last executing test programs: 696.605719ms ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x1c0e3561a36c71ef, 0x0, 0x0) 544.270173ms ago: executing program 3 (id=4): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000100000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e20, 0x91, @mcast1, 0x6}, 0x52) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) 456.721176ms ago: executing program 1 (id=2): openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x60840, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r1) close(0x4) 422.240007ms ago: executing program 4 (id=6): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) close(r0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r1}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) close(r1) 342.54151ms ago: executing program 0 (id=1): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x1, {{0xa, 0x4e21, 0xb11, @mcast2}}, {{0xa, 0x4e22, 0x8, @private0}}}, 0x108) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000000103a00fc000000000000000000000000040000ff020000000000000000000000000001"], 0x0) 250.492233ms ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x181302, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10002, 0x5, 0xeeee0000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) close(r0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x810814, &(0x7f00000006c0)={[{@errors_remount}, {@nodelalloc}, {@data_journal}, {@sb={'sb', 0x3d, 0x1}}, {@barrier}, {@nodioread_nolock}, {@discard}, {@data_journal}]}, 0xc, 0x62c, &(0x7f00000013c0)="$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") 64.586398ms ago: executing program 1 (id=7): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x4, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000640)="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", 0x132}], 0x1}}], 0x1, 0x42054) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 64.447088ms ago: executing program 4 (id=8): unshare(0x6020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'veth1_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r0, r2, 0x25, 0x2, @val=@tracing={0x0, 0x8}}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000680)={r3, r4, 0x4, r0}, 0x10) 64.255068ms ago: executing program 3 (id=9): sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x3ed, 0x10, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x40005}, 0x4040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x80020007, 0x804, 0x7, 0x13, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x200000000000002, 0x0, 0x102, 0x3, 0xffffffffffffffff], 0x8000000, 0x141202}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x6, 0xd1, 0x82, '\x00', 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.608048ms ago: executing program 2 (id=10): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x6, 0x1, {0xa, 0x4e23, 0x1, @mcast2, 0x9}}}, 0x3a) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) 49.455498ms ago: executing program 1 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') getdents(r1, 0xffffffffffffffff, 0x5a) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) fallocate(r4, 0x0, 0x9b1, 0x1001ed) readlinkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x29}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xd, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c000000", 0x0, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_ethernet(0x36, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c0000009500000000000000eb4779fcbb3e3bbff2971871b1b1c0b4f0fca28377f3aa77d6c8d949060c54d53bd61b3561319f7b346f8cadae05957ee562fe28a5d0b564a59c30cb37ebb90e516d9c72b9d81817f7a04496e4261b41dae579bd93d38e2740"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r7}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 236µs ago: executing program 4 (id=12): unshare(0x64000600) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="6d404e7433616e676c650000000000000000000000000079855dc03f9d"], &(0x7f0000000180)=0x2c) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000380)="00214717a70700000000030600710a5eeb9d0471200000000500000000000000ffff0342844d50e77d0dc450de49c204a80316", 0x33}], 0x1, 0x4, 0x0) 0s ago: executing program 2 (id=13): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000100)={[{@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlateno}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@uni_xlateno}, {@rodir}, {@shortname_winnt}, {@shortname_mixed}, {@numtail}, {@uni_xlateno}]}, 0x2a, 0x356, &(0x7f0000000780)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) r5 = open(&(0x7f00000003c0)='./file0\x00', 0x48040, 0x0) readlinkat(0xffffffffffffffff, 0x0, &(0x7f0000002780)=""/4112, 0x1010) finit_module(r5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) add_key$keyring(&(0x7f0000000340), &(0x7f00000004c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r6 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file2\x00', 0x80, &(0x7f0000000000)=ANY=[], 0x7d, 0x1507, &(0x7f0000001800)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): ocess permissive=1 [ 15.692355][ T24] audit: type=1400 audit(1782157271.380:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.168' (ED25519) to the list of known hosts. [ 23.148565][ T24] audit: type=1400 audit(1782157278.890:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.151887][ T271] cgroup: Unknown subsys name 'net' [ 23.171395][ T24] audit: type=1400 audit(1782157278.890:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.198674][ T24] audit: type=1400 audit(1782157278.920:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.199081][ T271] cgroup: Unknown subsys name 'devices' [ 23.368270][ T271] cgroup: Unknown subsys name 'hugetlb' [ 23.373875][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.514242][ T24] audit: type=1400 audit(1782157279.250:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.537476][ T24] audit: type=1400 audit(1782157279.250:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.562315][ T24] audit: type=1400 audit(1782157279.250:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.580522][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.594356][ T24] audit: type=1400 audit(1782157279.330:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.619846][ T24] audit: type=1400 audit(1782157279.330:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.648865][ T24] audit: type=1400 audit(1782157279.390:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.674398][ T24] audit: type=1400 audit(1782157279.390:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.674443][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.190102][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.197288][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.204636][ T279] device bridge_slave_0 entered promiscuous mode [ 24.212833][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.219926][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.227398][ T279] device bridge_slave_1 entered promiscuous mode [ 24.252972][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.260128][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.267734][ T280] device bridge_slave_0 entered promiscuous mode [ 24.290770][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.297844][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.305156][ T280] device bridge_slave_1 entered promiscuous mode [ 24.334087][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.341425][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.348906][ T282] device bridge_slave_0 entered promiscuous mode [ 24.355851][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.362956][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.370320][ T282] device bridge_slave_1 entered promiscuous mode [ 24.470091][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.477182][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.484444][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.491495][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.505259][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.512536][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.519916][ T281] device bridge_slave_0 entered promiscuous mode [ 24.526811][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.533854][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.541586][ T281] device bridge_slave_1 entered promiscuous mode [ 24.567283][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.574328][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.581946][ T283] device bridge_slave_0 entered promiscuous mode [ 24.617254][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.624326][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.631885][ T283] device bridge_slave_1 entered promiscuous mode [ 24.650295][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.657380][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.664639][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.671701][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.706774][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.713832][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.721121][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.728166][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.752688][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.759982][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.767540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.775022][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.782314][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.789643][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.797531][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.828274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.836792][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.843815][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.851707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.860105][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.867162][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.891320][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.899303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.907483][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.915288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.932876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.940835][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.949054][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.956085][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.964048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.972345][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.979398][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.986805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.994946][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.002032][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.017998][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.025733][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.034577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.043246][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.050355][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.078169][ T282] device veth0_vlan entered promiscuous mode [ 25.085247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.093314][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.101323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.109814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.117995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.125868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.134311][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.141343][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.148812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.169729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.180761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.189171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.197603][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.205719][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.212874][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.220501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.228529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.236680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.250382][ T279] device veth0_vlan entered promiscuous mode [ 25.259165][ T282] device veth1_macvtap entered promiscuous mode [ 25.267572][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.275188][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.283920][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.292717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.300743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.308859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.317263][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.325672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.333181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.345091][ T280] device veth0_vlan entered promiscuous mode [ 25.351455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.360013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.368394][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.375602][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.383245][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.391338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.399581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.407264][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.414811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.427825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.435888][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.444026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.453257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.462077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.470801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.480874][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.489173][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.499555][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.507925][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.516048][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.523108][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.542314][ T279] device veth1_macvtap entered promiscuous mode [ 25.559498][ T282] request_module fs-gadgetfs succeeded, but still no fs? [ 25.561109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.574439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.582887][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.591087][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.599484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.607817][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.615779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.623748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.631985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.640348][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.648398][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.657577][ T280] device veth1_macvtap entered promiscuous mode [ 25.672899][ T282] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.685088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.698271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.707679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.714590][ T302] ====================================================== [ 25.714590][ T302] WARNING: the mand mount option is being deprecated and [ 25.714590][ T302] will be removed in v5.15! [ 25.714590][ T302] ====================================================== [ 25.718894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.745969][ T302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.751802][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.774711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.783163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.794680][ T281] device veth0_vlan entered promiscuous mode [ 25.804258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.812485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.833893][ T281] device veth1_macvtap entered promiscuous mode [ 25.851084][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.869744][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.877406][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.886022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.894505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.902582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.911181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.930803][ T283] device veth0_vlan entered promiscuous mode [ 25.938372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.952761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.962784][ T310] sock: sock_set_timeout: `syz.3.4' (pid 310) tries to set negative timeout [ 25.968198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.981229][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.991316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.999716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.008284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.016667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.038559][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 26.047054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.055430][ T283] device veth1_macvtap entered promiscuous mode [ 26.066302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 26.076208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.087215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.106159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.115476][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.180973][ T320] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 26.204710][ T320] jbd2_journal_init_inode: Cannot locate journal superblock [ 26.212339][ T320] EXT4-fs (loop2): Could not load journal inode [ 26.376760][ C0] ================================================================== [ 26.384908][ C0] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x6c/0xb0 [ 26.392423][ C0] Read of size 8 at addr ffff88810f54dd90 by task ksoftirqd/0/12 [ 26.400161][ C0] [ 26.402532][ C0] CPU: 0 PID: 12 Comm: ksoftirqd/0 Not tainted syzkaller #0 [ 26.409829][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 26.419907][ C0] Call Trace: [ 26.423224][ C0] __dump_stack+0x21/0x24 [ 26.427621][ C0] dump_stack_lvl+0x1a7/0x208 [ 26.432329][ C0] ? show_regs_print_info+0x18/0x18 [ 26.437549][ C0] ? thaw_kernel_threads+0x220/0x220 [ 26.442851][ C0] print_address_description+0x7f/0x2c0 [ 26.448432][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 26.453484][ C0] kasan_report+0x100/0x140 [ 26.458013][ C0] ? rcu_cblist_dequeue+0x6c/0xb0 [ 26.463070][ C0] __asan_report_load8_noabort+0x14/0x20 [ 26.468727][ C0] rcu_cblist_dequeue+0x6c/0xb0 [ 26.473609][ C0] rcu_do_batch+0x448/0xaf0 [ 26.478540][ C0] ? local_bh_enable+0x20/0x20 [ 26.483322][ C0] ? psi_group_change+0x7cb/0xe00 [ 26.488364][ C0] ? compat_start_thread+0x80/0x80 [ 26.493507][ C0] rcu_core+0x50a/0xca0 [ 26.497676][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 26.502889][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 26.508498][ C0] ? sched_clock+0x3a/0x40 [ 26.512938][ C0] ? sched_clock_cpu+0x1b/0x3d0 [ 26.517822][ C0] ? __schedule+0xc0b/0x13e0 [ 26.522435][ C0] rcu_core_si+0x9/0x10 [ 26.526607][ C0] __do_softirq+0x255/0x563 [ 26.531126][ C0] ? ksoftirqd_should_run+0x20/0x20 [ 26.536335][ C0] run_ksoftirqd+0x23/0x30 [ 26.540775][ C0] smpboot_thread_fn+0x464/0x820 [ 26.545720][ C0] kthread+0x324/0x3b0 [ 26.549789][ C0] ? cpu_report_death+0x1b0/0x1b0 [ 26.554820][ C0] ? kthread_blkcg+0xd0/0xd0 [ 26.559414][ C0] ret_from_fork+0x1f/0x30 [ 26.563836][ C0] [ 26.566171][ C0] Allocated by task 331: [ 26.570422][ C0] __kasan_kmalloc+0xd4/0x100 [ 26.575113][ C0] __kmalloc+0x19f/0x330 [ 26.579363][ C0] l2tp_session_create+0x39/0xb60 [ 26.584391][ C0] pppol2tp_connect+0xbf5/0x1640 [ 26.589338][ C0] __sys_connect+0x3ce/0x450 [ 26.593941][ C0] __x64_sys_connect+0x7a/0x90 [ 26.598707][ C0] do_syscall_64+0x31/0x40 [ 26.603130][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.609037][ C0] [ 26.611369][ C0] Freed by task 9: [ 26.615179][ C0] kasan_set_track+0x4a/0x70 [ 26.619863][ C0] kasan_set_free_info+0x23/0x40 [ 26.624801][ C0] ____kasan_slab_free+0x125/0x160 [ 26.629914][ C0] __kasan_slab_free+0x11/0x20 [ 26.634708][ C0] slab_free_freelist_hook+0xc5/0x190 [ 26.640096][ C0] kfree+0xc0/0x270 [ 26.643908][ C0] l2tp_session_put+0xb2/0x1a0 [ 26.648679][ C0] l2tp_session_delete+0x3a9/0x4a0 [ 26.653789][ C0] l2tp_tunnel_del_work+0x180/0x3d0 [ 26.658986][ C0] process_one_work+0x6fd/0xbc0 [ 26.663837][ C0] worker_thread+0xa8e/0x13c0 [ 26.668523][ C0] kthread+0x324/0x3b0 [ 26.672594][ C0] ret_from_fork+0x1f/0x30 [ 26.677005][ C0] [ 26.679335][ C0] Last potentially related work creation: [ 26.685144][ C0] kasan_save_stack+0x3a/0x60 [ 26.689827][ C0] __kasan_record_aux_stack+0xd2/0x100 [ 26.695286][ C0] kasan_record_aux_stack_noalloc+0xb/0x10 [ 26.701098][ C0] call_rcu+0x11a/0x1090 [ 26.705342][ C0] pppol2tp_release+0x1e3/0x2b0 [ 26.710194][ C0] sock_close+0xb8/0x200 [ 26.714459][ C0] __fput+0x2dc/0x730 [ 26.718452][ C0] ____fput+0x15/0x20 [ 26.722485][ C0] task_work_run+0x127/0x190 [ 26.727081][ C0] exit_to_user_mode_loop+0xcb/0xe0 [ 26.732283][ C0] exit_to_user_mode_prepare+0x76/0xa0 [ 26.737750][ C0] syscall_exit_to_user_mode+0x1d/0x40 [ 26.743205][ C0] do_syscall_64+0x3d/0x40 [ 26.747629][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.753518][ C0] [ 26.755854][ C0] The buggy address belongs to the object at ffff88810f54dc00 [ 26.755854][ C0] which belongs to the cache kmalloc-512 of size 512 [ 26.769911][ C0] The buggy address is located 400 bytes inside of [ 26.769911][ C0] 512-byte region [ffff88810f54dc00, ffff88810f54de00) [ 26.783181][ C0] The buggy address belongs to the page: [ 26.788841][ C0] page:ffffea00043d5300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f54c [ 26.799081][ C0] head:ffffea00043d5300 order:2 compound_mapcount:0 compound_pincount:0 [ 26.807413][ C0] flags: 0x4000000000010200(slab|head) [ 26.812892][ C0] raw: 4000000000010200 ffffea00043d3900 0000000600000006 ffff888100043080 [ 26.821485][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 26.830071][ C0] page dumped because: kasan: bad access detected [ 26.836492][ C0] page_owner tracks the page as allocated [ 26.842227][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 97, ts 5200326118, free_ts 0 [ 26.860193][ C0] prep_new_page+0x176/0x190 [ 26.864790][ C0] get_page_from_freelist+0x225f/0x23f0 [ 26.870337][ C0] __alloc_pages_nodemask+0x29a/0x640 [ 26.875714][ C0] new_slab+0x84/0x3f0 [ 26.879786][ C0] ___slab_alloc+0x2f8/0x4c0 [ 26.884381][ C0] __slab_alloc+0x63/0xa0 [ 26.888715][ C0] __kmalloc_track_caller+0x1e4/0x310 [ 26.894088][ C0] __alloc_skb+0xdc/0x520 [ 26.898421][ C0] alloc_skb_with_frags+0xa3/0x560 [ 26.903544][ C0] sock_alloc_send_pskb+0x87f/0x9a0 [ 26.908748][ C0] unix_dgram_sendmsg+0x6f3/0x18f0 [ 26.913863][ C0] sock_write_iter+0x2a6/0x3a0 [ 26.918636][ C0] vfs_write+0x770/0xd70 [ 26.922894][ C0] ksys_write+0x14a/0x260 [ 26.927237][ C0] __x64_sys_write+0x7b/0x90 [ 26.931827][ C0] do_syscall_64+0x31/0x40 [ 26.936242][ C0] page_owner free stack trace missing [ 26.941627][ C0] [ 26.943959][ C0] Memory state around the buggy address: [ 26.949619][ C0] ffff88810f54dc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.957681][ C0] ffff88810f54dd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.965745][ C0] >ffff88810f54dd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 26.973808][ C0] ^ [ 26.978396][ C0] ffff88810f54de00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 26.986463][ C0] ffff88810f54de80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 26.994524][ C0] ================================================================== [ 27.002586][ C0] Disabling lock debugging due to kernel taint [ 27.042476][ T337] FAT-fs (loop2): Directory bread(block 64) failed [ 27.049704][ T337] FAT-fs (loop2): Directory bread(block 65) failed [ 27.056372][ T337] FAT-fs (loop2): Directory bread(block 66) failed [ 27.062968][ T337] FAT-fs (loop2): Directory bread(block 67) failed [ 27.071892][ T337] FAT-fs (loop2): Directory bread(block 68) failed [ 27.079827][ T337] FAT-fs (loop2): Directory bread(block 69) failed [ 27.087059][ T337] FAT-fs (loop2): Directory bread(block 70) failed [ 27.093894][ T337] FAT-fs (loop2): Directory bread(block 71) failed [ 27.101323][ T337] FAT-fs (loop2): Directory bread(block 72) failed [ 27.108579][ T337] FAT-fs (loop2): Directory bread(block 73) failed [ 27.299436][ T340] EXT4-fs (loop1): Ignoring removed orlov option [ 27.486096][ T340] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue [ 27.772663][ T345] attempt to access beyond end of device [ 27.772663][ T345] loop2: rw=524288, want=1164, limit=256 [ 27.784178][ T345] attempt to access beyond end of device [ 27.784178][ T345] loop2: rw=0, want=1164, limit=256