Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. 2024/05/19 03:03:39 fuzzer started 2024/05/19 03:03:39 dialing manager at 10.128.0.163:30015 [ 25.244292][ T29] audit: type=1400 audit(1716087819.781:82): avc: denied { node_bind } for pid=3080 comm="syz-fuzzer" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 25.264895][ T29] audit: type=1400 audit(1716087819.781:83): avc: denied { name_bind } for pid=3080 comm="syz-fuzzer" src=6060 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 25.334781][ T3089] cgroup: Unknown subsys name 'net' [ 25.336383][ T29] audit: type=1400 audit(1716087819.871:84): avc: denied { mounton } for pid=3089 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.362906][ T29] audit: type=1400 audit(1716087819.871:85): avc: denied { mount } for pid=3089 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.385115][ T29] audit: type=1400 audit(1716087819.871:86): avc: denied { create } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.405738][ T29] audit: type=1400 audit(1716087819.871:87): avc: denied { write } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.409926][ T3096] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.426285][ T29] audit: type=1400 audit(1716087819.871:88): avc: denied { unmount } for pid=3089 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.454576][ T29] audit: type=1400 audit(1716087819.871:89): avc: denied { read } for pid=3091 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.456694][ T3095] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.474852][ T29] audit: type=1400 audit(1716087819.911:90): avc: denied { mounton } for pid=3094 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.508720][ T29] audit: type=1400 audit(1716087819.911:91): avc: denied { mount } for pid=3094 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.655462][ T3089] cgroup: Unknown subsys name 'rlimit' 2024/05/19 03:03:40 suppressing KCSAN reports in functions: '__mark_inode_dirty' 'filemap_fdatawrite_wbc' '__xa_clear_mark' 'process_scheduled_works' 2024/05/19 03:03:40 starting 5 executor processes [ 26.282542][ T3108] chnl_net:caif_netlink_parms(): no params data found [ 26.407691][ T3108] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.414831][ T3108] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.422151][ T3108] bridge_slave_0: entered allmulticast mode [ 26.428647][ T3108] bridge_slave_0: entered promiscuous mode [ 26.446287][ T3126] chnl_net:caif_netlink_parms(): no params data found [ 26.455527][ T3108] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.462616][ T3108] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.469960][ T3108] bridge_slave_1: entered allmulticast mode [ 26.476490][ T3108] bridge_slave_1: entered promiscuous mode [ 26.512836][ T3108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.526704][ T3112] chnl_net:caif_netlink_parms(): no params data found [ 26.555158][ T3108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.574615][ T3124] chnl_net:caif_netlink_parms(): no params data found [ 26.596629][ T3108] team0: Port device team_slave_0 added [ 26.621132][ T3108] team0: Port device team_slave_1 added [ 26.638143][ T3112] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.645232][ T3112] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.652537][ T3112] bridge_slave_0: entered allmulticast mode [ 26.658850][ T3112] bridge_slave_0: entered promiscuous mode [ 26.679793][ T3126] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.686965][ T3126] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.694167][ T3126] bridge_slave_0: entered allmulticast mode [ 26.700634][ T3126] bridge_slave_0: entered promiscuous mode [ 26.707956][ T3109] chnl_net:caif_netlink_parms(): no params data found [ 26.716806][ T3112] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.723901][ T3112] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.731052][ T3112] bridge_slave_1: entered allmulticast mode [ 26.737580][ T3112] bridge_slave_1: entered promiscuous mode [ 26.762306][ T3108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.769274][ T3108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.795197][ T3108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.806123][ T3126] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.813219][ T3126] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.821010][ T3126] bridge_slave_1: entered allmulticast mode [ 26.827473][ T3126] bridge_slave_1: entered promiscuous mode [ 26.846545][ T3112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.856482][ T3124] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.863611][ T3124] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.870724][ T3124] bridge_slave_0: entered allmulticast mode [ 26.877357][ T3124] bridge_slave_0: entered promiscuous mode [ 26.884175][ T3108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.891126][ T3108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.917050][ T3108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.936073][ T3112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.945274][ T3124] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.952358][ T3124] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.959522][ T3124] bridge_slave_1: entered allmulticast mode [ 26.965823][ T3124] bridge_slave_1: entered promiscuous mode [ 26.985471][ T3126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.010566][ T3112] team0: Port device team_slave_0 added [ 27.017698][ T3124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.028168][ T3124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.038347][ T3126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.055064][ T3112] team0: Port device team_slave_1 added [ 27.094400][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.101517][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.127500][ T3112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.139072][ T3124] team0: Port device team_slave_0 added [ 27.145823][ T3124] team0: Port device team_slave_1 added [ 27.152315][ T3126] team0: Port device team_slave_0 added [ 27.161041][ T3126] team0: Port device team_slave_1 added [ 27.168888][ T3108] hsr_slave_0: entered promiscuous mode [ 27.174856][ T3108] hsr_slave_1: entered promiscuous mode [ 27.181226][ T3112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.188248][ T3112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.214189][ T3112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.258393][ T3124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.265380][ T3124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.291451][ T3124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.306907][ T3109] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.314031][ T3109] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.322115][ T3109] bridge_slave_0: entered allmulticast mode [ 27.328364][ T3109] bridge_slave_0: entered promiscuous mode [ 27.339598][ T3126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.346584][ T3126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.372570][ T3126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.394844][ T3124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.401823][ T3124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.427789][ T3124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.447301][ T3109] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.454473][ T3109] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.461599][ T3109] bridge_slave_1: entered allmulticast mode [ 27.469026][ T3109] bridge_slave_1: entered promiscuous mode [ 27.481192][ T3126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.488168][ T3126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.514344][ T3126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.529319][ T3112] hsr_slave_0: entered promiscuous mode [ 27.535426][ T3112] hsr_slave_1: entered promiscuous mode [ 27.541311][ T3112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.548894][ T3112] Cannot create hsr debugfs directory [ 27.572933][ T3124] hsr_slave_0: entered promiscuous mode [ 27.579065][ T3124] hsr_slave_1: entered promiscuous mode [ 27.585120][ T3124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.592698][ T3124] Cannot create hsr debugfs directory [ 27.599525][ T3109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.609892][ T3109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.633790][ T3126] hsr_slave_0: entered promiscuous mode [ 27.639829][ T3126] hsr_slave_1: entered promiscuous mode [ 27.646856][ T3126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.654416][ T3126] Cannot create hsr debugfs directory [ 27.688090][ T3109] team0: Port device team_slave_0 added [ 27.694811][ T3109] team0: Port device team_slave_1 added [ 27.726094][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.733132][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.759246][ T3109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.784917][ T3109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.791910][ T3109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.817900][ T3109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.880806][ T3109] hsr_slave_0: entered promiscuous mode [ 27.887034][ T3109] hsr_slave_1: entered promiscuous mode [ 27.893070][ T3109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.900624][ T3109] Cannot create hsr debugfs directory [ 27.994241][ T3112] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.005241][ T3112] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.014367][ T3112] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.030783][ T3112] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.061928][ T3108] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.070407][ T3108] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.080055][ T3108] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.091048][ T3108] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.118540][ T3126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.134819][ T3126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.150456][ T3126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.174076][ T3126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.185838][ T3124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.194996][ T3124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.212944][ T3124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.221507][ T3124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.248759][ T3109] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.257810][ T3109] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.266804][ T3109] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.283549][ T3108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.293060][ T3109] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.309110][ T3108] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.317933][ T3112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.342760][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.349879][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.358612][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.365698][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.384763][ T3112] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.425388][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.432455][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.443853][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.450915][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.471147][ T3126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.498474][ T3126] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.511910][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.519107][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.566698][ T3124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.575341][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.582453][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.596047][ T3109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.613157][ T3109] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.629988][ T3190] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.637114][ T3190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.652876][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.660179][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.679234][ T3108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.702144][ T3124] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.716032][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.723222][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.737242][ T3109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.750934][ T3112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.763429][ T3189] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.770581][ T3189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.900562][ T3126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.923840][ T3109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.938650][ T3112] veth0_vlan: entered promiscuous mode [ 28.966302][ T3112] veth1_vlan: entered promiscuous mode [ 28.974592][ T3124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.990215][ T3108] veth0_vlan: entered promiscuous mode [ 29.005184][ T3108] veth1_vlan: entered promiscuous mode [ 29.036273][ T3112] veth0_macvtap: entered promiscuous mode [ 29.064056][ T3108] veth0_macvtap: entered promiscuous mode [ 29.074991][ T3112] veth1_macvtap: entered promiscuous mode [ 29.088868][ T3108] veth1_macvtap: entered promiscuous mode [ 29.100778][ T3126] veth0_vlan: entered promiscuous mode [ 29.123070][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.136939][ T3124] veth0_vlan: entered promiscuous mode [ 29.148187][ T3112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.158238][ T3109] veth0_vlan: entered promiscuous mode [ 29.170292][ T3124] veth1_vlan: entered promiscuous mode [ 29.178568][ T3112] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.187402][ T3112] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.196205][ T3112] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.205019][ T3112] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.216190][ T3126] veth1_vlan: entered promiscuous mode [ 29.226611][ T3109] veth1_vlan: entered promiscuous mode [ 29.237878][ T3124] veth0_macvtap: entered promiscuous mode [ 29.247015][ T3108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.257584][ T3108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.268141][ T3108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.280519][ T3108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.291176][ T3108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.302626][ T3108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.323312][ T3126] veth0_macvtap: entered promiscuous mode [ 29.331611][ T3124] veth1_macvtap: entered promiscuous mode [ 29.341076][ T3108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.349832][ T3108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.358594][ T3108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.367420][ T3108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.379827][ T3126] veth1_macvtap: entered promiscuous mode [ 29.390263][ T3124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.400773][ T3124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.410626][ T3124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.421157][ T3124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.432496][ T3124] batman_adv: batadv0: Interface activated: batadv_slave_0 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000640)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) [ 29.452493][ T3124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.463069][ T3124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.472934][ T3124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.483509][ T3124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.494888][ T3124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.514626][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.525172][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.535073][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.545606][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ptrace(0x10, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) inotify_init1(0x0) ptrace(0x10, 0x1) [ 29.555465][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.565928][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.578066][ T3126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.589475][ T3124] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.598257][ T3124] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.607261][ T3124] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.616594][ T3124] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.633398][ T3109] veth0_macvtap: entered promiscuous mode [ 29.641990][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.652489][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.662362][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.672833][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.682755][ T3126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.693323][ T3126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.705837][ T3126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.726893][ T3109] veth1_macvtap: entered promiscuous mode [ 29.749832][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.760383][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.770227][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.780661][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.790572][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.801008][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.810927][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.821388][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.865606][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_0 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000380)=0x6) setresuid(0x0, r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c5602ff820fffff5bab023a0200002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) [ 29.918991][ T3126] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.927883][ T3126] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.936798][ T3126] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.945652][ T3126] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ptrace(0x10, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) inotify_init1(0x0) ptrace(0x10, 0x1) [ 30.077366][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.087912][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.097746][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.108248][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! executing program 4: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003b80)={@cgroup, 0xffffffffffffffff, 0x1a, 0x8, 0xffffffffffffffff, @prog_id}, 0x20) modify_ldt$write(0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002180)=ANY=[], 0xe8}}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) [ 30.118148][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.128592][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.138518][ T3109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.149082][ T3109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.160744][ T3109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.170660][ T3109] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.179421][ T3109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.188444][ T3109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.197447][ T3109] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 executing program 4: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES8], 0xd, 0x2a0, &(0x7f0000000840)="$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") connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) perf_event_open(0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000700)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) dup3(r2, r0, 0x0) sendfile(r2, r1, 0x0, 0x8038) sendfile(r0, r1, 0x0, 0xef84) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 30.296142][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 30.296189][ T29] audit: type=1326 audit(1716087824.831:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3262 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe83d3d2ee9 code=0x0 [ 30.397414][ T3273] loop4: detected capacity change from 0 to 256 executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x59, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300), &(0x7f0000000140)=0x8) perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r1 = socket$kcm(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) socket$kcm(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40046629, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, 0x0) dup(0xffffffffffffffff) read$eventfd(0xffffffffffffffff, 0x0, 0x0) [ 30.588068][ T29] audit: type=1400 audit(1716087825.041:132): avc: denied { mounton } for pid=3272 comm="syz-executor.4" path="/root/syzkaller-testdir1499447813/syzkaller.8g8HKS/1/file0" dev="sda1" ino=1954 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.615023][ T29] audit: type=1400 audit(1716087825.061:133): avc: denied { mount } for pid=3272 comm="syz-executor.4" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 executing program 2: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c666d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75652c74696d655f6f66667365743d3078303030303030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be29df17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fef3eb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e6760094145e542e426bceaab9b2cf261046247bce0565db3ac5888b74efd48bc9f455e60f49496ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4672e47fe5a25502919954242f8d779d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d4ada887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab946472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893fe9b664421a40f4822ffcc284dfe9aea76e4a04293c970f2dae776decf07b085e16511b0bd365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2", @ANYRES8], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) perf_event_open(0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000700)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) dup3(r2, r0, 0x0) sendfile(r2, r1, 0x0, 0x8038) sendfile(r0, r1, 0x0, 0xef84) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 30.649717][ T29] audit: type=1400 audit(1716087825.181:134): avc: denied { create } for pid=3276 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 30.696390][ T29] audit: type=1400 audit(1716087825.211:135): avc: denied { create } for pid=3276 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.716334][ T29] audit: type=1400 audit(1716087825.211:136): avc: denied { setopt } for pid=3276 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.719840][ T3282] loop2: detected capacity change from 0 to 256 [ 30.736117][ T29] audit: type=1400 audit(1716087825.211:137): avc: denied { bind } for pid=3276 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.762146][ T29] audit: type=1400 audit(1716087825.211:138): avc: denied { name_bind } for pid=3276 comm="syz-executor.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) perf_event_open(0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000700)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) dup3(r2, r0, 0x0) sendfile(r2, r1, 0x0, 0x8038) sendfile(r0, r1, 0x0, 0xef84) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 30.784283][ T29] audit: type=1400 audit(1716087825.211:139): avc: denied { node_bind } for pid=3276 comm="syz-executor.3" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 30.806327][ T29] audit: type=1400 audit(1716087825.211:140): avc: denied { write } for pid=3276 comm="syz-executor.3" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.937896][ T3290] loop3: detected capacity change from 0 to 256 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ptrace(0x10, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) inotify_init1(0x0) ptrace(0x10, 0x1) executing program 3: bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x40}}], 0x48}, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000280), 0x6000) statx(r1, &(0x7f0000000300)='./file0\x00', 0x400, 0x0, &(0x7f00000003c0)) unshare(0x2040400) r4 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r4, 0x0, 0x0) executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003b80)={@cgroup, 0xffffffffffffffff, 0x1a, 0x8, 0xffffffffffffffff, @prog_id}, 0x20) modify_ldt$write(0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002180)=ANY=[], 0xe8}}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000012c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) migrate_pages(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0xfc, &(0x7f00000000c0)=0xfff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x20, 0x1d, 0x200, 0xffff, 0xf9, 0x8, &(0x7f00000003c0)="e798264531c72b80a739b395014af064ec2824d1344ad4bb063aa58c24039755a13ff6be1c2d2f1156a8715ffb2884d6b6f23bea9058ad652197a8141fae01b9d1e3296c740377798c4a70d84c96ef1b7130fa57020ea0da0b2a6d2098ed83963db3cf85e14e2c4b7730731333edfac27b608ae0a6376cb2acb98d99ce11323dd5eae16b3d298c63324b48a10540a3bdc60708e3639b3f4566bec054ad4624a10df5238da7ce5a0c5aa4962c16531cccf165d59c6e91f3b97b4a5cfd8c2475a404c979f4f6beb1999bcb432ffb492d532b4d66ac005b71cc9012a6efe11c34bffce49851d16895a4556338ee89ca14c2f0e3d609a558e5b81f"}) fcntl$getownex(r1, 0x10, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000340)={0x0, 0x0, 0xfffffffe}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10040, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d7e, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4008550c, 0x0) executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003b80)={@cgroup, 0xffffffffffffffff, 0x1a, 0x8, 0xffffffffffffffff, @prog_id}, 0x20) modify_ldt$write(0x3, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002180)=ANY=[], 0xe8}}, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x4d) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) ptrace(0x10, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) inotify_init1(0x0) ptrace(0x10, 0x1) [ 31.978771][ T3305] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x59, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000300), &(0x7f0000000140)=0x8) perf_event_open(&(0x7f00000000c0)={0xa, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) write$eventfd(0xffffffffffffffff, &(0x7f0000000000)=0xfffffffffffffffb, 0x8) r1 = socket$kcm(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="020000001300"}) socket$kcm(0xa, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40046629, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, 0x0) dup(0xffffffffffffffff) read$eventfd(0xffffffffffffffff, 0x0, 0x0) executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xb, 0x42, 0x40, 0x42}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000400000000000000feffffff180000000180000000000000090000001800080000000000000038c50755f295"], 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000880), 0x1006, r0, 0x0, 0xd88d02a0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r0, &(0x7f0000000100), &(0x7f0000002240)=""/99}, 0x20) executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000012c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xd7, 0x0) mmap$usbfs(&(0x7f0000ff6000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) migrate_pages(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0xfc, &(0x7f00000000c0)=0xfff) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x20, 0x1d, 0x200, 0xffff, 0xf9, 0x8, &(0x7f00000003c0)="e798264531c72b80a739b395014af064ec2824d1344ad4bb063aa58c24039755a13ff6be1c2d2f1156a8715ffb2884d6b6f23bea9058ad652197a8141fae01b9d1e3296c740377798c4a70d84c96ef1b7130fa57020ea0da0b2a6d2098ed83963db3cf85e14e2c4b7730731333edfac27b608ae0a6376cb2acb98d99ce11323dd5eae16b3d298c63324b48a10540a3bdc60708e3639b3f4566bec054ad4624a10df5238da7ce5a0c5aa4962c16531cccf165d59c6e91f3b97b4a5cfd8c2475a404c979f4f6beb1999bcb432ffb492d532b4d66ac005b71cc9012a6efe11c34bffce49851d16895a4556338ee89ca14c2f0e3d609a558e5b81f"}) fcntl$getownex(r1, 0x10, 0x0) rt_sigqueueinfo(0x0, 0x13, &(0x7f0000000340)={0x0, 0x0, 0xfffffffe}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$USBDEVFS_RELEASEINTERFACE(r2, 0x80045510, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_RECVMSG={0xa, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10040, 0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2d7e, 0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4008550c, 0x0) [ 32.599663][ T3326] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioprio_set$pid(0x1, 0x0, 0x0) r0 = creat(&(0x7f0000000300)='./bus\x00', 0x0) open(0x0, 0x0, 0x0) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r1, 0x1, &(0x7f00000010c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x2c, 0x1, 0x0, r0, 0x0}]) executing program 3: syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8], 0xd, 0x2a0, &(0x7f0000000840)="$eJzs3c9qM1UUAPAzSZpGXSSIG0VwQBeuyle3bhrlE8SulAjqQoNtQZJQaCFgBWNXfQKXvoeP4MaNbyC4Fdy1i8rIZGaahKZ/qDGF+vutDnPnnHsyt6SrnPnq9dFg7zCJ0/Pfo9VKorYTO3GRRCdqUfkhGgEAPB0XWRZ/ZQ/JbNRW3w0AsA7F///CY/cCAKzHJ599/lF3d/f5x2nailfbZ+NeEhGjs3GvWO8exDcxjP14Fu24jMiuFPEHH+4+j0aa68Rbo8m4l2eOvvy1rN/9M2Kavx3t6CzP304Lc/mTcW8jXow0ugcbVavteGV5/jtL8qPXjLffnOt/K9rx29dxGMPYizx3lv/9dpq+n/14/t0X+TZ5flKL3ub0vpmsvs5zAQAAAAAAAAAAAAAAAAAAAADgadtK06QY3zOd35NfKufv1C+n61tppbM4n6fIT6pCxXygLMoRPZMsfqrm6zxL0zQrb5zlN+K1hhcLAAAAAAAAAAAAAAAAAAAAQO7425NBfzjcP1pJUE0DqH7W/9A6O3NX3oiTQb9+c8HN++81P20g7/XWm6PRiBU9lruCF/J+Vl55c3a4n0YRVAez0r1efq8oejLop+VS9ZAH/eSuvVrVwf08v9SMf9tYNv2TuMwWz7R11epiVnNFT6P50tKlv7Msu1+dd/8ozqi8kkxHbNxv940yWPoB86B1/Sx+ubngjV8Z9ZV88QAAAAAAAAAAAAAAAAAAANfMfvS7ZPH01tTaf9YUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKzZ7P3/VdCKiMUr14JJmXzbPWXQjKPjR/6IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/A/8EwAA//9s0FAH") connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000006c0), 0x0, 0x0) perf_event_open(0xfffffffffffffffe, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x60c2, 0x0) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000700)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) dup3(r2, r0, 0x0) sendfile(r2, r1, 0x0, 0x8038) sendfile(r0, r1, 0x0, 0xef84) mount(0x0, 0x0, 0x0, 0x0, 0x0) [ 32.969239][ T3331] loop3: detected capacity change from 0 to 256 [ 33.274843][ T3332] ================================================================== [ 33.282952][ T3332] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 33.290906][ T3332] [ 33.293239][ T3332] write to 0xffff888109049d64 of 4 bytes by task 3331 on cpu 0: [ 33.300866][ T3332] xas_set_mark+0x131/0x150 [ 33.305387][ T3332] __folio_start_writeback+0x1f1/0x450 [ 33.310864][ T3332] __mpage_writepage+0xbed/0xe10 [ 33.315811][ T3332] write_cache_pages+0x62/0x100 [ 33.320668][ T3332] mpage_writepages+0x72/0xf0 [ 33.325348][ T3332] fat_writepages+0x24/0x30 [ 33.329864][ T3332] do_writepages+0x1d8/0x480 [ 33.334453][ T3332] filemap_fdatawrite_wbc+0xdb/0x100 [ 33.339771][ T3332] file_write_and_wait_range+0xc8/0x170 [ 33.345313][ T3332] __generic_file_fsync+0x4c/0x140 [ 33.350452][ T3332] fat_file_fsync+0x4c/0x100 [ 33.355043][ T3332] vfs_fsync_range+0x122/0x140 [ 33.359799][ T3332] generic_file_write_iter+0x191/0x1d0 [ 33.365269][ T3332] iter_file_splice_write+0x5e6/0x970 [ 33.370672][ T3332] direct_splice_actor+0x16c/0x2c0 [ 33.375790][ T3332] splice_direct_to_actor+0x305/0x670 [ 33.381178][ T3332] do_splice_direct+0xd7/0x150 [ 33.385946][ T3332] do_sendfile+0x3b9/0x970 [ 33.390385][ T3332] __x64_sys_sendfile64+0x110/0x150 [ 33.395590][ T3332] x64_sys_call+0x2c67/0x2d30 [ 33.400264][ T3332] do_syscall_64+0xcd/0x1d0 [ 33.404769][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.410666][ T3332] [ 33.412987][ T3332] read to 0xffff888109049d64 of 4 bytes by task 3332 on cpu 1: [ 33.420523][ T3332] __writeback_single_inode+0x21d/0x870 [ 33.426070][ T3332] writeback_single_inode+0x12f/0x4a0 [ 33.431456][ T3332] sync_inode_metadata+0x5c/0x90 [ 33.436431][ T3332] __generic_file_fsync+0xf9/0x140 [ 33.441561][ T3332] fat_file_fsync+0x4c/0x100 [ 33.446264][ T3332] vfs_fsync_range+0x122/0x140 [ 33.451049][ T3332] generic_file_write_iter+0x191/0x1d0 [ 33.456514][ T3332] iter_file_splice_write+0x5e6/0x970 [ 33.462004][ T3332] direct_splice_actor+0x16c/0x2c0 [ 33.467145][ T3332] splice_direct_to_actor+0x305/0x670 [ 33.472566][ T3332] do_splice_direct+0xd7/0x150 [ 33.477370][ T3332] do_sendfile+0x3b9/0x970 [ 33.481815][ T3332] __x64_sys_sendfile64+0x110/0x150 [ 33.487135][ T3332] x64_sys_call+0x2c67/0x2d30 [ 33.491826][ T3332] do_syscall_64+0xcd/0x1d0 [ 33.496338][ T3332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.502236][ T3332] [ 33.504568][ T3332] value changed: 0x05000021 -> 0x02000021 [ 33.510280][ T3332] [ 33.512614][ T3332] Reported by Kernel Concurrency Sanitizer on: [ 33.518752][ T3332] CPU: 1 PID: 3332 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-08995-g0450d2083be6 #0 [ 33.528740][ T3332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 33.538794][ T3332] ================================================================== [ 33.819229][ T3331] syz-executor.3 (3331) used greatest stack depth: 10800 bytes left