last executing test programs: 1.238128919s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(r2, 0x107, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x4) 1.145734243s ago: executing program 2: ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) io_uring_setup(0x3964, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) 994.890007ms ago: executing program 2: socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000079b7318d082042f6704441a05a5337fca2d97524e9235f2871955dace0d5619e44b9bd15635512143cb4164391ef4aa14f4c3b2fd59f6457bde060d85de6b55cccdc1b72827c2cdc2fde60433a853bdda5f6d0c9689a53d0e0eb7e8c0073cd99acbf1e3ca38e569941bb68588622d63fe62a32f9f14e571d8f3053cfa5cd117b9609ffce85a35c1462b48509c33d8a6e297ff8c3e30358e1ad4e59f0f028d787e721b5d593b2e4c0a195db56"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x84}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) syz_open_procfs(0x0, &(0x7f0000001840)='net/raw6\x00') 974.73192ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x9, 0x7, 0x882}, 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x1c, {0x2, 0x0, @remote}, 'bond_slave_0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 685.785505ms ago: executing program 2: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xa4}}}, 0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_open_procfs(0x0, 0x0) 616.666995ms ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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") creat(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r1 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000300)=[{r3, 0x8688}], 0x1, 0x0, 0x0, 0x0) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000040)=0x4) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) 601.781467ms ago: executing program 3: mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x50007a2) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) lchown(0x0, 0x0, 0xffffffffffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) futex_waitv(&(0x7f0000001080)=[{0x0, 0x0}], 0x1, 0x0, &(0x7f0000001500), 0x0) 572.486172ms ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 512.503041ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f00000000c0), 0x0, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='statm\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000da74f9438af818bf66609c481fa33ddab0df17c8fce0d4cd7e9b92e935c980db3846714361051852be23b2b993241df7aa460f4f76aeb07d1163b25958a12bcc123c775d2fdd9d062c264d3cb91d181306e242b1fc2562e4d4e870b905eb57f90bef9e9de518f04855f6fa69d6f9ff926398bccfbb95fed300000000", @ANYRES16=r3, @ANYBLOB="090300000000000000001d000000"], 0x14}}, 0x0) pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{0x7, 0x0, 0x5}, {0x14, 0x4, 0x0, 0xd1b8}, {0x6}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="a800000000010904000500000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000009002400028014000180080001000000010908000200ac1e00010c000280050001000000000044000f800800014000000006080003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) r8 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}]}, 0x3c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x68060200) unshare(0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00dd8d00000000ec8d000000000e00000000f9ff06000000000eacd92d215017"], 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x54}}, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0x2e, "fbc521aaeb61473d5c9cd2861a2d5bfbdf91edfd4501a7dc929a3cd57af0bcff68c7f07953a6eae1ac0c37f8378d"}, &(0x7f0000000100)=0x36) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 498.440833ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000008000000000000001c2df6f270000000fad413ec50000000f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002d00dd"], 0x1c}}, 0x0) 398.629388ms ago: executing program 2: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f00000001c0)=ANY=[], 0x3, 0x2bd, &(0x7f0000000d80)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_emit_ethernet(0x15b, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300), 0x16) r5 = dup3(r4, r2, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0xffff, 0x200000) sendfile(r4, r3, 0x0, 0x8038) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x23, &(0x7f0000000680)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, &(0x7f0000000080), 0x41000, 0x46, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[r4, r2, r5, r4, r5], 0x0, 0x10, 0xfff}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sendfile(r2, r3, 0x0, 0xef84) 324.29456ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x9, 0x7, 0x882}, 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @multicast}, 0x1c, {0x2, 0x4e22, @remote}, 'bond_slave_0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 313.676032ms ago: executing program 3: ioprio_set$uid(0x3, 0x0, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) io_uring_setup(0x3964, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0x6e) 217.339727ms ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000079b7318d082042f6704441a05a5337fca2d97524e9235f2871955dace0d5619e44b9bd15635512143cb4164391ef4aa14f4c3b2fd59f6457bde060d85de6b55cccdc1b72827c2cdc2fde60433a853bdda5f6d0c9689a53d0e0eb7e8c0073cd99acbf1e3ca38e569941bb68588622d63fe62a32f9f14e571d8f3053cfa5cd117b9609ffce85a35c1462b48509c33d8a6e297ff8c3e30358e1ad4e59f0f028d787e721b5d593b2e4c0a195db56"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x9fd, 0x84}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) syz_open_procfs(0x0, &(0x7f0000001840)='net/raw6\x00') 199.35838ms ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x9, 0x7, 0x882}, 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, @multicast}, 0x1c, {0x2, 0x4e22, @remote}, 'bond_slave_0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 174.785733ms ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x9, 0x7, 0x882}, 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x1c, {0x2, 0x0, @remote}, 'bond_slave_0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 141.780189ms ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x5, 0x9, 0x7, 0x882}, 0x48) syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @multicast}, 0x0, {0x2, 0x4e22, @remote}, 'bond_slave_0\x00'}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) 122.094141ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 93.850746ms ago: executing program 1: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bda100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xa4}}}, 0x90) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}}, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_open_procfs(0x0, 0x0) 85.231697ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r3) r4 = syz_io_uring_setup(0xd3f, &(0x7f0000000480), &(0x7f0000000080), &(0x7f0000000300)=0x0) unshare(0x68060200) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0}) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @multicast2}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1}) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) syz_io_uring_submit(0x0, r5, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0xce3, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x4ac9, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r8 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r8, &(0x7f0000000040)=0x3ff, 0x12) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 0s ago: executing program 1: r0 = syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./bus\x00', 0xa08886, &(0x7f00000001c0)=ANY=[], 0x3, 0x2bd, &(0x7f0000000d80)="$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") ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) syz_emit_ethernet(0x15b, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaa"], 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/25, &(0x7f0000000040)=0x19) r2 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r3 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000300), 0x16) dup3(r4, r2, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0xffff, 0x200000) sendfile(r4, r3, 0x0, 0x8038) socket$inet6(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x15, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sendfile(r2, r3, 0x0, 0xef84) kernel console output (not intermixed with test programs): [ 21.072473][ T29] audit: type=1400 audit(1718951167.094:81): avc: denied { read } for pid=2764 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.132' (ED25519) to the list of known hosts. 2024/06/21 06:26:10 fuzzer started 2024/06/21 06:26:10 dialing manager at 10.128.0.163:30030 [ 24.906612][ T29] audit: type=1400 audit(1718951170.924:82): avc: denied { node_bind } for pid=3072 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 24.927280][ T29] audit: type=1400 audit(1718951170.924:83): avc: denied { name_bind } for pid=3072 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 24.985674][ T29] audit: type=1400 audit(1718951171.004:84): avc: denied { create } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.008010][ T29] audit: type=1400 audit(1718951171.004:85): avc: denied { write } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.012895][ T3080] cgroup: Unknown subsys name 'net' [ 25.028698][ T29] audit: type=1400 audit(1718951171.004:86): avc: denied { read } for pid=3081 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.060302][ T29] audit: type=1400 audit(1718951171.034:87): avc: denied { mounton } for pid=3080 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.083181][ T29] audit: type=1400 audit(1718951171.034:88): avc: denied { mount } for pid=3080 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.105625][ T29] audit: type=1400 audit(1718951171.064:89): avc: denied { unmount } for pid=3080 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.117852][ T3086] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.125586][ T29] audit: type=1400 audit(1718951171.074:90): avc: denied { mounton } for pid=3089 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.158991][ T29] audit: type=1400 audit(1718951171.074:91): avc: denied { mount } for pid=3089 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.194762][ T3085] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.302865][ T3080] cgroup: Unknown subsys name 'rlimit' 2024/06/21 06:26:11 suppressing KCSAN reports in functions: 'ext4_mb_good_group' 'kick_pool' '__filemap_remove_folio' 'dont_mount' 'jbd2_journal_file_inode' 'jbd2_journal_stop' '__lru_add_drain_all' 'mas_wmb_replace' 'do_select' 'dentry_unlink_inode' 'ext4_mark_iloc_dirty' '__filemap_add_folio' '__xa_clear_mark' 'pcpu_alloc_noprof' 'jbd2_journal_dirty_metadata' 'call_rcu' '__mark_inode_dirty' 'process_scheduled_works' 'mem_cgroup_flush_stats_ratelimited' '__find_get_block' 'ext4_inode_attach_jinode' 'd_instantiate_new' 'atime_needs_update' 'exit_mm' '_prb_read_valid' 'ext4_free_inodes_count' 'wg_packet_send_staged_packets' 'do_sys_poll' 'xas_find_marked' 'filemap_fdatawrite_wbc' 'mas_walk' 'ext4_fill_raw_inode' 2024/06/21 06:26:11 starting 5 executor processes [ 26.202222][ T3098] chnl_net:caif_netlink_parms(): no params data found [ 26.269922][ T3102] chnl_net:caif_netlink_parms(): no params data found [ 26.309631][ T3098] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.316698][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.324138][ T3098] bridge_slave_0: entered allmulticast mode [ 26.330805][ T3098] bridge_slave_0: entered promiscuous mode [ 26.349649][ T3098] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.356798][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.363972][ T3098] bridge_slave_1: entered allmulticast mode [ 26.370472][ T3098] bridge_slave_1: entered promiscuous mode [ 26.390621][ T3098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.413454][ T3102] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.420644][ T3102] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.427794][ T3102] bridge_slave_0: entered allmulticast mode [ 26.434690][ T3102] bridge_slave_0: entered promiscuous mode [ 26.442115][ T3098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.466444][ T3102] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.473690][ T3102] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.480896][ T3102] bridge_slave_1: entered allmulticast mode [ 26.487356][ T3102] bridge_slave_1: entered promiscuous mode [ 26.526833][ T3098] team0: Port device team_slave_0 added [ 26.537406][ T3116] chnl_net:caif_netlink_parms(): no params data found [ 26.556214][ T3102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.566088][ T3098] team0: Port device team_slave_1 added [ 26.588682][ T3102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.631225][ T3104] chnl_net:caif_netlink_parms(): no params data found [ 26.647596][ T3098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.654594][ T3098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.680693][ T3098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.693415][ T3110] chnl_net:caif_netlink_parms(): no params data found [ 26.705880][ T3102] team0: Port device team_slave_0 added [ 26.716326][ T3098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.723416][ T3098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.749440][ T3098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.767175][ T3102] team0: Port device team_slave_1 added [ 26.785989][ T3116] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.793195][ T3116] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.800757][ T3116] bridge_slave_0: entered allmulticast mode [ 26.807075][ T3116] bridge_slave_0: entered promiscuous mode [ 26.826439][ T3116] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.833669][ T3116] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.840868][ T3116] bridge_slave_1: entered allmulticast mode [ 26.847459][ T3116] bridge_slave_1: entered promiscuous mode [ 26.876969][ T3102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.883983][ T3102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.910211][ T3102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.937030][ T3102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.944171][ T3102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.970385][ T3102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.997342][ T3116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.010025][ T3116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.021166][ T3098] hsr_slave_0: entered promiscuous mode [ 27.027444][ T3098] hsr_slave_1: entered promiscuous mode [ 27.038601][ T3104] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.045811][ T3104] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.053111][ T3104] bridge_slave_0: entered allmulticast mode [ 27.059539][ T3104] bridge_slave_0: entered promiscuous mode [ 27.066643][ T3104] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.073740][ T3104] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.080943][ T3104] bridge_slave_1: entered allmulticast mode [ 27.087306][ T3104] bridge_slave_1: entered promiscuous mode [ 27.102910][ T3110] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.110046][ T3110] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.117241][ T3110] bridge_slave_0: entered allmulticast mode [ 27.123812][ T3110] bridge_slave_0: entered promiscuous mode [ 27.131049][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.138137][ T3110] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.145491][ T3110] bridge_slave_1: entered allmulticast mode [ 27.152027][ T3110] bridge_slave_1: entered promiscuous mode [ 27.169151][ T3116] team0: Port device team_slave_0 added [ 27.195505][ T3104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.211581][ T3116] team0: Port device team_slave_1 added [ 27.224068][ T3102] hsr_slave_0: entered promiscuous mode [ 27.230221][ T3102] hsr_slave_1: entered promiscuous mode [ 27.236078][ T3102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.243822][ T3102] Cannot create hsr debugfs directory [ 27.250459][ T3110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.266319][ T3104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.287896][ T3110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.332779][ T3104] team0: Port device team_slave_0 added [ 27.338923][ T3116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.345902][ T3116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.371999][ T3116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.383380][ T3110] team0: Port device team_slave_0 added [ 27.390323][ T3110] team0: Port device team_slave_1 added [ 27.410171][ T3104] team0: Port device team_slave_1 added [ 27.416151][ T3116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.423129][ T3116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.449256][ T3116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.469792][ T3110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.476908][ T3110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.503597][ T3110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.515111][ T3110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.522186][ T3110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.548103][ T3110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.579544][ T3104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.586604][ T3104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.612721][ T3104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.642188][ T3104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.649236][ T3104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.675393][ T3104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.693345][ T3116] hsr_slave_0: entered promiscuous mode [ 27.699539][ T3116] hsr_slave_1: entered promiscuous mode [ 27.705501][ T3116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.713087][ T3116] Cannot create hsr debugfs directory [ 27.747174][ T3110] hsr_slave_0: entered promiscuous mode [ 27.753385][ T3110] hsr_slave_1: entered promiscuous mode [ 27.759534][ T3110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.767266][ T3110] Cannot create hsr debugfs directory [ 27.800991][ T3104] hsr_slave_0: entered promiscuous mode [ 27.807067][ T3104] hsr_slave_1: entered promiscuous mode [ 27.812871][ T3104] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.820605][ T3104] Cannot create hsr debugfs directory [ 27.867338][ T3098] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.886235][ T3098] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.896874][ T3098] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.910319][ T3098] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.990647][ T3102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.999384][ T3102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.029162][ T3102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.045915][ T3102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.059997][ T3116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.085358][ T3116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.095110][ T3116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.105897][ T3116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.132408][ T3104] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.146230][ T3104] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.157300][ T3104] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.168749][ T3104] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.186743][ T3098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.211226][ T3110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.224983][ T3098] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.234815][ T3110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.244255][ T3110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.261824][ T3110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.273384][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.280512][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.310443][ T3176] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.317542][ T3176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.338393][ T3102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.372810][ T3102] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.401432][ T3180] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.408562][ T3180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.418601][ T3180] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.425872][ T3180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.446380][ T3116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.472328][ T3102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.490141][ T3116] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.506918][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.514189][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.541515][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.548626][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.560141][ T3098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.573137][ T3104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.586825][ T3104] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.610031][ T3178] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.617835][ T3178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.637174][ T3178] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.644390][ T3178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.663086][ T3110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.693592][ T3104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.704263][ T3104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.729029][ T3110] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.741805][ T3102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.759964][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.767080][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.794472][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.801781][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.822552][ T3110] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.833240][ T3110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.891013][ T3098] veth0_vlan: entered promiscuous mode [ 28.908393][ T3116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.917349][ T3098] veth1_vlan: entered promiscuous mode [ 28.945540][ T3104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.972581][ T3098] veth0_macvtap: entered promiscuous mode [ 28.986256][ T3110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.000778][ T3098] veth1_macvtap: entered promiscuous mode [ 29.026851][ T3102] veth0_vlan: entered promiscuous mode [ 29.045469][ T3102] veth1_vlan: entered promiscuous mode [ 29.057386][ T3098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.088345][ T3102] veth0_macvtap: entered promiscuous mode [ 29.113190][ T3098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.133043][ T3102] veth1_macvtap: entered promiscuous mode [ 29.143002][ T3098] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.152129][ T3098] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.160928][ T3098] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.169673][ T3098] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.186963][ T3104] veth0_vlan: entered promiscuous mode [ 29.196141][ T3104] veth1_vlan: entered promiscuous mode [ 29.218294][ T3102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.228934][ T3102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.241550][ T3102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.250581][ T3102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.261104][ T3102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.271831][ T3102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.301861][ T3116] veth0_vlan: entered promiscuous mode [ 29.309594][ T3102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.318962][ T3102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.327683][ T3102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.336482][ T3102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.350731][ T3110] veth0_vlan: entered promiscuous mode [ 29.361708][ T3104] veth0_macvtap: entered promiscuous mode [ 29.373902][ T3104] veth1_macvtap: entered promiscuous mode [ 29.390379][ T3110] veth1_vlan: entered promiscuous mode [ 29.400078][ T3116] veth1_vlan: entered promiscuous mode [ 29.414837][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.425752][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.435702][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.446178][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.457017][ T3104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.467372][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.478077][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.488047][ T3104] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.498501][ T3104] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.509285][ T3104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.517854][ T3104] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.526806][ T3104] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.535629][ T3104] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.544548][ T3104] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.568869][ T3110] veth0_macvtap: entered promiscuous mode [ 29.598281][ T3245] loop1: detected capacity change from 0 to 128 [ 29.602362][ T3116] veth0_macvtap: entered promiscuous mode [ 29.620480][ T3110] veth1_macvtap: entered promiscuous mode [ 29.628081][ T3116] veth1_macvtap: entered promiscuous mode [ 29.665685][ T3116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.676762][ T3116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.686703][ T3116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.697300][ T3116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.707429][ T3116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.718141][ T3116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.731465][ T3116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.740026][ T3116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.750826][ T3116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.760847][ T3116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.771517][ T3116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.781482][ T3116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.791931][ T3116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.833804][ T3116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.843382][ T3116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.852208][ T3116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.861025][ T3116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.869889][ T3116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.885056][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.895711][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.905814][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.916277][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.926330][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.936898][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.946861][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.957342][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.969156][ T3110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.001890][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 30.001908][ T29] audit: type=1400 audit(1718951176.024:138): avc: denied { read } for pid=3256 comm="syz-executor.0" name="event2" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.042964][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.052918][ T29] audit: type=1400 audit(1718951176.024:139): avc: denied { open } for pid=3256 comm="syz-executor.0" path="/dev/input/event2" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 30.053593][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.087919][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.098448][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.108416][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.119427][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.121970][ T3257] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.129256][ T3110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.129278][ T3110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.131973][ T3110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.142886][ T29] audit: type=1400 audit(1718951176.124:140): avc: denied { write } for pid=3255 comm="syz-executor.2" name="raw6" dev="proc" ino=4026532601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 30.153845][ T3110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.161657][ T29] audit: type=1400 audit(1718951176.144:141): avc: denied { create } for pid=3256 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.168962][ T3110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.230716][ T3110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.239841][ T3110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.252505][ T29] audit: type=1400 audit(1718951176.244:142): avc: denied { ioctl } for pid=3256 comm="syz-executor.0" path="socket:[2817]" dev="sockfs" ino=2817 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.330650][ T29] audit: type=1400 audit(1718951176.334:143): avc: denied { create } for pid=3260 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.366801][ T29] audit: type=1400 audit(1718951176.364:144): avc: denied { setopt } for pid=3260 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.432373][ T29] audit: type=1400 audit(1718951176.444:145): avc: denied { name_bind } for pid=3268 comm="syz-executor.4" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.447591][ T3267] loop0: detected capacity change from 0 to 512 [ 30.504705][ T29] audit: type=1400 audit(1718951176.514:146): avc: denied { unmount } for pid=3098 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.525006][ T29] audit: type=1326 audit(1718951176.514:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3271 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fe8fe2f29 code=0x0 [ 30.572067][ T3267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.590973][ T3267] ext4 filesystem being mounted at /root/syzkaller-testdir624052019/syzkaller.vE0J4G/1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.593950][ T3283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 30.610782][ T3267] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 30.634979][ T3284] loop2: detected capacity change from 0 to 128 [ 30.658615][ T3267] EXT4-fs error (device loop0): ext4_dirty_inode:5935: inode #2: comm syz-executor.0: mark_inode_dirty error [ 30.711818][ T3267] EXT4-fs error (device loop0): ext4_do_update_inode:5075: inode #2: comm syz-executor.0: corrupted inode contents [ 30.728343][ T3267] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #2: comm syz-executor.0: mark_inode_dirty error [ 30.993233][ T3314] loop1: detected capacity change from 0 to 128 [ 31.223111][ T3315] ================================================================== [ 31.231239][ T3315] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 31.239619][ T3315] [ 31.242075][ T3315] write to 0xffff888106db1360 of 8 bytes by task 3314 on cpu 0: [ 31.249819][ T3315] writeback_single_inode+0x10e/0x4a0 [ 31.255571][ T3315] sync_inode_metadata+0x5c/0x90 [ 31.260565][ T3315] __generic_file_fsync+0xf9/0x140 [ 31.266215][ T3315] fat_file_fsync+0x4c/0x100 [ 31.271364][ T3315] vfs_fsync_range+0x122/0x140 [ 31.276155][ T3315] generic_file_write_iter+0x191/0x1d0 [ 31.281646][ T3315] iter_file_splice_write+0x5e6/0x970 [ 31.287053][ T3315] direct_splice_actor+0x16c/0x2c0 [ 31.292204][ T3315] splice_direct_to_actor+0x305/0x670 [ 31.297619][ T3315] do_splice_direct+0xd7/0x150 [ 31.302421][ T3315] do_sendfile+0x3ab/0x960 [ 31.307045][ T3315] __x64_sys_sendfile64+0x110/0x150 [ 31.312279][ T3315] x64_sys_call+0x2c9f/0x2d70 [ 31.316991][ T3315] do_syscall_64+0xc9/0x1c0 [ 31.321527][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.327462][ T3315] [ 31.329897][ T3315] read to 0xffff888106db1360 of 8 bytes by task 3315 on cpu 1: [ 31.337481][ T3315] vfs_fsync_range+0xa6/0x140 [ 31.342196][ T3315] generic_file_write_iter+0x191/0x1d0 [ 31.347920][ T3315] iter_file_splice_write+0x5e6/0x970 [ 31.353343][ T3315] direct_splice_actor+0x16c/0x2c0 [ 31.358584][ T3315] splice_direct_to_actor+0x305/0x670 [ 31.363993][ T3315] do_splice_direct+0xd7/0x150 [ 31.368888][ T3315] do_sendfile+0x3ab/0x960 2024/06/21 06:26:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 31.373335][ T3315] __x64_sys_sendfile64+0x110/0x150 [ 31.378655][ T3315] x64_sys_call+0x2c9f/0x2d70 [ 31.383377][ T3315] do_syscall_64+0xc9/0x1c0 [ 31.387905][ T3315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 31.393830][ T3315] [ 31.396165][ T3315] value changed: 0x0000000000000007 -> 0x0000000000000084 [ 31.403282][ T3315] [ 31.405610][ T3315] Reported by Kernel Concurrency Sanitizer on: [ 31.411779][ T3315] CPU: 1 PID: 3315 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00148-g50736169ecc8 #0 [ 31.422212][ T3315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 31.432319][ T3315] ==================================================================