303 ns [ 33.393099][ T29] audit: type=1326 audit(1720836728.537:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.421851][ T29] audit: type=1326 audit(1720836728.537:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.458991][ T3704] loop0: detected capacity change from 0 to 128 [ 33.466080][ T2785] ================================================================== [ 33.474152][ T2785] BUG: KCSAN: data-race in __dentry_kill / step_into [ 33.480813][ T2785] [ 33.483118][ T2785] read-write to 0xffff888108808a80 of 4 bytes by task 3075 on cpu 0: [ 33.491162][ T2785] __dentry_kill+0x228/0x4b0 [ 33.495738][ T2785] dput+0x5c/0xd0 [ 33.499366][ T2785] do_unlinkat+0x257/0x4c0 [ 33.503777][ T2785] __x64_sys_unlink+0x30/0x40 [ 33.508446][ T2785] x64_sys_call+0x28a3/0x2d70 [ 33.513112][ T2785] do_syscall_64+0xc9/0x1c0 [ 33.517612][ T2785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.523507][ T2785] [ 33.525822][ T2785] read to 0xffff888108808a80 of 4 bytes by task 2785 on cpu 1: [ 33.533344][ T2785] step_into+0x12f/0x810 [ 33.537570][ T2785] walk_component+0x169/0x230 [ 33.542229][ T2785] path_lookupat+0x10a/0x2b0 [ 33.546804][ T2785] filename_lookup+0x127/0x300 [ 33.551553][ T2785] user_path_at_empty+0x42/0x120 [ 33.556479][ T2785] do_readlinkat+0x92/0x210 [ 33.560978][ T2785] __x64_sys_readlink+0x47/0x60 [ 33.565821][ T2785] x64_sys_call+0x264b/0x2d70 [ 33.570487][ T2785] do_syscall_64+0xc9/0x1c0 [ 33.574982][ T2785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.580863][ T2785] [ 33.583168][ T2785] value changed: 0x00600008 -> 0x00008008 [ 33.588863][ T2785] [ 33.591168][ T2785] Reported by Kernel Concurrency Sanitizer on: [ 33.597315][ T2785] CPU: 1 PID: 2785 Comm: udevd Not tainted 6.10.0-rc7-syzkaller-00254-g528dd46d0fc3 #0 [ 33.606929][ T2785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 33.616991][ T2785] ================================================================== [ 33.626415][ T29] audit: type=1326 audit(1720836728.537:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.649707][ T29] audit: type=1326 audit(1720836728.537:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.672974][ T29] audit: type=1326 audit(1720836728.537:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3685 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f530081dbd9 code=0x7ffc0000 [ 33.714064][ T3075] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0