last executing test programs: 2.297069523s ago: executing program 0: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 2.18887828s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc15176000000000000000f00"}) r1 = syz_open_pts(r0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)) timer_create(0x0, 0x0, 0x0) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 2.159022405s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004840)={0x3c, r1, 0x731, 0x0, 0x0, {0x38}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}, 0x1, 0x2}, 0x0) 2.117413681s ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(r1, r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000000)={r2}, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) sendmsg$inet_sctp(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x201, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}], 0x30}, 0x4005) 2.079738077s ago: executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000240), 0x0}, 0x20) bpf$BPF_PROG_QUERY(0x9, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f00000000c0)={0x0, 0x0, 0x9, 0x0, @vifc_lcl_ifindex, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x200116c0}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x100000530) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup=r1, r3, 0x0, 0x8, 0x0, @link_id=0xffffffffffffffff}, 0x20) 1.965004705s ago: executing program 3: io_submit(0x0, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb6, 0x0, &(0x7f00000000c0)) 1.877104789s ago: executing program 3: mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r1, 0x4, 0x2400) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) fcntl$setstatus(r0, 0x4, 0x0) 1.811734949s ago: executing program 3: prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x7c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x40, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 1.721528333s ago: executing program 2: syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 1.638857785s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) readv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)=""/215, 0x7ffff000}], 0x6) r2 = signalfd4(r1, &(0x7f0000000040), 0x8, 0x0) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) sendto$inet6(r3, &(0x7f0000000100)="2201926ed324b6067121cb3b440d737647e7bd41c0eef5ef522cb8ac64862c8e30745879dc4ac65eccfaa9ba2781ed472393dceacc5d83d73ac39143803e219c7b62863f846888271e6576511b127b2faab4c2dd43fea801ba5e1e86e93548e18113e43b12102c175556bf590327bd91e7f49e51b308932bfce141ab44a8361c6b26de3fcb24481b14bef61dbb400c51b9ee2f182781b4cf2be78fd70bdd5441598c025e69e321d7444d72dc27b1c18265cd0d26cf", 0xb5, 0x24008800, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @dev={0xfe, 0x80, '\x00', 0x22}, 0xffff8000}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000060000000060a010400000000000000000100000008000b400000000038000480240001800b0001007470726f7879000014000280080001400000000a0800024000003eb9100001800700010072740000040002800900010073797a30"], 0xd4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_io_uring_setup(0x1898, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.472840131s ago: executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x4}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 1.077027513s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020701200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x40, &(0x7f0000000140), 0x84, 0x4d7, &(0x7f0000000c00)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000078000000090a010400000000000000000100000008000a40000000000900020073797a30000000000900010073797a300000000008000540000000213c0011800a0001006c69"], 0xc0}}, 0x0) 821.179953ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x45}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x42}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)='%pB \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_da_write_pages\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x4000) 772.50355ms ago: executing program 2: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r0, &(0x7f0000000640)=""/65, 0x41) write$UHID_CREATE(r0, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x120) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[], 0x0, 0x26}, 0x20) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000001fc0)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 661.872117ms ago: executing program 3: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r0, 0x81, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) 606.664576ms ago: executing program 3: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r1, &(0x7f0000001640)=[{{0x0, 0x600, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x2}], 0x2, 0x0, 0xd64}}], 0x300, 0x0, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r0, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) 602.565876ms ago: executing program 4: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x11, 0x0, &(0x7f0000000040)) 551.071264ms ago: executing program 4: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r0) 465.763718ms ago: executing program 1: writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a75126", 0x2b}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @remote}, {0x0, @broadcast}, 0x1c, {0x2, 0x0, @dev}, 'bond_slave_0\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0x55}], 0x1, 0xffff, 0x0) 451.30718ms ago: executing program 4: ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) write$tun(r0, &(0x7f0000000240)={@void, @val, @eth={@empty, @remote, @val, {@x25}}}, 0x23) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) lseek(r2, 0x1293800000000, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280)) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/arp\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000140)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) dup3(r4, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqsrc(r7, 0x0, 0x27, &(0x7f0000000180)={@broadcast, @private=0xa010100, @multicast2}, 0xc) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[{0x10}, {0x10, 0x84}], 0x20}}], 0x2, 0x0) 383.698541ms ago: executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000380)=0xd, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) 364.991703ms ago: executing program 1: setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) inotify_init1(0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x400, 0x0, @dev, 0x1}, 0x1c) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000003c0)) r2 = syz_open_pts(r0, 0x2401) dup3(r2, r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs\x00') preadv(r3, &(0x7f0000000200)=[{&(0x7f0000000540)=""/191, 0xbf}], 0x1, 0x8f, 0x0) 327.247749ms ago: executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f00000003c0)={[{@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@quota}, {@noinit_itable}, {@errors_continue}, {@errors_continue}, {@errors_remount}, {@delalloc}, {@auto_da_alloc}, {@norecovery}, {@errors_continue}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0xee, 0x442, &(0x7f0000000d00)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x4}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) 287.076486ms ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{&(0x7f0000001cc0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000001d00)=[@hopopts={{0x18}}, @hopopts_2292={{0x18}}], 0x30}}], 0x1, 0x0) 271.211018ms ago: executing program 4: ioperm(0x0, 0x3, 0x8) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) 246.733672ms ago: executing program 1: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)={0x2c, r0, 0x81, 0x0, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}]}, 0x2c}}, 0x0) 193.39411ms ago: executing program 1: prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x11, 0x0, &(0x7f0000000040)) 110.020103ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x11, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}}, 0x0) 96.355135ms ago: executing program 4: r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0xc8) mknod(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) unshare(0x62040200) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000004c0)={'nat\x00'}, &(0x7f0000000280)=0xa2) 0s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) r3 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x62) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="0217000005000000000000000000000003000240"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): [ 23.200565][ T29] audit: type=1400 audit(1719043152.057:81): avc: denied { read } for pid=2765 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. 2024/06/22 07:59:17 fuzzer started 2024/06/22 07:59:17 dialing manager at 10.128.0.163:30030 [ 28.418545][ T29] audit: type=1400 audit(1719043157.267:82): avc: denied { node_bind } for pid=3074 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 28.446001][ T29] audit: type=1400 audit(1719043157.297:83): avc: denied { name_bind } for pid=3074 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 28.513419][ T29] audit: type=1400 audit(1719043157.367:84): avc: denied { mounton } for pid=3083 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.540347][ T29] audit: type=1400 audit(1719043157.367:85): avc: denied { mount } for pid=3083 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.545728][ T3082] cgroup: Unknown subsys name 'net' [ 28.567646][ T29] audit: type=1400 audit(1719043157.387:86): avc: denied { create } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.592673][ T29] audit: type=1400 audit(1719043157.387:87): avc: denied { write } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.615425][ T29] audit: type=1400 audit(1719043157.387:88): avc: denied { read } for pid=3086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.637388][ T29] audit: type=1400 audit(1719043157.397:89): avc: denied { mounton } for pid=3082 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.660443][ T29] audit: type=1400 audit(1719043157.397:90): avc: denied { mount } for pid=3082 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.682778][ T29] audit: type=1400 audit(1719043157.437:91): avc: denied { unmount } for pid=3082 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.695063][ T3089] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.760120][ T3088] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.833436][ T3082] cgroup: Unknown subsys name 'rlimit' 2024/06/22 07:59:17 suppressing KCSAN reports in functions: 'xas_clear_mark' 'do_select' '__xa_set_mark' 2024/06/22 07:59:17 starting 5 executor processes [ 29.632192][ T3102] chnl_net:caif_netlink_parms(): no params data found [ 29.681542][ T3099] chnl_net:caif_netlink_parms(): no params data found [ 29.717579][ T3109] chnl_net:caif_netlink_parms(): no params data found [ 29.797838][ T3102] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.805478][ T3102] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.813507][ T3102] bridge_slave_0: entered allmulticast mode [ 29.820509][ T3102] bridge_slave_0: entered promiscuous mode [ 29.839970][ T3102] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.847273][ T3102] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.855168][ T3102] bridge_slave_1: entered allmulticast mode [ 29.862031][ T3102] bridge_slave_1: entered promiscuous mode [ 29.878323][ T3099] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.885573][ T3099] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.893091][ T3099] bridge_slave_0: entered allmulticast mode [ 29.899609][ T3099] bridge_slave_0: entered promiscuous mode [ 29.909106][ T3099] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.916577][ T3099] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.924109][ T3099] bridge_slave_1: entered allmulticast mode [ 29.931333][ T3099] bridge_slave_1: entered promiscuous mode [ 29.942798][ T3117] chnl_net:caif_netlink_parms(): no params data found [ 29.961118][ T3112] chnl_net:caif_netlink_parms(): no params data found [ 29.982363][ T3109] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.989851][ T3109] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.997286][ T3109] bridge_slave_0: entered allmulticast mode [ 30.004456][ T3109] bridge_slave_0: entered promiscuous mode [ 30.019306][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.030178][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.050379][ T3109] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.057631][ T3109] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.065025][ T3109] bridge_slave_1: entered allmulticast mode [ 30.071492][ T3109] bridge_slave_1: entered promiscuous mode [ 30.093528][ T3099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.104725][ T3109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.128588][ T3099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.145069][ T3109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.167989][ T3102] team0: Port device team_slave_0 added [ 30.181892][ T3099] team0: Port device team_slave_0 added [ 30.189309][ T3099] team0: Port device team_slave_1 added [ 30.200620][ T3102] team0: Port device team_slave_1 added [ 30.232253][ T3117] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.239404][ T3117] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.248011][ T3117] bridge_slave_0: entered allmulticast mode [ 30.257065][ T3117] bridge_slave_0: entered promiscuous mode [ 30.266204][ T3117] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.273347][ T3117] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.280712][ T3117] bridge_slave_1: entered allmulticast mode [ 30.287471][ T3117] bridge_slave_1: entered promiscuous mode [ 30.294269][ T3109] team0: Port device team_slave_0 added [ 30.328583][ T3109] team0: Port device team_slave_1 added [ 30.340560][ T3099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.347800][ T3099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.374925][ T3099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.386931][ T3102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.394557][ T3102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.423365][ T3102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.441088][ T3117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.453068][ T3117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.467791][ T3099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.474801][ T3099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.501035][ T3099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.512160][ T3102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.519565][ T3102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.547192][ T3102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.558575][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.566104][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.573568][ T3112] bridge_slave_0: entered allmulticast mode [ 30.580390][ T3112] bridge_slave_0: entered promiscuous mode [ 30.593356][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.600530][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.628192][ T3109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.642591][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.649781][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.676025][ T3109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.696946][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.704079][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.711442][ T3112] bridge_slave_1: entered allmulticast mode [ 30.718040][ T3112] bridge_slave_1: entered promiscuous mode [ 30.731100][ T3117] team0: Port device team_slave_0 added [ 30.738174][ T3117] team0: Port device team_slave_1 added [ 30.776262][ T3109] hsr_slave_0: entered promiscuous mode [ 30.782327][ T3109] hsr_slave_1: entered promiscuous mode [ 30.800878][ T3112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.811797][ T3112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.826541][ T3117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.833717][ T3117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.859931][ T3117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.892573][ T3117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.899562][ T3117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.926004][ T3117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.939122][ T3102] hsr_slave_0: entered promiscuous mode [ 30.945736][ T3102] hsr_slave_1: entered promiscuous mode [ 30.951923][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.959810][ T3102] Cannot create hsr debugfs directory [ 30.967881][ T3099] hsr_slave_0: entered promiscuous mode [ 30.974719][ T3099] hsr_slave_1: entered promiscuous mode [ 30.980803][ T3099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.989012][ T3099] Cannot create hsr debugfs directory [ 31.001182][ T3112] team0: Port device team_slave_0 added [ 31.012985][ T3112] team0: Port device team_slave_1 added [ 31.075895][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.082970][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.111539][ T3112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.142598][ T3117] hsr_slave_0: entered promiscuous mode [ 31.149048][ T3117] hsr_slave_1: entered promiscuous mode [ 31.155172][ T3117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.162778][ T3117] Cannot create hsr debugfs directory [ 31.168929][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.176363][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.202726][ T3112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.272279][ T3112] hsr_slave_0: entered promiscuous mode [ 31.278368][ T3112] hsr_slave_1: entered promiscuous mode [ 31.284682][ T3112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.292456][ T3112] Cannot create hsr debugfs directory [ 31.344174][ T3109] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.355023][ T3109] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.363718][ T3109] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.388134][ T3109] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.463976][ T3099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.473138][ T3099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.501557][ T3099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.515768][ T3099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.534398][ T3102] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.552122][ T3102] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.561596][ T3102] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.572012][ T3102] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.605056][ T3117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.619421][ T3117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.628715][ T3117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.655349][ T3117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.681060][ T3112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.691237][ T3112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.701181][ T3112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.722681][ T3112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.736983][ T3109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.768314][ T3099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.806862][ T3099] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.817801][ T3109] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.834083][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.841828][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.851732][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.859008][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.876004][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.886467][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.894420][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.912499][ T3117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.922940][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.931080][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.959953][ T3102] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.981740][ T3117] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.996946][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.004242][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.023071][ T3109] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.034920][ T3109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.051564][ T3182] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.060185][ T3182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.072797][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.079983][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.112095][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.119475][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.168656][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.189340][ T3112] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.213136][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.220296][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.229288][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.236601][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.262248][ T3109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.275935][ T3117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.286697][ T3117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.304951][ T3099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.339488][ T3102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.350221][ T3112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.459392][ T3117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.502679][ T3112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.518374][ T3109] veth0_vlan: entered promiscuous mode [ 32.560939][ T3109] veth1_vlan: entered promiscuous mode [ 32.594308][ T3102] veth0_vlan: entered promiscuous mode [ 32.648043][ T3109] veth0_macvtap: entered promiscuous mode [ 32.656098][ T3102] veth1_vlan: entered promiscuous mode [ 32.677519][ T3117] veth0_vlan: entered promiscuous mode [ 32.685579][ T3109] veth1_macvtap: entered promiscuous mode [ 32.699213][ T3099] veth0_vlan: entered promiscuous mode [ 32.716792][ T3102] veth0_macvtap: entered promiscuous mode [ 32.733183][ T3099] veth1_vlan: entered promiscuous mode [ 32.742375][ T3117] veth1_vlan: entered promiscuous mode [ 32.753567][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.764494][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.776099][ T3102] veth1_macvtap: entered promiscuous mode [ 32.787453][ T3112] veth0_vlan: entered promiscuous mode [ 32.794933][ T3109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.805223][ T3109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.814903][ T3109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.823950][ T3109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.848890][ T3117] veth0_macvtap: entered promiscuous mode [ 32.858189][ T3117] veth1_macvtap: entered promiscuous mode [ 32.884534][ T3102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.895721][ T3102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.907887][ T3102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.917007][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.928794][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.941288][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.953901][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.965362][ T3117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.975154][ T3117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.986036][ T3117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.001095][ T3117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.011365][ T3117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.021619][ T3117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.030829][ T3117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.041639][ T3117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.058122][ T3112] veth1_vlan: entered promiscuous mode [ 33.070939][ T3102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.082287][ T3102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.093264][ T3102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.105603][ T3102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.118359][ T3102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.127801][ T3099] veth0_macvtap: entered promiscuous mode [ 33.137260][ T3099] veth1_macvtap: entered promiscuous mode [ 33.157065][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.167688][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.177667][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.188210][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.198203][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.209305][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.225182][ T3099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.236131][ T3102] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.248769][ T3102] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.260101][ T3102] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.269186][ T3102] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.294583][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.306204][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.317878][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.328992][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.340234][ T3099] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.351267][ T3099] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.364495][ T3099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.388622][ T3099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.397558][ T3099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.407400][ T3099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.417904][ T3099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.437457][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 33.437477][ T29] audit: type=1400 audit(1719043162.287:120): avc: denied { prog_load } for pid=3249 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.465060][ T29] audit: type=1400 audit(1719043162.287:121): avc: denied { bpf } for pid=3249 comm="syz-executor.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 33.495945][ T3112] veth0_macvtap: entered promiscuous mode [ 33.510997][ T3112] veth1_macvtap: entered promiscuous mode [ 33.538064][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.548729][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.559213][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.569783][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.579833][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.592007][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.602513][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.613952][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.627464][ T3257] loop0: detected capacity change from 0 to 1024 [ 33.630805][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.643682][ T29] audit: type=1400 audit(1719043162.487:122): avc: denied { mounton } for pid=3254 comm="syz-executor.0" path="/root/syzkaller-testdir2667619477/syzkaller.a4Ldk0/0/file1" dev="sda1" ino=1955 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.676611][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.679550][ T3250] syz-executor.3 (3250) used greatest stack depth: 11320 bytes left [ 33.688518][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.688535][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.719182][ T3257] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 33.720536][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.720553][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.720573][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.720588][ T3112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.731558][ T29] audit: type=1400 audit(1719043162.567:123): avc: denied { map_create } for pid=3259 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.739676][ T3112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.743105][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.751410][ T29] audit: type=1400 audit(1719043162.567:124): avc: denied { map_read map_write } for pid=3259 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 33.764232][ T3112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.843829][ T3112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.852870][ T3112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.861766][ T3112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.870887][ T29] audit: type=1400 audit(1719043162.667:125): avc: denied { read write } for pid=3263 comm="syz-executor.4" name="virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.883015][ T3257] System zones: 0-1 [ 33.895341][ T29] audit: type=1400 audit(1719043162.667:126): avc: denied { open } for pid=3263 comm="syz-executor.4" path="/dev/virtual_nci" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.895384][ T3257] , 3-12 [ 33.939434][ T29] audit: type=1400 audit(1719043162.787:127): avc: denied { create } for pid=3269 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.960011][ T29] audit: type=1400 audit(1719043162.787:128): avc: denied { setopt } for pid=3269 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.980397][ T29] audit: type=1400 audit(1719043162.787:129): avc: denied { bind } for pid=3269 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.016998][ T3178] kernel write not supported for file /virtual_nci (pid: 3178 comm: kworker/0:3) [ 34.034757][ T3257] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.097420][ T3280] loop3: detected capacity change from 0 to 512 [ 34.128258][ T3117] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.141781][ T3283] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 34.178370][ T3280] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.192992][ T3280] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.273711][ T3280] EXT4-fs (loop3): 1 truncate cleaned up [ 34.321635][ T3280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.399478][ T3280] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 34.418115][ T3280] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1766: inode #15: comm syz-executor.3: unable to update i_inline_off [ 34.432721][ T3280] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2856: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.553932][ T3280] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.3: corrupted in-inode xattr: overlapping e_value [ 34.663443][ T3109] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.909373][ T3282] syz-executor.2 (3282) used greatest stack depth: 10768 bytes left [ 35.099795][ T3323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.145068][ T3178] kernel write not supported for file /virtual_nci (pid: 3178 comm: kworker/0:3) [ 35.193262][ T3330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 35.658582][ T3367] loop4: detected capacity change from 0 to 764 [ 35.673885][ T3365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 35.707105][ T3367] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FR]L3 index 0 [ 35.832007][ T3380] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 36.095203][ T3400] loop4: detected capacity change from 0 to 512 [ 36.172519][ T3411] loop2: detected capacity change from 0 to 164 [ 36.190726][ T3411] Unable to read rock-ridge attributes [ 36.198860][ T3413] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 36.545052][ T3435] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 36.832416][ T3184] kernel write not supported for file /ppp (pid: 3184 comm: kworker/1:5) [ 36.878865][ T3452] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 37.146241][ T3466] 9pnet_fd: Insufficient options for proto=fd [ 37.155551][ T3466] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.171987][ T3466] team_slave_0: entered promiscuous mode [ 37.177822][ T3466] team_slave_1: entered promiscuous mode [ 37.184729][ T3466] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 37.194101][ T3466] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 37.221620][ T3466] bond0: entered promiscuous mode [ 37.226895][ T3466] bond_slave_0: entered promiscuous mode [ 37.234088][ T3466] bond_slave_1: entered promiscuous mode [ 37.240121][ T3466] macvlan2: entered promiscuous mode [ 37.246503][ T3466] team0: entered promiscuous mode [ 37.310335][ T3471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 37.894525][ T3487] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 38.056881][ T3469] syz-executor.1 (3469) used greatest stack depth: 10664 bytes left [ 38.183617][ T3498] loop0: detected capacity change from 0 to 2048 [ 38.222961][ T3504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 38.240156][ T3498] loop0: p1 < > p4 [ 38.245763][ T3498] loop0: p4 size 8388608 extends beyond EOD, truncated [ 38.262042][ T2783] loop0: p1 < > p4 [ 38.267057][ T3507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 38.278014][ T2783] loop0: p4 size 8388608 extends beyond EOD, truncated [ 38.324513][ T3511] loop1: detected capacity change from 0 to 256 [ 38.337735][ T3511] FAT-fs (loop1): Unrecognized mount option "no2^ts" or missing value [ 38.536855][ T3527] loop3: detected capacity change from 0 to 512 [ 38.591121][ T3092] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 38.934458][ T3529] loop4: detected capacity change from 0 to 512 [ 38.945189][ T3529] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature [ 38.958706][ T3529] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 38.972231][ T3529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.985724][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 38.985752][ T29] audit: type=1400 audit(1719043167.837:199): avc: denied { mount } for pid=3528 comm="syz-executor.4" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.035501][ T29] audit: type=1400 audit(1719043167.887:200): avc: denied { unmount } for pid=3099 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.056315][ T3099] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.151360][ T29] audit: type=1400 audit(1719043168.007:201): avc: denied { write } for pid=3539 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 39.175123][ T29] audit: type=1326 audit(1719043168.027:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3510 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9e6a880a9 code=0x7fc00000 [ 39.261968][ T3549] mmap: syz-executor.1 (3549) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.379756][ T29] audit: type=1400 audit(1719043168.227:203): avc: denied { setopt } for pid=3557 comm="syz-executor.3" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.401392][ T29] audit: type=1400 audit(1719043168.227:204): avc: denied { read } for pid=3557 comm="syz-executor.3" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.441554][ T3564] loop2: detected capacity change from 0 to 512 [ 39.466227][ T3564] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 39.492012][ T3564] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 39.507130][ T3564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.556091][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.788092][ T3574] loop1: detected capacity change from 0 to 128 [ 39.805018][ T29] audit: type=1400 audit(1719043168.657:205): avc: denied { mount } for pid=3572 comm="syz-executor.1" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.834664][ T29] audit: type=1400 audit(1719043168.667:206): avc: denied { unmount } for pid=3102 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 39.951958][ T29] audit: type=1400 audit(1719043168.807:207): avc: denied { cpu } for pid=3582 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.972867][ T29] audit: type=1326 audit(1719043168.827:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3582 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e5567c0a9 code=0x0 [ 40.026734][ T3593] loop1: detected capacity change from 0 to 2048 [ 40.035637][ T3593] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 40.106861][ T3593] loop1: detected capacity change from 0 to 512 [ 40.129673][ T3593] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.152311][ T3593] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 40.167038][ T3593] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 40.199131][ T3593] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.229554][ T3593] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 255: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 40.290443][ T3102] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 40.301859][ T3607] loop0: detected capacity change from 0 to 256 [ 40.346117][ T3606] loop4: detected capacity change from 0 to 512 [ 40.446384][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 40.493946][ T3619] loop1: detected capacity change from 0 to 512 [ 40.506681][ T3619] EXT4-fs: old and new quota format mixing [ 40.570715][ T3619] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 40.818033][ T3637] loop1: detected capacity change from 0 to 2048 [ 40.852465][ T3637] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 40.879419][ T3637] loop1: detected capacity change from 0 to 512 [ 40.889961][ T3637] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.918531][ T3637] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino [ 40.947581][ T3637] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117) [ 40.968948][ T3637] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.035634][ T3637] EXT4-fs error (device loop1): ext4_find_dest_de:2111: inode #2: block 255: comm syz-executor.1: bad entry in directory: inode out of bounds - offset=0, inode=1633771873, rec_len=1024, size=1024 fake=0 [ 41.058024][ T3654] loop2: detected capacity change from 0 to 2048 [ 41.088559][ T3102] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 41.103039][ T3654] loop2: p1 < > p4 [ 41.115339][ T3654] loop2: p4 size 8388608 extends beyond EOD, truncated [ 41.464461][ T3670] loop2: detected capacity change from 0 to 512 [ 41.586786][ T3670] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 41.652106][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 41.668185][ T3670] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 41.711769][ T3686] loop0: detected capacity change from 0 to 512 [ 41.729103][ T3670] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.758153][ T3686] ======================================================= [ 41.758153][ T3686] WARNING: The mand mount option has been deprecated and [ 41.758153][ T3686] and is ignored by this kernel. Remove the mand [ 41.758153][ T3686] option from the mount to silence this warning. [ 41.758153][ T3686] ======================================================= [ 41.943653][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.961484][ T3686] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 41.970923][ T3686] System zones: 1-12 [ 41.975401][ T3686] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 33619980: comm syz-executor.0: invalid block [ 41.988343][ T3686] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1) [ 42.004639][ T3686] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor.0: bg 0: block 361: padding at end of block bitmap is not set [ 42.022005][ T3686] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 42.033626][ T3696] loop1: detected capacity change from 0 to 2048 [ 42.054223][ T3686] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 33619980 len 1 [ 42.088003][ T3686] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0) [ 42.110498][ T3696] loop1: p1 < > p4 [ 42.125779][ T3696] loop1: p4 size 8388608 extends beyond EOD, truncated [ 42.138671][ T3686] EXT4-fs (loop0): 1 truncate cleaned up [ 42.151942][ T3686] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.165000][ T2783] loop1: p1 < > p4 [ 42.174764][ T2783] loop1: p4 size 8388608 extends beyond EOD, truncated [ 42.199829][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.207387][ T35] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 42.220576][ T35] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 42.221445][ T3686] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 42.268992][ T3706] udevd[3706]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 42.281914][ T3686] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 42.292637][ T3092] udevd[3092]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 42.336145][ T3686] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 42.389369][ T3091] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.453683][ T3726] loop2: detected capacity change from 0 to 512 [ 42.528850][ T3726] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature [ 42.576009][ T3726] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 42.625978][ T3726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.701413][ T3117] syz-executor.0 (3117) used greatest stack depth: 10608 bytes left [ 42.717191][ T3112] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.744958][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.795377][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.811627][ T3737] ================================================================== [ 42.820059][ T3737] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_balance_workfn [ 42.829107][ T3737] [ 42.831479][ T3737] read-write to 0xffffffff8841c69c of 4 bytes by task 909 on cpu 1: [ 42.839683][ T3737] pcpu_balance_workfn+0x94e/0xa60 [ 42.845085][ T3737] process_scheduled_works+0x483/0x9a0 [ 42.851209][ T3737] worker_thread+0x526/0x730 [ 42.855897][ T3737] kthread+0x1d1/0x210 [ 42.860054][ T3737] ret_from_fork+0x4b/0x60 [ 42.864523][ T3737] ret_from_fork_asm+0x1a/0x30 [ 42.869352][ T3737] [ 42.871703][ T3737] read to 0xffffffff8841c69c of 4 bytes by task 3737 on cpu 0: [ 42.879281][ T3737] pcpu_alloc_noprof+0x9a7/0x10c0 [ 42.884373][ T3737] fib_nh_common_init+0x4a/0x2b0 [ 42.889357][ T3737] fib6_nh_init+0xea2/0x15c0 [ 42.894125][ T3737] ip6_route_info_create+0x7b7/0xba0 [ 42.899593][ T3737] ip6_route_add+0x26/0x120 [ 42.905971][ T3737] addrconf_permanent_addr+0x45d/0x5e0 [ 42.912344][ T3737] addrconf_notify+0x681/0x950 [ 42.917253][ T3737] raw_notifier_call_chain+0x6f/0x1d0 [ 42.922749][ T3737] call_netdevice_notifiers_info+0xae/0x100 [ 42.929736][ T3737] __dev_notify_flags+0xff/0x1a0 [ 42.934726][ T3737] dev_change_flags+0xab/0xd0 [ 42.939627][ T3737] do_setlink+0x841/0x2490 [ 42.944189][ T3737] rtnl_newlink+0x11a1/0x1690 [ 42.948990][ T3737] rtnetlink_rcv_msg+0x85e/0x910 [ 42.954148][ T3737] netlink_rcv_skb+0x12c/0x230 [ 42.959163][ T3737] rtnetlink_rcv+0x1c/0x30 [ 42.963620][ T3737] netlink_unicast+0x58d/0x660 [ 42.968433][ T3737] netlink_sendmsg+0x5ca/0x6e0 [ 42.973421][ T3737] __sock_sendmsg+0x140/0x180 [ 42.978143][ T3737] __sys_sendto+0x1e5/0x260 [ 42.982784][ T3737] __x64_sys_sendto+0x78/0x90 [ 42.987784][ T3737] x64_sys_call+0x16d7/0x2d70 [ 42.992510][ T3737] do_syscall_64+0xc9/0x1c0 [ 42.997063][ T3737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.003332][ T3737] [ 43.005664][ T3737] value changed: 0x00000001 -> 0x00000004 [ 43.011416][ T3737] [ 43.013924][ T3737] Reported by Kernel Concurrency Sanitizer on: [ 43.020092][ T3737] CPU: 0 PID: 3737 Comm: syz-executor.0 Not tainted 6.10.0-rc4-syzkaller-00217-g35bb670d65fc #0 [ 43.030560][ T3737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 2024/06/22 07:59:31 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 43.040645][ T3737] ==================================================================